2018:12:14-20:01:51 krohtofw ipsec_starter[2020]: Starting strongSwan 4.4.1git20100610 IPsec [starter]...
2018:12:14-20:01:51 krohtofw pluto[2034]: Starting IKEv1 pluto daemon (strongSwan 4.4.1git20100610) THREADS VENDORID CISCO_QUIRKS
2018:12:14-20:01:51 krohtofw ipsec_starter[2026]: pluto (2034) started after 20 ms
2018:12:14-20:01:51 krohtofw pluto[2034]: loaded plugins: curl ldap aes des blowfish serpent twofish sha1 sha2 md5 random x509 pubkey pkcs1 pgp dnskey pem sqlite hmac gmp xauth attr attr-sql resolve
2018:12:14-20:01:51 krohtofw pluto[2034]: including NAT-Traversal patch (Version 0.6c)
2018:12:14-20:01:51 krohtofw pluto[2034]: Using Linux 2.6 IPsec interface code
2018:12:14-20:01:51 krohtofw pluto[2034]: loading ca certificates from '/etc/ipsec.d/cacerts'
2018:12:14-20:01:51 krohtofw pluto[2034]: loaded ca certificate from '/etc/ipsec.d/cacerts/VPN Signing CA.pem'
2018:12:14-20:01:51 krohtofw pluto[2034]: loading aa certificates from '/etc/ipsec.d/aacerts'
2018:12:14-20:01:51 krohtofw pluto[2034]: loading ocsp certificates from '/etc/ipsec.d/ocspcerts'
2018:12:14-20:01:51 krohtofw pluto[2034]: Changing to directory '/etc/ipsec.d/crls'
2018:12:14-20:01:51 krohtofw pluto[2034]: loading attribute certificates from '/etc/ipsec.d/acerts'
2018:12:14-20:01:51 krohtofw pluto[2034]: adding interface tun0/tun0 10.242.2.1:500
2018:12:14-20:01:51 krohtofw pluto[2034]: adding interface tun0/tun0 10.242.2.1:4500
2018:12:14-20:01:51 krohtofw pluto[2034]: adding interface eth1/eth1 207.159.xxx.xx:500
2018:12:14-20:01:51 krohtofw pluto[2034]: adding interface eth1/eth1 207.159.xxx.xx:4500
2018:12:14-20:01:51 krohtofw pluto[2034]: adding interface eth0/eth0 10.10.1.1:500
2018:12:14-20:01:51 krohtofw pluto[2034]: adding interface eth0/eth0 10.10.1.1:4500
2018:12:14-20:01:51 krohtofw pluto[2034]: adding interface lo/lo 127.0.0.1:500
2018:12:14-20:01:51 krohtofw pluto[2034]: adding interface lo/lo 127.0.0.1:4500
2018:12:14-20:01:51 krohtofw pluto[2034]: adding interface lo/lo ::1:500
2018:12:14-20:01:51 krohtofw pluto[2034]: loading secrets from "/etc/ipsec.secrets"
2018:12:14-20:01:51 krohtofw pluto[2034]: loaded PSK secret for 207.159.xxx.xx 40.121.xxx.xx
2018:12:14-20:01:51 krohtofw pluto[2034]: listening for IKE messages
2018:12:14-20:01:51 krohtofw pluto[2034]: added connection description "S_Dorm-to-Azure"
2018:12:14-20:01:51 krohtofw pluto[2034]: "S_Dorm-to-Azure" #1: initiating Main Mode
2018:12:14-20:01:51 krohtofw pluto[2034]: added connection description "S_Dorm-to-Azure"
2018:12:14-20:01:51 krohtofw pluto[2034]: "S_Dorm-to-Azure" #1: received Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000009]
2018:12:14-20:01:51 krohtofw pluto[2034]: "S_Dorm-to-Azure" #1: received Vendor ID payload [RFC 3947]
2018:12:14-20:01:51 krohtofw pluto[2034]: "S_Dorm-to-Azure" #1: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n]
2018:12:14-20:01:51 krohtofw pluto[2034]: "S_Dorm-to-Azure" #1: ignoring Vendor ID payload [FRAGMENTATION]
2018:12:14-20:01:51 krohtofw pluto[2034]: "S_Dorm-to-Azure" #1: ignoring Vendor ID payload [MS-Negotiation Discovery Capable]
2018:12:14-20:01:51 krohtofw pluto[2034]: "S_Dorm-to-Azure" #1: ignoring Vendor ID payload [IKE CGA version 1]
2018:12:14-20:01:51 krohtofw pluto[2034]: "S_Dorm-to-Azure" #1: enabling possible NAT-traversal with method 3
2018:12:14-20:01:51 krohtofw pluto[2034]: "S_Dorm-to-Azure" #1: NAT-Traversal: Result using RFC 3947: no NAT detected
2018:12:14-20:01:51 krohtofw pluto[2034]: "S_Dorm-to-Azure" #1: Peer ID is ID_IPV4_ADDR: '40.121.xxx.xx’
2018:12:14-20:01:51 krohtofw pluto[2034]: "S_Dorm-to-Azure" #1: ISAKMP SA established
2018:12:14-20:01:51 krohtofw pluto[2034]: "S_Dorm-to-Azure" #2: initiating Quick Mode PSK+ENCRYPT+TUNNEL+UP {using isakmp#1}
2018:12:14-20:01:51 krohtofw pluto[2034]: "S_Dorm-to-Azure" #3: initiating Quick Mode PSK+ENCRYPT+TUNNEL+UP {using isakmp#1}
2018:12:14-20:01:51 krohtofw pluto[2034]: "S_Dorm-to-Azure" #2: IKE message has the Commit Flag set but Pluto doesn't implement this feature; ignoring flag
2018:12:14-20:01:51 krohtofw pluto[2034]: id="2203" severity="info" sys="SecureNet" sub="vpn" event="Site-to-site VPN up" variant="ipsec" connection="Dorm-to-Azure" address="207.159.187.26" local_net="10.10.1.0/24" remote_net="10.20.1.0/24"
2018:12:14-20:01:51 krohtofw pluto[2034]: "S_Dorm-to-Azure" #2: sent QI2, IPsec SA established {ESP=>0xf8e5c23a <0xbd6eb274}
2018:12:14-20:01:51 krohtofw pluto[2034]: "S_Dorm-to-Azure" #3: IKE message has the Commit Flag set but Pluto doesn't implement this feature; ignoring flag
2018:12:14-20:01:51 krohtofw pluto[2034]: id="2203" severity="info" sys="SecureNet" sub="vpn" event="Site-to-site VPN up" variant="ipsec" connection="Dorm-to-Azure" address="207.159.187.26" local_net="10.80.1.0/24" remote_net="10.20.1.0/24"
2018:12:14-20:01:51 krohtofw pluto[2034]: "S_Dorm-to-Azure" #3: sent QI2, IPsec SA established {ESP=>0xf5930a00 <0x9ed1ba7c}
2018:12:14-20:01:51 krohtofw pluto[2034]: "S_Dorm-to-Azure" #2: IKE message has the Commit Flag set but Pluto doesn't implement this feature; ignoring flag
2018:12:14-20:01:51 krohtofw pluto[2034]: "S_Dorm-to-Azure" #2: message ignored because it contains an unexpected payload type (ISAKMP_NEXT_HASH)
2018:12:14-20:01:51 krohtofw pluto[2034]: "S_Dorm-to-Azure" #2: sending encrypted notification INVALID_PAYLOAD_TYPE to 40.121.xxx.xx:500
2018:12:14-20:01:51 krohtofw pluto[2034]: "S_Dorm-to-Azure" #3: IKE message has the Commit Flag set but Pluto doesn't implement this feature; ignoring flag
2018:12:14-20:01:51 krohtofw pluto[2034]: "S_Dorm-to-Azure" #3: message ignored because it contains an unexpected payload type (ISAKMP_NEXT_HASH)
2018:12:14-20:01:51 krohtofw pluto[2034]: "S_Dorm-to-Azure" #3: sending encrypted notification INVALID_PAYLOAD_TYPE to 40.121.xxx.xx:500