[Openswan Users] Problems connecting to IPSec server
Martin Krellmann
martin at krellmann.net
Sat Sep 22 09:33:06 EDT 2007
Hi.
I have problems establishing a connection to my Openswan IPSec server
(U2.4.9/K2.6.11.4-21.17-default; it runs on SuSE Linux 9.3) via the Windowd
XP (x64 SP2) VPN client.
It is configured to L2TP-IPSec and certificate auth, the certificates are
installed.
The problems seems to be here:
Sep 21 18:11:21 vpngate pluto[7279]: "l2tp-cert-orgWIN2KXP" #3: next payload
type of ISAKMP Hash Payload has an unknown value: 91
Sep 21 18:11:21 vpngate pluto[7279]: "l2tp-cert-orgWIN2KXP" #3: malformed
payload in packet
Sep 21 18:11:21 vpngate pluto[7279]: | payload malformed after IV
What am I supposed to do?
Greetings,
Martin.
Complete messagelog:
Sep 21 18:11:20 vpngate pluto[7279]: |
Sep 21 18:11:20 vpngate pluto[7279]: | *received 312 bytes from
192.168.10.11:500 on eth1 (port=500)
Sep 21 18:11:20 vpngate pluto[7279]: | 21 9b 3e bf 7d 60 bf b9 00 00 00
00 00 00 00 00
Sep 21 18:11:20 vpngate pluto[7279]: | 01 10 02 00 00 00 00 00 00 00 01
38 0d 00 00 c8
Sep 21 18:11:20 vpngate pluto[7279]: | 00 00 00 01 00 00 00 01 00 00 00
bc 01 01 00 05
Sep 21 18:11:20 vpngate pluto[7279]: | 03 00 00 24 01 01 00 00 80 01 00
05 80 02 00 02
Sep 21 18:11:20 vpngate pluto[7279]: | 80 04 00 0e 80 03 00 03 80 0b 00
01 00 0c 00 04
Sep 21 18:11:20 vpngate pluto[7279]: | 00 00 70 80 03 00 00 24 02 01 00
00 80 01 00 05
Sep 21 18:11:20 vpngate pluto[7279]: | 80 02 00 02 80 04 00 02 80 03 00
03 80 0b 00 01
Sep 21 18:11:20 vpngate pluto[7279]: | 00 0c 00 04 00 00 70 80 03 00 00
24 03 01 00 00
Sep 21 18:11:20 vpngate pluto[7279]: | 80 01 00 05 80 02 00 01 80 04 00
02 80 03 00 03
Sep 21 18:11:20 vpngate pluto[7279]: | 80 0b 00 01 00 0c 00 04 00 00 70
80 03 00 00 24
Sep 21 18:11:20 vpngate pluto[7279]: | 04 01 00 00 80 01 00 01 80 02 00
02 80 04 00 01
Sep 21 18:11:20 vpngate pluto[7279]: | 80 03 00 03 80 0b 00 01 00 0c 00
04 00 00 70 80
Sep 21 18:11:20 vpngate pluto[7279]: | 00 00 00 24 05 01 00 00 80 01 00
01 80 02 00 01
Sep 21 18:11:20 vpngate pluto[7279]: | 80 04 00 01 80 03 00 03 80 0b 00
01 00 0c 00 04
Sep 21 18:11:20 vpngate pluto[7279]: | 00 00 70 80 0d 00 00 18 1e 2b 51
69 05 99 1c 7d
Sep 21 18:11:20 vpngate pluto[7279]: | 7c 96 fc bf b5 87 e4 61 00 00 00
04 0d 00 00 14
Sep 21 18:11:20 vpngate pluto[7279]: | 40 48 b7 d5 6e bc e8 85 25 e7 de
7f 00 d6 c2 d3
Sep 21 18:11:20 vpngate pluto[7279]: | 0d 00 00 14 90 cb 80 91 3e bb 69
6e 08 63 81 b5
Sep 21 18:11:20 vpngate pluto[7279]: | ec 42 7b 1f 00 00 00 14 26 24 4d
38 ed db 61 b3
Sep 21 18:11:20 vpngate pluto[7279]: | 17 2a 36 e3 d0 cf b8 19
Sep 21 18:11:20 vpngate pluto[7279]: | **parse ISAKMP Message:
Sep 21 18:11:20 vpngate pluto[7279]: | initiator cookie:
Sep 21 18:11:20 vpngate pluto[7279]: | 21 9b 3e bf 7d 60 bf b9
Sep 21 18:11:20 vpngate pluto[7279]: | responder cookie:
Sep 21 18:11:20 vpngate pluto[7279]: | 00 00 00 00 00 00 00 00
Sep 21 18:11:20 vpngate pluto[7279]: | next payload type: ISAKMP_NEXT_SA
Sep 21 18:11:20 vpngate pluto[7279]: | ISAKMP version: ISAKMP Version 1.0
Sep 21 18:11:20 vpngate pluto[7279]: | exchange type: ISAKMP_XCHG_IDPROT
Sep 21 18:11:20 vpngate pluto[7279]: | flags: none
Sep 21 18:11:20 vpngate pluto[7279]: | message ID: 00 00 00 00
Sep 21 18:11:20 vpngate pluto[7279]: | length: 312
Sep 21 18:11:20 vpngate pluto[7279]: | processing packet with exchange
type=ISAKMP_XCHG_IDPROT (2)
Sep 21 18:11:20 vpngate pluto[7279]: | np=1 and sd=0x80e8a80
Sep 21 18:11:20 vpngate pluto[7279]: | ***parse ISAKMP Security Association
Payload:
Sep 21 18:11:20 vpngate pluto[7279]: | next payload type: ISAKMP_NEXT_VID
Sep 21 18:11:20 vpngate pluto[7279]: | length: 200
Sep 21 18:11:20 vpngate pluto[7279]: | DOI: ISAKMP_DOI_IPSEC
Sep 21 18:11:20 vpngate pluto[7279]: | np=13 and sd=0x80e8450
Sep 21 18:11:20 vpngate pluto[7279]: | ***parse ISAKMP Vendor ID Payload:
Sep 21 18:11:20 vpngate pluto[7279]: | next payload type: ISAKMP_NEXT_VID
Sep 21 18:11:20 vpngate pluto[7279]: | length: 24
Sep 21 18:11:20 vpngate pluto[7279]: | np=13 and sd=0x80e8450
Sep 21 18:11:20 vpngate pluto[7279]: | ***parse ISAKMP Vendor ID Payload:
Sep 21 18:11:20 vpngate pluto[7279]: | next payload type: ISAKMP_NEXT_VID
Sep 21 18:11:20 vpngate pluto[7279]: | length: 20
Sep 21 18:11:20 vpngate pluto[7279]: | np=13 and sd=0x80e8450
Sep 21 18:11:20 vpngate pluto[7279]: | ***parse ISAKMP Vendor ID Payload:
Sep 21 18:11:20 vpngate pluto[7279]: | next payload type: ISAKMP_NEXT_VID
Sep 21 18:11:20 vpngate pluto[7279]: | length: 20
Sep 21 18:11:20 vpngate pluto[7279]: | np=13 and sd=0x80e8450
Sep 21 18:11:20 vpngate pluto[7279]: | ***parse ISAKMP Vendor ID Payload:
Sep 21 18:11:20 vpngate pluto[7279]: | next payload type:
ISAKMP_NEXT_NONE
Sep 21 18:11:20 vpngate pluto[7279]: | length: 20
Sep 21 18:11:20 vpngate pluto[7279]: packet from 192.168.10.11:500: ignoring
Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000004]
Sep 21 18:11:20 vpngate pluto[7279]: packet from 192.168.10.11:500: ignoring
Vendor ID payload [FRAGMENTATION]
Sep 21 18:11:20 vpngate pluto[7279]: packet from 192.168.10.11:500: received
Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but port
floating is off
Sep 21 18:11:20 vpngate pluto[7279]: packet from 192.168.10.11:500: ignoring
Vendor ID payload [Vid-Initial-Contact]
Sep 21 18:11:20 vpngate pluto[7279]: | find_host_connection called from
main_inI1_outR1
Sep 21 18:11:20 vpngate pluto[7279]: | find_host_pair: comparing to
192.168.10.253:500 192.168.10.11:500
Sep 21 18:11:20 vpngate pluto[7279]: | find_host_pair_conn
(find_host_connection2): 192.168.10.253:500 192.168.10.11:500 ->
hp:l2tp-cert-orgWIN2KXP
Sep 21 18:11:20 vpngate pluto[7279]: | creating state object #3 at 0x8107330
Sep 21 18:11:20 vpngate pluto[7279]: | processing connection
l2tp-cert-orgWIN2KXP
Sep 21 18:11:20 vpngate pluto[7279]: | ICOOKIE: 21 9b 3e bf 7d 60 bf b9
Sep 21 18:11:20 vpngate pluto[7279]: | RCOOKIE: 56 48 06 c5 e1 7e 96 8d
Sep 21 18:11:20 vpngate pluto[7279]: | peer: c0 a8 0a 0b
Sep 21 18:11:20 vpngate pluto[7279]: | state hash entry 2
Sep 21 18:11:20 vpngate pluto[7279]: | inserting event EVENT_SO_DISCARD,
timeout in 0 seconds for #3
Sep 21 18:11:20 vpngate pluto[7279]: "l2tp-cert-orgWIN2KXP" #3: responding
to Main Mode
Sep 21 18:11:20 vpngate pluto[7279]: | **emit ISAKMP Message:
Sep 21 18:11:20 vpngate pluto[7279]: | initiator cookie:
Sep 21 18:11:20 vpngate pluto[7279]: | 21 9b 3e bf 7d 60 bf b9
Sep 21 18:11:20 vpngate pluto[7279]: | responder cookie:
Sep 21 18:11:20 vpngate pluto[7279]: | 56 48 06 c5 e1 7e 96 8d
Sep 21 18:11:20 vpngate pluto[7279]: | next payload type: ISAKMP_NEXT_SA
Sep 21 18:11:20 vpngate pluto[7279]: | ISAKMP version: ISAKMP Version 1.0
Sep 21 18:11:20 vpngate pluto[7279]: | exchange type: ISAKMP_XCHG_IDPROT
Sep 21 18:11:20 vpngate pluto[7279]: | flags: none
Sep 21 18:11:20 vpngate pluto[7279]: | message ID: 00 00 00 00
Sep 21 18:11:20 vpngate pluto[7279]: | ***emit ISAKMP Security Association
Payload:
Sep 21 18:11:20 vpngate pluto[7279]: | next payload type: ISAKMP_NEXT_VID
Sep 21 18:11:20 vpngate pluto[7279]: | DOI: ISAKMP_DOI_IPSEC
Sep 21 18:11:20 vpngate pluto[7279]: | ****parse IPsec DOI SIT:
Sep 21 18:11:20 vpngate pluto[7279]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
Sep 21 18:11:20 vpngate pluto[7279]: | ****parse ISAKMP Proposal Payload:
Sep 21 18:11:20 vpngate pluto[7279]: | next payload type:
ISAKMP_NEXT_NONE
Sep 21 18:11:20 vpngate pluto[7279]: | length: 188
Sep 21 18:11:20 vpngate pluto[7279]: | proposal number: 1
Sep 21 18:11:20 vpngate pluto[7279]: | protocol ID: PROTO_ISAKMP
Sep 21 18:11:20 vpngate pluto[7279]: | SPI size: 0
Sep 21 18:11:20 vpngate pluto[7279]: | number of transforms: 5
Sep 21 18:11:20 vpngate pluto[7279]: | *****parse ISAKMP Transform Payload
(ISAKMP):
Sep 21 18:11:20 vpngate pluto[7279]: | next payload type: ISAKMP_NEXT_T
Sep 21 18:11:20 vpngate pluto[7279]: | length: 36
Sep 21 18:11:20 vpngate pluto[7279]: | transform number: 1
Sep 21 18:11:20 vpngate pluto[7279]: | transform ID: KEY_IKE
Sep 21 18:11:20 vpngate pluto[7279]: | ******parse ISAKMP Oakley attribute:
Sep 21 18:11:20 vpngate pluto[7279]: | af+type:
OAKLEY_ENCRYPTION_ALGORITHM
Sep 21 18:11:20 vpngate pluto[7279]: | length/value: 5
Sep 21 18:11:20 vpngate pluto[7279]: | [5 is OAKLEY_3DES_CBC]
Sep 21 18:11:20 vpngate pluto[7279]: | ike_alg_enc_ok(ealg=5,key_len=0):
blocksize=8, keyminlen=192, keydeflen=192, keymaxlen=192, ret=1
Sep 21 18:11:20 vpngate pluto[7279]: | ******parse ISAKMP Oakley attribute:
Sep 21 18:11:20 vpngate pluto[7279]: | af+type: OAKLEY_HASH_ALGORITHM
Sep 21 18:11:20 vpngate pluto[7279]: | length/value: 2
Sep 21 18:11:20 vpngate pluto[7279]: | [2 is OAKLEY_SHA1]
Sep 21 18:11:20 vpngate pluto[7279]: | ******parse ISAKMP Oakley attribute:
Sep 21 18:11:20 vpngate pluto[7279]: | af+type: OAKLEY_GROUP_DESCRIPTION
Sep 21 18:11:20 vpngate pluto[7279]: | length/value: 14
Sep 21 18:11:20 vpngate pluto[7279]: | [14 is OAKLEY_GROUP_MODP2048]
Sep 21 18:11:20 vpngate pluto[7279]: | ******parse ISAKMP Oakley attribute:
Sep 21 18:11:20 vpngate pluto[7279]: | af+type:
OAKLEY_AUTHENTICATION_METHOD
Sep 21 18:11:20 vpngate pluto[7279]: | length/value: 3
Sep 21 18:11:20 vpngate pluto[7279]: | [3 is OAKLEY_RSA_SIG]
Sep 21 18:11:20 vpngate pluto[7279]: | ******parse ISAKMP Oakley attribute:
Sep 21 18:11:20 vpngate pluto[7279]: | af+type: OAKLEY_LIFE_TYPE
Sep 21 18:11:20 vpngate pluto[7279]: | length/value: 1
Sep 21 18:11:20 vpngate pluto[7279]: | [1 is OAKLEY_LIFE_SECONDS]
Sep 21 18:11:20 vpngate pluto[7279]: | ******parse ISAKMP Oakley attribute:
Sep 21 18:11:20 vpngate pluto[7279]: | af+type: OAKLEY_LIFE_DURATION
(variable length)
Sep 21 18:11:20 vpngate pluto[7279]: | length/value: 4
Sep 21 18:11:20 vpngate pluto[7279]: | long duration: 28800
Sep 21 18:11:20 vpngate pluto[7279]: | Oakley Transform 1 accepted
Sep 21 18:11:20 vpngate pluto[7279]: | ****emit IPsec DOI SIT:
Sep 21 18:11:20 vpngate pluto[7279]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
Sep 21 18:11:20 vpngate pluto[7279]: | ****emit ISAKMP Proposal Payload:
Sep 21 18:11:20 vpngate pluto[7279]: | next payload type:
ISAKMP_NEXT_NONE
Sep 21 18:11:20 vpngate pluto[7279]: | proposal number: 1
Sep 21 18:11:20 vpngate pluto[7279]: | protocol ID: PROTO_ISAKMP
Sep 21 18:11:20 vpngate pluto[7279]: | SPI size: 0
Sep 21 18:11:20 vpngate pluto[7279]: | number of transforms: 1
Sep 21 18:11:20 vpngate pluto[7279]: | *****emit ISAKMP Transform Payload
(ISAKMP):
Sep 21 18:11:20 vpngate pluto[7279]: | next payload type:
ISAKMP_NEXT_NONE
Sep 21 18:11:20 vpngate pluto[7279]: | transform number: 1
Sep 21 18:11:20 vpngate pluto[7279]: | transform ID: KEY_IKE
Sep 21 18:11:20 vpngate pluto[7279]: | emitting 28 raw bytes of attributes
into ISAKMP Transform Payload (ISAKMP)
Sep 21 18:11:20 vpngate pluto[7279]: | attributes 80 01 00 05 80 02 00 02
80 04 00 0e 80 03 00 03
Sep 21 18:11:20 vpngate pluto[7279]: | 80 0b 00 01 00 0c 00 04 00 00 70
80
Sep 21 18:11:20 vpngate pluto[7279]: | emitting length of ISAKMP Transform
Payload (ISAKMP): 36
Sep 21 18:11:20 vpngate pluto[7279]: | emitting length of ISAKMP Proposal
Payload: 44
Sep 21 18:11:20 vpngate pluto[7279]: | emitting length of ISAKMP Security
Association Payload: 56
Sep 21 18:11:20 vpngate pluto[7279]: | ***emit ISAKMP Vendor ID Payload:
Sep 21 18:11:20 vpngate pluto[7279]: | next payload type: ISAKMP_NEXT_VID
Sep 21 18:11:20 vpngate pluto[7279]: | emitting 12 raw bytes of Vendor ID
into ISAKMP Vendor ID Payload
Sep 21 18:11:20 vpngate pluto[7279]: | Vendor ID 4f 45 5f 5d 7b 76 4b 67
43 6f 4f 49
Sep 21 18:11:20 vpngate pluto[7279]: | emitting length of ISAKMP Vendor ID
Payload: 16
Sep 21 18:11:20 vpngate pluto[7279]: | ***emit ISAKMP Vendor ID Payload:
Sep 21 18:11:20 vpngate pluto[7279]: | next payload type:
ISAKMP_NEXT_NONE
Sep 21 18:11:20 vpngate pluto[7279]: | emitting 16 raw bytes of DPP Vendor
ID into ISAKMP Vendor ID Payload
Sep 21 18:11:20 vpngate pluto[7279]: | DPP Vendor ID af ca d7 13 68 a1 f1
c9 6b 86 96 fc 77 57 01 00
Sep 21 18:11:20 vpngate pluto[7279]: | emitting length of ISAKMP Vendor ID
Payload: 20
Sep 21 18:11:20 vpngate pluto[7279]: | sender checking NAT-t: 0 and 0
Sep 21 18:11:20 vpngate pluto[7279]: | emitting length of ISAKMP Message:
120
Sep 21 18:11:20 vpngate pluto[7279]: | complete state transition with STF_OK
Sep 21 18:11:20 vpngate pluto[7279]: "l2tp-cert-orgWIN2KXP" #3: transition
from state STATE_MAIN_R0 to state STATE_MAIN_R1
Sep 21 18:11:20 vpngate pluto[7279]: | sending reply packet to
192.168.10.11:500 (from port=500)
Sep 21 18:11:20 vpngate pluto[7279]: | sending 120 bytes for STATE_MAIN_R0
through eth1:500 to 192.168.10.11:500:
Sep 21 18:11:20 vpngate pluto[7279]: | 21 9b 3e bf 7d 60 bf b9 56 48 06
c5 e1 7e 96 8d
Sep 21 18:11:20 vpngate pluto[7279]: | 01 10 02 00 00 00 00 00 00 00 00
78 0d 00 00 38
Sep 21 18:11:20 vpngate pluto[7279]: | 00 00 00 01 00 00 00 01 00 00 00
2c 01 01 00 01
Sep 21 18:11:20 vpngate pluto[7279]: | 00 00 00 24 01 01 00 00 80 01 00
05 80 02 00 02
Sep 21 18:11:20 vpngate pluto[7279]: | 80 04 00 0e 80 03 00 03 80 0b 00
01 00 0c 00 04
Sep 21 18:11:20 vpngate pluto[7279]: | 00 00 70 80 0d 00 00 10 4f 45 5f
5d 7b 76 4b 67
Sep 21 18:11:20 vpngate pluto[7279]: | 43 6f 4f 49 00 00 00 14 af ca d7
13 68 a1 f1 c9
Sep 21 18:11:20 vpngate pluto[7279]: | 6b 86 96 fc 77 57 01 00
Sep 21 18:11:20 vpngate pluto[7279]: | inserting event EVENT_RETRANSMIT,
timeout in 10 seconds for #3
Sep 21 18:11:20 vpngate pluto[7279]: "l2tp-cert-orgWIN2KXP" #3:
STATE_MAIN_R1: sent MR1, expecting MI2
Sep 21 18:11:20 vpngate pluto[7279]: | modecfg pull: noquirk policy:push
not-client
Sep 21 18:11:20 vpngate pluto[7279]: | phase 1 is done, looking for phase 1
to unpend
Sep 21 18:11:20 vpngate pluto[7279]: | next event EVENT_RETRANSMIT in 10
seconds for #3
Sep 21 18:11:21 vpngate pluto[7279]: |
Sep 21 18:11:21 vpngate pluto[7279]: | *received 312 bytes from
192.168.10.11:500 on eth1 (port=500)
Sep 21 18:11:21 vpngate pluto[7279]: | 21 9b 3e bf 7d 60 bf b9 56 48 06
c5 e1 7e 96 8d
Sep 21 18:11:21 vpngate pluto[7279]: | 04 10 02 00 00 00 00 00 00 00 01
38 0a 00 01 04
Sep 21 18:11:21 vpngate pluto[7279]: | 48 a3 f4 ec 8d 99 d6 ab 09 14 02
8b 07 07 ad 4d
Sep 21 18:11:21 vpngate pluto[7279]: | f6 12 d3 1d f6 10 93 ce d6 48 47
b4 41 f9 2f dd
Sep 21 18:11:21 vpngate pluto[7279]: | 82 7e c6 5c 7f c1 34 96 e7 d5 a6
34 bb 48 ed 26
Sep 21 18:11:21 vpngate pluto[7279]: | f2 94 9b d7 51 e0 78 61 c3 e2 17
fc 28 2a bc 06
Sep 21 18:11:21 vpngate pluto[7279]: | 20 dd c3 88 ad ef 42 72 67 c2 6d
3d f8 19 1d 81
Sep 21 18:11:21 vpngate pluto[7279]: | ea 79 16 2d 2f 52 e3 9f 63 82 dd
5d 41 90 25 44
Sep 21 18:11:21 vpngate pluto[7279]: | 9e 78 0b 50 3b b1 a8 ea 74 b9 9c
ab db 44 5d d7
Sep 21 18:11:21 vpngate pluto[7279]: | d0 68 16 73 ab 0a c1 50 01 ba ea
f0 4b 8a fc 8c
Sep 21 18:11:21 vpngate pluto[7279]: | bc 2c bc 0a 8e d8 29 c7 5f d5 0d
20 69 01 12 2a
Sep 21 18:11:21 vpngate pluto[7279]: | 0c ce 2e 8a 36 cc 2d 63 4d 13 ff
31 4d c6 1c dc
Sep 21 18:11:21 vpngate pluto[7279]: | ca 8a 1a 7b 0c 4c 8b b3 f1 09 ad
b6 c6 2b 4f dc
Sep 21 18:11:21 vpngate pluto[7279]: | f7 f1 49 66 64 1f ea 39 dd 87 07
15 5f 82 dd 10
Sep 21 18:11:21 vpngate pluto[7279]: | 4b db bf 8a b6 bb d7 b3 e4 27 01
ec 68 44 4d 54
Sep 21 18:11:21 vpngate pluto[7279]: | a4 e6 af 27 9d a4 ce 83 17 5a 52
b3 30 05 dc 91
Sep 21 18:11:21 vpngate pluto[7279]: | 27 69 5f 1c bb 25 de ac 72 48 ac
21 34 77 40 80
Sep 21 18:11:21 vpngate pluto[7279]: | d1 d2 58 4a 4e 0a dc 3b 28 10 6a
a8 2d f6 65 86
Sep 21 18:11:21 vpngate pluto[7279]: | 00 00 00 18 99 83 b4 ea cc d6 91
34 5f 4d 86 49
Sep 21 18:11:21 vpngate pluto[7279]: | 5b cc 10 b8 34 35 11 11
Sep 21 18:11:21 vpngate pluto[7279]: | **parse ISAKMP Message:
Sep 21 18:11:21 vpngate pluto[7279]: | initiator cookie:
Sep 21 18:11:21 vpngate pluto[7279]: | 21 9b 3e bf 7d 60 bf b9
Sep 21 18:11:21 vpngate pluto[7279]: | responder cookie:
Sep 21 18:11:21 vpngate pluto[7279]: | 56 48 06 c5 e1 7e 96 8d
Sep 21 18:11:21 vpngate pluto[7279]: | next payload type: ISAKMP_NEXT_KE
Sep 21 18:11:21 vpngate pluto[7279]: | ISAKMP version: ISAKMP Version 1.0
Sep 21 18:11:21 vpngate pluto[7279]: | exchange type: ISAKMP_XCHG_IDPROT
Sep 21 18:11:21 vpngate pluto[7279]: | flags: none
Sep 21 18:11:21 vpngate pluto[7279]: | message ID: 00 00 00 00
Sep 21 18:11:21 vpngate pluto[7279]: | length: 312
Sep 21 18:11:21 vpngate pluto[7279]: | processing packet with exchange
type=ISAKMP_XCHG_IDPROT (2)
Sep 21 18:11:21 vpngate pluto[7279]: | ICOOKIE: 21 9b 3e bf 7d 60 bf b9
Sep 21 18:11:21 vpngate pluto[7279]: | RCOOKIE: 56 48 06 c5 e1 7e 96 8d
Sep 21 18:11:21 vpngate pluto[7279]: | peer: c0 a8 0a 0b
Sep 21 18:11:21 vpngate pluto[7279]: | state hash entry 2
Sep 21 18:11:21 vpngate pluto[7279]: | peer and cookies match on #3,
provided msgid 00000000 vs 00000000
Sep 21 18:11:21 vpngate pluto[7279]: | state object #3 found, in
STATE_MAIN_R1
Sep 21 18:11:21 vpngate pluto[7279]: | processing connection
l2tp-cert-orgWIN2KXP
Sep 21 18:11:21 vpngate pluto[7279]: | np=4 and sd=0x80e8790
Sep 21 18:11:21 vpngate pluto[7279]: | ***parse ISAKMP Key Exchange Payload:
Sep 21 18:11:21 vpngate pluto[7279]: | next payload type:
ISAKMP_NEXT_NONCE
Sep 21 18:11:21 vpngate pluto[7279]: | length: 260
Sep 21 18:11:21 vpngate pluto[7279]: | np=10 and sd=0x80e85a0
Sep 21 18:11:21 vpngate pluto[7279]: | ***parse ISAKMP Nonce Payload:
Sep 21 18:11:21 vpngate pluto[7279]: | next payload type:
ISAKMP_NEXT_NONE
Sep 21 18:11:21 vpngate pluto[7279]: | length: 24
Sep 21 18:11:21 vpngate pluto[7279]: | **emit ISAKMP Message:
Sep 21 18:11:21 vpngate pluto[7279]: | initiator cookie:
Sep 21 18:11:21 vpngate pluto[7279]: | 21 9b 3e bf 7d 60 bf b9
Sep 21 18:11:21 vpngate pluto[7279]: | responder cookie:
Sep 21 18:11:21 vpngate pluto[7279]: | 56 48 06 c5 e1 7e 96 8d
Sep 21 18:11:21 vpngate pluto[7279]: | next payload type: ISAKMP_NEXT_KE
Sep 21 18:11:21 vpngate pluto[7279]: | ISAKMP version: ISAKMP Version 1.0
Sep 21 18:11:21 vpngate pluto[7279]: | exchange type: ISAKMP_XCHG_IDPROT
Sep 21 18:11:21 vpngate pluto[7279]: | flags: none
Sep 21 18:11:21 vpngate pluto[7279]: | message ID: 00 00 00 00
Sep 21 18:11:21 vpngate pluto[7279]: | DH public value received:
Sep 21 18:11:21 vpngate pluto[7279]: | 48 a3 f4 ec 8d 99 d6 ab 09 14 02
8b 07 07 ad 4d
Sep 21 18:11:21 vpngate pluto[7279]: | f6 12 d3 1d f6 10 93 ce d6 48 47
b4 41 f9 2f dd
Sep 21 18:11:21 vpngate pluto[7279]: | 82 7e c6 5c 7f c1 34 96 e7 d5 a6
34 bb 48 ed 26
Sep 21 18:11:21 vpngate pluto[7279]: | f2 94 9b d7 51 e0 78 61 c3 e2 17
fc 28 2a bc 06
Sep 21 18:11:21 vpngate pluto[7279]: | 20 dd c3 88 ad ef 42 72 67 c2 6d
3d f8 19 1d 81
Sep 21 18:11:21 vpngate pluto[7279]: | ea 79 16 2d 2f 52 e3 9f 63 82 dd
5d 41 90 25 44
Sep 21 18:11:21 vpngate pluto[7279]: | 9e 78 0b 50 3b b1 a8 ea 74 b9 9c
ab db 44 5d d7
Sep 21 18:11:21 vpngate pluto[7279]: | d0 68 16 73 ab 0a c1 50 01 ba ea
f0 4b 8a fc 8c
Sep 21 18:11:21 vpngate pluto[7279]: | bc 2c bc 0a 8e d8 29 c7 5f d5 0d
20 69 01 12 2a
Sep 21 18:11:21 vpngate pluto[7279]: | 0c ce 2e 8a 36 cc 2d 63 4d 13 ff
31 4d c6 1c dc
Sep 21 18:11:21 vpngate pluto[7279]: | ca 8a 1a 7b 0c 4c 8b b3 f1 09 ad
b6 c6 2b 4f dc
Sep 21 18:11:21 vpngate pluto[7279]: | f7 f1 49 66 64 1f ea 39 dd 87 07
15 5f 82 dd 10
Sep 21 18:11:21 vpngate pluto[7279]: | 4b db bf 8a b6 bb d7 b3 e4 27 01
ec 68 44 4d 54
Sep 21 18:11:21 vpngate pluto[7279]: | a4 e6 af 27 9d a4 ce 83 17 5a 52
b3 30 05 dc 91
Sep 21 18:11:21 vpngate pluto[7279]: | 27 69 5f 1c bb 25 de ac 72 48 ac
21 34 77 40 80
Sep 21 18:11:21 vpngate pluto[7279]: | d1 d2 58 4a 4e 0a dc 3b 28 10 6a
a8 2d f6 65 86
Sep 21 18:11:21 vpngate pluto[7279]: | inI2: checking NAT-t: 0 and 0
Sep 21 18:11:21 vpngate pluto[7279]: | helper -1 doing build_kenonce op id:
0
Sep 21 18:11:21 vpngate pluto[7279]: | Local DH secret:
Sep 21 18:11:21 vpngate pluto[7279]: | 15 8f 16 9d b3 0b 2d 43 ad eb 50
19 4e 8b 6c 13
Sep 21 18:11:21 vpngate pluto[7279]: | 78 20 a2 a7 aa f2 03 b4 69 14 3f
48 c1 53 46 83
Sep 21 18:11:21 vpngate pluto[7279]: | Public DH value sent:
Sep 21 18:11:21 vpngate pluto[7279]: | 63 5a 66 11 b2 9c 07 f8 95 aa 17
8d 93 8d 53 49
Sep 21 18:11:21 vpngate pluto[7279]: | 18 ca a6 d3 c8 d1 90 e2 74 8e e6
44 23 a6 e8 5d
Sep 21 18:11:21 vpngate pluto[7279]: | a2 0c c7 4f d5 c3 6f a1 91 72 89
4a be c2 02 95
Sep 21 18:11:21 vpngate pluto[7279]: | 8f 0e d6 a8 0b 98 9f b2 ac 7c 31
ad c8 05 c2 2d
Sep 21 18:11:21 vpngate pluto[7279]: | 5f 11 23 84 a5 d0 ec fe 06 3e 78
a2 06 5a cf cd
Sep 21 18:11:21 vpngate pluto[7279]: | 54 19 75 bf d8 4a 3f c1 ec d0 9f
cf f9 fc 06 70
Sep 21 18:11:21 vpngate pluto[7279]: | c7 f0 8a 30 83 2a 64 b4 fe 6c 29
9c c1 c6 9a c1
Sep 21 18:11:21 vpngate pluto[7279]: | 6e c5 0a da 2c 73 49 1c ed c6 2c
7a ca ba 11 9a
Sep 21 18:11:21 vpngate pluto[7279]: | cb be 62 ea 5b 8d bf be 3c 45 d7
8d f1 13 f0 49
Sep 21 18:11:21 vpngate pluto[7279]: | f2 d1 42 e8 2e 1c 1e ef 32 9e a0
74 e4 55 05 94
Sep 21 18:11:21 vpngate pluto[7279]: | 8c 97 cb 0a 2a b9 f2 d8 28 02 7a
ed a0 96 d8 c6
Sep 21 18:11:21 vpngate pluto[7279]: | 51 37 26 52 59 76 c8 c2 55 eb 96
bc 14 78 cd 30
Sep 21 18:11:21 vpngate pluto[7279]: | 3a df d2 a5 15 30 96 96 29 8b 3c
2d 93 fe ef b9
Sep 21 18:11:21 vpngate pluto[7279]: | eb 1f ae b9 f8 39 e0 ad e1 a6 47
eb 11 7d 3e 0d
Sep 21 18:11:21 vpngate pluto[7279]: | 1a b6 ba 69 2b 98 95 b7 c4 44 73
ae 6d 12 42 fb
Sep 21 18:11:21 vpngate pluto[7279]: | 46 ed 57 01 3d e0 0f b3 74 61 2b
fc 1b a3 ee b1
Sep 21 18:11:21 vpngate pluto[7279]: | Generated nonce:
Sep 21 18:11:21 vpngate pluto[7279]: | 61 26 1b 7b 01 3c d6 c0 f2 48 c6
ea ec f5 dd 9d
Sep 21 18:11:21 vpngate pluto[7279]: | main inI2_outR2: calculated ke+nonce,
sending R2
Sep 21 18:11:21 vpngate pluto[7279]: | processing connection
l2tp-cert-orgWIN2KXP
Sep 21 18:11:21 vpngate pluto[7279]: | ***emit ISAKMP Key Exchange Payload:
Sep 21 18:11:21 vpngate pluto[7279]: | next payload type:
ISAKMP_NEXT_NONCE
Sep 21 18:11:21 vpngate pluto[7279]: | emitting 256 raw bytes of keyex value
into ISAKMP Key Exchange Payload
Sep 21 18:11:21 vpngate pluto[7279]: | keyex value 63 5a 66 11 b2 9c 07 f8
95 aa 17 8d 93 8d 53 49
Sep 21 18:11:21 vpngate pluto[7279]: | 18 ca a6 d3 c8 d1 90 e2 74 8e e6
44 23 a6 e8 5d
Sep 21 18:11:21 vpngate pluto[7279]: | a2 0c c7 4f d5 c3 6f a1 91 72 89
4a be c2 02 95
Sep 21 18:11:21 vpngate pluto[7279]: | 8f 0e d6 a8 0b 98 9f b2 ac 7c 31
ad c8 05 c2 2d
Sep 21 18:11:21 vpngate pluto[7279]: | 5f 11 23 84 a5 d0 ec fe 06 3e 78
a2 06 5a cf cd
Sep 21 18:11:21 vpngate pluto[7279]: | 54 19 75 bf d8 4a 3f c1 ec d0 9f
cf f9 fc 06 70
Sep 21 18:11:21 vpngate pluto[7279]: | c7 f0 8a 30 83 2a 64 b4 fe 6c 29
9c c1 c6 9a c1
Sep 21 18:11:21 vpngate pluto[7279]: | 6e c5 0a da 2c 73 49 1c ed c6 2c
7a ca ba 11 9a
Sep 21 18:11:21 vpngate pluto[7279]: | cb be 62 ea 5b 8d bf be 3c 45 d7
8d f1 13 f0 49
Sep 21 18:11:21 vpngate pluto[7279]: | f2 d1 42 e8 2e 1c 1e ef 32 9e a0
74 e4 55 05 94
Sep 21 18:11:21 vpngate pluto[7279]: | 8c 97 cb 0a 2a b9 f2 d8 28 02 7a
ed a0 96 d8 c6
Sep 21 18:11:21 vpngate pluto[7279]: | 51 37 26 52 59 76 c8 c2 55 eb 96
bc 14 78 cd 30
Sep 21 18:11:21 vpngate pluto[7279]: | 3a df d2 a5 15 30 96 96 29 8b 3c
2d 93 fe ef b9
Sep 21 18:11:21 vpngate pluto[7279]: | eb 1f ae b9 f8 39 e0 ad e1 a6 47
eb 11 7d 3e 0d
Sep 21 18:11:21 vpngate pluto[7279]: | 1a b6 ba 69 2b 98 95 b7 c4 44 73
ae 6d 12 42 fb
Sep 21 18:11:21 vpngate pluto[7279]: | 46 ed 57 01 3d e0 0f b3 74 61 2b
fc 1b a3 ee b1
Sep 21 18:11:21 vpngate pluto[7279]: | emitting length of ISAKMP Key
Exchange Payload: 260
Sep 21 18:11:21 vpngate pluto[7279]: | ***emit ISAKMP Nonce Payload:
Sep 21 18:11:21 vpngate pluto[7279]: | next payload type: ISAKMP_NEXT_CR
Sep 21 18:11:21 vpngate pluto[7279]: | emitting 16 raw bytes of Nr into
ISAKMP Nonce Payload
Sep 21 18:11:21 vpngate pluto[7279]: | Nr 61 26 1b 7b 01 3c d6 c0 f2 48
c6 ea ec f5 dd 9d
Sep 21 18:11:21 vpngate pluto[7279]: | emitting length of ISAKMP Nonce
Payload: 20
Sep 21 18:11:21 vpngate pluto[7279]: | find_host_connection called from
collect_rw_ca_candidates
Sep 21 18:11:21 vpngate pluto[7279]: | find_host_pair: comparing to
192.168.10.253:500 192.168.10.11:500
Sep 21 18:11:21 vpngate pluto[7279]: | find_host_pair_conn
(find_host_connection2): 192.168.10.253:500 %any:500 -> hp:none
Sep 21 18:11:21 vpngate pluto[7279]: | ***emit ISAKMP Certificate
RequestPayload:
Sep 21 18:11:21 vpngate pluto[7279]: | next payload type:
ISAKMP_NEXT_NONE
Sep 21 18:11:21 vpngate pluto[7279]: | cert type: CERT_X509_SIGNATURE
Sep 21 18:11:21 vpngate pluto[7279]: | emitting length of ISAKMP Certificate
RequestPayload: 5
Sep 21 18:11:21 vpngate pluto[7279]: | emitting 3 zero bytes of message
padding into ISAKMP Message
Sep 21 18:11:21 vpngate pluto[7279]: | emitting length of ISAKMP Message:
316
Sep 21 18:11:21 vpngate pluto[7279]: | started looking for secret for C=DE,
ST=Brandenburg, L=Potsdam, O=Krellmann, OU=vpngate,
CN=vpngate.potsdam.krellmann.net->C=DE, ST=Th?ringen, L=Trusetal,
O=Krellmann, OU=vpngate, CN=vpngate.trusetal.krellmann.net of kind PPK_PSK
Sep 21 18:11:21 vpngate pluto[7279]: | actually looking for secret for C=DE,
ST=Brandenburg, L=Potsdam, O=Krellmann, OU=vpngate,
CN=vpngate.potsdam.krellmann.net->C=DE, ST=Th?ringen, L=Trusetal,
O=Krellmann, OU=vpngate, CN=vpngate.trusetal.krellmann.net of kind PPK_PSK
Sep 21 18:11:21 vpngate pluto[7279]: | concluding with best_match=0
best=(nil) (lineno=-1)
Sep 21 18:11:21 vpngate pluto[7279]: | calc_dh_shared(): time elapsed
(OAKLEY_GROUP_MODP2048): 6272 usec
Sep 21 18:11:21 vpngate pluto[7279]: | DH shared secret:
Sep 21 18:11:21 vpngate pluto[7279]: | e3 ed 1f a7 13 c3 65 03 a5 df 0e
03 86 d5 cf 14
Sep 21 18:11:21 vpngate pluto[7279]: | de a1 b6 14 64 f4 fa 55 45 30 79
d9 18 a0 42 28
Sep 21 18:11:21 vpngate pluto[7279]: | ef 1b 81 3d 27 ad 0f e3 93 f6 03
d8 08 4e 4c a0
Sep 21 18:11:21 vpngate pluto[7279]: | 6b d1 40 e3 43 43 c7 f5 4d b9 0c
3a 16 33 83 3d
Sep 21 18:11:21 vpngate pluto[7279]: | ff a8 0b 32 3f d5 e0 66 6d 52 8a
43 a0 2b 71 8d
Sep 21 18:11:21 vpngate pluto[7279]: | d5 90 0d 61 8e 3d 8d 9e 8e 3c 15
5b 36 eb 09 a5
Sep 21 18:11:21 vpngate pluto[7279]: | 39 b7 65 85 44 30 bb 3b 93 a7 5b
53 af e4 7b 07
Sep 21 18:11:21 vpngate pluto[7279]: | 98 18 8c 04 f5 ec c6 ba 38 3e c2
3a 38 a2 90 80
Sep 21 18:11:21 vpngate pluto[7279]: | 51 7c 65 30 c9 e1 54 b5 3d 9d 0d
21 57 61 8a d9
Sep 21 18:11:21 vpngate pluto[7279]: | a3 3e a5 87 20 a6 bc b1 0e a0 af
98 bd 76 b2 e5
Sep 21 18:11:21 vpngate pluto[7279]: | 4b f5 00 7b 04 62 17 b9 86 4e df
eb a3 6f 53 d4
Sep 21 18:11:21 vpngate pluto[7279]: | ce 74 1f da cc 1a 55 55 1d cf 14
d0 d3 b9 dd 42
Sep 21 18:11:21 vpngate pluto[7279]: | ef a6 48 09 5b c5 ed a4 6a 30 d6
bb 48 f8 85 b7
Sep 21 18:11:21 vpngate pluto[7279]: | 7e 8c 3a 2e 41 e3 25 65 18 42 5f
e4 63 46 f0 e1
Sep 21 18:11:21 vpngate pluto[7279]: | 7a a9 6b f8 5e 34 3d 24 8a 6f 1b
b0 dd 16 04 9c
Sep 21 18:11:21 vpngate pluto[7279]: | ac 45 e7 a2 c6 4d 16 20 e0 3b ed
ae 50 c7 32 a6
Sep 21 18:11:21 vpngate pluto[7279]: | skeyid inputs (digi+NI+NR+shared)
hasher: oakley_sha
Sep 21 18:11:21 vpngate pluto[7279]: | shared: e3 ed 1f a7 13 c3 65 03
a5 df 0e 03 86 d5 cf 14
Sep 21 18:11:21 vpngate pluto[7279]: | de a1 b6 14 64 f4 fa 55 45 30 79
d9 18 a0 42 28
Sep 21 18:11:21 vpngate pluto[7279]: | ef 1b 81 3d 27 ad 0f e3 93 f6 03
d8 08 4e 4c a0
Sep 21 18:11:21 vpngate pluto[7279]: | 6b d1 40 e3 43 43 c7 f5 4d b9 0c
3a 16 33 83 3d
Sep 21 18:11:21 vpngate pluto[7279]: | ff a8 0b 32 3f d5 e0 66 6d 52 8a
43 a0 2b 71 8d
Sep 21 18:11:21 vpngate pluto[7279]: | d5 90 0d 61 8e 3d 8d 9e 8e 3c 15
5b 36 eb 09 a5
Sep 21 18:11:21 vpngate pluto[7279]: | 39 b7 65 85 44 30 bb 3b 93 a7 5b
53 af e4 7b 07
Sep 21 18:11:21 vpngate pluto[7279]: | 98 18 8c 04 f5 ec c6 ba 38 3e c2
3a 38 a2 90 80
Sep 21 18:11:21 vpngate pluto[7279]: | 51 7c 65 30 c9 e1 54 b5 3d 9d 0d
21 57 61 8a d9
Sep 21 18:11:21 vpngate pluto[7279]: | a3 3e a5 87 20 a6 bc b1 0e a0 af
98 bd 76 b2 e5
Sep 21 18:11:21 vpngate pluto[7279]: | 4b f5 00 7b 04 62 17 b9 86 4e df
eb a3 6f 53 d4
Sep 21 18:11:21 vpngate pluto[7279]: | ce 74 1f da cc 1a 55 55 1d cf 14
d0 d3 b9 dd 42
Sep 21 18:11:21 vpngate pluto[7279]: | ef a6 48 09 5b c5 ed a4 6a 30 d6
bb 48 f8 85 b7
Sep 21 18:11:21 vpngate pluto[7279]: | 7e 8c 3a 2e 41 e3 25 65 18 42 5f
e4 63 46 f0 e1
Sep 21 18:11:21 vpngate pluto[7279]: | 7a a9 6b f8 5e 34 3d 24 8a 6f 1b
b0 dd 16 04 9c
Sep 21 18:11:21 vpngate pluto[7279]: | ac 45 e7 a2 c6 4d 16 20 e0 3b ed
ae 50 c7 32 a6
Sep 21 18:11:21 vpngate pluto[7279]: | ni: 99 83 b4 ea cc d6 91 34 5f 4d
86 49 5b cc 10 b8
Sep 21 18:11:21 vpngate pluto[7279]: | 34 35 11 11
Sep 21 18:11:21 vpngate pluto[7279]: | nr: 61 26 1b 7b 01 3c d6 c0 f2 48
c6 ea ec f5 dd 9d
Sep 21 18:11:21 vpngate pluto[7279]: | keyid: a5 75 bb 5d 87 25 5e e6 36
d7 79 9d d9 d9 56 02
Sep 21 18:11:21 vpngate pluto[7279]: | 96 d1 7a c2
Sep 21 18:11:21 vpngate pluto[7279]: | DH_i: 48 a3 f4 ec 8d 99 d6 ab 09
14 02 8b 07 07 ad 4d
Sep 21 18:11:21 vpngate pluto[7279]: | f6 12 d3 1d f6 10 93 ce d6 48 47
b4 41 f9 2f dd
Sep 21 18:11:21 vpngate pluto[7279]: | 82 7e c6 5c 7f c1 34 96 e7 d5 a6
34 bb 48 ed 26
Sep 21 18:11:21 vpngate pluto[7279]: | f2 94 9b d7 51 e0 78 61 c3 e2 17
fc 28 2a bc 06
Sep 21 18:11:21 vpngate pluto[7279]: | 20 dd c3 88 ad ef 42 72 67 c2 6d
3d f8 19 1d 81
Sep 21 18:11:21 vpngate pluto[7279]: | ea 79 16 2d 2f 52 e3 9f 63 82 dd
5d 41 90 25 44
Sep 21 18:11:21 vpngate pluto[7279]: | 9e 78 0b 50 3b b1 a8 ea 74 b9 9c
ab db 44 5d d7
Sep 21 18:11:21 vpngate pluto[7279]: | d0 68 16 73 ab 0a c1 50 01 ba ea
f0 4b 8a fc 8c
Sep 21 18:11:21 vpngate pluto[7279]: | bc 2c bc 0a 8e d8 29 c7 5f d5 0d
20 69 01 12 2a
Sep 21 18:11:21 vpngate pluto[7279]: | 0c ce 2e 8a 36 cc 2d 63 4d 13 ff
31 4d c6 1c dc
Sep 21 18:11:21 vpngate pluto[7279]: | ca 8a 1a 7b 0c 4c 8b b3 f1 09 ad
b6 c6 2b 4f dc
Sep 21 18:11:21 vpngate pluto[7279]: | f7 f1 49 66 64 1f ea 39 dd 87 07
15 5f 82 dd 10
Sep 21 18:11:21 vpngate pluto[7279]: | 4b db bf 8a b6 bb d7 b3 e4 27 01
ec 68 44 4d 54
Sep 21 18:11:21 vpngate pluto[7279]: | a4 e6 af 27 9d a4 ce 83 17 5a 52
b3 30 05 dc 91
Sep 21 18:11:21 vpngate pluto[7279]: | 27 69 5f 1c bb 25 de ac 72 48 ac
21 34 77 40 80
Sep 21 18:11:21 vpngate pluto[7279]: | d1 d2 58 4a 4e 0a dc 3b 28 10 6a
a8 2d f6 65 86
Sep 21 18:11:21 vpngate pluto[7279]: | DH_r: 63 5a 66 11 b2 9c 07 f8 95
aa 17 8d 93 8d 53 49
Sep 21 18:11:21 vpngate pluto[7279]: | 18 ca a6 d3 c8 d1 90 e2 74 8e e6
44 23 a6 e8 5d
Sep 21 18:11:21 vpngate pluto[7279]: | a2 0c c7 4f d5 c3 6f a1 91 72 89
4a be c2 02 95
Sep 21 18:11:21 vpngate pluto[7279]: | 8f 0e d6 a8 0b 98 9f b2 ac 7c 31
ad c8 05 c2 2d
Sep 21 18:11:21 vpngate pluto[7279]: | 5f 11 23 84 a5 d0 ec fe 06 3e 78
a2 06 5a cf cd
Sep 21 18:11:21 vpngate pluto[7279]: | 54 19 75 bf d8 4a 3f c1 ec d0 9f
cf f9 fc 06 70
Sep 21 18:11:21 vpngate pluto[7279]: | c7 f0 8a 30 83 2a 64 b4 fe 6c 29
9c c1 c6 9a c1
Sep 21 18:11:21 vpngate pluto[7279]: | 6e c5 0a da 2c 73 49 1c ed c6 2c
7a ca ba 11 9a
Sep 21 18:11:21 vpngate pluto[7279]: | cb be 62 ea 5b 8d bf be 3c 45 d7
8d f1 13 f0 49
Sep 21 18:11:21 vpngate pluto[7279]: | f2 d1 42 e8 2e 1c 1e ef 32 9e a0
74 e4 55 05 94
Sep 21 18:11:21 vpngate pluto[7279]: | 8c 97 cb 0a 2a b9 f2 d8 28 02 7a
ed a0 96 d8 c6
Sep 21 18:11:21 vpngate pluto[7279]: | 51 37 26 52 59 76 c8 c2 55 eb 96
bc 14 78 cd 30
Sep 21 18:11:21 vpngate pluto[7279]: | 3a df d2 a5 15 30 96 96 29 8b 3c
2d 93 fe ef b9
Sep 21 18:11:21 vpngate pluto[7279]: | eb 1f ae b9 f8 39 e0 ad e1 a6 47
eb 11 7d 3e 0d
Sep 21 18:11:21 vpngate pluto[7279]: | 1a b6 ba 69 2b 98 95 b7 c4 44 73
ae 6d 12 42 fb
Sep 21 18:11:21 vpngate pluto[7279]: | 46 ed 57 01 3d e0 0f b3 74 61 2b
fc 1b a3 ee b1
Sep 21 18:11:21 vpngate pluto[7279]: | Skeyid: a5 75 bb 5d 87 25 5e e6
36 d7 79 9d d9 d9 56 02
Sep 21 18:11:21 vpngate pluto[7279]: | 96 d1 7a c2
Sep 21 18:11:21 vpngate pluto[7279]: | Skeyid_d: 05 e1 eb 7c 43 1a 6f 78
a5 7f a7 5e d6 0a 45 b9
Sep 21 18:11:21 vpngate pluto[7279]: | 79 ed 18 a8
Sep 21 18:11:21 vpngate pluto[7279]: | Skeyid_a: e2 a0 b0 dd 94 56 bc 41
7a bd 81 f3 c4 a4 b6 f6
Sep 21 18:11:21 vpngate pluto[7279]: | 02 3b 68 46
Sep 21 18:11:21 vpngate pluto[7279]: | Skeyid_e: 49 f5 bd 8f 87 d1 6c a5
62 57 63 57 f4 fe e7 73
Sep 21 18:11:21 vpngate pluto[7279]: | 1d f4 23 2b
Sep 21 18:11:21 vpngate pluto[7279]: | enc key: 93 48 f8 10 fd 6a 9d 1a
96 ef 61 e8 a0 73 88 0e
Sep 21 18:11:21 vpngate pluto[7279]: | db 75 e3 87 7b 75 86 b4
Sep 21 18:11:21 vpngate pluto[7279]: | IV: 4a e4 a4 80 75 a1 1e 82 b8 c3
b8 27 ff 45 93 15
Sep 21 18:11:21 vpngate pluto[7279]: | ae 25 3a 54
Sep 21 18:11:21 vpngate pluto[7279]: | complete state transition with STF_OK
Sep 21 18:11:21 vpngate pluto[7279]: "l2tp-cert-orgWIN2KXP" #3: transition
from state STATE_MAIN_R1 to state STATE_MAIN_R2
Sep 21 18:11:21 vpngate pluto[7279]: | sending reply packet to
192.168.10.11:500 (from port=500)
Sep 21 18:11:21 vpngate pluto[7279]: | sending 316 bytes for STATE_MAIN_R1
through eth1:500 to 192.168.10.11:500:
Sep 21 18:11:21 vpngate pluto[7279]: | 21 9b 3e bf 7d 60 bf b9 56 48 06
c5 e1 7e 96 8d
Sep 21 18:11:21 vpngate pluto[7279]: | 04 10 02 00 00 00 00 00 00 00 01
3c 0a 00 01 04
Sep 21 18:11:21 vpngate pluto[7279]: | 63 5a 66 11 b2 9c 07 f8 95 aa 17
8d 93 8d 53 49
Sep 21 18:11:21 vpngate pluto[7279]: | 18 ca a6 d3 c8 d1 90 e2 74 8e e6
44 23 a6 e8 5d
Sep 21 18:11:21 vpngate pluto[7279]: | a2 0c c7 4f d5 c3 6f a1 91 72 89
4a be c2 02 95
Sep 21 18:11:21 vpngate pluto[7279]: | 8f 0e d6 a8 0b 98 9f b2 ac 7c 31
ad c8 05 c2 2d
Sep 21 18:11:21 vpngate pluto[7279]: | 5f 11 23 84 a5 d0 ec fe 06 3e 78
a2 06 5a cf cd
Sep 21 18:11:21 vpngate pluto[7279]: | 54 19 75 bf d8 4a 3f c1 ec d0 9f
cf f9 fc 06 70
Sep 21 18:11:21 vpngate pluto[7279]: | c7 f0 8a 30 83 2a 64 b4 fe 6c 29
9c c1 c6 9a c1
Sep 21 18:11:21 vpngate pluto[7279]: | 6e c5 0a da 2c 73 49 1c ed c6 2c
7a ca ba 11 9a
Sep 21 18:11:21 vpngate pluto[7279]: | cb be 62 ea 5b 8d bf be 3c 45 d7
8d f1 13 f0 49
Sep 21 18:11:21 vpngate pluto[7279]: | f2 d1 42 e8 2e 1c 1e ef 32 9e a0
74 e4 55 05 94
Sep 21 18:11:21 vpngate pluto[7279]: | 8c 97 cb 0a 2a b9 f2 d8 28 02 7a
ed a0 96 d8 c6
Sep 21 18:11:21 vpngate pluto[7279]: | 51 37 26 52 59 76 c8 c2 55 eb 96
bc 14 78 cd 30
Sep 21 18:11:21 vpngate pluto[7279]: | 3a df d2 a5 15 30 96 96 29 8b 3c
2d 93 fe ef b9
Sep 21 18:11:21 vpngate pluto[7279]: | eb 1f ae b9 f8 39 e0 ad e1 a6 47
eb 11 7d 3e 0d
Sep 21 18:11:21 vpngate pluto[7279]: | 1a b6 ba 69 2b 98 95 b7 c4 44 73
ae 6d 12 42 fb
Sep 21 18:11:21 vpngate pluto[7279]: | 46 ed 57 01 3d e0 0f b3 74 61 2b
fc 1b a3 ee b1
Sep 21 18:11:21 vpngate pluto[7279]: | 07 00 00 14 61 26 1b 7b 01 3c d6
c0 f2 48 c6 ea
Sep 21 18:11:21 vpngate pluto[7279]: | ec f5 dd 9d 00 00 00 05 04 00 00
00
Sep 21 18:11:21 vpngate pluto[7279]: | inserting event EVENT_RETRANSMIT,
timeout in 10 seconds for #3
Sep 21 18:11:21 vpngate pluto[7279]: "l2tp-cert-orgWIN2KXP" #3:
STATE_MAIN_R2: sent MR2, expecting MI3
Sep 21 18:11:21 vpngate pluto[7279]: | modecfg pull: noquirk policy:push
not-client
Sep 21 18:11:21 vpngate pluto[7279]: | phase 1 is done, looking for phase 1
to unpend
Sep 21 18:11:21 vpngate pluto[7279]: | complete state transition with
STF_INLINE
Sep 21 18:11:21 vpngate pluto[7279]: | next event EVENT_RETRANSMIT in 10
seconds for #3
Sep 21 18:11:21 vpngate pluto[7279]: |
Sep 21 18:11:21 vpngate pluto[7279]: | *received 84 bytes from
192.168.10.11:500 on eth1 (port=500)
Sep 21 18:11:21 vpngate pluto[7279]: | 21 9b 3e bf 7d 60 bf b9 56 48 06
c5 e1 7e 96 8d
Sep 21 18:11:21 vpngate pluto[7279]: | 08 10 05 01 6f 47 fd 9c 00 00 00
54 8d 42 da 96
Sep 21 18:11:21 vpngate pluto[7279]: | b3 25 7e 50 ed 7f 82 54 bb a7 2b
ee 21 8a 70 9e
Sep 21 18:11:21 vpngate pluto[7279]: | 1a e8 ef dd c0 f5 4d 05 e3 6e e5
5d bb 28 6e 02
Sep 21 18:11:21 vpngate pluto[7279]: | e5 e0 2b 27 51 35 fd d0 d9 6e a3
0d 3f e4 65 e0
Sep 21 18:11:21 vpngate pluto[7279]: | d5 a6 6f 9a
Sep 21 18:11:21 vpngate pluto[7279]: | **parse ISAKMP Message:
Sep 21 18:11:21 vpngate pluto[7279]: | initiator cookie:
Sep 21 18:11:21 vpngate pluto[7279]: | 21 9b 3e bf 7d 60 bf b9
Sep 21 18:11:21 vpngate pluto[7279]: | responder cookie:
Sep 21 18:11:21 vpngate pluto[7279]: | 56 48 06 c5 e1 7e 96 8d
Sep 21 18:11:21 vpngate pluto[7279]: | next payload type:
ISAKMP_NEXT_HASH
Sep 21 18:11:21 vpngate pluto[7279]: | ISAKMP version: ISAKMP Version 1.0
Sep 21 18:11:21 vpngate pluto[7279]: | exchange type: ISAKMP_XCHG_INFO
Sep 21 18:11:21 vpngate pluto[7279]: | flags: ISAKMP_FLAG_ENCRYPTION
Sep 21 18:11:21 vpngate pluto[7279]: | message ID: 6f 47 fd 9c
Sep 21 18:11:21 vpngate pluto[7279]: | length: 84
Sep 21 18:11:21 vpngate pluto[7279]: | processing packet with exchange
type=ISAKMP_XCHG_INFO (5)
Sep 21 18:11:21 vpngate pluto[7279]: | ICOOKIE: 21 9b 3e bf 7d 60 bf b9
Sep 21 18:11:21 vpngate pluto[7279]: | RCOOKIE: 56 48 06 c5 e1 7e 96 8d
Sep 21 18:11:21 vpngate pluto[7279]: | peer: c0 a8 0a 0b
Sep 21 18:11:21 vpngate pluto[7279]: | state hash entry 2
Sep 21 18:11:21 vpngate pluto[7279]: | peer and cookies match on #3,
provided msgid 00000000 vs 00000000/00000000
Sep 21 18:11:21 vpngate pluto[7279]: | p15 state object #3 found, in
STATE_MAIN_R2
Sep 21 18:11:21 vpngate pluto[7279]: | processing connection
l2tp-cert-orgWIN2KXP
Sep 21 18:11:21 vpngate pluto[7279]: | last Phase 1 IV:
Sep 21 18:11:21 vpngate pluto[7279]: | current Phase 1 IV: 4a e4 a4 80 75
a1 1e 82 b8 c3 b8 27 ff 45 93 15
Sep 21 18:11:21 vpngate pluto[7279]: | ae 25 3a 54
Sep 21 18:11:21 vpngate pluto[7279]: | computed Phase 2 IV:
Sep 21 18:11:21 vpngate pluto[7279]: | 2b 11 7b 0e ac 44 02 7f 15 9c 37
0c 08 6d fe 04
Sep 21 18:11:21 vpngate pluto[7279]: | 5b 8f 08 c5
Sep 21 18:11:21 vpngate pluto[7279]: | received encrypted packet from
192.168.10.11:500
Sep 21 18:11:21 vpngate pluto[7279]: | decrypting 56 bytes using algorithm
OAKLEY_3DES_CBC
Sep 21 18:11:21 vpngate pluto[7279]: | decrypted:
Sep 21 18:11:21 vpngate pluto[7279]: | 5b 71 d8 8b dd fa d9 e4 b4 df 0a
c9 a5 15 8b fe
Sep 21 18:11:21 vpngate pluto[7279]: | 7c db 26 25 5b 0a b3 b1 00 00 00
1c 00 00 00 01
Sep 21 18:11:21 vpngate pluto[7279]: | 01 10 00 01 21 9b 3e bf 7d 60 bf
b9 56 48 06 c5
Sep 21 18:11:21 vpngate pluto[7279]: | e1 7e 96 8d 00 00 00 00
Sep 21 18:11:21 vpngate pluto[7279]: | next IV: 3f e4 65 e0 d5 a6 6f 9a
Sep 21 18:11:21 vpngate pluto[7279]: | np=8 and sd=0x80e85b8
Sep 21 18:11:21 vpngate pluto[7279]: "l2tp-cert-orgWIN2KXP" #3: next payload
type of ISAKMP Hash Payload has an unknown value: 91
Sep 21 18:11:21 vpngate pluto[7279]: "l2tp-cert-orgWIN2KXP" #3: malformed
payload in packet
Sep 21 18:11:21 vpngate pluto[7279]: | payload malformed after IV
Sep 21 18:11:21 vpngate pluto[7279]: | 4a e4 a4 80 75 a1 1e 82 b8 c3 b8
27 ff 45 93 15
Sep 21 18:11:21 vpngate pluto[7279]: | ae 25 3a 54
Sep 21 18:11:21 vpngate pluto[7279]: "l2tp-cert-orgWIN2KXP" #3: sending
notification PAYLOAD_MALFORMED to 192.168.10.11:500
Sep 21 18:11:21 vpngate pluto[7279]: | **emit ISAKMP Message:
Sep 21 18:11:21 vpngate pluto[7279]: | initiator cookie:
Sep 21 18:11:21 vpngate pluto[7279]: | 21 9b 3e bf 7d 60 bf b9
Sep 21 18:11:21 vpngate pluto[7279]: | responder cookie:
Sep 21 18:11:21 vpngate pluto[7279]: | 56 48 06 c5 e1 7e 96 8d
Sep 21 18:11:21 vpngate pluto[7279]: | next payload type: ISAKMP_NEXT_N
Sep 21 18:11:21 vpngate pluto[7279]: | ISAKMP version: ISAKMP Version 1.0
Sep 21 18:11:21 vpngate pluto[7279]: | exchange type: ISAKMP_XCHG_INFO
Sep 21 18:11:21 vpngate pluto[7279]: | flags: none
Sep 21 18:11:21 vpngate pluto[7279]: | message ID: 39 e7 c6 24
Sep 21 18:11:21 vpngate pluto[7279]: | ***emit ISAKMP Notification Payload:
Sep 21 18:11:21 vpngate pluto[7279]: | next payload type:
ISAKMP_NEXT_NONE
Sep 21 18:11:21 vpngate pluto[7279]: | DOI: ISAKMP_DOI_IPSEC
Sep 21 18:11:21 vpngate pluto[7279]: | protocol ID: 1
Sep 21 18:11:21 vpngate pluto[7279]: | SPI size: 0
Sep 21 18:11:21 vpngate pluto[7279]: | Notify Message Type:
PAYLOAD_MALFORMED
Sep 21 18:11:21 vpngate pluto[7279]: | emitting length of ISAKMP
Notification Payload: 12
Sep 21 18:11:21 vpngate pluto[7279]: | emitting length of ISAKMP Message: 40
Sep 21 18:11:21 vpngate pluto[7279]: | sending 40 bytes for notification
packet through eth1:500 to 192.168.10.11:500:
Sep 21 18:11:21 vpngate pluto[7279]: | 21 9b 3e bf 7d 60 bf b9 56 48 06
c5 e1 7e 96 8d
Sep 21 18:11:21 vpngate pluto[7279]: | 0b 10 05 00 39 e7 c6 24 00 00 00
28 00 00 00 0c
Sep 21 18:11:21 vpngate pluto[7279]: | 00 00 00 01 01 00 00 10
Sep 21 18:11:21 vpngate pluto[7279]: | next event EVENT_RETRANSMIT in 10
seconds for #3
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20070922/56400e20/attachment-0001.html
More information about the Users
mailing list