What does this error message mean?

Question

Level 1

27 points

What does this error message mean?

July 15 09:08:13 server racoon135: 135 ERROR: failed select (Invalid argument)

This error message fills the console screen at a rate of one per second.

I am attempting to connect a VPN client to my network and looking for some reason for why it is failing. I believe my server and the client in question are correctly setup.

Mac Pro, MacBook Pro, Mac Mini Server, iPhone 3GS, Mac OS X (10.6.4)

Posted on Jul 15, 2010 10:02 AM

Reply

Answer 1

Camelot

Level 9

54,339 points

Jul 15, 2010 2:04 PM in response to sysx

Racoon is the VPN system on your server, so it makes sense that it is what's having an issue when you're trying to connect the VPN.

However, there really isn't enough data to explain what's wrong or, more importantly, what you need to change. Are there no other logs that shed any more light on the matter?

Reply

Answer 2

sysx Author

Level 1

27 points

Jul 16, 2010 6:45 AM in response to Camelot

I retried the VPN connection this morning - it failed and I got the following as both a system and a console message.

Server Admin [43442] -[VPNProtocolSettings pppAuthMethod]: Missing ppp Auth Protocol

No other messages seem to be associated with the VPN connection. If I should be looking for something specific or somewhere specific, please let me know. I am very new in this area.

Thanks for the help.

Reply

Answer 3

sysx Author

Level 1

27 points

Jul 17, 2010 9:02 AM in response to sysx

I just researched this issue further.

After what looks like a valid handshake sequence of IKE Packet Main-Mode messages,
message 2 responding to message 1, and message 4 responding to message 3;
there is an error condition that does not get cleared.

IKE Packet: Received Failed (Responder, Main-Mode Message 5)
IKE Packet: Transmit Success (Phase 1 Retransmit)

I suspect a setup issue with the client, but I think I validated all my MacOS client settings.

Reply

Answer 4

sysx Author

Level 1

27 points

Jul 19, 2010 12:41 PM in response to sysx

I finally made it work. Two issues seemed to be the most important.

Selecting a range of DHCP addresses outside current DHCP LAN addresses and Kerberos authentication.

I selected a range of IP address in VPN server config to x.x.x.128 to x.x.x.255.

I only set up L2TP and used MS-Chap for authentication.

I worked thought the problem using the server console messages along side the client messages to change VPN Server Configuration items.

At least it is working in-house for the last 45 minutes, I am off to Starbucks.

Reply