2011:08:23-21:32:18 corp pluto[31848]: packet from 27.104.168.9:500: received Vendor ID payload [RFC 3947] 2011:08:23-21:32:18 corp pluto[31848]: packet from 27.104.168.9:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02] 2011:08:23-21:32:18 corp pluto[31848]: packet from 27.104.168.9:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] 2011:08:23-21:32:18 corp pluto[31848]: packet from 27.104.168.9:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-00] 2011:08:23-21:32:18 corp pluto[31848]: packet from 27.104.168.9:500: ignoring Vendor ID payload [FRAGMENTATION 80000000] 2011:08:23-21:32:18 corp pluto[31848]: "S_for curtis"[1] 27.104.168.9 #1: responding to Main Mode from unknown peer 27.104.168.9 2011:08:23-21:32:19 corp pluto[31848]: "S_for curtis"[1] 27.104.168.9 #1: NAT-Traversal: Result using RFC 3947: no NAT detected 2011:08:23-21:32:20 corp pluto[31848]: "S_for curtis"[1] 27.104.168.9 #1: Peer ID is ID_IPV4_ADDR: '27.104.168.9' 2011:08:23-21:32:20 corp pluto[31848]: "S_for curtis"[1] 27.104.168.9 #1: sent MR3, ISAKMP SA established 2011:08:23-21:32:22 corp pluto[31848]: "S_for curtis"[1] 27.104.168.9 #1: ignoring informational payload, type IPSEC_INITIAL_CONTACT 2011:08:23-21:32:22 corp pluto[31848]: "S_for curtis"[1] 27.104.168.9 #2: responding to Quick Mode 2011:08:23-21:32:25 corp pluto[31848]: "S_for curtis"[1] 27.104.168.9 #2: IPsec SA established {ESP=>0x062a2a9a <0x73c5cefb} 2011:08:23-21:32:27 corp pppd-l2tp[32312]: Plugin aua.so loaded. 2011:08:23-21:32:27 corp pppd-l2tp[32312]: AUA plugin initialized. 2011:08:23-21:32:27 corp pppd-l2tp[32312]: Plugin ippool.so loaded. 2011:08:23-21:32:27 corp pppd-l2tp[32312]: Plugin pppol2tp.so loaded. 2011:08:23-21:32:27 corp pppd-l2tp[32312]: pppd 2.4.5 started by (unknown), uid 0 2011:08:23-21:32:27 corp pppd-l2tp[32312]: Using interface ppp1 2011:08:23-21:32:27 corp pppd-l2tp[32312]: Connect: ppp1 <--> 2011:08:23-21:32:27 corp pppd-l2tp[32312]: Overriding mtu 1500 to 1380 2011:08:23-21:32:27 corp pppd-l2tp[32312]: Overriding mru 1500 to mtu value 1380 2011:08:23-21:32:30 corp pppd-l2tp[32312]: Overriding mtu 1400 to 1380 2011:08:23-21:32:34 corp pppd-l2tp[32312]: Cannot determine ethernet address for proxy ARP 2011:08:23-21:32:34 corp pppd-l2tp[32312]: local IP address 10.242.3.1 2011:08:23-21:32:34 corp pppd-l2tp[32312]: remote IP address 10.242.3.2 2011:08:23-21:32:34 corp pppd-l2tp[32312]: id="2201" severity="info" sys="SecureNet" sub="vpn" event="Connection started" username="curtis" variant="l2tp" srcip="27.104.168.9" virtual_ip="10.242.3.2" 2011:08:23-21:32:37 corp pluto[31848]: listening for IKE messages 2011:08:23-21:32:37 corp pluto[31848]: adding interface ppp1/ppp1 10.242.3.1:500 2011:08:23-21:32:37 corp pluto[31848]: adding interface ppp1/ppp1 10.242.3.1:4500 2011:08:23-21:32:37 corp pluto[31848]: forgetting secrets 2011:08:23-21:32:37 corp pluto[31848]: loading secrets from "/etc/ipsec.secrets" 2011:08:23-21:32:37 corp pluto[31848]: loaded private key from 'VPN Certificate.pem' 2011:08:23-21:32:37 corp pluto[31848]: loaded PSK secret for 171.0.202.143 %any 2011:08:23-21:32:37 corp pluto[31848]: forgetting secrets 2011:08:23-21:32:37 corp pluto[31848]: loading secrets from "/etc/ipsec.secrets" 2011:08:23-21:32:37 corp pluto[31848]: loaded private key from 'VPN Certificate.pem' 2011:08:23-21:32:37 corp pluto[31848]: loaded PSK secret for 171.0.202.143 %any 2011:08:23-21:32:37 corp pluto[31848]: loading ca certificates from '/etc/ipsec.d/cacerts' 2011:08:23-21:32:37 corp pluto[31848]: loaded ca certificate from '/etc/ipsec.d/cacerts/VPN Signing CA.pem' 2011:08:23-21:32:37 corp pluto[31848]: loaded ca certificate from '/etc/ipsec.d/cacerts/GeoTrust Signing CA.pem' 2011:08:23-21:32:37 corp pluto[31848]: loading aa certificates from '/etc/ipsec.d/aacerts' 2011:08:23-21:32:37 corp pluto[31848]: loading ocsp certificates from '/etc/ipsec.d/ocspcerts' 2011:08:23-21:32:37 corp pluto[31848]: loading attribute certificates from '/etc/ipsec.d/acerts' 2011:08:23-21:32:37 corp pluto[31848]: Changing to directory '/etc/ipsec.d/crls'