<div dir="ltr">Hi All,<br><br>Just got done with my ipsec tunnel between two hosts (site-to-site) with following 'ipsec barf' logs. Just for knowledge sharing, are these all six stages of tunnel creation?<br>Does it indicate that tunnel is successfully created and ready for use now?<br>
<br>Regards,<br>Hammad<br><br>Dec 18 10:06:58 hostname pluto[25453]: "p2p" #1: initiating Main Mode<br>Dec 18 10:06:58 hostname pluto[25453]: "p2p" #1: received Vendor ID payload [Openswan (this version) 2.6.27 ]<br>
Dec 18 10:06:58 hostname pluto[25453]: "p2p" #1: received Vendor ID payload [Dead Peer Detection]<br>Dec 18 10:06:58 hostname pluto[25453]: "p2p" #1: received Vendor ID payload [RFC 3947] method set to=109 <br>
Dec 18 10:06:58 hostname pluto[25453]: "p2p" #1: enabling possible NAT-traversal with method 4<br>Dec 18 10:06:58 hostname pluto[25453]: "p2p" #1: transition from state <span style="background-color: rgb(255, 204, 102);">STATE_MAIN_I1</span> to state STATE_MAIN_I2<br>
Dec 18 10:06:58 hostname pluto[25453]: "p2p" #1: <span style="background-color: rgb(255, 204, 51);">STATE_MAIN_I2</span>: sent MI2, expecting MR2<br>Dec 18 10:06:58 hostname pluto[25453]: "p2p" #1: NAT-Traversal: Result using RFC 3947 (NAT-Traversal): both are NATed<br>
Dec 18 10:06:58 hostname pluto[25453]: "p2p" #1: transition from state STATE_MAIN_I2 to state STATE_MAIN_I3<br>Dec 18 10:06:58 hostname pluto[25453]: "p2p" #1: <span style="background-color: rgb(255, 204, 0);">STATE_MAIN_I3</span>: sent MI3, expecting MR3<br>
Dec 18 10:06:58 hostname pluto[25453]: "p2p" #1: received Vendor ID payload [CAN-IKEv2]<br>Dec 18 10:06:58 hostname pluto[25453]: "p2p" #1: Main mode peer ID is ID_IPV4_ADDR: '50.16.16.16'<br>Dec 18 10:06:58 hostname pluto[25453]: "p2p" #1: transition from state STATE_MAIN_I3 to state STATE_MAIN_I4<br>
Dec 18 10:06:58 hostname pluto[25453]: "p2p" #1: <span style="background-color: rgb(255, 255, 0);">STATE_MAIN_I4</span>: ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp1536}<br>
Dec 18 10:06:58 hostname pluto[25453]: "p2p" #2: initiating Quick Mode PSK+ENCRYPT+TUNNEL+PFS+UP+IKEv2ALLOW {using isakmp#1 msgid:9e6d46b2 proposal=defaults pfsgroup=OAKLEY_GROUP_MODP1536}<br>Dec 18 10:06:58 hostname pluto[25453]: "p2p" #2: transition from state<span style="background-color: rgb(255, 204, 51);"> STATE_QUICK_I1</span> to state STATE_QUICK_I2<br>
Dec 18 10:06:58 hostname pluto[25453]: "p2p" #2: <span style="background-color: rgb(255, 204, 0);">STATE_QUICK_I2</span>: sent QI2, IPsec SA established tunnel mode {ESP=>0xc624ebb7 <0x687fb37b xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=<a href="http://50.16.217.145:4500">50.16.217.145:4500</a> DPD=none}<br>
Dec 18 10:07:13 hostname pluto[25453]: "p2p" #1: ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0x9facf6d9) not found (maybe expired)<br>Dec 18 10:07:13 hostname pluto[25453]: "p2p" #1: received and ignored informational message</div>