[Openswan Users] Connection aborts
Robert Borz
robert.borz at web.de
Wed Feb 4 03:39:08 EST 2009
Hi,
I'm using Openswan on Debian Lenny/5.0 with the shipped 2.6.26-1-686 kernel. I got a connection up and running between this box and a consumer router (AVM FRITZ!Box 7270).
Both sides have public IP addresses, changing every day. So I created DynDNS accounts for them.
The connection comes up and my routing table shows:
192.168.1.0/24 dev ppp0 scope link src 192.168.0.1
Finally I'm able to send pings and other traffic from each side to the other, great! :-)
But after some time, the connection gets stalled and won't get up anymore.
Here's my configuration and auth.log file on my linux box. At the end I also attached the configuration for the consumer router on the other end.
Maybe there's something unusual in there? Any hint would be really appreciated...
Robert.
------------------------------ ipsec.conf ------------------------------
version 2.0 # conforms to second version of ipsec.conf specification
config setup
interfaces=%defaultroute
plutodebug=all
klipsdebug=all
nat_traversal=no
virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12
conn **********
auto = start
leftid = @************************
left = %defaultroute
leftsubnet = 192.168.0.0/24
leftsourceip = 192.168.0.1
rightid = @**********
right = **********.dyndns.org
rightsubnet = 192.168.1.0/24
rightsourceip = 192.168.1.1
authby = secret
aggrmode = yes
ike = 3des-sha1-modp1024,3des-sha1-modp1536,aes-sha1-modp1024,aes-sha1-modp1536
pfs = yes
# Disable Opportunistic Encryption
include /etc/ipsec.d/examples/no_oe.conf
------------------------------------------------------------------------
------------------------------- auth.log -------------------------------
Feb 4 09:00:12 vpn ipsec__plutorun: Starting Pluto subsystem...
Feb 4 09:00:12 vpn ipsec__plutorun: Unknown default RSA hostkey scheme, not generating a default hostkey
Feb 4 09:00:12 vpn pluto[15879]: Starting Pluto (Openswan Version 2.4.12 LDAP_V3 PLUTO_SENDS_VENDORID PLUTO_USES_KEYRR; Vendor ID OE`lPH|Vbpuu)
Feb 4 09:00:12 vpn pluto[15879]: Setting NAT-Traversal port-4500 floating to off
Feb 4 09:00:12 vpn pluto[15879]: port floating activation criteria nat_t=0/port_fload=1
Feb 4 09:00:12 vpn pluto[15879]: including NAT-Traversal patch (Version 0.6c) [disabled]
Feb 4 09:00:12 vpn pluto[15879]: | opening /dev/urandom
Feb 4 09:00:12 vpn pluto[15879]: | inserting event EVENT_REINIT_SECRET, timeout in 3600 seconds
Feb 4 09:00:12 vpn pluto[15879]: | inserting event EVENT_PENDING_PHASE2, timeout in 120 seconds
Feb 4 09:00:12 vpn pluto[15879]: ike_alg_register_enc(): Activating OAKLEY_AES_CBC: Ok (ret=0)
Feb 4 09:00:12 vpn pluto[15879]: starting up 1 cryptographic helpers
Feb 4 09:00:12 vpn pluto[15879]: started helper pid=15887 (fd:6)
Feb 4 09:00:12 vpn pluto[15887]: | opening /dev/urandom
Feb 4 09:00:12 vpn pluto[15879]: | process 15879 listening for PF_KEY_V2 on file descriptor 7
Feb 4 09:00:12 vpn pluto[15887]: | certs and keys locked by 'free_preshared_secrets'
Feb 4 09:00:12 vpn pluto[15879]: Using NETKEY IPsec interface code on 2.6.26-1-686
Feb 4 09:00:12 vpn pluto[15879]: | pfkey_lib_debug:pfkey_msg_hdr_build:
Feb 4 09:00:12 vpn pluto[15879]: | pfkey_lib_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=0p0xbfcf97e0 pfkey_ext=0p0xbfcfa800 *pfkey_ext=0p(nil).
Feb 4 09:00:12 vpn pluto[15879]: | pfkey_lib_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=0p0xbfcf97e0 pfkey_ext=0p0xbfcfa800 *pfkey_ext=0p0x88393e8.
Feb 4 09:00:12 vpn pluto[15879]: | pfkey_lib_debug:pfkey_msg_build: pfkey_msg=0p0x8839400 allocated 16 bytes, &(extensions[0])=0p0xbfcfa800
Feb 4 09:00:12 vpn pluto[15879]: | pfkey_lib_debug:pfkey_msg_build: extensions permitted=00000001, seen=00000001, required=00000001.
Feb 4 09:00:12 vpn pluto[15879]: | pfkey_lib_debug:pfkey_msg_parse: parsing message ver=2, type=7(register), errno=0, satype=2(AH), len=2, res=0, seq=1, pid=15879.
Feb 4 09:00:12 vpn pluto[15879]: | pfkey_lib_debug:pfkey_msg_parse: remain=0
Feb 4 09:00:12 vpn pluto[15879]: | pfkey_lib_debug:pfkey_msg_parse: extensions permitted=00000001, required=00000001.
Feb 4 09:00:12 vpn pluto[15887]: | certs and keys unlocked by 'free_preshard_secrets'
Feb 4 09:00:12 vpn pluto[15879]: | pfkey_lib_debug:pfkey_msg_parse: extensions permitted=00000001, seen=00000001, required=00000001.
Feb 4 09:00:12 vpn pluto[15879]: | finish_pfkey_msg: SADB_REGISTER message 1 for AH
Feb 4 09:00:12 vpn pluto[15887]: ! helper 0 waiting on fd: 7
Feb 4 09:00:12 vpn pluto[15879]: | 02 07 00 02 02 00 00 00 01 00 00 00 07 3e 00 00
Feb 4 09:00:18 vpn pluto[15879]: | pfkey_get: SADB_REGISTER message 1
Feb 4 09:00:18 vpn pluto[15879]: | AH registered with kernel.
Feb 4 09:00:18 vpn pluto[15879]: | pfkey_lib_debug:pfkey_msg_hdr_build:
Feb 4 09:00:18 vpn pluto[15879]: | pfkey_lib_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=0p0xbfcf97e0 pfkey_ext=0p0xbfcfa800 *pfkey_ext=0p(nil).
Feb 4 09:00:18 vpn pluto[15879]: | pfkey_lib_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=0p0xbfcf97e0 pfkey_ext=0p0xbfcfa800 *pfkey_ext=0p0x88393e8.
Feb 4 09:00:18 vpn pluto[15879]: | pfkey_lib_debug:pfkey_msg_build: pfkey_msg=0p0x8839400 allocated 16 bytes, &(extensions[0])=0p0xbfcfa800
Feb 4 09:00:18 vpn pluto[15879]: | pfkey_lib_debug:pfkey_msg_build: extensions permitted=00000001, seen=00000001, required=00000001.
Feb 4 09:00:18 vpn pluto[15879]: | pfkey_lib_debug:pfkey_msg_parse: parsing message ver=2, type=7(register), errno=0, satype=3(ESP), len=2, res=0, seq=2, pid=15879.
Feb 4 09:00:18 vpn pluto[15879]: | pfkey_lib_debug:pfkey_msg_parse: remain=0
Feb 4 09:00:18 vpn pluto[15879]: | pfkey_lib_debug:pfkey_msg_parse: extensions permitted=00000001, required=00000001.
Feb 4 09:00:18 vpn pluto[15879]: | pfkey_lib_debug:pfkey_msg_parse: extensions permitted=00000001, seen=00000001, required=00000001.
Feb 4 09:00:18 vpn pluto[15879]: | finish_pfkey_msg: SADB_REGISTER message 2 for ESP
Feb 4 09:00:18 vpn pluto[15879]: | 02 07 00 03 02 00 00 00 02 00 00 00 07 3e 00 00
Feb 4 09:00:22 vpn pluto[15879]: | pfkey_get: SADB_REGISTER message 2
Feb 4 09:00:22 vpn pluto[15879]: | alg_init():memset(0x8102e80, 0, 2016) memset(0x8103660, 0, 2048)
Feb 4 09:00:22 vpn pluto[15879]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: sadb_msg_len=18 sadb_supported_len=48
Feb 4 09:00:22 vpn pluto[15879]: | kernel_alg_add():satype=3, exttype=14, alg_id=251
Feb 4 09:00:22 vpn pluto[15879]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[0], exttype=14, satype=3, alg_id=251, alg_ivlen=0, alg_minbits=0, alg_maxbits=0, res=0, ret=1
Feb 4 09:00:22 vpn pluto[15879]: | kernel_alg_add():satype=3, exttype=14, alg_id=2
Feb 4 09:00:22 vpn pluto[15879]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[1], exttype=14, satype=3, alg_id=2, alg_ivlen=0, alg_minbits=128, alg_maxbits=128, res=0, ret=1
Feb 4 09:00:22 vpn pluto[15879]: | kernel_alg_add():satype=3, exttype=14, alg_id=3
Feb 4 09:00:22 vpn pluto[15879]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[2], exttype=14, satype=3, alg_id=3, alg_ivlen=0, alg_minbits=160, alg_maxbits=160, res=0, ret=1
Feb 4 09:00:22 vpn pluto[15879]: | kernel_alg_add():satype=3, exttype=14, alg_id=5
Feb 4 09:00:22 vpn pluto[15879]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[3], exttype=14, satype=3, alg_id=5, alg_ivlen=0, alg_minbits=256, alg_maxbits=256, res=0, ret=1
Feb 4 09:00:22 vpn pluto[15879]: | kernel_alg_add():satype=3, exttype=14, alg_id=9
Feb 4 09:00:22 vpn pluto[15879]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[4], exttype=14, satype=3, alg_id=9, alg_ivlen=0, alg_minbits=128, alg_maxbits=128, res=0, ret=1
Feb 4 09:00:22 vpn pluto[15879]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: sadb_msg_len=18 sadb_supported_len=80
Feb 4 09:00:22 vpn pluto[15879]: | kernel_alg_add():satype=3, exttype=15, alg_id=11
Feb 4 09:00:22 vpn pluto[15879]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[5], exttype=15, satype=3, alg_id=11, alg_ivlen=0, alg_minbits=0, alg_maxbits=0, res=0, ret=1
Feb 4 09:00:22 vpn pluto[15879]: | kernel_alg_add():satype=3, exttype=15, alg_id=2
Feb 4 09:00:22 vpn pluto[15879]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[6], exttype=15, satype=3, alg_id=2, alg_ivlen=8, alg_minbits=64, alg_maxbits=64, res=0, ret=1
Feb 4 09:00:22 vpn pluto[15879]: | kernel_alg_add():satype=3, exttype=15, alg_id=3
Feb 4 09:00:22 vpn pluto[15879]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[7], exttype=15, satype=3, alg_id=3, alg_ivlen=8, alg_minbits=192, alg_maxbits=192, res=0, ret=1
Feb 4 09:00:22 vpn pluto[15879]: | kernel_alg_add():satype=3, exttype=15, alg_id=7
Feb 4 09:00:22 vpn pluto[15879]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[8], exttype=15, satype=3, alg_id=7, alg_ivlen=8, alg_minbits=40, alg_maxbits=448, res=0, ret=1
Feb 4 09:00:22 vpn pluto[15879]: | kernel_alg_add():satype=3, exttype=15, alg_id=12
Feb 4 09:00:22 vpn pluto[15879]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[9], exttype=15, satype=3, alg_id=12, alg_ivlen=8, alg_minbits=128, alg_maxbits=256, res=0, ret=1
Feb 4 09:00:22 vpn pluto[15879]: | kernel_alg_add():satype=3, exttype=15, alg_id=252
Feb 4 09:00:22 vpn pluto[15879]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[10], exttype=15, satype=3, alg_id=252, alg_ivlen=8, alg_minbits=128, alg_maxbits=256, res=0, ret=1
Feb 4 09:00:22 vpn pluto[15879]: | kernel_alg_add():satype=3, exttype=15, alg_id=22
Feb 4 09:00:22 vpn pluto[15879]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[11], exttype=15, satype=3, alg_id=22, alg_ivlen=8, alg_minbits=128, alg_maxbits=256, res=0, ret=1
Feb 4 09:00:22 vpn pluto[15879]: | kernel_alg_add():satype=3, exttype=15, alg_id=253
Feb 4 09:00:22 vpn pluto[15879]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[12], exttype=15, satype=3, alg_id=253, alg_ivlen=8, alg_minbits=128, alg_maxbits=256, res=0, ret=1
Feb 4 09:00:22 vpn pluto[15879]: | kernel_alg_add():satype=3, exttype=15, alg_id=13
Feb 4 09:00:22 vpn pluto[15879]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[13], exttype=15, satype=3, alg_id=13, alg_ivlen=8, alg_minbits=128, alg_maxbits=256, res=0, ret=1
Feb 4 09:00:22 vpn pluto[15879]: | ESP registered with kernel.
Feb 4 09:00:22 vpn pluto[15879]: | pfkey_lib_debug:pfkey_msg_hdr_build:
Feb 4 09:00:22 vpn pluto[15879]: | pfkey_lib_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=0p0xbfcf97e0 pfkey_ext=0p0xbfcfa800 *pfkey_ext=0p(nil).
Feb 4 09:00:22 vpn pluto[15879]: | pfkey_lib_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=0p0xbfcf97e0 pfkey_ext=0p0xbfcfa800 *pfkey_ext=0p0x88393e8.
Feb 4 09:00:22 vpn pluto[15879]: | pfkey_lib_debug:pfkey_msg_build: pfkey_msg=0p0x8839400 allocated 16 bytes, &(extensions[0])=0p0xbfcfa800
Feb 4 09:00:22 vpn pluto[15879]: | pfkey_lib_debug:pfkey_msg_build: extensions permitted=00000001, seen=00000001, required=00000001.
Feb 4 09:00:22 vpn pluto[15879]: | pfkey_lib_debug:pfkey_msg_parse: parsing message ver=2, type=7(register), errno=0, satype=9(IPIP), len=2, res=0, seq=3, pid=15879.
Feb 4 09:00:22 vpn pluto[15879]: | pfkey_lib_debug:pfkey_msg_parse: remain=0
Feb 4 09:00:22 vpn pluto[15879]: | pfkey_lib_debug:pfkey_msg_parse: extensions permitted=00000001, required=00000001.
Feb 4 09:00:22 vpn pluto[15879]: | pfkey_lib_debug:pfkey_msg_parse: extensions permitted=00000001, seen=00000001, required=00000001.
Feb 4 09:00:22 vpn pluto[15879]: | finish_pfkey_msg: SADB_REGISTER message 3 for IPCOMP
Feb 4 09:00:22 vpn pluto[15879]: | 02 07 00 09 02 00 00 00 03 00 00 00 07 3e 00 00
Feb 4 09:00:26 vpn pluto[15879]: | pfkey_get: SADB_REGISTER message 3
Feb 4 09:00:26 vpn pluto[15879]: | IPCOMP registered with kernel.
Feb 4 09:00:26 vpn pluto[15879]: Changing to directory '/etc/ipsec.d/cacerts'
Feb 4 09:00:26 vpn pluto[15879]: Changing to directory '/etc/ipsec.d/aacerts'
Feb 4 09:00:26 vpn pluto[15879]: Changing to directory '/etc/ipsec.d/ocspcerts'
Feb 4 09:00:26 vpn pluto[15879]: Changing to directory '/etc/ipsec.d/crls'
Feb 4 09:00:26 vpn pluto[15879]: Warning: empty directory
Feb 4 09:00:26 vpn pluto[15879]: | inserting event EVENT_LOG_DAILY, timeout in 53974 seconds
Feb 4 09:00:26 vpn pluto[15879]: | next event EVENT_PENDING_PHASE2 in 106 seconds
Feb 4 09:00:26 vpn pluto[15879]: |
Feb 4 09:00:26 vpn pluto[15879]: | *received whack message
Feb 4 09:00:26 vpn pluto[15879]: | certs and keys locked by 'free_preshared_secrets'
Feb 4 09:00:26 vpn pluto[15879]: | certs and keys unlocked by 'free_preshard_secrets'
Feb 4 09:00:26 vpn pluto[15879]: loading secrets from "/etc/ipsec.secrets"
Feb 4 09:00:26 vpn pluto[15879]: | certs and keys locked by 'process_secret'
Feb 4 09:00:26 vpn pluto[15879]: | certs and keys unlocked by 'process_secrets'
Feb 4 09:00:26 vpn pluto[15879]: | next event EVENT_PENDING_PHASE2 in 106 seconds
Feb 4 09:00:26 vpn pluto[15879]: |
Feb 4 09:00:26 vpn pluto[15879]: | *received whack message
Feb 4 09:00:26 vpn pluto[15879]: | alg_info_parse_str() ealg_buf=3des aalg_buf=sha1eklen=0 aklen=0
Feb 4 09:00:26 vpn pluto[15879]: | enum_search_prefix () calling enum_search(0x80e4420, "OAKLEY_3DES")
Feb 4 09:00:26 vpn pluto[15879]: | enum_search_ppfixi () calling enum_search(0x80e4420, "OAKLEY_3DES_CBC")
Feb 4 09:00:26 vpn pluto[15879]: | parser_alg_info_add() ealg_getbyname("3des")=5
Feb 4 09:00:26 vpn pluto[15879]: | enum_search_prefix () calling enum_search(0x80e4440, "OAKLEY_SHA1")
Feb 4 09:00:26 vpn pluto[15879]: | parser_alg_info_add() aalg_getbyname("sha1")=2
Feb 4 09:00:26 vpn pluto[15879]: | enum_search_prefix () calling enum_search(0x80e4470, "OAKLEY_GROUP_MODP1024")
Feb 4 09:00:26 vpn pluto[15879]: | parser_alg_info_add() modp_getbyname("modp1024")=2
Feb 4 09:00:26 vpn pluto[15879]: | __alg_info_ike_add() ealg=5 aalg=2 modp_id=2, cnt=1
Feb 4 09:00:26 vpn pluto[15879]: | alg_info_parse_str() ealg_buf=3des aalg_buf=sha1eklen=0 aklen=0
Feb 4 09:00:26 vpn pluto[15879]: | enum_search_prefix () calling enum_search(0x80e4420, "OAKLEY_3DES")
Feb 4 09:00:26 vpn pluto[15879]: | enum_search_ppfixi () calling enum_search(0x80e4420, "OAKLEY_3DES_CBC")
Feb 4 09:00:26 vpn pluto[15879]: | parser_alg_info_add() ealg_getbyname("3des")=5
Feb 4 09:00:26 vpn pluto[15879]: | enum_search_prefix () calling enum_search(0x80e4440, "OAKLEY_SHA1")
Feb 4 09:00:26 vpn pluto[15879]: | parser_alg_info_add() aalg_getbyname("sha1")=2
Feb 4 09:00:26 vpn pluto[15879]: | enum_search_prefix () calling enum_search(0x80e4470, "OAKLEY_GROUP_MODP1536")
Feb 4 09:00:26 vpn pluto[15879]: | parser_alg_info_add() modp_getbyname("modp1536")=5
Feb 4 09:00:26 vpn pluto[15879]: | __alg_info_ike_add() ealg=5 aalg=2 modp_id=5, cnt=2
Feb 4 09:00:26 vpn pluto[15879]: | alg_info_parse_str() ealg_buf=aes aalg_buf=sha1eklen=0 aklen=0
Feb 4 09:00:26 vpn pluto[15879]: | enum_search_prefix () calling enum_search(0x80e4420, "OAKLEY_AES")
Feb 4 09:00:26 vpn pluto[15879]: | enum_search_ppfixi () calling enum_search(0x80e4420, "OAKLEY_AES_CBC")
Feb 4 09:00:26 vpn pluto[15879]: | parser_alg_info_add() ealg_getbyname("aes")=7
Feb 4 09:00:26 vpn pluto[15879]: | enum_search_prefix () calling enum_search(0x80e4440, "OAKLEY_SHA1")
Feb 4 09:00:26 vpn pluto[15879]: | parser_alg_info_add() aalg_getbyname("sha1")=2
Feb 4 09:00:26 vpn pluto[15879]: | enum_search_prefix () calling enum_search(0x80e4470, "OAKLEY_GROUP_MODP1024")
Feb 4 09:00:26 vpn pluto[15879]: | parser_alg_info_add() modp_getbyname("modp1024")=2
Feb 4 09:00:26 vpn pluto[15879]: | __alg_info_ike_add() ealg=7 aalg=2 modp_id=2, cnt=3
Feb 4 09:00:26 vpn pluto[15879]: | alg_info_parse_str() ealg_buf=aes aalg_buf=sha1eklen=0 aklen=0
Feb 4 09:00:26 vpn pluto[15879]: | enum_search_prefix () calling enum_search(0x80e4420, "OAKLEY_AES")
Feb 4 09:00:26 vpn pluto[15879]: | enum_search_ppfixi () calling enum_search(0x80e4420, "OAKLEY_AES_CBC")
Feb 4 09:00:26 vpn pluto[15879]: | parser_alg_info_add() ealg_getbyname("aes")=7
Feb 4 09:00:26 vpn pluto[15879]: | enum_search_prefix () calling enum_search(0x80e4440, "OAKLEY_SHA1")
Feb 4 09:00:26 vpn pluto[15879]: | parser_alg_info_add() aalg_getbyname("sha1")=2
Feb 4 09:00:26 vpn pluto[15879]: | enum_search_prefix () calling enum_search(0x80e4470, "OAKLEY_GROUP_MODP1536")
Feb 4 09:00:26 vpn pluto[15879]: | parser_alg_info_add() modp_getbyname("modp1536")=5
Feb 4 09:00:26 vpn pluto[15879]: | __alg_info_ike_add() ealg=7 aalg=2 modp_id=5, cnt=4
Feb 4 09:00:26 vpn pluto[15879]: | Added new connection ********** with policy PSK+ENCRYPT+TUNNEL+PFS+AGGRESSIVE
Feb 4 09:00:26 vpn pluto[15879]: | from whack: got --ike=3des-sha1-modp1024,3des-sha1-modp1536,aes-sha1-modp1024,aes-sha1-modp1536
Feb 4 09:00:26 vpn pluto[15879]: | ike string values: 3DES_CBC(5)_000-SHA1(2)-MODP1024(2), 3DES_CBC(5)_000-SHA1(2)-MODP1536(5), AES_CBC(7)_000-SHA1(2)-MODP1024(2), AES_CBC(7)_000-SHA1(2)-MODP1536(5); flags=strict
Feb 4 09:00:26 vpn pluto[15879]: | counting wild cards for @************************ is 0
Feb 4 09:00:26 vpn pluto[15879]: | counting wild cards for @********** is 0
Feb 4 09:00:26 vpn pluto[15879]: | alg_info_addref() alg_info->ref_cnt=1
Feb 4 09:00:26 vpn pluto[15879]: | alg_info_addref() alg_info->ref_cnt=2
Feb 4 09:00:26 vpn pluto[15879]: added connection description "**********"
Feb 4 09:00:26 vpn pluto[15879]: | 192.168.0.0/24===84.154.56.62[@************************]...79.207.134.254[@**********]===192.168.1.0/24
Feb 4 09:00:26 vpn pluto[15879]: | ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0; policy: PSK+ENCRYPT+TUNNEL+PFS+AGGRESSIVE
Feb 4 09:00:26 vpn pluto[15879]: | next event EVENT_PENDING_PHASE2 in 106 seconds
Feb 4 09:00:26 vpn pluto[15879]: |
Feb 4 09:00:26 vpn pluto[15879]: | *received whack message
Feb 4 09:00:26 vpn pluto[15879]: listening for IKE messages
Feb 4 09:00:26 vpn pluto[15879]: | found lo with address 127.0.0.1
Feb 4 09:00:26 vpn pluto[15879]: | found eth0 with address 192.168.0.1
Feb 4 09:00:26 vpn pluto[15879]: | found ppp0 with address 84.154.56.62
Feb 4 09:00:26 vpn pluto[15879]: | found ppp1 with address 80.89.74.251
Feb 4 09:00:26 vpn pluto[15879]: adding interface ppp1/ppp1 80.89.74.251:500
Feb 4 09:00:26 vpn pluto[15879]: adding interface ppp0/ppp0 84.154.56.62:500
Feb 4 09:00:26 vpn pluto[15879]: adding interface eth0/eth0 192.168.0.1:500
Feb 4 09:00:26 vpn pluto[15879]: adding interface lo/lo 127.0.0.1:500
Feb 4 09:00:26 vpn pluto[15879]: | found lo with address 0000:0000:0000:0000:0000:0000:0000:0001
Feb 4 09:00:26 vpn pluto[15879]: adding interface lo/lo ::1:500
Feb 4 09:00:26 vpn pluto[15879]: | connect_to_host_pair: 84.154.56.62:500 79.207.134.254:500 -> hp:none
Feb 4 09:00:26 vpn pluto[15879]: | certs and keys locked by 'free_preshared_secrets'
Feb 4 09:00:26 vpn pluto[15879]: forgetting secrets
Feb 4 09:00:26 vpn pluto[15879]: | certs and keys unlocked by 'free_preshard_secrets'
Feb 4 09:00:26 vpn pluto[15879]: loading secrets from "/etc/ipsec.secrets"
Feb 4 09:00:26 vpn pluto[15879]: | certs and keys locked by 'process_secret'
Feb 4 09:00:26 vpn pluto[15879]: | certs and keys unlocked by 'process_secrets'
Feb 4 09:00:26 vpn pluto[15879]: | next event EVENT_PENDING_PHASE2 in 106 seconds
Feb 4 09:00:26 vpn pluto[15879]: |
Feb 4 09:00:26 vpn pluto[15879]: | *received whack message
Feb 4 09:00:26 vpn pluto[15879]: | processing connection **********
Feb 4 09:00:26 vpn pluto[15879]: | route owner of "**********" unrouted: NULL; eroute owner: NULL
Feb 4 09:00:26 vpn pluto[15879]: | could_route called for ********** (kind=CK_PERMANENT)
Feb 4 09:00:26 vpn pluto[15879]: | route owner of "**********" unrouted: NULL; eroute owner: NULL
Feb 4 09:00:26 vpn pluto[15879]: | route_and_eroute with c: ********** (next: none) ero:null esr:{(nil)} ro:null rosr:{(nil)} and state: 0
Feb 4 09:00:26 vpn pluto[15879]: | add eroute 192.168.1.0/24:0 --0-> 192.168.0.0/24:0 => %trap (raw_eroute)
Feb 4 09:00:26 vpn pluto[15879]: | eroute_connection add eroute 192.168.0.0/24:0 --0-> 192.168.1.0/24:0 => %trap (raw_eroute)
Feb 4 09:00:26 vpn pluto[15879]: | route_and_eroute: firewall_notified: true
Feb 4 09:00:26 vpn pluto[15879]: | command executing prepare-client
Feb 4 09:00:26 vpn pluto[15879]: | executing prepare-client: 2>&1 PLUTO_VERSION='1.1' PLUTO_VERB='prepare-client' PLUTO_CONNECTION='**********' PLUTO_NEXT_HOP='79.207.134.254' PLUTO_INTERFACE='ppp0' PLUTO_ME='84.154.56.62' PLUTO_MY_ID='@************************' PLUTO_MY_CLIENT='192.168.0.0/24' PLUTO_MY_CLIENT_NET='192.168.0.0' PLUTO_MY_CLIENT_MASK='255.255.255.0' PLUTO_MY_PORT='0' PLUTO_MY_PROTOCOL='0' PLUTO_PEER='79.207.134.254' PLUTO_PEER_ID='@**********' PLUTO_PEER_CLIENT='192.168.1.0/24' PLUTO_PEER_CLIENT_NET='192.168.1.0' PLUTO_PEER_CLIENT_MASK='255.255.255.0' PLUTO_PEER_PORT='0' PLUTO_PEER_PROTOCOL='0' PLUTO_PEER_CA='' PLUTO_CONN_POLICY='PSK+ENCRYPT+TUNNEL+PFS+AGGRESSIVE' PLUTO_MY_SOURCEIP='192.168.0.1' ipsec _updown
Feb 4 09:00:26 vpn pluto[15879]: | command executing route-client
Feb 4 09:00:26 vpn pluto[15879]: | executing route-client: 2>&1 PLUTO_VERSION='1.1' PLUTO_VERB='route-client' PLUTO_CONNECTION='**********' PLUTO_NEXT_HOP='79.207.134.254' PLUTO_INTERFACE='ppp0' PLUTO_ME='84.154.56.62' PLUTO_MY_ID='@************************' PLUTO_MY_CLIENT='192.168.0.0/24' PLUTO_MY_CLIENT_NET='192.168.0.0' PLUTO_MY_CLIENT_MASK='255.255.255.0' PLUTO_MY_PORT='0' PLUTO_MY_PROTOCOL='0' PLUTO_PEER='79.207.134.254' PLUTO_PEER_ID='@**********' PLUTO_PEER_CLIENT='192.168.1.0/24' PLUTO_PEER_CLIENT_NET='192.168.1.0' PLUTO_PEER_CLIENT_MASK='255.255.255.0' PLUTO_PEER_PORT='0' PLUTO_PEER_PROTOCOL='0' PLUTO_PEER_CA='' PLUTO_CONN_POLICY='PSK+ENCRYPT+TUNNEL+PFS+AGGRESSIVE' PLUTO_MY_SOURCEIP='192.168.0.1' ipsec _updown
Feb 4 09:00:27 vpn pluto[15879]: | next event EVENT_PENDING_PHASE2 in 105 seconds
Feb 4 09:00:27 vpn pluto[15879]: |
Feb 4 09:00:27 vpn pluto[15879]: | *received whack message
Feb 4 09:00:27 vpn pluto[15879]: | processing connection **********
Feb 4 09:00:27 vpn pluto[15879]: | empty esp_info, returning empty
Feb 4 09:00:27 vpn pluto[15879]: | creating state object #1 at 0x8838b40
Feb 4 09:00:27 vpn pluto[15879]: | processing connection **********
Feb 4 09:00:27 vpn pluto[15879]: | ICOOKIE: 51 ec 62 5a c7 55 66 cf
Feb 4 09:00:27 vpn pluto[15879]: | RCOOKIE: 00 00 00 00 00 00 00 00
Feb 4 09:00:27 vpn pluto[15879]: | peer: 4f cf 86 fe
Feb 4 09:00:27 vpn pluto[15879]: | state hash entry 0
Feb 4 09:00:27 vpn pluto[15879]: | inserting event EVENT_SO_DISCARD, timeout in 0 seconds for #1
Feb 4 09:00:27 vpn pluto[15879]: | using transform (5,2,2,0)
Feb 4 09:00:27 vpn pluto[15879]: "**********" #1: multiple transforms were set in aggressive mode. Only first one used.
Feb 4 09:00:27 vpn pluto[15879]: "**********" #1: transform (5,2,5,0) ignored.
Feb 4 09:00:27 vpn pluto[15879]: "**********" #1: transform (7,2,2,0) ignored.
Feb 4 09:00:27 vpn pluto[15879]: "**********" #1: transform (7,2,5,0) ignored.
Feb 4 09:00:27 vpn pluto[15879]: | initiating aggressive mode with IKE=E=5-H=2-M=2
Feb 4 09:00:27 vpn pluto[15879]: | Queuing pending Quick Mode with 79.207.134.254 "**********"
Feb 4 09:00:27 vpn pluto[15879]: "**********" #1: initiating Aggressive Mode #1, connection "**********"
Feb 4 09:00:27 vpn pluto[15879]: | 0: w->pcw_dead: 0 w->pcw_work: 0 cnt: 1
Feb 4 09:00:27 vpn pluto[15879]: | asking helper 0 to do build_kenonce op on seq: 1
Feb 4 09:00:27 vpn pluto[15887]: ! helper 0 doing build_kenonce op id: 1
Feb 4 09:00:27 vpn pluto[15879]: | inserting event EVENT_CRYPTO_FAILED, timeout in 300 seconds for #1
Feb 4 09:00:27 vpn pluto[15879]: | next event EVENT_PENDING_PHASE2 in 105 seconds
Feb 4 09:00:27 vpn pluto[15887]: ! Local DH secret:
Feb 4 09:00:27 vpn pluto[15887]: ! 5f fc 95 fa 40 89 c7 18 c8 5d 2c 04 8b b7 42 af
Feb 4 09:00:27 vpn pluto[15887]: ! 1e d7 1c 9c ba 85 c8 25 65 07 af a9 18 09 45 82
Feb 4 09:00:27 vpn pluto[15887]: ! Public DH value sent:
Feb 4 09:00:27 vpn pluto[15887]: ! d2 e5 6c dd 70 0f 4f 91 43 33 87 fc 43 8b b8 07
Feb 4 09:00:27 vpn pluto[15887]: ! 62 9e 2f d8 89 75 9c 07 11 17 96 2d 37 18 ef 25
Feb 4 09:00:27 vpn pluto[15887]: ! 3f 66 7a b9 10 d7 c9 2e bd 77 2f 38 4c 79 27 b7
Feb 4 09:00:27 vpn pluto[15887]: ! 7d 40 25 7f fb 0b 4b 80 c9 83 1c d3 29 3b c5 35
Feb 4 09:00:27 vpn pluto[15887]: ! 61 e6 6a 4a a1 f4 2d f4 22 89 b2 61 2a 72 0a 85
Feb 4 09:00:27 vpn pluto[15887]: ! 48 7e 83 a9 e0 14 7b 53 7a c8 43 ef 5e e7 ed 1b
Feb 4 09:00:27 vpn pluto[15887]: ! b5 19 cc 65 be ae 2c 0f 1b 4f 39 d2 2f 9d cf b2
Feb 4 09:00:27 vpn pluto[15887]: ! e8 50 e6 4d 3f dd ea 67 b4 f5 4b 7b 16 df d0 ff
Feb 4 09:00:27 vpn pluto[15887]: ! Generated nonce:
Feb 4 09:00:27 vpn pluto[15887]: ! c7 bf 43 84 21 00 39 02 d1 21 c8 65 22 6a 71 9c
Feb 4 09:00:27 vpn pluto[15879]: | helper 0 has work (cnt now 0)
Feb 4 09:00:27 vpn pluto[15879]: | helper 0 replies to sequence 1
Feb 4 09:00:27 vpn pluto[15879]: | calling callback function 0x80974c0
Feb 4 09:00:27 vpn pluto[15879]: | aggr outI1: calculated ke+nonce, sending I1
Feb 4 09:00:27 vpn pluto[15879]: | processing connection **********
Feb 4 09:00:27 vpn pluto[15879]: | **emit ISAKMP Message:
Feb 4 09:00:27 vpn pluto[15879]: | initiator cookie:
Feb 4 09:00:27 vpn pluto[15879]: | 51 ec 62 5a c7 55 66 cf
Feb 4 09:00:27 vpn pluto[15879]: | responder cookie:
Feb 4 09:00:27 vpn pluto[15879]: | 00 00 00 00 00 00 00 00
Feb 4 09:00:27 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_SA
Feb 4 09:00:27 vpn pluto[15879]: | ISAKMP version: ISAKMP Version 1.0
Feb 4 09:00:27 vpn pluto[15879]: | exchange type: ISAKMP_XCHG_AGGR
Feb 4 09:00:27 vpn pluto[15879]: | flags: none
Feb 4 09:00:27 vpn pluto[15879]: | message ID: 00 00 00 00
Feb 4 09:00:27 vpn pluto[15879]: | using transform (5,2,2,0)
Feb 4 09:00:27 vpn pluto[15879]: "**********" #1: multiple transforms were set in aggressive mode. Only first one used.
Feb 4 09:00:27 vpn pluto[15879]: "**********" #1: transform (5,2,5,0) ignored.
Feb 4 09:00:27 vpn pluto[15879]: "**********" #1: transform (7,2,2,0) ignored.
Feb 4 09:00:27 vpn pluto[15879]: "**********" #1: transform (7,2,5,0) ignored.
Feb 4 09:00:27 vpn pluto[15879]: | ***emit ISAKMP Security Association Payload:
Feb 4 09:00:27 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_KE
Feb 4 09:00:27 vpn pluto[15879]: | DOI: ISAKMP_DOI_IPSEC
Feb 4 09:00:27 vpn pluto[15879]: | ****emit IPsec DOI SIT:
Feb 4 09:00:27 vpn pluto[15879]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
Feb 4 09:00:27 vpn pluto[15879]: | out_sa pcn: 0 has 1 valid proposals
Feb 4 09:00:27 vpn pluto[15879]: | out_sa pcn: 0 pn: 0<1 valid_count: 1
Feb 4 09:00:27 vpn pluto[15879]: | ****emit ISAKMP Proposal Payload:
Feb 4 09:00:27 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_NONE
Feb 4 09:00:27 vpn pluto[15879]: | proposal number: 0
Feb 4 09:00:27 vpn pluto[15879]: | protocol ID: PROTO_ISAKMP
Feb 4 09:00:27 vpn pluto[15879]: | SPI size: 0
Feb 4 09:00:27 vpn pluto[15879]: | number of transforms: 1
Feb 4 09:00:27 vpn pluto[15879]: | *****emit ISAKMP Transform Payload (ISAKMP):
Feb 4 09:00:27 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_NONE
Feb 4 09:00:27 vpn pluto[15879]: | transform number: 0
Feb 4 09:00:27 vpn pluto[15879]: | transform ID: KEY_IKE
Feb 4 09:00:27 vpn pluto[15879]: | ******emit ISAKMP Oakley attribute:
Feb 4 09:00:27 vpn pluto[15879]: | af+type: OAKLEY_LIFE_TYPE
Feb 4 09:00:27 vpn pluto[15879]: | length/value: 1
Feb 4 09:00:27 vpn pluto[15879]: | [1 is OAKLEY_LIFE_SECONDS]
Feb 4 09:00:27 vpn pluto[15879]: | ******emit ISAKMP Oakley attribute:
Feb 4 09:00:27 vpn pluto[15879]: | af+type: OAKLEY_LIFE_DURATION
Feb 4 09:00:27 vpn pluto[15879]: | length/value: 3600
Feb 4 09:00:27 vpn pluto[15879]: | ******emit ISAKMP Oakley attribute:
Feb 4 09:00:27 vpn pluto[15879]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Feb 4 09:00:27 vpn pluto[15879]: | length/value: 5
Feb 4 09:00:27 vpn pluto[15879]: | [5 is OAKLEY_3DES_CBC]
Feb 4 09:00:27 vpn pluto[15879]: | ******emit ISAKMP Oakley attribute:
Feb 4 09:00:27 vpn pluto[15879]: | af+type: OAKLEY_HASH_ALGORITHM
Feb 4 09:00:27 vpn pluto[15879]: | length/value: 2
Feb 4 09:00:27 vpn pluto[15879]: | [2 is OAKLEY_SHA1]
Feb 4 09:00:27 vpn pluto[15879]: | ******emit ISAKMP Oakley attribute:
Feb 4 09:00:27 vpn pluto[15879]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Feb 4 09:00:27 vpn pluto[15879]: | length/value: 1
Feb 4 09:00:27 vpn pluto[15879]: | [1 is OAKLEY_PRESHARED_KEY]
Feb 4 09:00:27 vpn pluto[15879]: | ******emit ISAKMP Oakley attribute:
Feb 4 09:00:27 vpn pluto[15879]: | af+type: OAKLEY_GROUP_DESCRIPTION
Feb 4 09:00:27 vpn pluto[15879]: | length/value: 2
Feb 4 09:00:27 vpn pluto[15879]: | [2 is OAKLEY_GROUP_MODP1024]
Feb 4 09:00:27 vpn pluto[15879]: | emitting length of ISAKMP Transform Payload (ISAKMP): 32
Feb 4 09:00:27 vpn pluto[15879]: | emitting length of ISAKMP Proposal Payload: 40
Feb 4 09:00:27 vpn pluto[15879]: | emitting length of ISAKMP Security Association Payload: 52
Feb 4 09:00:27 vpn pluto[15879]: | ***emit ISAKMP Key Exchange Payload:
Feb 4 09:00:27 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_NONCE
Feb 4 09:00:27 vpn pluto[15879]: | emitting 128 raw bytes of keyex value into ISAKMP Key Exchange Payload
Feb 4 09:00:27 vpn pluto[15879]: | keyex value d2 e5 6c dd 70 0f 4f 91 43 33 87 fc 43 8b b8 07
Feb 4 09:00:27 vpn pluto[15879]: | 62 9e 2f d8 89 75 9c 07 11 17 96 2d 37 18 ef 25
Feb 4 09:00:27 vpn pluto[15879]: | 3f 66 7a b9 10 d7 c9 2e bd 77 2f 38 4c 79 27 b7
Feb 4 09:00:27 vpn pluto[15879]: | 7d 40 25 7f fb 0b 4b 80 c9 83 1c d3 29 3b c5 35
Feb 4 09:00:27 vpn pluto[15879]: | 61 e6 6a 4a a1 f4 2d f4 22 89 b2 61 2a 72 0a 85
Feb 4 09:00:27 vpn pluto[15879]: | 48 7e 83 a9 e0 14 7b 53 7a c8 43 ef 5e e7 ed 1b
Feb 4 09:00:27 vpn pluto[15879]: | b5 19 cc 65 be ae 2c 0f 1b 4f 39 d2 2f 9d cf b2
Feb 4 09:00:27 vpn pluto[15879]: | e8 50 e6 4d 3f dd ea 67 b4 f5 4b 7b 16 df d0 ff
Feb 4 09:00:27 vpn pluto[15879]: | emitting length of ISAKMP Key Exchange Payload: 132
Feb 4 09:00:27 vpn pluto[15879]: | ***emit ISAKMP Nonce Payload:
Feb 4 09:00:27 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_ID
Feb 4 09:00:27 vpn pluto[15879]: | emitting 16 raw bytes of Ni into ISAKMP Nonce Payload
Feb 4 09:00:27 vpn pluto[15879]: | Ni c7 bf 43 84 21 00 39 02 d1 21 c8 65 22 6a 71 9c
Feb 4 09:00:27 vpn pluto[15879]: | emitting length of ISAKMP Nonce Payload: 20
Feb 4 09:00:27 vpn pluto[15879]: | ***emit ISAKMP Identification Payload (IPsec DOI):
Feb 4 09:00:27 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_VID
Feb 4 09:00:27 vpn pluto[15879]: | ID type: ID_FQDN
Feb 4 09:00:27 vpn pluto[15879]: | Protocol ID: 0
Feb 4 09:00:27 vpn pluto[15879]: | port: 0
Feb 4 09:00:27 vpn pluto[15879]: | emitting 24 raw bytes of my identity into ISAKMP Identification Payload (IPsec DOI)
Feb 4 09:00:27 vpn pluto[15879]: | my identity 66 73 31 2e 69 6e 74 72 61 6e 65 74 2e 6f 76 65
Feb 4 09:00:27 vpn pluto[15879]: | 72 74 75 72 6e 2e 64 65
Feb 4 09:00:27 vpn pluto[15879]: | emitting length of ISAKMP Identification Payload (IPsec DOI): 32
Feb 4 09:00:27 vpn pluto[15879]: | ***emit ISAKMP Vendor ID Payload:
Feb 4 09:00:27 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_NONE
Feb 4 09:00:27 vpn pluto[15879]: | emitting 16 raw bytes of V_ID into ISAKMP Vendor ID Payload
Feb 4 09:00:27 vpn pluto[15879]: | V_ID af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00
Feb 4 09:00:27 vpn pluto[15879]: | emitting length of ISAKMP Vendor ID Payload: 20
Feb 4 09:00:27 vpn pluto[15879]: | emitting length of ISAKMP Message: 284
Feb 4 09:00:27 vpn pluto[15879]: | sending:
Feb 4 09:00:27 vpn pluto[15879]: | 51 ec 62 5a c7 55 66 cf 00 00 00 00 00 00 00 00
Feb 4 09:00:27 vpn pluto[15879]: | 01 10 04 00 00 00 00 00 00 00 01 1c 04 00 00 34
Feb 4 09:00:27 vpn pluto[15879]: | 00 00 00 01 00 00 00 01 00 00 00 28 00 01 00 01
Feb 4 09:00:27 vpn pluto[15879]: | 00 00 00 20 00 01 00 00 80 0b 00 01 80 0c 0e 10
Feb 4 09:00:27 vpn pluto[15879]: | 80 01 00 05 80 02 00 02 80 03 00 01 80 04 00 02
Feb 4 09:00:27 vpn pluto[15879]: | 0a 00 00 84 d2 e5 6c dd 70 0f 4f 91 43 33 87 fc
Feb 4 09:00:27 vpn pluto[15879]: | 43 8b b8 07 62 9e 2f d8 89 75 9c 07 11 17 96 2d
Feb 4 09:00:27 vpn pluto[15879]: | 37 18 ef 25 3f 66 7a b9 10 d7 c9 2e bd 77 2f 38
Feb 4 09:00:27 vpn pluto[15879]: | 4c 79 27 b7 7d 40 25 7f fb 0b 4b 80 c9 83 1c d3
Feb 4 09:00:27 vpn pluto[15879]: | 29 3b c5 35 61 e6 6a 4a a1 f4 2d f4 22 89 b2 61
Feb 4 09:00:27 vpn pluto[15879]: | 2a 72 0a 85 48 7e 83 a9 e0 14 7b 53 7a c8 43 ef
Feb 4 09:00:27 vpn pluto[15879]: | 5e e7 ed 1b b5 19 cc 65 be ae 2c 0f 1b 4f 39 d2
Feb 4 09:00:27 vpn pluto[15879]: | 2f 9d cf b2 e8 50 e6 4d 3f dd ea 67 b4 f5 4b 7b
Feb 4 09:00:27 vpn pluto[15879]: | 16 df d0 ff 05 00 00 14 c7 bf 43 84 21 00 39 02
Feb 4 09:00:27 vpn pluto[15879]: | d1 21 c8 65 22 6a 71 9c 0d 00 00 20 02 00 00 00
Feb 4 09:00:27 vpn pluto[15879]: | 66 73 31 2e 69 6e 74 72 61 6e 65 74 2e 6f 76 65
Feb 4 09:00:27 vpn pluto[15879]: | 72 74 75 72 6e 2e 64 65 00 00 00 14 af ca d7 13
Feb 4 09:00:27 vpn pluto[15879]: | 68 a1 f1 c9 6b 86 96 fc 77 57 01 00
Feb 4 09:00:27 vpn pluto[15879]: | sending 284 bytes for aggr_outI1 through ppp0:500 to 79.207.134.254:500:
Feb 4 09:00:27 vpn pluto[15879]: | 51 ec 62 5a c7 55 66 cf 00 00 00 00 00 00 00 00
Feb 4 09:00:27 vpn pluto[15879]: | 01 10 04 00 00 00 00 00 00 00 01 1c 04 00 00 34
Feb 4 09:00:27 vpn pluto[15879]: | 00 00 00 01 00 00 00 01 00 00 00 28 00 01 00 01
Feb 4 09:00:27 vpn pluto[15879]: | 00 00 00 20 00 01 00 00 80 0b 00 01 80 0c 0e 10
Feb 4 09:00:27 vpn pluto[15879]: | 80 01 00 05 80 02 00 02 80 03 00 01 80 04 00 02
Feb 4 09:00:27 vpn pluto[15879]: | 0a 00 00 84 d2 e5 6c dd 70 0f 4f 91 43 33 87 fc
Feb 4 09:00:27 vpn pluto[15879]: | 43 8b b8 07 62 9e 2f d8 89 75 9c 07 11 17 96 2d
Feb 4 09:00:27 vpn pluto[15879]: | 37 18 ef 25 3f 66 7a b9 10 d7 c9 2e bd 77 2f 38
Feb 4 09:00:27 vpn pluto[15879]: | 4c 79 27 b7 7d 40 25 7f fb 0b 4b 80 c9 83 1c d3
Feb 4 09:00:27 vpn pluto[15879]: | 29 3b c5 35 61 e6 6a 4a a1 f4 2d f4 22 89 b2 61
Feb 4 09:00:27 vpn pluto[15879]: | 2a 72 0a 85 48 7e 83 a9 e0 14 7b 53 7a c8 43 ef
Feb 4 09:00:27 vpn pluto[15879]: | 5e e7 ed 1b b5 19 cc 65 be ae 2c 0f 1b 4f 39 d2
Feb 4 09:00:27 vpn pluto[15879]: | 2f 9d cf b2 e8 50 e6 4d 3f dd ea 67 b4 f5 4b 7b
Feb 4 09:00:27 vpn pluto[15879]: | 16 df d0 ff 05 00 00 14 c7 bf 43 84 21 00 39 02
Feb 4 09:00:27 vpn pluto[15879]: | d1 21 c8 65 22 6a 71 9c 0d 00 00 20 02 00 00 00
Feb 4 09:00:27 vpn pluto[15879]: | 66 73 31 2e 69 6e 74 72 61 6e 65 74 2e 6f 76 65
Feb 4 09:00:27 vpn pluto[15879]: | 72 74 75 72 6e 2e 64 65 00 00 00 14 af ca d7 13
Feb 4 09:00:27 vpn pluto[15879]: | 68 a1 f1 c9 6b 86 96 fc 77 57 01 00
Feb 4 09:00:27 vpn pluto[15879]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #1
Feb 4 09:00:27 vpn pluto[15879]: | complete state transition with STF_IGNORE
Feb 4 09:00:27 vpn pluto[15879]: | next event EVENT_RETRANSMIT in 10 seconds for #1
Feb 4 09:00:27 vpn pluto[15879]: |
Feb 4 09:00:27 vpn pluto[15879]: | *received kernel message
Feb 4 09:00:27 vpn pluto[15879]: | netlink_get: XFRM_MSG_ACQUIRE message
Feb 4 09:00:27 vpn pluto[15879]: | add bare shunt 0x88391c0 192.168.0.1/32:0 -0-> 192.168.1.1/32:0 => %hold 0 %acquire-netlink
Feb 4 09:00:27 vpn pluto[15879]: | initiate on demand from 192.168.0.1:0 to 192.168.1.1:0 proto=0 state: fos_start because: acquire
Feb 4 09:00:27 vpn pluto[15879]: | find_connection: looking for policy for connection: 192.168.0.1:0/0 -> 192.168.1.1:0/0
Feb 4 09:00:27 vpn pluto[15879]: | find_connection: conn "**********" has compatible peers: 192.168.0.0/24 -> 192.168.1.0/24 [pri: 12632077]
Feb 4 09:00:27 vpn pluto[15879]: | find_connection: comparing best "**********" [pri:12632077]{0x8838690} (child none) to "**********" [pri:12632077]{0x8838690} (child none)
Feb 4 09:00:27 vpn pluto[15879]: | find_connection: concluding with "**********" [pri:12632077]{0x8838690} kind=CK_PERMANENT
Feb 4 09:00:27 vpn pluto[15879]: | assign hold, routing was prospective erouted, needs to be erouted HOLD
Feb 4 09:00:27 vpn pluto[15879]: | eroute_connection replace %trap with broad %hold eroute 192.168.0.0/24:0 --0-> 192.168.1.0/24:0 => %hold (raw_eroute)
Feb 4 09:00:27 vpn pluto[15879]: | delete narrow %hold eroute 192.168.0.1/32:0 --0-> 192.168.1.1/32:0 => %hold (raw_eroute)
Feb 4 09:00:27 vpn pluto[15879]: | delete bare shunt 0x88391c0 192.168.0.1/32:0 -0-> 192.168.1.1/32:0 => %hold 0 %acquire-netlink
Feb 4 09:00:27 vpn pluto[15879]: | Queuing pending Quick Mode with 79.207.134.254 "**********"
Feb 4 09:00:27 vpn pluto[15879]: | NETKEY workaround for missing hold state or proper rate limiting: deleting existing pending state from 1233734427.
Feb 4 09:00:27 vpn pluto[15879]: | next event EVENT_RETRANSMIT in 10 seconds for #1
Feb 4 09:00:27 vpn pluto[15879]: |
Feb 4 09:00:27 vpn pluto[15879]: | *received 306 bytes from 79.207.134.254:500 on ppp0 (port=500)
Feb 4 09:00:27 vpn pluto[15879]: | 51 ec 62 5a c7 55 66 cf 92 51 a3 c6 21 37 23 a1
Feb 4 09:00:27 vpn pluto[15879]: | 01 10 04 00 00 00 00 00 00 00 01 32 04 00 00 34
Feb 4 09:00:27 vpn pluto[15879]: | 00 00 00 01 00 00 00 01 00 00 00 28 01 01 00 01
Feb 4 09:00:27 vpn pluto[15879]: | 00 00 00 20 01 01 00 00 80 01 00 05 80 02 00 02
Feb 4 09:00:27 vpn pluto[15879]: | 80 03 00 01 80 04 00 02 80 0b 00 01 80 0c 0e 10
Feb 4 09:00:27 vpn pluto[15879]: | 0a 00 00 84 92 24 e4 ae f6 bd 3c 80 5f a9 53 d5
Feb 4 09:00:27 vpn pluto[15879]: | e4 bd 71 b0 bf a6 66 47 b5 3c 95 6b 7f bc 49 6e
Feb 4 09:00:27 vpn pluto[15879]: | 4a 5a 67 10 dc e8 02 42 e2 d8 6e 30 3a 4b ab 35
Feb 4 09:00:27 vpn pluto[15879]: | a2 7d 06 59 67 c4 64 bd f1 6f 52 de 54 3e 59 0e
Feb 4 09:00:27 vpn pluto[15879]: | 43 ed 37 43 f3 0c e6 0c f3 e5 ff 8c a6 61 8c 69
Feb 4 09:00:27 vpn pluto[15879]: | 19 ed 43 2e ef a5 f2 e8 2b 2e 73 20 ad a5 7c 38
Feb 4 09:00:27 vpn pluto[15879]: | bb c8 bc 42 2d 99 66 dc 5b 55 c6 e7 64 62 81 e4
Feb 4 09:00:27 vpn pluto[15879]: | d1 02 c7 2a c2 2c 79 11 4e cd 9a 59 e0 92 21 7b
Feb 4 09:00:27 vpn pluto[15879]: | b2 2d 7a 71 05 00 00 14 19 1e d3 b4 0d d1 05 0d
Feb 4 09:00:27 vpn pluto[15879]: | af 3d df 42 a7 9a 81 cf 08 00 00 12 02 00 00 00
Feb 4 09:00:27 vpn pluto[15879]: | 6c 61 31 2d 66 62 37 32 37 30 0d 00 00 18 9e 48
Feb 4 09:00:27 vpn pluto[15879]: | 6a ab 82 62 83 49 21 d3 a5 3e 82 7f c9 db 30 6e
Feb 4 09:00:27 vpn pluto[15879]: | b1 a2 0d 00 00 0c 09 00 26 89 df d6 b7 12 00 00
Feb 4 09:00:27 vpn pluto[15879]: | 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57
Feb 4 09:00:27 vpn pluto[15879]: | 01 00
Feb 4 09:00:27 vpn pluto[15879]: | **parse ISAKMP Message:
Feb 4 09:00:27 vpn pluto[15879]: | initiator cookie:
Feb 4 09:00:27 vpn pluto[15879]: | 51 ec 62 5a c7 55 66 cf
Feb 4 09:00:27 vpn pluto[15879]: | responder cookie:
Feb 4 09:00:27 vpn pluto[15879]: | 92 51 a3 c6 21 37 23 a1
Feb 4 09:00:27 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_SA
Feb 4 09:00:27 vpn pluto[15879]: | ISAKMP version: ISAKMP Version 1.0
Feb 4 09:00:27 vpn pluto[15879]: | exchange type: ISAKMP_XCHG_AGGR
Feb 4 09:00:27 vpn pluto[15879]: | flags: none
Feb 4 09:00:27 vpn pluto[15879]: | message ID: 00 00 00 00
Feb 4 09:00:27 vpn pluto[15879]: | length: 306
Feb 4 09:00:27 vpn pluto[15879]: | processing packet with exchange type=ISAKMP_XCHG_AGGR (4)
Feb 4 09:00:27 vpn pluto[15879]: | ICOOKIE: 51 ec 62 5a c7 55 66 cf
Feb 4 09:00:27 vpn pluto[15879]: | RCOOKIE: 92 51 a3 c6 21 37 23 a1
Feb 4 09:00:27 vpn pluto[15879]: | peer: 4f cf 86 fe
Feb 4 09:00:27 vpn pluto[15879]: | state hash entry 30
Feb 4 09:00:27 vpn pluto[15879]: | state object not found
Feb 4 09:00:27 vpn pluto[15879]: | ICOOKIE: 51 ec 62 5a c7 55 66 cf
Feb 4 09:00:27 vpn pluto[15879]: | RCOOKIE: 00 00 00 00 00 00 00 00
Feb 4 09:00:27 vpn pluto[15879]: | peer: 4f cf 86 fe
Feb 4 09:00:27 vpn pluto[15879]: | state hash entry 0
Feb 4 09:00:27 vpn pluto[15879]: | peer and cookies match on #1, provided msgid 00000000 vs 00000000
Feb 4 09:00:27 vpn pluto[15879]: | state object #1 found, in STATE_AGGR_I1
Feb 4 09:00:27 vpn pluto[15879]: | processing connection **********
Feb 4 09:00:27 vpn pluto[15879]: | np=1 and sd=0x80eadc0
Feb 4 09:00:27 vpn pluto[15879]: | ***parse ISAKMP Security Association Payload:
Feb 4 09:00:27 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_KE
Feb 4 09:00:27 vpn pluto[15879]: | length: 52
Feb 4 09:00:27 vpn pluto[15879]: | DOI: ISAKMP_DOI_IPSEC
Feb 4 09:00:27 vpn pluto[15879]: | np=4 and sd=0x80eae14
Feb 4 09:00:27 vpn pluto[15879]: | ***parse ISAKMP Key Exchange Payload:
Feb 4 09:00:27 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_NONCE
Feb 4 09:00:27 vpn pluto[15879]: | length: 132
Feb 4 09:00:27 vpn pluto[15879]: | np=10 and sd=0x80eae68
Feb 4 09:00:27 vpn pluto[15879]: | ***parse ISAKMP Nonce Payload:
Feb 4 09:00:27 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_ID
Feb 4 09:00:27 vpn pluto[15879]: | length: 20
Feb 4 09:00:27 vpn pluto[15879]: | np=5 and sd=(nil)
Feb 4 09:00:27 vpn pluto[15879]: | ***parse ISAKMP Identification Payload:
Feb 4 09:00:27 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_HASH
Feb 4 09:00:27 vpn pluto[15879]: | length: 18
Feb 4 09:00:27 vpn pluto[15879]: | ID type: ID_FQDN
Feb 4 09:00:27 vpn pluto[15879]: | DOI specific A: 0
Feb 4 09:00:27 vpn pluto[15879]: | DOI specific B: 0
Feb 4 09:00:27 vpn pluto[15879]: | np=8 and sd=0x80eae50
Feb 4 09:00:27 vpn pluto[15879]: | ***parse ISAKMP Hash Payload:
Feb 4 09:00:27 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_VID
Feb 4 09:00:27 vpn pluto[15879]: | length: 24
Feb 4 09:00:27 vpn pluto[15879]: | np=13 and sd=0x80eae8c
Feb 4 09:00:27 vpn pluto[15879]: | ***parse ISAKMP Vendor ID Payload:
Feb 4 09:00:27 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_VID
Feb 4 09:00:27 vpn pluto[15879]: | length: 12
Feb 4 09:00:27 vpn pluto[15879]: | np=13 and sd=0x80eae8c
Feb 4 09:00:27 vpn pluto[15879]: | ***parse ISAKMP Vendor ID Payload:
Feb 4 09:00:27 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_NONE
Feb 4 09:00:27 vpn pluto[15879]: | length: 20
Feb 4 09:00:27 vpn pluto[15879]: "**********" #1: received Vendor ID payload [XAUTH]
Feb 4 09:00:27 vpn pluto[15879]: "**********" #1: received Vendor ID payload [Dead Peer Detection]
Feb 4 09:00:27 vpn pluto[15879]: "**********" #1: Aggressive mode peer ID is ID_FQDN: '@**********'
Feb 4 09:00:27 vpn pluto[15879]: | refine_connection: starting with **********
Feb 4 09:00:27 vpn pluto[15879]: | trusted_ca called with a=(empty) b=(empty)
Feb 4 09:00:27 vpn pluto[15879]: | refine_connection: happy with starting point: **********
Feb 4 09:00:27 vpn pluto[15879]: | offered CA: '%none'
Feb 4 09:00:27 vpn pluto[15879]: | ****parse IPsec DOI SIT:
Feb 4 09:00:27 vpn pluto[15879]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
Feb 4 09:00:27 vpn pluto[15879]: | ****parse ISAKMP Proposal Payload:
Feb 4 09:00:27 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_NONE
Feb 4 09:00:27 vpn pluto[15879]: | length: 40
Feb 4 09:00:27 vpn pluto[15879]: | proposal number: 1
Feb 4 09:00:27 vpn pluto[15879]: | protocol ID: PROTO_ISAKMP
Feb 4 09:00:27 vpn pluto[15879]: | SPI size: 0
Feb 4 09:00:27 vpn pluto[15879]: | number of transforms: 1
Feb 4 09:00:27 vpn pluto[15879]: | *****parse ISAKMP Transform Payload (ISAKMP):
Feb 4 09:00:27 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_NONE
Feb 4 09:00:27 vpn pluto[15879]: | length: 32
Feb 4 09:00:27 vpn pluto[15879]: | transform number: 1
Feb 4 09:00:27 vpn pluto[15879]: | transform ID: KEY_IKE
Feb 4 09:00:27 vpn pluto[15879]: | ******parse ISAKMP Oakley attribute:
Feb 4 09:00:27 vpn pluto[15879]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Feb 4 09:00:27 vpn pluto[15879]: | length/value: 5
Feb 4 09:00:27 vpn pluto[15879]: | [5 is OAKLEY_3DES_CBC]
Feb 4 09:00:27 vpn pluto[15879]: | ike_alg_enc_ok(ealg=5,key_len=0): blocksize=8, keyminlen=192, keydeflen=192, keymaxlen=192, ret=1
Feb 4 09:00:27 vpn pluto[15879]: | ******parse ISAKMP Oakley attribute:
Feb 4 09:00:27 vpn pluto[15879]: | af+type: OAKLEY_HASH_ALGORITHM
Feb 4 09:00:27 vpn pluto[15879]: | length/value: 2
Feb 4 09:00:27 vpn pluto[15879]: | [2 is OAKLEY_SHA1]
Feb 4 09:00:27 vpn pluto[15879]: | ******parse ISAKMP Oakley attribute:
Feb 4 09:00:27 vpn pluto[15879]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Feb 4 09:00:27 vpn pluto[15879]: | length/value: 1
Feb 4 09:00:27 vpn pluto[15879]: | [1 is OAKLEY_PRESHARED_KEY]
Feb 4 09:00:27 vpn pluto[15879]: | started looking for secret for @************************->@********** of kind PPK_PSK
Feb 4 09:00:27 vpn pluto[15879]: | actually looking for secret for @************************->@********** of kind PPK_PSK
Feb 4 09:00:27 vpn pluto[15879]: | 1: compared PSK @********** to @************************ / @********** -> 2
Feb 4 09:00:27 vpn pluto[15879]: | 2: compared PSK @************************ to @************************ / @********** -> 6
Feb 4 09:00:27 vpn pluto[15879]: | best_match 0>6 best=0x8838018 (line=11)
Feb 4 09:00:27 vpn pluto[15879]: | concluding with best_match=6 best=0x8838018 (lineno=11)
Feb 4 09:00:27 vpn pluto[15879]: | ******parse ISAKMP Oakley attribute:
Feb 4 09:00:27 vpn pluto[15879]: | af+type: OAKLEY_GROUP_DESCRIPTION
Feb 4 09:00:27 vpn pluto[15879]: | length/value: 2
Feb 4 09:00:27 vpn pluto[15879]: | [2 is OAKLEY_GROUP_MODP1024]
Feb 4 09:00:27 vpn pluto[15879]: | ******parse ISAKMP Oakley attribute:
Feb 4 09:00:27 vpn pluto[15879]: | af+type: OAKLEY_LIFE_TYPE
Feb 4 09:00:27 vpn pluto[15879]: | length/value: 1
Feb 4 09:00:27 vpn pluto[15879]: | [1 is OAKLEY_LIFE_SECONDS]
Feb 4 09:00:27 vpn pluto[15879]: | ******parse ISAKMP Oakley attribute:
Feb 4 09:00:27 vpn pluto[15879]: | af+type: OAKLEY_LIFE_DURATION
Feb 4 09:00:27 vpn pluto[15879]: | length/value: 3600
Feb 4 09:00:27 vpn pluto[15879]: | Oakley Transform 1 accepted
Feb 4 09:00:27 vpn pluto[15879]: | DH public value received:
Feb 4 09:00:27 vpn pluto[15879]: | 92 24 e4 ae f6 bd 3c 80 5f a9 53 d5 e4 bd 71 b0
Feb 4 09:00:28 vpn pluto[15879]: | bf a6 66 47 b5 3c 95 6b 7f bc 49 6e 4a 5a 67 10
Feb 4 09:00:28 vpn pluto[15879]: | dc e8 02 42 e2 d8 6e 30 3a 4b ab 35 a2 7d 06 59
Feb 4 09:00:28 vpn pluto[15879]: | 67 c4 64 bd f1 6f 52 de 54 3e 59 0e 43 ed 37 43
Feb 4 09:00:28 vpn pluto[15879]: | f3 0c e6 0c f3 e5 ff 8c a6 61 8c 69 19 ed 43 2e
Feb 4 09:00:28 vpn pluto[15879]: | ef a5 f2 e8 2b 2e 73 20 ad a5 7c 38 bb c8 bc 42
Feb 4 09:00:28 vpn pluto[15879]: | 2d 99 66 dc 5b 55 c6 e7 64 62 81 e4 d1 02 c7 2a
Feb 4 09:00:28 vpn pluto[15879]: | c2 2c 79 11 4e cd 9a 59 e0 92 21 7b b2 2d 7a 71
Feb 4 09:00:28 vpn pluto[15879]: | ICOOKIE: 51 ec 62 5a c7 55 66 cf
Feb 4 09:00:28 vpn pluto[15879]: | RCOOKIE: 00 00 00 00 00 00 00 00
Feb 4 09:00:28 vpn pluto[15879]: | peer: 4f cf 86 fe
Feb 4 09:00:28 vpn pluto[15879]: | state hash entry 0
Feb 4 09:00:28 vpn pluto[15879]: | ICOOKIE: 51 ec 62 5a c7 55 66 cf
Feb 4 09:00:28 vpn pluto[15879]: | RCOOKIE: 92 51 a3 c6 21 37 23 a1
Feb 4 09:00:28 vpn pluto[15879]: | peer: 4f cf 86 fe
Feb 4 09:00:28 vpn pluto[15879]: | state hash entry 30
Feb 4 09:00:28 vpn pluto[15879]: | started looking for secret for @************************->@********** of kind PPK_PSK
Feb 4 09:00:28 vpn pluto[15879]: | actually looking for secret for @************************->@********** of kind PPK_PSK
Feb 4 09:00:28 vpn pluto[15879]: | 1: compared PSK @********** to @************************ / @********** -> 2
Feb 4 09:00:28 vpn pluto[15879]: | 2: compared PSK @************************ to @************************ / @********** -> 6
Feb 4 09:00:28 vpn pluto[15879]: | best_match 0>6 best=0x8838018 (line=11)
Feb 4 09:00:28 vpn pluto[15879]: | concluding with best_match=6 best=0x8838018 (lineno=11)
Feb 4 09:00:28 vpn pluto[15879]: | calc_dh_shared(): time elapsed (OAKLEY_GROUP_MODP1024): 62435 usec
Feb 4 09:00:28 vpn pluto[15879]: | DH shared secret:
Feb 4 09:00:28 vpn pluto[15879]: | 1b b5 b8 11 57 fe d3 02 00 3d f8 f7 3c d8 dc b3
Feb 4 09:00:28 vpn pluto[15879]: | df 0d d6 c7 59 76 d0 29 6c 97 cd f3 ac 92 46 11
Feb 4 09:00:28 vpn pluto[15879]: | dd 33 c8 50 84 4a 3b 11 f2 6e 7c 20 12 a9 91 ca
Feb 4 09:00:28 vpn pluto[15879]: | 3c d0 ec 95 5f 7d 33 58 99 19 d5 71 9f 9d 27 e0
Feb 4 09:00:28 vpn pluto[15879]: | b1 1a 86 0b 4d e3 2a 92 7d 90 9e 65 e9 96 30 6e
Feb 4 09:00:28 vpn pluto[15879]: | 76 fe 06 94 a5 29 8e 83 46 c9 e6 36 56 b4 37 8a
Feb 4 09:00:28 vpn pluto[15879]: | 20 bd 3a 13 6a f2 b2 18 ec c1 69 d5 bf d1 5a d0
Feb 4 09:00:28 vpn pluto[15879]: | f1 66 ce 21 34 73 d8 e0 55 d7 e1 6c ef c4 39 a3
Feb 4 09:00:28 vpn pluto[15879]: | Skey inputs (PSK+NI+NR)
Feb 4 09:00:28 vpn pluto[15879]: | ni: c7 bf 43 84 21 00 39 02 d1 21 c8 65 22 6a 71 9c
Feb 4 09:00:28 vpn pluto[15879]: | nr: 19 1e d3 b4 0d d1 05 0d af 3d df 42 a7 9a 81 cf
Feb 4 09:00:28 vpn pluto[15879]: | keyid: da 4f 51 83 d1 45 30 31 b7 df 41 e4 f4 49 de 0d
Feb 4 09:00:28 vpn pluto[15879]: | f9 a6 75 c2
Feb 4 09:00:28 vpn pluto[15879]: | DH_i: d2 e5 6c dd 70 0f 4f 91 43 33 87 fc 43 8b b8 07
Feb 4 09:00:28 vpn pluto[15879]: | 62 9e 2f d8 89 75 9c 07 11 17 96 2d 37 18 ef 25
Feb 4 09:00:28 vpn pluto[15879]: | 3f 66 7a b9 10 d7 c9 2e bd 77 2f 38 4c 79 27 b7
Feb 4 09:00:28 vpn pluto[15879]: | 7d 40 25 7f fb 0b 4b 80 c9 83 1c d3 29 3b c5 35
Feb 4 09:00:28 vpn pluto[15879]: | 61 e6 6a 4a a1 f4 2d f4 22 89 b2 61 2a 72 0a 85
Feb 4 09:00:28 vpn pluto[15879]: | 48 7e 83 a9 e0 14 7b 53 7a c8 43 ef 5e e7 ed 1b
Feb 4 09:00:28 vpn pluto[15879]: | b5 19 cc 65 be ae 2c 0f 1b 4f 39 d2 2f 9d cf b2
Feb 4 09:00:28 vpn pluto[15879]: | e8 50 e6 4d 3f dd ea 67 b4 f5 4b 7b 16 df d0 ff
Feb 4 09:00:28 vpn pluto[15879]: | DH_r: 92 24 e4 ae f6 bd 3c 80 5f a9 53 d5 e4 bd 71 b0
Feb 4 09:00:28 vpn pluto[15879]: | bf a6 66 47 b5 3c 95 6b 7f bc 49 6e 4a 5a 67 10
Feb 4 09:00:28 vpn pluto[15879]: | dc e8 02 42 e2 d8 6e 30 3a 4b ab 35 a2 7d 06 59
Feb 4 09:00:28 vpn pluto[15879]: | 67 c4 64 bd f1 6f 52 de 54 3e 59 0e 43 ed 37 43
Feb 4 09:00:28 vpn pluto[15879]: | f3 0c e6 0c f3 e5 ff 8c a6 61 8c 69 19 ed 43 2e
Feb 4 09:00:28 vpn pluto[15879]: | ef a5 f2 e8 2b 2e 73 20 ad a5 7c 38 bb c8 bc 42
Feb 4 09:00:28 vpn pluto[15879]: | 2d 99 66 dc 5b 55 c6 e7 64 62 81 e4 d1 02 c7 2a
Feb 4 09:00:28 vpn pluto[15879]: | c2 2c 79 11 4e cd 9a 59 e0 92 21 7b b2 2d 7a 71
Feb 4 09:00:28 vpn pluto[15879]: | Skeyid: da 4f 51 83 d1 45 30 31 b7 df 41 e4 f4 49 de 0d
Feb 4 09:00:28 vpn pluto[15879]: | f9 a6 75 c2
Feb 4 09:00:28 vpn pluto[15879]: | Skeyid_d: eb 10 fa 22 75 e4 ec bc 26 44 b9 43 fb ca 6d 6e
Feb 4 09:00:28 vpn pluto[15879]: | 10 67 be 95
Feb 4 09:00:28 vpn pluto[15879]: | Skeyid_a: 46 4c 3a 7d c2 4c 5b 87 99 81 7c b5 ee 35 1c 82
Feb 4 09:00:28 vpn pluto[15879]: | b4 ac 60 b3
Feb 4 09:00:28 vpn pluto[15879]: | Skeyid_e: bf 3f 28 34 71 2d 51 06 bb 16 82 5b ae bd e7 8c
Feb 4 09:00:28 vpn pluto[15879]: | be f1 65 bf
Feb 4 09:00:28 vpn pluto[15879]: | enc key: 4e 04 f9 5f 39 b3 34 59 81 1b c0 3a 63 46 d4 14
Feb 4 09:00:28 vpn pluto[15879]: | a0 3d 60 75 26 c5 a0 18
Feb 4 09:00:28 vpn pluto[15879]: | IV: 5d 4d 8f 04 f8 6a 43 dc a1 20 65 59 6a 19 9f d1
Feb 4 09:00:28 vpn pluto[15879]: | fa 47 b7 0a
Feb 4 09:00:28 vpn pluto[15879]: "**********" #1: Aggressive mode peer ID is ID_FQDN: '@**********'
Feb 4 09:00:28 vpn pluto[15879]: | hashing 48 bytes of SA
Feb 4 09:00:28 vpn pluto[15879]: | authentication succeeded
Feb 4 09:00:28 vpn pluto[15879]: | **emit ISAKMP Message:
Feb 4 09:00:28 vpn pluto[15879]: | initiator cookie:
Feb 4 09:00:28 vpn pluto[15879]: | 51 ec 62 5a c7 55 66 cf
Feb 4 09:00:28 vpn pluto[15879]: | responder cookie:
Feb 4 09:00:28 vpn pluto[15879]: | 92 51 a3 c6 21 37 23 a1
Feb 4 09:00:28 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_HASH
Feb 4 09:00:28 vpn pluto[15879]: | ISAKMP version: ISAKMP Version 1.0
Feb 4 09:00:28 vpn pluto[15879]: | exchange type: ISAKMP_XCHG_AGGR
Feb 4 09:00:28 vpn pluto[15879]: | flags: ISAKMP_FLAG_ENCRYPTION
Feb 4 09:00:28 vpn pluto[15879]: | message ID: 00 00 00 00
Feb 4 09:00:28 vpn pluto[15879]: | **emit ISAKMP Identification Payload (IPsec DOI):
Feb 4 09:00:28 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_NONE
Feb 4 09:00:28 vpn pluto[15879]: | length: 0
Feb 4 09:00:28 vpn pluto[15879]: | ID type: ID_FQDN
Feb 4 09:00:28 vpn pluto[15879]: | Protocol ID: 0
Feb 4 09:00:28 vpn pluto[15879]: | port: 0
Feb 4 09:00:28 vpn pluto[15879]: | emitting length of ISAKMP Identification Payload (IPsec DOI): 8
Feb 4 09:00:28 vpn pluto[15879]: | emitting 24 raw bytes of my identity into identity payload
Feb 4 09:00:28 vpn pluto[15879]: | my identity 66 73 31 2e 69 6e 74 72 61 6e 65 74 2e 6f 76 65
Feb 4 09:00:28 vpn pluto[15879]: | 72 74 75 72 6e 2e 64 65
Feb 4 09:00:28 vpn pluto[15879]: | hashing 48 bytes of SA
Feb 4 09:00:28 vpn pluto[15879]: | ***emit ISAKMP Hash Payload:
Feb 4 09:00:28 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_NONE
Feb 4 09:00:28 vpn pluto[15879]: | emitting 20 raw bytes of HASH_I into ISAKMP Hash Payload
Feb 4 09:00:28 vpn pluto[15879]: | HASH_I 17 02 40 d3 04 6b fa e0 e7 0c f8 83 d7 2c 14 e2
Feb 4 09:00:28 vpn pluto[15879]: | 71 26 cc 89
Feb 4 09:00:28 vpn pluto[15879]: | emitting length of ISAKMP Hash Payload: 24
Feb 4 09:00:28 vpn pluto[15879]: | encrypting:
Feb 4 09:00:28 vpn pluto[15879]: | 00 00 00 18 17 02 40 d3 04 6b fa e0 e7 0c f8 83
Feb 4 09:00:28 vpn pluto[15879]: | d7 2c 14 e2 71 26 cc 89
Feb 4 09:00:28 vpn pluto[15879]: | IV:
Feb 4 09:00:28 vpn pluto[15879]: | 5d 4d 8f 04 f8 6a 43 dc a1 20 65 59 6a 19 9f d1
Feb 4 09:00:28 vpn pluto[15879]: | fa 47 b7 0a
Feb 4 09:00:28 vpn pluto[15879]: | encrypting using OAKLEY_3DES_CBC
Feb 4 09:00:28 vpn pluto[15879]: | next IV: 9b 97 c2 66 86 12 6f 4a
Feb 4 09:00:28 vpn pluto[15879]: | emitting length of ISAKMP Message: 52
Feb 4 09:00:28 vpn pluto[15879]: | complete state transition with STF_OK
Feb 4 09:00:28 vpn pluto[15879]: "**********" #1: transition from state STATE_AGGR_I1 to state STATE_AGGR_I2
Feb 4 09:00:28 vpn pluto[15879]: | sending reply packet to 79.207.134.254:500 (from port=500)
Feb 4 09:00:28 vpn pluto[15879]: | sending 52 bytes for STATE_AGGR_I1 through ppp0:500 to 79.207.134.254:500:
Feb 4 09:00:28 vpn pluto[15879]: | 51 ec 62 5a c7 55 66 cf 92 51 a3 c6 21 37 23 a1
Feb 4 09:00:28 vpn pluto[15879]: | 08 10 04 01 00 00 00 00 00 00 00 34 1b 2c 32 69
Feb 4 09:00:28 vpn pluto[15879]: | 0a 2c 4e 13 7a 4e 49 5c 8f d4 c0 b6 9b 97 c2 66
Feb 4 09:00:28 vpn pluto[15879]: | 86 12 6f 4a
Feb 4 09:00:28 vpn pluto[15879]: | inserting event EVENT_SA_REPLACE, timeout in 2581 seconds for #1
Feb 4 09:00:28 vpn pluto[15879]: "**********" #1: STATE_AGGR_I2: sent AI2, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp1024}
Feb 4 09:00:28 vpn pluto[15879]: | modecfg pull: noquirk policy:push not-client
Feb 4 09:00:28 vpn pluto[15879]: | phase 1 is done, looking for phase 1 to unpend
Feb 4 09:00:28 vpn pluto[15879]: | unqueuing pending Quick Mode with 79.207.134.254 "**********"
Feb 4 09:00:28 vpn pluto[15879]: | duplicating state object #1
Feb 4 09:00:28 vpn pluto[15879]: | creating state object #2 at 0x883a438
Feb 4 09:00:28 vpn pluto[15879]: | processing connection **********
Feb 4 09:00:28 vpn pluto[15879]: | ICOOKIE: 51 ec 62 5a c7 55 66 cf
Feb 4 09:00:28 vpn pluto[15879]: | RCOOKIE: 92 51 a3 c6 21 37 23 a1
Feb 4 09:00:28 vpn pluto[15879]: | peer: 4f cf 86 fe
Feb 4 09:00:28 vpn pluto[15879]: | state hash entry 30
Feb 4 09:00:28 vpn pluto[15879]: | inserting event EVENT_SO_DISCARD, timeout in 0 seconds for #2
Feb 4 09:00:28 vpn pluto[15879]: "**********" #2: initiating Quick Mode PSK+ENCRYPT+TUNNEL+PFS+UP+AGGRESSIVE {using isakmp#1}
Feb 4 09:00:28 vpn pluto[15879]: | 0: w->pcw_dead: 0 w->pcw_work: 0 cnt: 1
Feb 4 09:00:28 vpn pluto[15879]: | asking helper 0 to do build_kenonce op on seq: 2
Feb 4 09:00:28 vpn pluto[15887]: ! helper 0 doing build_kenonce op id: 2
Feb 4 09:00:28 vpn pluto[15879]: | inserting event EVENT_CRYPTO_FAILED, timeout in 300 seconds for #2
Feb 4 09:00:28 vpn pluto[15879]: | next event EVENT_PENDING_PHASE2 in 104 seconds
Feb 4 09:00:28 vpn pluto[15879]: |
Feb 4 09:00:28 vpn pluto[15879]: | *received 84 bytes from 79.207.134.254:500 on ppp0 (port=500)
Feb 4 09:00:28 vpn pluto[15879]: | 51 ec 62 5a c7 55 66 cf 92 51 a3 c6 21 37 23 a1
Feb 4 09:00:28 vpn pluto[15879]: | 08 10 05 01 69 78 7b ab 00 00 00 54 24 e0 f3 8b
Feb 4 09:00:28 vpn pluto[15879]: | 39 ef 67 f3 0f fb af 11 f1 01 98 3e f9 f8 bb 5d
Feb 4 09:00:28 vpn pluto[15879]: | 9b 1e a1 79 b9 a7 80 7e c7 f3 76 d6 3b 56 8d 4b
Feb 4 09:00:28 vpn pluto[15879]: | 7a 19 7d 43 cc ca 6f 54 69 de 69 e9 16 2a 9e 70
Feb 4 09:00:28 vpn pluto[15879]: | b0 09 1c db
Feb 4 09:00:28 vpn pluto[15879]: | **parse ISAKMP Message:
Feb 4 09:00:28 vpn pluto[15879]: | initiator cookie:
Feb 4 09:00:28 vpn pluto[15879]: | 51 ec 62 5a c7 55 66 cf
Feb 4 09:00:28 vpn pluto[15879]: | responder cookie:
Feb 4 09:00:28 vpn pluto[15879]: | 92 51 a3 c6 21 37 23 a1
Feb 4 09:00:28 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_HASH
Feb 4 09:00:28 vpn pluto[15879]: | ISAKMP version: ISAKMP Version 1.0
Feb 4 09:00:28 vpn pluto[15879]: | exchange type: ISAKMP_XCHG_INFO
Feb 4 09:00:28 vpn pluto[15879]: | flags: ISAKMP_FLAG_ENCRYPTION
Feb 4 09:00:28 vpn pluto[15879]: | message ID: 69 78 7b ab
Feb 4 09:00:28 vpn pluto[15879]: | length: 84
Feb 4 09:00:28 vpn pluto[15879]: | processing packet with exchange type=ISAKMP_XCHG_INFO (5)
Feb 4 09:00:28 vpn pluto[15879]: | ICOOKIE: 51 ec 62 5a c7 55 66 cf
Feb 4 09:00:28 vpn pluto[15879]: | RCOOKIE: 92 51 a3 c6 21 37 23 a1
Feb 4 09:00:28 vpn pluto[15879]: | peer: 4f cf 86 fe
Feb 4 09:00:28 vpn pluto[15879]: | state hash entry 30
Feb 4 09:00:28 vpn pluto[15879]: | peer and cookies match on #2, provided msgid 00000000 vs fb2872f0/00000000
Feb 4 09:00:28 vpn pluto[15879]: | peer and cookies match on #1, provided msgid 00000000 vs 00000000/00000000
Feb 4 09:00:28 vpn pluto[15879]: | p15 state object #1 found, in STATE_AGGR_I2
Feb 4 09:00:28 vpn pluto[15879]: | processing connection **********
Feb 4 09:00:28 vpn pluto[15879]: | last Phase 1 IV: 9b 97 c2 66 86 12 6f 4a
Feb 4 09:00:28 vpn pluto[15879]: | current Phase 1 IV: 9b 97 c2 66 86 12 6f 4a
Feb 4 09:00:28 vpn pluto[15879]: | computed Phase 2 IV:
Feb 4 09:00:28 vpn pluto[15879]: | 16 66 d9 95 bf e3 70 4b f2 9d 1b b5 b3 dd 7e 42
Feb 4 09:00:28 vpn pluto[15879]: | c2 a1 7b c7
Feb 4 09:00:28 vpn pluto[15879]: | received encrypted packet from 79.207.134.254:500
Feb 4 09:00:28 vpn pluto[15879]: | decrypting 56 bytes using algorithm OAKLEY_3DES_CBC
Feb 4 09:00:28 vpn pluto[15879]: | decrypted:
Feb 4 09:00:28 vpn pluto[15879]: | 0b 00 00 18 e9 9a 89 ed 30 8d b0 17 73 74 ef c3
Feb 4 09:00:28 vpn pluto[15879]: | 0d a3 9f b7 96 7a 38 22 00 00 00 1c 00 00 00 01
Feb 4 09:00:28 vpn pluto[15879]: | 01 10 60 02 51 ec 62 5a c7 55 66 cf 92 51 a3 c6
Feb 4 09:00:28 vpn pluto[15879]: | 21 37 23 a1 00 00 00 00
Feb 4 09:00:28 vpn pluto[15879]: | next IV: 16 2a 9e 70 b0 09 1c db
Feb 4 09:00:28 vpn pluto[15879]: | np=8 and sd=0x80eae50
Feb 4 09:00:28 vpn pluto[15879]: | ***parse ISAKMP Hash Payload:
Feb 4 09:00:28 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_N
Feb 4 09:00:28 vpn pluto[15879]: | length: 24
Feb 4 09:00:28 vpn pluto[15879]: | np=11 and sd=0x80eae74
Feb 4 09:00:28 vpn pluto[15879]: | ***parse ISAKMP Notification Payload:
Feb 4 09:00:28 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_NONE
Feb 4 09:00:28 vpn pluto[15879]: | length: 28
Feb 4 09:00:28 vpn pluto[15879]: | DOI: ISAKMP_DOI_IPSEC
Feb 4 09:00:28 vpn pluto[15879]: | protocol ID: 1
Feb 4 09:00:28 vpn pluto[15879]: | SPI size: 16
Feb 4 09:00:28 vpn pluto[15879]: | Notify Message Type: IPSEC_INITIAL_CONTACT
Feb 4 09:00:28 vpn pluto[15879]: | removing 4 bytes of padding
Feb 4 09:00:28 vpn pluto[15879]: "**********" #1: ignoring informational payload, type IPSEC_INITIAL_CONTACT
Feb 4 09:00:28 vpn pluto[15879]: | info: 51 ec 62 5a c7 55 66 cf 92 51 a3 c6 21 37 23 a1
Feb 4 09:00:28 vpn pluto[15879]: | processing informational IPSEC_INITIAL_CONTACT (24578)
Feb 4 09:00:28 vpn pluto[15879]: "**********" #1: received and ignored informational message
Feb 4 09:00:28 vpn pluto[15879]: | complete state transition with STF_IGNORE
Feb 4 09:00:28 vpn pluto[15879]: | next event EVENT_PENDING_PHASE2 in 104 seconds
Feb 4 09:00:28 vpn pluto[15887]: ! Local DH secret:
Feb 4 09:00:28 vpn pluto[15887]: ! 2d 4b 02 6f 52 ac 4e ee e9 be 54 92 bb 32 90 1e
Feb 4 09:00:28 vpn pluto[15887]: ! 4e e7 ef 9e e4 99 e0 73 08 1a 68 c7 c5 d5 27 40
Feb 4 09:00:28 vpn pluto[15887]: ! Public DH value sent:
Feb 4 09:00:28 vpn pluto[15887]: ! 2d 0c 98 37 75 5b e8 8f 8c 86 a9 88 df 71 8c 7a
Feb 4 09:00:28 vpn pluto[15887]: ! cd 12 c5 b8 9b 7d 45 80 d6 af a1 a5 56 6a 3f 13
Feb 4 09:00:28 vpn pluto[15887]: ! 2c 32 ee 17 02 f3 cf 80 f1 95 87 65 f4 58 64 66
Feb 4 09:00:28 vpn pluto[15887]: ! 1a 4e 5e bc 55 de 19 aa 94 5c fc 10 f0 be 24 00
Feb 4 09:00:28 vpn pluto[15887]: ! c7 3c d1 40 6a a3 0e 08 ae a9 4b 3d 97 9f 36 96
Feb 4 09:00:28 vpn pluto[15887]: ! c3 b6 6a 7b e8 71 81 61 99 72 94 53 15 a4 2d 2c
Feb 4 09:00:28 vpn pluto[15887]: ! 98 cb 66 fe 21 51 df f2 49 ba 8d 76 77 64 6e fa
Feb 4 09:00:28 vpn pluto[15887]: ! 7d 35 b1 8e ba f4 5d ca d9 cc a2 53 e6 e5 01 36
Feb 4 09:00:28 vpn pluto[15887]: ! Generated nonce:
Feb 4 09:00:28 vpn pluto[15887]: ! 75 25 9c fd b7 4b dc c9 44 2a 45 0d 9e bf 9f e0
Feb 4 09:00:28 vpn pluto[15879]: | helper 0 has work (cnt now 0)
Feb 4 09:00:28 vpn pluto[15879]: | helper 0 replies to sequence 2
Feb 4 09:00:28 vpn pluto[15879]: | calling callback function 0x806d7e0
Feb 4 09:00:28 vpn pluto[15879]: | quick outI1: calculated ke+nonce, sending I1
Feb 4 09:00:28 vpn pluto[15879]: | processing connection **********
Feb 4 09:00:28 vpn pluto[15879]: | **emit ISAKMP Message:
Feb 4 09:00:28 vpn pluto[15879]: | initiator cookie:
Feb 4 09:00:28 vpn pluto[15879]: | 51 ec 62 5a c7 55 66 cf
Feb 4 09:00:28 vpn pluto[15879]: | responder cookie:
Feb 4 09:00:28 vpn pluto[15879]: | 92 51 a3 c6 21 37 23 a1
Feb 4 09:00:28 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_HASH
Feb 4 09:00:28 vpn pluto[15879]: | ISAKMP version: ISAKMP Version 1.0
Feb 4 09:00:28 vpn pluto[15879]: | exchange type: ISAKMP_XCHG_QUICK
Feb 4 09:00:28 vpn pluto[15879]: | flags: ISAKMP_FLAG_ENCRYPTION
Feb 4 09:00:28 vpn pluto[15879]: | message ID: fb 28 72 f0
Feb 4 09:00:28 vpn pluto[15879]: | ***emit ISAKMP Hash Payload:
Feb 4 09:00:28 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_SA
Feb 4 09:00:28 vpn pluto[15879]: | emitting 20 zero bytes of HASH into ISAKMP Hash Payload
Feb 4 09:00:28 vpn pluto[15879]: | emitting length of ISAKMP Hash Payload: 24
Feb 4 09:00:28 vpn pluto[15879]: | empty esp_info, returning empty
Feb 4 09:00:28 vpn pluto[15879]: | ***emit ISAKMP Security Association Payload:
Feb 4 09:00:28 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_NONCE
Feb 4 09:00:28 vpn pluto[15879]: | DOI: ISAKMP_DOI_IPSEC
Feb 4 09:00:28 vpn pluto[15879]: | ****emit IPsec DOI SIT:
Feb 4 09:00:28 vpn pluto[15879]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
Feb 4 09:00:28 vpn pluto[15879]: | out_sa pcn: 0 has 1 valid proposals
Feb 4 09:00:28 vpn pluto[15879]: | out_sa pcn: 0 pn: 0<1 valid_count: 1
Feb 4 09:00:28 vpn pluto[15879]: | ****emit ISAKMP Proposal Payload:
Feb 4 09:00:28 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_NONE
Feb 4 09:00:28 vpn pluto[15879]: | proposal number: 0
Feb 4 09:00:28 vpn pluto[15879]: | protocol ID: PROTO_IPSEC_ESP
Feb 4 09:00:28 vpn pluto[15879]: | SPI size: 4
Feb 4 09:00:28 vpn pluto[15879]: | number of transforms: 4
Feb 4 09:00:28 vpn pluto[15879]: | netlink_get_spi: allocated 0xda4ae1f5 for esp.0 at 84.154.56.62
Feb 4 09:00:28 vpn pluto[15879]: | emitting 4 raw bytes of SPI into ISAKMP Proposal Payload
Feb 4 09:00:28 vpn pluto[15879]: | SPI da 4a e1 f5
Feb 4 09:00:28 vpn pluto[15879]: | *****emit ISAKMP Transform Payload (ESP):
Feb 4 09:00:28 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_T
Feb 4 09:00:28 vpn pluto[15879]: | transform number: 0
Feb 4 09:00:28 vpn pluto[15879]: | transform ID: ESP_AES
Feb 4 09:00:28 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:28 vpn pluto[15879]: | af+type: GROUP_DESCRIPTION
Feb 4 09:00:28 vpn pluto[15879]: | length/value: 2
Feb 4 09:00:28 vpn pluto[15879]: | [2 is OAKLEY_GROUP_MODP1024]
Feb 4 09:00:28 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:28 vpn pluto[15879]: | af+type: ENCAPSULATION_MODE
Feb 4 09:00:28 vpn pluto[15879]: | length/value: 1
Feb 4 09:00:28 vpn pluto[15879]: | [1 is ENCAPSULATION_MODE_TUNNEL]
Feb 4 09:00:28 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:28 vpn pluto[15879]: | af+type: SA_LIFE_TYPE
Feb 4 09:00:28 vpn pluto[15879]: | length/value: 1
Feb 4 09:00:28 vpn pluto[15879]: | [1 is SA_LIFE_TYPE_SECONDS]
Feb 4 09:00:28 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:28 vpn pluto[15879]: | af+type: SA_LIFE_DURATION
Feb 4 09:00:28 vpn pluto[15879]: | length/value: 28800
Feb 4 09:00:28 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:28 vpn pluto[15879]: | af+type: AUTH_ALGORITHM
Feb 4 09:00:28 vpn pluto[15879]: | length/value: 2
Feb 4 09:00:28 vpn pluto[15879]: | [2 is AUTH_ALGORITHM_HMAC_SHA1]
Feb 4 09:00:28 vpn pluto[15879]: | emitting length of ISAKMP Transform Payload (ESP): 28
Feb 4 09:00:28 vpn pluto[15879]: | *****emit ISAKMP Transform Payload (ESP):
Feb 4 09:00:28 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_T
Feb 4 09:00:28 vpn pluto[15879]: | transform number: 1
Feb 4 09:00:28 vpn pluto[15879]: | transform ID: ESP_AES
Feb 4 09:00:28 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:28 vpn pluto[15879]: | af+type: GROUP_DESCRIPTION
Feb 4 09:00:28 vpn pluto[15879]: | length/value: 2
Feb 4 09:00:28 vpn pluto[15879]: | [2 is OAKLEY_GROUP_MODP1024]
Feb 4 09:00:28 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:28 vpn pluto[15879]: | af+type: ENCAPSULATION_MODE
Feb 4 09:00:28 vpn pluto[15879]: | length/value: 1
Feb 4 09:00:28 vpn pluto[15879]: | [1 is ENCAPSULATION_MODE_TUNNEL]
Feb 4 09:00:28 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:28 vpn pluto[15879]: | af+type: SA_LIFE_TYPE
Feb 4 09:00:28 vpn pluto[15879]: | length/value: 1
Feb 4 09:00:28 vpn pluto[15879]: | [1 is SA_LIFE_TYPE_SECONDS]
Feb 4 09:00:28 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:28 vpn pluto[15879]: | af+type: SA_LIFE_DURATION
Feb 4 09:00:28 vpn pluto[15879]: | length/value: 28800
Feb 4 09:00:28 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:28 vpn pluto[15879]: | af+type: AUTH_ALGORITHM
Feb 4 09:00:28 vpn pluto[15879]: | length/value: 1
Feb 4 09:00:28 vpn pluto[15879]: | [1 is AUTH_ALGORITHM_HMAC_MD5]
Feb 4 09:00:28 vpn pluto[15879]: | emitting length of ISAKMP Transform Payload (ESP): 28
Feb 4 09:00:28 vpn pluto[15879]: | *****emit ISAKMP Transform Payload (ESP):
Feb 4 09:00:28 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_T
Feb 4 09:00:28 vpn pluto[15879]: | transform number: 2
Feb 4 09:00:28 vpn pluto[15879]: | transform ID: ESP_3DES
Feb 4 09:00:28 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:28 vpn pluto[15879]: | af+type: GROUP_DESCRIPTION
Feb 4 09:00:28 vpn pluto[15879]: | length/value: 2
Feb 4 09:00:28 vpn pluto[15879]: | [2 is OAKLEY_GROUP_MODP1024]
Feb 4 09:00:28 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:28 vpn pluto[15879]: | af+type: ENCAPSULATION_MODE
Feb 4 09:00:28 vpn pluto[15879]: | length/value: 1
Feb 4 09:00:28 vpn pluto[15879]: | [1 is ENCAPSULATION_MODE_TUNNEL]
Feb 4 09:00:28 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:28 vpn pluto[15879]: | af+type: SA_LIFE_TYPE
Feb 4 09:00:28 vpn pluto[15879]: | length/value: 1
Feb 4 09:00:28 vpn pluto[15879]: | [1 is SA_LIFE_TYPE_SECONDS]
Feb 4 09:00:28 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:28 vpn pluto[15879]: | af+type: SA_LIFE_DURATION
Feb 4 09:00:28 vpn pluto[15879]: | length/value: 28800
Feb 4 09:00:28 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:28 vpn pluto[15879]: | af+type: AUTH_ALGORITHM
Feb 4 09:00:28 vpn pluto[15879]: | length/value: 2
Feb 4 09:00:28 vpn pluto[15879]: | [2 is AUTH_ALGORITHM_HMAC_SHA1]
Feb 4 09:00:28 vpn pluto[15879]: | emitting length of ISAKMP Transform Payload (ESP): 28
Feb 4 09:00:28 vpn pluto[15879]: | *****emit ISAKMP Transform Payload (ESP):
Feb 4 09:00:28 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_NONE
Feb 4 09:00:28 vpn pluto[15879]: | transform number: 3
Feb 4 09:00:28 vpn pluto[15879]: | transform ID: ESP_3DES
Feb 4 09:00:28 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:28 vpn pluto[15879]: | af+type: GROUP_DESCRIPTION
Feb 4 09:00:28 vpn pluto[15879]: | length/value: 2
Feb 4 09:00:28 vpn pluto[15879]: | [2 is OAKLEY_GROUP_MODP1024]
Feb 4 09:00:28 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:28 vpn pluto[15879]: | af+type: ENCAPSULATION_MODE
Feb 4 09:00:28 vpn pluto[15879]: | length/value: 1
Feb 4 09:00:28 vpn pluto[15879]: | [1 is ENCAPSULATION_MODE_TUNNEL]
Feb 4 09:00:28 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:28 vpn pluto[15879]: | af+type: SA_LIFE_TYPE
Feb 4 09:00:28 vpn pluto[15879]: | length/value: 1
Feb 4 09:00:28 vpn pluto[15879]: | [1 is SA_LIFE_TYPE_SECONDS]
Feb 4 09:00:28 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:28 vpn pluto[15879]: | af+type: SA_LIFE_DURATION
Feb 4 09:00:28 vpn pluto[15879]: | length/value: 28800
Feb 4 09:00:28 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:28 vpn pluto[15879]: | af+type: AUTH_ALGORITHM
Feb 4 09:00:28 vpn pluto[15879]: | length/value: 1
Feb 4 09:00:28 vpn pluto[15879]: | [1 is AUTH_ALGORITHM_HMAC_MD5]
Feb 4 09:00:28 vpn pluto[15879]: | emitting length of ISAKMP Transform Payload (ESP): 28
Feb 4 09:00:28 vpn pluto[15879]: | emitting length of ISAKMP Proposal Payload: 124
Feb 4 09:00:28 vpn pluto[15879]: | emitting length of ISAKMP Security Association Payload: 136
Feb 4 09:00:28 vpn pluto[15879]: | ***emit ISAKMP Nonce Payload:
Feb 4 09:00:28 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_KE
Feb 4 09:00:28 vpn pluto[15879]: | emitting 16 raw bytes of Ni into ISAKMP Nonce Payload
Feb 4 09:00:28 vpn pluto[15879]: | Ni 75 25 9c fd b7 4b dc c9 44 2a 45 0d 9e bf 9f e0
Feb 4 09:00:28 vpn pluto[15879]: | emitting length of ISAKMP Nonce Payload: 20
Feb 4 09:00:28 vpn pluto[15879]: | ***emit ISAKMP Key Exchange Payload:
Feb 4 09:00:28 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_ID
Feb 4 09:00:28 vpn pluto[15879]: | emitting 128 raw bytes of keyex value into ISAKMP Key Exchange Payload
Feb 4 09:00:28 vpn pluto[15879]: | keyex value 2d 0c 98 37 75 5b e8 8f 8c 86 a9 88 df 71 8c 7a
Feb 4 09:00:28 vpn pluto[15879]: | cd 12 c5 b8 9b 7d 45 80 d6 af a1 a5 56 6a 3f 13
Feb 4 09:00:28 vpn pluto[15879]: | 2c 32 ee 17 02 f3 cf 80 f1 95 87 65 f4 58 64 66
Feb 4 09:00:28 vpn pluto[15879]: | 1a 4e 5e bc 55 de 19 aa 94 5c fc 10 f0 be 24 00
Feb 4 09:00:28 vpn pluto[15879]: | c7 3c d1 40 6a a3 0e 08 ae a9 4b 3d 97 9f 36 96
Feb 4 09:00:28 vpn pluto[15879]: | c3 b6 6a 7b e8 71 81 61 99 72 94 53 15 a4 2d 2c
Feb 4 09:00:28 vpn pluto[15879]: | 98 cb 66 fe 21 51 df f2 49 ba 8d 76 77 64 6e fa
Feb 4 09:00:28 vpn pluto[15879]: | 7d 35 b1 8e ba f4 5d ca d9 cc a2 53 e6 e5 01 36
Feb 4 09:00:28 vpn pluto[15879]: | emitting length of ISAKMP Key Exchange Payload: 132
Feb 4 09:00:28 vpn pluto[15879]: | ***emit ISAKMP Identification Payload (IPsec DOI):
Feb 4 09:00:28 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_ID
Feb 4 09:00:28 vpn pluto[15879]: | ID type: ID_IPV4_ADDR_SUBNET
Feb 4 09:00:28 vpn pluto[15879]: | Protocol ID: 0
Feb 4 09:00:28 vpn pluto[15879]: | port: 0
Feb 4 09:00:28 vpn pluto[15879]: | emitting 4 raw bytes of client network into ISAKMP Identification Payload (IPsec DOI)
Feb 4 09:00:28 vpn pluto[15879]: | client network c0 a8 00 00
Feb 4 09:00:28 vpn pluto[15879]: | emitting 4 raw bytes of client mask into ISAKMP Identification Payload (IPsec DOI)
Feb 4 09:00:28 vpn pluto[15879]: | client mask ff ff ff 00
Feb 4 09:00:28 vpn pluto[15879]: | emitting length of ISAKMP Identification Payload (IPsec DOI): 16
Feb 4 09:00:28 vpn pluto[15879]: | ***emit ISAKMP Identification Payload (IPsec DOI):
Feb 4 09:00:28 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_NONE
Feb 4 09:00:28 vpn pluto[15879]: | ID type: ID_IPV4_ADDR_SUBNET
Feb 4 09:00:28 vpn pluto[15879]: | Protocol ID: 0
Feb 4 09:00:28 vpn pluto[15879]: | port: 0
Feb 4 09:00:28 vpn pluto[15879]: | emitting 4 raw bytes of client network into ISAKMP Identification Payload (IPsec DOI)
Feb 4 09:00:28 vpn pluto[15879]: | client network c0 a8 01 00
Feb 4 09:00:28 vpn pluto[15879]: | emitting 4 raw bytes of client mask into ISAKMP Identification Payload (IPsec DOI)
Feb 4 09:00:28 vpn pluto[15879]: | client mask ff ff ff 00
Feb 4 09:00:28 vpn pluto[15879]: | emitting length of ISAKMP Identification Payload (IPsec DOI): 16
Feb 4 09:00:28 vpn pluto[15879]: | HASH(1) computed:
Feb 4 09:00:28 vpn pluto[15879]: | 14 0b 93 af e1 4f 96 c0 d1 69 8a b7 cc 94 20 ae
Feb 4 09:00:28 vpn pluto[15879]: | 2c f8 39 84
Feb 4 09:00:28 vpn pluto[15879]: | last Phase 1 IV: 9b 97 c2 66 86 12 6f 4a
Feb 4 09:00:28 vpn pluto[15879]: | current Phase 1 IV: 9b 97 c2 66 86 12 6f 4a
Feb 4 09:00:28 vpn pluto[15879]: | computed Phase 2 IV:
Feb 4 09:00:28 vpn pluto[15879]: | 6a fd 07 04 27 fa 11 74 41 4f 98 92 0e 9f a5 11
Feb 4 09:00:28 vpn pluto[15879]: | 08 df b9 74
Feb 4 09:00:28 vpn pluto[15879]: | encrypting:
Feb 4 09:00:28 vpn pluto[15879]: | 01 00 00 18 14 0b 93 af e1 4f 96 c0 d1 69 8a b7
Feb 4 09:00:28 vpn pluto[15879]: | cc 94 20 ae 2c f8 39 84 0a 00 00 88 00 00 00 01
Feb 4 09:00:28 vpn pluto[15879]: | 00 00 00 01 00 00 00 7c 00 03 04 04 da 4a e1 f5
Feb 4 09:00:28 vpn pluto[15879]: | 03 00 00 1c 00 0c 00 00 80 03 00 02 80 04 00 01
Feb 4 09:00:28 vpn pluto[15879]: | 80 01 00 01 80 02 70 80 80 05 00 02 03 00 00 1c
Feb 4 09:00:28 vpn pluto[15879]: | 01 0c 00 00 80 03 00 02 80 04 00 01 80 01 00 01
Feb 4 09:00:28 vpn pluto[15879]: | 80 02 70 80 80 05 00 01 03 00 00 1c 02 03 00 00
Feb 4 09:00:28 vpn pluto[15879]: | 80 03 00 02 80 04 00 01 80 01 00 01 80 02 70 80
Feb 4 09:00:28 vpn pluto[15879]: | 80 05 00 02 00 00 00 1c 03 03 00 00 80 03 00 02
Feb 4 09:00:28 vpn pluto[15879]: | 80 04 00 01 80 01 00 01 80 02 70 80 80 05 00 01
Feb 4 09:00:28 vpn pluto[15879]: | 04 00 00 14 75 25 9c fd b7 4b dc c9 44 2a 45 0d
Feb 4 09:00:28 vpn pluto[15879]: | 9e bf 9f e0 05 00 00 84 2d 0c 98 37 75 5b e8 8f
Feb 4 09:00:28 vpn pluto[15879]: | 8c 86 a9 88 df 71 8c 7a cd 12 c5 b8 9b 7d 45 80
Feb 4 09:00:28 vpn pluto[15879]: | d6 af a1 a5 56 6a 3f 13 2c 32 ee 17 02 f3 cf 80
Feb 4 09:00:28 vpn pluto[15879]: | f1 95 87 65 f4 58 64 66 1a 4e 5e bc 55 de 19 aa
Feb 4 09:00:28 vpn pluto[15879]: | 94 5c fc 10 f0 be 24 00 c7 3c d1 40 6a a3 0e 08
Feb 4 09:00:28 vpn pluto[15879]: | ae a9 4b 3d 97 9f 36 96 c3 b6 6a 7b e8 71 81 61
Feb 4 09:00:28 vpn pluto[15879]: | 99 72 94 53 15 a4 2d 2c 98 cb 66 fe 21 51 df f2
Feb 4 09:00:28 vpn pluto[15879]: | 49 ba 8d 76 77 64 6e fa 7d 35 b1 8e ba f4 5d ca
Feb 4 09:00:28 vpn pluto[15879]: | d9 cc a2 53 e6 e5 01 36 05 00 00 10 04 00 00 00
Feb 4 09:00:28 vpn pluto[15879]: | c0 a8 00 00 ff ff ff 00 00 00 00 10 04 00 00 00
Feb 4 09:00:28 vpn pluto[15879]: | c0 a8 01 00 ff ff ff 00
Feb 4 09:00:28 vpn pluto[15879]: | IV:
Feb 4 09:00:28 vpn pluto[15879]: | 6a fd 07 04 27 fa 11 74 41 4f 98 92 0e 9f a5 11
Feb 4 09:00:28 vpn pluto[15879]: | 08 df b9 74
Feb 4 09:00:28 vpn pluto[15879]: | encrypting using OAKLEY_3DES_CBC
Feb 4 09:00:28 vpn pluto[15879]: | next IV: aa 21 a8 e2 b9 09 a2 3c
Feb 4 09:00:28 vpn pluto[15879]: | emitting length of ISAKMP Message: 372
Feb 4 09:00:28 vpn pluto[15879]: | sending 372 bytes for quick_outI1 through ppp0:500 to 79.207.134.254:500:
Feb 4 09:00:28 vpn pluto[15879]: | 51 ec 62 5a c7 55 66 cf 92 51 a3 c6 21 37 23 a1
Feb 4 09:00:28 vpn pluto[15879]: | 08 10 20 01 fb 28 72 f0 00 00 01 74 78 3b 16 5b
Feb 4 09:00:28 vpn pluto[15879]: | 74 4f a0 f8 c4 1f dc a6 ee ad 87 f2 f7 59 87 22
Feb 4 09:00:28 vpn pluto[15879]: | 60 7b 1d e0 06 7b 81 6f 2a d5 27 c9 0c 34 0f 7a
Feb 4 09:00:28 vpn pluto[15879]: | 1c 39 11 98 46 3c 5f 29 19 d3 90 0e 5d 10 d3 cd
Feb 4 09:00:28 vpn pluto[15879]: | d7 7c 1d 83 41 51 e0 e7 e1 88 72 ad e9 63 ba 02
Feb 4 09:00:28 vpn pluto[15879]: | cc 6b 77 88 3f 83 ca 87 52 68 d3 7e 74 90 cd ae
Feb 4 09:00:28 vpn pluto[15879]: | 72 9a f9 3b 23 3d a6 99 e4 d9 4a 67 21 bb 0b a6
Feb 4 09:00:28 vpn pluto[15879]: | 0c af fe 31 d4 57 49 aa b3 64 fd c6 fb 4e 39 c2
Feb 4 09:00:28 vpn pluto[15879]: | d4 2f 31 c2 e4 41 ab f3 7e 52 24 39 1b 2c 19 59
Feb 4 09:00:28 vpn pluto[15879]: | ea d6 c3 86 e4 04 11 4e 59 f4 e3 a7 cb fb d8 d3
Feb 4 09:00:28 vpn pluto[15879]: | 1c 72 a0 e5 01 4e 99 e5 f0 a4 32 2e b6 32 73 ee
Feb 4 09:00:28 vpn pluto[15879]: | 5f 6f b1 a4 7e ca ad 69 88 5e 9f 53 26 d5 f8 01
Feb 4 09:00:28 vpn pluto[15879]: | d1 be ba 5b 16 df f1 39 0c 5a 73 df ad 3a 95 b3
Feb 4 09:00:28 vpn pluto[15879]: | 8d 50 28 4d b5 8d b7 74 cb 8c 68 15 d8 85 64 0d
Feb 4 09:00:28 vpn pluto[15879]: | d5 3c 93 99 bd d6 9d 57 74 c8 b2 fc e4 ca af 76
Feb 4 09:00:28 vpn pluto[15879]: | 4c 5a cd 9c ea f7 8c ea 30 47 c3 c6 fa 13 8a f5
Feb 4 09:00:28 vpn pluto[15879]: | 30 96 06 c1 c3 68 a5 f5 ea 80 a4 49 ca 52 54 df
Feb 4 09:00:28 vpn pluto[15879]: | f1 49 d1 44 43 e0 6e 63 59 17 73 5c fa 6f 8f 84
Feb 4 09:00:28 vpn pluto[15879]: | 5a c6 04 05 73 a2 ce 9e 44 27 31 39 35 14 a9 a7
Feb 4 09:00:28 vpn pluto[15879]: | 9a 5f 11 5b 92 40 90 4c a1 99 45 57 38 56 f6 f1
Feb 4 09:00:28 vpn pluto[15879]: | a3 d9 b4 70 d0 d0 f1 27 51 88 0e f7 c8 c4 2f 89
Feb 4 09:00:28 vpn pluto[15879]: | a4 ff 70 70 a0 df f6 9f 2e ee 5d c4 aa 21 a8 e2
Feb 4 09:00:28 vpn pluto[15879]: | b9 09 a2 3c
Feb 4 09:00:28 vpn pluto[15879]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #2
Feb 4 09:00:28 vpn pluto[15879]: | next event EVENT_RETRANSMIT in 10 seconds for #2
Feb 4 09:00:28 vpn pluto[15879]: |
Feb 4 09:00:28 vpn pluto[15879]: | *received 316 bytes from 79.207.134.254:500 on ppp0 (port=500)
Feb 4 09:00:28 vpn pluto[15879]: | 51 ec 62 5a c7 55 66 cf 92 51 a3 c6 21 37 23 a1
Feb 4 09:00:28 vpn pluto[15879]: | 08 10 20 01 fb 28 72 f0 00 00 01 3c f9 a6 43 85
Feb 4 09:00:28 vpn pluto[15879]: | 71 a1 3f eb 21 4a d6 27 c7 b7 12 16 32 aa 39 34
Feb 4 09:00:28 vpn pluto[15879]: | 6c cd 48 0b 8c 9c 9f 6f 3f ba 42 12 a8 86 f8 43
Feb 4 09:00:28 vpn pluto[15879]: | db 84 a8 e1 49 b8 b2 2a 48 5b e3 13 36 ac 54 25
Feb 4 09:00:28 vpn pluto[15879]: | 3c ca 0f 12 93 42 26 cd de a9 99 c1 ab e0 33 73
Feb 4 09:00:28 vpn pluto[15879]: | 57 59 99 5d 3e 55 12 b3 53 b9 0d d9 f6 37 b8 e5
Feb 4 09:00:28 vpn pluto[15879]: | 8d 34 e6 bc 64 22 f4 59 7e 21 e6 9f 8c d6 be 46
Feb 4 09:00:28 vpn pluto[15879]: | c6 a9 d8 21 c2 6f e4 db 7c 20 c9 d3 6a ae 33 9e
Feb 4 09:00:28 vpn pluto[15879]: | 1e 54 d6 20 43 28 93 c4 e7 38 24 e0 a4 4d a0 b7
Feb 4 09:00:28 vpn pluto[15879]: | 09 a8 de 4a c7 de 80 d0 03 75 2d 5d 64 d7 d5 b3
Feb 4 09:00:28 vpn pluto[15879]: | 63 9d 28 c0 02 52 88 30 26 8f a4 a3 72 5c dc 8e
Feb 4 09:00:28 vpn pluto[15879]: | 89 95 67 e5 ee 27 ca 81 5a 7d 28 b8 0d 00 76 08
Feb 4 09:00:28 vpn pluto[15879]: | d9 f2 7a dd 0e 84 13 16 a2 bd 13 45 9b 4d ce 7b
Feb 4 09:00:28 vpn pluto[15879]: | 9c 78 66 c0 84 a0 ee db 3d 6c dc 90 b6 00 38 e2
Feb 4 09:00:28 vpn pluto[15879]: | 92 ff cd 2f b7 0b fb 05 41 2f 36 36 e2 22 d0 3b
Feb 4 09:00:28 vpn pluto[15879]: | 43 65 36 d4 57 62 bb 43 42 08 c5 ca df 5b 87 bb
Feb 4 09:00:28 vpn pluto[15879]: | 09 e4 22 27 e8 5d 51 b9 f1 02 bb 1e 51 53 16 e4
Feb 4 09:00:28 vpn pluto[15879]: | 87 08 e8 0f 4f 88 f2 8d 13 ae 92 fd 0d cb 1e ea
Feb 4 09:00:28 vpn pluto[15879]: | d4 2f 0e c9 10 94 3f 1b ae 3f a2 b1
Feb 4 09:00:28 vpn pluto[15879]: | **parse ISAKMP Message:
Feb 4 09:00:28 vpn pluto[15879]: | initiator cookie:
Feb 4 09:00:28 vpn pluto[15879]: | 51 ec 62 5a c7 55 66 cf
Feb 4 09:00:28 vpn pluto[15879]: | responder cookie:
Feb 4 09:00:28 vpn pluto[15879]: | 92 51 a3 c6 21 37 23 a1
Feb 4 09:00:28 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_HASH
Feb 4 09:00:28 vpn pluto[15879]: | ISAKMP version: ISAKMP Version 1.0
Feb 4 09:00:28 vpn pluto[15879]: | exchange type: ISAKMP_XCHG_QUICK
Feb 4 09:00:28 vpn pluto[15879]: | flags: ISAKMP_FLAG_ENCRYPTION
Feb 4 09:00:28 vpn pluto[15879]: | message ID: fb 28 72 f0
Feb 4 09:00:28 vpn pluto[15879]: | length: 316
Feb 4 09:00:28 vpn pluto[15879]: | processing packet with exchange type=ISAKMP_XCHG_QUICK (32)
Feb 4 09:00:28 vpn pluto[15879]: | ICOOKIE: 51 ec 62 5a c7 55 66 cf
Feb 4 09:00:28 vpn pluto[15879]: | RCOOKIE: 92 51 a3 c6 21 37 23 a1
Feb 4 09:00:28 vpn pluto[15879]: | peer: 4f cf 86 fe
Feb 4 09:00:28 vpn pluto[15879]: | state hash entry 30
Feb 4 09:00:28 vpn pluto[15879]: | peer and cookies match on #2, provided msgid fb2872f0 vs fb2872f0
Feb 4 09:00:28 vpn pluto[15879]: | state object #2 found, in STATE_QUICK_I1
Feb 4 09:00:28 vpn pluto[15879]: | processing connection **********
Feb 4 09:00:28 vpn pluto[15879]: | received encrypted packet from 79.207.134.254:500
Feb 4 09:00:28 vpn pluto[15879]: | decrypting 288 bytes using algorithm OAKLEY_3DES_CBC
Feb 4 09:00:28 vpn pluto[15879]: | decrypted:
Feb 4 09:00:28 vpn pluto[15879]: | 01 00 00 18 aa 3f 16 6e 47 e5 88 01 15 f1 66 cc
Feb 4 09:00:28 vpn pluto[15879]: | 80 21 4e 55 b1 50 8b a8 0a 00 00 34 00 00 00 01
Feb 4 09:00:28 vpn pluto[15879]: | 00 00 00 01 00 00 00 28 01 03 04 01 d3 b1 a6 29
Feb 4 09:00:28 vpn pluto[15879]: | 00 00 00 1c 00 0c 00 00 80 05 00 02 80 03 00 02
Feb 4 09:00:28 vpn pluto[15879]: | 80 01 00 01 80 02 70 80 80 04 00 01 04 00 00 14
Feb 4 09:00:28 vpn pluto[15879]: | ba 3d c6 f6 aa 91 a3 93 a8 0e 8b 22 0a 59 b2 d0
Feb 4 09:00:28 vpn pluto[15879]: | 05 00 00 84 93 e5 4a 7e 59 08 a9 95 84 ab 48 36
Feb 4 09:00:28 vpn pluto[15879]: | 8c 21 70 ca 3f 54 14 50 d7 9c 19 11 40 de d7 33
Feb 4 09:00:28 vpn pluto[15879]: | 07 2a 00 b5 f5 e2 28 bb 68 89 6b 45 18 08 dc db
Feb 4 09:00:28 vpn pluto[15879]: | 23 f2 1f b5 08 9b e4 99 72 07 40 c9 88 11 ec 42
Feb 4 09:00:28 vpn pluto[15879]: | 32 48 c6 a2 3d da 64 2f 6f 3d 73 5c 03 52 25 92
Feb 4 09:00:28 vpn pluto[15879]: | ab f7 cd df f5 1e af ce ae b3 5c ca 24 03 5c a4
Feb 4 09:00:28 vpn pluto[15879]: | 06 67 12 36 9e 5e b2 07 bd 88 c9 8b 17 df 0b a6
Feb 4 09:00:28 vpn pluto[15879]: | d4 e9 57 3a 65 ad 0f 9c ff 1f 39 75 c6 ea 3d 80
Feb 4 09:00:28 vpn pluto[15879]: | 31 2f 7f c6 05 00 00 10 04 00 00 00 c0 a8 00 00
Feb 4 09:00:28 vpn pluto[15879]: | ff ff ff 00 0b 00 00 10 04 00 00 00 c0 a8 01 00
Feb 4 09:00:28 vpn pluto[15879]: | ff ff ff 00 00 00 00 18 00 00 00 01 03 04 60 00
Feb 4 09:00:28 vpn pluto[15879]: | da 4a e1 f5 80 01 00 01 80 02 0e 10 00 00 00 00
Feb 4 09:00:28 vpn pluto[15879]: | next IV: 10 94 3f 1b ae 3f a2 b1
Feb 4 09:00:28 vpn pluto[15879]: | np=8 and sd=0x80eae50
Feb 4 09:00:28 vpn pluto[15879]: | ***parse ISAKMP Hash Payload:
Feb 4 09:00:28 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_SA
Feb 4 09:00:28 vpn pluto[15879]: | length: 24
Feb 4 09:00:28 vpn pluto[15879]: | np=1 and sd=0x80eadc0
Feb 4 09:00:28 vpn pluto[15879]: | ***parse ISAKMP Security Association Payload:
Feb 4 09:00:28 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_NONCE
Feb 4 09:00:28 vpn pluto[15879]: | length: 52
Feb 4 09:00:28 vpn pluto[15879]: | DOI: ISAKMP_DOI_IPSEC
Feb 4 09:00:28 vpn pluto[15879]: | np=10 and sd=0x80eae68
Feb 4 09:00:28 vpn pluto[15879]: | ***parse ISAKMP Nonce Payload:
Feb 4 09:00:28 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_KE
Feb 4 09:00:28 vpn pluto[15879]: | length: 20
Feb 4 09:00:28 vpn pluto[15879]: | np=4 and sd=0x80eae14
Feb 4 09:00:28 vpn pluto[15879]: | ***parse ISAKMP Key Exchange Payload:
Feb 4 09:00:28 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_ID
Feb 4 09:00:28 vpn pluto[15879]: | length: 132
Feb 4 09:00:28 vpn pluto[15879]: | np=5 and sd=(nil)
Feb 4 09:00:28 vpn pluto[15879]: | ***parse ISAKMP Identification Payload (IPsec DOI):
Feb 4 09:00:28 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_ID
Feb 4 09:00:28 vpn pluto[15879]: | length: 16
Feb 4 09:00:28 vpn pluto[15879]: | ID type: ID_IPV4_ADDR_SUBNET
Feb 4 09:00:28 vpn pluto[15879]: | Protocol ID: 0
Feb 4 09:00:28 vpn pluto[15879]: | port: 0
Feb 4 09:00:28 vpn pluto[15879]: | np=5 and sd=(nil)
Feb 4 09:00:28 vpn pluto[15879]: | ***parse ISAKMP Identification Payload (IPsec DOI):
Feb 4 09:00:28 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_N
Feb 4 09:00:28 vpn pluto[15879]: | length: 16
Feb 4 09:00:28 vpn pluto[15879]: | ID type: ID_IPV4_ADDR_SUBNET
Feb 4 09:00:28 vpn pluto[15879]: | Protocol ID: 0
Feb 4 09:00:28 vpn pluto[15879]: | port: 0
Feb 4 09:00:28 vpn pluto[15879]: | np=11 and sd=0x80eae74
Feb 4 09:00:28 vpn pluto[15879]: | ***parse ISAKMP Notification Payload:
Feb 4 09:00:28 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_NONE
Feb 4 09:00:28 vpn pluto[15879]: | length: 24
Feb 4 09:00:28 vpn pluto[15879]: | DOI: ISAKMP_DOI_IPSEC
Feb 4 09:00:28 vpn pluto[15879]: | protocol ID: 3
Feb 4 09:00:28 vpn pluto[15879]: | SPI size: 4
Feb 4 09:00:28 vpn pluto[15879]: | Notify Message Type: IPSEC_RESPONDER_LIFETIME
Feb 4 09:00:28 vpn pluto[15879]: | removing 4 bytes of padding
Feb 4 09:00:28 vpn pluto[15879]: "**********" #2: ignoring informational payload, type IPSEC_RESPONDER_LIFETIME
Feb 4 09:00:28 vpn pluto[15879]: | info: da 4a e1 f5 80 01 00 01 80 02 0e 10
Feb 4 09:00:28 vpn pluto[15879]: | **emit ISAKMP Message:
Feb 4 09:00:28 vpn pluto[15879]: | initiator cookie:
Feb 4 09:00:28 vpn pluto[15879]: | 51 ec 62 5a c7 55 66 cf
Feb 4 09:00:28 vpn pluto[15879]: | responder cookie:
Feb 4 09:00:28 vpn pluto[15879]: | 92 51 a3 c6 21 37 23 a1
Feb 4 09:00:28 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_HASH
Feb 4 09:00:28 vpn pluto[15879]: | ISAKMP version: ISAKMP Version 1.0
Feb 4 09:00:28 vpn pluto[15879]: | exchange type: ISAKMP_XCHG_QUICK
Feb 4 09:00:28 vpn pluto[15879]: | flags: ISAKMP_FLAG_ENCRYPTION
Feb 4 09:00:28 vpn pluto[15879]: | message ID: fb 28 72 f0
Feb 4 09:00:28 vpn pluto[15879]: | HASH(2) computed:
Feb 4 09:00:28 vpn pluto[15879]: | aa 3f 16 6e 47 e5 88 01 15 f1 66 cc 80 21 4e 55
Feb 4 09:00:28 vpn pluto[15879]: | b1 50 8b a8
Feb 4 09:00:28 vpn pluto[15879]: | ****parse IPsec DOI SIT:
Feb 4 09:00:28 vpn pluto[15879]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
Feb 4 09:00:28 vpn pluto[15879]: | ****parse ISAKMP Proposal Payload:
Feb 4 09:00:28 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_NONE
Feb 4 09:00:28 vpn pluto[15879]: | length: 40
Feb 4 09:00:28 vpn pluto[15879]: | proposal number: 1
Feb 4 09:00:28 vpn pluto[15879]: | protocol ID: PROTO_IPSEC_ESP
Feb 4 09:00:28 vpn pluto[15879]: | SPI size: 4
Feb 4 09:00:28 vpn pluto[15879]: | number of transforms: 1
Feb 4 09:00:28 vpn pluto[15879]: | parsing 4 raw bytes of ISAKMP Proposal Payload into SPI
Feb 4 09:00:28 vpn pluto[15879]: | SPI d3 b1 a6 29
Feb 4 09:00:28 vpn pluto[15879]: | *****parse ISAKMP Transform Payload (ESP):
Feb 4 09:00:28 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_NONE
Feb 4 09:00:28 vpn pluto[15879]: | length: 28
Feb 4 09:00:28 vpn pluto[15879]: | transform number: 0
Feb 4 09:00:28 vpn pluto[15879]: | transform ID: ESP_AES
Feb 4 09:00:28 vpn pluto[15879]: | ******parse ISAKMP IPsec DOI attribute:
Feb 4 09:00:28 vpn pluto[15879]: | af+type: AUTH_ALGORITHM
Feb 4 09:00:28 vpn pluto[15879]: | length/value: 2
Feb 4 09:00:28 vpn pluto[15879]: | [2 is AUTH_ALGORITHM_HMAC_SHA1]
Feb 4 09:00:28 vpn pluto[15879]: | ******parse ISAKMP IPsec DOI attribute:
Feb 4 09:00:28 vpn pluto[15879]: | af+type: GROUP_DESCRIPTION
Feb 4 09:00:28 vpn pluto[15879]: | length/value: 2
Feb 4 09:00:28 vpn pluto[15879]: | [2 is OAKLEY_GROUP_MODP1024]
Feb 4 09:00:28 vpn pluto[15879]: | ******parse ISAKMP IPsec DOI attribute:
Feb 4 09:00:28 vpn pluto[15879]: | af+type: SA_LIFE_TYPE
Feb 4 09:00:28 vpn pluto[15879]: | length/value: 1
Feb 4 09:00:28 vpn pluto[15879]: | [1 is SA_LIFE_TYPE_SECONDS]
Feb 4 09:00:28 vpn pluto[15879]: | ******parse ISAKMP IPsec DOI attribute:
Feb 4 09:00:28 vpn pluto[15879]: | af+type: SA_LIFE_DURATION
Feb 4 09:00:28 vpn pluto[15879]: | length/value: 28800
Feb 4 09:00:28 vpn pluto[15879]: | ******parse ISAKMP IPsec DOI attribute:
Feb 4 09:00:28 vpn pluto[15879]: | af+type: ENCAPSULATION_MODE
Feb 4 09:00:28 vpn pluto[15879]: | length/value: 1
Feb 4 09:00:28 vpn pluto[15879]: | [1 is ENCAPSULATION_MODE_TUNNEL]
Feb 4 09:00:28 vpn pluto[15879]: | DH public value received:
Feb 4 09:00:28 vpn pluto[15879]: | 93 e5 4a 7e 59 08 a9 95 84 ab 48 36 8c 21 70 ca
Feb 4 09:00:28 vpn pluto[15879]: | 3f 54 14 50 d7 9c 19 11 40 de d7 33 07 2a 00 b5
Feb 4 09:00:28 vpn pluto[15879]: | f5 e2 28 bb 68 89 6b 45 18 08 dc db 23 f2 1f b5
Feb 4 09:00:28 vpn pluto[15879]: | 08 9b e4 99 72 07 40 c9 88 11 ec 42 32 48 c6 a2
Feb 4 09:00:28 vpn pluto[15879]: | 3d da 64 2f 6f 3d 73 5c 03 52 25 92 ab f7 cd df
Feb 4 09:00:28 vpn pluto[15879]: | f5 1e af ce ae b3 5c ca 24 03 5c a4 06 67 12 36
Feb 4 09:00:28 vpn pluto[15879]: | 9e 5e b2 07 bd 88 c9 8b 17 df 0b a6 d4 e9 57 3a
Feb 4 09:00:28 vpn pluto[15879]: | 65 ad 0f 9c ff 1f 39 75 c6 ea 3d 80 31 2f 7f c6
Feb 4 09:00:28 vpn pluto[15879]: | started looking for secret for @************************->@********** of kind PPK_PSK
Feb 4 09:00:28 vpn pluto[15879]: | actually looking for secret for @************************->@********** of kind PPK_PSK
Feb 4 09:00:28 vpn pluto[15879]: | 1: compared PSK @********** to @************************ / @********** -> 2
Feb 4 09:00:28 vpn pluto[15879]: | 2: compared PSK @************************ to @************************ / @********** -> 6
Feb 4 09:00:28 vpn pluto[15879]: | best_match 0>6 best=0x8838018 (line=11)
Feb 4 09:00:28 vpn pluto[15879]: | concluding with best_match=6 best=0x8838018 (lineno=11)
Feb 4 09:00:28 vpn pluto[15879]: | calc_dh_shared(): time elapsed (OAKLEY_GROUP_MODP1024): 54069 usec
Feb 4 09:00:28 vpn pluto[15879]: | DH shared secret:
Feb 4 09:00:28 vpn pluto[15879]: | 25 04 bb 25 5e b5 8a 7b 43 4a e0 81 b7 6f 36 25
Feb 4 09:00:28 vpn pluto[15879]: | d3 67 29 72 ff 5d 89 55 33 83 f5 ea 07 96 ca 21
Feb 4 09:00:28 vpn pluto[15879]: | a1 0b c5 bc 0d a0 f0 07 29 5a b2 e7 98 35 24 3e
Feb 4 09:00:28 vpn pluto[15879]: | 25 21 ef 47 61 22 97 d9 a5 9f 82 57 32 cf 3e 2f
Feb 4 09:00:28 vpn pluto[15879]: | 37 25 26 bc 49 eb 5d 61 ab 1b b4 ce e0 f5 a4 09
Feb 4 09:00:28 vpn pluto[15879]: | 59 71 a7 68 0a c2 90 11 31 ff 22 fb 7c d4 53 77
Feb 4 09:00:28 vpn pluto[15879]: | 91 9f e8 4d e8 6b 51 71 a6 9a 24 bd 4b d6 c2 54
Feb 4 09:00:28 vpn pluto[15879]: | 19 97 20 1e 02 ac 39 1e 74 c2 df 69 44 81 1c 92
Feb 4 09:00:28 vpn pluto[15879]: | our client is subnet 192.168.0.0/24
Feb 4 09:00:28 vpn pluto[15879]: | our client protocol/port is 0/0
Feb 4 09:00:28 vpn pluto[15879]: | peer client is subnet 192.168.1.0/24
Feb 4 09:00:28 vpn pluto[15879]: | peer client protocol/port is 0/0
Feb 4 09:00:28 vpn pluto[15879]: | ***emit ISAKMP Hash Payload:
Feb 4 09:00:28 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_NONE
Feb 4 09:00:28 vpn pluto[15879]: | emitting 20 zero bytes of HASH into ISAKMP Hash Payload
Feb 4 09:00:28 vpn pluto[15879]: | emitting length of ISAKMP Hash Payload: 24
Feb 4 09:00:28 vpn pluto[15879]: | HASH(3) computed: e2 64 dc 3a 25 c8 1d 3b d3 0b 5b 84 ba 0e 9e 16
Feb 4 09:00:28 vpn pluto[15879]: | 46 f0 35 3e
Feb 4 09:00:28 vpn pluto[15879]: | compute_proto_keymat:needed_len (after ESP enc)=16
Feb 4 09:00:28 vpn pluto[15879]: | compute_proto_keymat:needed_len (after ESP auth)=36
Feb 4 09:00:28 vpn pluto[15879]: | KEYMAT computed:
Feb 4 09:00:28 vpn pluto[15879]: | 01 f3 26 df 62 71 7a 89 98 8a ce dc 19 78 46 03
Feb 4 09:00:28 vpn pluto[15879]: | 50 0d dc 9b 5a 00 5f d3 b4 66 48 94 fe e8 e0 ac
Feb 4 09:00:28 vpn pluto[15879]: | 17 3d 6e 9c
Feb 4 09:00:28 vpn pluto[15879]: | Peer KEYMAT computed:
Feb 4 09:00:28 vpn pluto[15879]: | 5d 62 fc 11 65 bf 92 20 72 b1 60 ac 99 f9 70 b5
Feb 4 09:00:28 vpn pluto[15879]: | 0b aa 80 4e b8 03 35 41 20 4d 98 64 fa b8 ef 1d
Feb 4 09:00:28 vpn pluto[15879]: | f8 92 48 c2
Feb 4 09:00:28 vpn pluto[15879]: | install_ipsec_sa() for #2: inbound and outbound
Feb 4 09:00:28 vpn pluto[15879]: | route owner of "**********" erouted HOLD: self; eroute owner: self
Feb 4 09:00:28 vpn pluto[15879]: | could_route called for ********** (kind=CK_PERMANENT)
Feb 4 09:00:28 vpn pluto[15879]: | looking for alg with transid: 12 keylen: 0 auth: 2
Feb 4 09:00:28 vpn pluto[15879]: | checking transid: 11 keylen: 0 auth: 1
Feb 4 09:00:28 vpn pluto[15879]: | checking transid: 11 keylen: 0 auth: 2
Feb 4 09:00:28 vpn pluto[15879]: | checking transid: 2 keylen: 8 auth: 0
Feb 4 09:00:28 vpn pluto[15879]: | checking transid: 2 keylen: 8 auth: 1
Feb 4 09:00:28 vpn pluto[15879]: | checking transid: 2 keylen: 8 auth: 2
Feb 4 09:00:28 vpn pluto[15879]: | checking transid: 3 keylen: 24 auth: 0
Feb 4 09:00:28 vpn pluto[15879]: | checking transid: 3 keylen: 24 auth: 1
Feb 4 09:00:28 vpn pluto[15879]: | checking transid: 3 keylen: 24 auth: 2
Feb 4 09:00:28 vpn pluto[15879]: | checking transid: 12 keylen: 16 auth: 0
Feb 4 09:00:28 vpn pluto[15879]: | checking transid: 12 keylen: 16 auth: 1
Feb 4 09:00:28 vpn pluto[15879]: | checking transid: 12 keylen: 16 auth: 2
Feb 4 09:00:28 vpn pluto[15879]: | add inbound eroute 192.168.1.0/24:0 --0-> 192.168.0.0/24:0 => tun.10000 at 84.154.56.62 (raw_eroute)
Feb 4 09:00:29 vpn pluto[15879]: | looking for alg with transid: 12 keylen: 0 auth: 2
Feb 4 09:00:29 vpn pluto[15879]: | checking transid: 11 keylen: 0 auth: 1
Feb 4 09:00:29 vpn pluto[15879]: | checking transid: 11 keylen: 0 auth: 2
Feb 4 09:00:29 vpn pluto[15879]: | checking transid: 2 keylen: 8 auth: 0
Feb 4 09:00:29 vpn pluto[15879]: | checking transid: 2 keylen: 8 auth: 1
Feb 4 09:00:29 vpn pluto[15879]: | checking transid: 2 keylen: 8 auth: 2
Feb 4 09:00:29 vpn pluto[15879]: | checking transid: 3 keylen: 24 auth: 0
Feb 4 09:00:29 vpn pluto[15879]: | checking transid: 3 keylen: 24 auth: 1
Feb 4 09:00:29 vpn pluto[15879]: | checking transid: 3 keylen: 24 auth: 2
Feb 4 09:00:29 vpn pluto[15879]: | checking transid: 12 keylen: 16 auth: 0
Feb 4 09:00:29 vpn pluto[15879]: | checking transid: 12 keylen: 16 auth: 1
Feb 4 09:00:29 vpn pluto[15879]: | checking transid: 12 keylen: 16 auth: 2
Feb 4 09:00:29 vpn pluto[15879]: | sr for #2: erouted HOLD
Feb 4 09:00:29 vpn pluto[15879]: | route owner of "**********" erouted HOLD: self; eroute owner: self
Feb 4 09:00:29 vpn pluto[15879]: | route_and_eroute with c: ********** (next: none) ero:********** esr:{(nil)} ro:********** rosr:{(nil)} and state: 2
Feb 4 09:00:29 vpn pluto[15879]: | eroute_connection replace eroute 192.168.0.0/24:0 --0-> 192.168.1.0/24:0 => tun.0 at 79.207.134.254 (raw_eroute)
Feb 4 09:00:29 vpn pluto[15879]: | command executing up-client
Feb 4 09:00:29 vpn pluto[15879]: | executing up-client: 2>&1 PLUTO_VERSION='1.1' PLUTO_VERB='up-client' PLUTO_CONNECTION='**********' PLUTO_NEXT_HOP='79.207.134.254' PLUTO_INTERFACE='ppp0' PLUTO_ME='84.154.56.62' PLUTO_MY_ID='@************************' PLUTO_MY_CLIENT='192.168.0.0/24' PLUTO_MY_CLIENT_NET='192.168.0.0' PLUTO_MY_CLIENT_MASK='255.255.255.0' PLUTO_MY_PORT='0' PLUTO_MY_PROTOCOL='0' PLUTO_PEER='79.207.134.254' PLUTO_PEER_ID='@**********' PLUTO_PEER_CLIENT='192.168.1.0/24' PLUTO_PEER_CLIENT_NET='192.168.1.0' PLUTO_PEER_CLIENT_MASK='255.255.255.0' PLUTO_PEER_PORT='0' PLUTO_PEER_PROTOCOL='0' PLUTO_PEER_CA='' PLUTO_CONN_POLICY='PSK+ENCRYPT+TUNNEL+PFS+UP+AGGRESSIVE' PLUTO_MY_SOURCEIP='192.168.0.1' ipsec _updown
Feb 4 09:00:29 vpn pluto[15879]: | route_and_eroute: firewall_notified: true
Feb 4 09:00:29 vpn pluto[15879]: | route_and_eroute: instance "**********", setting eroute_owner {spd=0x88386d4,sr=0x88386d4} to #2 (was #0) (newest_ipsec_sa=#0)
Feb 4 09:00:29 vpn pluto[15879]: | encrypting:
Feb 4 09:00:29 vpn pluto[15879]: | 00 00 00 18 e2 64 dc 3a 25 c8 1d 3b d3 0b 5b 84
Feb 4 09:00:29 vpn pluto[15879]: | ba 0e 9e 16 46 f0 35 3e
Feb 4 09:00:29 vpn pluto[15879]: | IV:
Feb 4 09:00:29 vpn pluto[15879]: | 10 94 3f 1b ae 3f a2 b1
Feb 4 09:00:29 vpn pluto[15879]: | encrypting using OAKLEY_3DES_CBC
Feb 4 09:00:29 vpn pluto[15879]: | next IV: a6 14 c4 b3 01 a1 d0 28
Feb 4 09:00:29 vpn pluto[15879]: | emitting length of ISAKMP Message: 52
Feb 4 09:00:29 vpn pluto[15879]: | inR1_outI2: instance **********[0], setting newest_ipsec_sa to #2 (was #0) (spd.eroute=#2)
Feb 4 09:00:29 vpn pluto[15879]: | complete state transition with STF_OK
Feb 4 09:00:29 vpn pluto[15879]: "**********" #2: transition from state STATE_QUICK_I1 to state STATE_QUICK_I2
Feb 4 09:00:29 vpn pluto[15879]: | sending reply packet to 79.207.134.254:500 (from port=500)
Feb 4 09:00:29 vpn pluto[15879]: | sending 52 bytes for STATE_QUICK_I1 through ppp0:500 to 79.207.134.254:500:
Feb 4 09:00:29 vpn pluto[15879]: | 51 ec 62 5a c7 55 66 cf 92 51 a3 c6 21 37 23 a1
Feb 4 09:00:29 vpn pluto[15879]: | 08 10 20 01 fb 28 72 f0 00 00 00 34 ac fd cf 67
Feb 4 09:00:29 vpn pluto[15879]: | 32 ba 64 98 61 97 59 92 01 07 1c 21 a6 14 c4 b3
Feb 4 09:00:29 vpn pluto[15879]: | 01 a1 d0 28
Feb 4 09:00:29 vpn pluto[15879]: | inserting event EVENT_SA_REPLACE, timeout in 27931 seconds for #2
Feb 4 09:00:29 vpn pluto[15879]: "**********" #2: STATE_QUICK_I2: sent QI2, IPsec SA established {ESP=>0xd3b1a629 <0xda4ae1f5 xfrm=AES_0-HMAC_SHA1 NATD=none DPD=none}
Feb 4 09:00:29 vpn pluto[15879]: | modecfg pull: noquirk policy:push not-client
Feb 4 09:00:29 vpn pluto[15879]: | phase 1 is done, looking for phase 1 to unpend
Feb 4 09:00:29 vpn pluto[15879]: | next event EVENT_PENDING_PHASE2 in 103 seconds
Feb 4 09:00:57 vpn pluto[15879]: |
Feb 4 09:00:57 vpn pluto[15879]: | *received kernel message
Feb 4 09:00:57 vpn pluto[15879]: | netlink_get: XFRM_MSG_ACQUIRE message
Feb 4 09:00:57 vpn pluto[15879]: | add bare shunt 0x883a7d8 192.168.0.1/32:0 -0-> 192.168.1.1/32:0 => %hold 0 %acquire-netlink
Feb 4 09:00:57 vpn pluto[15879]: | initiate on demand from 192.168.0.1:0 to 192.168.1.1:0 proto=0 state: fos_start because: acquire
Feb 4 09:00:57 vpn pluto[15879]: | find_connection: looking for policy for connection: 192.168.0.1:0/0 -> 192.168.1.1:0/0
Feb 4 09:00:57 vpn pluto[15879]: | find_connection: conn "**********" has compatible peers: 192.168.0.0/24 -> 192.168.1.0/24 [pri: 12632077]
Feb 4 09:00:57 vpn pluto[15879]: | find_connection: comparing best "**********" [pri:12632077]{0x8838690} (child none) to "**********" [pri:12632077]{0x8838690} (child none)
Feb 4 09:00:57 vpn pluto[15879]: | find_connection: concluding with "**********" [pri:12632077]{0x8838690} kind=CK_PERMANENT
Feb 4 09:00:57 vpn pluto[15879]: | assign hold, routing was erouted, needs to be erouted
Feb 4 09:00:57 vpn pluto[15879]: | delete narrow %hold eroute 192.168.0.1/32:0 --0-> 192.168.1.1/32:0 => %hold (raw_eroute)
Feb 4 09:00:57 vpn pluto[15879]: | delete bare shunt 0x883a7d8 192.168.0.1/32:0 -0-> 192.168.1.1/32:0 => %hold 0 %acquire-netlink
Feb 4 09:00:57 vpn pluto[15879]: | duplicating state object #1
Feb 4 09:00:57 vpn pluto[15879]: | creating state object #3 at 0x883ab70
Feb 4 09:00:57 vpn pluto[15879]: | processing connection **********
Feb 4 09:00:57 vpn pluto[15879]: | ICOOKIE: 51 ec 62 5a c7 55 66 cf
Feb 4 09:00:57 vpn pluto[15879]: | RCOOKIE: 92 51 a3 c6 21 37 23 a1
Feb 4 09:00:57 vpn pluto[15879]: | peer: 4f cf 86 fe
Feb 4 09:00:57 vpn pluto[15879]: | state hash entry 30
Feb 4 09:00:57 vpn pluto[15879]: | inserting event EVENT_SO_DISCARD, timeout in 0 seconds for #3
Feb 4 09:00:57 vpn pluto[15879]: "**********" #3: initiating Quick Mode PSK+ENCRYPT+TUNNEL+PFS+UP+AGGRESSIVE {using isakmp#1}
Feb 4 09:00:57 vpn pluto[15879]: | 0: w->pcw_dead: 0 w->pcw_work: 0 cnt: 1
Feb 4 09:00:57 vpn pluto[15879]: | asking helper 0 to do build_kenonce op on seq: 3
Feb 4 09:00:57 vpn pluto[15887]: ! helper 0 doing build_kenonce op id: 3
Feb 4 09:00:57 vpn pluto[15879]: | inserting event EVENT_CRYPTO_FAILED, timeout in 300 seconds for #3
Feb 4 09:00:57 vpn pluto[15879]: | next event EVENT_PENDING_PHASE2 in 75 seconds
Feb 4 09:00:57 vpn pluto[15887]: ! Local DH secret:
Feb 4 09:00:57 vpn pluto[15887]: ! 0f fe 7f 45 e7 3f 26 9f 8a 97 8a 9d 27 b8 26 39
Feb 4 09:00:57 vpn pluto[15887]: ! a6 51 62 37 b6 4f 71 d9 ae a5 73 27 dc c7 d8 1b
Feb 4 09:00:57 vpn pluto[15887]: ! Public DH value sent:
Feb 4 09:00:57 vpn pluto[15887]: ! 40 80 c9 ad 22 51 b4 19 25 e9 ab 7c 9f 87 4d f5
Feb 4 09:00:57 vpn pluto[15887]: ! bf 68 18 06 af b9 7f c4 ac 9e 2d 98 84 6c 28 d6
Feb 4 09:00:57 vpn pluto[15887]: ! 2a ff 17 5a 8f 48 d3 c1 80 04 41 44 df 61 ed 93
Feb 4 09:00:57 vpn pluto[15887]: ! 47 cb 98 d6 90 37 38 37 cf c6 89 ec 65 01 c2 2b
Feb 4 09:00:57 vpn pluto[15887]: ! 3f e7 6d 59 3e d9 58 36 30 9f 06 d6 5d ea 4d b9
Feb 4 09:00:57 vpn pluto[15887]: ! aa 53 64 fc e6 93 1a b4 c8 e0 ab bd a7 34 8c a3
Feb 4 09:00:57 vpn pluto[15887]: ! e4 c9 17 a6 c1 7a d9 ff 78 f0 8c ea d0 66 3b d1
Feb 4 09:00:57 vpn pluto[15887]: ! 63 24 ca 87 ff 98 4c d5 ca 43 2e 36 23 02 c0 b2
Feb 4 09:00:57 vpn pluto[15887]: ! Generated nonce:
Feb 4 09:00:57 vpn pluto[15887]: ! 59 08 b3 16 94 aa 99 19 e7 24 7e 06 00 f1 8b 29
Feb 4 09:00:57 vpn pluto[15879]: | helper 0 has work (cnt now 0)
Feb 4 09:00:57 vpn pluto[15879]: | helper 0 replies to sequence 3
Feb 4 09:00:57 vpn pluto[15879]: | calling callback function 0x806d7e0
Feb 4 09:00:57 vpn pluto[15879]: | quick outI1: calculated ke+nonce, sending I1
Feb 4 09:00:57 vpn pluto[15879]: | processing connection **********
Feb 4 09:00:57 vpn pluto[15879]: | **emit ISAKMP Message:
Feb 4 09:00:57 vpn pluto[15879]: | initiator cookie:
Feb 4 09:00:57 vpn pluto[15879]: | 51 ec 62 5a c7 55 66 cf
Feb 4 09:00:57 vpn pluto[15879]: | responder cookie:
Feb 4 09:00:57 vpn pluto[15879]: | 92 51 a3 c6 21 37 23 a1
Feb 4 09:00:57 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_HASH
Feb 4 09:00:57 vpn pluto[15879]: | ISAKMP version: ISAKMP Version 1.0
Feb 4 09:00:57 vpn pluto[15879]: | exchange type: ISAKMP_XCHG_QUICK
Feb 4 09:00:57 vpn pluto[15879]: | flags: ISAKMP_FLAG_ENCRYPTION
Feb 4 09:00:57 vpn pluto[15879]: | message ID: 95 28 95 16
Feb 4 09:00:57 vpn pluto[15879]: | ***emit ISAKMP Hash Payload:
Feb 4 09:00:57 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_SA
Feb 4 09:00:57 vpn pluto[15879]: | emitting 20 zero bytes of HASH into ISAKMP Hash Payload
Feb 4 09:00:57 vpn pluto[15879]: | emitting length of ISAKMP Hash Payload: 24
Feb 4 09:00:57 vpn pluto[15879]: | empty esp_info, returning empty
Feb 4 09:00:57 vpn pluto[15879]: | ***emit ISAKMP Security Association Payload:
Feb 4 09:00:57 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_NONCE
Feb 4 09:00:57 vpn pluto[15879]: | DOI: ISAKMP_DOI_IPSEC
Feb 4 09:00:57 vpn pluto[15879]: | ****emit IPsec DOI SIT:
Feb 4 09:00:57 vpn pluto[15879]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
Feb 4 09:00:57 vpn pluto[15879]: | out_sa pcn: 0 has 1 valid proposals
Feb 4 09:00:57 vpn pluto[15879]: | out_sa pcn: 0 pn: 0<1 valid_count: 1
Feb 4 09:00:57 vpn pluto[15879]: | ****emit ISAKMP Proposal Payload:
Feb 4 09:00:57 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_NONE
Feb 4 09:00:57 vpn pluto[15879]: | proposal number: 0
Feb 4 09:00:57 vpn pluto[15879]: | protocol ID: PROTO_IPSEC_ESP
Feb 4 09:00:57 vpn pluto[15879]: | SPI size: 4
Feb 4 09:00:57 vpn pluto[15879]: | number of transforms: 4
Feb 4 09:00:57 vpn pluto[15879]: | netlink_get_spi: allocated 0x18af5fd5 for esp.0 at 84.154.56.62
Feb 4 09:00:57 vpn pluto[15879]: | emitting 4 raw bytes of SPI into ISAKMP Proposal Payload
Feb 4 09:00:57 vpn pluto[15879]: | SPI 18 af 5f d5
Feb 4 09:00:57 vpn pluto[15879]: | *****emit ISAKMP Transform Payload (ESP):
Feb 4 09:00:57 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_T
Feb 4 09:00:57 vpn pluto[15879]: | transform number: 0
Feb 4 09:00:57 vpn pluto[15879]: | transform ID: ESP_AES
Feb 4 09:00:57 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:57 vpn pluto[15879]: | af+type: GROUP_DESCRIPTION
Feb 4 09:00:57 vpn pluto[15879]: | length/value: 2
Feb 4 09:00:57 vpn pluto[15879]: | [2 is OAKLEY_GROUP_MODP1024]
Feb 4 09:00:57 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:57 vpn pluto[15879]: | af+type: ENCAPSULATION_MODE
Feb 4 09:00:57 vpn pluto[15879]: | length/value: 1
Feb 4 09:00:57 vpn pluto[15879]: | [1 is ENCAPSULATION_MODE_TUNNEL]
Feb 4 09:00:57 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:57 vpn pluto[15879]: | af+type: SA_LIFE_TYPE
Feb 4 09:00:57 vpn pluto[15879]: | length/value: 1
Feb 4 09:00:57 vpn pluto[15879]: | [1 is SA_LIFE_TYPE_SECONDS]
Feb 4 09:00:57 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:57 vpn pluto[15879]: | af+type: SA_LIFE_DURATION
Feb 4 09:00:57 vpn pluto[15879]: | length/value: 28800
Feb 4 09:00:57 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:57 vpn pluto[15879]: | af+type: AUTH_ALGORITHM
Feb 4 09:00:57 vpn pluto[15879]: | length/value: 2
Feb 4 09:00:57 vpn pluto[15879]: | [2 is AUTH_ALGORITHM_HMAC_SHA1]
Feb 4 09:00:57 vpn pluto[15879]: | emitting length of ISAKMP Transform Payload (ESP): 28
Feb 4 09:00:57 vpn pluto[15879]: | *****emit ISAKMP Transform Payload (ESP):
Feb 4 09:00:57 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_T
Feb 4 09:00:57 vpn pluto[15879]: | transform number: 1
Feb 4 09:00:57 vpn pluto[15879]: | transform ID: ESP_AES
Feb 4 09:00:57 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:57 vpn pluto[15879]: | af+type: GROUP_DESCRIPTION
Feb 4 09:00:57 vpn pluto[15879]: | length/value: 2
Feb 4 09:00:57 vpn pluto[15879]: | [2 is OAKLEY_GROUP_MODP1024]
Feb 4 09:00:57 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:57 vpn pluto[15879]: | af+type: ENCAPSULATION_MODE
Feb 4 09:00:57 vpn pluto[15879]: | length/value: 1
Feb 4 09:00:57 vpn pluto[15879]: | [1 is ENCAPSULATION_MODE_TUNNEL]
Feb 4 09:00:57 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:57 vpn pluto[15879]: | af+type: SA_LIFE_TYPE
Feb 4 09:00:57 vpn pluto[15879]: | length/value: 1
Feb 4 09:00:57 vpn pluto[15879]: | [1 is SA_LIFE_TYPE_SECONDS]
Feb 4 09:00:57 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:57 vpn pluto[15879]: | af+type: SA_LIFE_DURATION
Feb 4 09:00:57 vpn pluto[15879]: | length/value: 28800
Feb 4 09:00:57 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:57 vpn pluto[15879]: | af+type: AUTH_ALGORITHM
Feb 4 09:00:57 vpn pluto[15879]: | length/value: 1
Feb 4 09:00:57 vpn pluto[15879]: | [1 is AUTH_ALGORITHM_HMAC_MD5]
Feb 4 09:00:57 vpn pluto[15879]: | emitting length of ISAKMP Transform Payload (ESP): 28
Feb 4 09:00:57 vpn pluto[15879]: | *****emit ISAKMP Transform Payload (ESP):
Feb 4 09:00:57 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_T
Feb 4 09:00:57 vpn pluto[15879]: | transform number: 2
Feb 4 09:00:57 vpn pluto[15879]: | transform ID: ESP_3DES
Feb 4 09:00:57 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:57 vpn pluto[15879]: | af+type: GROUP_DESCRIPTION
Feb 4 09:00:57 vpn pluto[15879]: | length/value: 2
Feb 4 09:00:57 vpn pluto[15879]: | [2 is OAKLEY_GROUP_MODP1024]
Feb 4 09:00:57 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:57 vpn pluto[15879]: | af+type: ENCAPSULATION_MODE
Feb 4 09:00:57 vpn pluto[15879]: | length/value: 1
Feb 4 09:00:57 vpn pluto[15879]: | [1 is ENCAPSULATION_MODE_TUNNEL]
Feb 4 09:00:57 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:57 vpn pluto[15879]: | af+type: SA_LIFE_TYPE
Feb 4 09:00:57 vpn pluto[15879]: | length/value: 1
Feb 4 09:00:57 vpn pluto[15879]: | [1 is SA_LIFE_TYPE_SECONDS]
Feb 4 09:00:57 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:57 vpn pluto[15879]: | af+type: SA_LIFE_DURATION
Feb 4 09:00:57 vpn pluto[15879]: | length/value: 28800
Feb 4 09:00:57 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:57 vpn pluto[15879]: | af+type: AUTH_ALGORITHM
Feb 4 09:00:57 vpn pluto[15879]: | length/value: 2
Feb 4 09:00:57 vpn pluto[15879]: | [2 is AUTH_ALGORITHM_HMAC_SHA1]
Feb 4 09:00:57 vpn pluto[15879]: | emitting length of ISAKMP Transform Payload (ESP): 28
Feb 4 09:00:57 vpn pluto[15879]: | *****emit ISAKMP Transform Payload (ESP):
Feb 4 09:00:57 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_NONE
Feb 4 09:00:57 vpn pluto[15879]: | transform number: 3
Feb 4 09:00:57 vpn pluto[15879]: | transform ID: ESP_3DES
Feb 4 09:00:57 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:57 vpn pluto[15879]: | af+type: GROUP_DESCRIPTION
Feb 4 09:00:57 vpn pluto[15879]: | length/value: 2
Feb 4 09:00:57 vpn pluto[15879]: | [2 is OAKLEY_GROUP_MODP1024]
Feb 4 09:00:57 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:57 vpn pluto[15879]: | af+type: ENCAPSULATION_MODE
Feb 4 09:00:57 vpn pluto[15879]: | length/value: 1
Feb 4 09:00:57 vpn pluto[15879]: | [1 is ENCAPSULATION_MODE_TUNNEL]
Feb 4 09:00:57 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:57 vpn pluto[15879]: | af+type: SA_LIFE_TYPE
Feb 4 09:00:57 vpn pluto[15879]: | length/value: 1
Feb 4 09:00:57 vpn pluto[15879]: | [1 is SA_LIFE_TYPE_SECONDS]
Feb 4 09:00:57 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:57 vpn pluto[15879]: | af+type: SA_LIFE_DURATION
Feb 4 09:00:57 vpn pluto[15879]: | length/value: 28800
Feb 4 09:00:57 vpn pluto[15879]: | ******emit ISAKMP IPsec DOI attribute:
Feb 4 09:00:57 vpn pluto[15879]: | af+type: AUTH_ALGORITHM
Feb 4 09:00:57 vpn pluto[15879]: | length/value: 1
Feb 4 09:00:57 vpn pluto[15879]: | [1 is AUTH_ALGORITHM_HMAC_MD5]
Feb 4 09:00:57 vpn pluto[15879]: | emitting length of ISAKMP Transform Payload (ESP): 28
Feb 4 09:00:57 vpn pluto[15879]: | emitting length of ISAKMP Proposal Payload: 124
Feb 4 09:00:57 vpn pluto[15879]: | emitting length of ISAKMP Security Association Payload: 136
Feb 4 09:00:57 vpn pluto[15879]: | ***emit ISAKMP Nonce Payload:
Feb 4 09:00:57 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_KE
Feb 4 09:00:57 vpn pluto[15879]: | emitting 16 raw bytes of Ni into ISAKMP Nonce Payload
Feb 4 09:00:57 vpn pluto[15879]: | Ni 59 08 b3 16 94 aa 99 19 e7 24 7e 06 00 f1 8b 29
Feb 4 09:00:57 vpn pluto[15879]: | emitting length of ISAKMP Nonce Payload: 20
Feb 4 09:00:57 vpn pluto[15879]: | ***emit ISAKMP Key Exchange Payload:
Feb 4 09:00:57 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_ID
Feb 4 09:00:57 vpn pluto[15879]: | emitting 128 raw bytes of keyex value into ISAKMP Key Exchange Payload
Feb 4 09:00:57 vpn pluto[15879]: | keyex value 40 80 c9 ad 22 51 b4 19 25 e9 ab 7c 9f 87 4d f5
Feb 4 09:00:57 vpn pluto[15879]: | bf 68 18 06 af b9 7f c4 ac 9e 2d 98 84 6c 28 d6
Feb 4 09:00:57 vpn pluto[15879]: | 2a ff 17 5a 8f 48 d3 c1 80 04 41 44 df 61 ed 93
Feb 4 09:00:57 vpn pluto[15879]: | 47 cb 98 d6 90 37 38 37 cf c6 89 ec 65 01 c2 2b
Feb 4 09:00:57 vpn pluto[15879]: | 3f e7 6d 59 3e d9 58 36 30 9f 06 d6 5d ea 4d b9
Feb 4 09:00:57 vpn pluto[15879]: | aa 53 64 fc e6 93 1a b4 c8 e0 ab bd a7 34 8c a3
Feb 4 09:00:57 vpn pluto[15879]: | e4 c9 17 a6 c1 7a d9 ff 78 f0 8c ea d0 66 3b d1
Feb 4 09:00:57 vpn pluto[15879]: | 63 24 ca 87 ff 98 4c d5 ca 43 2e 36 23 02 c0 b2
Feb 4 09:00:57 vpn pluto[15879]: | emitting length of ISAKMP Key Exchange Payload: 132
Feb 4 09:00:57 vpn pluto[15879]: | ***emit ISAKMP Identification Payload (IPsec DOI):
Feb 4 09:00:57 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_ID
Feb 4 09:00:57 vpn pluto[15879]: | ID type: ID_IPV4_ADDR_SUBNET
Feb 4 09:00:57 vpn pluto[15879]: | Protocol ID: 0
Feb 4 09:00:57 vpn pluto[15879]: | port: 0
Feb 4 09:00:57 vpn pluto[15879]: | emitting 4 raw bytes of client network into ISAKMP Identification Payload (IPsec DOI)
Feb 4 09:00:57 vpn pluto[15879]: | client network c0 a8 00 00
Feb 4 09:00:57 vpn pluto[15879]: | emitting 4 raw bytes of client mask into ISAKMP Identification Payload (IPsec DOI)
Feb 4 09:00:57 vpn pluto[15879]: | client mask ff ff ff 00
Feb 4 09:00:57 vpn pluto[15879]: | emitting length of ISAKMP Identification Payload (IPsec DOI): 16
Feb 4 09:00:58 vpn pluto[15879]: | ***emit ISAKMP Identification Payload (IPsec DOI):
Feb 4 09:00:58 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_NONE
Feb 4 09:00:58 vpn pluto[15879]: | ID type: ID_IPV4_ADDR_SUBNET
Feb 4 09:00:58 vpn pluto[15879]: | Protocol ID: 0
Feb 4 09:00:58 vpn pluto[15879]: | port: 0
Feb 4 09:00:58 vpn pluto[15879]: | emitting 4 raw bytes of client network into ISAKMP Identification Payload (IPsec DOI)
Feb 4 09:00:58 vpn pluto[15879]: | client network c0 a8 01 00
Feb 4 09:00:58 vpn pluto[15879]: | emitting 4 raw bytes of client mask into ISAKMP Identification Payload (IPsec DOI)
Feb 4 09:00:58 vpn pluto[15879]: | client mask ff ff ff 00
Feb 4 09:00:58 vpn pluto[15879]: | emitting length of ISAKMP Identification Payload (IPsec DOI): 16
Feb 4 09:00:58 vpn pluto[15879]: | HASH(1) computed:
Feb 4 09:00:58 vpn pluto[15879]: | 4e 0d bc 09 89 a1 3b 53 7f a9 f2 21 90 f4 d8 ee
Feb 4 09:00:58 vpn pluto[15879]: | f7 f2 0d 80
Feb 4 09:00:58 vpn pluto[15879]: | last Phase 1 IV: 9b 97 c2 66 86 12 6f 4a
Feb 4 09:00:58 vpn pluto[15879]: | current Phase 1 IV: 9b 97 c2 66 86 12 6f 4a
Feb 4 09:00:58 vpn pluto[15879]: | computed Phase 2 IV:
Feb 4 09:00:58 vpn pluto[15879]: | b2 d9 f2 02 45 26 06 54 16 38 be e5 59 e2 85 66
Feb 4 09:00:58 vpn pluto[15879]: | e3 a0 c0 ae
Feb 4 09:00:58 vpn pluto[15879]: | encrypting:
Feb 4 09:00:58 vpn pluto[15879]: | 01 00 00 18 4e 0d bc 09 89 a1 3b 53 7f a9 f2 21
Feb 4 09:00:58 vpn pluto[15879]: | 90 f4 d8 ee f7 f2 0d 80 0a 00 00 88 00 00 00 01
Feb 4 09:00:58 vpn pluto[15879]: | 00 00 00 01 00 00 00 7c 00 03 04 04 18 af 5f d5
Feb 4 09:00:58 vpn pluto[15879]: | 03 00 00 1c 00 0c 00 00 80 03 00 02 80 04 00 01
Feb 4 09:00:58 vpn pluto[15879]: | 80 01 00 01 80 02 70 80 80 05 00 02 03 00 00 1c
Feb 4 09:00:58 vpn pluto[15879]: | 01 0c 00 00 80 03 00 02 80 04 00 01 80 01 00 01
Feb 4 09:00:58 vpn pluto[15879]: | 80 02 70 80 80 05 00 01 03 00 00 1c 02 03 00 00
Feb 4 09:00:58 vpn pluto[15879]: | 80 03 00 02 80 04 00 01 80 01 00 01 80 02 70 80
Feb 4 09:00:58 vpn pluto[15879]: | 80 05 00 02 00 00 00 1c 03 03 00 00 80 03 00 02
Feb 4 09:00:58 vpn pluto[15879]: | 80 04 00 01 80 01 00 01 80 02 70 80 80 05 00 01
Feb 4 09:00:58 vpn pluto[15879]: | 04 00 00 14 59 08 b3 16 94 aa 99 19 e7 24 7e 06
Feb 4 09:00:58 vpn pluto[15879]: | 00 f1 8b 29 05 00 00 84 40 80 c9 ad 22 51 b4 19
Feb 4 09:00:58 vpn pluto[15879]: | 25 e9 ab 7c 9f 87 4d f5 bf 68 18 06 af b9 7f c4
Feb 4 09:00:58 vpn pluto[15879]: | ac 9e 2d 98 84 6c 28 d6 2a ff 17 5a 8f 48 d3 c1
Feb 4 09:00:58 vpn pluto[15879]: | 80 04 41 44 df 61 ed 93 47 cb 98 d6 90 37 38 37
Feb 4 09:00:58 vpn pluto[15879]: | cf c6 89 ec 65 01 c2 2b 3f e7 6d 59 3e d9 58 36
Feb 4 09:00:58 vpn pluto[15879]: | 30 9f 06 d6 5d ea 4d b9 aa 53 64 fc e6 93 1a b4
Feb 4 09:00:58 vpn pluto[15879]: | c8 e0 ab bd a7 34 8c a3 e4 c9 17 a6 c1 7a d9 ff
Feb 4 09:00:58 vpn pluto[15879]: | 78 f0 8c ea d0 66 3b d1 63 24 ca 87 ff 98 4c d5
Feb 4 09:00:58 vpn pluto[15879]: | ca 43 2e 36 23 02 c0 b2 05 00 00 10 04 00 00 00
Feb 4 09:00:58 vpn pluto[15879]: | c0 a8 00 00 ff ff ff 00 00 00 00 10 04 00 00 00
Feb 4 09:00:58 vpn pluto[15879]: | c0 a8 01 00 ff ff ff 00
Feb 4 09:00:58 vpn pluto[15879]: | IV:
Feb 4 09:00:58 vpn pluto[15879]: | b2 d9 f2 02 45 26 06 54 16 38 be e5 59 e2 85 66
Feb 4 09:00:58 vpn pluto[15879]: | e3 a0 c0 ae
Feb 4 09:00:58 vpn pluto[15879]: | encrypting using OAKLEY_3DES_CBC
Feb 4 09:00:58 vpn pluto[15879]: | next IV: d3 6a 21 ef 55 eb c9 f2
Feb 4 09:00:58 vpn pluto[15879]: | emitting length of ISAKMP Message: 372
Feb 4 09:00:58 vpn pluto[15879]: | sending 372 bytes for quick_outI1 through ppp0:500 to 79.207.134.254:500:
Feb 4 09:00:58 vpn pluto[15879]: | 51 ec 62 5a c7 55 66 cf 92 51 a3 c6 21 37 23 a1
Feb 4 09:00:58 vpn pluto[15879]: | 08 10 20 01 95 28 95 16 00 00 01 74 3f 76 39 2e
Feb 4 09:00:58 vpn pluto[15879]: | e4 0f 79 29 79 a2 9e 7b 84 ab e9 69 21 de 9a 0a
Feb 4 09:00:58 vpn pluto[15879]: | d6 3c 19 08 91 d2 ec d5 fb 76 f8 90 45 ea 80 46
Feb 4 09:00:58 vpn pluto[15879]: | 9a 3a d0 1e d3 04 d8 27 a4 af b2 ea 79 62 78 3d
Feb 4 09:00:58 vpn pluto[15879]: | 9e 53 c5 c2 26 04 03 64 31 41 8a a0 60 a2 87 e1
Feb 4 09:00:58 vpn pluto[15879]: | 3c e5 39 0a 3d 75 b8 d4 36 aa c7 9e 75 26 2b 8e
Feb 4 09:00:58 vpn pluto[15879]: | 77 b1 43 b3 ea 50 6c eb 5d 64 70 08 cc a2 6c ce
Feb 4 09:00:58 vpn pluto[15879]: | 67 f1 29 f3 bb 66 0b 93 c9 f3 52 7c 58 77 6e f7
Feb 4 09:00:58 vpn pluto[15879]: | 0b b6 2d f5 c6 97 4a 55 fa a8 c4 50 9d 4f 3a f5
Feb 4 09:00:58 vpn pluto[15879]: | 81 79 d2 c9 9e d9 c1 76 7b a3 bc b8 05 a5 b5 17
Feb 4 09:00:58 vpn pluto[15879]: | b3 dd 96 00 09 13 4c 03 c0 4d 79 aa 87 2e 2e c1
Feb 4 09:00:58 vpn pluto[15879]: | cf 6d f4 4c 63 0b 29 aa ae 0c 80 4a 87 2f 76 cc
Feb 4 09:00:58 vpn pluto[15879]: | 90 ad e5 47 9b 1c bd 00 83 84 d7 96 af bc 45 31
Feb 4 09:00:58 vpn pluto[15879]: | 37 0c d8 73 e3 27 e8 6e c3 1f 3f b5 38 c5 bd 24
Feb 4 09:00:58 vpn pluto[15879]: | 39 38 28 38 df c6 37 b0 ee b0 b1 73 93 31 42 7b
Feb 4 09:00:58 vpn pluto[15879]: | cc 0b b0 fa 81 b1 b8 da 16 3f 0f f4 21 c4 c9 33
Feb 4 09:00:58 vpn pluto[15879]: | 4f 6a 60 12 ec 01 b4 a4 2f da 3c b1 31 bb 48 3d
Feb 4 09:00:58 vpn pluto[15879]: | d4 f7 c5 b2 cf fa 8c f4 d2 21 89 09 e0 0a 10 bf
Feb 4 09:00:58 vpn pluto[15879]: | 64 be 0f 1f 20 b2 c2 dc 20 e0 77 06 22 ea d9 56
Feb 4 09:00:58 vpn pluto[15879]: | 2d b2 1f a9 63 b6 af 0b a6 20 a5 95 b2 41 30 bd
Feb 4 09:00:58 vpn pluto[15879]: | f2 fc ee 26 94 07 ae b4 43 c9 ea a4 fd ef 6c 6a
Feb 4 09:00:58 vpn pluto[15879]: | 08 80 1b 37 90 36 de 72 7d 68 c2 91 d3 6a 21 ef
Feb 4 09:00:58 vpn pluto[15879]: | 55 eb c9 f2
Feb 4 09:00:58 vpn pluto[15879]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #3
Feb 4 09:00:58 vpn pluto[15879]: | next event EVENT_RETRANSMIT in 10 seconds for #3
Feb 4 09:00:58 vpn pluto[15879]: |
Feb 4 09:00:58 vpn pluto[15879]: | *received 316 bytes from 79.207.134.254:500 on ppp0 (port=500)
Feb 4 09:00:58 vpn pluto[15879]: | 51 ec 62 5a c7 55 66 cf 92 51 a3 c6 21 37 23 a1
Feb 4 09:00:58 vpn pluto[15879]: | 08 10 20 01 95 28 95 16 00 00 01 3c 70 50 99 df
Feb 4 09:00:58 vpn pluto[15879]: | a2 36 f0 b3 31 44 75 af 2e 38 36 19 ab c4 f4 cf
Feb 4 09:00:58 vpn pluto[15879]: | e5 30 7e 69 9e da d8 d0 2c 3f 7f 5c 69 ff 49 2a
Feb 4 09:00:58 vpn pluto[15879]: | 15 ad 95 6f 8d 5f 6d 77 20 44 6b 68 14 c4 1f 5e
Feb 4 09:00:58 vpn pluto[15879]: | 6b f1 bb bf 4a 3d 94 0b 20 82 98 cf dd 26 03 be
Feb 4 09:00:58 vpn pluto[15879]: | f4 dd 81 e8 ec 55 04 bf 4e 61 5b a2 bd 10 03 be
Feb 4 09:00:58 vpn pluto[15879]: | 89 1a 5f ba 2d 03 f5 3a ae 80 04 83 2a 6f cd f7
Feb 4 09:00:58 vpn pluto[15879]: | cc 51 1f 65 81 82 99 b7 71 58 83 d5 fb 0d 13 83
Feb 4 09:00:58 vpn pluto[15879]: | ed b8 0a 26 8f 30 7d f5 07 79 84 c7 94 cf bc 6a
Feb 4 09:00:58 vpn pluto[15879]: | a5 97 38 36 07 60 7e e0 d7 4a d5 0d 25 d9 26 14
Feb 4 09:00:58 vpn pluto[15879]: | 87 55 bb 70 8c 5f c7 86 ac bf 8c 08 3f 76 a8 a9
Feb 4 09:00:58 vpn pluto[15879]: | ac 90 c9 ac 70 dc bb 09 b9 6b f6 cc 3f 1f 92 d0
Feb 4 09:00:58 vpn pluto[15879]: | ae 21 1e 39 21 d3 d8 cd 32 19 e9 19 e7 52 d1 ff
Feb 4 09:00:58 vpn pluto[15879]: | 8c 09 55 9d 95 9f 4c 47 1d a1 dd 5b 93 61 94 38
Feb 4 09:00:58 vpn pluto[15879]: | 8c b8 b3 08 0c 04 c0 1e 0d 56 2a 97 0b dc 4d b3
Feb 4 09:00:58 vpn pluto[15879]: | e4 dc a4 49 33 7b 76 50 0b d4 74 f3 ae 8a bd df
Feb 4 09:00:58 vpn pluto[15879]: | ff 28 16 51 5b 0f d3 17 2d b9 d0 e5 38 eb fa 96
Feb 4 09:00:58 vpn pluto[15879]: | 65 b8 51 8b 5c 0d 36 31 2b 95 68 73 d4 78 46 d0
Feb 4 09:00:58 vpn pluto[15879]: | 31 85 06 07 41 79 4a 37 be 30 e6 7a
Feb 4 09:00:58 vpn pluto[15879]: | **parse ISAKMP Message:
Feb 4 09:00:58 vpn pluto[15879]: | initiator cookie:
Feb 4 09:00:58 vpn pluto[15879]: | 51 ec 62 5a c7 55 66 cf
Feb 4 09:00:58 vpn pluto[15879]: | responder cookie:
Feb 4 09:00:58 vpn pluto[15879]: | 92 51 a3 c6 21 37 23 a1
Feb 4 09:00:58 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_HASH
Feb 4 09:00:58 vpn pluto[15879]: | ISAKMP version: ISAKMP Version 1.0
Feb 4 09:00:58 vpn pluto[15879]: | exchange type: ISAKMP_XCHG_QUICK
Feb 4 09:00:58 vpn pluto[15879]: | flags: ISAKMP_FLAG_ENCRYPTION
Feb 4 09:00:58 vpn pluto[15879]: | message ID: 95 28 95 16
Feb 4 09:00:58 vpn pluto[15879]: | length: 316
Feb 4 09:00:58 vpn pluto[15879]: | processing packet with exchange type=ISAKMP_XCHG_QUICK (32)
Feb 4 09:00:58 vpn pluto[15879]: | ICOOKIE: 51 ec 62 5a c7 55 66 cf
Feb 4 09:00:58 vpn pluto[15879]: | RCOOKIE: 92 51 a3 c6 21 37 23 a1
Feb 4 09:00:58 vpn pluto[15879]: | peer: 4f cf 86 fe
Feb 4 09:00:58 vpn pluto[15879]: | state hash entry 30
Feb 4 09:00:58 vpn pluto[15879]: | peer and cookies match on #3, provided msgid 95289516 vs 95289516
Feb 4 09:00:58 vpn pluto[15879]: | state object #3 found, in STATE_QUICK_I1
Feb 4 09:00:58 vpn pluto[15879]: | processing connection **********
Feb 4 09:00:58 vpn pluto[15879]: | received encrypted packet from 79.207.134.254:500
Feb 4 09:00:58 vpn pluto[15879]: | decrypting 288 bytes using algorithm OAKLEY_3DES_CBC
Feb 4 09:00:58 vpn pluto[15879]: | decrypted:
Feb 4 09:00:58 vpn pluto[15879]: | 01 00 00 18 25 ed db 9c 4f cb e3 6b 87 99 01 31
Feb 4 09:00:58 vpn pluto[15879]: | 5a 2e b6 4e 86 16 8d e4 0a 00 00 34 00 00 00 01
Feb 4 09:00:58 vpn pluto[15879]: | 00 00 00 01 00 00 00 28 01 03 04 01 e2 3b 5f d7
Feb 4 09:00:58 vpn pluto[15879]: | 00 00 00 1c 00 0c 00 00 80 05 00 02 80 03 00 02
Feb 4 09:00:58 vpn pluto[15879]: | 80 01 00 01 80 02 70 80 80 04 00 01 04 00 00 14
Feb 4 09:00:58 vpn pluto[15879]: | 20 dc fc 58 e6 36 67 24 cb c8 38 0e 41 cb 16 67
Feb 4 09:00:58 vpn pluto[15879]: | 05 00 00 84 7e cf 29 ce 01 c3 40 d8 58 c4 b8 37
Feb 4 09:00:58 vpn pluto[15879]: | ff c2 c5 79 32 1d b6 6f 16 86 98 96 b6 00 fd e7
Feb 4 09:00:58 vpn pluto[15879]: | 2a aa b4 4e f8 ea de 2f cf e6 d3 54 f7 02 53 b0
Feb 4 09:00:58 vpn pluto[15879]: | b2 57 1a c4 a4 01 5d 62 dc 82 fa d5 40 f2 10 77
Feb 4 09:00:58 vpn pluto[15879]: | 34 98 97 73 50 ef 45 09 37 79 c1 d3 36 6b f0 16
Feb 4 09:00:58 vpn pluto[15879]: | 92 17 98 54 58 70 7f 59 b2 09 d9 16 c6 a6 7c dc
Feb 4 09:00:58 vpn pluto[15879]: | 45 a1 6c 3b be a9 b6 7d 7e 0c 3d 14 32 f4 22 27
Feb 4 09:00:58 vpn pluto[15879]: | eb 85 a3 fc e7 3a 26 4b 4f 94 51 46 b7 32 11 e7
Feb 4 09:00:58 vpn pluto[15879]: | cf 86 7d fa 05 00 00 10 04 00 00 00 c0 a8 00 00
Feb 4 09:00:58 vpn pluto[15879]: | ff ff ff 00 0b 00 00 10 04 00 00 00 c0 a8 01 00
Feb 4 09:00:58 vpn pluto[15879]: | ff ff ff 00 00 00 00 18 00 00 00 01 03 04 60 00
Feb 4 09:00:58 vpn pluto[15879]: | 18 af 5f d5 80 01 00 01 80 02 0e 10 00 00 00 00
Feb 4 09:00:58 vpn pluto[15879]: | next IV: 41 79 4a 37 be 30 e6 7a
Feb 4 09:00:58 vpn pluto[15879]: | np=8 and sd=0x80eae50
Feb 4 09:00:58 vpn pluto[15879]: | ***parse ISAKMP Hash Payload:
Feb 4 09:00:58 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_SA
Feb 4 09:00:58 vpn pluto[15879]: | length: 24
Feb 4 09:00:58 vpn pluto[15879]: | np=1 and sd=0x80eadc0
Feb 4 09:00:58 vpn pluto[15879]: | ***parse ISAKMP Security Association Payload:
Feb 4 09:00:58 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_NONCE
Feb 4 09:00:58 vpn pluto[15879]: | length: 52
Feb 4 09:00:58 vpn pluto[15879]: | DOI: ISAKMP_DOI_IPSEC
Feb 4 09:00:58 vpn pluto[15879]: | np=10 and sd=0x80eae68
Feb 4 09:00:58 vpn pluto[15879]: | ***parse ISAKMP Nonce Payload:
Feb 4 09:00:58 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_KE
Feb 4 09:00:58 vpn pluto[15879]: | length: 20
Feb 4 09:00:58 vpn pluto[15879]: | np=4 and sd=0x80eae14
Feb 4 09:00:58 vpn pluto[15879]: | ***parse ISAKMP Key Exchange Payload:
Feb 4 09:00:58 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_ID
Feb 4 09:00:58 vpn pluto[15879]: | length: 132
Feb 4 09:00:58 vpn pluto[15879]: | np=5 and sd=(nil)
Feb 4 09:00:58 vpn pluto[15879]: | ***parse ISAKMP Identification Payload (IPsec DOI):
Feb 4 09:00:58 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_ID
Feb 4 09:00:58 vpn pluto[15879]: | length: 16
Feb 4 09:00:58 vpn pluto[15879]: | ID type: ID_IPV4_ADDR_SUBNET
Feb 4 09:00:58 vpn pluto[15879]: | Protocol ID: 0
Feb 4 09:00:58 vpn pluto[15879]: | port: 0
Feb 4 09:00:58 vpn pluto[15879]: | np=5 and sd=(nil)
Feb 4 09:00:58 vpn pluto[15879]: | ***parse ISAKMP Identification Payload (IPsec DOI):
Feb 4 09:00:58 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_N
Feb 4 09:00:58 vpn pluto[15879]: | length: 16
Feb 4 09:00:58 vpn pluto[15879]: | ID type: ID_IPV4_ADDR_SUBNET
Feb 4 09:00:58 vpn pluto[15879]: | Protocol ID: 0
Feb 4 09:00:58 vpn pluto[15879]: | port: 0
Feb 4 09:00:58 vpn pluto[15879]: | np=11 and sd=0x80eae74
Feb 4 09:00:58 vpn pluto[15879]: | ***parse ISAKMP Notification Payload:
Feb 4 09:00:58 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_NONE
Feb 4 09:00:58 vpn pluto[15879]: | length: 24
Feb 4 09:00:58 vpn pluto[15879]: | DOI: ISAKMP_DOI_IPSEC
Feb 4 09:00:58 vpn pluto[15879]: | protocol ID: 3
Feb 4 09:00:58 vpn pluto[15879]: | SPI size: 4
Feb 4 09:00:58 vpn pluto[15879]: | Notify Message Type: IPSEC_RESPONDER_LIFETIME
Feb 4 09:00:58 vpn pluto[15879]: | removing 4 bytes of padding
Feb 4 09:00:58 vpn pluto[15879]: "**********" #3: ignoring informational payload, type IPSEC_RESPONDER_LIFETIME
Feb 4 09:00:58 vpn pluto[15879]: | info: 18 af 5f d5 80 01 00 01 80 02 0e 10
Feb 4 09:00:58 vpn pluto[15879]: | **emit ISAKMP Message:
Feb 4 09:00:58 vpn pluto[15879]: | initiator cookie:
Feb 4 09:00:58 vpn pluto[15879]: | 51 ec 62 5a c7 55 66 cf
Feb 4 09:00:58 vpn pluto[15879]: | responder cookie:
Feb 4 09:00:58 vpn pluto[15879]: | 92 51 a3 c6 21 37 23 a1
Feb 4 09:00:58 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_HASH
Feb 4 09:00:58 vpn pluto[15879]: | ISAKMP version: ISAKMP Version 1.0
Feb 4 09:00:58 vpn pluto[15879]: | exchange type: ISAKMP_XCHG_QUICK
Feb 4 09:00:58 vpn pluto[15879]: | flags: ISAKMP_FLAG_ENCRYPTION
Feb 4 09:00:58 vpn pluto[15879]: | message ID: 95 28 95 16
Feb 4 09:00:58 vpn pluto[15879]: | HASH(2) computed:
Feb 4 09:00:58 vpn pluto[15879]: | 25 ed db 9c 4f cb e3 6b 87 99 01 31 5a 2e b6 4e
Feb 4 09:00:58 vpn pluto[15879]: | 86 16 8d e4
Feb 4 09:00:58 vpn pluto[15879]: | ****parse IPsec DOI SIT:
Feb 4 09:00:58 vpn pluto[15879]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
Feb 4 09:00:58 vpn pluto[15879]: | ****parse ISAKMP Proposal Payload:
Feb 4 09:00:58 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_NONE
Feb 4 09:00:58 vpn pluto[15879]: | length: 40
Feb 4 09:00:58 vpn pluto[15879]: | proposal number: 1
Feb 4 09:00:58 vpn pluto[15879]: | protocol ID: PROTO_IPSEC_ESP
Feb 4 09:00:58 vpn pluto[15879]: | SPI size: 4
Feb 4 09:00:58 vpn pluto[15879]: | number of transforms: 1
Feb 4 09:00:58 vpn pluto[15879]: | parsing 4 raw bytes of ISAKMP Proposal Payload into SPI
Feb 4 09:00:58 vpn pluto[15879]: | SPI e2 3b 5f d7
Feb 4 09:00:58 vpn pluto[15879]: | *****parse ISAKMP Transform Payload (ESP):
Feb 4 09:00:58 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_NONE
Feb 4 09:00:58 vpn pluto[15879]: | length: 28
Feb 4 09:00:58 vpn pluto[15879]: | transform number: 0
Feb 4 09:00:58 vpn pluto[15879]: | transform ID: ESP_AES
Feb 4 09:00:58 vpn pluto[15879]: | ******parse ISAKMP IPsec DOI attribute:
Feb 4 09:00:58 vpn pluto[15879]: | af+type: AUTH_ALGORITHM
Feb 4 09:00:58 vpn pluto[15879]: | length/value: 2
Feb 4 09:00:58 vpn pluto[15879]: | [2 is AUTH_ALGORITHM_HMAC_SHA1]
Feb 4 09:00:58 vpn pluto[15879]: | ******parse ISAKMP IPsec DOI attribute:
Feb 4 09:00:58 vpn pluto[15879]: | af+type: GROUP_DESCRIPTION
Feb 4 09:00:58 vpn pluto[15879]: | length/value: 2
Feb 4 09:00:58 vpn pluto[15879]: | [2 is OAKLEY_GROUP_MODP1024]
Feb 4 09:00:58 vpn pluto[15879]: | ******parse ISAKMP IPsec DOI attribute:
Feb 4 09:00:58 vpn pluto[15879]: | af+type: SA_LIFE_TYPE
Feb 4 09:00:58 vpn pluto[15879]: | length/value: 1
Feb 4 09:00:58 vpn pluto[15879]: | [1 is SA_LIFE_TYPE_SECONDS]
Feb 4 09:00:58 vpn pluto[15879]: | ******parse ISAKMP IPsec DOI attribute:
Feb 4 09:00:58 vpn pluto[15879]: | af+type: SA_LIFE_DURATION
Feb 4 09:00:58 vpn pluto[15879]: | length/value: 28800
Feb 4 09:00:58 vpn pluto[15879]: | ******parse ISAKMP IPsec DOI attribute:
Feb 4 09:00:58 vpn pluto[15879]: | af+type: ENCAPSULATION_MODE
Feb 4 09:00:58 vpn pluto[15879]: | length/value: 1
Feb 4 09:00:58 vpn pluto[15879]: | [1 is ENCAPSULATION_MODE_TUNNEL]
Feb 4 09:00:58 vpn pluto[15879]: | DH public value received:
Feb 4 09:00:58 vpn pluto[15879]: | 7e cf 29 ce 01 c3 40 d8 58 c4 b8 37 ff c2 c5 79
Feb 4 09:00:58 vpn pluto[15879]: | 32 1d b6 6f 16 86 98 96 b6 00 fd e7 2a aa b4 4e
Feb 4 09:00:58 vpn pluto[15879]: | f8 ea de 2f cf e6 d3 54 f7 02 53 b0 b2 57 1a c4
Feb 4 09:00:58 vpn pluto[15879]: | a4 01 5d 62 dc 82 fa d5 40 f2 10 77 34 98 97 73
Feb 4 09:00:58 vpn pluto[15879]: | 50 ef 45 09 37 79 c1 d3 36 6b f0 16 92 17 98 54
Feb 4 09:00:58 vpn pluto[15879]: | 58 70 7f 59 b2 09 d9 16 c6 a6 7c dc 45 a1 6c 3b
Feb 4 09:00:58 vpn pluto[15879]: | be a9 b6 7d 7e 0c 3d 14 32 f4 22 27 eb 85 a3 fc
Feb 4 09:00:58 vpn pluto[15879]: | e7 3a 26 4b 4f 94 51 46 b7 32 11 e7 cf 86 7d fa
Feb 4 09:00:58 vpn pluto[15879]: | started looking for secret for @************************->@********** of kind PPK_PSK
Feb 4 09:00:58 vpn pluto[15879]: | actually looking for secret for @************************->@********** of kind PPK_PSK
Feb 4 09:00:58 vpn pluto[15879]: | 1: compared PSK @********** to @************************ / @********** -> 2
Feb 4 09:00:58 vpn pluto[15879]: | 2: compared PSK @************************ to @************************ / @********** -> 6
Feb 4 09:00:58 vpn pluto[15879]: | best_match 0>6 best=0x8838018 (line=11)
Feb 4 09:00:58 vpn pluto[15879]: | concluding with best_match=6 best=0x8838018 (lineno=11)
Feb 4 09:00:58 vpn pluto[15879]: | calc_dh_shared(): time elapsed (OAKLEY_GROUP_MODP1024): 58026 usec
Feb 4 09:00:58 vpn pluto[15879]: | DH shared secret:
Feb 4 09:00:58 vpn pluto[15879]: | a7 a4 2f d9 5e 6b db 34 a2 c9 4a 31 86 c1 2d 1a
Feb 4 09:00:58 vpn pluto[15879]: | bb 7f f6 c8 7a 85 59 24 ef 77 95 8f de 3b bd 4e
Feb 4 09:00:58 vpn pluto[15879]: | 5a 8f b2 f1 cd 54 8e 0a 30 86 50 d2 ae 8c e8 b5
Feb 4 09:00:58 vpn pluto[15879]: | 06 ab e9 eb 13 b6 c4 91 84 b7 57 fa 96 07 2a c3
Feb 4 09:00:58 vpn pluto[15879]: | 2f 9a dd 5e b5 8c 02 7f 99 11 8c 0a ed 5c c9 2b
Feb 4 09:00:58 vpn pluto[15879]: | f0 ed cf a8 d8 21 67 72 da 5f 97 36 56 87 60 f4
Feb 4 09:00:58 vpn pluto[15879]: | ff ba df 33 77 8a a2 c9 70 03 52 b4 98 04 7a be
Feb 4 09:00:58 vpn pluto[15879]: | 41 72 5d 4a 6e 1a b9 33 aa 9f de d1 46 d4 12 02
Feb 4 09:00:58 vpn pluto[15879]: | our client is subnet 192.168.0.0/24
Feb 4 09:00:58 vpn pluto[15879]: | our client protocol/port is 0/0
Feb 4 09:00:58 vpn pluto[15879]: | peer client is subnet 192.168.1.0/24
Feb 4 09:00:58 vpn pluto[15879]: | peer client protocol/port is 0/0
Feb 4 09:00:58 vpn pluto[15879]: | ***emit ISAKMP Hash Payload:
Feb 4 09:00:58 vpn pluto[15879]: | next payload type: ISAKMP_NEXT_NONE
Feb 4 09:00:58 vpn pluto[15879]: | emitting 20 zero bytes of HASH into ISAKMP Hash Payload
Feb 4 09:00:58 vpn pluto[15879]: | emitting length of ISAKMP Hash Payload: 24
Feb 4 09:00:58 vpn pluto[15879]: | HASH(3) computed: 45 91 fc a2 b4 e3 ab 23 75 a9 c9 4b ba 8f 70 ce
Feb 4 09:00:58 vpn pluto[15879]: | 8e 6b e4 f1
Feb 4 09:00:58 vpn pluto[15879]: | compute_proto_keymat:needed_len (after ESP enc)=16
Feb 4 09:00:58 vpn pluto[15879]: | compute_proto_keymat:needed_len (after ESP auth)=36
Feb 4 09:00:58 vpn pluto[15879]: | KEYMAT computed:
Feb 4 09:00:58 vpn pluto[15879]: | 40 32 2c 23 dc 45 c1 15 61 e6 10 24 5d 12 50 0b
Feb 4 09:00:58 vpn pluto[15879]: | c9 51 40 8e c9 07 0f 8d 39 be 9f a9 e7 4c c7 3f
Feb 4 09:00:58 vpn pluto[15879]: | 66 79 e9 86
Feb 4 09:00:58 vpn pluto[15879]: | Peer KEYMAT computed:
Feb 4 09:00:58 vpn pluto[15879]: | d6 a2 28 1f 4e d7 e0 47 9d a7 fe 7b a8 c2 2b 90
Feb 4 09:00:58 vpn pluto[15879]: | ad 15 b2 81 82 0d 32 ff 05 ee f1 9a 73 22 f8 b5
Feb 4 09:00:58 vpn pluto[15879]: | d1 4a 1a 2d
Feb 4 09:00:58 vpn pluto[15879]: | install_ipsec_sa() for #3: inbound and outbound
Feb 4 09:00:58 vpn pluto[15879]: | route owner of "**********" erouted: self; eroute owner: self
Feb 4 09:00:58 vpn pluto[15879]: | could_route called for ********** (kind=CK_PERMANENT)
Feb 4 09:00:58 vpn pluto[15879]: | looking for alg with transid: 12 keylen: 0 auth: 2
Feb 4 09:00:58 vpn pluto[15879]: | checking transid: 11 keylen: 0 auth: 1
Feb 4 09:00:58 vpn pluto[15879]: | checking transid: 11 keylen: 0 auth: 2
Feb 4 09:00:58 vpn pluto[15879]: | checking transid: 2 keylen: 8 auth: 0
Feb 4 09:00:58 vpn pluto[15879]: | checking transid: 2 keylen: 8 auth: 1
Feb 4 09:00:58 vpn pluto[15879]: | checking transid: 2 keylen: 8 auth: 2
Feb 4 09:00:58 vpn pluto[15879]: | checking transid: 3 keylen: 24 auth: 0
Feb 4 09:00:58 vpn pluto[15879]: | checking transid: 3 keylen: 24 auth: 1
Feb 4 09:00:58 vpn pluto[15879]: | checking transid: 3 keylen: 24 auth: 2
Feb 4 09:00:58 vpn pluto[15879]: | checking transid: 12 keylen: 16 auth: 0
Feb 4 09:00:58 vpn pluto[15879]: | checking transid: 12 keylen: 16 auth: 1
Feb 4 09:00:58 vpn pluto[15879]: | checking transid: 12 keylen: 16 auth: 2
Feb 4 09:00:58 vpn pluto[15879]: | looking for alg with transid: 12 keylen: 0 auth: 2
Feb 4 09:00:58 vpn pluto[15879]: | checking transid: 11 keylen: 0 auth: 1
Feb 4 09:00:58 vpn pluto[15879]: | checking transid: 11 keylen: 0 auth: 2
Feb 4 09:00:58 vpn pluto[15879]: | checking transid: 2 keylen: 8 auth: 0
Feb 4 09:00:58 vpn pluto[15879]: | checking transid: 2 keylen: 8 auth: 1
Feb 4 09:00:58 vpn pluto[15879]: | checking transid: 2 keylen: 8 auth: 2
Feb 4 09:00:58 vpn pluto[15879]: | checking transid: 3 keylen: 24 auth: 0
Feb 4 09:00:58 vpn pluto[15879]: | checking transid: 3 keylen: 24 auth: 1
Feb 4 09:00:58 vpn pluto[15879]: | checking transid: 3 keylen: 24 auth: 2
Feb 4 09:00:58 vpn pluto[15879]: | checking transid: 12 keylen: 16 auth: 0
Feb 4 09:00:58 vpn pluto[15879]: | checking transid: 12 keylen: 16 auth: 1
Feb 4 09:00:58 vpn pluto[15879]: | checking transid: 12 keylen: 16 auth: 2
Feb 4 09:00:58 vpn pluto[15879]: | sr for #3: erouted
Feb 4 09:00:58 vpn pluto[15879]: | route owner of "**********" erouted: self; eroute owner: self
Feb 4 09:00:58 vpn pluto[15879]: | route_and_eroute with c: ********** (next: none) ero:********** esr:{(nil)} ro:********** rosr:{(nil)} and state: 3
Feb 4 09:00:58 vpn pluto[15879]: | eroute_connection replace eroute 192.168.0.0/24:0 --0-> 192.168.1.0/24:0 => tun.0 at 79.207.134.254 (raw_eroute)
Feb 4 09:00:58 vpn pluto[15879]: | route_and_eroute: firewall_notified: true
Feb 4 09:00:58 vpn pluto[15879]: | route_and_eroute: instance "**********", setting eroute_owner {spd=0x88386d4,sr=0x88386d4} to #3 (was #2) (newest_ipsec_sa=#2)
Feb 4 09:00:58 vpn pluto[15879]: | encrypting:
Feb 4 09:00:58 vpn pluto[15879]: | 00 00 00 18 45 91 fc a2 b4 e3 ab 23 75 a9 c9 4b
Feb 4 09:00:58 vpn pluto[15879]: | ba 8f 70 ce 8e 6b e4 f1
Feb 4 09:00:58 vpn pluto[15879]: | IV:
Feb 4 09:00:58 vpn pluto[15879]: | 41 79 4a 37 be 30 e6 7a
Feb 4 09:00:58 vpn pluto[15879]: | encrypting using OAKLEY_3DES_CBC
Feb 4 09:00:58 vpn pluto[15879]: | next IV: 09 22 a8 04 98 33 ea e2
Feb 4 09:00:58 vpn pluto[15879]: | emitting length of ISAKMP Message: 52
Feb 4 09:00:58 vpn pluto[15879]: | inR1_outI2: instance **********[0], setting newest_ipsec_sa to #3 (was #2) (spd.eroute=#3)
Feb 4 09:00:58 vpn pluto[15879]: | complete state transition with STF_OK
Feb 4 09:00:58 vpn pluto[15879]: "**********" #3: transition from state STATE_QUICK_I1 to state STATE_QUICK_I2
Feb 4 09:00:58 vpn pluto[15879]: | sending reply packet to 79.207.134.254:500 (from port=500)
Feb 4 09:00:58 vpn pluto[15879]: | sending 52 bytes for STATE_QUICK_I1 through ppp0:500 to 79.207.134.254:500:
Feb 4 09:00:58 vpn pluto[15879]: | 51 ec 62 5a c7 55 66 cf 92 51 a3 c6 21 37 23 a1
Feb 4 09:00:58 vpn pluto[15879]: | 08 10 20 01 95 28 95 16 00 00 00 34 0a 13 a6 9b
Feb 4 09:00:58 vpn pluto[15879]: | 8f 48 91 5f 21 35 32 31 98 c3 72 04 09 22 a8 04
Feb 4 09:00:58 vpn pluto[15879]: | 98 33 ea e2
Feb 4 09:00:58 vpn pluto[15879]: | inserting event EVENT_SA_REPLACE, timeout in 28006 seconds for #3
Feb 4 09:00:58 vpn pluto[15879]: "**********" #3: STATE_QUICK_I2: sent QI2, IPsec SA established {ESP=>0xe23b5fd7 <0x18af5fd5 xfrm=AES_0-HMAC_SHA1 NATD=none DPD=none}
Feb 4 09:00:58 vpn pluto[15879]: | modecfg pull: noquirk policy:push not-client
Feb 4 09:00:58 vpn pluto[15879]: | phase 1 is done, looking for phase 1 to unpend
Feb 4 09:00:58 vpn pluto[15879]: | next event EVENT_PENDING_PHASE2 in 74 seconds
------------------------------------------------------------------------
------------------------------- AVM 7270 -------------------------------
vpncfg {
connections {
enabled = yes;
conn_type = conntype_lan;
name = "my vpn connection";
always_renew = no;
reject_not_encrypted = no;
dont_filter_netbios = yes;
localip = 0.0.0.0;
local_virtualip = 0.0.0.0;
remoteip = 0.0.0.0;
remote_virtualip = 0.0.0.0;
remotehostname = "************************";
localid {
fqdn = "**********";
}
remoteid {
fqdn = "************************";
}
mode = phase1_mode_aggressive;
phase1ss = "all/all/all";
keytype = connkeytype_pre_shared;
key = "****************************************************************";
cert_do_server_auth = no;
use_nat_t = no;
use_xauth = no;
use_cfgmode = no;
phase2localid {
ipnet {
ipaddr = 192.168.1.0;
mask = 255.255.255.0;
}
}
phase2remoteid {
ipnet {
ipaddr = 192.168.0.0;
mask = 255.255.255.0;
}
}
phase2ss = "esp-all-all/ah-none/comp-all/pfs";
accesslist = "permit ip any 192.168.0.0 255.255.255.0";
}
ike_forward_rules = "udp 0.0.0.0:500 0.0.0.0:500",
"udp 0.0.0.0:4500 0.0.0.0:4500";
}
------------------------------------------------------------------------
More information about the Users
mailing list