2011:09:10-20:27:59 * pluto[4338]: Changing to directory '/etc/ipsec.d/crls' 2011:09:10-20:27:59 * pluto[4338]: "S_REF_IpsSitAntonis_0" #6: received Vendor ID payload [strongSwan] 2011:09:10-20:27:59 * pluto[4338]: "S_REF_IpsSitAntonis_0" #6: ignoring Vendor ID payload [Cisco-Unity] 2011:09:10-20:27:59 * pluto[4338]: "S_REF_IpsSitAntonis_0" #6: received Vendor ID payload [XAUTH] 2011:09:10-20:27:59 * pluto[4338]: "S_REF_IpsSitAntonis_0" #6: received Vendor ID payload [Dead Peer Detection] 2011:09:10-20:27:59 * pluto[4338]: "S_REF_IpsSitAntonis_0" #6: received Vendor ID payload [RFC 3947] 2011:09:10-20:27:59 * pluto[4338]: "S_REF_IpsSitAntonis_0" #6: enabling possible NAT-traversal with method 3 2011:09:10-20:27:59 * pluto[4338]: packet from 81.106.102.131:500: Quick Mode message is for a non-existent (expired?) ISAKMP SA 2011:09:10-20:27:59 * pluto[4338]: "S_REF_IpsSitAntonis_0" #6: NAT-Traversal: Result using RFC 3947: peer is NATed 2011:09:10-20:27:59 * pluto[4338]: "S_REF_IpsSitAntonis_0" #6: we don't have a cert 2011:09:10-20:27:59 * pluto[4338]: "S_REF_IpsSitAntonis_0" #6: Peer ID is ID_FQDN: 'tonyntas.dyndns.org' 2011:09:10-20:27:59 * pluto[4338]: "S_REF_IpsSitAntonis_0" #6: Dead Peer Detection (RFC 3706) enabled 2011:09:10-20:27:59 * pluto[4338]: "S_REF_IpsSitAntonis_0" #6: ISAKMP SA established 2011:09:10-20:27:59 * pluto[4338]: "S_REF_IpsSitAntonis_0" #7: initiating Quick Mode PUBKEY+ENCRYPT+TUNNEL+UP {using isakmp#6} 2011:09:10-20:27:59 * pluto[4338]: "S_REF_IpsSitAntonis_0" #6: ignoring informational payload, type INVALID_ID_INFORMATION 2011:09:10-20:28:09 * pluto[4338]: "S_REF_IpsSitAntonis_0" #6: ignoring informational payload, type INVALID_MESSAGE_ID 2011:09:10-20:28:18 * pluto[4338]: packet from 81.106.102.131:4500: Quick Mode message is for a non-existent (expired?) ISAKMP SA 2011:09:10-20:28:29 * pluto[4338]: "S_REF_IpsSitAntonis_0" #6: ignoring informational payload, type INVALID_MESSAGE_ID 2011:09:10-20:29:09 * pluto[4338]: "S_REF_IpsSitAntonis_0" #7: max number of retransmissions (2) reached STATE_QUICK_I1. No acceptable response to our first Quick Mode message: perhaps peer likes no proposal 2011:09:10-20:29:09 * pluto[4338]: "S_REF_IpsSitAntonis_0" #7: starting keying attempt 2 of an unlimited number 2011:09:10-20:29:09 * pluto[4338]: "S_REF_IpsSitAntonis_0" #8: initiating Quick Mode PUBKEY+ENCRYPT+TUNNEL+UP to replace #7 {using isakmp#6} 2011:09:10-20:29:11 * pluto[4338]: ERROR: asynchronous network error report on ppp0 for message to 81.106.102.131 port 4500, complainant 81.106.102.131: No route to host [errno 113, origin ICMP type 11 code 0 (not authenticated)] 2011:09:10-20:29:25 * pluto[4338]: packet from 81.106.102.131:500: received Vendor ID payload [strongSwan] 2011:09:10-20:29:25 * pluto[4338]: packet from 81.106.102.131:500: ignoring Vendor ID payload [Cisco-Unity] 2011:09:10-20:29:25 * pluto[4338]: packet from 81.106.102.131:500: received Vendor ID payload [XAUTH] 2011:09:10-20:29:25 * pluto[4338]: packet from 81.106.102.131:500: received Vendor ID payload [Dead Peer Detection] 2011:09:10-20:29:25 * pluto[4338]: packet from 81.106.102.131:500: received Vendor ID payload [RFC 3947] 2011:09:10-20:29:25 * pluto[4338]: packet from 81.106.102.131:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03] 2011:09:10-20:29:25 * pluto[4338]: packet from 81.106.102.131:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02] 2011:09:10-20:29:25 * pluto[4338]: packet from 81.106.102.131:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] 2011:09:10-20:29:25 * pluto[4338]: packet from 81.106.102.131:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-00] 2011:09:10-20:29:25 * pluto[4338]: "S_REF_IpsSitAntonis_0" #9: responding to Main Mode 2011:09:10-20:29:25 * pluto[4338]: | NAT-T: new mapping 81.106.102.131:4500/500) 2011:09:10-20:29:25 * pluto[4338]: "S_REF_IpsSitAntonis_0" #9: NAT-Traversal: Result using RFC 3947: peer is NATed 2011:09:10-20:29:25 * pluto[4338]: "S_REF_IpsSitAntonis_0" #9: Peer ID is ID_FQDN: 'tonyntas.dyndns.org' 2011:09:10-20:29:25 * pluto[4338]: "S_REF_IpsSitAntonis_0" #9: we don't have a cert 2011:09:10-20:29:25 * pluto[4338]: "S_REF_IpsSitAntonis_0" #9: Dead Peer Detection (RFC 3706) enabled 2011:09:10-20:29:25 * pluto[4338]: | NAT-T: new mapping 81.106.102.131:500/4500) 2011:09:10-20:29:25 * pluto[4338]: "S_REF_IpsSitAntonis_0" #9: sent MR3, ISAKMP SA established 2011:09:10-20:29:25 * pluto[4338]: "S_REF_IpsSitAntonis_0" #9: cannot respond to IPsec SA request because no connection is known for 172.16.3.0/24===86.183.150.3:4500[*.home.dyndns.org]...81.106.102.131:4500[tonyntas.dyndns.org]===192.168.4.4/32 2011:09:10-20:29:25 * pluto[4338]: "S_REF_IpsSitAntonis_0" #9: sending encrypted notification INVALID_ID_INFORMATION to 81.106.102.131:4500 2011:09:10-20:30:19 * pluto[4338]: "S_REF_IpsSitAntonis_0" #8: max number of retransmissions (2) reached STATE_QUICK_I1. No acceptable response to our first Quick Mode message: perhaps peer likes no proposal 2011:09:10-20:30:19 * pluto[4338]: "S_REF_IpsSitAntonis_0" #8: starting keying attempt 3 of an unlimited number 2011:09:10-20:30:19 * pluto[4338]: "S_REF_IpsSitAntonis_0" #10: initiating Quick Mode PUBKEY+ENCRYPT+TUNNEL+UP to replace #8 {using isakmp#9}