Jan 18 09:34:08 riab pluto[4117]: packet from 109.xxx.xxx.xxx:334: received Vendor ID payload [RFC 3947] method set to=109 
Jan 18 09:34:08 riab pluto[4117]: packet from 109.xxx.xxx.xxx:334: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike] method set to=110 
Jan 18 09:34:08 riab pluto[4117]: packet from 109.xxx.xxx.xxx:334: ignoring unknown Vendor ID payload [8f8d83826d246b6fc7a8a6a428c11de8]
Jan 18 09:34:08 riab pluto[4117]: packet from 109.xxx.xxx.xxx:334: ignoring unknown Vendor ID payload [439b59f8ba676c4c7737ae22eab8f582]
Jan 18 09:34:08 riab pluto[4117]: packet from 109.xxx.xxx.xxx:334: ignoring unknown Vendor ID payload [4d1e0e136deafa34c4f3ea9f02ec7285]
Jan 18 09:34:08 riab pluto[4117]: packet from 109.xxx.xxx.xxx:334: ignoring unknown Vendor ID payload [80d0bb3def54565ee84645d4c85ce3ee]
Jan 18 09:34:08 riab pluto[4117]: packet from 109.xxx.xxx.xxx:334: ignoring unknown Vendor ID payload [9909b64eed937c6573de52ace952fa6b]
Jan 18 09:34:08 riab pluto[4117]: packet from 109.xxx.xxx.xxx:334: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03] meth=108, but already using method 110
Jan 18 09:34:08 riab pluto[4117]: packet from 109.xxx.xxx.xxx:334: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02] meth=107, but already using method 110
Jan 18 09:34:08 riab pluto[4117]: packet from 109.xxx.xxx.xxx:334: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but already using method 110
Jan 18 09:34:08 riab pluto[4117]: packet from 109.xxx.xxx.xxx:334: received Vendor ID payload [Dead Peer Detection]
Jan 18 09:34:08 riab pluto[4117]: "l2tp_0-iPhone_1701_gw-sn_213.xxx.xxx.xxx-0.0.0.0_0"[47] 109.xxx.xxx.xxx #2722: responding to Main Mode from unknown peer 109.xxx.xxx.xxx
Jan 18 09:34:08 riab pluto[4117]: "l2tp_0-iPhone_1701_gw-sn_213.xxx.xxx.xxx-0.0.0.0_0"[47] 109.xxx.xxx.xxx #2722: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1
Jan 18 09:34:08 riab pluto[4117]: "l2tp_0-iPhone_1701_gw-sn_213.xxx.xxx.xxx-0.0.0.0_0"[47] 109.xxx.xxx.xxx #2722: STATE_MAIN_R1: sent MR1, expecting MI2
Jan 18 09:34:08 riab pluto[4117]: "l2tp_0-iPhone_1701_gw-sn_213.xxx.xxx.xxx-0.0.0.0_0"[47] 109.xxx.xxx.xxx #2722: NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike (MacOS X): both are NATed
Jan 18 09:34:08 riab pluto[4117]: "l2tp_0-iPhone_1701_gw-sn_213.xxx.xxx.xxx-0.0.0.0_0"[47] 109.xxx.xxx.xxx #2722: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2
Jan 18 09:34:08 riab pluto[4117]: "l2tp_0-iPhone_1701_gw-sn_213.xxx.xxx.xxx-0.0.0.0_0"[47] 109.xxx.xxx.xxx #2722: STATE_MAIN_R2: sent MR2, expecting MI3
Jan 18 09:34:08 riab pluto[4117]: "l2tp_0-iPhone_1701_gw-sn_213.xxx.xxx.xxx-0.0.0.0_0"[47] 109.xxx.xxx.xxx #2722: ignoring informational payload, type IPSEC_INITIAL_CONTACT msgid=00000000
Jan 18 09:34:08 riab pluto[4117]: "l2tp_0-iPhone_1701_gw-sn_213.xxx.xxx.xxx-0.0.0.0_0"[47] 109.xxx.xxx.xxx #2722: Main mode peer ID is ID_IPV4_ADDR: '10.xxx.xxx.xxx'
Jan 18 09:34:08 riab pluto[4117]: "l2tp_0-iPhone_1701_gw-sn_213.xxx.xxx.xxx-0.0.0.0_0"[47] 109.xxx.xxx.xxx #2722: switched from "l2tp_0-iPhone_1701_gw-sn_213.xxx.xxx.xxx-0.0.0.0_0" to "l2tp_0-iPhone_1701_gw-sn_213.xxx.xxx.xxx-0.0.0.0_0"
Jan 18 09:34:08 riab pluto[4117]: "l2tp_0-iPhone_1701_gw-sn_213.xxx.xxx.xxx-0.0.0.0_0"[48] 109.xxx.xxx.xxx #2722: deleting connection "l2tp_0-iPhone_1701_gw-sn_213.xxx.xxx.xxx-0.0.0.0_0" instance with peer 109.xxx.xxx.xxx {isakmp=#0/ipsec=#0}
Jan 18 09:34:08 riab pluto[4117]: "l2tp_0-iPhone_1701_gw-sn_213.xxx.xxx.xxx-0.0.0.0_0"[48] 109.xxx.xxx.xxx #2722: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3
Jan 18 09:34:08 riab pluto[4117]: "l2tp_0-iPhone_1701_gw-sn_213.xxx.xxx.xxx-0.0.0.0_0"[48] 109.xxx.xxx.xxx #2722: new NAT mapping for #2722, was 109.xxx.xxx.xxx:334, now 109.xxx.xxx.xxx:47693
Jan 18 09:34:08 riab pluto[4117]: "l2tp_0-iPhone_1701_gw-sn_213.xxx.xxx.xxx-0.0.0.0_0"[48] 109.xxx.xxx.xxx #2722: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=aes_256 prf=oakley_sha group=modp1024}
Jan 18 09:34:10 riab pluto[4117]: "l2tp_0-iPhone_1701_gw-sn_213.xxx.xxx.xxx-0.0.0.0_0"[48] 109.xxx.xxx.xxx #2722: the peer proposed: 213.xxx.xxx.xxx/32:17/1701 -> 10.xxx.xxx.xxx/32:17/0
Jan 18 09:34:10 riab pluto[4117]: "l2tp_0-iPhone_1701_gw-sn_213.xxx.xxx.xxx-0.0.0.0_0"[48] 109.xxx.xxx.xxx #2723: responding to Quick Mode proposal {msgid:a1e24f97}
Jan 18 09:34:10 riab pluto[4117]: "l2tp_0-iPhone_1701_gw-sn_213.xxx.xxx.xxx-0.0.0.0_0"[48] 109.xxx.xxx.xxx #2723:     us: 213.xxx.xxx.xxx<213.xxx.xxx.xxx>[+S=C]:17/1701
Jan 18 09:34:10 riab pluto[4117]: "l2tp_0-iPhone_1701_gw-sn_213.xxx.xxx.xxx-0.0.0.0_0"[48] 109.xxx.xxx.xxx #2723:   them: 109.xxx.xxx.xxx[10.xxx.xxx.xxx,+S=C]:17/54596===10.xxx.xxx.xxx/32
Jan 18 09:34:10 riab pluto[4117]: "l2tp_0-iPhone_1701_gw-sn_213.xxx.xxx.xxx-0.0.0.0_0"[48] 109.xxx.xxx.xxx #2723: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1
Jan 18 09:34:10 riab pluto[4117]: "l2tp_0-iPhone_1701_gw-sn_213.xxx.xxx.xxx-0.0.0.0_0"[48] 109.xxx.xxx.xxx #2723: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2
Jan 18 09:34:10 riab pluto[4117]: "l2tp_0-iPhone_1701_gw-sn_213.xxx.xxx.xxx-0.0.0.0_0"[48] 109.xxx.xxx.xxx #2723: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2
Jan 18 09:34:10 riab pluto[4117]: "l2tp_0-iPhone_1701_gw-sn_213.xxx.xxx.xxx-0.0.0.0_0"[48] 109.xxx.xxx.xxx #2723: STATE_QUICK_R2: IPsec SA established tunnel mode {ESP/NAT=>0x0139a214 <0x3243d892 xfrm=AES_256-HMAC_SHA1 NATOA=none NATD=109.xxx.xxx.xxx:47693 DPD=none}