Hello,

l want to setup the vpn site-to-site with BM 3.8 SP4 on two netware 6.5
SP4a. I used the TID 10095268 to create the configurations.
VPN View Status - Activity : the Tunnel status is loaded but the IP
Connection state is pending. Tunnel VPN seems enabled but nothing forwards.

I have an error message in the audit log: VPN ACLCheck - No Match found in
Trusted Master List.

Audit log :
12/20/2005 03:09:04 PM VPN Control Failed VPN member notifications. Will
retry in 15 minutes.
12/20/2005 03:09:02 PM VPN Control Failed configuring VPN member
LE_HAVRE_VPN. Failed establishing connection from master to member.
12/20/2005 03:08:54 PM IKE ESP SA was created successfully with 83.xxx.xx.xx
12/20/2005 03:08:54 PM IKE Received proxy Id : IPV4 SUBNET 0.0.0.0/0.0.0.0
12/20/2005 03:08:54 PM IKE Received proxy Id : IPV4 SUBNET 0.0.0.0/0.0.0.0
12/20/2005 03:08:54 PM IKE IPSEC SA NEGOTIATION - Peer lifetime is: 7200
My lifetime is: 7200
12/20/2005 03:08:54 PM IKE Sending proxy id :Type 4 0.0.0.0/0.0.0.0
12/20/2005 03:08:54 PM IKE Sending proxy id :Type 4 0.0.0.0/0.0.0.0
12/20/2005 03:07:52 PM VPN Control Send update cfg to 2 for type of mask
= 31, typeofcfg = 1
12/20/2005 03:07:52 PM VPN Control Send update cfg to 1 for type of mask
= 7, typeofcfg = 1
12/20/2005 03:07:52 PM IKE ESP SA was created successfully with
83.xxx.xx.xxx
12/20/2005 03:07:52 PM IKE Received proxy Id : IPV4 SUBNET 0.0.0.0/0.0.0.0
12/20/2005 03:07:52 PM IKE Received proxy Id : IPV4 SUBNET 0.0.0.0/0.0.0.0
12/20/2005 03:07:52 PM IKE IPSEC SA NEGOTIATION - Peer lifetime is: 1000
My lifetime is: 1000
12/20/2005 03:07:50 PM IKE Sending proxy id :Type 4 0.0.0.0/0.0.0.0
12/20/2005 03:07:50 PM IKE Sending proxy id :Type 4 0.0.0.0/0.0.0.0
12/20/2005 03:07:50 PM VPN Control VPNGetRootCert: Read trusted root
certs from TRC - LE_MEUX_BORDER2.LE_MEUX_BORDER2.LE_MEUX.CENTRE.FRA NCE
12/20/2005 03:07:50 PM VPN Control The configured server certificate is
ServerCert - LE_MEUX_BORDER2.LE_MEUX_BORDER2.LE_MEUX.CENTRE.FRA NCE
12/20/2005 03:07:50 PM VPN Control The trusted root container of this
VPN server is TRC - LE_MEUX_BORDER2.LE_MEUX_BORDER2.LE_MEUX.CENTRE.FRA NCE
12/20/2005 03:07:50 PM IKE IKE SA was created successfully with
83.xxx.xx.xxx, encr = 3DES, SA lifetime = 28800 sec
12/20/2005 03:07:50 PM IKE Final IKE SA (phase 1) lifetime is 28800 secs
12/20/2005 03:07:50 PM IKE Received MM ID type: 9 protocol : 0 portnum:
0 length 59
12/20/2005 03:07:50 PM IKE First IKE connection sending INITIAL_CONTACT
notify to 83.xxx.xx.xxx
12/20/2005 03:07:50 PM VPN Control VPN ACLCheck - No Match found in
Trusted Master List.
12/20/2005 03:07:50 PM IKE ** Nat detected
12/20/2005 03:07:50 PM IKE IKE SA NEGOTIATION - Peer lifetime is: 28800
My lifetime is: 28800
12/20/2005 03:07:50 PM VPN Control Configuring VPN member LE_HAVRE_VPN.
12/20/2005 03:07:50 PM VPN Tunnel Initiated an IP call to LE_HAVRE_VPN @
83.xxx.xx.xxx
12/20/2005 03:07:50 PM VPN Control Configured VPN member LE_MEUX_BORDER2.
12/20/2005 03:07:48 PM VPN Tunnel The VPTUNNEL has been initialized.
12/20/2005 03:07:48 PM VPN Control Configuring VPN member LE_MEUX_BORDER2.
12/20/2005 03:07:48 PM VPN Tunnel The VPTUNNEL is initializing.
12/20/2005 03:07:48 PM VPN Control Reinitialize system started to
process commands.
12/20/2005 03:07:48 PM VPN Control
Policy:Default_Traffic_Rule.VPNRules.VPNS2SLE_MEUX _BORDER2.LE_MEUX_BORDER2.LE_MEUX.CENTRE.FRANCE
has been added/modified
12/20/2005 03:07:48 PM VPN Control VPNGetRootCert: Read trusted root
certs from TRC - LE_MEUX_BORDER2.LE_MEUX_BORDER2.LE_MEUX.CENTRE.FRA NCE
12/20/2005 03:07:48 PM VPN Control S2S service trusted root container is
TRC - LE_MEUX_BORDER2.LE_MEUX_BORDER2.LE_MEUX.CENTRE.FRA NCE
12/20/2005 03:07:48 PM VPN Control Waiting for reinitialize system to start.
12/20/2005 03:07:48 PM VPN Control Policy:Auth_NDS.Authentication
Rules.Default_C2S_Service.LE_MEUX_BORDER2.LE_MEUX. CENTRE.FRANCE has been
added/modified
12/20/2005 03:07:48 PM VPN Control VPN control is reinitializing system.
12/20/2005 03:07:48 PM VPN Control Server LE_HAVRE_VPN added to IPSEC.
12/20/2005 03:07:48 PM VPN Control Server LE_MEUX_BORDER2 removed from
IPSEC.
12/20/2005 03:07:48 PM VPN Control Policy:Connexion_AS400.VPN
Rules.Default_C2S_Service.LE_MEUX_BORDER2.LE_MEUX. CENTRE.FRANCE has been
added/modified
12/20/2005 03:07:48 PM VPN Control TCP/IP is bound to the VPN tunnel.
12/20/2005 03:07:48 PM VPN Control Policy:Admin.VPN
Rules.Default_C2S_Service.LE_MEUX_BORDER2.LE_MEUX. CENTRE.FRANCE has been
added/modified
12/20/2005 03:07:48 PM VPN Control SPX/IPX is bound to the VPN tunnel.
12/20/2005 03:07:48 PM VPN Control Policy:TSWEB.VPN
Rules.Default_C2S_Service.LE_MEUX_BORDER2.LE_MEUX. CENTRE.FRANCE has been
added/modified
12/20/2005 03:07:48 PM VPN Control Enabled IP routes.
12/20/2005 03:07:48 PM VPN Control Policy:Default_Traffic_Rule.VPN
Rules.Default_C2S_Service.LE_MEUX_BORDER2.LE_MEUX. CENTRE.FRANCE has been
added/modified
12/20/2005 03:07:48 PM VPN Control VPN tunnel routed to
130.60.0.0/255.255.0.0.
12/20/2005 03:07:48 PM VPN Control Configured RIP file to indicate that
the VPN tunnel is active.
12/20/2005 03:07:48 PM VPN Control VPNGetRootCert: Read trusted root
certs from TRC - LE_MEUX_BORDER2.LE_MEUX_BORDER2.LE_MEUX.CENTRE.FRA NCE
12/20/2005 03:07:48 PM VPN Control VPN member LE_HAVRE_VPN is configured
for outbound call.
12/20/2005 03:07:46 PM VPN Control C2S service trusted root container is
TRC - LE_MEUX_BORDER2.LE_MEUX_BORDER2.LE_MEUX.CENTRE.FRA NCE
12/20/2005 03:07:46 PM VPN Control S2S Topology is 'MESH'
12/20/2005 03:07:46 PM VPN Control S2S Call Initiation Direction is
'BOTH SIDES'
12/20/2005 03:07:46 PM VPN Control Server LE_HAVRE_VPN added to IPSEC.
12/20/2005 03:07:46 PM AUTH Gateway VPN client Authentication Gateway
has been loaded.
12/20/2005 03:07:46 PM VPN Control Server LE_MEUX_BORDER2 added to IPSEC.
12/20/2005 03:07:46 PM VPN Control Server LE_MEUX_BORDER2 removed from
IPSEC.
12/20/2005 03:07:46 PM VPN Control VPNGetRootCert: Read trusted root
certs from TRC - LE_MEUX_BORDER2.LE_MEUX_BORDER2.LE_MEUX.CENTRE.FRA NCE
12/20/2005 03:07:46 PM VPN Control The configured server certificate is
ServerCert - LE_MEUX_BORDER2.LE_MEUX_BORDER2.LE_MEUX.CENTRE.FRA NCE
12/20/2005 03:07:46 PM VPN Control The trusted root container of this
VPN server is TRC - LE_MEUX_BORDER2.LE_MEUX_BORDER2.LE_MEUX.CENTRE.FRA NCE
12/20/2005 03:07:46 PM VPN Control Server is hosting Client-To-Site Service
12/20/2005 03:07:46 PM VPN Control Started VPMASTER.NLM.
12/20/2005 03:07:46 PM VPN Control Started VPNINF.NLM.
12/20/2005 03:07:46 PM VPN Control A VPN site license has been acquired.

Thanks in advance.
Eric