2010:01:04-18:37:43 acenn pluto[4450]: packet from 192.168.2.150:1273: Cisco VPN client appends 16 surplus NULL bytes 2010:01:04-18:37:43 acenn pluto[4450]: packet from 192.168.2.150:1273: received Vendor ID payload [XAUTH] 2010:01:04-18:37:43 acenn pluto[4450]: packet from 192.168.2.150:1273: received Vendor ID payload [Dead Peer Detection] 2010:01:04-18:37:43 acenn pluto[4450]: packet from 192.168.2.150:1273: ignoring Vendor ID payload [FRAGMENTATION 80000000] 2010:01:04-18:37:43 acenn pluto[4450]: packet from 192.168.2.150:1273: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] 2010:01:04-18:37:43 acenn pluto[4450]: packet from 192.168.2.150:1273: ignoring Vendor ID payload [Cisco-Unity] 2010:01:04-18:37:43 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: responding to Main Mode from unknown peer 192.168.2.150:1273 2010:01:04-18:37:43 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: peer requested 2147483 seconds which exceeds our limit 86400 seconds 2010:01:04-18:37:43 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: lifetime reduced to 86400 seconds (todo: IPSEC_RESPONDER_LIFETIME notification) 2010:01:04-18:37:43 acenn pluto[4450]: packet from 192.168.2.150:1273: size (352) differs from size specified in ISAKMP HDR (336) 2010:01:04-18:37:43 acenn pluto[4450]: packet from 192.168.2.150:1273: Cisco VPN client appends 16 surplus NULL bytes 2010:01:04-18:37:43 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: ignoring Vendor ID payload [9f0b7aba83eda7bbcd9dd2d083e44de7] 2010:01:04-18:37:43 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: ignoring Vendor ID payload [Cisco-Unity] 2010:01:04-18:37:43 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike-02/03: no NAT detected 2010:01:04-18:37:43 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: ignoring informational payload, type IPSEC_INITIAL_CONTACT 2010:01:04-18:37:43 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: Peer ID is ID_DER_ASN1_DN: 'C=in, L=pune, O=cybervision, CN=admin, E=thinvm@gmail.com' 2010:01:04-18:37:43 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: self-signed cacert rejected 2010:01:04-18:37:43 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: crl not found 2010:01:04-18:37:43 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: certificate status unknown 2010:01:04-18:37:43 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: we have a cert and are sending it 2010:01:04-18:37:43 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: sent MR3, ISAKMP SA established 2010:01:04-18:37:43 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: sending XAUTH request 2010:01:04-18:37:47 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: parsing XAUTH reply 2010:01:04-18:37:48 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: extended authentication was successful 2010:01:04-18:37:48 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: sending XAUTH status: 2010:01:04-18:37:48 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: parsing XAUTH ack 2010:01:04-18:37:48 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: received XAUTH ack, established 2010:01:04-18:37:48 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: unsupported ModeCfg attribute 28683?? received. 2010:01:04-18:37:48 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: unsupported ModeCfg attribute 28684?? received. 2010:01:04-18:37:48 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: peer requested virtual IP %any 2010:01:04-18:37:48 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: assigning virtual IP 10.242.5.1 to peer 2010:01:04-18:37:48 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: assigning DNS server 202.54.1.66 to peer 2010:01:04-18:37:48 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: sending ModeCfg reply 2010:01:04-18:37:48 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: sent ModeCfg reply, established 2010:01:04-18:37:48 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #7: responding to Quick Mode 2010:01:04-18:37:48 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #7: ERROR: netlink response for Add SA esp.0@(my_public_ip)included errno 22: Invalid argument 2010:01:04-18:37:53 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x9ae47b47 (perhaps this is a duplicated packet) 2010:01:04-18:37:53 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: sending encrypted notification INVALID_MESSAGE_ID to 192.168.2.150:1273 2010:01:04-18:37:58 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x9ae47b47 (perhaps this is a duplicated packet) 2010:01:04-18:37:58 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: sending encrypted notification INVALID_MESSAGE_ID to 192.168.2.150:1273 2010:01:04-18:38:03 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x9ae47b47 (perhaps this is a duplicated packet) 2010:01:04-18:38:03 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: sending encrypted notification INVALID_MESSAGE_ID to 192.168.2.150:1273 2010:01:04-18:38:08 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xf3f0a787) not found (maybe expired) 2010:01:04-18:38:38 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273 #6: received Delete SA payload: deleting ISAKMP State #6 2010:01:04-18:38:38 acenn pluto[4450]: "D_REF_zfmTEQwktH"[4] 192.168.2.150:1273: deleting connection "D_REF_zfmTEQwktH" instance with peer 192.168.2.150 {isakmp=#0/ipsec=#0}