2013:10:18-23:50:34 Healthfire pluto[23697]: loading ca certificates from '/etc/ipsec.d/cacerts' 2013:10:18-23:50:34 Healthfire pluto[23697]: loaded ca certificate from '/etc/ipsec.d/cacerts/VPN Signing CA.pem' 2013:10:18-23:50:34 Healthfire pluto[23697]: loading aa certificates from '/etc/ipsec.d/aacerts' 2013:10:18-23:50:34 Healthfire pluto[23697]: loading ocsp certificates from '/etc/ipsec.d/ocspcerts' 2013:10:18-23:50:34 Healthfire pluto[23697]: Changing to directory '/etc/ipsec.d/crls' 2013:10:18-23:50:34 Healthfire pluto[23697]: loading attribute certificates from '/etc/ipsec.d/acerts' 2013:10:18-23:50:34 Healthfire pluto[23697]: listening for IKE messages 2013:10:18-23:50:34 Healthfire pluto[23697]: adding interface eth0/eth0 xx.xx.xx.xx:500 2013:10:18-23:50:34 Healthfire pluto[23697]: adding interface eth0/eth0 xx.xx.xx.xx:4500 2013:10:18-23:50:34 Healthfire pluto[23697]: adding interface eth1/eth1 192.168.6.1:500 2013:10:18-23:50:34 Healthfire pluto[23697]: adding interface eth1/eth1 192.168.6.1:4500 2013:10:18-23:50:34 Healthfire pluto[23697]: adding interface lo/lo 127.0.0.1:500 2013:10:18-23:50:34 Healthfire pluto[23697]: adding interface lo/lo 127.0.0.1:4500 2013:10:18-23:50:34 Healthfire pluto[23697]: adding interface lo/lo ::1:500 2013:10:18-23:50:34 Healthfire pluto[23697]: loading secrets from "/etc/ipsec.secrets" 2013:10:18-23:50:34 Healthfire pluto[23697]: loaded PSK secret for xx.xx.xx.xx x.x.x.x 2013:10:18-23:50:34 Healthfire pluto[23697]: added connection description "S_Blr-Nj Tunnel" 2013:10:18-23:50:34 Healthfire pluto[23697]: "S_Blr-Nj Tunnel" #1: initiating Main Mode 2013:10:18-23:50:34 Healthfire pluto[23697]: "S_Blr-Nj Tunnel" #1: received Vendor ID payload [RFC 3947] 2013:10:18-23:50:34 Healthfire pluto[23697]: "S_Blr-Nj Tunnel" #1: received Vendor ID payload [Dead Peer Detection] 2013:10:18-23:50:34 Healthfire pluto[23697]: "S_Blr-Nj Tunnel" #1: ignoring Vendor ID payload [12f5f28c457168a9702d9fe274cc0204] 2013:10:18-23:50:34 Healthfire pluto[23697]: "S_Blr-Nj Tunnel" #1: ignoring Vendor ID payload [8299031757a36082c6a621de00050093] 2013:10:18-23:50:34 Healthfire pluto[23697]: "S_Blr-Nj Tunnel" #1: enabling possible NAT-traversal with method 3 2013:10:18-23:50:34 Healthfire pluto[23697]: "S_Blr-Nj Tunnel" #1: NAT-Traversal: Result using RFC 3947: no NAT detected 2013:10:18-23:50:34 Healthfire pluto[23697]: "S_Blr-Nj Tunnel" #1: Peer ID is ID_IPV4_ADDR: 'x.x.x.x' 2013:10:18-23:50:34 Healthfire pluto[23697]: "S_Blr-Nj Tunnel" #1: Dead Peer Detection (RFC 3706) enabled 2013:10:18-23:50:34 Healthfire pluto[23697]: "S_Blr-Nj Tunnel" #1: ISAKMP SA established 2013:10:18-23:50:34 Healthfire pluto[23697]: "S_Blr-Nj Tunnel" #2: initiating Quick Mode PSK+ENCRYPT+TUNNEL+UP {using isakmp#1} 2013:10:18-23:50:35 Healthfire pluto[23697]: id="2203" severity="info" sys="SecureNet" sub="vpn" event="Site-to-site VPN up" variant="ipsec" connection="Blr-Nj Tunnel" address="xx.xx.xx.xx" local_net="192.168.6.0/24" remote_net="192.168.4.0/24" 2013:10:18-23:50:35 Healthfire pluto[23697]: "S_Blr-Nj Tunnel" #2: sent QI2, IPsec SA established {ESP=>0xbab335e5 <0x481f2f7f DPD} 2013:10:18-23:50:36 Healthfire pluto[23697]: packet from x.x.x.x:500: received Vendor ID payload [RFC 3947] 2013:10:18-23:50:36 Healthfire pluto[23697]: packet from x.x.x.x:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03] 2013:10:18-23:50:36 Healthfire pluto[23697]: packet from x.x.x.x:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02] 2013:10:18-23:50:36 Healthfire pluto[23697]: packet from x.x.x.x:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] 2013:10:18-23:50:36 Healthfire pluto[23697]: packet from x.x.x.x:500: ignoring Vendor ID payload [16f6ca16e4a4066d83821a0f0aeaa862] 2013:10:18-23:50:36 Healthfire pluto[23697]: packet from x.x.x.x:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-00] 2013:10:18-23:50:36 Healthfire pluto[23697]: packet from x.x.x.x:500: received Vendor ID payload [Dead Peer Detection] 2013:10:18-23:50:36 Healthfire pluto[23697]: packet from x.x.x.x:500: ignoring Vendor ID payload [FRAGMENTATION] 2013:10:18-23:50:36 Healthfire pluto[23697]: packet from x.x.x.x:500: ignoring Vendor ID payload [8299031757a36082c6a621de00050093] 2013:10:18-23:50:36 Healthfire pluto[23697]: "S_Blr-Nj Tunnel" #3: responding to Main Mode 2013:10:18-23:50:36 Healthfire pluto[23697]: "S_Blr-Nj Tunnel" #3: NAT-Traversal: Result using RFC 3947: no NAT detected 2013:10:18-23:50:36 Healthfire pluto[23697]: "S_Blr-Nj Tunnel" #3: ignoring informational payload, type IPSEC_INITIAL_CONTACT 2013:10:18-23:50:36 Healthfire pluto[23697]: "S_Blr-Nj Tunnel" #3: Peer ID is ID_IPV4_ADDR: 'x.x.x.x' 2013:10:18-23:50:36 Healthfire pluto[23697]: "S_Blr-Nj Tunnel" #3: Dead Peer Detection (RFC 3706) enabled 2013:10:18-23:50:36 Healthfire pluto[23697]: "S_Blr-Nj Tunnel" #3: sent MR3, ISAKMP SA established