This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SOPHOS XG V18 RED CONNECTION WITH IPSEC VPN AS BACKUP

lferrara can you or any one else check this out.

This case is to understand how you could use an environment with one XG310 main office and 16 XG86 remote offices.

We would like to use the functionality of RED SERVER (Head Office = HQ) and RED CLIENT (Branch Office = BO) as the main connection and a site-to-site IPSEC VPN connection as backup of the RED connection.

We currently have an environment set up for testing where the HQ has two WAN connections with reserved public IP and BO with a dynamic WAN.

The connections were made as follows:
HQ WAN "A" IPSEC VPN <----- BO WAN
HQ WAN "B" NETWORK <---- BO WAN

The static routes were created for the connection between the HQ and BO networks and the precedence was changed to static sdwan vpn

Questions:
1 - Is it possible to use this KB-000035833?
2 - What would be the recommended option for all these teams to be deployed?
3 - Could the IPSEC VPN be used as backup of the MPLS (RED)?

It should be noted that the connections work but I would like the traffic to flow through the RED connection and use the VPN as secondary automatically without interventions.

This thread was automatically locked due to age.

Top Replies

LuCar Toni over 4 years ago +2 verified

Do not use IPsec Site to Site in this Case. Simply use Route Based VPN. This will give you another Interace. Therefore you have RED interface and the XFRM Interface (RBVPN). Then use simple routing…

Parents

+1 LuCar Toni over 4 years ago

Do not use IPsec Site to Site in this Case.

Simply use Route Based VPN. This will give you another Interace. Therefore you have RED interface and the XFRM Interface (RBVPN).

Then use simple routing like Static routing with metric.
Cancel
Vote Up +2 Vote Down

Cancel
0 Irvin Rosario1 over 4 years ago in reply to LuCar Toni

My issue is that in this example we have dynamic IP on the wan interface in the BO. XFRM is not going to work.

What else i can do?

Is not possible to do it with RED + IPSEC?
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Irvin Rosario1 over 4 years ago in reply to LuCar Toni

My issue is that in this example we have dynamic IP on the wan interface in the BO. XFRM is not going to work.

What else i can do?

Is not possible to do it with RED + IPSEC?
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 LuCar Toni over 4 years ago in reply to Irvin Rosario1

You could use the DDNS Service in XG firewall and use it for route based vpn.
Cancel
Vote Up +1 Vote Down

Cancel
0 Irvin Rosario1 over 4 years ago in reply to LuCar Toni

Thank you. I'm going to run tests. I was also thinking about changing the precedence of the routes to SDWAN VPN STATIC. Use the SDWAN PBR to route the traffic through the RED connection and how an uplink gateway is needed to transfer the data. Then the fail over VPN uplink could be used.

Do you think it could work with the PBR?
Cancel
Vote Up 0 Vote Down

Cancel
0 Irvin Rosario1 over 4 years ago in reply to LuCar Toni

Hi LuCar Toni

How i can configure or use the Static routing with metric. Can you provide me with an example.

Thanks.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 4 years ago in reply to Irvin Rosario1

Should be simply by creating the same destination route but with different metrics. This should be possible like a normal route in routing principles.
Cancel
Vote Up 0 Vote Down

Cancel
0 Irvin Rosario1 over 4 years ago in reply to LuCar Toni

Hi, LuCar Toni

I was trying to connect with DDNS IPSEC TUNNEL INTERFACE. But i have been possible to do it.

See the logs from the branchoffice.

login as: admin
admin@172.16.8.254's password:

Sophos Firmware Version SFOS 18.0.5 MR-5-Build586

Main Menu

1. Network Configuration
2. System Configuration
3. Route Configuration
4. Device Console
5. Device Management
6. VPN Management
7. Shutdown/Reboot Device
0. Exit

Select Menu Number [0-7]: 5

Sophos Firmware Version SFOS 18.0.5 MR-5-Build586

Device Management

1. Reset to Factory Defaults
2. Show Firmware(s)
3. Advanced Shell
0. Exit

Select Menu Number [0-3]: 3

Sophos Firewall
===============
(C) Copyright 2000-2021 Sophos Limited and others. All rights reserved.
Sophos is a registered trademark of Sophos Limited and Sophos Group.
All other product and company names mentioned are trademarks or registered
trademarks of their respective owners.

For End User License Agreement - www.sophos.com/.../sophos-end-us er-license-agreement.aspx

NOTE: If not explicitly approved by Sophos support, any modifications
done through this option will void your support.

XG86_AM01_SFOS 18.0.5 MR-5-Build586# cd /log
XG86_AM01_SFOS 18.0.5 MR-5-Build586# tail -f charon.log
2021-05-18 19:41:19 28[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|1> sending retransmit 1 of request message ID 0, seq 1
2021-05-18 19:41:19 28[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|1> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 19:41:26 30[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|1> sending retransmit 2 of request message ID 0, seq 1
2021-05-18 19:41:26 30[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|1> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 19:41:39 06[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|1> sending retransmit 3 of request message ID 0, seq 1
2021-05-18 19:41:39 06[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|1> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 19:42:02 05[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|1> sending retransmit 4 of request message ID 0, seq 1
2021-05-18 19:42:02 05[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|1> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 19:42:44 15[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|1> sending retransmit 5 of request message ID 0, seq 1
2021-05-18 19:42:44 15[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|1> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 19:44:00 30[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|1> giving up after 5 retransmits
2021-05-18 19:44:00 30[DMN] <HQ_CLARO_ALCARRIZOS_DDNS-1|1> [GARNER-LOGGING] (child_alert) ALERT: IKE message (A4007600) retransmission to 200.XX.XX.XX4 timed out
2021-05-18 19:44:00 30[DMN] <HQ_CLARO_ALCARRIZOS_DDNS-1|1> [GARNER-LOGGING] (child_alert) ALERT: peer did not respond to initial message 557
2021-05-18 19:44:00 30[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|1> peer not responding, trying again (559/0)
2021-05-18 19:44:00 30[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|1> initiating Main Mode IKE_SA HQ_CLARO_ALCARRIZOS_DDNS-1[1] to 200.XX.XX.XX4
2021-05-18 19:44:00 30[ENC] <HQ_CLARO_ALCARRIZOS_DDNS-1|1> generating ID_PROT request 0 [ SA V V V V V V ]
2021-05-18 19:44:00 30[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|1> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 19:44:04 20[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|1> sending retransmit 1 of request message ID 0, seq 1
2021-05-18 19:44:04 20[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|1> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 19:44:11 10[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|1> sending retransmit 2 of request message ID 0, seq 1
2021-05-18 19:44:11 10[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|1> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 19:44:24 27[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|1> sending retransmit 3 of request message ID 0, seq 1
2021-05-18 19:44:24 27[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|1> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 19:44:47 07[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|1> sending retransmit 4 of request message ID 0, seq 1
2021-05-18 19:44:47 07[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|1> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 19:45:19 24[CFG] received stroke: delete connection 'HQ_CLARO_ALCARRIZOS_DDNS-1'
2021-05-18 19:45:19 24[CFG] deleted connection 'HQ_CLARO_ALCARRIZOS_DDNS-1'
2021-05-18 19:45:19 19[CFG] received stroke: delete connection 'HQ_CLARO_ALCARRIZOS_DDNS-2'
2021-05-18 19:45:19 19[CFG] deleted connection 'HQ_CLARO_ALCARRIZOS_DDNS-2'
2021-05-18 19:45:19 13[CFG] vici terminate IKE_SA #1
2021-05-18 19:45:19 11[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|1> destroying IKE_SA in state CONNECTING without notification
2021-05-18 19:45:19 11[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|1> ### destroy: 0x7f8bb4001250
2021-05-18 19:45:19 11[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|1> ### destroy: 0x7f8bbc0025f0
2021-05-18 19:45:21 06[CFG] rereading secrets
2021-05-18 19:45:21 06[CFG] loading secrets from '/_conf/ipsec/ipsec.secrets'
2021-05-18 19:45:21 06[CFG] get_nsg_context tblvpnconnection:ipsec
2021-05-18 19:45:21 06[CFG] expanding file expression '/_conf/ipsec/connections/*.secrets' failed
2021-05-18 19:45:21 30[CFG] rereading ca certificates from '/_conf/ipsec/ipsec.d/cacerts'
2021-05-18 19:45:23 26[CFG] rereading secrets
2021-05-18 19:45:23 26[CFG] loading secrets from '/_conf/ipsec/ipsec.secrets'
2021-05-18 19:45:23 26[CFG] get_nsg_context tblvpnconnection:ipsec
2021-05-18 19:45:23 26[CFG] expanding file expression '/_conf/ipsec/connections/*.secrets' failed
2021-05-18 19:45:23 15[CFG] rereading ca certificates from '/_conf/ipsec/ipsec.d/cacerts'
2021-05-18 19:45:26 30[CFG] rereading secrets
2021-05-18 19:45:26 30[CFG] loading secrets from '/_conf/ipsec/ipsec.secrets'
2021-05-18 19:45:26 30[CFG] get_nsg_context tblvpnconnection:ipsec
2021-05-18 19:45:26 30[CFG] loading secrets from '/_conf/ipsec/connections/HQ_CLARO_ALCARRIZOS_DDNS.secrets'
2021-05-18 19:45:26 30[CFG] get_nsg_context tblvpnconnection:HQ_CLARO_ALCARRIZOS_DDNS
2021-05-18 19:45:26 30[CFG] NSGENC decrypt timetaken 0.001168 seconds
2021-05-18 19:45:26 30[CFG] loaded IKE secret for 192.168.8.115 200.XX.XX.XX4
2021-05-18 19:45:26 30[CFG] NSGENC decrypt timetaken 0.001083 seconds
2021-05-18 19:45:26 30[CFG] loaded IKE secret for 192.168.8.118 200.XX.XX.XX4
2021-05-18 19:45:26 14[CFG] rereading ca certificates from '/_conf/ipsec/ipsec.d/cacerts'
2021-05-18 19:45:26 18[CFG] received stroke: add connection 'HQ_CLARO_ALCARRIZOS_DDNS-1'
2021-05-18 19:45:26 18[CFG] added configuration 'HQ_CLARO_ALCARRIZOS_DDNS-1'
2021-05-18 19:45:26 27[CFG] received stroke: initiate 'HQ_CLARO_ALCARRIZOS_DDNS-1'
2021-05-18 19:45:26 27[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> ### queue_child invoking quick_mode_create
2021-05-18 19:45:26 27[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> ### quick_mode_create: 0x7f8ba0002790 config 0x7f8ba4003ae0
2021-05-18 19:45:26 27[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> initiating Main Mode IKE_SA HQ_CLARO_ALCARRIZOS_DDNS-1[2] to 200.XX.XX.XX4
2021-05-18 19:45:26 27[ENC] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> generating ID_PROT request 0 [ SA V V V V V V ]
2021-05-18 19:45:26 27[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 19:45:26 06[CFG] received stroke: add connection 'HQ_CLARO_ALCARRIZOS_DDNS-2'
2021-05-18 19:45:26 06[CFG] added child to existing configuration 'HQ_CLARO_ALCARRIZOS_DDNS-1'
2021-05-18 19:45:26 21[CFG] received stroke: initiate 'HQ_CLARO_ALCARRIZOS_DDNS-2'
2021-05-18 19:45:26 21[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> ### queue_child invoking quick_mode_create
2021-05-18 19:45:26 21[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> ### quick_mode_create: 0x7f8b9c001430 config 0x7f8bb0001510
2021-05-18 19:45:30 30[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> sending retransmit 1 of request message ID 0, seq 1
2021-05-18 19:45:30 30[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
login as: admin
admin@172.16.8.254's password:

Sophos Firmware Version SFOS 18.0.5 MR-5-Build586

Main Menu

1. Network Configuration
2. System Configuration
3. Route Configuration
4. Device Console
5. Device Management
6. VPN Management
7. Shutdown/Reboot Device
0. Exit

Select Menu Number [0-7]: 5

Sophos Firmware Version SFOS 18.0.5 MR-5-Build586

Device Management

1. Reset to Factory Defaults
2. Show Firmware(s)
3. Advanced Shell
0. Exit

Select Menu Number [0-3]: 3

Sophos Firewall
===============
(C) Copyright 2000-2021 Sophos Limited and others. All rights reserved.
Sophos is a registered trademark of Sophos Limited and Sophos Group.
All other product and company names mentioned are trademarks or registered
trademarks of their respective owners.

For End User License Agreement - www.sophos.com/.../sophos-end-user-license-agreement.aspx

NOTE: If not explicitly approved by Sophos support, any modifications
done through this option will void your support.

XG86_AM01_SFOS 18.0.5 MR-5-Build586# cd /log
XG86_AM01_SFOS 18.0.5 MR-5-Build586# tail -f charon.log
2021-05-18 19:47:17 29[CFG] NSGENC decrypt timetaken 0.001078 seconds
2021-05-18 19:47:17 29[CFG] loaded IKE secret for 192.168.8.115 200.XX.XX.XX4
2021-05-18 19:47:17 29[CFG] NSGENC decrypt timetaken 0.001020 seconds
2021-05-18 19:47:17 29[CFG] loaded IKE secret for 192.168.8.118 200.XX.XX.XX4
2021-05-18 19:47:17 07[CFG] rereading ca certificates from '/_conf/ipsec/ipsec.d/cacerts'
2021-05-18 19:47:18 27[CFG] vici initiate 'HQ_CLARO_ALCARRIZOS_DDNS-2'
2021-05-18 19:47:18 15[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> ### queue_child invoking quick_mode_create
2021-05-18 19:47:18 15[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> ### quick_mode_create: 0x7f8bac001b00 config 0x7f8bb0001510
2021-05-18 19:47:18 15[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> found queued QUICK_MODE task with identical child config
2021-05-18 19:47:18 15[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> ### destroy: 0x7f8b9c001430
2021-05-18 19:47:49 07[CFG] rereading secrets
2021-05-18 19:47:49 07[CFG] loading secrets from '/_conf/ipsec/ipsec.secrets'
2021-05-18 19:47:49 07[CFG] get_nsg_context tblvpnconnection:ipsec
2021-05-18 19:47:49 07[CFG] loading secrets from '/_conf/ipsec/connections/HQ_CLARO_ALCARRIZOS_DDNS.secrets'
2021-05-18 19:47:49 07[CFG] get_nsg_context tblvpnconnection:HQ_CLARO_ALCARRIZOS_DDNS
2021-05-18 19:47:49 07[CFG] NSGENC decrypt timetaken 0.001037 seconds
2021-05-18 19:47:49 07[CFG] loaded IKE secret for 192.168.8.115 200.XX.XX.XX4
2021-05-18 19:47:49 07[CFG] NSGENC decrypt timetaken 0.001099 seconds
2021-05-18 19:47:49 07[CFG] loaded IKE secret for 192.168.8.118 200.XX.XX.XX4
2021-05-18 19:47:49 08[CFG] rereading ca certificates from '/_conf/ipsec/ipsec.d/cacerts'
2021-05-18 19:47:51 05[CFG] vici initiate 'HQ_CLARO_ALCARRIZOS_DDNS-2'
2021-05-18 19:47:51 30[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> ### queue_child invoking quick_mode_create
2021-05-18 19:47:51 30[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> ### quick_mode_create: 0x7f8ba4001e20 config 0x7f8bb0001510
2021-05-18 19:47:51 30[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> found queued QUICK_MODE task with identical child config
2021-05-18 19:47:51 30[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> ### destroy: 0x7f8bac001b00
2021-05-18 19:48:11 28[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> giving up after 5 retransmits
2021-05-18 19:48:11 28[DMN] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> [GARNER-LOGGING] (child_alert) ALERT: IKE message (A0008A20) retransmission to 200.XX.XX.XX4 timed out
2021-05-18 19:48:11 28[DMN] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> [GARNER-LOGGING] (child_alert) ALERT: peer did not respond to initial message 0
2021-05-18 19:48:11 28[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> peer not responding, trying again (2/0)
2021-05-18 19:48:11 28[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> initiating Main Mode IKE_SA HQ_CLARO_ALCARRIZOS_DDNS-1[2] to 200.XX.XX.XX4
2021-05-18 19:48:11 28[ENC] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> generating ID_PROT request 0 [ SA V V V V V V ]
2021-05-18 19:48:11 28[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 19:48:15 29[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> sending retransmit 1 of request message ID 0, seq 1
2021-05-18 19:48:15 29[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 19:48:22 09[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> sending retransmit 2 of request message ID 0, seq 1
2021-05-18 19:48:22 09[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 19:48:35 18[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> sending retransmit 3 of request message ID 0, seq 1
2021-05-18 19:48:35 18[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 19:48:59 23[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> sending retransmit 4 of request message ID 0, seq 1
2021-05-18 19:48:59 23[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 19:49:15 16[CFG] rereading secrets
2021-05-18 19:49:15 16[CFG] loading secrets from '/_conf/ipsec/ipsec.secrets'
2021-05-18 19:49:15 16[CFG] get_nsg_context tblvpnconnection:ipsec
2021-05-18 19:49:15 16[CFG] loading secrets from '/_conf/ipsec/connections/HQ_CLARO_ALCARRIZOS_DDNS.secrets'
2021-05-18 19:49:15 16[CFG] get_nsg_context tblvpnconnection:HQ_CLARO_ALCARRIZOS_DDNS
2021-05-18 19:49:15 16[CFG] NSGENC decrypt timetaken 0.001150 seconds
2021-05-18 19:49:15 16[CFG] loaded IKE secret for 192.168.8.115 200.XX.XX.XX4
2021-05-18 19:49:15 16[CFG] NSGENC decrypt timetaken 0.001011 seconds
2021-05-18 19:49:15 16[CFG] loaded IKE secret for 192.168.8.118 200.XX.XX.XX4
2021-05-18 19:49:16 14[CFG] rereading ca certificates from '/_conf/ipsec/ipsec.d/cacerts'
2021-05-18 19:49:17 08[CFG] vici initiate 'HQ_CLARO_ALCARRIZOS_DDNS-2'
2021-05-18 19:49:17 28[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> ### queue_child invoking quick_mode_create
2021-05-18 19:49:17 28[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> ### quick_mode_create: 0x7f8b9c0039d0 config 0x7f8bb0001510
2021-05-18 19:49:17 28[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> found queued QUICK_MODE task with identical child config
2021-05-18 19:49:17 28[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> ### destroy: 0x7f8ba4001e20
2021-05-18 19:49:41 29[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> sending retransmit 5 of request message ID 0, seq 1
2021-05-18 19:49:41 29[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 19:50:06 31[CFG] received stroke: delete connection 'HQ_CLARO_ALCARRIZOS_DDNS-1'
2021-05-18 19:50:06 31[CFG] deleted connection 'HQ_CLARO_ALCARRIZOS_DDNS-1'
2021-05-18 19:50:06 19[CFG] received stroke: delete connection 'HQ_CLARO_ALCARRIZOS_DDNS-2'
2021-05-18 19:50:06 19[CFG] deleted connection 'HQ_CLARO_ALCARRIZOS_DDNS-2'
2021-05-18 19:50:06 26[CFG] vici terminate IKE_SA #2
2021-05-18 19:50:06 16[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> destroying IKE_SA in state CONNECTING without notification
2021-05-18 19:50:06 16[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> ### destroy: 0x7f8b9c0039d0
2021-05-18 19:50:06 16[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|2> ### destroy: 0x7f8ba0002790
2021-05-18 19:50:08 21[CFG] rereading secrets
2021-05-18 19:50:08 21[CFG] loading secrets from '/_conf/ipsec/ipsec.secrets'
2021-05-18 19:50:08 21[CFG] get_nsg_context tblvpnconnection:ipsec
2021-05-18 19:50:08 21[CFG] expanding file expression '/_conf/ipsec/connections/*.secrets' failed
2021-05-18 19:50:09 11[CFG] rereading ca certificates from '/_conf/ipsec/ipsec.d/cacerts'
2021-05-18 19:50:11 17[CFG] rereading secrets
2021-05-18 19:50:11 17[CFG] loading secrets from '/_conf/ipsec/ipsec.secrets'
2021-05-18 19:50:11 17[CFG] get_nsg_context tblvpnconnection:ipsec
2021-05-18 19:50:11 17[CFG] expanding file expression '/_conf/ipsec/connections/*.secrets' failed
2021-05-18 19:50:11 25[CFG] rereading ca certificates from '/_conf/ipsec/ipsec.d/cacerts'
2021-05-18 19:50:15 14[CFG] rereading secrets
2021-05-18 19:50:15 14[CFG] loading secrets from '/_conf/ipsec/ipsec.secrets'
2021-05-18 19:50:15 14[CFG] get_nsg_context tblvpnconnection:ipsec
2021-05-18 19:50:15 14[CFG] loading secrets from '/_conf/ipsec/connections/HQ_CLARO_ALCARRIZOS_DDNS.secrets'
2021-05-18 19:50:15 14[CFG] get_nsg_context tblvpnconnection:HQ_CLARO_ALCARRIZOS_DDNS
2021-05-18 19:50:15 14[CFG] NSGENC decrypt timetaken 0.001093 seconds
2021-05-18 19:50:15 14[CFG] loaded IKE secret for 192.168.8.115 200.XX.XX.XX4
2021-05-18 19:50:15 22[CFG] rereading ca certificates from '/_conf/ipsec/ipsec.d/cacerts'
2021-05-18 19:50:15 32[CFG] received stroke: add connection 'HQ_CLARO_ALCARRIZOS_DDNS-1'
2021-05-18 19:50:15 32[CFG] added configuration 'HQ_CLARO_ALCARRIZOS_DDNS-1'
2021-05-18 19:50:15 20[CFG] received stroke: initiate 'HQ_CLARO_ALCARRIZOS_DDNS-1'
2021-05-18 19:50:15 20[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> ### queue_child invoking quick_mode_create
2021-05-18 19:50:15 20[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> ### quick_mode_create: 0x7f8bd4002740 config 0x7f8bac003280
2021-05-18 19:50:15 20[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> initiating Main Mode IKE_SA HQ_CLARO_ALCARRIZOS_DDNS-1[3] to 200.XX.XX.XX4
2021-05-18 19:50:15 20[ENC] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> generating ID_PROT request 0 [ SA V V V V V V ]
2021-05-18 19:50:15 20[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 19:50:15 30[CFG] received stroke: add connection 'HQ_CLARO_ALCARRIZOS_DDNS-2'
2021-05-18 19:50:15 30[CFG] added child to existing configuration 'HQ_CLARO_ALCARRIZOS_DDNS-1'
2021-05-18 19:50:15 25[CFG] received stroke: initiate 'HQ_CLARO_ALCARRIZOS_DDNS-2'
2021-05-18 19:50:15 25[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> ### queue_child invoking quick_mode_create
2021-05-18 19:50:15 25[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> ### quick_mode_create: 0x1c53b10 config 0x7f8ba40038c0
2021-05-18 19:50:19 07[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> sending retransmit 1 of request message ID 0, seq 1
2021-05-18 19:50:19 07[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 19:50:26 14[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> sending retransmit 2 of request message ID 0, seq 1
2021-05-18 19:50:26 14[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 19:50:39 11[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> sending retransmit 3 of request message ID 0, seq 1
2021-05-18 19:50:39 11[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 19:51:03 17[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> sending retransmit 4 of request message ID 0, seq 1
2021-05-18 19:51:03 17[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 19:51:34 32[CFG] rereading secrets
2021-05-18 19:51:34 32[CFG] loading secrets from '/_conf/ipsec/ipsec.secrets'
2021-05-18 19:51:34 32[CFG] get_nsg_context tblvpnconnection:ipsec
2021-05-18 19:51:34 32[CFG] loading secrets from '/_conf/ipsec/connections/HQ_CLARO_ALCARRIZOS_DDNS.secrets'
2021-05-18 19:51:34 32[CFG] get_nsg_context tblvpnconnection:HQ_CLARO_ALCARRIZOS_DDNS
2021-05-18 19:51:34 32[CFG] NSGENC decrypt timetaken 0.001065 seconds
2021-05-18 19:51:34 32[CFG] loaded IKE secret for 192.168.8.115 200.XX.XX.XX4
2021-05-18 19:51:34 26[CFG] rereading ca certificates from '/_conf/ipsec/ipsec.d/cacerts'
2021-05-18 19:51:36 31[CFG] vici initiate 'HQ_CLARO_ALCARRIZOS_DDNS-2'
2021-05-18 19:51:36 15[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> ### queue_child invoking quick_mode_create
2021-05-18 19:51:36 15[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> ### quick_mode_create: 0x7f8bac001210 config 0x7f8ba40038c0
2021-05-18 19:51:36 15[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> found queued QUICK_MODE task with identical child config
2021-05-18 19:51:36 15[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> ### destroy: 0x1c53b10
2021-05-18 19:51:45 25[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> sending retransmit 5 of request message ID 0, seq 1
2021-05-18 19:51:45 25[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 19:53:00 18[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> giving up after 5 retransmits
2021-05-18 19:53:00 18[DMN] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> [GARNER-LOGGING] (child_alert) ALERT: IKE message (D40089D0) retransmission to 200.XX.XX.XX4 timed out
2021-05-18 19:53:00 18[DMN] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> [GARNER-LOGGING] (child_alert) ALERT: peer did not respond to initial message 0
2021-05-18 19:53:00 18[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> peer not responding, trying again (2/0)
2021-05-18 19:53:00 18[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> initiating Main Mode IKE_SA HQ_CLARO_ALCARRIZOS_DDNS-1[3] to 200.XX.XX.XX4
2021-05-18 19:53:00 18[ENC] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> generating ID_PROT request 0 [ SA V V V V V V ]
2021-05-18 19:53:00 18[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 19:53:04 21[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> sending retransmit 1 of request message ID 0, seq 1
2021-05-18 19:53:04 21[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 19:53:11 10[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> sending retransmit 2 of request message ID 0, seq 1
2021-05-18 19:53:11 10[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 19:53:12 27[CFG] rereading secrets
2021-05-18 19:53:12 27[CFG] loading secrets from '/_conf/ipsec/ipsec.secrets'
2021-05-18 19:53:12 27[CFG] get_nsg_context tblvpnconnection:ipsec
2021-05-18 19:53:12 27[CFG] loading secrets from '/_conf/ipsec/connections/HQ_CLARO_ALCARRIZOS_DDNS.secrets'
2021-05-18 19:53:12 27[CFG] get_nsg_context tblvpnconnection:HQ_CLARO_ALCARRIZOS_DDNS
2021-05-18 19:53:12 27[CFG] NSGENC decrypt timetaken 0.001103 seconds
2021-05-18 19:53:12 27[CFG] loaded IKE secret for 192.168.8.115 200.XX.XX.XX4
2021-05-18 19:53:13 21[CFG] rereading ca certificates from '/_conf/ipsec/ipsec.d/cacerts'
2021-05-18 19:53:14 17[CFG] vici initiate 'HQ_CLARO_ALCARRIZOS_DDNS-2'
2021-05-18 19:53:14 25[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> ### queue_child invoking quick_mode_create
2021-05-18 19:53:14 25[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> ### quick_mode_create: 0x1c53d50 config 0x7f8ba40038c0
2021-05-18 19:53:14 25[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> found queued QUICK_MODE task with identical child config
2021-05-18 19:53:14 25[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> ### destroy: 0x7f8bac001210
2021-05-18 19:53:24 19[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> sending retransmit 3 of request message ID 0, seq 1
2021-05-18 19:53:24 19[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 19:53:48 06[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> sending retransmit 4 of request message ID 0, seq 1
2021-05-18 19:53:48 06[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 19:54:26 20[CFG] rereading secrets
2021-05-18 19:54:26 20[CFG] loading secrets from '/_conf/ipsec/ipsec.secrets'
2021-05-18 19:54:26 20[CFG] get_nsg_context tblvpnconnection:ipsec
2021-05-18 19:54:26 20[CFG] loading secrets from '/_conf/ipsec/connections/HQ_CLARO_ALCARRIZOS_DDNS.secrets'
2021-05-18 19:54:26 20[CFG] get_nsg_context tblvpnconnection:HQ_CLARO_ALCARRIZOS_DDNS
2021-05-18 19:54:26 20[CFG] NSGENC decrypt timetaken 0.001160 seconds
2021-05-18 19:54:26 20[CFG] loaded IKE secret for 192.168.8.115 200.XX.XX.XX4
2021-05-18 19:54:27 16[CFG] rereading ca certificates from '/_conf/ipsec/ipsec.d/cacerts'
2021-05-18 19:54:30 24[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> sending retransmit 5 of request message ID 0, seq 1
2021-05-18 19:54:30 24[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 19:54:31 05[KNL] 172.18.8.253 disappeared from xfrm2
2021-05-18 19:54:31 18[KNL] interface xfrm2 deleted
2021-05-18 19:54:33 21[CFG] received stroke: delete connection 'HQ_CLARO_ALCARRIZOS_DDNS-1'
2021-05-18 19:54:33 21[CFG] deleted connection 'HQ_CLARO_ALCARRIZOS_DDNS-1'
2021-05-18 19:54:33 12[CFG] received stroke: delete connection 'HQ_CLARO_ALCARRIZOS_DDNS-2'
2021-05-18 19:54:33 12[CFG] deleted connection 'HQ_CLARO_ALCARRIZOS_DDNS-2'
2021-05-18 19:54:34 07[CFG] vici terminate IKE_SA #3
2021-05-18 19:54:34 08[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> destroying IKE_SA in state CONNECTING without notification
2021-05-18 19:54:34 08[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> ### destroy: 0x1c53d50
2021-05-18 19:54:34 08[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|3> ### destroy: 0x7f8bd4002740
2021-05-18 19:54:37 29[CFG] rereading secrets
2021-05-18 19:54:37 29[CFG] loading secrets from '/_conf/ipsec/ipsec.secrets'
2021-05-18 19:54:37 29[CFG] get_nsg_context tblvpnconnection:ipsec
2021-05-18 19:54:37 29[CFG] expanding file expression '/_conf/ipsec/connections/*.secrets' failed
2021-05-18 19:54:38 27[CFG] rereading ca certificates from '/_conf/ipsec/ipsec.d/cacerts'
2021-05-18 19:54:40 23[CFG] rereading secrets
2021-05-18 19:54:40 23[CFG] loading secrets from '/_conf/ipsec/ipsec.secrets'
2021-05-18 19:54:40 23[CFG] get_nsg_context tblvpnconnection:ipsec
2021-05-18 19:54:40 23[CFG] expanding file expression '/_conf/ipsec/connections/*.secrets' failed
2021-05-18 19:54:41 24[CFG] rereading ca certificates from '/_conf/ipsec/ipsec.d/cacerts'
2021-05-18 19:56:56 10[APP] [COP-UPDOWN][STATUS] (process_db_update) SQL has 0 results!
2021-05-18 19:59:56 11[APP] [COP-UPDOWN][STATUS] (process_db_update) SQL has 0 results!
^C
XG86_AM01_SFOS 18.0.5 MR-5-Build586# tail -f charon.log
2021-05-18 19:54:37 29[CFG] get_nsg_context tblvpnconnection:ipsec
2021-05-18 19:54:37 29[CFG] expanding file expression '/_conf/ipsec/connections/*.secrets' failed
2021-05-18 19:54:38 27[CFG] rereading ca certificates from '/_conf/ipsec/ipsec.d/cacerts'
2021-05-18 19:54:40 23[CFG] rereading secrets
2021-05-18 19:54:40 23[CFG] loading secrets from '/_conf/ipsec/ipsec.secrets'
2021-05-18 19:54:40 23[CFG] get_nsg_context tblvpnconnection:ipsec
2021-05-18 19:54:40 23[CFG] expanding file expression '/_conf/ipsec/connections/*.secrets' failed
2021-05-18 19:54:41 24[CFG] rereading ca certificates from '/_conf/ipsec/ipsec.d/cacerts'
2021-05-18 19:56:56 10[APP] [COP-UPDOWN][STATUS] (process_db_update) SQL has 0 results!
2021-05-18 19:59:56 11[APP] [COP-UPDOWN][STATUS] (process_db_update) SQL has 0 results!
2021-05-18 20:00:21 05[CFG] rereading secrets
2021-05-18 20:00:21 05[CFG] loading secrets from '/_conf/ipsec/ipsec.secrets'
2021-05-18 20:00:21 05[CFG] get_nsg_context tblvpnconnection:ipsec
2021-05-18 20:00:21 05[CFG] loading secrets from '/_conf/ipsec/connections/HQ_CLARO_ALCARRIZOS_DDNS.secrets'
2021-05-18 20:00:21 05[CFG] get_nsg_context tblvpnconnection:HQ_CLARO_ALCARRIZOS_DDNS
2021-05-18 20:00:21 05[CFG] NSGENC decrypt timetaken 0.001081 seconds
2021-05-18 20:00:21 05[CFG] loaded IKE secret for 192.168.8.115 200.XX.XX.XX4
2021-05-18 20:00:21 23[CFG] rereading ca certificates from '/_conf/ipsec/ipsec.d/cacerts'
2021-05-18 20:00:21 29[CFG] received stroke: add connection 'HQ_CLARO_ALCARRIZOS_DDNS-1'
2021-05-18 20:00:21 29[CFG] added configuration 'HQ_CLARO_ALCARRIZOS_DDNS-1'
2021-05-18 20:00:21 25[CFG] received stroke: initiate 'HQ_CLARO_ALCARRIZOS_DDNS-1'
2021-05-18 20:00:21 25[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|4> ### queue_child invoking quick_mode_create
2021-05-18 20:00:21 25[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|4> ### quick_mode_create: 0x1c534e0 config 0x7f8bc4003110
2021-05-18 20:00:21 25[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|4> initiating Main Mode IKE_SA HQ_CLARO_ALCARRIZOS_DDNS-1[4] to 200.XX.XX.XX4
2021-05-18 20:00:21 25[ENC] <HQ_CLARO_ALCARRIZOS_DDNS-1|4> generating ID_PROT request 0 [ SA V V V V V V ]
2021-05-18 20:00:21 25[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|4> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 20:00:21 10[CFG] received stroke: add connection 'HQ_CLARO_ALCARRIZOS_DDNS-2'
2021-05-18 20:00:21 10[CFG] added child to existing configuration 'HQ_CLARO_ALCARRIZOS_DDNS-1'
2021-05-18 20:00:21 26[CFG] received stroke: initiate 'HQ_CLARO_ALCARRIZOS_DDNS-2'
2021-05-18 20:00:21 26[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|4> ### queue_child invoking quick_mode_create
2021-05-18 20:00:21 26[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|4> ### quick_mode_create: 0x7f8bc8001db0 config 0x1c54640
2021-05-18 20:00:22 08[CFG] rereading secrets
2021-05-18 20:00:22 08[CFG] loading secrets from '/_conf/ipsec/ipsec.secrets'
2021-05-18 20:00:22 08[CFG] get_nsg_context tblvpnconnection:ipsec
2021-05-18 20:00:22 08[CFG] loading secrets from '/_conf/ipsec/connections/HQ_CLARO_ALCARRIZOS_DDNS.secrets'
2021-05-18 20:00:22 08[CFG] get_nsg_context tblvpnconnection:HQ_CLARO_ALCARRIZOS_DDNS
2021-05-18 20:00:22 08[CFG] NSGENC decrypt timetaken 0.001117 seconds
2021-05-18 20:00:22 08[CFG] loaded IKE secret for 192.168.8.115 200.XX.XX.XX4
2021-05-18 20:00:22 09[CFG] rereading ca certificates from '/_conf/ipsec/ipsec.d/cacerts'
2021-05-18 20:00:25 29[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|4> sending retransmit 1 of request message ID 0, seq 1
2021-05-18 20:00:25 29[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|4> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 20:00:32 07[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|4> sending retransmit 2 of request message ID 0, seq 1
2021-05-18 20:00:32 07[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|4> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 20:00:45 14[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|4> sending retransmit 3 of request message ID 0, seq 1
2021-05-18 20:00:45 14[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|4> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 20:01:09 11[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|4> sending retransmit 4 of request message ID 0, seq 1
2021-05-18 20:01:09 11[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|4> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 20:01:51 31[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|4> sending retransmit 5 of request message ID 0, seq 1
2021-05-18 20:01:51 31[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|4> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 20:02:36 32[CFG] vici terminate IKE_SA #4
2021-05-18 20:02:36 29[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|4> destroying IKE_SA in state CONNECTING without notification
2021-05-18 20:02:36 29[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|4> ### destroy: 0x7f8bc8001db0
2021-05-18 20:02:36 29[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|4> ### destroy: 0x1c534e0
2021-05-18 20:02:37 19[CFG] rereading secrets
2021-05-18 20:02:37 19[CFG] loading secrets from '/_conf/ipsec/ipsec.secrets'
2021-05-18 20:02:37 19[CFG] get_nsg_context tblvpnconnection:ipsec
2021-05-18 20:02:37 19[CFG] loading secrets from '/_conf/ipsec/connections/HQ_CLARO_ALCARRIZOS_DDNS.secrets'
2021-05-18 20:02:37 19[CFG] get_nsg_context tblvpnconnection:HQ_CLARO_ALCARRIZOS_DDNS
2021-05-18 20:02:37 19[CFG] NSGENC decrypt timetaken 0.001064 seconds
2021-05-18 20:02:37 19[CFG] loaded IKE secret for 192.168.8.115 200.XX.XX.XX4
2021-05-18 20:02:37 09[CFG] rereading ca certificates from '/_conf/ipsec/ipsec.d/cacerts'
2021-05-18 20:02:38 11[CFG] rereading secrets
2021-05-18 20:02:38 11[CFG] loading secrets from '/_conf/ipsec/ipsec.secrets'
2021-05-18 20:02:38 11[CFG] get_nsg_context tblvpnconnection:ipsec
2021-05-18 20:02:38 11[CFG] loading secrets from '/_conf/ipsec/connections/HQ_CLARO_ALCARRIZOS_DDNS.secrets'
2021-05-18 20:02:38 11[CFG] get_nsg_context tblvpnconnection:HQ_CLARO_ALCARRIZOS_DDNS
2021-05-18 20:02:38 11[CFG] NSGENC decrypt timetaken 0.001062 seconds
2021-05-18 20:02:38 11[CFG] loaded IKE secret for 192.168.8.115 200.XX.XX.XX4
2021-05-18 20:02:38 17[CFG] rereading ca certificates from '/_conf/ipsec/ipsec.d/cacerts'
2021-05-18 20:02:43 28[KNL] 192.168.8.115 disappeared from Port2
2021-05-18 20:02:43 25[KNL] 192.168.8.115 appeared on Port2
2021-05-18 20:03:06 22[CFG] rereading secrets
2021-05-18 20:03:06 22[CFG] loading secrets from '/_conf/ipsec/ipsec.secrets'
2021-05-18 20:03:06 22[CFG] get_nsg_context tblvpnconnection:ipsec
2021-05-18 20:03:06 22[CFG] loading secrets from '/_conf/ipsec/connections/HQ_CLARO_ALCARRIZOS_DDNS.secrets'
2021-05-18 20:03:06 22[CFG] get_nsg_context tblvpnconnection:HQ_CLARO_ALCARRIZOS_DDNS
2021-05-18 20:03:06 22[CFG] NSGENC decrypt timetaken 0.001164 seconds
2021-05-18 20:03:06 22[CFG] loaded IKE secret for 192.168.8.115 200.XX.XX.XX4
2021-05-18 20:03:07 25[CFG] rereading ca certificates from '/_conf/ipsec/ipsec.d/cacerts'
2021-05-18 20:03:18 23[CFG] rereading secrets
2021-05-18 20:03:18 23[CFG] loading secrets from '/_conf/ipsec/ipsec.secrets'
2021-05-18 20:03:18 23[CFG] get_nsg_context tblvpnconnection:ipsec
2021-05-18 20:03:18 23[CFG] loading secrets from '/_conf/ipsec/connections/HQ_CLARO_ALCARRIZOS_DDNS.secrets'
2021-05-18 20:03:18 23[CFG] get_nsg_context tblvpnconnection:HQ_CLARO_ALCARRIZOS_DDNS
2021-05-18 20:03:18 23[CFG] NSGENC decrypt timetaken 0.001096 seconds
2021-05-18 20:03:18 23[CFG] loaded IKE secret for 192.168.8.115 200.XX.XX.XX4
2021-05-18 20:03:18 25[CFG] rereading ca certificates from '/_conf/ipsec/ipsec.d/cacerts'
2021-05-18 20:03:21 08[CFG] rereading secrets
2021-05-18 20:03:21 08[CFG] loading secrets from '/_conf/ipsec/ipsec.secrets'
2021-05-18 20:03:21 08[CFG] get_nsg_context tblvpnconnection:ipsec
2021-05-18 20:03:21 08[CFG] loading secrets from '/_conf/ipsec/connections/HQ_CLARO_ALCARRIZOS_DDNS.secrets'
2021-05-18 20:03:21 08[CFG] get_nsg_context tblvpnconnection:HQ_CLARO_ALCARRIZOS_DDNS
2021-05-18 20:03:21 08[CFG] NSGENC decrypt timetaken 0.001153 seconds
2021-05-18 20:03:21 08[CFG] loaded IKE secret for 192.168.8.115 200.XX.XX.XX4
2021-05-18 20:03:22 25[CFG] rereading ca certificates from '/_conf/ipsec/ipsec.d/cacerts'
2021-05-18 20:04:22 20[CFG] rereading secrets
2021-05-18 20:04:22 20[CFG] loading secrets from '/_conf/ipsec/ipsec.secrets'
2021-05-18 20:04:22 20[CFG] get_nsg_context tblvpnconnection:ipsec
2021-05-18 20:04:22 20[CFG] loading secrets from '/_conf/ipsec/connections/HQ_CLARO_ALCARRIZOS_DDNS.secrets'
2021-05-18 20:04:22 20[CFG] get_nsg_context tblvpnconnection:HQ_CLARO_ALCARRIZOS_DDNS
2021-05-18 20:04:22 20[CFG] NSGENC decrypt timetaken 0.001073 seconds
2021-05-18 20:04:22 20[CFG] loaded IKE secret for 192.168.8.115 200.XX.XX.XX4
2021-05-18 20:04:22 14[CFG] rereading ca certificates from '/_conf/ipsec/ipsec.d/cacerts'
2021-05-18 20:04:24 09[CFG] vici initiate 'HQ_CLARO_ALCARRIZOS_DDNS-2'
2021-05-18 20:04:24 30[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|5> ### queue_child invoking quick_mode_create
2021-05-18 20:04:24 30[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|5> ### quick_mode_create: 0x7f8ba40038d0 config 0x1c54640
2021-05-18 20:04:24 30[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|5> initiating Main Mode IKE_SA HQ_CLARO_ALCARRIZOS_DDNS-1[5] to 200.XX.XX.XX4
2021-05-18 20:04:24 30[ENC] <HQ_CLARO_ALCARRIZOS_DDNS-1|5> generating ID_PROT request 0 [ SA V V V V V V ]
2021-05-18 20:04:24 30[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|5> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 20:04:28 26[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|5> sending retransmit 1 of request message ID 0, seq 1
2021-05-18 20:04:28 26[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|5> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 20:04:35 05[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|5> sending retransmit 2 of request message ID 0, seq 1
2021-05-18 20:04:35 05[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|5> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 20:04:48 30[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|5> sending retransmit 3 of request message ID 0, seq 1
2021-05-18 20:04:48 30[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|5> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 20:05:11 17[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|5> sending retransmit 4 of request message ID 0, seq 1
2021-05-18 20:05:11 17[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|5> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
2021-05-18 20:05:53 29[IKE] <HQ_CLARO_ALCARRIZOS_DDNS-1|5> sending retransmit 5 of request message ID 0, seq 1
2021-05-18 20:05:53 29[NET] <HQ_CLARO_ALCARRIZOS_DDNS-1|5> sending packet: from 192.168.8.115[500] to 200.XX.XX.XX4[500] (548 bytes)
^C
XG86_AM01_SFOS 18.0.5 MR-5-Build586#

DDNS Configuration:
Cancel
Vote Up 0 Vote Down

Cancel