Mar 14 23:59:17 @bnbu-nms-server pluto[16723]: Using Linux 2.6 IPsec interface code on 2.6.17-10-generic Mar 14 23:59:17 @bnbu-nms-server pluto[16723]: Changing to directory '/etc/ipsec.d/cacerts' Mar 14 23:59:17 @bnbu-nms-server pluto[16723]: loaded CA cert file 'cacert.pem' (3117 bytes) Mar 14 23:59:17 @bnbu-nms-server pluto[16723]: Changing to directory '/etc/ipsec.d/aacerts' Mar 14 23:59:17 @bnbu-nms-server pluto[16723]: Changing to directory '/etc/ipsec.d/ocspcerts' Mar 14 23:59:17 @bnbu-nms-server pluto[16723]: Changing to directory '/etc/ipsec.d/crls' Mar 14 23:59:17 @bnbu-nms-server pluto[16723]: loaded crl file 'crl.pem' (463 bytes) Mar 14 23:59:17 @bnbu-nms-server pluto[16723]: added connection description "west-l2tp-psk" Mar 14 23:59:17 @bnbu-nms-server pluto[16723]: loaded host cert file '/etc/ipsec.d/certs/bnbu-nms-server.pem' (3159 bytes) Mar 14 23:59:17 @bnbu-nms-server pluto[16723]: added connection description "west-l2tp-x509" Mar 14 23:59:17 @bnbu-nms-server pluto[16723]: listening for IKE messages Mar 14 23:59:17 @bnbu-nms-server pluto[16723]: adding interface eth3/eth3 10.221.2.44:500 Mar 14 23:59:17 @bnbu-nms-server pluto[16723]: adding interface eth3/eth3 10.221.2.44:4500 Mar 14 23:59:17 @bnbu-nms-server pluto[16723]: adding interface lo/lo 127.0.0.1:500 Mar 14 23:59:17 @bnbu-nms-server pluto[16723]: adding interface lo/lo 127.0.0.1:4500 Mar 14 23:59:17 @bnbu-nms-server pluto[16723]: adding interface lo/lo ::1:500 Mar 14 23:59:17 @bnbu-nms-server pluto[16723]: loading secrets from "/etc/ipsec.secrets" Mar 14 23:59:17 @bnbu-nms-server pluto[16723]: loaded private key file '/etc/ipsec.d/private/bnbu-nms-server.key' (951 bytes) Mar 14 23:59:22 @bnbu-nms-server pluto[16723]: packet from 10.221.2.127:500: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000004] Mar 14 23:59:22 @bnbu-nms-server pluto[16723]: packet from 10.221.2.127:500: ignoring Vendor ID payload [FRAGMENTATION] Mar 14 23:59:22 @bnbu-nms-server pluto[16723]: packet from 10.221.2.127:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] method set to=106 Mar 14 23:59:22 @bnbu-nms-server pluto[16723]: packet from 10.221.2.127:500: ignoring Vendor ID payload [Vid-Initial-Contact] Mar 14 23:59:22 @bnbu-nms-server pluto[16723]: "west-l2tp-psk"[1] 10.221.2.127 #1: responding to Main Mode from unknown peer 10.221.2.127 Mar 14 23:59:22 @bnbu-nms-server pluto[16723]: "west-l2tp-psk"[1] 10.221.2.127 #1: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1 Mar 14 23:59:22 @bnbu-nms-server pluto[16723]: "west-l2tp-psk"[1] 10.221.2.127 #1: STATE_MAIN_R1: sent MR1, expecting MI2 Mar 14 23:59:22 @bnbu-nms-server pluto[16723]: "west-l2tp-psk"[1] 10.221.2.127 #1: NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike-02/03: no NAT detected Mar 14 23:59:22 @bnbu-nms-server pluto[16723]: "west-l2tp-psk"[1] 10.221.2.127 #1: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2 Mar 14 23:59:22 @bnbu-nms-server pluto[16723]: "west-l2tp-psk"[1] 10.221.2.127 #1: STATE_MAIN_R2: sent MR2, expecting MI3 Mar 14 23:59:22 @bnbu-nms-server pluto[16723]: "west-l2tp-psk"[1] 10.221.2.127 #1: Main mode peer ID is ID_IPV4_ADDR: '10.221.2.127' Mar 14 23:59:22 @bnbu-nms-server pluto[16723]: "west-l2tp-psk"[1] 10.221.2.127 #1: I did not send a certificate because I do not have one. Mar 14 23:59:22 @bnbu-nms-server pluto[16723]: "west-l2tp-psk"[1] 10.221.2.127 #1: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3 Mar 14 23:59:22 @bnbu-nms-server pluto[16723]: "west-l2tp-psk"[1] 10.221.2.127 #1: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp2048} Mar 14 23:59:22 @bnbu-nms-server pluto[16723]: "west-l2tp-psk"[1] 10.221.2.127 #2: responding to Quick Mode {msgid:7b18cf0c} Mar 14 23:59:22 @bnbu-nms-server pluto[16723]: "west-l2tp-psk"[1] 10.221.2.127 #2: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1 Mar 14 23:59:22 @bnbu-nms-server pluto[16723]: "west-l2tp-psk"[1] 10.221.2.127 #2: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2 Mar 14 23:59:22 @bnbu-nms-server pluto[16723]: "west-l2tp-psk"[1] 10.221.2.127 #2: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2 Mar 14 23:59:22 @bnbu-nms-server pluto[16723]: "west-l2tp-psk"[1] 10.221.2.127 #2: STATE_QUICK_R2: IPsec SA established {ESP=>0xfa11d14e <0x3c3cc415 xfrm=3DES_0-HMAC_MD5 NATD=none DPD=none} Mar 14 23:59:57 @bnbu-nms-server pluto[16723]: "west-l2tp-psk"[1] 10.221.2.127 #1: received Delete SA(0xfa11d14e) payload: deleting IPSEC State #2 Mar 14 23:59:57 @bnbu-nms-server pluto[16723]: "west-l2tp-psk"[1] 10.221.2.127 #1: received and ignored informational message Mar 14 23:59:57 @bnbu-nms-server pluto[16723]: "west-l2tp-psk"[1] 10.221.2.127 #1: received Delete SA payload: deleting ISAKMP State #1 Mar 14 23:59:57 @bnbu-nms-server pluto[16723]: "west-l2tp-psk"[1] 10.221.2.127: deleting connection "west-l2tp-psk" instance with peer 10.221.2.127 {isakmp=#0/ipsec=#0} Mar 14 23:59:57 @bnbu-nms-server pluto[16723]: packet from 10.221.2.127:500: received and ignored informational message Mar 15 00:04:39 @bnbu-nms-server pluto[16723]: shutting down Mar 15 00:04:39 @bnbu-nms-server pluto[16723]: forgetting secrets Mar 15 00:04:39 @bnbu-nms-server pluto[16723]: "west-l2tp-x509": deleting connection Mar 15 00:04:39 @bnbu-nms-server pluto[16723]: "west-l2tp-psk": deleting connection Mar 15 00:04:39 @bnbu-nms-server pluto[16723]: shutting down interface lo/lo ::1:500 Mar 15 00:04:39 @bnbu-nms-server pluto[16723]: shutting down interface lo/lo 127.0.0.1:4500 Mar 15 00:04:39 @bnbu-nms-server pluto[16723]: shutting down interface lo/lo 127.0.0.1:500 Mar 15 00:04:39 @bnbu-nms-server pluto[16723]: shutting down interface eth3/eth3 10.221.2.44:4500 Mar 15 00:04:39 @bnbu-nms-server pluto[16723]: shutting down interface eth3/eth3 10.221.2.44