2:08:24 vpn pluto[1615]: packet from 91.44.194.22:1717: size (1160) differs from size specified in ISAKMP HDR (1144) 2013:06:08-12:08:24 vpn pluto[1615]: packet from 91.44.194.22:1717: Cisco VPN client appends 16 surplus NULL bytes 2013:06:08-12:08:24 vpn pluto[1615]: packet from 91.44.194.22:1717: received Vendor ID payload [XAUTH] 2013:06:08-12:08:24 vpn pluto[1615]: packet from 91.44.194.22:1717: received Vendor ID payload [Dead Peer Detection] 2013:06:08-12:08:24 vpn pluto[1615]: packet from 91.44.194.22:1717: ignoring Vendor ID payload [FRAGMENTATION 80000000] 2013:06:08-12:08:24 vpn pluto[1615]: packet from 91.44.194.22:1717: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] 2013:06:08-12:08:24 vpn pluto[1615]: packet from 91.44.194.22:1717: ignoring Vendor ID payload [Cisco-Unity] 2013:06:08-12:08:24 vpn pluto[1615]: "D_REF_uwmFzpVPGk"[1] 91.44.194.22:1717 #6: responding to Main Mode from unknown peer 91.44.194.22:1717 2013:06:08-12:08:24 vpn pluto[1615]: "D_REF_uwmFzpVPGk"[1] 91.44.194.22:1717 #6: peer requested 2147483 seconds which exceeds our limit 86400 seconds 2013:06:08-12:08:24 vpn pluto[1615]: "D_REF_uwmFzpVPGk"[1] 91.44.194.22:1717 #6: lifetime reduced to 86400 seconds (todo: IPSEC_RESPONDER_LIFETIME notification) 2013:06:08-12:08:24 vpn pluto[1615]: packet from 91.44.194.22:1717: size (352) differs from size specified in ISAKMP HDR (336) 2013:06:08-12:08:24 vpn pluto[1615]: packet from 91.44.194.22:1717: Cisco VPN client appends 16 surplus NULL bytes 2013:06:08-12:08:24 vpn pluto[1615]: "D_REF_uwmFzpVPGk"[1] 91.44.194.22:1717 #6: ignoring Vendor ID payload [ffa963593e92013f547bffa3d6a05812] 2013:06:08-12:08:24 vpn pluto[1615]: "D_REF_uwmFzpVPGk"[1] 91.44.194.22:1717 #6: ignoring Vendor ID payload [Cisco-Unity] 2013:06:08-12:08:24 vpn pluto[1615]: "D_REF_uwmFzpVPGk"[1] 91.44.194.22:1717 #6: NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike-02/03: peer is NATed 2013:06:08-12:08:26 vpn pluto[1615]: "D_REF_uwmFzpVPGk"[1] 91.44.194.22:1717 #6: ignoring informational payload, type IPSEC_INITIAL_CONTACT 2013:06:08-12:08:26 vpn pluto[1615]: | protocol/port in Phase 1 ID Payload is 17/0. accepted with port_floating NAT-T 2013:06:08-12:08:26 vpn pluto[1615]: "D_REF_uwmFzpVPGk"[1] 91.44.194.22:1717 #6: Peer ID is ID_DER_ASN1_DN: 'C=NL, L=Heerhugowaard, O=Eddy Mulder, CN=Eddy Mulder, E=eddy@demuldriaan.org' 2013:06:08-12:08:26 vpn pluto[1615]: L0 - contentInfo: ASN.1 object smaller than 2 octets 2013:06:08-12:08:26 vpn pluto[1615]: "D_REF_uwmFzpVPGk"[1] 91.44.194.22:1717 #6: Syntax error in PKCS#7 wrapped X.509 certificates 2013:06:08-12:08:26 vpn pluto[1615]: "D_REF_uwmFzpVPGk"[1] 91.44.194.22:1717 #6: we have a cert and are sending it 2013:06:08-12:08:26 vpn pluto[1615]: | NAT-T: new mapping 91.44.194.22:1717/1718) 2013:06:08-12:08:26 vpn pluto[1615]: "D_REF_uwmFzpVPGk"[1] 91.44.194.22:1718 #6: sent MR3, ISAKMP SA established 2013:06:08-12:08:26 vpn pluto[1615]: "D_REF_uwmFzpVPGk"[1] 91.44.194.22:1718 #6: sending XAUTH request