Astaro LOG 03.01.2011 2011:01:03-15:42:13 gate pluto[11939]: "S_RZIVU_VSP" #228: cannot respond to IPsec SA request because no connection is known for lokales Netz/32===lokales Gateway === externes Gateway===externes netz/32 2011:01:03-15:42:13 gate pluto[11939]: "S_RZIVU_VSP" #228: sending encrypted notification INVALID_ID_INFORMATION to externes Gateway:500 2011:01:03-15:42:13 gate pluto[11939]: | **emit ISAKMP Message: 2011:01:03-15:42:13 gate pluto[11939]: | initiator cookie: 2011:01:03-15:42:13 gate pluto[11939]: | 66 43 0c a2 37 07 a1 05 2011:01:03-15:42:13 gate pluto[11939]: | responder cookie: 2011:01:03-15:42:13 gate pluto[11939]: | a9 db 14 16 f0 66 f8 0a 2011:01:03-15:42:13 gate pluto[11939]: | next payload type: ISAKMP_NEXT_HASH 2011:01:03-15:42:13 gate pluto[11939]: | ISAKMP version: ISAKMP Version 1.0 2011:01:03-15:42:13 gate pluto[11939]: | exchange type: ISAKMP_XCHG_INFO 2011:01:03-15:42:13 gate pluto[11939]: | flags: ISAKMP_FLAG_ENCRYPTION 2011:01:03-15:42:13 gate pluto[11939]: | message ID: 34 11 8e a4 2011:01:03-15:42:13 gate pluto[11939]: | ***emit ISAKMP Hash Payload: 2011:01:03-15:42:13 gate pluto[11939]: | next payload type: ISAKMP_NEXT_N 2011:01:03-15:42:13 gate pluto[11939]: | emitting 20 zero bytes of HASH into ISAKMP Hash Payload 2011:01:03-15:42:13 gate pluto[11939]: | emitting length of ISAKMP Hash Payload: 24 2011:01:03-15:42:13 gate pluto[11939]: | ***emit ISAKMP Notification Payload: 2011:01:03-15:42:13 gate pluto[11939]: | next payload type: ISAKMP_NEXT_NONE 2011:01:03-15:42:13 gate pluto[11939]: | DOI: ISAKMP_DOI_IPSEC 2011:01:03-15:42:13 gate pluto[11939]: | protocol ID: 1 2011:01:03-15:42:13 gate pluto[11939]: | SPI size: 0 2011:01:03-15:42:13 gate pluto[11939]: | Notify Message Type: INVALID_ID_INFORMATION 2011:01:03-15:42:13 gate pluto[11939]: | emitting 0 raw bytes of spi into ISAKMP Notification Payload 2011:01:03-15:42:13 gate pluto[11939]: | spi 2011:01:03-15:42:13 gate pluto[11939]: | emitting length of ISAKMP Notification Payload: 12 2011:01:03-15:42:13 gate pluto[11939]: | emitting 12 zero bytes of encryption padding into ISAKMP Message 2011:01:03-15:42:13 gate pluto[11939]: | emitting length of ISAKMP Message: 76 2011:01:03-15:42:13 gate pluto[11939]: | state transition function for STATE_QUICK_R0 failed: INVALID_ID_INFORMATION 2011:01:03-15:42:13 gate pluto[11939]: | next event EVENT_DPD in 1 seconds for #225 2011:01:03-15:42:13 gate pluto[11939]: | 2011:01:03-15:42:13 gate pluto[11939]: | *received 92 bytes from externes Netz:500 on eth1 2011:01:03-15:42:13 gate pluto[11939]: | **parse ISAKMP Message: 2011:01:03-15:42:13 gate pluto[11939]: | initiator cookie: 2011:01:03-15:42:13 gate pluto[11939]: | 9a e1 64 69 ff 2d 5d b0 2011:01:03-15:42:13 gate pluto[11939]: | responder cookie: 2011:01:03-15:42:13 gate pluto[11939]: | 91 3e ea 87 62 49 6e 32 2011:01:03-15:42:13 gate pluto[11939]: | next payload type: ISAKMP_NEXT_HASH 2011:01:03-15:42:13 gate pluto[11939]: | ISAKMP version: ISAKMP Version 1.0 2011:01:03-15:42:13 gate pluto[11939]: | exchange type: ISAKMP_XCHG_INFO 2011:01:03-15:42:13 gate pluto[11939]: | flags: ISAKMP_FLAG_ENCRYPTION 2011:01:03-15:42:13 gate pluto[11939]: | message ID: 6b 85 20 d0 2011:01:03-15:42:13 gate pluto[11939]: | length: 92 2011:01:03-15:42:13 gate pluto[11939]: | ICOOKIE: 9a e1 64 69 ff 2d 5d b0 2011:01:03-15:42:13 gate pluto[11939]: | RCOOKIE: 91 3e ea 87 62 49 6e 32 2011:01:03-15:42:13 gate pluto[11939]: | peer: d5 fc b8 f9 2011:01:03-15:42:13 gate pluto[11939]: | state hash entry 24 2011:01:03-15:42:13 gate pluto[11939]: | state object #2 found, in STATE_MAIN_I4 2011:01:03-15:42:13 gate pluto[11939]: | ***parse ISAKMP Hash Payload: 2011:01:03-15:42:13 gate pluto[11939]: | next payload type: ISAKMP_NEXT_N 2011:01:03-15:42:13 gate pluto[11939]: | length: 24 2011:01:03-15:42:13 gate pluto[11939]: | ***parse ISAKMP Notification Payload: 2011:01:03-15:42:13 gate pluto[11939]: | next payload type: ISAKMP_NEXT_NONE 2011:01:03-15:42:13 gate pluto[11939]: | length: 32 2011:01:03-15:42:13 gate pluto[11939]: | DOI: ISAKMP_DOI_IPSEC 2011:01:03-15:42:13 gate pluto[11939]: | protocol ID: 1 2011:01:03-15:42:13 gate pluto[11939]: | SPI size: 16 2011:01:03-15:42:13 gate pluto[11939]: | Notify Message Type: R_U_THERE 2011:01:03-15:42:13 gate pluto[11939]: | removing 8 bytes of padding 2011:01:03-15:42:13 gate pluto[11939]: | info: 9a e1 64 69 ff 2d 5d b0 91 3e ea 87 62 49 6e 32 2011:01:03-15:42:13 gate pluto[11939]: | 41 bb 98 10 2011:01:03-15:42:13 gate pluto[11939]: | received DPD notification R_U_THERE with seqno = 1102813200 2011:01:03-15:42:13 gate pluto[11939]: | **emit ISAKMP Message: 2011:01:03-15:42:13 gate pluto[11939]: | initiator cookie: 2011:01:03-15:42:13 gate pluto[11939]: | 9a e1 64 69 ff 2d 5d b0 2011:01:03-15:42:13 gate pluto[11939]: | responder cookie: 2011:01:03-15:42:13 gate pluto[11939]: | 91 3e ea 87 62 49 6e 32 2011:01:03-15:42:13 gate pluto[11939]: | next payload type: ISAKMP_NEXT_HASH 2011:01:03-15:42:13 gate pluto[11939]: | ISAKMP version: ISAKMP Version 1.0 2011:01:03-15:42:13 gate pluto[11939]: | exchange type: ISAKMP_XCHG_INFO 2011:01:03-15:42:13 gate pluto[11939]: | flags: ISAKMP_FLAG_ENCRYPTION 2011:01:03-15:42:13 gate pluto[11939]: | message ID: 01 a1 0d bc 2011:01:03-15:42:13 gate pluto[11939]: | ***emit ISAKMP Hash Payload: 2011:01:03-15:42:13 gate pluto[11939]: | next payload type: ISAKMP_NEXT_N 2011:01:03-15:42:13 gate pluto[11939]: | emitting 20 zero bytes of HASH into ISAKMP Hash Payload 2011:01:03-15:42:13 gate pluto[11939]: | emitting length of ISAKMP Hash Payload: 24 2011:01:03-15:42:13 gate pluto[11939]: | ***emit ISAKMP Notification Payload: 2011:01:03-15:42:13 gate pluto[11939]: | next payload type: ISAKMP_NEXT_NONE 2011:01:03-15:42:13 gate pluto[11939]: | DOI: ISAKMP_DOI_IPSEC 2011:01:03-15:42:13 gate pluto[11939]: | protocol ID: 1 2011:01:03-15:42:13 gate pluto[11939]: | SPI size: 16 2011:01:03-15:42:13 gate pluto[11939]: | Notify Message Type: R_U_THERE_ACK 2011:01:03-15:42:13 gate pluto[11939]: | emitting 8 raw bytes of notify icookie into ISAKMP Notification Payload 2011:01:03-15:42:13 gate pluto[11939]: | notify icookie 9a e1 64 69 ff 2d 5d b0 2011:01:03-15:42:13 gate pluto[11939]: | emitting 8 raw bytes of notify rcookie into ISAKMP Notification Payload 2011:01:03-15:42:13 gate pluto[11939]: | notify rcookie 91 3e ea 87 62 49 6e 32 2011:01:03-15:42:13 gate pluto[11939]: | emitting 4 raw bytes of notify data into ISAKMP Notification Payload 2011:01:03-15:42:13 gate pluto[11939]: | notify data 41 bb 98 10 2011:01:03-15:42:13 gate pluto[11939]: | emitting length of ISAKMP Notification Payload: 32 2011:01:03-15:42:13 gate pluto[11939]: | emitting 8 zero bytes of encryption padding into ISAKMP Message 2011:01:03-15:42:13 gate pluto[11939]: | emitting length of ISAKMP Message: 92 2011:01:03-15:42:13 gate pluto[11939]: | sent DPD notification R_U_THERE_ACK with seqno = 1102813200 2011:01:03-15:42:13 gate pluto[11939]: | next event EVENT_DPD in 1 seconds for #225 2011:01:03-15:42:14 gate pluto[11939]: | 2011:01:03-15:42:23 gate pluto[11939]: | 2011:01:03-15:42:23 gate pluto[11939]: | *received 284 bytes from externes Netz:500 on eth1 2011:01:03-15:42:23 gate pluto[11939]: | **parse ISAKMP Message: 2011:01:03-15:42:23 gate pluto[11939]: | initiator cookie: 2011:01:03-15:42:23 gate pluto[11939]: | 66 43 0c a2 37 07 a1 05 2011:01:03-15:42:23 gate pluto[11939]: | responder cookie: 2011:01:03-15:42:23 gate pluto[11939]: | a9 db 14 16 f0 66 f8 0a 2011:01:03-15:42:23 gate pluto[11939]: | next payload type: ISAKMP_NEXT_HASH 2011:01:03-15:42:23 gate pluto[11939]: | ISAKMP version: ISAKMP Version 1.0 2011:01:03-15:42:23 gate pluto[11939]: | exchange type: ISAKMP_XCHG_QUICK 2011:01:03-15:42:23 gate pluto[11939]: | flags: ISAKMP_FLAG_ENCRYPTION 2011:01:03-15:42:23 gate pluto[11939]: | message ID: b2 f5 38 a1 2011:01:03-15:42:23 gate pluto[11939]: | length: 284 2011:01:03-15:42:23 gate pluto[11939]: | ICOOKIE: 66 43 0c a2 37 07 a1 05 2011:01:03-15:42:23 gate pluto[11939]: | RCOOKIE: a9 db 14 16 f0 66 f8 0a 2011:01:03-15:42:23 gate pluto[11939]: | peer: d5 d1 6b b2 2011:01:03-15:42:23 gate pluto[11939]: | state hash entry 30 2011:01:03-15:42:23 gate pluto[11939]: | state object not found 2011:01:03-15:42:23 gate pluto[11939]: | ICOOKIE: 66 43 0c a2 37 07 a1 05 2011:01:03-15:42:23 gate pluto[11939]: | RCOOKIE: a9 db 14 16 f0 66 f8 0a 2011:01:03-15:42:23 gate pluto[11939]: | peer: d5 d1 6b b2 2011:01:03-15:42:23 gate pluto[11939]: | state hash entry 30 2011:01:03-15:42:23 gate pluto[11939]: | state object #228 found, in STATE_MAIN_I4 2011:01:03-15:42:23 gate pluto[11939]: "S_RZIVU_VSP" #228: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0xa138f5b2 (perhaps this is a duplicated packet) 2011:01:03-15:42:23 gate pluto[11939]: "S_RZIVU_VSP" #228: sending encrypted notification INVALID_MESSAGE_ID