<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Hi all, <br>
<br>
I have a new situation now and I will document this for the next reader
coming up with same problem.<br>
<br>
I deleted the line (which I don´t know how it came into router config)
I mentioned in the last mail with:<br>
<font color="#3333ff"><small>no crypto isakmp key # address
192.199.19.91<br>
</small></font><br>
Problem changed but we are not through this now. So I search for the
reason this fails on my new tries.<br>
<br>
So the connection has passed Pahse 1 and stucks in Phase 2 now. Here
are the logs:<br>
<br>
Regards Markus<br>
<br>
-------- /var/log/messages --------------------<br>
<small>.Dec 12 11:16:50.400 MEZ: ISAKMP (0:0): received packet from
192.199.19.91 dport 500 sport 500 Global (N) NEW SA<br>
.Dec 12 11:16:50.400 MEZ: ISAKMP: Created a peer struct for
192.199.19.91, peer port 500<br>
.Dec 12 11:16:50.400 MEZ: ISAKMP: New peer created peer = 0x82C2FD84
peer_handle = 0x80000115<br>
.Dec 12 11:16:50.400 MEZ: ISAKMP: Locking peer struct 0x82C2FD84,
refcount 1 for crypto_isakmp_process_block<br>
.Dec 12 11:16:50.400 MEZ: ISAKMP: local port 500, remote port 500<br>
.Dec 12 11:16:50.404 MEZ: insert sa successfully sa = 8420638C<br>
.Dec 12 11:16:50.404 MEZ: ISAKMP:(0):Input = IKE_MESG_FROM_PEER,
IKE_MM_EXCH<br>
.Dec 12 11:16:50.404 MEZ: ISAKMP:(0):Old State = IKE_READY New State =
IKE_R_MM1<br>
<br>
.Dec 12 11:16:50.404 MEZ: ISAKMP:(0): processing SA payload. message ID
= 0<br>
.Dec 12 11:16:50.404 MEZ: ISAKMP:(0): processing vendor id payload<br>
.Dec 12 11:16:50.404 MEZ: ISAKMP:(0): vendor ID seems Unity/DPD but
major 0 mismatch<br>
.Dec 12 11:16:50.404 MEZ: ISAKMP:(0): processing vendor id payload<br>
.Dec 12 11:16:50.404 MEZ: ISAKMP:(0): vendor ID is DPD<br>
.Dec 12 11:16:50.404 MEZ: ISAKMP:(0): processing vendor id payload<br>
.Dec 12 11:16:50.404 MEZ: ISAKMP:(0): vendor ID seems Unity/DPD but
major 69 mismatch<br>
.Dec 12 11:16:50.404 MEZ: ISAKMP:(0): processing vendor id payload<br>
.Dec 12 11:16:50.404 MEZ: ISAKMP:(0): vendor ID seems Unity/DPD but
major 157 mismatch<br>
.Dec 12 11:16:50.404 MEZ: ISAKMP:(0): vendor ID is NAT-T v3<br>
.Dec 12 11:16:50.404 MEZ: ISAKMP:(0): processing vendor id payload<br>
.Dec 12 11:16:50.404 MEZ: ISAKMP:(0): vendor ID seems Unity/DPD but
major 123 mismatch<br>
.Dec 12 11:16:50.408 MEZ: ISAKMP:(0): vendor ID is NAT-T v2<br>
.Dec 12 11:16:50.408 MEZ: ISAKMP:(0): processing vendor id payload<br>
.Dec 12 11:16:50.408 MEZ: ISAKMP:(0): vendor ID seems Unity/DPD but
major 164 mismatch<br>
.Dec 12 11:16:50.408 MEZ: ISAKMP:(0):found peer pre-shared key matching
192.199.19.91<br>
.Dec 12 11:16:50.408 MEZ: ISAKMP:(0): local preshared key found<br>
.Dec 12 11:16:50.408 MEZ: ISAKMP : Scanning profiles for xauth ...<br>
.Dec 12 11:16:50.408 MEZ: ISAKMP:(0):Checking ISAKMP transform 0
against priority 1 policy<br>
.Dec 12 11:16:50.408 MEZ: ISAKMP: life type in seconds<br>
.Dec 12 11:16:50.408 MEZ: ISAKMP: life duration (basic) of 3600<br>
.Dec 12 11:16:50.408 MEZ: ISAKMP: encryption 3DES-CBC<br>
.Dec 12 11:16:50.408 MEZ: ISAKMP: hash SHA<br>
.Dec 12 11:16:50.408 MEZ: ISAKMP: auth pre-share<br>
.Dec 12 11:16:50.408 MEZ: ISAKMP: default group 2<br>
.Dec 12 11:16:50.408 MEZ: ISAKMP:(0):atts are acceptable. Next payload
is 0<br>
.Dec 12 11:16:50.408 MEZ: ISAKMP:(0): processing vendor id payload<br>
.Dec 12 11:16:50.408 MEZ: ISAKMP:(0): vendor ID seems Unity/DPD but
major 0 mismatch<br>
.Dec 12 11:16:50.408 MEZ: ISAKMP:(0): processing vendor id payload<br>
.Dec 12 11:16:50.408 MEZ: ISAKMP:(0): vendor ID is DPD<br>
.Dec 12 11:16:50.408 MEZ: ISAKMP:(0): processing vendor id payload<br>
.Dec 12 11:16:50.408 MEZ: ISAKMP:(0): vendor ID seems Unity/DPD but
major 69 mismatch<br>
.Dec 12 11:16:50.412 MEZ: ISAKMP:(0): processing vendor id payload<br>
.Dec 12 11:16:50.412 MEZ: ISAKMP:(0): vendor ID seems Unity/DPD but
major 157 mismatch<br>
.Dec 12 11:16:50.412 MEZ: ISAKMP:(0): vendor ID is NAT-T v3<br>
.Dec 12 11:16:50.412 MEZ: ISAKMP:(0): processing vendor id payload<br>
.Dec 12 11:16:50.412 MEZ: ISAKMP:(0): vendor ID seems Unity/DPD but
major 123 mismatch<br>
.Dec 12 11:16:50.412 MEZ: ISAKMP:(0): vendor ID is NAT-T v2<br>
.Dec 12 11:16:50.412 MEZ: ISAKMP:(0): processing vendor id payload<br>
.Dec 12 11:16:50.412 MEZ: ISAKMP:(0): vendor ID seems Unity/DPD but
major 164 mismatch<br>
.Dec 12 11:16:50.412 MEZ: ISAKMP:(0):Input = IKE_MESG_INTERNAL,
IKE_PROCESS_MAIN_MODE<br>
.Dec 12 11:16:50.412 MEZ: ISAKMP:(0):Old State = IKE_R_MM1 New State =
IKE_R_MM1<br>
<br>
.Dec 12 11:16:50.412 MEZ: ISAKMP:(0): constructed NAT-T vendor-03 ID<br>
.Dec 12 11:16:50.412 MEZ: ISAKMP:(0): sending packet to 192.199.19.91
my_port 500 peer_port 500 (R) MM_SA_SETUP<br>
.Dec 12 11:16:50.416 MEZ: ISAKMP:(0):Input = IKE_MESG_INTERNAL,
IKE_PROCESS_COMPLETE<br>
.Dec 12 11:16:50.416 MEZ: ISAKMP:(0):Old State = IKE_R_MM1 New State =
IKE_R_MM2<br>
<br>
.Dec 12 11:16:50.560 MEZ: ISAKMP (0:0): received packet from
192.199.19.91 dport 500 sport 500 Global (R) MM_SA_SETUP<br>
.Dec 12 11:16:50.560 MEZ: ISAKMP:(0):Input = IKE_MESG_FROM_PEER,
IKE_MM_EXCH<br>
.Dec 12 11:16:50.560 MEZ: ISAKMP:(0):Old State = IKE_R_MM2 New State =
IKE_R_MM3<br>
<br>
.Dec 12 11:16:50.564 MEZ: ISAKMP:(0): processing KE payload. message ID
= 0<br>
.Dec 12 11:16:50.568 MEZ: ISAKMP:(0): processing NONCE payload. message
ID = 0<br>
.Dec 12 11:16:50.568 MEZ: ISAKMP:(0):found peer pre-shared key matching
192.199.19.91<br>
.Dec 12 11:16:50.572 MEZ: ISAKMP:received payload type 20<br>
.Dec 12 11:16:50.572 MEZ: ISAKMP:received payload type 20<br>
.Dec 12 11:16:50.572 MEZ: ISAKMP:(2108):Input = IKE_MESG_INTERNAL,
IKE_PROCESS_MAIN_MODE<br>
.Dec 12 11:16:50.572 MEZ: ISAKMP:(2108):Old State = IKE_R_MM3 New
State = IKE_R_MM3<br>
<br>
.Dec 12 11:16:50.572 MEZ: ISAKMP:(2108): sending packet to
192.199.19.91 my_port 500 peer_port 500 (R) MM_KEY_EXCH<br>
.Dec 12 11:16:50.572 MEZ: ISAKMP:(2108):Input = IKE_MESG_INTERNAL,
IKE_PROCESS_COMPLETE<br>
.Dec 12 11:16:50.572 MEZ: ISAKMP:(2108):Old State = IKE_R_MM3 New
State = IKE_R_MM4<br>
<br>
.Dec 12 11:16:50.712 MEZ: ISAKMP (0:2108): received packet from
192.199.19.91 dport 500 sport 500 Global (R) MM_KEY_EXCH<br>
.Dec 12 11:16:50.712 MEZ: ISAKMP:(2108):Input = IKE_MESG_FROM_PEER,
IKE_MM_EXCH<br>
.Dec 12 11:16:50.712 MEZ: ISAKMP:(2108):Old State = IKE_R_MM4 New
State = IKE_R_MM5<br>
<br>
.Dec 12 11:16:50.712 MEZ: ISAKMP:(2108): processing ID payload. message
ID = 0<br>
.Dec 12 11:16:50.712 MEZ: ISAKMP (0:2108): ID payload<br>
next-payload : 8<br>
type : 1<br>
address : 192.199.19.91<br>
protocol : 0<br>
port : 0<br>
length : 12<br>
.Dec 12 11:16:50.712 MEZ: ISAKMP:(0):: peer matches *none* of the
profiles<br>
.Dec 12 11:16:50.712 MEZ: ISAKMP:(2108): processing HASH payload.
message ID = 0<br>
.Dec 12 11:16:50.716 MEZ: ISAKMP:(2108):SA authentication status:<br>
authenticated<br>
.Dec 12 11:16:50.716 MEZ: ISAKMP:(2108):SA has been authenticated with
192.199.19.91<br>
.Dec 12 11:16:50.716 MEZ: ISAKMP: Trying to insert a peer
223.31.46.223/192.199.19.91/500/, and inserted successfully 82C2FD84.<br>
.Dec 12 11:16:50.716 MEZ: ISAKMP:(2108):IKE_DPD is enabled,
initializing timers<br>
.Dec 12 11:16:50.716 MEZ: ISAKMP:(2108):Input = IKE_MESG_INTERNAL,
IKE_PROCESS_MAIN_MODE<br>
.Dec 12 11:16:50.716 MEZ: ISAKMP:(2108):Old State = IKE_R_MM5 New
State = IKE_R_MM5<br>
--------------------------------------------------<br>
s15318887:~ # ipsec auto --verbose --up L2TPPSKCLIENT &<br>
[1] 18727<br>
s15318887:~ # 002 "L2TPPSKCLIENT" #1: initiating Main Mode<br>
104 "L2TPPSKCLIENT" #1: STATE_MAIN_I1: initiate<br>
003 "L2TPPSKCLIENT" #1: received Vendor ID payload
[draft-ietf-ipsec-nat-t-ike-03] method set to=108<br>
002 "L2TPPSKCLIENT" #1: enabling possible NAT-traversal with method
draft-ietf-ipsec-nat-t-ike-05<br>
002 "L2TPPSKCLIENT" #1: transition from state STATE_MAIN_I1 to state
STATE_MAIN_I2<br>
106 "L2TPPSKCLIENT" #1: STATE_MAIN_I2: sent MI2, expecting MR2<br>
003 "L2TPPSKCLIENT" #1: received Vendor ID payload [Cisco-Unity]<br>
003 "L2TPPSKCLIENT" #1: received Vendor ID payload [Dead Peer Detection]<br>
003 "L2TPPSKCLIENT" #1: ignoring unknown Vendor ID payload
[4d20822dd69aa37a378d51757973dfcf]<br>
003 "L2TPPSKCLIENT" #1: received Vendor ID payload [XAUTH]<br>
003 "L2TPPSKCLIENT" #1: NAT-Traversal: Result using
draft-ietf-ipsec-nat-t-ike-02/03: no NAT detected<br>
002 "L2TPPSKCLIENT" #1: transition from state STATE_MAIN_I2 to state
STATE_MAIN_I3<br>
108 "L2TPPSKCLIENT" #1: STATE_MAIN_I3: sent MI3, expecting MR3<br>
002 "L2TPPSKCLIENT" #1: Main mode peer ID is ID_IPV4_ADDR:
'223.31.46.223'<br>
002 "L2TPPSKCLIENT" #1: transition from state STATE_MAIN_I3 to state
STATE_MAIN_I4<br>
004 "L2TPPSKCLIENT" #1: STATE_MAIN_I4: ISAKMP SA established
{auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha
group=modp1024}<br>
002 "L2TPPSKCLIENT" #1: Dead Peer Detection (RFC 3706): enabled<br>
002 "L2TPPSKCLIENT" #2: initiating Quick Mode
PSK+ENCRYPT+PFS+UP+IKEv2ALLOW {using isakmp#1 msgid:6ecaa780
proposal=3DES(3)_192-SHA1(2)_160 pfsgroup=OAKLEY_GROUP_MODP1024}<br>
117 "L2TPPSKCLIENT" #2: STATE_QUICK_I1: initiate<br>
010 "L2TPPSKCLIENT" #2: STATE_QUICK_I1: retransmission; will wait 20s
for response<br>
---------------------------------------------------------------<br>
<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | length: 24<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | removing 4 bytes of padding<br>
Dec 12 11:16:50 s15318887 pluto[18630]: "L2TPPSKCLIENT" #1: Main mode
peer ID is ID_IPV4_ADDR: '223.31.46.223'<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | complete state transition
with STF_OK<br>
Dec 12 11:16:50 s15318887 pluto[18630]: "L2TPPSKCLIENT" #1: transition
from state STATE_MAIN_I3 to state STATE_MAIN_I4<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | inserting event
EVENT_SA_REPLACE, timeout in 2808 seconds for #1<br>
Dec 12 11:16:50 s15318887 pluto[18630]: "L2TPPSKCLIENT" #1:
STATE_MAIN_I4: ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY
cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp1024}<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | ICOOKIE: b9 85 10 7b 62 d2
5a ac<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | RCOOKIE: b8 e7 25 30 d6 9b
a3 7a<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | state hash entry 23<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | v1 peer and cookies match on
#1, provided msgid 00000000 vs 00000000<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | v1 state object #1 found, in
STATE_MAIN_I4<br>
Dec 12 11:16:50 s15318887 pluto[18630]: "L2TPPSKCLIENT" #1: Dead Peer
Detection (RFC 3706): enabled<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | state: 1 requesting event
none to be deleted by
/root/resources/openswan-2.6.19/programs/pluto/dpd.c:160<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | inserting event EVENT_DPD,
timeout in 30 seconds for #1<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | modecfg pull: noquirk
policy:push not-client<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | phase 1 is done, looking for
phase 2 to unpend<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | unqueuing pending Quick Mode
with 223.31.46.223 "L2TPPSKCLIENT" import:admin initiate<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | duplicating state object #1<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | creating state object #2 at
0x722a20<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | processing connection
L2TPPSKCLIENT<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | ICOOKIE: b9 85 10 7b 62 d2
5a ac<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | RCOOKIE: b8 e7 25 30 d6 9b
a3 7a<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | state hash entry 23<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | inserting state object #2 on
chain 23<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | inserting event
EVENT_SO_DISCARD, timeout in 0 seconds for #2<br>
Dec 12 11:16:50 s15318887 pluto[18630]: |
kernel_alg_esp_auth_keylen(auth=2, sadb_aalg=3): a_keylen=20<br>
Dec 12 11:16:50 s15318887 pluto[18630]: "L2TPPSKCLIENT" #2: initiating
Quick Mode PSK+ENCRYPT+PFS+UP+IKEv2ALLOW {using isakmp#1 msgid:6ecaa780
proposal=3DES(3)_192-SHA1(2)_160 pfsgroup=OAKLEY_GROUP_MODP1024}<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | 0: w->pcw_dead: 0
w->pcw_work: 0 cnt: 1<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | asking helper 0 to do
build_kenonce op on seq: 3 (len=2752, pcw_work=1)<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | crypto helper write of
request: cnt=2752<wlen=2752.<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | <big><b>inserting event
EVENT_CRYPTO_FAILED, timeout in 300 seconds for #2</b></big><br>
Dec 12 11:16:50 s15318887 pluto[18630]: | * processed 0 messages from
cryptographic helpers<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | next event
EVENT_NAT_T_KEEPALIVE in 20 seconds<br>
Dec 12 11:16:50 s15318887 pluto[18638]: ! helper 0 read 2744+4/2752
bytesfd: 8<br>
Dec 12 11:16:50 s15318887 pluto[18638]: ! helper 0 doing build_kenonce
op id: 3<br>
Dec 12 11:16:50 s15318887 pluto[18630]: |<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | helper 0 has finished work
(cnt now 1)<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | helper 0 replies to id: q#3<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | processing connection
L2TPPSKCLIENT<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | kernel_alg_db_new() will
return p_new->protoid=3, p_new->trans_cnt=1<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | kernel_alg_db_new()
trans[0]: transid=3, attr_cnt=1, attrs[0].type=5, attrs[0].val=2<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | returning new proposal from
esp_info<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | sending 284 bytes for
quick_outI1 through eth0:500 to 223.31.46.223:500 (using #2)<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | inserting event
EVENT_RETRANSMIT, timeout in 10 seconds for #2<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | * processed 1 messages from
cryptographic helpers<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | next event EVENT_RETRANSMIT
in 10 seconds for #2<br>
Dec 12 11:16:50 s15318887 pluto[18630]: |<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | *received 124 bytes from
223.31.46.223:500 on eth0 (port=500)<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | **parse ISAKMP Message:<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | initiator cookie:<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | b9 85 10 7b 62 d2 5a ac<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | responder cookie:<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | b8 e7 25 30 d6 9b a3 7a<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | next payload type:
ISAKMP_NEXT_HASH<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | ISAKMP version: ISAKMP
Version 1.0 (rfc2407)<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | exchange type:
ISAKMP_XCHG_INFO<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | flags:
ISAKMP_FLAG_ENCRYPTION<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | message ID: 1e 80 3c 72<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | length: 124<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | processing version=1.0
packet with exchange type=ISAKMP_XCHG_INFO (5)<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | ICOOKIE: b9 85 10 7b 62 d2
5a ac<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | RCOOKIE: b8 e7 25 30 d6 9b
a3 7a<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | state hash entry 23<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | peer and cookies match on #2,
provided msgid 00000000 vs 80a7ca6e/00000000<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | peer and cookies match on #1,
provided msgid 00000000 vs 00000000/00000000<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | p15 state object #1 found, in
STATE_MAIN_I4<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | processing connection
L2TPPSKCLIENT<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | got payload
0x100(ISAKMP_NEXT_HASH) needed: 0x100 opt: 0x0<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | ***parse ISAKMP Hash Payload:<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | next payload type:
ISAKMP_NEXT_N<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | length: 24<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | got payload
0x800(ISAKMP_NEXT_N) needed: 0x0 opt: 0x0<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | ***parse ISAKMP Notification
Payload:<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | next payload type:
ISAKMP_NEXT_NONE<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | length: 68<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | DOI: ISAKMP_DOI_IPSEC<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | protocol ID: 3<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | SPI size: 4<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | Notify Message Type:
NO_PROPOSAL_CHOSEN<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | removing 4 bytes of padding<br>
Dec 12 11:16:50 s15318887 pluto[18630]: "L2TPPSKCLIENT" #1: ignoring
informational payload, type NO_PROPOSAL_CHOSEN msgid=00000000<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | info: 6c ef 38 8d 0a 00 00
34 00 00 00 01 00 00 00 01<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | info: 81 85 9a f8 83 97 ef
78 81 84 c7 3c 00 00 00 20<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | info: 00 00 00 00 83 97 ef
a0 84 1f 3b a8 83 97 ef 98<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | info: 81 84 c8 9c 01 00 00
18<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | processing informational
NO_PROPOSAL_CHOSEN (14)<br>
Dec 12 11:16:50 s15318887 pluto[18630]: "L2TPPSKCLIENT" #1: received
and ignored informational message<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | complete state transition
with STF_IGNORE<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | * processed 0 messages from
cryptographic helpers<br>
Dec 12 11:16:50 s15318887 pluto[18630]: | next event EVENT_RETRANSMIT
in 10 seconds for #2<br>
Dec 12 11:17:00 s15318887 pluto[18630]: |<br>
Dec 12 11:17:00 s15318887 pluto[18630]: | *time to handle event<br>
Dec 12 11:17:00 s15318887 pluto[18630]: | handling event
EVENT_RETRANSMIT<br>
Dec 12 11:17:00 s15318887 pluto[18630]: | event after this is
EVENT_NAT_T_KEEPALIVE in 10 seconds<br>
Dec 12 11:17:00 s15318887 pluto[18630]: | processing connection
L2TPPSKCLIENT<br>
Dec 12 11:17:00 s15318887 pluto[18630]: | handling event
EVENT_RETRANSMIT for <invalid> "L2TPPSKCLIENT" #2<br>
Dec 12 11:17:00 s15318887 pluto[18630]: | sending 284 bytes for
EVENT_RETRANSMIT through eth0:500 to 223.31.46.223:500 (using #2)<br>
Dec 12 11:17:00 s15318887 pluto[18630]: | inserting event
EVENT_RETRANSMIT, timeout in 20 seconds for #2<br>
Dec 12 11:17:00 s15318887 pluto[18630]: | next event
EVENT_NAT_T_KEEPALIVE in 10 seconds<br>
Dec 12 11:17:01 s15318887 /usr/sbin/cron[18737]: (root) CMD
(/usr/local/psa/admin/sbin/backupmng >/dev/null 2>&1)<br>
Dec 12 11:17:10 s15318887 pluto[18630]: |<br>
Dec 12 11:17:10 s15318887 pluto[18630]: | *time to handle event<br>
Dec 12 11:17:10 s15318887 pluto[18630]: | handling event
EVENT_NAT_T_KEEPALIVE<br>
Dec 12 11:17:10 s15318887 pluto[18630]: | event after this is
EVENT_RETRANSMIT in 10 seconds<br>
Dec 12 11:17:10 s15318887 pluto[18630]: | processing connection
L2TPPSKCLIENT<br>
Dec 12 11:17:10 s15318887 pluto[18630]: | processing connection
L2TPPSKCLIENT<br>
Dec 12 11:17:10 s15318887 pluto[18630]: | next event EVENT_RETRANSMIT
in 10 seconds for #2<br>
Dec 12 11:17:20 s15318887 pluto[18630]: |<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | *received kernel message<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | * processed 0 messages from
cryptographic helpers<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | next event EVENT_RETRANSMIT
in 0 seconds for #2<br>
Dec 12 11:17:20 s15318887 pluto[18630]: |<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | *time to handle event<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | handling event
EVENT_RETRANSMIT<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | event after this is EVENT_DPD
in 0 seconds<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | processing connection
L2TPPSKCLIENT<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | handling event
EVENT_RETRANSMIT for <invalid> "L2TPPSKCLIENT" #2<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | sending 284 bytes for
EVENT_RETRANSMIT through eth0:500 to 223.31.46.223:500 (using #2)<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | inserting event
EVENT_RETRANSMIT, timeout in 40 seconds for #2<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | next event EVENT_DPD in 0
seconds for #1<br>
Dec 12 11:17:20 s15318887 pluto[18630]: |<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | *time to handle event<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | handling event EVENT_DPD<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | event after this is
EVENT_RETRANSMIT in 40 seconds<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | processing connection
L2TPPSKCLIENT<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | state: 1 requesting event
none to be deleted by
/root/resources/openswan-2.6.19/programs/pluto/dpd.c:193<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | inserting event
EVENT_DPD_TIMEOUT, timeout in 120 seconds for #1<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | sending 84 bytes for ISAKMP
notify through eth0:500 to 223.31.46.223:500 (using #1)<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | next event EVENT_RETRANSMIT
in 40 seconds for #2<br>
Dec 12 11:17:20 s15318887 pluto[18630]: |<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | *received 92 bytes from
223.31.46.223:500 on eth0 (port=500)<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | **parse ISAKMP Message:<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | initiator cookie:<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | b9 85 10 7b 62 d2 5a ac<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | responder cookie:<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | b8 e7 25 30 d6 9b a3 7a<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | next payload type:
ISAKMP_NEXT_HASH<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | ISAKMP version: ISAKMP
Version 1.0 (rfc2407)<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | exchange type:
ISAKMP_XCHG_INFO<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | flags:
ISAKMP_FLAG_ENCRYPTION<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | message ID: 0d 6a aa 6e<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | length: 92<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | processing version=1.0
packet with exchange type=ISAKMP_XCHG_INFO (5)<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | ICOOKIE: b9 85 10 7b 62 d2
5a ac<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | RCOOKIE: b8 e7 25 30 d6 9b
a3 7a<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | state hash entry 23<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | peer and cookies match on #2,
provided msgid 00000000 vs 80a7ca6e/00000000<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | peer and cookies match on #1,
provided msgid 00000000 vs 00000000/00000000<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | p15 state object #1 found, in
STATE_MAIN_I4<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | processing connection
L2TPPSKCLIENT<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | got payload
0x100(ISAKMP_NEXT_HASH) needed: 0x100 opt: 0x0<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | ***parse ISAKMP Hash Payload:<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | next payload type:
ISAKMP_NEXT_N<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | length: 24<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | got payload
0x800(ISAKMP_NEXT_N) needed: 0x0 opt: 0x0<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | ***parse ISAKMP Notification
Payload:<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | next payload type:
ISAKMP_NEXT_NONE<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | length: 32<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | DOI: ISAKMP_DOI_IPSEC<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | protocol ID: 1<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | SPI size: 16<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | Notify Message Type:
R_U_THERE_ACK<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | removing 8 bytes of padding<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | info: b9 85 10 7b 62 d2 5a
ac b8 e7 25 30 d6 9b a3 7a<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | info: 00 00 44 3e<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | processing informational
R_U_THERE_ACK (36137)<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | state: 1 requesting event
EVENT_DPD_TIMEOUT to be deleted by
/root/resources/openswan-2.6.19/programs/pluto/dpd.c:515<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | complete state transition
with STF_IGNORE<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | * processed 0 messages from
cryptographic helpers<br>
Dec 12 11:17:20 s15318887 pluto[18630]: | next event EVENT_RETRANSMIT
in 40 seconds for #2<br>
Dec 12 11:17:24 s15318887 ipsec_setup: Stopping Openswan IPsec...<br>
Dec 12 11:17:24 s15318887 pluto[18630]: |<br>
Dec 12 11:17:24 s15318887 pluto[18630]: | *received whack message<br>
Dec 12 11:17:24 s15318887 pluto[18630]: shutting down<br>
Dec 12 11:17:24 s15318887 pluto[18630]: forgetting secrets<br>
Dec 12 11:17:24 s15318887 pluto[18630]: | processing connection
L2TPPSKCLIENT<br>
Dec 12 11:17:24 s15318887 pluto[18630]: "L2TPPSKCLIENT": deleting
connection<br>
Dec 12 11:17:24 s15318887 pluto[18630]: | processing connection
L2TPPSKCLIENT<br>
Dec 12 11:17:24 s15318887 pluto[18630]: "L2TPPSKCLIENT" #2: deleting
state (STATE_QUICK_I1)<br>
Dec 12 11:17:24 s15318887 pluto[18630]: | deleting state #2<br>
Dec 12 11:17:24 s15318887 pluto[18630]: | ICOOKIE: b9 85 10 7b 62 d2
5a ac<br>
Dec 12 11:17:24 s15318887 pluto[18630]: | RCOOKIE: b8 e7 25 30 d6 9b
a3 7a<br>
Dec 12 11:17:24 s15318887 pluto[18630]: | state hash entry 23<br>
Dec 12 11:17:24 s15318887 pluto[18630]: | processing connection
L2TPPSKCLIENT<br>
Dec 12 11:17:24 s15318887 pluto[18630]: "L2TPPSKCLIENT" #1: deleting
state (STATE_MAIN_I4)<br>
Dec 12 11:17:24 s15318887 pluto[18630]: | deleting state #1<br>
Dec 12 11:17:24 s15318887 pluto[18630]: | sending 84 bytes for delete
notify through eth0:500 to 223.31.46.223:500 (using #1)<br>
Dec 12 11:17:24 s15318887 pluto[18630]: | ICOOKIE: b9 85 10 7b 62 d2
5a ac<br>
Dec 12 11:17:24 s15318887 pluto[18630]: | RCOOKIE: b8 e7 25 30 d6 9b
a3 7a<br>
Dec 12 11:17:24 s15318887 pluto[18630]: | state hash entry 23<br>
Dec 12 11:17:24 s15318887 pluto[18630]: | alg_info_delref(0x71dc40)
alg_info->ref_cnt=2<br>
Dec 12 11:17:24 s15318887 pluto[18630]: | alg_info_delref(0x71cff0)
alg_info->ref_cnt=2<br>
Dec 12 11:17:24 s15318887 pluto[18630]: shutting down interface lo/lo
::1:500<br>
Dec 12 11:17:24 s15318887 pluto[18630]: shutting down interface lo/lo
127.0.0.1:4500<br>
Dec 12 11:17:24 s15318887 pluto[18630]: shutting down interface lo/lo
127.0.0.1:500<br>
Dec 12 11:17:24 s15318887 pluto[18630]: shutting down interface
eth0/eth0 192.199.19.91:4500<br>
Dec 12 11:17:24 s15318887 pluto[18630]: shutting down interface
eth0/eth0 192.199.19.91:500<br>
Dec 12 11:17:26 s15318887 ipsec_setup: ...Openswan IPsec stopped</small><br>
--------- end messages ---------------------<br>
<br>
<br>
----------- CICSO LOG -------------------<br>
<font color="#333399"><small>.Dec 12 11:16:50.716 MEZ: ISAKMP:(2108):SA
is doing pre-shared key authentication using id type ID_IPV4_ADDR<br>
.Dec 12 11:16:50.716 MEZ: ISAKMP (0:2108): ID payload<br>
next-payload : 8<br>
type : 1<br>
address : 223.31.46.223<br>
protocol : 17<br>
port : 500<br>
length : 12<br>
.Dec 12 11:16:50.716 MEZ: ISAKMP:(2108):Total payload length: 12<br>
.Dec 12 11:16:50.716 MEZ: ISAKMP:(2108): sending packet to
192.199.19.91 my_port 500 peer_port 500 (R) MM_KEY_EXCH<br>
.Dec 12 11:16:50.720 MEZ: ISAKMP:(2108):Input = IKE_MESG_INTERNAL,
IKE_PROCESS_COMPLETE<br>
.Dec 12 11:16:50.720 MEZ: ISAKMP:(2108):Old State = IKE_R_MM5 New
State = IKE_P1_COMPLETE<br>
<br>
.Dec 12 11:16:50.720 MEZ: ISAKMP:(2108):Input = IKE_MESG_INTERNAL,
IKE_PHASE1_COMPLETE<br>
.Dec 12 11:16:50.720 MEZ: ISAKMP:(2108):Old State = IKE_P1_COMPLETE
New State = IKE_P1_COMPLETE<br>
<br>
.Dec 12 11:16:50.836 MEZ: ISAKMP (0:2108): received packet from
192.199.19.91 dport 500 sport 500 Global (R) QM_IDLE<br>
.Dec 12 11:16:50.836 MEZ: ISAKMP: set new node -2136487314 to QM_IDLE<br>
.Dec 12 11:16:50.840 MEZ: ISAKMP:(2108): processing HASH payload.
message ID = -2136487314<br>
.Dec 12 11:16:50.840 MEZ: ISAKMP:(2108): processing SA payload. message
ID = -2136487314<br>
.Dec 12 11:16:50.840 MEZ: ISAKMP:(2108):Checking IPSec proposal 0<br>
.Dec 12 11:16:50.840 MEZ: ISAKMP: transform 0, ESP_3DES<br>
.Dec 12 11:16:50.840 MEZ: ISAKMP: attributes in transform:<br>
.Dec 12 11:16:50.840 MEZ: ISAKMP: group is 2<br>
.Dec 12 11:16:50.840 MEZ: ISAKMP: encaps is 2 (Transport)<br>
.Dec 12 11:16:50.840 MEZ: ISAKMP: SA life type in seconds<br>
.Dec 12 11:16:50.840 MEZ: ISAKMP: SA life duration (basic) of 28800<br>
.Dec 12 11:16:50.840 MEZ: ISAKMP: authenticator is HMAC-SHA<br>
.Dec 12 11:16:50.840 MEZ: ISAKMP:(2108):atts are acceptable.<br>
.Dec 12 11:16:50.840 MEZ: ISAKMP:(2108): <big><b>IPSec policy
invalidated proposal with error 1024</b></big><br>
.Dec 12 11:16:50.840 MEZ: ISAKMP:(2108): <big><b>phase 2 SA policy not
acceptable! (local 223.31.46.223 remote 192.199.19.91)</b></big><br>
.Dec 12 11:16:50.840 MEZ: ISAKMP: set new node 511720562 to QM_IDLE<br>
.Dec 12 11:16:50.840 MEZ: ISAKMP:(2108):Sending NOTIFY
PROPOSAL_NOT_CHOSEN protocol 3<br>
spi 2207772352, message ID = 511720562<br>
.Dec 12 11:16:50.840 MEZ: ISAKMP:(2108): sending packet to
192.199.19.91 my_port 500 peer_port 500 (R) QM_IDLE<br>
.Dec 12 11:16:50.844 MEZ: ISAKMP:(2108):purging node 511720562<br>
.Dec 12 11:16:50.844 MEZ: ISAKMP:(2108):deleting node -2136487314 error
TRUE reason "QM rejected"<br>
.Dec 12 11:16:50.844 MEZ: ISAKMP:(2108):Node -2136487314, Input =
IKE_MESG_FROM_PEER, IKE_QM_EXCH<br>
.Dec 12 11:16:50.844 MEZ: ISAKMP:(2108):Old State = IKE_QM_READY New
State = IKE_QM_READY<br>
.Dec 12 11:17:00.917 MEZ: ISAKMP (0:2108): received packet from
192.199.19.91 dport 500 sport 500 Global (R) QM_IDLE<br>
.Dec 12 11:17:00.917 MEZ: ISAKMP:(2108): <big><b>phase 2 packet is a
duplicate of a previous packet.</b></big><br>
.Dec 12 11:17:00.917 MEZ: ISAKMP:(2108): retransmitting due to
retransmit phase 2<br>
.Dec 12 11:17:00.917 MEZ: ISAKMP:(2108): ignoring
retransmission,because phase2 node marked dead -2136487314<br>
.Dec 12 11:17:20.831 MEZ: ISAKMP (0:2108): received packet from
192.199.19.91 dport 500 sport 500 Global (R) QM_IDLE<br>
.Dec 12 11:17:20.831 MEZ: ISAKMP: set new node 1938031181 to QM_IDLE<br>
.Dec 12 11:17:20.831 MEZ: ISAKMP:(2108): processing HASH payload.
message ID = 1938031181<br>
.Dec 12 11:17:20.831 MEZ: ISAKMP:(2108): processing NOTIFY
DPD/R_U_THERE protocol 1<br>
spi 0, message ID = 1938031181, sa = 8420638C<br>
.Dec 12 11:17:20.835 MEZ: ISAKMP:(2108):deleting node 1938031181 error
FALSE reason "Informational (in) state 1"<br>
.Dec 12 11:17:20.835 MEZ: ISAKMP:(2108):Input = IKE_MESG_FROM_PEER,
IKE_INFO_NOTIFY<br>
.Dec 12 11:17:20.835 MEZ: ISAKMP:(2108):Old State = IKE_P1_COMPLETE
New State = IKE_P1_COMPLETE<br>
<br>
.Dec 12 11:17:20.835 MEZ: ISAKMP (0:2108): received packet from
192.199.19.91 dport 500 sport 500 Global (R) QM_IDLE<br>
.Dec 12 11:17:20.835 MEZ: ISAKMP:(2108): <big><b>phase 2 packet is a
duplicate of a previous packet.</b></big><br>
.Dec 12 11:17:20.835 MEZ: ISAKMP:(2108): retransmitting due to
retransmit phase 2<br>
.Dec 12 11:17:20.835 MEZ: ISAKMP:(2108): ignoring
retransmission,because phase2 node marked dead -2136487314<br>
.Dec 12 11:17:20.835 MEZ: ISAKMP:(2108):DPD/R_U_THERE received from
peer 192.199.19.91, sequence 0x443E<br>
.Dec 12 11:17:20.835 MEZ: ISAKMP: set new node 225094254 to QM_IDLE<br>
.Dec 12 11:17:20.835 MEZ: ISAKMP:(2108):Sending NOTIFY
DPD/R_U_THERE_ACK protocol 1<br>
spi 2207773184, message ID = 225094254<br>
.Dec 12 11:17:20.835 MEZ: ISAKMP:(2108): seq. no 0x443E<br>
.Dec 12 11:17:20.839 MEZ: ISAKMP:(2108): sending packet to
192.199.19.91 my_port 500 peer_port 500 (R) QM_IDLE<br>
.Dec 12 11:17:20.839 MEZ: ISAKMP:(2108):purging node 225094254<br>
.Dec 12 11:17:20.839 MEZ: ISAKMP:(2108):Input = IKE_MESG_FROM_PEER,
IKE_MESG_KEEP_ALIVE<br>
.Dec 12 11:17:20.839 MEZ: ISAKMP:(2108):Old State = IKE_P1_COMPLETE
New State = IKE_P1_COMPLETE<br>
<br>
.Dec 12 11:17:24.766 MEZ: ISAKMP (0:2108): received packet from
192.199.19.91 dport 500 sport 500 Global (R) QM_IDLE<br>
.Dec 12 11:17:24.766 MEZ: ISAKMP: set new node -1823789155 to QM_IDLE<br>
.Dec 12 11:17:24.770 MEZ: ISAKMP:(2108): processing HASH payload.
message ID = -1823789155<br>
.Dec 12 11:17:24.770 MEZ: ISAKMP:(2108): processing DELETE payload.
message ID = -1823789155<br>
.Dec 12 11:17:24.770 MEZ: ISAKMP:(2108):peer does not do paranoid
keepalives.<br>
<br>
.Dec 12 11:17:24.770 MEZ: ISAKMP:(2108):deleting SA reason "No reason"
state (R) QM_IDLE (peer 192.199.19.91)<br>
.Dec 12 11:17:24.770 MEZ: ISAKMP:(2108):deleting node -1823789155 error
FALSE reason "Informational (in) state 1"<br>
.Dec 12 11:17:24.770 MEZ: ISAKMP: set new node 21968057 to QM_IDLE<br>
.Dec 12 11:17:24.770 MEZ: ISAKMP:(2108): sending packet to
192.199.19.91 my_port 500 peer_port 500 (R) QM_IDLE<br>
.Dec 12 11:17:24.770 MEZ: ISAKMP:(2108):purging node 21968057<br>
.Dec 12 11:17:24.774 MEZ: ISAKMP:(2108):Input = IKE_MESG_INTERNAL,
IKE_PHASE1_DEL<br>
.Dec 12 11:17:24.774 MEZ: ISAKMP:(2108):Old State = IKE_P1_COMPLETE
New State = IKE_DEST_SA<br>
<br>
.Dec 12 11:17:24.774 MEZ: ISAKMP:(2108):deleting SA reason "No reason"
state (R) QM_IDLE (peer 192.199.19.91)<br>
.Dec 12 11:17:24.774 MEZ: ISAKMP: Unlocking peer struct 0x82C2FD84 for
isadb_mark_sa_deleted(), count 0<br>
.Dec 12 11:17:24.774 MEZ: ISAKMP: Deleting peer node by peer_reap for
192.199.19.91: 82C2FD84<br>
.Dec 12 11:17:24.774 MEZ: ISAKMP:(2108):deleting node -2136487314 error
FALSE reason "IKE deleted"<br>
.Dec 12 11:17:24.774 MEZ: ISAKMP:(2108):deleting node 1938031181 error
FALSE reason "IKE deleted"<br>
.Dec 12 11:17:24.774 MEZ: ISAKMP:(2108):deleting node -1823789155 error
FALSE reason "IKE deleted"<br>
.Dec 12 11:17:24.774 MEZ: ISAKMP:(2108):Input = IKE_MESG_FROM_PEER,
IKE_MM_EXCH<br>
.Dec 12 11:17:24.774 MEZ: ISAKMP:(2108):Old State = IKE_DEST_SA New
State = IKE_DEST_SA</small></font><br>
<br>
<br>
---------------end cisco log- -----------------<br>
<br>
<br>
---------- cmd output from connection try -----------<br>
<pre><font color="#000099"><small>s15318887:~ # ipsec auto --verbose --up L2TPPSKCLIENT &</small></font></pre>
<pre><font color="#000099"><small>[1] 18727</small></font></pre>
<pre><font color="#000099"><small>s15318887:~ # 002 "L2TPPSKCLIENT" #1: initiating Main Mode</small></font></pre>
<pre><font color="#000099"><small>104 "L2TPPSKCLIENT" #1: STATE_MAIN_I1: initiate</small></font></pre>
<pre><font color="#000099"><small>003 "L2TPPSKCLIENT" #1: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03] method set to=108</small></font></pre>
<pre><font color="#000099"><small>002 "L2TPPSKCLIENT" #1: enabling possible NAT-traversal with method draft-ietf-ipsec-nat-t-ike-05</small></font></pre>
<pre><font color="#000099"><small>002 "L2TPPSKCLIENT" #1: transition from state STATE_MAIN_I1 to state STATE_MAIN_I2</small></font></pre>
<pre><font color="#000099"><small>106 "L2TPPSKCLIENT" #1: STATE_MAIN_I2: sent MI2, expecting MR2</small></font></pre>
<pre><font color="#000099"><small>003 "L2TPPSKCLIENT" #1: received Vendor ID payload [Cisco-Unity]</small></font></pre>
<pre><font color="#000099"><small>003 "L2TPPSKCLIENT" #1: received Vendor ID payload [Dead Peer Detection]</small></font></pre>
<pre><font color="#000099"><small>003 "L2TPPSKCLIENT" #1: ignoring unknown Vendor ID payload [4d20822dd69aa37a378d51757973dfcf]</small></font></pre>
<pre><font color="#000099"><small>003 "L2TPPSKCLIENT" #1: received Vendor ID payload [XAUTH]</small></font></pre>
<pre><font color="#000099"><small>003 "L2TPPSKCLIENT" #1: NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike-02/03: no NAT detected</small></font></pre>
<pre><font color="#000099"><small>002 "L2TPPSKCLIENT" #1: transition from state STATE_MAIN_I2 to state STATE_MAIN_I3</small></font></pre>
<pre><font color="#000099"><small>108 "L2TPPSKCLIENT" #1: STATE_MAIN_I3: sent MI3, expecting MR3</small></font></pre>
<pre><font color="#000099"><small>002 "L2TPPSKCLIENT" #1: Main mode peer ID is ID_IPV4_ADDR: '223.31.46.223'</small></font></pre>
<pre><font color="#000099"><small>002 "L2TPPSKCLIENT" #1: transition from state STATE_MAIN_I3 to state STATE_MAIN_I4</small></font></pre>
<pre><font color="#000099"><small>004 "L2TPPSKCLIENT" #1: STATE_MAIN_I4: ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp1024}</small></font></pre>
<pre><font color="#000099"><small>002 "L2TPPSKCLIENT" #1: Dead Peer Detection (RFC 3706): enabled</small></font></pre>
<pre><font color="#000099"><small>002 "L2TPPSKCLIENT" #2: initiating Quick Mode PSK+ENCRYPT+PFS+UP+IKEv2ALLOW {using isakmp#1 msgid:6ecaa780 proposal=3DES(3)_192-SHA1(2)_160 pfsgroup=OAKLEY_GROUP_MODP1024}</small></font></pre>
<pre><font color="#000099"><small>117 "L2TPPSKCLIENT" #2: STATE_QUICK_I1: initiate</small></font></pre>
<pre><font color="#000099"><small>010 "L2TPPSKCLIENT" #2: STATE_QUICK_I1: retransmission; will wait 20s for respons</small></font></pre>
<pre>
</pre>
<br>
-----------------------------end conn try ------------<br>
<br>
</body>
</html>