[Openswan Users] Windows Xp client to openswan

Mon Mar 20 16:28:41 CET 2006

Hello,

I have some improvements but I still cannot make the connection..

Here is the summary of my problem again;

Our work place has 192.168.1.0/24 subnet for office use and I have another
LAN for test purposes within this office network. My test LAN has
10.10.10.0/24 subnet and has a connection to the 192.168.1.0/24 office
network through a router gateway.  In my test LAN, I have a Linux machine
(Suse 10.0) kernel 2.6.13. This linux machine is also a DHCP server for the
test LAN. I want remote windows and linux clients to get IP addresses from
this DHCP server.

I installed CertificateAuthority (CA)  in the Linux Machine in my test LAN
and created x509 certificates for the
Linux machine and Windows client, transffered the certificates to
appropriate places and  to the Windows XP client. And then  I installed
Openswan 2.4.0 into the Linux machine, opened UDP 500 and UDP 4500 ports in
it's firewall.
I also opened UDP 500 and UDP 4500 ports on my router gateway machine as
well.

--  By using

#ipsec verify

command I get this from Linux Machine

Checking your system to see if IPsec got installed and started correctly:
Version check and ipsec on-path
  [OK]
Linux Openswan U2.4.0rc5/K2.6.13-15-smp (netkey)
Checking for IPsec support in kernel
[OK]
Checking for RSA private key (/etc/ipsec.secrets)                  [OK]

Checking that pluto is running
[OK]
Two or more interfaces found, checking IP forwarding             [OK]
Checking NAT and MASQUERADEing                                 [OK]
Checking for 'ip' command
[OK]
Checking for 'iptables' command
[OK]
Checking for 'curl' command for CRL fetching                        [OK]
Checking for 'setkey' command for NETKEY IPsec stack support            [OK]
Opportunistic Encryption Support
[Disabled]

so everything seems OK here.

--  IPSec service is running well at the Windows Machine.

--  I am using lsipsectool.exe at the Windows Machine. When I try to
establish a VPN connection between the Windows client and LInux Machine, the
connection has not been able to established. But if you look at the log
files, especially the log file from the linux machine and the windows event
viewer, it seems that Main mode and Quick mode associations are established.
Until I stop it, the lsipsectool.exe keep pinging without a success.

I went through all the log files, line by line, to see what problem is. As
far as linux box concerned, everything seems alright.

I couldn't interpret the oakley.log file completely.

Can anyone help me on this issue to solve my connection problem?
I would also appreciate if anyone send me a link or documentation to read to
interpret oakley.log file properly/

Thank very much for your time.

Can Akalin

>>>>>>>>>>>>>>>>>>>>>>> HERE IS THE LOG FILE FROM
lsipsectool<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

10:08:24: Starting Tunnel

10:08:25: IKE Encryption: 3des

IKE Integrity: md5

Remote Gateway Address: 192.168.1.55

Remote Monitor Address: 10.10.10.10

Remote Network: 10.10.10.0/255.255.255.0

Local Address: 192.168.1.72

Local Network: 192.168.1.72/255.255.255.255

10:08:28: 15 Consecutive Unsuccessfull ECHO REQUEST [ Waiting 5 Secs ]...

10:09:12: 30 Consecutive Unsuccessfull ECHO REQUEST [ Waiting 5 Secs ]...

10:09:54: 45 Consecutive Unsuccessfull ECHO REQUEST [ Waiting 5 Secs ]...

10:10:37: 60 Consecutive Unsuccessfull ECHO REQUEST [ Waiting 5 Secs ]...

10:10:41: Stoping Tunnel

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>HERE IS THE LOG FILE FROM WINDOWS EVENT
VIEWER<<<<<<<<<<<<<<<<<<<<<<<<<<<

IKE security association established.

 Mode:

Key Exchange Mode (Main Mode)

 Peer Identity:

Certificate based Identity.

Peer Subject C=CA, S=Ontario, L=Toronto, O=Internet Widgits Pty Ltd, OU=SRN,
CN=deneme1, E=deneme1 at springboardnetworks.com

Peer SHA Thumbprint 173111919eb4dc726dc3cf2f1d6e1d9489f9e522

Peer Issuing Certificate Authority C=CA, S=Ontario, L=Toronto, O=Springboard
Retail Networks Inc., CN=OzgUN, E=ozgun at springboardnetworks.com

Root Certificate Authority C=CA, S=Ontario, L=Toronto, O=Springboard Retail
Networks Inc., CN=OzgUN, E=ozgun at springboardnetworks.com

My Subject C=CA, S=Ontario, O=Springboard Retail Networks Inc., CN=laptop,
E=laptop at springboardnetworks.com

My SHA Thumbprint 9f120fd256be49e28c1df547aef9a1256ebef09e

Peer IP Address: 192.168.1.55

 Filter:

Source IP Address 192.168.1.72

Source IP Address Mask 255.255.255.255

Destination IP Address 192.168.1.55

Destination IP Address Mask 255.255.255.255

Protocol 0

Source Port 0

Destination Port 0

IKE Local Addr 192.168.1.72

IKE Peer Addr 192.168.1.55

 Parameters:

ESP Algorithm Triple DES CBC

HMAC Algorithm SHA

Lifetime (sec) 350

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

IKE security association established.

 Mode:

Data Protection Mode (Quick Mode)

 Peer Identity:

Certificate based Identity.

Peer Subject C=CA, S=Ontario, L=Toronto, O=Internet Widgits Pty Ltd, OU=SRN,
CN=deneme1, E=deneme1 at springboardnetworks.com

Peer SHA Thumbprint 173111919eb4dc726dc3cf2f1d6e1d9489f9e522

Peer Issuing Certificate Authority C=CA, S=Ontario, L=Toronto, O=Springboard
Retail Networks Inc., CN=OzgUN, E=ozgun at springboardnetworks.com

Root Certificate Authority C=CA, S=Ontario, L=Toronto, O=Springboard Retail
Networks Inc., CN=OzgUN, E=ozgun at springboardnetworks.com

My Subject C=CA, S=Ontario, O=Springboard Retail Networks Inc., CN=laptop,
E=laptop at springboardnetworks.com

My SHA Thumbprint 9f120fd256be49e28c1df547aef9a1256ebef09e

Peer IP Address: 192.168.1.55

 Filter:

Source IP Address 192.168.1.72

Source IP Address Mask 255.255.255.255

Destination IP Address 10.10.10.0

Destination IP Address Mask 255.255.255.0

Protocol 0

Source Port 0

Destination Port 0

IKE Local Addr 192.168.1.72

IKE Peer Addr 192.168.1.55

 Parameters:

ESP Algorithm Triple DES CBC

HMAC Algorithm MD5

AH Algorithm None

Encapsulation 61443

InboundSpi 1867691868 (0x6f52b75c)

OutBoundSpi 1473643236 (0x57d602e4)

Lifetime (sec) 3600

Lifetime (kb) 100000

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

IKE security association ended.

 Mode: Data Protection (Quick mode) Filter:

Source IP Address 192.168.1.72

Source IP Address Mask 255.255.255.255

Destination IP Address 10.10.10.0

Destination IP Address Mask 255.255.255.0

Protocol 0

Source Port 0

Destination Port 0

IKE Local Addr 192.168.1.72

IKE Peer Addr 192.168.1.55

 Inbound SPI:

1867691868 (0x6f52b75c)

 Outbound SPI:

1473643236 (0x57d602e4)

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

IKE security association ended.

 Mode: Key Exchange (Main mode)

 Filter:

Source IP Address 192.168.1.72

Source IP Address Mask 255.255.255.255

Destination IP Address 192.168.1.55

Destination IP Address Mask 255.255.255.255

Protocol 0

Source Port 0

Destination Port 0

IKE Local Addr 192.168.1.72

IKE Peer Addr 192.168.1.55

>>>>>>>>>>>>>>>>>>>>>>>>>>>>LOG FILE FROM LINUX BOX
/var/log/messages<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

*Mar 17 10:08:47 linuxserver pluto[5747]*: packet from 192.168.1.72:500:
ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000004]

*Mar 17 10:08:47 linuxserver pluto[5747]:* packet from 192.168.1.72:500:
ignoring Vendor ID payload [FRAGMENTATION]

*Mar 17 10:08:47 linuxserver pluto[5747]*: packet from 192.168.1.72:500:
received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] method set
to=106

*Mar 17 10:08:47 linuxserver pluto[5747]*: packet from 192.168.1.72:500:
ignoring Vendor ID payload [Vid-Initial-Contact]

*Mar 17 10:08:47 linuxserver pluto[5747]:* "roadwarrior"[1] 192.168.1.72 #1:
responding to Main Mode from unknown peer 192.168.1.72

*Mar 17 10:08:47 linuxserver pluto[5747]:* "roadwarrior"[1] 192.168.1.72 #1:
transition from state STATE_MAIN_R0 to state STATE_MAIN_R1

*Mar 17 10:08:47 linuxserver pluto[5747]:* "roadwarrior"[1] 192.168.1.72 #1:
STATE_MAIN_R1: sent MR1, expecting MI2

*Mar 17 10:08:47 linuxserver pluto[5747]:* "roadwarrior"[1] 192.168.1.72 #1:
NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike-02/03: i am NATed

*Mar 17 10:08:47 linuxserver pluto[5747]:* "roadwarrior"[1] 192.168.1.72 #1:
transition from state STATE_MAIN_R1 to state STATE_MAIN_R2

*Mar 17 10:08:47 linuxserver pluto[5747]*: "roadwarrior"[1] 192.168.1.72 #1:
STATE_MAIN_R2: sent MR2, expecting MI3

*Mar 17 10:08:47 linuxserver pluto[5747]:* "roadwarrior"[1] 192.168.1.72 #1:
Main mode peer ID is ID_DER_ASN1_DN: 'C=CA, ST=Ontario, O=Springboard Retail
Networks Inc., CN=laptop, E=laptop at springboardnetworks.com'

*Mar 17 10:08:47 linuxserver pluto[5747]:* "roadwarrior"[2] 192.168.1.72 #1:
deleting connection "roadwarrior" instance with peer
192.168.1.72{isakmp=#0/ipsec=#0}

*Mar 17 10:08:47 linuxserver pluto[5747]*: "roadwarrior"[2] 192.168.1.72 #1:
I am sending my cert

*Mar 17 10:08:47 linuxserver pluto[5747]:* "roadwarrior"[2] 192.168.1.72 #1:
transition from state STATE_MAIN_R2 to state STATE_MAIN_R3

*Mar 17 10:08:47 linuxserver pluto[5747]: *| NAT-T: new mapping
192.168.1.72:500/4500)

*Mar 17 10:08:47 linuxserver pluto[5747]:* "roadwarrior"[2] 192.168.1.72 #1:
STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_RSA_SIG
cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp1024}

*Mar 17 10:08:48 linuxserver pluto[5747]:* "roadwarrior-net"[1]
192.168.1.72#2: responding to Quick Mode {msgid:cd161ee4}

*Mar 17 10:08:48 linuxserver pluto[5747]:* "roadwarrior-net"[1]
192.168.1.72#2: transition from state STATE_QUICK_R0 to state
STATE_QUICK_R1

*Mar 17 10:08:48 linuxserver pluto[5747]:* "roadwarrior-net"[1]
192.168.1.72#2: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed,
expecting QI2

*Mar 17 10:08:48 linuxserver pluto[5747]:* "roadwarrior-net"[1]
192.168.1.72#2: transition from state STATE_QUICK_R1 to state
STATE_QUICK_R2

*Mar 17 10:08:48 linuxserver pluto[5747]:* "roadwarrior-net"[1]
192.168.1.72#2: STATE_QUICK_R2: IPsec SA established {ESP=>0x6f52b75c
<0x57d602e4
xfrm=3DES_0-HMAC_MD5 NATD=192.168.1.72:4500 DPD=none}

*Mar 17 10:11:03 linuxserver pluto[5747]*: "roadwarrior"[2] 192.168.1.72 #1:
received Delete SA(0x6f52b75c) payload: deleting IPSEC State #2

*Mar 17 10:11:03 linuxserver pluto[5747]:* "roadwarrior"[2] 192.168.1.72 #1:
deleting connection "roadwarrior-net" instance with peer
192.168.1.72{isakmp=#0/ipsec=#0}

*Mar 17 10:11:03 linuxserver pluto[5747]:* "roadwarrior"[2] 192.168.1.72 #1:
received and ignored informational message

*Mar 17 10:11:03 linuxserver pluto[5747]:* "roadwarrior"[2] 192.168.1.72 #1:
received Delete SA payload: deleting ISAKMP State #1

*Mar 17 10:11:03 linuxserver pluto[5747]:* "roadwarrior"[2] 192.168.1.72:
deleting connection "roadwarrior" instance with peer
192.168.1.72{isakmp=#0/ipsec=#0}

*Mar 17 10:11:03 linuxserver pluto[5747]:* packet from 192.168.1.72:4500:
received and ignored informational message

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> HERE IS THE LOG FILE FROM oakley.log
<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

3-17: 10:08:25:312:f24 Initialization OK

 3-17: 10:08:28:812:b0c Acquire from driver: op=00000006 src=192.168.1.72.0dst=
10.10.10.10.0 proto = 0, SrcMask=255.255.255.255, DstMask=255.255.255.0,
Tunnel 1, TunnelEndpt=192.168.1.55 Inbound TunnelEndpt=192.168.1.72

 3-17: 10:08:28:812:4a8 Filter to match: Src 192.168.1.55 Dst 192.168.1.72

 3-17: 10:08:28:843:4a8 MM PolicyName: 1

 3-17: 10:08:28:843:4a8 MMPolicy dwFlags 2 SoftSAExpireTime 3500

 3-17: 10:08:28:843:4a8 MMOffer[0] LifetimeSec 3500 QMLimit 0 DHGroup 2

 3-17: 10:08:28:843:4a8 MMOffer[0] Encrypt: Triple DES CBC Hash: SHA

 3-17: 10:08:28:859:4a8 Auth[0]:RSA Sig C=CA, S=Ontario, L=Toronto,
O=Springboard Retail Networks Inc., CN=OzgUN, E=
ozgun at springboardnetworks.com AuthFlags 0

 3-17: 10:08:28:859:4a8 QM PolicyName: x4
{896ab29d-cdc1-4e6f-aadf-474aae37fad3} dwFlags 1

 3-17: 10:08:28:859:4a8 QMOffer[0] LifetimeKBytes 0 LifetimeSec 0

 3-17: 10:08:28:859:4a8 QMOffer[0] dwFlags 0 dwPFSGroup -2147483648

 3-17: 10:08:28:859:4a8  Algo[0] Operation: ESP Algo: Triple DES CBC HMAC:
MD5

 3-17: 10:08:28:859:4a8 Starting Negotiation: src = 192.168.1.72.0500, dst =
192.168.1.55.0500, proto = 00, context = 00000006, ProxySrc =
192.168.1.72.0000, ProxyDst = 10.10.10.0.0000 SrcMask =
255.255.255.255DstMask =
255.255.255.0

 3-17: 10:08:28:859:4a8 constructing ISAKMP Header

 3-17: 10:08:28:859:4a8 constructing SA (ISAKMP)

 3-17: 10:08:28:859:4a8 Constructing Vendor MS NT5 ISAKMPOAKLEY

 3-17: 10:08:28:859:4a8 Constructing Vendor FRAGMENTATION

 3-17: 10:08:28:859:4a8 Constructing Vendor draft-ietf-ipsec-nat-t-ike-02

 3-17: 10:08:28:859:4a8 Constructing Vendor Vid-Initial-Contact

 3-17: 10:08:28:859:4a8

 3-17: 10:08:28:859:4a8 Sending: SA = 0x00103838 to 192.168.1.55:Type 2.500

 3-17: 10:08:28:859:4a8 ISAKMP Header: (V1.0), len = 168

 3-17: 10:08:28:859:4a8   I-COOKIE 9b3cc29bc2a91b7b

 3-17: 10:08:28:859:4a8   R-COOKIE 0000000000000000

 3-17: 10:08:28:859:4a8   exchange: Oakley Main Mode

 3-17: 10:08:28:859:4a8   flags: 0

 3-17: 10:08:28:859:4a8   next payload: SA

 3-17: 10:08:28:859:4a8   message ID: 00000000

 3-17: 10:08:28:859:4a8 Ports S:f401 D:f401

 3-17: 10:08:28:859:4a8

 3-17: 10:08:28:859:4a8 Receive: (get) SA = 0x00103838 from 192.168.1.55.500

 3-17: 10:08:28:859:4a8 ISAKMP Header: (V1.0), len = 140

 3-17: 10:08:28:859:4a8   I-COOKIE 9b3cc29bc2a91b7b

 3-17: 10:08:28:859:4a8   R-COOKIE fa8d7979591c3d4f

 3-17: 10:08:28:859:4a8   exchange: Oakley Main Mode

 3-17: 10:08:28:859:4a8   flags: 0

 3-17: 10:08:28:859:4a8   next payload: SA

 3-17: 10:08:28:859:4a8   message ID: 00000000

 3-17: 10:08:28:859:4a8 processing payload SA

 3-17: 10:08:28:859:4a8 Received Phase 1 Transform 1

 3-17: 10:08:28:859:4a8      Encryption Alg Triple DES CBC(5)

 3-17: 10:08:28:859:4a8      Hash Alg SHA(2)

 3-17: 10:08:28:859:4a8      Oakley Group 2

 3-17: 10:08:28:859:4a8      Auth Method RSA Signature with Certificates(3)

 3-17: 10:08:28:859:4a8      Life type in Seconds

 3-17: 10:08:28:859:4a8      Life duration of 3500

 3-17: 10:08:28:859:4a8 Phase 1 SA accepted: transform=1

 3-17: 10:08:28:859:4a8 SA - Oakley proposal accepted

 3-17: 10:08:28:859:4a8 processing payload VENDOR ID

 3-17: 10:08:28:859:4a8 processing payload VENDOR ID

 3-17: 10:08:28:859:4a8 processing payload VENDOR ID

 3-17: 10:08:28:859:4a8 Received VendorId draft-ietf-ipsec-nat-t-ike-02

 3-17: 10:08:28:859:4a8 ClearFragList

 3-17: 10:08:28:859:4a8 constructing ISAKMP Header

 3-17: 10:08:28:906:4a8 constructing KE

 3-17: 10:08:28:906:4a8 constructing NONCE (ISAKMP)

 3-17: 10:08:28:906:4a8 Constructing NatDisc

 3-17: 10:08:28:906:4a8

 3-17: 10:08:28:906:4a8 Sending: SA = 0x00103838 to 192.168.1.55:Type 2.500

 3-17: 10:08:28:906:4a8 ISAKMP Header: (V1.0), len = 232

 3-17: 10:08:28:906:4a8   I-COOKIE 9b3cc29bc2a91b7b

 3-17: 10:08:28:906:4a8   R-COOKIE fa8d7979591c3d4f

 3-17: 10:08:28:906:4a8   exchange: Oakley Main Mode

 3-17: 10:08:28:906:4a8   flags: 0

 3-17: 10:08:28:906:4a8   next payload: KE

 3-17: 10:08:28:906:4a8   message ID: 00000000

 3-17: 10:08:28:906:4a8 Ports S:f401 D:f401

 3-17: 10:08:28:921:4a8

 3-17: 10:08:28:921:4a8 Receive: (get) SA = 0x00103838 from 192.168.1.55.500

 3-17: 10:08:28:921:4a8 ISAKMP Header: (V1.0), len = 228

 3-17: 10:08:28:921:4a8   I-COOKIE 9b3cc29bc2a91b7b

 3-17: 10:08:28:921:4a8   R-COOKIE fa8d7979591c3d4f

 3-17: 10:08:28:921:4a8   exchange: Oakley Main Mode

 3-17: 10:08:28:921:4a8   flags: 0

 3-17: 10:08:28:921:4a8   next payload: KE

 3-17: 10:08:28:921:4a8   message ID: 00000000

 3-17: 10:08:28:921:4a8 processing payload KE

 3-17: 10:08:28:937:4a8 processing payload NONCE

 3-17: 10:08:28:937:4a8 processing payload NATDISC

 3-17: 10:08:28:937:4a8 Processing NatHash

 3-17: 10:08:28:937:4a8 Nat hash 3c4932af28025499da8acacbca96aeef

 3-17: 10:08:28:937:4a8 3d70fcee

 3-17: 10:08:28:937:4a8 SA StateMask2 f

 3-17: 10:08:28:937:4a8 processing payload NATDISC

 3-17: 10:08:28:937:4a8 Processing NatHash

 3-17: 10:08:28:937:4a8 Nat hash 7863a10d421512bd263dcf3009ea8c55

 3-17: 10:08:28:937:4a8 8a31c932

 3-17: 10:08:28:937:4a8 SA StateMask2 4f

 3-17: 10:08:28:937:4a8 ClearFragList

 3-17: 10:08:28:937:4a8 Peer behind NAT

 3-17: 10:08:28:937:4a8 Floated Ports Orig Me:f401 Peer:f401

 3-17: 10:08:28:937:4a8 Floated Ports Me:9411 Peer:9411

 3-17: 10:08:28:937:4a8 constructing ISAKMP Header

 3-17: 10:08:28:937:4a8 constructing ID

 3-17: 10:08:28:937:4a8 Received no valid CRPs.  Using all configured

 3-17: 10:08:28:937:4a8 Looking for IPSec only cert

 3-17: 10:08:28:968:4a8 Cert Trustes.  0 100

 3-17: 10:08:28:968:4a8 Cert SHA Thumbprint 9f120fd256be49e28c1df547aef9a125

 3-17: 10:08:28:968:4a8 6ebef09e

 3-17: 10:08:28:968:4a8 CertFindExtenstion failed with 0

 3-17: 10:08:29:78:4a8 Entered CRL check

 3-17: 10:08:29:93:4a8 Left CRL check

 3-17: 10:08:29:93:4a8 Cert SHA Thumbprint 9f120fd256be49e28c1df547aef9a125

 3-17: 10:08:29:93:4a8 6ebef09e

 3-17: 10:08:29:93:4a8 SubjectName: C=CA, S=Ontario, O=Springboard Retail
Networks Inc., CN=laptop, E=laptop at springboardnetworks.com

 3-17: 10:08:29:93:4a8 Cert Serialnumber 02

 3-17: 10:08:29:93:4a8 Cert SHA Thumbprint 9f120fd256be49e28c1df547aef9a125

 3-17: 10:08:29:93:4a8 6ebef09e

 3-17: 10:08:29:93:4a8 SubjectName: C=CA, S=Ontario, L=Toronto,
O=Springboard Retail Networks Inc., CN=OzgUN, E=
ozgun at springboardnetworks.com

 3-17: 10:08:29:93:4a8 Cert Serialnumber 7ce887a3f0e91dc800

 3-17: 10:08:29:93:4a8 Cert SHA Thumbprint f248c0125dda62bb3fa6c304e1784f8f

 3-17: 10:08:29:93:4a8 0225315f

 3-17: 10:08:29:93:4a8 Not storing My cert chain in SA.

 3-17: 10:08:29:93:4a8 MM ID Type 9

 3-17: 10:08:29:93:4a8 MM ID 30818a310b3009060355040613024341

 3-17: 10:08:29:93:4a8 3110300e060355040813074f6e746172

 3-17: 10:08:29:93:4a8 696f31293027060355040a1320537072

 3-17: 10:08:29:93:4a8 696e67626f6172642052657461696c20

 3-17: 10:08:29:93:4a8 4e6574776f726b7320496e632e310f30

 3-17: 10:08:29:93:4a8 0d060355040313066c6170746f70312d

 3-17: 10:08:29:93:4a8 302b06092a864886f70d010901161e6c

 3-17: 10:08:29:93:4a8 6170746f7040737072696e67626f6172

 3-17: 10:08:29:93:4a8 646e6574776f726b732e636f6d

 3-17: 10:08:29:93:4a8 constructing CERT

 3-17: 10:08:29:93:4a8 Construct SIG

 3-17: 10:08:29:93:4a8 Constructing Cert Request

 3-17: 10:08:29:93:4a8 C=CA, S=Ontario, L=Toronto, O=Springboard Retail
Networks Inc., CN=OzgUN, E=ozgun at springboardnetworks.com

 3-17: 10:08:29:93:4a8

 3-17: 10:08:29:93:4a8 Sending: SA = 0x00103838 to 192.168.1.55:Type 2.4500

 3-17: 10:08:29:93:4a8 ISAKMP Header: (V1.0), len = 1452

 3-17: 10:08:29:93:4a8   I-COOKIE 9b3cc29bc2a91b7b

 3-17: 10:08:29:93:4a8   R-COOKIE fa8d7979591c3d4f

 3-17: 10:08:29:93:4a8   exchange: Oakley Main Mode

 3-17: 10:08:29:93:4a8   flags: 1 ( encrypted )

 3-17: 10:08:29:93:4a8   next payload: ID

 3-17: 10:08:29:93:4a8   message ID: 00000000

 3-17: 10:08:29:93:4a8 Ports S:9411 D:9411

 3-17: 10:08:29:109:4a8

 3-17: 10:08:29:109:4a8 Receive: (get) SA = 0x00103838 from
192.168.1.55.4500

 3-17: 10:08:29:109:4a8 ISAKMP Header: (V1.0), len = 1348

 3-17: 10:08:29:109:4a8   I-COOKIE 9b3cc29bc2a91b7b

 3-17: 10:08:29:109:4a8   R-COOKIE fa8d7979591c3d4f

 3-17: 10:08:29:109:4a8   exchange: Oakley Main Mode

 3-17: 10:08:29:109:4a8   flags: 1 ( encrypted )

 3-17: 10:08:29:109:4a8   next payload: ID

 3-17: 10:08:29:109:4a8   message ID: 00000000

 3-17: 10:08:29:109:4a8 processing payload ID

 3-17: 10:08:29:109:4a8 processing payload CERT

 3-17: 10:08:29:109:4a8 processing payload SIG

 3-17: 10:08:29:109:4a8 Verifying CertStore

 3-17: 10:08:29:109:4a8 SubjectName: C=CA, S=Ontario, L=Toronto, O=Internet
Widgits Pty Ltd, OU=SRN, CN=deneme1, E=deneme1 at springboardnetworks.com

 3-17: 10:08:29:109:4a8 Cert Serialnumber 01

 3-17: 10:08:29:109:4a8 Cert SHA Thumbprint 173111919eb4dc726dc3cf2f1d6e1d94

 3-17: 10:08:29:109:4a8 89f9e522

 3-17: 10:08:29:109:4a8 Cert Trustes.  0 100

 3-17: 10:08:29:109:4a8 SubjectName: C=CA, S=Ontario, L=Toronto, O=Internet
Widgits Pty Ltd, OU=SRN, CN=deneme1, E=deneme1 at springboardnetworks.com

 3-17: 10:08:29:109:4a8 Cert Serialnumber 01

 3-17: 10:08:29:109:4a8 Cert SHA Thumbprint 173111919eb4dc726dc3cf2f1d6e1d94

 3-17: 10:08:29:109:4a8 89f9e522

 3-17: 10:08:29:109:4a8 SubjectName: C=CA, S=Ontario, L=Toronto,
O=Springboard Retail Networks Inc., CN=OzgUN, E=
ozgun at springboardnetworks.com

 3-17: 10:08:29:109:4a8 Cert Serialnumber 7ce887a3f0e91dc800

 3-17: 10:08:29:109:4a8 Cert SHA Thumbprint f248c0125dda62bb3fa6c304e1784f8f

 3-17: 10:08:29:109:4a8 0225315f

 3-17: 10:08:29:109:4a8 Not storing Peer's cert chain in SA.

 3-17: 10:08:29:109:4a8 Cert SHA Thumbprint 173111919eb4dc726dc3cf2f1d6e1d94

 3-17: 10:08:29:109:4a8 89f9e522

 3-17: 10:08:29:109:4a8 Entered CRL check

 3-17: 10:08:29:109:4a8 Left CRL check

 3-17: 10:08:29:109:4a8 CertFindExtenstion failed with 0

 3-17: 10:08:29:109:4a8 Signature validated

 3-17: 10:08:29:109:4a8 ClearFragList

 3-17: 10:08:29:109:4a8 MM established.  SA: 00103838

 3-17: 10:08:29:109:4a8 QM PolicyName: x4
{896ab29d-cdc1-4e6f-aadf-474aae37fad3} dwFlags 1

 3-17: 10:08:29:109:4a8 QMOffer[0] LifetimeKBytes 0 LifetimeSec 0

 3-17: 10:08:29:109:4a8 QMOffer[0] dwFlags 0 dwPFSGroup -2147483648

 3-17: 10:08:29:109:4a8  Algo[0] Operation: ESP Algo: Triple DES CBC HMAC:
MD5

 3-17: 10:08:29:109:4a8 GetSpi: src = 10.10.10.0.0000, dst =
192.168.1.72.0000, proto = 00, context = 00000006, srcMask = 255.255.255.0,
destMask = 255.255.255.255, TunnelFilter 1

 3-17: 10:08:29:109:4a8 Setting SPI  1867691868

 3-17: 10:08:29:109:4a8 constructing ISAKMP Header

 3-17: 10:08:29:109:4a8 constructing HASH (null)

 3-17: 10:08:29:109:4a8 constructing SA (IPSEC)

 3-17: 10:08:29:109:4a8 constructing QM KE

 3-17: 10:08:29:125:4a8 constructing NONCE (IPSEC)

 3-17: 10:08:29:125:4a8 constructing ID (proxy)

 3-17: 10:08:29:125:4a8 constructing ID (proxy)

 3-17: 10:08:29:125:4a8 constructing HASH (QM)

 3-17: 10:08:29:125:4a8

 3-17: 10:08:29:125:4a8 Sending: SA = 0x00103838 to 192.168.1.55:Type 2.4500

 3-17: 10:08:29:125:4a8 ISAKMP Header: (V1.0), len = 284

 3-17: 10:08:29:125:4a8   I-COOKIE 9b3cc29bc2a91b7b

 3-17: 10:08:29:125:4a8   R-COOKIE fa8d7979591c3d4f

 3-17: 10:08:29:125:4a8   exchange: Oakley Quick Mode

 3-17: 10:08:29:125:4a8   flags: 1 ( encrypted )

 3-17: 10:08:29:125:4a8   next payload: HASH

 3-17: 10:08:29:125:4a8   message ID: e41e16cd

 3-17: 10:08:29:125:4a8 Ports S:9411 D:9411

 3-17: 10:08:29:140:4a8

 3-17: 10:08:29:140:4a8 Receive: (get) SA = 0x00103838 from
192.168.1.55.4500

 3-17: 10:08:29:140:4a8 ISAKMP Header: (V1.0), len = 276

 3-17: 10:08:29:140:4a8   I-COOKIE 9b3cc29bc2a91b7b

 3-17: 10:08:29:140:4a8   R-COOKIE fa8d7979591c3d4f

 3-17: 10:08:29:140:4a8   exchange: Oakley Quick Mode

 3-17: 10:08:29:140:4a8   flags: 1 ( encrypted )

 3-17: 10:08:29:140:4a8   next payload: HASH

 3-17: 10:08:29:140:4a8   message ID: e41e16cd

 3-17: 10:08:29:140:4a8 processing HASH (QM)

 3-17: 10:08:29:140:4a8 ClearFragList

 3-17: 10:08:29:140:4a8 processing payload NONCE

 3-17: 10:08:29:140:4a8 processing payload KE

 3-17: 10:08:29:140:4a8 Quick Mode KE processed; Saved KE data

 3-17: 10:08:29:140:4a8 processing payload ID

 3-17: 10:08:29:140:4a8 processing payload ID

 3-17: 10:08:29:140:4a8 processing payload SA

 3-17: 10:08:29:140:4a8 Negotiated Proxy ID: Src 192.168.1.72.0 Dst
10.10.10.0.0

 3-17: 10:08:29:140:4a8 Dst id for subnet.  Mask 255.255.255.0

 3-17: 10:08:29:140:4a8 Checking Proposal 1: Proto= ESP(3), num trans=1
Next=0

 3-17: 10:08:29:140:4a8 Checking Transform # 1: ID=Triple DES CBC(3)

 3-17: 10:08:29:140:4a8  tunnel mode is 61443(61443)

 3-17: 10:08:29:140:4a8  HMAC algorithm is MD5(1)

 3-17: 10:08:29:140:4a8  group description for PFS is 2

 3-17: 10:08:29:140:4a8 Phase 2 SA accepted: proposal=1 transform=1

 3-17: 10:08:29:140:4a8 constructing ISAKMP Header

 3-17: 10:08:29:140:4a8 constructing HASH (QM)

 3-17: 10:08:29:140:4a8 Adding QMs: src = 192.168.1.72.0000, dst =
10.10.10.0.0000, proto = 00, context = 00000006, my tunnel = 192.168.1.72,
peer tunnel = 192.168.1.55, SrcMask = 0.0.0.0, DestMask =
255.255.255.0Lifetime = 3600 LifetimeKBytes 100000 dwFlags 301
Direction 2 EncapType 3

 3-17: 10:08:29:140:4a8  Algo[0] Operation: ESP Algo: Triple DES CBC HMAC:
MD5

 3-17: 10:08:29:140:4a8  Algo[0] MySpi: 1867691868 PeerSpi: 1473643236

 3-17: 10:08:29:140:4a8 Encap Ports Src 4500 Dst 4500

 3-17: 10:08:29:140:4a8 Skipping Outbound SA add

 3-17: 10:08:29:140:4a8 Adding QMs: src = 192.168.1.72.0000, dst =
10.10.10.0.0000, proto = 00, context = 00000006, my tunnel = 192.168.1.72,
peer tunnel = 192.168.1.55, SrcMask = 0.0.0.0, DestMask =
255.255.255.0Lifetime = 3600 LifetimeKBytes 100000 dwFlags 301
Direction 3 EncapType 3

 3-17: 10:08:29:140:4a8  Algo[0] Operation: ESP Algo: Triple DES CBC HMAC:
MD5

 3-17: 10:08:29:140:4a8  Algo[0] MySpi: 1867691868 PeerSpi: 1473643236

 3-17: 10:08:29:140:4a8 Encap Ports Src 4500 Dst 4500

 3-17: 10:08:29:140:4a8 Skipping Inbound SA add

 3-17: 10:08:29:140:4a8 Leaving adjust_peer_list entry 0014FD30 MMCount 0
QMCount 1

 3-17: 10:08:29:140:4a8 isadb_set_status sa:00103838 centry:0014F288 status
0

 3-17: 10:08:29:140:4a8

 3-17: 10:08:29:140:4a8 Sending: SA = 0x00103838 to 192.168.1.55:Type 4.4500

 3-17: 10:08:29:140:4a8 ISAKMP Header: (V1.0), len = 52

 3-17: 10:08:29:140:4a8   I-COOKIE 9b3cc29bc2a91b7b

 3-17: 10:08:29:140:4a8   R-COOKIE fa8d7979591c3d4f

 3-17: 10:08:29:140:4a8   exchange: Oakley Quick Mode

 3-17: 10:08:29:140:4a8   flags: 1 ( encrypted )

 3-17: 10:08:29:140:4a8   next payload: HASH

 3-17: 10:08:29:140:4a8   message ID: e41e16cd

 3-17: 10:08:29:140:4a8 Ports S:9411 D:9411

 3-17: 10:09:29:156:4a8 CE Dead. sa:00103838 ce:0014F288 status:35ef

 3-17: 10:10:44:781:f24 isadb_schedule_kill_oldPolicy_sas:
390ea48b-2f34-45bc-84b5e0e9fd360e32 4

 3-17: 10:10:44:781:f24 isadb_schedule_kill_oldPolicy_sas:
d277ddac-d2a3-4c73-8e8962aaaddcaa1a 4

 3-17: 10:10:44:781:f24 isadb_schedule_kill_oldPolicy_sas:
4a44cc5c-26ce-4b4b-8cbce593d6d19698 3

 3-17: 10:10:44:781:f24 isadb_schedule_kill_oldPolicy_sas:
b3b897d2-4b4e-4573-8fdfc3c090837cb4 3

 3-17: 10:10:44:781:f24 isadb_schedule_kill_oldPolicy_sas:
5e6807f5-271a-4210-b2fe1e292fabd86b 1

 3-17: 10:10:44:781:f24 isadb_schedule_kill_oldPolicy_sas:
896ab29d-cdc1-4e6f-aadf474aae37fad3 2

 3-17: 10:10:44:781:4a8 QM Deleted. Notify from driver: Src 192.168.1.72Dest
10.10.10.0 InSPI 1867691868 OutSpi 1473643236  Tunnel 3701a8c0 TunnelFilter
0

 3-17: 10:10:44:781:4a8 Leaving adjust_peer_list entry 0014FD30 MMCount 0
QMCount 0

 3-17: 10:10:44:781:4a8 constructing ISAKMP Header

 3-17: 10:10:44:781:4a8 constructing HASH (null)

 3-17: 10:10:44:781:4a8 Construct QM Delete Spi 1867691868

 3-17: 10:10:44:781:4a8 constructing HASH (Notify/Delete)

 3-17: 10:10:44:781:4a8 Not setting retransmit to downlevel client. SA
00103838 Centry 00000000

 3-17: 10:10:44:781:4a8

 3-17: 10:10:44:781:4a8 Sending: SA = 0x00103838 to 192.168.1.55:Type 1.4500

 3-17: 10:10:44:781:4a8 ISAKMP Header: (V1.0), len = 68

 3-17: 10:10:44:781:4a8   I-COOKIE 9b3cc29bc2a91b7b

 3-17: 10:10:44:781:4a8   R-COOKIE fa8d7979591c3d4f

 3-17: 10:10:44:781:4a8   exchange: ISAKMP Informational Exchange

 3-17: 10:10:44:781:4a8   flags: 1 ( encrypted )

 3-17: 10:10:44:781:4a8   next payload: HASH

 3-17: 10:10:44:781:4a8   message ID: b419754f

 3-17: 10:10:44:781:4a8 Ports S:9411 D:9411

 3-17: 10:10:44:781:4a8 PrivatePeerAddr 0

 3-17: 10:10:44:781:4a8

 3-17: 10:10:44:781:4a8 Receive: (get) SA = 0x00103838 from
192.168.1.55.4500

 3-17: 10:10:44:781:4a8 ISAKMP Header: (V1.0), len = 68

 3-17: 10:10:44:781:4a8   I-COOKIE 9b3cc29bc2a91b7b

 3-17: 10:10:44:781:4a8   R-COOKIE fa8d7979591c3d4f

 3-17: 10:10:44:781:4a8   exchange: ISAKMP Informational Exchange

 3-17: 10:10:44:781:4a8   flags: 1 ( encrypted )

 3-17: 10:10:44:781:4a8   next payload: HASH

 3-17: 10:10:44:781:4a8   message ID: ce23b7ef

 3-17: 10:10:44:781:4a8 processing HASH (Notify/Delete)

 3-17: 10:10:44:781:4a8 processing payload DELETE

 3-17: 10:10:44:781:4a8 Asked to delete phase2 SPI we don't own: 1473643236
proto=3

 3-17: 10:10:44:796:4a8 entered kill_old_policy_sas 4

 3-17: 10:10:44:796:4a8 SA Dead. sa:00103838 status:3619

 3-17: 10:10:44:796:4a8 isadb_set_status sa:00103838 centry:00000000 status
3619

 3-17: 10:10:44:796:4a8 constructing ISAKMP Header

 3-17: 10:10:44:796:4a8 constructing HASH (null)

 3-17: 10:10:44:796:4a8 constructing DELETE. MM 00103838

 3-17: 10:10:44:796:4a8 constructing HASH (Notify/Delete)

 3-17: 10:10:44:796:4a8 Not setting retransmit to downlevel client. SA
00103838 Centry 00000000

 3-17: 10:10:44:796:4a8

 3-17: 10:10:44:796:4a8 Sending: SA = 0x00103838 to 192.168.1.55:Type 1.4500

 3-17: 10:10:44:796:4a8 ISAKMP Header: (V1.0), len = 84

 3-17: 10:10:44:796:4a8   I-COOKIE 9b3cc29bc2a91b7b

 3-17: 10:10:44:796:4a8   R-COOKIE fa8d7979591c3d4f

 3-17: 10:10:44:796:4a8   exchange: ISAKMP Informational Exchange

 3-17: 10:10:44:796:4a8   flags: 1 ( encrypted )

 3-17: 10:10:44:796:4a8   next payload: HASH

 3-17: 10:10:44:796:4a8   message ID: 6ed30851

 3-17: 10:10:44:796:4a8 Ports S:9411 D:9411

 3-17: 10:10:44:796:4a8 entered kill_old_policy_sas 4

 3-17: 10:10:44:796:4a8 entered kill_old_policy_sas 3

 3-17: 10:10:44:796:4a8 entered kill_old_policy_sas 3

 3-17: 10:10:44:796:4a8 entered kill_old_policy_sas 1

 3-17: 10:10:44:796:4a8 entered kill_old_policy_sas 2

 3-17: 10:10:44:812:780

 3-17: 10:10:44:812:780 Receive: (get) SA = 0x00103838 from
192.168.1.55.4500

 3-17: 10:10:44:812:780 ISAKMP Header: (V1.0), len = 84

 3-17: 10:10:44:812:780   I-COOKIE 9b3cc29bc2a91b7b

 3-17: 10:10:44:812:780   R-COOKIE fa8d7979591c3d4f

 3-17: 10:10:44:812:780   exchange: ISAKMP Informational Exchange

 3-17: 10:10:44:812:780   flags: 1 ( encrypted )

 3-17: 10:10:44:812:780   next payload: HASH

 3-17: 10:10:44:812:780   message ID: 27d9c0f2

 3-17: 10:10:44:812:780 processing HASH (Notify/Delete)

 3-17: 10:10:44:812:780 processing payload DELETE
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20060320/1d3f08bb/attachment-0001.htm