WORKING

2012:05:02-08:38:16 asg pluto[7017]: packet from 192.168.2.29:500: received Vendor ID payload [RFC 3947]
2012:05:02-08:38:16 asg pluto[7017]: packet from 192.168.2.29:500: ignoring Vendor ID payload [4df37928e9fc4fd1b3262170d515c662]
2012:05:02-08:38:16 asg pluto[7017]: packet from 192.168.2.29:500: ignoring Vendor ID payload [8f8d83826d246b6fc7a8a6a428c11de8]
2012:05:02-08:38:16 asg pluto[7017]: packet from 192.168.2.29:500: ignoring Vendor ID payload [439b59f8ba676c4c7737ae22eab8f582]
2012:05:02-08:38:16 asg pluto[7017]: packet from 192.168.2.29:500: ignoring Vendor ID payload [4d1e0e136deafa34c4f3ea9f02ec7285]
2012:05:02-08:38:16 asg pluto[7017]: packet from 192.168.2.29:500: ignoring Vendor ID payload [80d0bb3def54565ee84645d4c85ce3ee]
2012:05:02-08:38:16 asg pluto[7017]: packet from 192.168.2.29:500: ignoring Vendor ID payload [9909b64eed937c6573de52ace952fa6b]
2012:05:02-08:38:16 asg pluto[7017]: packet from 192.168.2.29:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03]
2012:05:02-08:38:16 asg pluto[7017]: packet from 192.168.2.29:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02]
2012:05:02-08:38:16 asg pluto[7017]: packet from 192.168.2.29:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n]
2012:05:02-08:38:16 asg pluto[7017]: packet from 192.168.2.29:500: received Vendor ID payload [Dead Peer Detection]
2012:05:02-08:38:16 asg pluto[7017]: "S_REF_IpsL2t1_1"[3] 192.168.2.29 #5: responding to Main Mode from unknown peer 192.168.2.29
2012:05:02-08:38:16 asg pluto[7017]: "S_REF_IpsL2t1_1"[3] 192.168.2.29 #5: NAT-Traversal: Result using RFC 3947: no NAT detected
2012:05:02-08:38:16 asg pluto[7017]: "S_REF_IpsL2t1_1"[3] 192.168.2.29 #5: ignoring informational payload, type IPSEC_INITIAL_CONTACT
2012:05:02-08:38:16 asg pluto[7017]: "S_REF_IpsL2t1_1"[3] 192.168.2.29 #5: Peer ID is ID_IPV4_ADDR: '192.168.2.29'
2012:05:02-08:38:16 asg pluto[7017]: "S_REF_IpsL2t1_1"[3] 192.168.2.29 #5: Dead Peer Detection (RFC 3706) enabled
2012:05:02-08:38:16 asg pluto[7017]: "S_REF_IpsL2t1_1"[3] 192.168.2.29 #5: sent MR3, ISAKMP SA established
2012:05:02-08:38:17 asg pluto[7017]: "S_REF_IpsL2t1_0"[3] 192.168.2.29 #6: responding to Quick Mode
2012:05:02-08:38:17 asg pppd-l2tp[9016]: Plugin aua.so loaded.
2012:05:02-08:38:17 asg pppd-l2tp[9016]: AUA plugin initialized.
2012:05:02-08:38:17 asg pppd-l2tp[9016]: Plugin ippool.so loaded.
2012:05:02-08:38:17 asg pppd-l2tp[9016]: Plugin pppol2tp.so loaded.
2012:05:02-08:38:17 asg pppd-l2tp[9016]: pppd 2.4.5 started by (unknown), uid 0
2012:05:02-08:38:17 asg pppd-l2tp[9016]: Using interface ppp0
2012:05:02-08:38:17 asg pppd-l2tp[9016]: Connect: ppp0 <--> 
2012:05:02-08:38:17 asg pppd-l2tp[9016]: Overriding mtu 1500 to 1380
2012:05:02-08:38:17 asg pppd-l2tp[9016]: Overriding mru 1500 to mtu value 1380
2012:05:02-08:38:17 asg pluto[7017]: "S_REF_IpsL2t1_0"[3] 192.168.2.29 #6: IPsec SA established {ESP=>0x0a9e8038 <0x60251112 DPD}
2012:05:02-08:38:21 asg pppd-l2tp[9016]: Overriding mtu 1500 to 1380
2012:05:02-08:38:23 asg pppd-l2tp[9016]: found interface eth0 for proxy arp
2012:05:02-08:38:23 asg pppd-l2tp[9016]: local  IP address 10.242.3.1
2012:05:02-08:38:23 asg pppd-l2tp[9016]: remote IP address 10.0.4.200
2012:05:02-08:38:23 asg pppd-l2tp[9016]: id="2201" severity="info" sys="SecureNet" sub="vpn" event="Connection started" username="jxtorrey" variant="l2tp" srcip="192.168.2.29" virtual_ip="10.0.4.200"
2012:05:02-08:40:31 asg pppd-l2tp[9016]: LCP terminated by peer (User request)
2012:05:02-08:40:31 asg pppd-l2tp[9016]: Connect time 2.2 minutes.
2012:05:02-08:40:31 asg pppd-l2tp[9016]: Sent 2915 bytes, received 2607 bytes.
2012:05:02-08:40:31 asg pppd-l2tp[9016]: Overriding mtu 1500 to 1380
2012:05:02-08:40:31 asg pppd-l2tp[9016]: Overriding mru 1500 to mtu value 1380
2012:05:02-08:40:31 asg pppd-l2tp[9016]: Terminating on signal 15
2012:05:02-08:40:31 asg pluto[7017]: "S_REF_IpsL2t1_1"[3] 192.168.2.29 #5: received Delete SA(0x0a9e8038) payload: deleting IPSEC State #6
2012:05:02-08:40:31 asg pluto[7017]: "S_REF_IpsL2t1_1"[3] 192.168.2.29 #5: deleting connection "S_REF_IpsL2t1_0"[3] instance with peer 192.168.2.29 {isakmp=#0/ipsec=#0}
2012:05:02-08:40:31 asg pluto[7017]: "S_REF_IpsL2t1_1"[3] 192.168.2.29 #5: received Delete SA payload: deleting ISAKMP State #5
2012:05:02-08:40:31 asg pluto[7017]: "S_REF_IpsL2t1_1"[3] 192.168.2.29: deleting connection "S_REF_IpsL2t1_1"[3] instance with peer 192.168.2.29 {isakmp=#0/ipsec=#0}
2012:05:02-08:40:31 asg pppd-l2tp[9016]: id="2202" severity="info" sys="SecureNet" sub="vpn" event="Connection terminated" username="jxtorrey" variant="l2tp" srcip="192.168.2.29" virtual_ip="10.0.4.200"
2012:05:02-08:40:33 asg pppd-l2tp[9016]: Modem hangup
2012:05:02-08:40:33 asg pppd-l2tp[9016]: Connection terminated.
2012:05:02-08:40:33 asg pppd-l2tp[9016]: Exit.

NOT WORKING

2012:05:02-08:42:08 asg pluto[7017]: packet from 198.228.199.25:30525: received Vendor ID payload [RFC 3947]
2012:05:02-08:42:08 asg pluto[7017]: packet from 198.228.199.25:30525: ignoring Vendor ID payload [4df37928e9fc4fd1b3262170d515c662]
2012:05:02-08:42:08 asg pluto[7017]: packet from 198.228.199.25:30525: ignoring Vendor ID payload [8f8d83826d246b6fc7a8a6a428c11de8]
2012:05:02-08:42:08 asg pluto[7017]: packet from 198.228.199.25:30525: ignoring Vendor ID payload [439b59f8ba676c4c7737ae22eab8f582]
2012:05:02-08:42:08 asg pluto[7017]: packet from 198.228.199.25:30525: ignoring Vendor ID payload [4d1e0e136deafa34c4f3ea9f02ec7285]
2012:05:02-08:42:08 asg pluto[7017]: packet from 198.228.199.25:30525: ignoring Vendor ID payload [80d0bb3def54565ee84645d4c85ce3ee]
2012:05:02-08:42:08 asg pluto[7017]: packet from 198.228.199.25:30525: ignoring Vendor ID payload [9909b64eed937c6573de52ace952fa6b]
2012:05:02-08:42:08 asg pluto[7017]: packet from 198.228.199.25:30525: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03]
2012:05:02-08:42:08 asg pluto[7017]: packet from 198.228.199.25:30525: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02]
2012:05:02-08:42:08 asg pluto[7017]: packet from 198.228.199.25:30525: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n]
2012:05:02-08:42:08 asg pluto[7017]: packet from 198.228.199.25:30525: received Vendor ID payload [Dead Peer Detection]
2012:05:02-08:42:08 asg pluto[7017]: "S_REF_IpsL2t1_1"[4] 198.228.199.25:30525 #7: responding to Main Mode from unknown peer 198.228.199.25:30525
2012:05:02-08:42:09 asg pluto[7017]: "S_REF_IpsL2t1_1"[4] 198.228.199.25:30525 #7: NAT-Traversal: Result using RFC 3947: both are NATed
2012:05:02-08:42:09 asg pluto[7017]: "S_REF_IpsL2t1_1"[4] 198.228.199.25:30525 #7: ignoring informational payload, type IPSEC_INITIAL_CONTACT
2012:05:02-08:42:09 asg pluto[7017]: "S_REF_IpsL2t1_1"[4] 198.228.199.25:30525 #7: Peer ID is ID_IPV4_ADDR: '10.46.217.88'
2012:05:02-08:42:09 asg pluto[7017]: "S_REF_IpsL2t1_1"[5] 198.228.199.25:30525 #7: deleting connection "S_REF_IpsL2t1_1"[4] instance with peer 198.228.199.25 {isakmp=#0/ipsec=#0}
2012:05:02-08:42:09 asg pluto[7017]: "S_REF_IpsL2t1_1"[5] 198.228.199.25:30525 #7: Dead Peer Detection (RFC 3706) enabled
2012:05:02-08:42:09 asg pluto[7017]: | NAT-T: new mapping 198.228.199.25:30525/7560)
2012:05:02-08:42:09 asg pluto[7017]: "S_REF_IpsL2t1_1"[5] 198.228.199.25:7560 #7: sent MR3, ISAKMP SA established
2012:05:02-08:42:11 asg pluto[7017]: "S_REF_IpsL2t1_1"[5] 198.228.199.25:7560 #7: cannot respond to IPsec SA request because no connection is known for 209.0.141.30/32===192.168.2.5:4500[192.168.2.5]:17/1701...198.228.199.25:7560[10.46.217.88]:17/%any==={10.46.217.88/32}
2012:05:02-08:42:11 asg pluto[7017]: "S_REF_IpsL2t1_1"[5] 198.228.199.25:7560 #7: sending encrypted notification INVALID_ID_INFORMATION to 198.228.199.25:7560
2012:05:02-08:42:14 asg pluto[7017]: "S_REF_IpsL2t1_1"[5] 198.228.199.25:7560 #7: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x6ea8a7f1 (perhaps this is a duplicated packet)
2012:05:02-08:42:14 asg pluto[7017]: "S_REF_IpsL2t1_1"[5] 198.228.199.25:7560 #7: sending encrypted notification INVALID_MESSAGE_ID to 198.228.199.25:7560
2012:05:02-08:42:17 asg pluto[7017]: "S_REF_IpsL2t1_1"[5] 198.228.199.25:7560 #7: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x6ea8a7f1 (perhaps this is a duplicated packet)
2012:05:02-08:42:17 asg pluto[7017]: "S_REF_IpsL2t1_1"[5] 198.228.199.25:7560 #7: sending encrypted notification INVALID_MESSAGE_ID to 198.228.199.25:7560
2012:05:02-08:42:20 asg pluto[7017]: "S_REF_IpsL2t1_1"[5] 198.228.199.25:7560 #7: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x6ea8a7f1 (perhaps this is a duplicated packet)
2012:05:02-08:42:20 asg pluto[7017]: "S_REF_IpsL2t1_1"[5] 198.228.199.25:7560 #7: sending encrypted notification INVALID_MESSAGE_ID to 198.228.199.25:7560
2012:05:02-08:42:24 asg pluto[7017]: "S_REF_IpsL2t1_1"[5] 198.228.199.25:7560 #7: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x6ea8a7f1 (perhaps this is a duplicated packet)
2012:05:02-08:42:24 asg pluto[7017]: "S_REF_IpsL2t1_1"[5] 198.228.199.25:7560 #7: sending encrypted notification INVALID_MESSAGE_ID to 198.228.199.25:7560
2012:05:02-08:42:26 asg pluto[7017]: "S_REF_IpsL2t1_1"[5] 198.228.199.25:7560 #7: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x6ea8a7f1 (perhaps this is a duplicated packet)
2012:05:02-08:42:26 asg pluto[7017]: "S_REF_IpsL2t1_1"[5] 198.228.199.25:7560 #7: sending encrypted notification INVALID_MESSAGE_ID to 198.228.199.25:7560
2012:05:02-08:42:30 asg pluto[7017]: "S_REF_IpsL2t1_1"[5] 198.228.199.25:7560 #7: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x6ea8a7f1 (perhaps this is a duplicated packet)
2012:05:02-08:42:30 asg pluto[7017]: "S_REF_IpsL2t1_1"[5] 198.228.199.25:7560 #7: sending encrypted notification INVALID_MESSAGE_ID to 198.228.199.25:7560
2012:05:02-08:42:32 asg pluto[7017]: "S_REF_IpsL2t1_1"[5] 198.228.199.25:7560 #7: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x6ea8a7f1 (perhaps this is a duplicated packet)
2012:05:02-08:42:32 asg pluto[7017]: "S_REF_IpsL2t1_1"[5] 198.228.199.25:7560 #7: sending encrypted notification INVALID_MESSAGE_ID to 198.228.199.25:7560
2012:05:02-08:42:35 asg pluto[7017]: "S_REF_IpsL2t1_1"[5] 198.228.199.25:7560 #7: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x6ea8a7f1 (perhaps this is a duplicated packet)
2012:05:02-08:42:35 asg pluto[7017]: "S_REF_IpsL2t1_1"[5] 198.228.199.25:7560 #7: sending encrypted notification INVALID_MESSAGE_ID to 198.228.199.25:7560
2012:05:02-08:42:39 asg pluto[7017]: "S_REF_IpsL2t1_1"[5] 198.228.199.25:7560 #7: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x6ea8a7f1 (perhaps this is a duplicated packet)
2012:05:02-08:42:39 asg pluto[7017]: "S_REF_IpsL2t1_1"[5] 198.228.199.25:7560 #7: sending encrypted notification INVALID_MESSAGE_ID to 198.228.199.25:7560
2012:05:02-08:43:04 asg pluto[7017]: ERROR: asynchronous network error report on eth1 for message to 198.228.199.25 port 7560, complainant 198.228.199.25: Connection refused [errno 111, origin ICMP type 3 code 3 (not authenticated)]
2012:05:02-08:43:34 asg pluto[7017]: ERROR: asynchronous network error report on eth1 for message to 198.228.199.25 port 7560, complainant 198.228.199.25: Connection refused [errno 111, origin ICMP type 3 code 3 (not authenticated)]
2012:05:02-08:44:04 asg pluto[7017]: ERROR: asynchronous network error report on eth1 for message to 198.228.199.25 port 7560, complainant 198.228.199.25: Connection refused [errno 111, origin ICMP type 3 code 3 (not authenticated)]