<meta name="GENERATOR" content="OpenOffice.org 2.0 (Linux)"><meta name="AUTHOR" content="Jean-Michel Bonnefond"><meta name="CREATED" content="20070530;11421300"><meta name="CHANGED" content="16010101;0">
<style type="text/css">
<!--
@page { size: 21cm 29.7cm; margin: 2cm }
P { margin-bottom: 0.21cm }
-->
</style>
<p style="margin-bottom: 0cm;">Hello all,</p><p style="margin-bottom: 0cm;">We've got a little problem on 2 tunnels
this night causing them to be down for some hours unit a manual
intervention. They have been down in a strange state where an ISAKMP
SA was up but our side was expecting QI2 and received Quick_R1, with a Bad Address error message in the logs.</p><p style="margin-bottom: 0cm;">In fact, there has been a problem
(probably a network outage) at 00:30:53 as I have a lot of other
tunnels that falls down to trap state at this time, but all of them reach
to renegociate a few seconds later. However this one keep staying in
this strange state until we delete/add/up the connection some hours
later.</p><p style="margin-bottom: 0cm;">
<meta http-equiv="CONTENT-TYPE" content="text/html; charset=utf-8"><title></title><meta name="GENERATOR" content="OpenOffice.org 2.0 (Linux)"><meta name="AUTHOR" content="Jean-Michel Bonnefond"><meta name="CREATED" content="20070530;11421300">
<meta name="CHANGED" content="16010101;0">
<style type="text/css">
<!--
@page { size: 21cm 29.7cm; margin: 2cm }
P { margin-bottom: 0.21cm }
--></style>The difference between the logs for other tunnels and this one is that the ip adress of the remote gateway is specified instead of <a href="http://0.0.0.0">0.0.0.0</a> in the Bad Address error message.<br>
</p><p style="margin-bottom: 0cm;">Do you have any idea that could help me investigate further?<br></p>
<p style="margin-bottom: 0cm;">BTW, we use openswan 2.4.7 with Klips
on linux kernel 2.6.8</p>
<p style="margin-bottom: 0cm;">Thanks.<br></p><p style="margin-bottom: 0cm;"><br></p><p style="margin-bottom: 0cm;">***************************************************<br>The log of the strange tunnel :</p><p style="margin-bottom: 0cm;">
<br></p><p style="margin-bottom: 0cm;">
<meta http-equiv="CONTENT-TYPE" content="text/html; charset=utf-8"><title></title><meta name="GENERATOR" content="OpenOffice.org 2.0 (Linux)"><meta name="AUTHOR" content="Jean-Michel Bonnefond"><meta name="CREATED" content="20070530;11421300">
<meta name="CHANGED" content="16010101;0">
<style type="text/css">
<!--
@page { size: 21cm 29.7cm; margin: 2cm }
P { margin-bottom: 0.21cm }
--></style><meta http-equiv="CONTENT-TYPE" content="text/html; charset=utf-8"><title></title><meta name="GENERATOR" content="OpenOffice.org 2.0 (Linux)"><meta name="AUTHOR" content="Jean-Michel Bonnefond"><meta name="CREATED" content="20070530;11421300">
<meta name="CHANGED" content="16010101;0">
<style type="text/css">
<!--
@page { size: 21cm 29.7cm; margin: 2cm }
P { margin-bottom: 0.21cm }
-->
</style>
<p style="margin-bottom: 0cm;">May 30 00:30:43 vpn-server1
pluto[23345]: "partner1_SP_AUTH" #7928: initiating Quick
Mode PSK+ENCRYPT+COMPRESS+TUNNEL+UP to replace #7696 {using</p>
<p style="margin-bottom: 0cm;">isakmp#7674}</p>
<p style="margin-bottom: 0cm;">May 30 00:30:52 vpn-server1
pluto[23345]: "partner1_SP_AUTH" #7928: ignoring
informational payload, type IPSEC_RESPONDER_LIFETIME</p>
<p style="margin-bottom: 0cm;">May 30 00:30:52 vpn-server1
pluto[23345]: "partner1_SP_AUTH" #7928: Dead Peer Detection
(RFC 3706): enabled</p>
<p style="margin-bottom: 0cm;">May 30 00:30:53 vpn-server1
pluto[23345]: "partner1_SP_AUTH" #7928: transition from
state STATE_QUICK_I1 to state STATE_QUICK_I2</p>
<p style="margin-bottom: 0cm;">May 30 00:30:53 vpn-server1
pluto[23345]: "partner1_SP_AUTH" #7928: STATE_QUICK_I2:
sent QI2, IPsec SA established {ESP=>0x7f9cc315 <0x4e537db0 x</p>
<p style="margin-bottom: 0cm;">frm=3DES_0-HMAC_MD5 NATD=none
DPD=enabled}</p>
<p style="margin-bottom: 0cm;">May 30 00:31:01 vpn-server1
pluto[23345]: "partner1_ICMP" #7674: DPD: Info: No response
from peer - declaring peer dead</p>
<p style="margin-bottom: 0cm;">May 30 00:31:01 vpn-server1
pluto[23345]: "partner1_ICMP" #7674: DPD: Info: Putting
connection into %trap</p>
<p style="margin-bottom: 0cm;">May 30 00:31:01 vpn-server1
pluto[23345]: "partner1_SP_AUTH" #7928: deleting state
(STATE_QUICK_I2)</p>
<p style="margin-bottom: 0cm;">May 30 00:31:01 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #7855: deleting state
(STATE_QUICK_I2)</p>
<p style="margin-bottom: 0cm;">May 30 00:31:01 vpn-server1
pluto[23345]: "partner1_SP_ACCT" #7756: deleting state
(STATE_QUICK_I2)</p>
<p style="margin-bottom: 0cm;">May 30 00:31:01 vpn-server1
pluto[23345]: "partner1_NO_ACCT" #7719: deleting state
(STATE_QUICK_I2)</p>
<p style="margin-bottom: 0cm;">May 30 00:31:01 vpn-server1
pluto[23345]: "partner1_ICMP" #7717: deleting state
(STATE_QUICK_I2)</p>
<p style="margin-bottom: 0cm;">May 30 00:31:01 vpn-server1
pluto[23345]: "partner1_SP_AUTH" #7696: deleting state
(STATE_QUICK_I2)</p>
<p style="margin-bottom: 0cm;">May 30 00:31:01 vpn-server1
pluto[23345]: "partner1_ICMP" #7674: deleting state
(STATE_MAIN_I4)</p>
<p style="margin-bottom: 0cm;">May 30 00:32:05 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #7951: responding to Main
Mode</p>
<p style="margin-bottom: 0cm;">May 30 00:32:05 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #7951: transition from
state STATE_MAIN_R0 to state STATE_MAIN_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:32:05 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #7951: STATE_MAIN_R1: sent
MR1, expecting MI2</p>
<p style="margin-bottom: 0cm;">May 30 00:32:05 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #7951: received Vendor ID
payload [XAUTH]</p>
<p style="margin-bottom: 0cm;">May 30 00:32:05 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #7951: received Vendor ID
payload [Dead Peer Detection]</p>
<p style="margin-bottom: 0cm;">May 30 00:32:05 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #7951: received Vendor ID
payload [Cisco-Unity]</p>
<p style="margin-bottom: 0cm;">May 30 00:32:05 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #7951: ignoring unknown
Vendor ID payload [8e4c769809eb7a8630f0511b630c5353]</p>
<p style="margin-bottom: 0cm;">May 30 00:32:05 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #7951: transition from
state STATE_MAIN_R1 to state STATE_MAIN_R2</p>
<p style="margin-bottom: 0cm;">May 30 00:32:05 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #7951: STATE_MAIN_R2: sent
MR2, expecting MI3</p>
<p style="margin-bottom: 0cm;">May 30 00:32:05 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #7951: Main mode peer ID
is ID_IPV4_ADDR: '<a href="http://211.14.225.67">211.14.225.67</a>'</p>
<p style="margin-bottom: 0cm;">May 30 00:32:05 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #7951: I did not send a
certificate because I do not have one.</p>
<p style="margin-bottom: 0cm;">May 30 00:32:05 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #7951: transition from
state STATE_MAIN_R2 to state STATE_MAIN_R3</p>
<p style="margin-bottom: 0cm;">May 30 00:32:05 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #7951: STATE_MAIN_R3: sent
MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cip</p>
<p style="margin-bottom: 0cm;">her=oakley_3des_cbc_192 prf=oakley_sha
group=modp1024}</p>
<p style="margin-bottom: 0cm;">May 30 00:32:05 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #7951: Dead Peer Detection
(RFC 3706): enabled</p>
<p style="margin-bottom: 0cm;">May 30 00:32:05 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #7951: ignoring
informational payload, type IPSEC_INITIAL_CONTACT</p>
<p style="margin-bottom: 0cm;">May 30 00:32:05 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #7951: received and
ignored informational message</p>
<p style="margin-bottom: 0cm;">May 30 00:32:05 vpn-server1
pluto[23345]: "partner1_ICMP" #7952: responding to Quick
Mode {msgid:cfd21611}</p>
<p style="margin-bottom: 0cm;">May 30 00:32:05 vpn-server1
pluto[23345]: "partner1_ICMP" #7952: transition from state
STATE_QUICK_R0 to state STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:32:05 vpn-server1
pluto[23345]: "partner1_ICMP" #7952: STATE_QUICK_R1: sent
QR1, inbound IPsec SA installed, expecting QI2</p>
<p style="margin-bottom: 0cm;">May 30 00:32:05 vpn-server1
pluto[23345]: ERROR: "partner1_ICMP" #7952: pfkey write()
of SADB_X_ADDFLOW message 18840 for flow <a href="mailto:tun.1e78@211.14.225.67">tun.1e78@211.14.225.67</a>
failed. Errno 14: Bad address</p>
<p style="margin-bottom: 0cm;">May 30 00:32:15 vpn-server1
pluto[23345]: "partner1_ICMP" #7952: discarding duplicate
packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:32:35 vpn-server1
pluto[23345]: "partner1_ICMP" #7952: discarding duplicate
packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:33:15 vpn-server1
pluto[23345]: "partner1_ICMP" #7952: discarding duplicate
packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:33:55 vpn-server1
pluto[23345]: "partner1_ICMP" #7952: discarding duplicate
packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:34:35 vpn-server1
pluto[23345]: "partner1_ICMP" #7952: discarding duplicate
packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:35:15 vpn-server1
pluto[23345]: "partner1_ICMP" #7952: discarding duplicate
packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:35:55 vpn-server1
pluto[23345]: "partner1_ICMP" #7952: discarding duplicate
packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:36:35 vpn-server1
pluto[23345]: "partner1_ICMP" #7952: discarding duplicate
packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:37:15 vpn-server1
pluto[23345]: "partner1_ICMP" #7952: discarding duplicate
packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:37:55 vpn-server1
pluto[23345]: "partner1_ICMP" #7952: discarding duplicate
packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:38:35 vpn-server1
pluto[23345]: "partner1_ICMP" #7952: discarding duplicate
packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:39:15 vpn-server1
pluto[23345]: "partner1_ICMP" #7952: discarding duplicate
packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:39:55 vpn-server1
pluto[23345]: "partner1_ICMP" #7952: discarding duplicate
packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:40:35 vpn-server1
pluto[23345]: "partner1_ICMP" #7952: discarding duplicate
packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:41:15 vpn-server1
pluto[23345]: "partner1_ICMP" #7952: discarding duplicate
packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:41:55 vpn-server1
pluto[23345]: "partner1_ICMP" #7952: discarding duplicate
packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:42:35 vpn-server1
pluto[23345]: "partner1_ICMP" #7952: discarding duplicate
packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:43:15 vpn-server1
pluto[23345]: "partner1_ICMP" #7952: discarding duplicate
packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:43:55 vpn-server1
pluto[23345]: "partner1_ICMP" #7952: discarding duplicate
packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:43:59 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #8006: responding to Quick
Mode {msgid:bdfc5c5e}</p>
<p style="margin-bottom: 0cm;">May 30 00:43:59 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #8006: transition from
state STATE_QUICK_R0 to state STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:43:59 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #8006: STATE_QUICK_R1:
sent QR1, inbound IPsec SA installed, expecting QI2</p>
<p style="margin-bottom: 0cm;">May 30 00:43:59 vpn-server1
pluto[23345]: ERROR: "partner1_NO_AUTH" #8006: pfkey
write() of SADB_X_ADDFLOW message 18942 for flow
<a href="mailto:tun.1e8c@211.14.225.67">tun.1e8c@211.14.225.67</a> failed. Errno 14: Bad address</p>
<p style="margin-bottom: 0cm;">May 30 00:44:09 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #8006: discarding
duplicate packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:44:29 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #8006: discarding
duplicate packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:44:35 vpn-server1
pluto[23345]: "partner1_ICMP" #7952: discarding duplicate
packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:45:09 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #8006: discarding
duplicate packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:45:15 vpn-server1
pluto[23345]: "partner1_ICMP" #7952: max number of
retransmissions (20) reached STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:45:49 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #8006: discarding
duplicate packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:46:29 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #8006: discarding
duplicate packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:47:09 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #8006: discarding
duplicate packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:47:49 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #8006: discarding
duplicate packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:48:29 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #8006: discarding
duplicate packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:49:09 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #8006: discarding
duplicate packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:49:49 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #8006: discarding
duplicate packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:50:29 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #8006: discarding
duplicate packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:51:09 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #8006: discarding
duplicate packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:51:49 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #8006: discarding
duplicate packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:52:29 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #8006: discarding
duplicate packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:52:34 vpn-server1
pluto[23345]: "partner1_NO_ACCT" #8049: responding to Quick
Mode {msgid:c3393429}</p>
<p style="margin-bottom: 0cm;">May 30 00:52:34 vpn-server1
pluto[23345]: "partner1_NO_ACCT" #8049: transition from
state STATE_QUICK_R0 to state STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:52:34 vpn-server1
pluto[23345]: "partner1_NO_ACCT" #8049: STATE_QUICK_R1:
sent QR1, inbound IPsec SA installed, expecting QI2<br>May 30 00:52:34 vpn-server1
pluto[23345]: ERROR: "partner1_NO_ACCT" #8049: pfkey
write() of SADB_X_ADDFLOW message 19032 for flow
<a href="mailto:tun.1e9e@217.14.225.67">tun.1e9e@217.14.225.67</a> failed. Errno 14: Bad address<br>May 30 00:52:44 vpn-server1
pluto[23345]: "partner1_NO_ACCT" #8049: discarding
duplicate packet; already STATE_QUICK_R1<br>May 30 00:53:04 vpn-server1
pluto[23345]: "partner1_NO_ACCT" #8049: discarding
duplicate packet; already STATE_QUICK_R1<br>May 30 00:53:09 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #8006: discarding
duplicate packet; already STATE_QUICK_R1</p>
<p style="margin-bottom: 0cm;">May 30 00:53:44 vpn-server1
pluto[23345]: "partner1_NO_ACCT" #8049: discarding
duplicate packet; already STATE_QUICK_R1<br>May 30 00:54:24 vpn-server1
pluto[23345]: "partner1_NO_ACCT" #8049: discarding
duplicate packet; already STATE_QUICK_R1<br>May 30 00:55:04 vpn-server1
pluto[23345]: "partner1_NO_ACCT" #8049: discarding
duplicate packet; already STATE_QUICK_R1<br>May 30 00:55:44 vpn-server1
pluto[23345]: "partner1_NO_ACCT" #8049: discarding
duplicate packet; already STATE_QUICK_R1<br>May 30 00:56:24 vpn-server1
pluto[23345]: "partner1_NO_ACCT" #8049: discarding
duplicate packet; already STATE_QUICK_R1<br>May 30 00:57:04 vpn-server1
pluto[23345]: "partner1_NO_ACCT" #8049: discarding
duplicate packet; already STATE_QUICK_R1<br>May 30 00:57:09 vpn-server1
pluto[23345]: "partner1_NO_AUTH" #8006: max number of
retransmissions (20) reached STATE_QUICK_R1</p>
</p><p style="margin-bottom: 0cm;">[...]<br></p><p style="margin-bottom: 0cm;"><br></p><p style="margin-bottom: 0cm;">***************************************************<br>Short log for a working tunnel :</p><br>
<meta http-equiv="CONTENT-TYPE" content="text/html; charset=utf-8"><title></title><meta name="GENERATOR" content="OpenOffice.org 2.0 (Linux)"><meta name="AUTHOR" content="Jean-Michel Bonnefond"><meta name="CREATED" content="20070530;11421300">
<meta name="CHANGED" content="16010101;0">
<style type="text/css">
<!--
@page { size: 21cm 29.7cm; margin: 2cm }
P { margin-bottom: 0.21cm }
-->
</style>
<p style="margin-bottom: 0cm;">May 30 00:31:00 vpn-server1
pluto[23345]: "partner2" #6807: DPD: Info: No response from
peer - declaring peer dead<br>May 30 00:31:00 vpn-server1
pluto[23345]: "partner2" #6807: DPD: Info: Putting
connection into %trap<br>May 30 00:31:00 vpn-server1
pluto[23345]: "partner2" #6808: deleting state
(STATE_QUICK_I2)<br>May 30 00:31:01 vpn-server1
pluto[23345]: "partner2" #6807: deleting state
(STATE_MAIN_I4)<br>May 30 00:31:02 vpn-server1
pluto[23345]: "partner2": deleting connection</p><p style="margin-bottom: 0cm;">May 30 00:31:04 vpn-server1 pluto[23345]: ERROR: "partner2":
pfkey write() of SADB_X_DELFLOW message 18745 for flow <a href="mailto:int.0@0.0.0.0">int.0@0.0.0.0</a>
failed. Errno 14: Bad address<br>
May 30 00:31:04 vpn-server1 pluto[23345]: | 02 0f 00 0b 0e 00 00 00 39 49 00 00 31 5b 00 00<br>
May 30 00:31:04 vpn-server1 pluto[23345]: | 03 00 15 00 00 00 00 00 02 00 00 00 59 ea 21 76<br>
May 30 00:31:04 vpn-server1 pluto[23345]: | 40 ff 14 40 31 00 00 00 03 00 16 00 00 00 00 00<br>
May 30 00:31:04 vpn-server1 pluto[23345]: | 02 00 00 00 83 a6 51 12 40 ff 14 40 31 00 00 00<br>
May 30 00:31:04 vpn-server1 pluto[23345]: | 03 00 17 00 00 00 00 00 02 00 00 00 00 ff ff ff<br>
May 30 00:31:04 vpn-server1 pluto[23345]: | 01 00 00 00 10 00 00 00 03 00 18 00 00 00 00 00<br>
May 30 00:31:04 vpn-server1 pluto[23345]: | 02 00 00 00 ff ff ff ff 08 e6 ff bf 7e 66 0b 08</p>May 30 00:31:06 vpn-server1
pluto[23345]: added connection description "partner2"<br>May 30 00:31:10 vpn-server1
pluto[23345]: "partner2" #7939: initiating Main Mode<br><p style="margin-bottom: 0cm;">May 30 00:31:10 vpn-server1
pluto[23345]: "partner2" #7939: transition from state
STATE_MAIN_I1 to state STATE_MAIN_I2<br>May 30 00:31:10 vpn-server1
pluto[23345]: "partner2" #7939: STATE_MAIN_I2: sent MI2,
expecting MR2<br>May 30 00:31:11 vpn-server1
pluto[23345]: "partner2" #7939: received Vendor ID payload
[Cisco-Unity]<br>May 30 00:31:11 vpn-server1
pluto[23345]: "partner2" #7939: received Vendor ID payload
[Dead Peer Detection]<br>May 30 00:31:11 vpn-server1
pluto[23345]: "partner2" #7939: ignoring unknown Vendor ID
payload [5a77c384634c9b025b2154312a771c0d]<br>May 30 00:31:11 vpn-server1
pluto[23345]: "partner2" #7939: received Vendor ID payload
[XAUTH]<br>May 30 00:31:11 vpn-server1
pluto[23345]: "partner2" #7939: I did not send a
certificate because I do not have one.<br>May 30 00:31:11 vpn-server1
pluto[23345]: "partner2" #7939: transition from state
STATE_MAIN_I2 to state STATE_MAIN_I3<br>May 30 00:31:11 vpn-server1
pluto[23345]: "partner2" #7939: STATE_MAIN_I3: sent MI3,
expecting MR3<br>May 30 00:31:11 vpn-server1
pluto[23345]: "partner2" #7939: Main mode peer ID is
ID_IPV4_ADDR: '<a href="http://131.166.52.20">131.166.52.20</a>'<br>May 30 00:31:11 vpn-server1
pluto[23345]: "partner2" #7939: transition from state
STATE_MAIN_I3 to state STATE_MAIN_I4<br>May 30 00:31:11 vpn-server1
pluto[23345]: "partner2" #7939: STATE_MAIN_I4: ISAKMP SA
established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha
group=modp1024}<br>May 30 00:31:11 vpn-server1
pluto[23345]: "partner2" #7939: Dead Peer Detection (RFC
3706): enabled<br>May 30 00:31:11 vpn-server1
pluto[23345]: "partner2" #7940: initiating Quick Mode
PSK+ENCRYPT+COMPRESS+TUNNEL+PFS+UP {using isakmp#7939}<br>May 30 00:31:11 vpn-server1
pluto[23345]: "partner2" #7940: ignoring informational
payload, type IPSEC_RESPONDER_LIFETIME<br>May 30 00:31:11 vpn-server1
pluto[23345]: "partner2" #7940: Dead Peer Detection (RFC
3706): enabled<br>May 30 00:31:11 vpn-server1
pluto[23345]: "partner2" #7940: transition from state
STATE_QUICK_I1 to state STATE_QUICK_I2<br>May 30 00:31:11 vpn-server1
pluto[23345]: "partner2" #7940: STATE_QUICK_I2: sent QI2,
IPsec SA established {ESP=>0x937a7eb1 <0x4e537db6 xfrm=3DES_0-HMAC_SHA1 NATD=none
DPD=enabled}</p>
<br><p style="margin-bottom: 0cm;"><p style="margin-bottom: 0cm;"><br><br></p>
</p>