<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="PlaceType"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="PlaceName"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="place"/>
<!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:Arial;
color:windowtext;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal style='text-indent:.5in'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>I have over 150 Openswan ipsec vpn
tunnels from various parts of <st1:place w:st="on">North America</st1:place>
all connecting to a Fortigate 310b firewall/router<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>The majority of the tunnels come up fine. The problem is
that after an hour or so some (not all) of the tunnel drop for some unknown reason.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>I have created a script on each client that checks to see if
the tunnel is up and if it is not, the tunnel is to be reestablished which
works fine.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>The problem is that I am trying to run backup scripts
through these tunnels and there up and down which is ruining my backups.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>I have been fighting this problem for many days and I have spent
countless hours searching forum posts to no avail.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> <b><u><span
style='font-weight:bold'>FORTIGATE CONFIG<o:p></o:p></span></u></b></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> <i><span
style='font-style:italic'>PHASE1<o:p></o:p></span></i></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> 3DES-SHA1<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> 3DES-MD5<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> AES128-MD5<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> DIFFE
GROUPS 2&5<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> KEYLIFE
86400s<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> NAT-TRANSVERSAL
ENABLED<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> KEEP
ALIVE FREQ 10<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> DPD
ENABLE<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> XAUTH
SERVER = YES<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> <i><span
style='font-style:italic'>PHASE2<o:p></o:p></span></i></span></font></p>
<p class=MsoNormal><i><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial;font-style:italic'> </span></font></i><font
size=2 face=Arial><span lang=FR style='font-size:10.0pt;font-family:Arial'>3DES-SHA1<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=FR style='font-size:10.0pt;
font-family:Arial'> 3DES-MD5<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=FR style='font-size:10.0pt;
font-family:Arial'> AES128-MD5<o:p></o:p></span></font></p>
<p class=MsoNormal><i><font size=2 face=Arial><span lang=FR style='font-size:
10.0pt;font-family:Arial;font-style:italic'> </span></font></i><i><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial;font-style:
italic'>REPLAY DETECTION ENABLED<o:p></o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial;font-style:italic'> PFS
ENABLED<o:p></o:p></span></font></i></p>
<p class=MsoNormal><i><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial;font-style:italic'> </span></font></i><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>DIFFE GROUPS
5<i><span style='font-style:italic'><o:p></o:p></span></i></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> KEYLIFE
86400s<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> AUTO
KEEP ALIVE ENABLED<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> DCHPIPSEC
DISABLED<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> <b><u><span
style='font-weight:bold'>OPENSWAN IPSEC.CONF<o:p></o:p></span></u></b></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face="Courier New"><span
lang=EN-ZW style='font-size:10.0pt;font-family:"Courier New"'>config setup<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face="Courier New"><span
lang=EN-ZW style='font-size:10.0pt;font-family:"Courier New"'> nat_traversal=yes<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face="Courier New"><span
lang=EN-ZW style='font-size:10.0pt;font-family:"Courier New"'> protostack=netkey<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face="Courier New"><span
lang=EN-ZW style='font-size:10.0pt;font-family:"Courier New"'>conn home<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face="Courier New"><span
lang=EN-ZW style='font-size:10.0pt;font-family:"Courier New"'>#CLIENT<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face="Courier New"><span
lang=EN-ZW style='font-size:10.0pt;font-family:"Courier New"'> leftxauthclient=XXXXXX<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face="Courier New"><span
lang=EN-ZW style='font-size:10.0pt;font-family:"Courier New"'> leftxauthusername=XXXXXX<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face="Courier New"><span
lang=EN-ZW style='font-size:10.0pt;font-family:"Courier New"'> leftsourceip=VAR2<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face="Courier New"><span
lang=EN-ZW style='font-size:10.0pt;font-family:"Courier New"'> left=%defaultroute<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face="Courier New"><span
lang=EN-ZW style='font-size:10.0pt;font-family:"Courier New"'>#REMOTEHOST<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face="Courier New"><span
lang=EN-ZW style='font-size:10.0pt;font-family:"Courier New"'> rightxauthserver=yes<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face="Courier New"><span
lang=EN-ZW style='font-size:10.0pt;font-family:"Courier New"'> right=XXX.XXX.XXX.XXX<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face="Courier New"><span
lang=EN-ZW style='font-size:10.0pt;font-family:"Courier New"'> rightsubnet=192.168.80.0/24<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face="Courier New"><span
lang=EN-ZW style='font-size:10.0pt;font-family:"Courier New"'>#GENERAL<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face="Courier New"><span
lang=EN-ZW style='font-size:10.0pt;font-family:"Courier New"'> authby=secret<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face="Courier New"><span
lang=EN-ZW style='font-size:10.0pt;font-family:"Courier New"'> auto=start<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face="Courier New"><span
lang=EN-ZW style='font-size:10.0pt;font-family:"Courier New"'> compress=no<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face="Courier New"><span
lang=EN-ZW style='font-size:10.0pt;font-family:"Courier New"'> type=tunnel<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face="Courier New"><span
lang=EN-ZW style='font-size:10.0pt;font-family:"Courier New"'> pfs=yes<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face="Courier New"><span
lang=EN-ZW style='font-size:10.0pt;font-family:"Courier New"'> forceencaps=yes<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face="Courier New"><span
lang=FR style='font-size:10.0pt;font-family:"Courier New"'>#PHASE1<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face="Courier New"><span
lang=FR style='font-size:10.0pt;font-family:"Courier New"'> ike=3des-sha1,3des-md5<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face="Courier New"><span
lang=FR style='font-size:10.0pt;font-family:"Courier New"'> </span></font><font
size=2 face="Courier New"><span lang=EN-ZW style='font-size:10.0pt;font-family:
"Courier New"'>keylife=86400s<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face="Courier New"><span
lang=EN-ZW style='font-size:10.0pt;font-family:"Courier New"'>#PHASE2<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face="Courier New"><span
lang=EN-ZW style='font-size:10.0pt;font-family:"Courier New"'> phase2=esp<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face="Courier New"><span
lang=EN-ZW style='font-size:10.0pt;font-family:"Courier New"'> phase2alg=3des-sha1,3des-md5;modp1536<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face="Courier New"><span
lang=EN-ZW style='font-size:10.0pt;font-family:"Courier New"'> ikelifetime=86400s<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face="Courier New"><span
lang=EN-ZW style='font-size:10.0pt;font-family:"Courier New"'>#REKEYING<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face="Courier New"><span
lang=EN-ZW style='font-size:10.0pt;font-family:"Courier New"'> rekey=yes<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face="Courier New"><span
lang=EN-ZW style='font-size:10.0pt;font-family:"Courier New"'> rekeymargin=15m<o:p></o:p></span></font></p>
<p class=MsoNormal><b><u><font size=2 face=Arial><span lang=EN-ZW
style='font-size:10.0pt;font-family:Arial;font-weight:bold'><o:p><span
style='text-decoration:none'> </span></o:p></span></font></u></b></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> <o:p></o:p></span></font></p>
<p class=MsoNormal><b><i><u><font size=2 face=Arial><span style='font-size:
10.0pt;font-family:Arial;font-weight:bold;font-style:italic'>Here is the tunnel
being brought up successfully<o:p></o:p></span></font></u></i></b></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 08:46:43 claimtools pluto[15697]: "home" #1:
initiating Main Mode<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 08:46:43 claimtools pluto[15697]: "home" #1: received
Vendor ID payload [RFC 3947] method set to=109<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 08:46:43 claimtools pluto[15697]: "home" #1: received
Vendor ID payload [Dead Peer Detection]<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 08:46:43 claimtools pluto[15697]: "home" #1: enabling
possible NAT-traversal with method 4<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 08:46:43 claimtools pluto[15697]: "home" #1: transition
from state STATE_MAIN_I1 to state STATE_MAIN_I2<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 08:46:43 claimtools pluto[15697]: "home" #1:
STATE_MAIN_I2: sent MI2, expecting MR2<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 08:46:43 claimtools pluto[15697]: "home" #1:
NAT-Traversal: Result using RFC 3947 (NAT-Traversal): both are NATed<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 08:46:43 claimtools pluto[15697]: "home" #1:
transition from state STATE_MAIN_I2 to state STATE_MAIN_I3<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 08:46:43 claimtools pluto[15697]: "home" #1:
STATE_MAIN_I3: sent MI3, expecting MR3<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 08:46:43 claimtools pluto[15697]: "home" #1: Main mode
peer ID is ID_IPV4_ADDR: 'xxx.xxx.xxx.xxxx’<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 08:46:43 claimtools pluto[15697]: "home" #1:
transition from state STATE_MAIN_I3 to state STATE_MAIN_I4<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 08:46:43 claimtools pluto[15697]: "home" #1:
STATE_MAIN_I4: ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY
cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp1536}<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 08:46:43 claimtools pluto[15697]: "home" #1: XAUTH:
Answering XAUTH challenge with user='xxxxx’<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 08:46:43 claimtools pluto[15697]: "home" #1:
transition from state STATE_XAUTH_I0 to state STATE_XAUTH_I1<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 08:46:43 claimtools pluto[15697]: "home" #1:
STATE_XAUTH_I1: XAUTH client - awaiting CFG_set<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 08:46:43 claimtools pluto[15697]: "home" #1: XAUTH:
Successfully Authenticated<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 08:46:43 claimtools pluto[15697]: "home" #1:
transition from state STATE_XAUTH_I0 to state STATE_XAUTH_I1<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 08:46:43 claimtools pluto[15697]: "home" #1:
STATE_XAUTH_I1: XAUTH client - awaiting CFG_set<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 08:46:43 claimtools pluto[15697]: "home" #2:
initiating Quick Mode PSK+ENCRYPT+TUNNEL+PFS+UP+IKEv2ALLOW {using isakmp#1
msgid:a0bec906 proposal=3DES(3)_192-SHA1(2)_160, 3DES(3)_192-MD5(1)_128
pfsgroup=OAKLEY_GROUP_MODP1536}<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 08:46:44 claimtools pluto[15697]: "home" #2:
transition from state STATE_QUICK_I1 to state STATE_QUICK_I<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 08:46:44 claimtools pluto[15697]: "home" #2:
STATE_QUICK_I2: sent QI2, IPsec SA established tunnel mode
{ESP/NAT=>0x8b5c8037 <0x3bcfa844 xfrm=3DES_0-HMAC_SHA1 NATOA=none NATD=xxx.xxx.xxx.xxx:4500
DPD=none}<br>
<br>
Tunnel was fine until now <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><br>
<b><i><u><span style='font-weight:bold;font-style:italic'>Here is the failure point</span></u></i></b></span></font><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 10:35:57 claimtools pluto[15697]: "home" #1: DPD Info:
received old or duplicate R_U_THERE<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 10:36:57 claimtools pluto[15697]: "home" #1: DPD Info:
received old or duplicate R_U_THERE<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 10:37:57 claimtools pluto[15697]: "home" #1: received
Delete SA payload: replace <st1:place w:st="on"><st1:PlaceName w:st="on">IPSEC</st1:PlaceName>
<st1:PlaceType w:st="on">State</st1:PlaceType></st1:place> #2 in 10 seconds<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 10:37:57 claimtools pluto[15697]: "home" #1: received
and ignored informational message<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 10:37:57 claimtools pluto[15697]: "home" #1: received
Delete SA payload: deleting <st1:place w:st="on"><st1:PlaceName w:st="on">ISAKMP</st1:PlaceName>
<st1:PlaceType w:st="on">State</st1:PlaceType></st1:place> #1<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 10:37:57 claimtools pluto[15697]: packet from XXX.XXX.XXX.XXX:4500:
received and ignored informational message<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 10:38:07 claimtools pluto[15697]: "home" #3:
initiating Main Mode<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 10:38:07 claimtools pluto[15697]: "home" #3: received
Vendor ID payload [RFC 3947] method set to=109<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 10:38:07 claimtools pluto[15697]: "home" #3: received
Vendor ID payload [Dead Peer Detection]<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 10:38:07 claimtools pluto[15697]: "home" #3: enabling
possible NAT-traversal with method 4<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 10:38:07 claimtools pluto[15697]: "home" #3:
transition from state STATE_MAIN_I1 to state STATE_MAIN_I2<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 10:38:07 claimtools pluto[15697]: "home" #3:
STATE_MAIN_I2: sent MI2, expecting MR2<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 10:38:07 claimtools pluto[15697]: "home" #3:
NAT-Traversal: Result using RFC 3947 (NAT-Traversal): both are NATed<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 10:38:07 claimtools pluto[15697]: "home" #3:
transition from state STATE_MAIN_I2 to state STATE_MAIN_I3<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 10:38:07 claimtools pluto[15697]: "home" #3:
STATE_MAIN_I3: sent MI3, expecting MR3<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 10:38:07 claimtools pluto[15697]: "home" #3: Main mode
peer ID is ID_IPV4_ADDR: '70.67.129.119'<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 10:38:07 claimtools pluto[15697]: "home" #3:
transition from state STATE_MAIN_I3 to state STATE_MAIN_I4<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 10:38:07 claimtools pluto[15697]: "home" #3: STATE_MAIN_I4:
ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192
prf=oakley_sha group=modp1536}<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 10:38:07 claimtools pluto[15697]: "home" #3: XAUTH:
Answering XAUTH challenge with user='XXXXX'<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 10:38:07 claimtools pluto[15697]: "home" #3:
transition from state STATE_XAUTH_I0 to state STATE_XAUTH_I1<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 10:38:07 claimtools pluto[15697]: "home" #3:
STATE_XAUTH_I1: XAUTH client - awaiting CFG_set<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 10:38:07 claimtools pluto[15697]: "home" #3: XAUTH:
Successfully Authenticated<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 10:38:07 claimtools pluto[15697]: "home" #3:
transition from state STATE_XAUTH_I0 to state STATE_XAUTH_I1<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 10:38:07 claimtools pluto[15697]: "home" #3:
STATE_XAUTH_I1: XAUTH client - awaiting CFG_set<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 10:38:07 claimtools pluto[15697]: "home" #4:
initiating Quick Mode PSK+ENCRYPT+TUNNEL+PFS+UP+IKEv2ALLOW {using isakmp#3
msgid:2bec3343 proposal=3DES(3)_192-SHA1(2)_160, 3DES(3)_192-MD5(1)_128
pfsgroup=OAKLEY_GROUP_MODP1536}<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Mar 20 10:38:07 claimtools pluto[15697]: "home" #4:
transition from state STATE_QUICK_I1 to state STATE_QUICK_I2<br>
Mar 20 10:38:07 claimtools pluto[15697]: "home" #4: STATE_QUICK_I2:
sent QI2, IPsec SA established tunnel mode {ESP/NAT=>0x8b5c8071
<0xf6c24685 xfrm=3DES_0-HMAC_SHA1 NATOA=none NATD=XXX.XXX.XXX.XXX:4500
DPD=none}<br>
<br>
<br>
Any ideas?<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><strong><b><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>Jon James</span></font></b></strong><o:p></o:p></p>
<p class=MsoNormal><strong><b><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>ClaimTools Solutions</span></font></b></strong><o:p></o:p></p>
<p class=MsoNormal><strong><b><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>(250)713-8185</span></font></b></strong><o:p></o:p></p>
<p class=MsoNormal><strong><b><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>1-888-989-8388</span></font></b></strong><o:p></o:p></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
</div>
</body>
</html>