Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 13 replies
  • Subscribers 27 subscribers
  • Views 2518 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UTM to XG VPN Invalid SPI error

Tomas Tyser1

We had IPsec VPN between UTM 9 and XG230 18.0.4 MR-4 where we are always getting the "[GARNER-LOGGING] (child_alert) ALERT: received IKE message with invalid SPI (9DF0E779) from other side"  We had this on cusomers site in production and the customer complained the VPN was not stable. When we checked the logs, we did see this invalid SPI messages. The HW/VPN is not used on customers site anymore, untill we are sure why we get those SPI errors. 

Now we have same setup in our lab, and we get the same errors. Although, it seems the VPN is stable, the whole time, its hard to argue with the customer thats VPN is working where there are errors in Log Viewer. I tried countless configurations(with IDs, without, XG as respond only, UTM as respond only), and its allways with SPI error at some point. Maybe someone here has the same experience. I could create support ticket, but I am not sure if its possible when this is now lab enviroment only.

Here is the log from XG:

=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2021.03.08 09:04:27 =~=~=~=~=~=~=~=~=~=~=~=

2021-03-08 09:05:46 19[CFG] rereading secrets
2021-03-08 09:05:46 19[CFG] loading secrets from '/_conf/ipsec/ipsec.secrets'
2021-03-08 09:05:46 19[CFG] loading secrets from '/_conf/ipsec/connections/XG_UTM.secrets'
2021-03-08 09:05:46 19[CFG] loaded IKE secret for 77.103.119.61 77.103.119.60
2021-03-08 09:05:46 23[CFG] rereading ca certificates from '/_conf/ipsec/ipsec.d/cacerts'
2021-03-08 09:05:46 09[CFG] received stroke: add connection 'XG_UTM-1'
2021-03-08 09:05:46 09[CFG] added configuration 'XG_UTM-1'
2021-03-08 09:05:49 21[CFG] rereading secrets
2021-03-08 09:05:49 21[CFG] loading secrets from '/_conf/ipsec/ipsec.secrets'
2021-03-08 09:05:49 21[CFG] loading secrets from '/_conf/ipsec/connections/XG_UTM.secrets'
2021-03-08 09:05:49 21[CFG] loaded IKE secret for 77.103.119.61 77.103.119.60
2021-03-08 09:05:49 11[CFG] rereading ca certificates from '/_conf/ipsec/ipsec.d/cacerts'
2021-03-08 09:05:49 09[CFG] vici initiate 'XG_UTM-1'
2021-03-08 09:05:49 15[IKE] <XG_UTM-1|836> ### queue_child invoking quick_mode_create
2021-03-08 09:05:49 15[IKE] <XG_UTM-1|836> ### quick_mode_create: 0x7f79e80020c0 config 0x7f79e00042d0
2021-03-08 09:05:49 15[IKE] <XG_UTM-1|836> initiating Main Mode IKE_SA XG_UTM-1[836] to 77.103.119.60
2021-03-08 09:05:49 15[ENC] <XG_UTM-1|836> generating ID_PROT request 0 [ SA V V V V V V ]
2021-03-08 09:05:49 15[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (260 bytes)
2021-03-08 09:05:49 26[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (156 bytes)
2021-03-08 09:05:49 26[ENC] <XG_UTM-1|836> parsed ID_PROT response 0 [ SA V V V V ]
2021-03-08 09:05:49 26[IKE] <XG_UTM-1|836> received strongSwan vendor ID
2021-03-08 09:05:49 26[IKE] <XG_UTM-1|836> received Cisco Unity vendor ID
2021-03-08 09:05:49 26[IKE] <XG_UTM-1|836> received XAuth vendor ID
2021-03-08 09:05:49 26[IKE] <XG_UTM-1|836> received DPD vendor ID
2021-03-08 09:05:49 26[ENC] <XG_UTM-1|836> generating ID_PROT request 0 [ KE No ]
2021-03-08 09:05:49 26[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (324 bytes)
2021-03-08 09:05:49 22[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (308 bytes)
2021-03-08 09:05:49 22[ENC] <XG_UTM-1|836> parsed ID_PROT response 0 [ KE No ]
2021-03-08 09:05:49 22[ENC] <XG_UTM-1|836> generating ID_PROT request 0 [ ID HASH ]
2021-03-08 09:05:49 22[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (92 bytes)
2021-03-08 09:05:49 11[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (76 bytes)
2021-03-08 09:05:49 11[ENC] <XG_UTM-1|836> parsed ID_PROT response 0 [ ID HASH ]
2021-03-08 09:05:49 11[IKE] <XG_UTM-1|836> IKE_SA XG_UTM-1[836] established between 77.103.119.61[77.103.119.61]...77.103.119.60[77.103.119.60]
2021-03-08 09:05:49 11[IKE] <XG_UTM-1|836> scheduling rekeying in 3428s
2021-03-08 09:05:49 11[IKE] <XG_UTM-1|836> maximum IKE_SA lifetime 3548s
2021-03-08 09:05:49 11[IKE] <XG_UTM-1|836> ### build_i: 0x7f79e80020c0 QM_INIT
2021-03-08 09:05:49 11[ENC] <XG_UTM-1|836> generating QUICK_MODE request 216487907 [ HASH SA No KE ID ID ]
2021-03-08 09:05:49 11[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (460 bytes)
2021-03-08 09:05:49 23[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (444 bytes)
2021-03-08 09:05:49 23[ENC] <XG_UTM-1|836> parsed QUICK_MODE response 216487907 [ HASH SA No KE ID ID ]
2021-03-08 09:05:49 23[IKE] <XG_UTM-1|836> ### process_i: 0x7f79e80020c0 QM_INIT
2021-03-08 09:05:49 23[IKE] <XG_UTM-1|836> CHILD_SA XG_UTM-1{1199} established with SPIs cccf8a86_i 0ed3f5ac_o and TS 172.16.16.0/24 === 192.168.200.0/24
2021-03-08 09:05:49 23[APP] <XG_UTM-1|836> [SSO] (sso_invoke_once) SSO is disabled.
2021-03-08 09:05:49 23[APP] <XG_UTM-1|836> [COP-UPDOWN] (ref_counting) ref_count: 2 to 3 ++ up ++ (172.16.16.0/24#192.168.200.0/24)
2021-03-08 09:05:49 23[APP] <XG_UTM-1|836> [COP-UPDOWN] (ref_counting_remote) ref_count_remote: 2 to 3 ++ up ++ (77.103.119.61#77.103.119.60)
2021-03-08 09:05:49 23[APP] <XG_UTM-1|836> [COP-UPDOWN] (cop_updown_invoke_once) UID: 836 Net: Local 77.103.119.61 Remote 77.103.119.60 Connection: XG_UTM Fullname: XG_UTM-1
2021-03-08 09:05:49 23[APP] <XG_UTM-1|836> [COP-UPDOWN] (cop_updown_invoke_once) Tunnel: User '' Peer-IP '' my-IP '' up-client
2021-03-08 09:05:49 23[IKE] <XG_UTM-1|836> ### build_i: 0x7f79e80020c0 QM_NEGOTIATED
2021-03-08 09:05:49 23[IKE] <XG_UTM-1|836> ### destroy: 0x7f79e80020c0
2021-03-08 09:05:49 31[APP] [COP-UPDOWN][DB] (db_conn_info) hostname: 'XG_UTM' result --> id: '3', mode: 'ntn', tunnel_type: '0', subnet_family:'0'
2021-03-08 09:05:49 23[ENC] <XG_UTM-1|836> generating QUICK_MODE request 216487907 [ HASH ]
2021-03-08 09:05:49 31[APP] [COP-UPDOWN] (do_cop_updown_invoke_once) !!SKIP!! IPsec IKE for remotes (77.103.119.61 to 77.103.119.60) already set up
2021-03-08 09:05:49 31[APP] [COP-UPDOWN] (do_cop_updown_invoke_once) !!SKIP!! IPsec SA for subnet (172.16.16.0/24 to 192.168.200.0/24) already set up
2021-03-08 09:05:49 23[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (76 bytes)
2021-03-08 09:06:05 29[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:06:05 29[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 4255813769 [ HASH N(DPD) ]
2021-03-08 09:06:05 29[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 2435449941 [ HASH N(DPD_ACK) ]
2021-03-08 09:06:05 29[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:06:35 24[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:06:35 24[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 3547552892 [ HASH N(DPD) ]
2021-03-08 09:06:35 24[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:06:35 14[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:06:35 14[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 1362767907 [ HASH N(DPD_ACK) ]
2021-03-08 09:07:05 07[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:07:05 07[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 4052894873 [ HASH N(DPD) ]
2021-03-08 09:07:05 07[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:07:05 09[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:07:05 09[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 2823472955 [ HASH N(DPD_ACK) ]
2021-03-08 09:07:35 28[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:07:35 28[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 4043924515 [ HASH N(DPD) ]
2021-03-08 09:07:35 28[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:07:35 13[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:07:35 13[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 149439310 [ HASH N(DPD_ACK) ]
2021-03-08 09:08:05 30[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:08:05 30[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 708458467 [ HASH N(DPD) ]
2021-03-08 09:08:05 30[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:08:05 07[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:08:05 07[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 3213648345 [ HASH N(DPD_ACK) ]
2021-03-08 09:08:35 15[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:08:35 15[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 706635398 [ HASH N(DPD) ]
2021-03-08 09:08:35 15[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:08:35 28[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:08:35 28[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 631662573 [ HASH N(DPD_ACK) ]
2021-03-08 09:09:05 15[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:09:05 15[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 2702684739 [ HASH N(DPD) ]
2021-03-08 09:09:05 15[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:09:05 28[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:09:05 28[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 1875917858 [ HASH N(DPD_ACK) ]
2021-03-08 09:09:35 17[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:09:35 17[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 677440121 [ HASH N(DPD) ]
2021-03-08 09:09:35 17[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:09:35 28[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:09:35 28[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 1607499054 [ HASH N(DPD_ACK) ]
2021-03-08 09:10:05 25[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:10:05 25[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 2371189619 [ HASH N(DPD) ]
2021-03-08 09:10:05 25[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:10:05 28[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:10:05 28[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 1869395256 [ HASH N(DPD_ACK) ]
2021-03-08 09:10:35 12[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:10:35 12[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 95818589 [ HASH N(DPD) ]
2021-03-08 09:10:35 12[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:10:35 28[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:10:35 28[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 993190930 [ HASH N(DPD_ACK) ]
2021-03-08 09:11:05 11[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:11:05 11[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 3879504938 [ HASH N(DPD) ]
2021-03-08 09:11:05 11[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:11:05 25[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:11:05 25[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 2274622561 [ HASH N(DPD_ACK) ]
2021-03-08 09:11:35 32[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:11:35 32[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 3435246995 [ HASH N(DPD) ]
2021-03-08 09:11:35 32[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:11:35 12[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:11:35 12[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 3991429787 [ HASH N(DPD_ACK) ]
2021-03-08 09:12:05 32[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:12:05 32[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 2931607465 [ HASH N(DPD) ]
2021-03-08 09:12:05 32[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:12:05 25[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:12:05 25[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 1616718512 [ HASH N(DPD_ACK) ]
2021-03-08 09:12:35 06[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:12:35 06[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 1383507692 [ HASH N(DPD) ]
2021-03-08 09:12:35 06[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:12:35 32[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:12:35 32[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 2425814524 [ HASH N(DPD_ACK) ]
2021-03-08 09:13:05 10[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:13:05 10[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 585461607 [ HASH N(DPD) ]
2021-03-08 09:13:05 10[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:13:05 32[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:13:05 32[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 2512892179 [ HASH N(DPD_ACK) ]
2021-03-08 09:13:35 10[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:13:35 10[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 105604648 [ HASH N(DPD) ]
2021-03-08 09:13:35 10[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:13:35 12[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:13:35 12[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 1290091794 [ HASH N(DPD_ACK) ]
2021-03-08 09:14:05 27[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:14:05 27[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 685347664 [ HASH N(DPD) ]
2021-03-08 09:14:05 27[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:14:05 10[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:14:05 10[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 2278433721 [ HASH N(DPD_ACK) ]
2021-03-08 09:14:35 05[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:14:35 05[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 3027373983 [ HASH N(DPD) ]
2021-03-08 09:14:35 05[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:14:35 32[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:14:35 32[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 3536299376 [ HASH N(DPD_ACK) ]
2021-03-08 09:15:05 05[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:15:05 05[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 1732066021 [ HASH N(DPD) ]
2021-03-08 09:15:05 05[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:15:05 27[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:15:05 27[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 4154933264 [ HASH N(DPD_ACK) ]
2021-03-08 09:15:35 19[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:15:35 19[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 2542383956 [ HASH N(DPD) ]
2021-03-08 09:15:35 19[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:15:35 10[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:15:35 10[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 195825227 [ HASH N(DPD_ACK) ]
2021-03-08 09:16:05 23[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:16:05 23[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 1059065576 [ HASH N(DPD) ]
2021-03-08 09:16:05 23[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:16:05 19[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:16:05 19[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 165541470 [ HASH N(DPD_ACK) ]
2021-03-08 09:16:35 31[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:16:35 31[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 3399075945 [ HASH N(DPD) ]
2021-03-08 09:16:35 31[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:16:35 19[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:16:35 19[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 3679449055 [ HASH N(DPD_ACK) ]
2021-03-08 09:17:05 24[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:17:05 24[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 1171968486 [ HASH N(DPD) ]
2021-03-08 09:17:05 24[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:17:05 31[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:17:05 31[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 3439488025 [ HASH N(DPD_ACK) ]
2021-03-08 09:17:35 29[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:17:35 29[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 1751014430 [ HASH N(DPD) ]
2021-03-08 09:17:35 29[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:17:35 31[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:17:35 31[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 315251753 [ HASH N(DPD_ACK) ]
2021-03-08 09:18:05 13[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:18:05 13[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 3612010173 [ HASH N(DPD) ]
2021-03-08 09:18:05 13[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 507583310 [ HASH N(DPD_ACK) ]
2021-03-08 09:18:05 13[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:18:35 13[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:18:35 13[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 148258455 [ HASH N(DPD) ]
2021-03-08 09:18:35 13[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:18:35 05[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:18:35 05[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 418180931 [ HASH N(DPD_ACK) ]
2021-03-08 09:19:05 08[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:19:05 08[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 943911058 [ HASH N(DPD) ]
2021-03-08 09:19:05 08[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:19:05 31[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:19:05 31[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 1140801697 [ HASH N(DPD_ACK) ]
2021-03-08 09:19:35 18[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:19:35 18[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 739643736 [ HASH N(DPD) ]
2021-03-08 09:19:35 18[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:19:35 07[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:19:35 07[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 435928091 [ HASH N(DPD_ACK) ]
2021-03-08 09:20:05 26[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:20:05 26[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 2340573041 [ HASH N(DPD) ]
2021-03-08 09:20:05 26[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:20:05 08[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:20:05 08[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 4165610419 [ HASH N(DPD_ACK) ]
2021-03-08 09:20:35 09[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:20:35 09[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 3226912929 [ HASH N(DPD) ]
2021-03-08 09:20:35 09[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:20:35 18[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:20:35 18[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 70854329 [ HASH N(DPD_ACK) ]
2021-03-08 09:21:05 09[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:21:05 09[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 1255350349 [ HASH N(DPD) ]
2021-03-08 09:21:05 09[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:21:05 08[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:21:05 08[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 3423482919 [ HASH N(DPD_ACK) ]
2021-03-08 09:21:35 22[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:21:35 22[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 911910892 [ HASH N(DPD) ]
2021-03-08 09:21:35 22[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:21:35 09[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:21:35 09[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 546970398 [ HASH N(DPD_ACK) ]
2021-03-08 09:22:05 27[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:22:05 27[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 2725018812 [ HASH N(DPD) ]
2021-03-08 09:22:05 27[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:22:05 09[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:22:05 09[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 952743328 [ HASH N(DPD_ACK) ]
2021-03-08 09:22:35 27[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:22:35 27[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 2276915105 [ HASH N(DPD) ]
2021-03-08 09:22:35 27[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:22:35 18[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:22:35 18[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 2668602217 [ HASH N(DPD_ACK) ]
2021-03-08 09:23:05 21[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:23:05 21[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 3199429359 [ HASH N(DPD) ]
2021-03-08 09:23:05 21[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:23:05 18[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:23:05 18[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 3018077548 [ HASH N(DPD_ACK) ]
2021-03-08 09:23:35 16[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:23:35 16[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 4070144916 [ HASH N(DPD) ]
2021-03-08 09:23:35 16[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:23:35 27[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:23:35 27[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 1928975779 [ HASH N(DPD_ACK) ]
2021-03-08 09:24:05 16[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:24:05 16[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 1475918402 [ HASH N(DPD) ]
2021-03-08 09:24:05 16[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:24:05 18[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:24:05 18[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 2176235220 [ HASH N(DPD_ACK) ]
2021-03-08 09:24:35 15[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:24:35 15[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 2217942809 [ HASH N(DPD) ]
2021-03-08 09:24:35 15[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:24:35 16[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:24:35 16[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 1663223160 [ HASH N(DPD_ACK) ]
2021-03-08 09:25:05 17[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:25:05 17[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 3492623299 [ HASH N(DPD) ]
2021-03-08 09:25:05 17[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:25:05 15[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:25:05 15[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 2165091830 [ HASH N(DPD_ACK) ]
2021-03-08 09:25:35 14[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:25:35 14[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 1199232419 [ HASH N(DPD) ]
2021-03-08 09:25:35 14[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:25:35 15[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:25:35 15[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 2147558189 [ HASH N(DPD_ACK) ]
2021-03-08 09:26:05 20[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:26:05 20[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 1046058648 [ HASH N(DPD) ]
2021-03-08 09:26:05 20[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:26:05 14[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:26:05 14[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 1744433523 [ HASH N(DPD_ACK) ]
2021-03-08 09:26:35 30[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:26:35 30[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 1955517868 [ HASH N(DPD) ]
2021-03-08 09:26:35 30[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:26:35 14[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:26:35 14[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 1264357139 [ HASH N(DPD_ACK) ]
2021-03-08 09:27:05 30[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:27:05 30[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 3510179180 [ HASH N(DPD) ]
2021-03-08 09:27:05 30[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:27:05 14[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:27:05 14[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 1087999347 [ HASH N(DPD_ACK) ]
2021-03-08 09:27:35 23[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:27:35 23[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 3780336913 [ HASH N(DPD) ]
2021-03-08 09:27:35 23[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:27:35 20[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:27:35 20[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 916750892 [ HASH N(DPD_ACK) ]
2021-03-08 09:28:05 22[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:28:05 22[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 597224006 [ HASH N(DPD) ]
2021-03-08 09:28:05 22[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:28:05 23[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:28:05 23[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 1153399800 [ HASH N(DPD_ACK) ]
2021-03-08 09:28:35 19[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:28:35 19[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 707813012 [ HASH N(DPD) ]
2021-03-08 09:28:35 19[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:28:35 23[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:28:35 23[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 3539206493 [ HASH N(DPD_ACK) ]
2021-03-08 09:29:05 25[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:29:05 25[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 1438844366 [ HASH N(DPD) ]
2021-03-08 09:29:05 25[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:29:05 22[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:29:05 22[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 1289825873 [ HASH N(DPD_ACK) ]
2021-03-08 09:29:35 25[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:29:35 25[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 3505992457 [ HASH N(DPD) ]
2021-03-08 09:29:35 25[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:29:35 22[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:29:35 22[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 1831003477 [ HASH N(DPD_ACK) ]
2021-03-08 09:30:05 25[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:30:05 25[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 71049017 [ HASH N(DPD) ]
2021-03-08 09:30:05 25[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:30:05 30[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:30:05 30[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 3880338459 [ HASH N(DPD_ACK) ]
2021-03-08 09:30:35 19[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:30:35 19[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 1571557171 [ HASH N(DPD) ]
2021-03-08 09:30:35 19[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:30:35 25[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:30:35 25[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 1326752732 [ HASH N(DPD_ACK) ]
2021-03-08 09:31:05 06[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:31:05 06[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 3427897291 [ HASH N(DPD) ]
2021-03-08 09:31:05 06[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:31:05 21[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:31:05 21[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 2528730121 [ HASH N(DPD_ACK) ]
2021-03-08 09:31:35 32[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:31:35 32[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 544782450 [ HASH N(DPD) ]
2021-03-08 09:31:35 32[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:31:35 25[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:31:35 25[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 303158991 [ HASH N(DPD_ACK) ]
2021-03-08 09:32:05 28[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:32:05 28[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 3235594086 [ HASH N(DPD) ]
2021-03-08 09:32:05 28[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:32:05 25[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:32:05 25[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 1707491253 [ HASH N(DPD_ACK) ]
2021-03-08 09:32:35 12[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:32:35 12[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 3901789904 [ HASH N(DPD) ]
2021-03-08 09:32:35 12[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:32:35 32[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:32:35 32[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 2102634587 [ HASH N(DPD_ACK) ]
2021-03-08 09:33:05 09[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:33:05 09[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 1177361811 [ HASH N(DPD) ]
2021-03-08 09:33:05 09[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 2283322114 [ HASH N(DPD_ACK) ]
2021-03-08 09:33:05 09[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:33:35 24[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:33:35 24[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 3009866551 [ HASH N(DPD) ]
2021-03-08 09:33:35 24[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 748842930 [ HASH N(DPD_ACK) ]
2021-03-08 09:33:35 24[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:34:05 13[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:34:05 13[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 3509734895 [ HASH N(DPD) ]
2021-03-08 09:34:05 13[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 3970913526 [ HASH N(DPD_ACK) ]
2021-03-08 09:34:05 13[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:34:35 10[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:34:35 10[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 2540972795 [ HASH N(DPD) ]
2021-03-08 09:34:35 10[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 1583602635 [ HASH N(DPD_ACK) ]
2021-03-08 09:34:35 10[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:35:05 31[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:35:05 31[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 1854094018 [ HASH N(DPD) ]
2021-03-08 09:35:05 31[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 4120466813 [ HASH N(DPD_ACK) ]
2021-03-08 09:35:05 31[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:35:35 11[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:35:35 11[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 804143120 [ HASH N(DPD) ]
2021-03-08 09:35:35 11[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 1538977817 [ HASH N(DPD_ACK) ]
2021-03-08 09:35:35 11[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:36:05 08[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:36:05 08[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 1830779259 [ HASH N(DPD) ]
2021-03-08 09:36:05 08[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 1820045805 [ HASH N(DPD_ACK) ]
2021-03-08 09:36:05 08[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:36:35 18[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:36:35 18[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 2855690603 [ HASH N(DPD) ]
2021-03-08 09:36:35 18[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 2093576179 [ HASH N(DPD_ACK) ]
2021-03-08 09:36:35 18[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:37:05 29[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:37:05 29[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 492619039 [ HASH N(DPD) ]
2021-03-08 09:37:05 29[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 648852772 [ HASH N(DPD_ACK) ]
2021-03-08 09:37:05 29[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:37:35 23[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:37:35 23[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 3182929194 [ HASH N(DPD) ]
2021-03-08 09:37:35 23[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 2788125767 [ HASH N(DPD_ACK) ]
2021-03-08 09:37:35 23[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:38:05 14[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:38:05 14[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 1439775102 [ HASH N(DPD) ]
2021-03-08 09:38:05 14[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 3737335288 [ HASH N(DPD_ACK) ]
2021-03-08 09:38:05 14[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:38:35 22[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:38:35 22[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 1975647614 [ HASH N(DPD) ]
2021-03-08 09:38:35 22[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 717356843 [ HASH N(DPD_ACK) ]
2021-03-08 09:38:35 22[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:39:05 20[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:39:05 20[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 908048408 [ HASH N(DPD) ]
2021-03-08 09:39:05 20[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 122909258 [ HASH N(DPD_ACK) ]
2021-03-08 09:39:05 20[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:39:35 32[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:39:35 32[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 4265496996 [ HASH N(DPD) ]
2021-03-08 09:39:35 32[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:39:35 16[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:39:35 16[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 792511627 [ HASH N(DPD_ACK) ]
2021-03-08 09:40:05 28[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:40:05 28[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 4234578753 [ HASH N(DPD) ]
2021-03-08 09:40:05 28[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:40:05 19[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:40:05 19[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 2601446735 [ HASH N(DPD_ACK) ]
2021-03-08 09:40:35 21[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:40:35 21[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 3168074106 [ HASH N(DPD) ]
2021-03-08 09:40:35 21[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:40:35 06[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:40:35 06[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 2994939033 [ HASH N(DPD_ACK) ]
2021-03-08 09:41:05 13[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:41:05 13[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 3706647987 [ HASH N(DPD) ]
2021-03-08 09:41:05 13[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:41:05 21[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:41:05 21[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 2327841083 [ HASH N(DPD_ACK) ]
2021-03-08 09:41:35 27[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:41:35 27[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 618438485 [ HASH N(DPD) ]
2021-03-08 09:41:35 27[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:41:35 06[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:41:35 06[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 489575334 [ HASH N(DPD_ACK) ]
2021-03-08 09:42:05 27[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:42:05 27[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 2273815896 [ HASH N(DPD) ]
2021-03-08 09:42:05 27[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:42:05 21[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:42:05 21[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 3003221769 [ HASH N(DPD_ACK) ]
2021-03-08 09:42:35 31[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:42:35 31[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 625614216 [ HASH N(DPD) ]
2021-03-08 09:42:35 31[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:42:35 06[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:42:35 06[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 2693014685 [ HASH N(DPD_ACK) ]
2021-03-08 09:43:05 30[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:43:05 30[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 2785433199 [ HASH N(DPD) ]
2021-03-08 09:43:05 30[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:43:05 06[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:43:05 06[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 1223496584 [ HASH N(DPD_ACK) ]
2021-03-08 09:43:35 08[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:43:35 08[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 150071253 [ HASH N(DPD) ]
2021-03-08 09:43:35 08[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:43:35 31[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:43:35 31[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 3860430660 [ HASH N(DPD_ACK) ]
2021-03-08 09:44:05 09[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:44:05 09[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 1847962482 [ HASH N(DPD) ]
2021-03-08 09:44:05 09[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:44:05 30[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:44:05 30[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 3468420606 [ HASH N(DPD_ACK) ]
2021-03-08 09:44:35 26[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:44:35 26[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 1720556327 [ HASH N(DPD) ]
2021-03-08 09:44:35 26[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:44:35 09[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:44:35 09[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 3844745869 [ HASH N(DPD_ACK) ]
2021-03-08 09:45:05 09[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:45:05 09[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 2978040388 [ HASH N(DPD) ]
2021-03-08 09:45:05 09[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:45:05 26[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:45:05 26[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 3067514806 [ HASH N(DPD_ACK) ]
2021-03-08 09:45:35 08[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:45:35 08[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 3337605854 [ HASH N(DPD) ]
2021-03-08 09:45:35 08[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:45:35 09[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:45:35 09[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 2523963493 [ HASH N(DPD_ACK) ]
2021-03-08 09:46:05 05[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:46:05 05[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 1989910993 [ HASH N(DPD) ]
2021-03-08 09:46:05 05[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:46:05 08[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:46:05 08[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 4226734785 [ HASH N(DPD_ACK) ]
2021-03-08 09:46:35 17[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:46:35 17[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 1090877747 [ HASH N(DPD) ]
2021-03-08 09:46:35 17[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:46:35 05[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:46:35 05[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 2423517532 [ HASH N(DPD_ACK) ]
2021-03-08 09:47:05 20[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:47:05 20[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 1488206128 [ HASH N(DPD) ]
2021-03-08 09:47:05 20[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:47:05 08[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:47:05 08[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 3625764646 [ HASH N(DPD_ACK) ]
2021-03-08 09:47:35 26[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:47:35 26[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 4025832435 [ HASH N(DPD) ]
2021-03-08 09:47:35 26[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:47:35 20[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:47:35 20[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 1455851998 [ HASH N(DPD_ACK) ]
2021-03-08 09:48:05 05[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:48:05 05[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 3889824189 [ HASH N(DPD) ]
2021-03-08 09:48:05 05[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 769794548 [ HASH N(DPD_ACK) ]
2021-03-08 09:48:05 05[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:48:35 11[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:48:35 11[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 3685735122 [ HASH N(DPD) ]
2021-03-08 09:48:35 11[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 3215583871 [ HASH N(DPD_ACK) ]
2021-03-08 09:48:35 11[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:49:05 24[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:49:05 24[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 3348166064 [ HASH N(DPD) ]
2021-03-08 09:49:05 24[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 2520301759 [ HASH N(DPD_ACK) ]
2021-03-08 09:49:05 24[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:49:35 08[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:49:35 08[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 3486934154 [ HASH N(DPD) ]
2021-03-08 09:49:35 08[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 2914263562 [ HASH N(DPD_ACK) ]
2021-03-08 09:49:35 08[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:50:05 29[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:50:05 29[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 3804125357 [ HASH N(DPD) ]
2021-03-08 09:50:05 29[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 1210798825 [ HASH N(DPD_ACK) ]
2021-03-08 09:50:05 29[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:50:35 14[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:50:35 14[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 682037989 [ HASH N(DPD) ]
2021-03-08 09:50:35 14[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 2376168810 [ HASH N(DPD_ACK) ]
2021-03-08 09:50:35 14[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:51:05 10[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:51:05 10[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 2884533384 [ HASH N(DPD) ]
2021-03-08 09:51:05 10[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 149545035 [ HASH N(DPD_ACK) ]
2021-03-08 09:51:05 10[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:51:35 25[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:51:35 25[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 2197476200 [ HASH N(DPD) ]
2021-03-08 09:51:35 25[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 78936037 [ HASH N(DPD_ACK) ]
2021-03-08 09:51:35 25[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:52:05 23[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:52:05 23[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 1685322347 [ HASH N(DPD) ]
2021-03-08 09:52:05 23[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 3772764681 [ HASH N(DPD_ACK) ]
2021-03-08 09:52:05 23[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:52:35 13[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:52:35 13[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 1206282306 [ HASH N(DPD) ]
2021-03-08 09:52:35 13[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 3691129737 [ HASH N(DPD_ACK) ]
2021-03-08 09:52:35 13[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:53:05 09[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:53:05 09[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 303059168 [ HASH N(DPD) ]
2021-03-08 09:53:05 09[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:53:05 19[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:53:05 19[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 1794908376 [ HASH N(DPD_ACK) ]
2021-03-08 09:53:35 16[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:53:35 16[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 526106321 [ HASH N(DPD) ]
2021-03-08 09:53:35 16[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:53:35 27[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:53:35 27[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 2611636958 [ HASH N(DPD_ACK) ]
2021-03-08 09:54:05 22[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:54:05 22[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 1577477109 [ HASH N(DPD) ]
2021-03-08 09:54:05 22[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:54:05 09[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:54:05 09[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 2384820466 [ HASH N(DPD_ACK) ]
2021-03-08 09:54:35 05[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:54:35 05[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 425168245 [ HASH N(DPD) ]
2021-03-08 09:54:35 05[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:54:35 22[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:54:35 22[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 1893599141 [ HASH N(DPD_ACK) ]
2021-03-08 09:55:05 15[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:55:05 15[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 1668146016 [ HASH N(DPD) ]
2021-03-08 09:55:05 15[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:55:05 09[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:55:05 09[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 1960912153 [ HASH N(DPD_ACK) ]
2021-03-08 09:55:35 11[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:55:35 11[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 2050384722 [ HASH N(DPD) ]
2021-03-08 09:55:35 11[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:55:35 05[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:55:35 05[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 4052879738 [ HASH N(DPD_ACK) ]
2021-03-08 09:56:05 29[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:56:05 29[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 4041341363 [ HASH N(DPD) ]
2021-03-08 09:56:05 29[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:56:05 09[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:56:05 09[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 2765814063 [ HASH N(DPD_ACK) ]
2021-03-08 09:56:35 21[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:56:35 21[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 397094795 [ HASH N(DPD) ]
2021-03-08 09:56:35 21[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:56:35 29[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:56:35 29[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 1072628906 [ HASH N(DPD_ACK) ]
2021-03-08 09:57:05 21[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:57:05 21[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 2546485652 [ HASH N(DPD) ]
2021-03-08 09:57:05 21[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:57:05 11[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:57:05 11[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 2941224941 [ HASH N(DPD_ACK) ]
2021-03-08 09:57:35 30[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:57:35 30[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 1921594789 [ HASH N(DPD) ]
2021-03-08 09:57:35 30[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:57:35 29[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:57:35 29[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 399425577 [ HASH N(DPD_ACK) ]
2021-03-08 09:58:05 17[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:58:05 17[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 2168376782 [ HASH N(DPD) ]
2021-03-08 09:58:05 17[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:58:05 21[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:58:05 21[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 1638659570 [ HASH N(DPD_ACK) ]
2021-03-08 09:58:35 26[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:58:35 26[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 3204878090 [ HASH N(DPD) ]
2021-03-08 09:58:35 26[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:58:35 21[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:58:35 21[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 1706947535 [ HASH N(DPD_ACK) ]
2021-03-08 09:59:05 31[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:59:05 31[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 3755525321 [ HASH N(DPD) ]
2021-03-08 09:59:05 31[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:59:05 30[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:59:05 30[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 1322366752 [ HASH N(DPD_ACK) ]
2021-03-08 09:59:35 20[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 09:59:35 20[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 2267677178 [ HASH N(DPD) ]
2021-03-08 09:59:35 20[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 09:59:35 30[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 09:59:35 30[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 58312910 [ HASH N(DPD_ACK) ]
2021-03-08 10:00:05 20[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 10:00:05 20[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 3581882379 [ HASH N(DPD) ]
2021-03-08 10:00:05 20[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 10:00:05 30[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 10:00:05 30[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 4051992596 [ HASH N(DPD_ACK) ]
2021-03-08 10:00:35 12[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 10:00:35 12[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 3952193613 [ HASH N(DPD) ]
2021-03-08 10:00:35 12[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 10:00:35 20[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 10:00:35 20[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 4107457038 [ HASH N(DPD_ACK) ]
2021-03-08 10:01:05 06[IKE] <XG_UTM-1|836> sending DPD request
2021-03-08 10:01:05 06[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 3837067599 [ HASH N(DPD) ]
2021-03-08 10:01:05 06[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 10:01:05 12[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 10:01:05 12[ENC] <XG_UTM-1|836> parsed INFORMATIONAL_V1 request 2246609640 [ HASH N(DPD_ACK) ]
2021-03-08 10:01:19 29[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (444 bytes)
2021-03-08 10:01:19 29[ENC] <XG_UTM-1|836> parsed QUICK_MODE request 99089707 [ HASH SA No KE ID ID ]
2021-03-08 10:01:19 29[IKE] <XG_UTM-1|836> ### process_request invoking quick_mode_create
2021-03-08 10:01:19 29[IKE] <XG_UTM-1|836> ### quick_mode_create: 0x7f79cc003d40 config (nil)
2021-03-08 10:01:19 29[IKE] <XG_UTM-1|836> ### process_r: 0x7f79cc003d40 QM_INIT
2021-03-08 10:01:19 05[NET] <837> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (156 bytes)
2021-03-08 10:01:19 05[ENC] <837> parsed ID_PROT request 0 [ SA V V V V ]
2021-03-08 10:01:19 05[IKE] <837> received strongSwan vendor ID
2021-03-08 10:01:19 05[IKE] <837> received Cisco Unity vendor ID
2021-03-08 10:01:19 05[IKE] <837> received XAuth vendor ID
2021-03-08 10:01:19 05[IKE] <837> received DPD vendor ID
2021-03-08 10:01:19 05[IKE] <837> 77.103.119.60 is initiating a Main Mode IKE_SA
2021-03-08 10:01:19 05[ENC] <837> generating ID_PROT response 0 [ SA V V V ]
2021-03-08 10:01:19 05[NET] <837> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (136 bytes)
2021-03-08 10:01:19 29[IKE] <XG_UTM-1|836> detected rekeying of CHILD_SA XG_UTM-1{1199}
2021-03-08 10:01:19 29[IKE] <XG_UTM-1|836> ### build_r: 0x7f79cc003d40 QM_INIT
2021-03-08 10:01:19 29[ENC] <XG_UTM-1|836> generating QUICK_MODE response 99089707 [ HASH SA No KE ID ID ]
2021-03-08 10:01:19 29[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (460 bytes)
2021-03-08 10:01:19 22[NET] <837> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (308 bytes)
2021-03-08 10:01:19 22[ENC] <837> parsed ID_PROT request 0 [ KE No ]
2021-03-08 10:01:19 22[ENC] <837> generating ID_PROT response 0 [ KE No ]
2021-03-08 10:01:19 22[NET] <837> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (324 bytes)
2021-03-08 10:01:19 15[NET] <XG_UTM-1|836> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (76 bytes)
2021-03-08 10:01:19 15[ENC] <XG_UTM-1|836> parsed QUICK_MODE request 99089707 [ HASH ]
2021-03-08 10:01:19 15[IKE] <XG_UTM-1|836> ### process_r: 0x7f79cc003d40 QM_NEGOTIATED
2021-03-08 10:01:19 15[IKE] <XG_UTM-1|836> CHILD_SA XG_UTM-1{1200} established with SPIs ce12b374_i 0b325b86_o and TS 172.16.16.0/24 === 192.168.200.0/24
2021-03-08 10:01:19 15[IKE] <XG_UTM-1|836> ### destroy: 0x7f79cc003d40
2021-03-08 10:01:19 32[NET] <837> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (76 bytes)
2021-03-08 10:01:19 32[ENC] <837> parsed ID_PROT request 0 [ ID HASH ]
2021-03-08 10:01:19 32[CFG] <837> looking for pre-shared key peer configs matching 77.103.119.61...77.103.119.60[77.103.119.60]
2021-03-08 10:01:19 32[CFG] <837> selected peer config "XG_UTM-1"
2021-03-08 10:01:19 32[IKE] <XG_UTM-1|837> IKE_SA XG_UTM-1[837] established between 77.103.119.61[77.103.119.61]...77.103.119.60[77.103.119.60]
2021-03-08 10:01:19 32[IKE] <XG_UTM-1|837> scheduling rekeying in 3437s
2021-03-08 10:01:19 32[IKE] <XG_UTM-1|837> maximum IKE_SA lifetime 3557s
2021-03-08 10:01:19 32[ENC] <XG_UTM-1|837> generating ID_PROT response 0 [ ID HASH ]
2021-03-08 10:01:19 32[NET] <XG_UTM-1|837> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (92 bytes)
2021-03-08 10:01:19 28[IKE] <XG_UTM-1|836> detected reauth of existing IKE_SA, adopting 2 children, 0 child tasks, and 0 virtual IPs
2021-03-08 10:01:19 28[IKE] <XG_UTM-1|837> ike XG_UTM-1[837] adopted 0 children in REKEYING state
2021-03-08 10:01:29 18[IKE] <XG_UTM-1|836> deleting IKE_SA XG_UTM-1[836] between 77.103.119.61[77.103.119.61]...77.103.119.60[77.103.119.60]
2021-03-08 10:01:29 18[IKE] <XG_UTM-1|836> sending DELETE for IKE_SA XG_UTM-1[836]
2021-03-08 10:01:29 18[ENC] <XG_UTM-1|836> generating INFORMATIONAL_V1 request 2542554302 [ HASH D ]
2021-03-08 10:01:29 18[NET] <XG_UTM-1|836> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 10:01:29 25[DMN] [GARNER-LOGGING] (child_alert) ALERT: received IKE message with invalid SPI (9DF0E779) from other side
2021-03-08 10:01:34 14[NET] <XG_UTM-1|837> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 10:01:34 14[ENC] <XG_UTM-1|837> parsed INFORMATIONAL_V1 request 3812759243 [ HASH N(DPD) ]
2021-03-08 10:01:34 14[ENC] <XG_UTM-1|837> generating INFORMATIONAL_V1 request 3929104981 [ HASH N(DPD_ACK) ]
2021-03-08 10:01:34 14[NET] <XG_UTM-1|837> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 10:02:04 18[IKE] <XG_UTM-1|837> sending DPD request
2021-03-08 10:02:04 18[ENC] <XG_UTM-1|837> generating INFORMATIONAL_V1 request 2060863151 [ HASH N(DPD) ]
2021-03-08 10:02:04 18[NET] <XG_UTM-1|837> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 10:02:04 12[NET] <XG_UTM-1|837> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 10:02:04 12[ENC] <XG_UTM-1|837> parsed INFORMATIONAL_V1 request 2577984188 [ HASH N(DPD_ACK) ]
2021-03-08 10:02:14 05[KNL] creating rekey job for CHILD_SA ESP/0xcccf8a86/77.103.119.61
2021-03-08 10:02:34 12[IKE] <XG_UTM-1|837> sending DPD request
2021-03-08 10:02:34 12[ENC] <XG_UTM-1|837> generating INFORMATIONAL_V1 request 1825659162 [ HASH N(DPD) ]
2021-03-08 10:02:34 12[NET] <XG_UTM-1|837> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 10:02:34 06[NET] <XG_UTM-1|837> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 10:02:34 06[ENC] <XG_UTM-1|837> parsed INFORMATIONAL_V1 request 2528577960 [ HASH N(DPD_ACK) ]
2021-03-08 10:02:55 12[KNL] creating rekey job for CHILD_SA ESP/0x0ed3f5ac/77.103.119.60
2021-03-08 10:03:04 17[NET] <XG_UTM-1|837> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 10:03:04 17[ENC] <XG_UTM-1|837> parsed INFORMATIONAL_V1 request 1477658551 [ HASH N(DPD) ]
2021-03-08 10:03:04 17[ENC] <XG_UTM-1|837> generating INFORMATIONAL_V1 request 3182357239 [ HASH N(DPD_ACK) ]
2021-03-08 10:03:04 17[NET] <XG_UTM-1|837> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 10:03:34 21[NET] <XG_UTM-1|837> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 10:03:34 21[ENC] <XG_UTM-1|837> parsed INFORMATIONAL_V1 request 2885802105 [ HASH N(DPD) ]
2021-03-08 10:03:34 21[ENC] <XG_UTM-1|837> generating INFORMATIONAL_V1 request 1109492914 [ HASH N(DPD_ACK) ]
2021-03-08 10:03:34 21[NET] <XG_UTM-1|837> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
2021-03-08 10:04:04 07[NET] <XG_UTM-1|837> received packet: from 77.103.119.60[500] to 77.103.119.61[500] (108 bytes)
2021-03-08 10:04:04 07[ENC] <XG_UTM-1|837> parsed INFORMATIONAL_V1 request 2123951420 [ HASH N(DPD) ]
2021-03-08 10:04:04 07[ENC] <XG_UTM-1|837> generating INFORMATIONAL_V1 request 564856685 [ HASH N(DPD_ACK) ]
2021-03-08 10:04:04 07[NET] <XG_UTM-1|837> sending packet: from 77.103.119.61[500] to 77.103.119.60[500] (108 bytes)
^C
XG230_WP02_SFOS 18.0.4 MR-4#



This thread was automatically locked due to age.
Parents
  • 0

    Hello there,

    Thank you for contacting the Sophos Community.

    I would be checking on the UTM side rather than the XG, what do you see in the UTM when the XG receives this?

    Also, double-check the DPD action is set correctly according to the Gateway type

    Respond Only = DPD should be disconnect

    Initiate the Connection = Re-initiate

    In the UTM try enabling Support path MTU discovery

    Regards,

  • 0 in reply to emmosophos

    Hi, I did check all, I think its correct. I did open support ticket 03729078 and I have last day in the lab where I can test it. After that it will be unsolved mistery :) 

  • 0 in reply to Tomas Tyser1

    Hello Tomas,

    Thank you for the Case ID.

    I left a note in the case if you enable Debugging in the UTM side for the IPSec, do you see anything in the logs,at the time the XG receives the SPI?

    Do you have any errors in the interface of the UTM? #ifconfig

    I have two tunnels running from a UTM to two different XGs one running v17 and the other v18, I don't have this error in any of them.

    Take a look at my policies, maybe this could help

    Both XGs are set to Respond and both DPD are set to Disconnect.

    Regards,

  • 0 in reply to emmosophos

    Here is after last reconfiguration. I can attach the screens of how its configured into the support case.

    Here is the debug log from UTM around that time:

    2021:03:10-09:18:06 test pluto[28417]: |
    2021:03:10-09:18:06 test pluto[28417]: | *received 17 bytes from 128.116.27.229:56910 on eth1
    2021:03:10-09:18:06 test pluto[28417]: packet from 128.116.27.229:56910: not enough room in input packet for ISAKMP Message
    2021:03:10-09:18:06 test pluto[28417]: packet from 128.116.27.229:56910: sending notification PAYLOAD_MALFORMED to 128.116.27.229:56910
    2021:03:10-09:18:06 test pluto[28417]: | **emit ISAKMP Message:
    2021:03:10-09:18:06 test pluto[28417]: | initiator cookie:
    2021:03:10-09:18:06 test pluto[28417]: | 00 00 00 00 00 00 00 00
    2021:03:10-09:18:06 test pluto[28417]: | responder cookie:
    2021:03:10-09:18:06 test pluto[28417]: | 00 00 00 00 00 00 00 00
    2021:03:10-09:18:06 test pluto[28417]: | next payload type: ISAKMP_NEXT_N
    2021:03:10-09:18:06 test pluto[28417]: | ISAKMP version: ISAKMP Version 1.0
    2021:03:10-09:18:06 test pluto[28417]: | exchange type: ISAKMP_XCHG_INFO
    2021:03:10-09:18:06 test pluto[28417]: | flags: none
    2021:03:10-09:18:06 test pluto[28417]: | message ID: 00 00 00 00
    2021:03:10-09:18:06 test pluto[28417]: | ***emit ISAKMP Notification Payload:
    2021:03:10-09:18:06 test pluto[28417]: | next payload type: ISAKMP_NEXT_NONE
    2021:03:10-09:18:06 test pluto[28417]: | DOI: ISAKMP_DOI_IPSEC
    2021:03:10-09:18:06 test pluto[28417]: | protocol ID: 1
    2021:03:10-09:18:06 test pluto[28417]: | SPI size: 0
    2021:03:10-09:18:06 test pluto[28417]: | Notify Message Type: PAYLOAD_MALFORMED
    2021:03:10-09:18:06 test pluto[28417]: | emitting 0 raw bytes of spi into ISAKMP Notification Payload
    2021:03:10-09:18:06 test pluto[28417]: | spi
    2021:03:10-09:18:06 test pluto[28417]: | emitting length of ISAKMP Notification Payload: 12
    2021:03:10-09:18:06 test pluto[28417]: | emitting length of ISAKMP Message: 40
    2021:03:10-09:18:06 test pluto[28417]: | next event EVENT_SA_REPLACE in 257 seconds for #9
    2021:03:10-09:18:09 test pluto[28417]: |
    2021:03:10-09:18:09 test pluto[28417]: | *received 17 bytes from 128.116.27.229:56910 on eth1
    2021:03:10-09:18:09 test pluto[28417]: packet from 128.116.27.229:56910: not enough room in input packet for ISAKMP Message
    2021:03:10-09:18:09 test pluto[28417]: packet from 128.116.27.229:56910: sending notification PAYLOAD_MALFORMED to 128.116.27.229:56910
    2021:03:10-09:18:09 test pluto[28417]: | **emit ISAKMP Message:
    2021:03:10-09:18:09 test pluto[28417]: | initiator cookie:
    2021:03:10-09:18:09 test pluto[28417]: | 00 00 00 00 00 00 00 00
    2021:03:10-09:18:09 test pluto[28417]: | responder cookie:
    2021:03:10-09:18:09 test pluto[28417]: | 00 00 00 00 00 00 00 00
    2021:03:10-09:18:09 test pluto[28417]: | next payload type: ISAKMP_NEXT_N
    2021:03:10-09:18:09 test pluto[28417]: | ISAKMP version: ISAKMP Version 1.0
    2021:03:10-09:18:09 test pluto[28417]: | exchange type: ISAKMP_XCHG_INFO
    2021:03:10-09:18:09 test pluto[28417]: | flags: none
    2021:03:10-09:18:09 test pluto[28417]: | message ID: 00 00 00 00
    2021:03:10-09:18:09 test pluto[28417]: | ***emit ISAKMP Notification Payload:
    2021:03:10-09:18:09 test pluto[28417]: | next payload type: ISAKMP_NEXT_NONE
    2021:03:10-09:18:09 test pluto[28417]: | DOI: ISAKMP_DOI_IPSEC
    2021:03:10-09:18:09 test pluto[28417]: | protocol ID: 1
    2021:03:10-09:18:09 test pluto[28417]: | SPI size: 0
    2021:03:10-09:18:09 test pluto[28417]: | Notify Message Type: PAYLOAD_MALFORMED
    2021:03:10-09:18:09 test pluto[28417]: | emitting 0 raw bytes of spi into ISAKMP Notification Payload
    2021:03:10-09:18:09 test pluto[28417]: | spi
    2021:03:10-09:18:09 test pluto[28417]: | emitting length of ISAKMP Notification Payload: 12
    2021:03:10-09:18:09 test pluto[28417]: | emitting length of ISAKMP Message: 40
    2021:03:10-09:18:09 test pluto[28417]: | next event EVENT_SA_REPLACE in 254 seconds for #9
    2021:03:10-09:18:12 test pluto[28417]: |
    2021:03:10-09:18:12 test pluto[28417]: | *received 108 bytes from 77.103.119.61:500 on eth1
    2021:03:10-09:18:12 test pluto[28417]: | **parse ISAKMP Message:
    2021:03:10-09:18:12 test pluto[28417]: | initiator cookie:
    2021:03:10-09:18:12 test pluto[28417]: | 57 56 ef 0f a9 11 69 cd
    2021:03:10-09:18:12 test pluto[28417]: | responder cookie:
    2021:03:10-09:18:12 test pluto[28417]: | f2 3d f5 c6 c4 35 2e 53
    2021:03:10-09:18:12 test pluto[28417]: | next payload type: ISAKMP_NEXT_HASH
    2021:03:10-09:18:12 test pluto[28417]: | ISAKMP version: ISAKMP Version 1.0
    2021:03:10-09:18:12 test pluto[28417]: | exchange type: ISAKMP_XCHG_INFO
    2021:03:10-09:18:12 test pluto[28417]: | flags: ISAKMP_FLAG_ENCRYPTION
    2021:03:10-09:18:12 test pluto[28417]: | message ID: f4 d0 e1 85
    2021:03:10-09:18:12 test pluto[28417]: | length: 108
    2021:03:10-09:18:12 test pluto[28417]: | ICOOKIE: 57 56 ef 0f a9 11 69 cd
    2021:03:10-09:18:12 test pluto[28417]: | RCOOKIE: f2 3d f5 c6 c4 35 2e 53
    2021:03:10-09:18:12 test pluto[28417]: | peer: 58 67 db 3d
    2021:03:10-09:18:12 test pluto[28417]: | state hash entry 0
    2021:03:10-09:18:12 test pluto[28417]: | state object #9 found, in STATE_MAIN_R3
    2021:03:10-09:18:12 test pluto[28417]: | ***parse ISAKMP Hash Payload:
    2021:03:10-09:18:12 test pluto[28417]: | next payload type: ISAKMP_NEXT_D
    2021:03:10-09:18:12 test pluto[28417]: | length: 36
    2021:03:10-09:18:12 test pluto[28417]: | ***parse ISAKMP Delete Payload:
    2021:03:10-09:18:12 test pluto[28417]: | next payload type: ISAKMP_NEXT_NONE
    2021:03:10-09:18:12 test pluto[28417]: | length: 28
    2021:03:10-09:18:12 test pluto[28417]: | DOI: ISAKMP_DOI_IPSEC
    2021:03:10-09:18:12 test pluto[28417]: | protocol ID: 1
    2021:03:10-09:18:12 test pluto[28417]: | SPI size: 16
    2021:03:10-09:18:12 test pluto[28417]: | number of SPIs: 1
    2021:03:10-09:18:12 test pluto[28417]: | removing 16 bytes of padding
    2021:03:10-09:18:12 test pluto[28417]: | ICOOKIE: 57 56 ef 0f a9 11 69 cd
    2021:03:10-09:18:12 test pluto[28417]: | RCOOKIE: f2 3d f5 c6 c4 35 2e 53
    2021:03:10-09:18:12 test pluto[28417]: | peer: 58 67 db 3d
    2021:03:10-09:18:12 test pluto[28417]: | state hash entry 0
    2021:03:10-09:18:12 test pluto[28417]: | state object #9 found, in STATE_MAIN_R3
    2021:03:10-09:18:12 test pluto[28417]: "S_Metal Test"[4] 77.103.119.61 #9: received Delete SA payload: deleting ISAKMP State #9
    2021:03:10-09:18:12 test pluto[28417]: | HA System: can not delete ha_state #9
    2021:03:10-09:18:12 test pluto[28417]: | **emit ISAKMP Message:
    2021:03:10-09:18:12 test pluto[28417]: | initiator cookie:
    2021:03:10-09:18:12 test pluto[28417]: | 57 56 ef 0f a9 11 69 cd
    2021:03:10-09:18:12 test pluto[28417]: | responder cookie:
    2021:03:10-09:18:12 test pluto[28417]: | f2 3d f5 c6 c4 35 2e 53
    2021:03:10-09:18:12 test pluto[28417]: | next payload type: ISAKMP_NEXT_HASH
    2021:03:10-09:18:12 test pluto[28417]: | ISAKMP version: ISAKMP Version 1.0
    2021:03:10-09:18:12 test pluto[28417]: | exchange type: ISAKMP_XCHG_INFO
    2021:03:10-09:18:12 test pluto[28417]: | flags: ISAKMP_FLAG_ENCRYPTION
    2021:03:10-09:18:12 test pluto[28417]: | message ID: 03 35 80 4e
    2021:03:10-09:18:12 test pluto[28417]: | ***emit ISAKMP Hash Payload:
    2021:03:10-09:18:12 test pluto[28417]: | next payload type: ISAKMP_NEXT_D
    2021:03:10-09:18:12 test pluto[28417]: | emitting 32 zero bytes of HASH(1) into ISAKMP Hash Payload
    2021:03:10-09:18:12 test pluto[28417]: | emitting length of ISAKMP Hash Payload: 36
    2021:03:10-09:18:12 test pluto[28417]: | ***emit ISAKMP Delete Payload:
    2021:03:10-09:18:12 test pluto[28417]: | next payload type: ISAKMP_NEXT_NONE
    2021:03:10-09:18:12 test pluto[28417]: | DOI: ISAKMP_DOI_IPSEC
    2021:03:10-09:18:12 test pluto[28417]: | protocol ID: 1
    2021:03:10-09:18:12 test pluto[28417]: | SPI size: 16
    2021:03:10-09:18:12 test pluto[28417]: | number of SPIs: 1
    2021:03:10-09:18:12 test pluto[28417]: | emitting 16 raw bytes of delete payload into ISAKMP Delete Payload
    2021:03:10-09:18:12 test pluto[28417]: | delete payload 57 56 ef 0f a9 11 69 cd f2 3d f5 c6 c4 35 2e 53
    2021:03:10-09:18:12 test pluto[28417]: | emitting length of ISAKMP Delete Payload: 28
    2021:03:10-09:18:12 test pluto[28417]: | emitting length of ISAKMP Message: 92
    2021:03:10-09:18:12 test pluto[28417]: | del: 57 56 ef 0f a9 11 69 cd f2 3d f5 c6 c4 35 2e 53
    2021:03:10-09:18:12 test pluto[28417]: | next event EVENT_REINIT_SECRET in 2431 seconds
    2021:03:10-09:18:32 test pluto[28417]: |
    2021:03:10-09:18:32 test pluto[28417]: | *received 108 bytes from 77.103.119.61:500 on eth1
    2021:03:10-09:18:32 test pluto[28417]: | **parse ISAKMP Message:
    2021:03:10-09:18:32 test pluto[28417]: | initiator cookie:
    2021:03:10-09:18:32 test pluto[28417]: | de 7a 99 bf cd 33 f7 47
    2021:03:10-09:18:32 test pluto[28417]: | responder cookie:
    2021:03:10-09:18:32 test pluto[28417]: | f7 54 27 d8 8f bb 15 39
    2021:03:10-09:18:32 test pluto[28417]: | next payload type: ISAKMP_NEXT_HASH
    2021:03:10-09:18:32 test pluto[28417]: | ISAKMP version: ISAKMP Version 1.0
    2021:03:10-09:18:32 test pluto[28417]: | exchange type: ISAKMP_XCHG_INFO
    2021:03:10-09:18:32 test pluto[28417]: | flags: ISAKMP_FLAG_ENCRYPTION
    2021:03:10-09:18:32 test pluto[28417]: | message ID: 8e 23 5a de
    2021:03:10-09:18:32 test pluto[28417]: | length: 108
    2021:03:10-09:18:32 test pluto[28417]: | ICOOKIE: de 7a 99 bf cd 33 f7 47
    2021:03:10-09:18:32 test pluto[28417]: | RCOOKIE: f7 54 27 d8 8f bb 15 39
    2021:03:10-09:18:32 test pluto[28417]: | peer: 58 67 db 3d
    2021:03:10-09:18:32 test pluto[28417]: | state hash entry 9
    2021:03:10-09:18:32 test pluto[28417]: | state object #13 found, in STATE_MAIN_R3
    2021:03:10-09:18:32 test pluto[28417]: | ***parse ISAKMP Hash Payload:
    2021:03:10-09:18:32 test pluto[28417]: | next payload type: ISAKMP_NEXT_N
    2021:03:10-09:18:32 test pluto[28417]: | length: 36
    2021:03:10-09:18:32 test pluto[28417]: | ***parse ISAKMP Notification Payload:
    2021:03:10-09:18:32 test pluto[28417]: | next payload type: ISAKMP_NEXT_NONE
    2021:03:10-09:18:32 test pluto[28417]: | length: 32
    2021:03:10-09:18:32 test pluto[28417]: | DOI: ISAKMP_DOI_IPSEC
    2021:03:10-09:18:32 test pluto[28417]: | protocol ID: 1
    2021:03:10-09:18:32 test pluto[28417]: | SPI size: 16
    2021:03:10-09:18:32 test pluto[28417]: | Notify Message Type: R_U_THERE
    2021:03:10-09:18:32 test pluto[28417]: | removing 12 bytes of padding
    2021:03:10-09:18:32 test pluto[28417]: | info: de 7a 99 bf cd 33 f7 47 f7 54 27 d8 8f bb 15 39
    2021:03:10-09:18:32 test pluto[28417]: | 34 a8 64 ea
    2021:03:10-09:18:32 test pluto[28417]: | received DPD notification R_U_THERE with seqno = 883451114
    2021:03:10-09:18:32 test pluto[28417]: | **emit ISAKMP Message:
    2021:03:10-09:18:32 test pluto[28417]: | initiator cookie:
    2021:03:10-09:18:32 test pluto[28417]: | de 7a 99 bf cd 33 f7 47
    2021:03:10-09:18:32 test pluto[28417]: | responder cookie:
    2021:03:10-09:18:32 test pluto[28417]: | f7 54 27 d8 8f bb 15 39
    2021:03:10-09:18:32 test pluto[28417]: | next payload type: ISAKMP_NEXT_HASH
    2021:03:10-09:18:32 test pluto[28417]: | ISAKMP version: ISAKMP Version 1.0
    2021:03:10-09:18:32 test pluto[28417]: | exchange type: ISAKMP_XCHG_INFO
    2021:03:10-09:18:32 test pluto[28417]: | flags: ISAKMP_FLAG_ENCRYPTION
    2021:03:10-09:18:32 test pluto[28417]: | message ID: 05 61 7b f5
    2021:03:10-09:18:32 test pluto[28417]: | ***emit ISAKMP Hash Payload:
    2021:03:10-09:18:32 test pluto[28417]: | next payload type: ISAKMP_NEXT_N
    2021:03:10-09:18:32 test pluto[28417]: | emitting 32 zero bytes of HASH into ISAKMP Hash Payload
    2021:03:10-09:18:32 test pluto[28417]: | emitting length of ISAKMP Hash Payload: 36
    2021:03:10-09:18:32 test pluto[28417]: | ***emit ISAKMP Notification Payload:
    2021:03:10-09:18:32 test pluto[28417]: | next payload type: ISAKMP_NEXT_NONE
    2021:03:10-09:18:32 test pluto[28417]: | DOI: ISAKMP_DOI_IPSEC
    2021:03:10-09:18:32 test pluto[28417]: | protocol ID: 1
    2021:03:10-09:18:32 test pluto[28417]: | SPI size: 16
    2021:03:10-09:18:32 test pluto[28417]: | Notify Message Type: R_U_THERE_ACK
    2021:03:10-09:18:32 test pluto[28417]: | emitting 8 raw bytes of notify icookie into ISAKMP Notification Payload
    2021:03:10-09:18:32 test pluto[28417]: | notify icookie de 7a 99 bf cd 33 f7 47
    2021:03:10-09:18:32 test pluto[28417]: | emitting 8 raw bytes of notify rcookie into ISAKMP Notification Payload
    2021:03:10-09:18:32 test pluto[28417]: | notify rcookie f7 54 27 d8 8f bb 15 39
    2021:03:10-09:18:32 test pluto[28417]: | emitting 4 raw bytes of notify data into ISAKMP Notification Payload
    2021:03:10-09:18:32 test pluto[28417]: | notify data 34 a8 64 ea
    2021:03:10-09:18:32 test pluto[28417]: | emitting length of ISAKMP Notification Payload: 32
    2021:03:10-09:18:32 test pluto[28417]: | emitting 12 zero bytes of encryption padding into ISAKMP Message
    2021:03:10-09:18:32 test pluto[28417]: | emitting length of ISAKMP Message: 108
    2021:03:10-09:18:32 test pluto[28417]: | sent DPD notification R_U_THERE_ACK with seqno = 883451114
    2021:03:10-09:18:32 test pluto[28417]: | next event EVENT_REINIT_SECRET in 2411 seconds
    2021:03:10-09:19:02 test pluto[28417]: |
    2021:03:10-09:19:02 test pluto[28417]: | *received 108 bytes from 77.103.119.61:500 on eth1
    2021:03:10-09:19:02 test pluto[28417]: | **parse ISAKMP Message:
    2021:03:10-09:19:02 test pluto[28417]: | initiator cookie:
    2021:03:10-09:19:02 test pluto[28417]: | de 7a 99 bf cd 33 f7 47
    2021:03:10-09:19:02 test pluto[28417]: | responder cookie:
    2021:03:10-09:19:02 test pluto[28417]: | f7 54 27 d8 8f bb 15 39
    2021:03:10-09:19:02 test pluto[28417]: | next payload type: ISAKMP_NEXT_HASH
    2021:03:10-09:19:02 test pluto[28417]: | ISAKMP version: ISAKMP Version 1.0
    2021:03:10-09:19:02 test pluto[28417]: | exchange type: ISAKMP_XCHG_INFO
    2021:03:10-09:19:02 test pluto[28417]: | flags: ISAKMP_FLAG_ENCRYPTION
    2021:03:10-09:19:02 test pluto[28417]: | message ID: ee d7 7c 90
    2021:03:10-09:19:02 test pluto[28417]: | length: 108
    2021:03:10-09:19:02 test pluto[28417]: | ICOOKIE: de 7a 99 bf cd 33 f7 47
    2021:03:10-09:19:02 test pluto[28417]: | RCOOKIE: f7 54 27 d8 8f bb 15 39
    2021:03:10-09:19:02 test pluto[28417]: | peer: 58 67 db 3d
    2021:03:10-09:19:02 test pluto[28417]: | state hash entry 9
    2021:03:10-09:19:02 test pluto[28417]: | state object #13 found, in STATE_MAIN_R3
    2021:03:10-09:19:02 test pluto[28417]: | ***parse ISAKMP Hash Payload:
    2021:03:10-09:19:02 test pluto[28417]: | next payload type: ISAKMP_NEXT_N
    2021:03:10-09:19:02 test pluto[28417]: | length: 36
    2021:03:10-09:19:02 test pluto[28417]: | ***parse ISAKMP Notification Payload:
    2021:03:10-09:19:02 test pluto[28417]: | next payload type: ISAKMP_NEXT_NONE
    2021:03:10-09:19:02 test pluto[28417]: | length: 32
    2021:03:10-09:19:02 test pluto[28417]: | DOI: ISAKMP_DOI_IPSEC
    2021:03:10-09:19:02 test pluto[28417]: | protocol ID: 1
    2021:03:10-09:19:02 test pluto[28417]: | SPI size: 16
    2021:03:10-09:19:02 test pluto[28417]: | Notify Message Type: R_U_THERE
    2021:03:10-09:19:02 test pluto[28417]: | removing 12 bytes of padding
    2021:03:10-09:19:02 test pluto[28417]: | info: de 7a 99 bf cd 33 f7 47 f7 54 27 d8 8f bb 15 39
    2021:03:10-09:19:02 test pluto[28417]: | 34 a8 64 eb
    2021:03:10-09:19:02 test pluto[28417]: | received DPD notification R_U_THERE with seqno = 883451115
    2021:03:10-09:19:02 test pluto[28417]: | **emit ISAKMP Message:
    2021:03:10-09:19:02 test pluto[28417]: | initiator cookie:
    2021:03:10-09:19:02 test pluto[28417]: | de 7a 99 bf cd 33 f7 47
    2021:03:10-09:19:02 test pluto[28417]: | responder cookie:
    2021:03:10-09:19:02 test pluto[28417]: | f7 54 27 d8 8f bb 15 39
    2021:03:10-09:19:02 test pluto[28417]: | next payload type: ISAKMP_NEXT_HASH
    2021:03:10-09:19:02 test pluto[28417]: | ISAKMP version: ISAKMP Version 1.0
    2021:03:10-09:19:02 test pluto[28417]: | exchange type: ISAKMP_XCHG_INFO

  • 0 in reply to Tomas Tyser1

    Uploaded all into the case. Now the used ID in config is DNS, but I tried beffore with IPs and also without any IDs. 

  • 0 in reply to Tomas Tyser1

    Hello Tomas,

    Thank you for the logs.

    So in the case base on the images, shared, both the UTM and XG are set as initiators, please set only one as the initiator and configure the DPD rule accordingly in the XG.

    Other than that, since the issue is at the time of the re-keying it might indicate there’s an overlap.

    If you put back the firewall on your customers, please comment that in the ticket.

    Regards,

  • 0 in reply to emmosophos

    Thank you emmosophos for all your help. Unfortunatelly I dont have access to that HW anymore, but when its back on customers site I will try the configuration as you suggested.

  • 0 in reply to emmosophos

    ok, found out I can still access that lab. So testing based on your advice right now.

  • +1 in reply to Tomas Tyser1

    Official answer from Sophos support.

    1. This issue does'nt always happen during rekey. It will happen when both the ends delete IKE SA at the same time and sends the delete IKE message to the other end. Whichever endpoint has already deleted the IKE_SA, will not be able to process the IKE delete message received because there is no active IKE with the received SPI's.
    2. This mostly happens with IKEv1 at random. There is no spurious packet received with invalid SPI. This we have confirmed with the packet capture on both the ends.
    3. The old IKE has been gracefully deleted on both the sides and there is no functionality impact on the VPN tunnel or any traffic loss. So these messages can be ignored.
    4. Checked the strongswan RFC's and the messages are because of the below constraints. By design IKEv1 does'nt wait for the ACK from the peer after sending an IKE_DELETE notification. So whenever both the ends delete IKE SA and send the IKE_DELETE notify to the other end at the same time we see this issue.

    Conclusion:

    This is just the protocol limitation by the way it is implemented in strongswan and also the garner event is logged as just an INFORMATIONAL message and not a ERROR or
    CRICTICAL_ERROR. So this info can be ignored.

Reply
  • +1 in reply to Tomas Tyser1

    Official answer from Sophos support.

    1. This issue does'nt always happen during rekey. It will happen when both the ends delete IKE SA at the same time and sends the delete IKE message to the other end. Whichever endpoint has already deleted the IKE_SA, will not be able to process the IKE delete message received because there is no active IKE with the received SPI's.
    2. This mostly happens with IKEv1 at random. There is no spurious packet received with invalid SPI. This we have confirmed with the packet capture on both the ends.
    3. The old IKE has been gracefully deleted on both the sides and there is no functionality impact on the VPN tunnel or any traffic loss. So these messages can be ignored.
    4. Checked the strongswan RFC's and the messages are because of the below constraints. By design IKEv1 does'nt wait for the ACK from the peer after sending an IKE_DELETE notification. So whenever both the ends delete IKE SA and send the IKE_DELETE notify to the other end at the same time we see this issue.

    Conclusion:

    This is just the protocol limitation by the way it is implemented in strongswan and also the garner event is logged as just an INFORMATIONAL message and not a ERROR or
    CRICTICAL_ERROR. So this info can be ignored.

Children
No Data