OPNsense Forum

Archive => 22.1 Legacy Series => Topic started by: mliebherr on March 17, 2022, 01:57:03 PM

Title: ipsec INVALID_MAJOR_VERSION
Post by: mliebherr on March 17, 2022, 01:57:03 PM
Hello,

since about yesterday i get those errors in my logs:


charon 53061 - [meta sequenceId="4143"] 03[NET] received unsupported IKE version 11.9 from 212.185.79.66, sending INVALID_MAJOR_VERSION
charon 53061 - [meta sequenceId="4148"] 03[NET] received unsupported IKE version 3.5 from 212.185.79.66, sending INVALID_MAJOR_VERSION
charon 53061 - [meta sequenceId="4152"] 03[NET] received unsupported IKE version 0.13 from 212.185.79.66, sending INVALID_MAJOR_VERSION


And the traffic of the tunnel seems to stop.

Any idea how i can fix that? The Remote Side has a Sophos UTM and claims not to have/see any errors.

My Last Update was done more that one day ago ( i guess last week).

Any hints on this?

I also wonder why i get two subnet tunnels here. One Installed, and one rekeying:

(https://i.ibb.co/kxzdKq2/ipsec.png)

Cheers,
Mario