Hi,
I've been trying to get two 4.002 boxes to VPM to each other but with no luck. I'm using RSA keys and have alternated between using domain name or IP address identification and also with using NAT traversal and not. It always results in "Main Mode message received on xxx.xxx.xxx.xxx:500 but no connection has been authorized" errors.
I've checked the packetfilter logs and there are no blocked packets - I've also set up rules to basically allow in everything from the opposite networks (public IPs)
One thing I have noticed is that on the US side of the connection, the IPSEC packets always come from xxx.yyy.zzz.2 rather than the published external IP address which is xxx.yyy.zzz.61 - this is some kind of proxy/NAT being used by our ISP which is why I thought using domain name authentication or NAT traversal would have sorted it.
Also, the real external IP address of the UK astaro box is 192.168.4.14 but our ISP transforms this to xxx.yyy.zzz.61
(So to recap that - the external IP address assigned to the external interface of the UK astaro box is 192.168.4.14. Our ISP transforms this so that it can be reached as xxx.yyy.zzz.61 - though packets sent come with a source IP of xxx.yyy.zzz.2)
Anyway, I've included the full IKE logs for both sides:
in the UK: xxx.yyy.zzz.61
in the US: aaa.bbb.ccc.98
(I've hidden the proper IP addresses).
The setting on this session was to use domain name identification, with NAT traversal set - also, I named the remote and local subnets on each astaro box to see if that helped - which it didn't:
So.... Here's the UK log of the connection:
UK
Apr 16 18:16:03 (none) pluto[13621]: Starting Pluto (FreeS/WAN Version super-freeswan-1.99_kb1)
Apr 16 18:16:03 (none) pluto[13621]: including X.509 patch (Version 0.9.15)
Apr 16 18:16:03 (none) pluto[13621]: including NAT-Traversal patch (Version 0.5a)
Apr 16 18:16:03 (none) pluto[13621]: | opening /dev/urandom
Apr 16 18:16:03 (none) pluto[13621]: | inserting event EVENT_REINIT_SECRET, timeout in 3600 seconds
Apr 16 18:16:03 (none) pluto[13621]: ike_alg_register_enc: Activating OAKLEY_AES_CBC: Ok (ret=0)
Apr 16 18:16:03 (none) pluto[13621]: ike_alg_register_enc: Activating OAKLEY_BLOWFISH_CBC: Ok (ret=0)
Apr 16 18:16:03 (none) pluto[13621]: ike_alg_register_enc: Activating OAKLEY_CAST_CBC: Ok (ret=0)
Apr 16 18:16:03 (none) pluto[13621]: ike_alg_register_enc: Activating OAKLEY_SERPENT_CBC: Ok (ret=0)
Apr 16 18:16:03 (none) pluto[13621]: ike_alg_register_hash: Activating OAKLEY_SHA2_256: Ok (ret=0)
Apr 16 18:16:03 (none) pluto[13621]: ike_alg_register_hash: Activating OAKLEY_SHA2_512: Ok (ret=0)
Apr 16 18:16:03 (none) pluto[13621]: ike_alg_register_enc: Activating OAKLEY_TWOFISH_CBC: Ok (ret=0)
Apr 16 18:16:03 (none) pluto[13621]: ike_alg_register_enc: Activating OAKLEY_SSH_PRIVATE_65289: Ok (ret=0)
Apr 16 18:16:03 (none) pluto[13621]: | process 13621 listening for PF_KEY_V2 on file descriptor 6
Apr 16 18:16:03 (none) pluto[13621]: | finish_pfkey_msg: SADB_REGISTER message 1 for AH
Apr 16 18:16:03 (none) pluto[13621]: | 02 07 00 02 02 00 00 00 01 00 00 00 35 35 00 00
Apr 16 18:16:03 (none) pluto[13621]: | pfkey_get: SADB_REGISTER message 1
Apr 16 18:16:03 (none) pluto[13621]: | AH registered with kernel.
Apr 16 18:16:03 (none) pluto[13621]: | finish_pfkey_msg: SADB_REGISTER message 2 for ESP
Apr 16 18:16:03 (none) pluto[13621]: | 02 07 00 03 02 00 00 00 02 00 00 00 35 35 00 00
Apr 16 18:16:03 (none) pluto[13621]: | pfkey_get: SADB_REGISTER message 2
Apr 16 18:16:03 (none) pluto[13621]: | alg_init():memset(0x80cbe60, 0, 128) memset(0x80cbee0, 0, 2048)
Apr 16 18:16:03 (none) pluto[13621]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: sadb_msg_len=17 sadb_supported_len=56
Apr 16 18:16:03 (none) pluto[13621]: | kernel_alg_add():satype=3, exttype=14, alg_id=7
Apr 16 18:16:03 (none) pluto[13621]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[0], exttype=14, satype=3, alg_id=7, alg_ivlen=0, alg_minbits=512, alg_maxbits=512, res=0, ret=1
Apr 16 18:16:03 (none) pluto[13621]: | kernel_alg_add():satype=3, exttype=14, alg_id=5
Apr 16 18:16:03 (none) pluto[13621]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[1], exttype=14, satype=3, alg_id=5, alg_ivlen=0, alg_minbits=256, alg_maxbits=256, res=0, ret=1
Apr 16 18:16:03 (none) pluto[13621]: | kernel_alg_add():satype=3, exttype=14, alg_id=3
Apr 16 18:16:03 (none) pluto[13621]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[2], exttype=14, satype=3, alg_id=3, alg_ivlen=0, alg_minbits=160, alg_maxbits=160, res=0, ret=1
Apr 16 18:16:03 (none) pluto[13621]: | kernel_alg_add():satype=3, exttype=14, alg_id=2
Apr 16 18:16:03 (none) pluto[13621]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[3], exttype=14, satype=3, alg_id=2, alg_ivlen=0, alg_minbits=128, alg_maxbits=128, res=0, ret=1
Apr 16 18:16:03 (none) pluto[13621]: | kernel_alg_add():satype=3, exttype=14, alg_id=3
Apr 16 18:16:03 (none) pluto[13621]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[4], exttype=14, satype=3, alg_id=3, alg_ivlen=0, alg_minbits=160, alg_maxbits=160, res=0, ret=1
Apr 16 18:16:03 (none) pluto[13621]: | kernel_alg_add():satype=3, exttype=14, alg_id=2
Apr 16 18:16:03 (none) pluto[13621]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[5], exttype=14, satype=3, alg_id=2, alg_ivlen=0, alg_minbits=128, alg_maxbits=128, res=0, ret=1
Apr 16 18:16:03 (none) pluto[13621]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: sadb_msg_len=17 sadb_supported_len=64
Apr 16 18:16:03 (none) pluto[13621]: | kernel_alg_add():satype=3, exttype=15, alg_id=11
Apr 16 18:16:03 (none) pluto[13621]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[6], exttype=15, satype=3, alg_id=11, alg_ivlen=0, alg_minbits=0, alg_maxbits=0, res=0, ret=1
Apr 16 18:16:03 (none) pluto[13621]: | kernel_alg_add():satype=3, exttype=15, alg_id=252
Apr 16 18:16:03 (none) pluto[13621]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[7], exttype=15, satype=3, alg_id=252, alg_ivlen=128, alg_minbits=128, alg_maxbits=256, res=0, ret=1
Apr 16 18:16:03 (none) pluto[13621]: | kernel_alg_add():satype=3, exttype=15, alg_id=253
Apr 16 18:16:03 (none) pluto[13621]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[8], exttype=15, satype=3, alg_id=253, alg_ivlen=128, alg_minbits=128, alg_maxbits=256, res=0, ret=1
Apr 16 18:16:03 (none) pluto[13621]: | kernel_alg_add():satype=3, exttype=15, alg_id=7
Apr 16 18:16:03 (none) pluto[13621]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[9], exttype=15, satype=3, alg_id=7, alg_ivlen=64, alg_minbits=96, alg_maxbits=128, res=0, ret=1
Apr 16 18:16:03 (none) pluto[13621]: | kernel_alg_add():satype=3, exttype=15, alg_id=12
Apr 16 18:16:03 (none) pluto[13621]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[10], exttype=15, satype=3, alg_id=12, alg_ivlen=128, alg_minbits=128, alg_maxbits=256, res=0, ret=1
Apr 16 18:16:03 (none) pluto[13621]: | kernel_alg_add():satype=3, exttype=15, alg_id=3
Apr 16 18:16:03 (none) pluto[13621]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[11], exttype=15, satype=3, alg_id=3, alg_ivlen=64, alg_minbits=168, alg_maxbits=168, res=0, ret=1
Apr 16 18:16:03 (none) pluto[13621]: | kernel_alg_add():satype=3, exttype=15, alg_id=3
Apr 16 18:16:03 (none) pluto[13621]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[12], exttype=15, satype=3, alg_id=3, alg_ivlen=64, alg_minbits=168, alg_maxbits=168, res=0, ret=1
Apr 16 18:16:03 (none) pluto[13621]: | ESP registered with kernel.
Apr 16 18:16:03 (none) pluto[13621]: | finish_pfkey_msg: SADB_REGISTER message 3 for IPCOMP
Apr 16 18:16:03 (none) pluto[13621]: | 02 07 00 0a 02 00 00 00 03 00 00 00 35 35 00 00
Apr 16 18:16:03 (none) pluto[13621]: | pfkey_get: SADB_REGISTER message 3
Apr 16 18:16:03 (none) pluto[13621]: | IPCOMP registered with kernel.
Apr 16 18:16:03 (none) pluto[13621]: | finish_pfkey_msg: SADB_REGISTER message 4 for IPIP
Apr 16 18:16:03 (none) pluto[13621]: | 02 07 00 09 02 00 00 00 04 00 00 00 35 35 00 00
Apr 16 18:16:03 (none) pluto[13621]: | pfkey_get: SADB_REGISTER message 4
Apr 16 18:16:03 (none) pluto[13621]: | IPIP registered with kernel.
Apr 16 18:16:03 (none) pluto[13621]: | inserting event EVENT_SHUNT_SCAN, timeout in 120 seconds
Apr 16 18:16:03 (none) pluto[13621]: Changing to directory '/etc/ipsec.d/cacerts'
Apr 16 18:16:03 (none) pluto[13621]: Warning: empty directory
Apr 16 18:16:03 (none) pluto[13621]: Changing to directory '/etc/ipsec.d/crls'
Apr 16 18:16:03 (none) pluto[13621]: Warning: empty directory
Apr 16 18:16:03 (none) pluto[13621]: could not open my default X.509 cert file '/etc/x509cert.der'
Apr 16 18:16:03 (none) pluto[13621]: OpenPGP certificate file '/etc/pgpcert.pgp' not found
Apr 16 18:16:03 (none) pluto[13621]: | next event EVENT_SHUNT_SCAN in 120 seconds
Apr 16 18:16:03 (none) pluto[13621]: |
Apr 16 18:16:03 (none) pluto[13621]: | *received adns message
Apr 16 18:16:03 (none) pluto[13621]: ADNS process exited with status 1
Apr 16 18:16:03 (none) pluto[13621]: | next event EVENT_SHUNT_SCAN in 120 seconds
Apr 16 18:16:03 (none) pluto[13621]: |
Apr 16 18:16:03 (none) pluto[13621]: | *received whack message
Apr 16 18:16:03 (none) pluto[13621]: listening for IKE messages
Apr 16 18:16:03 (none) pluto[13621]: | found lo with address 127.0.0.1
Apr 16 18:16:03 (none) pluto[13621]: | found eth0 with address 192.168.0.1
Apr 16 18:16:03 (none) pluto[13621]: | found eth0:1 with address 217.33.134.252
Apr 16 18:16:03 (none) pluto[13621]: | found eth1 with address 192.168.4.14
Apr 16 18:16:03 (none) pluto[13621]: | IP interface eth1 192.168.4.14 has no matching ipsec* interface -- ignored
Apr 16 18:16:03 (none) pluto[13621]: | IP interface eth0:1 217.33.134.252 has no matching ipsec* interface -- ignored
Apr 16 18:16:03 (none) pluto[13621]: | IP interface eth0 192.168.0.1 has no matching ipsec* interface -- ignored
Apr 16 18:16:03 (none) pluto[13621]: | IP interface lo 127.0.0.1 has no matching ipsec* interface -- ignored
Apr 16 18:16:03 (none) pluto[13621]: | could not open /proc/net/if_inet6
Apr 16 18:16:03 (none) pluto[13621]: no public interfaces found
Apr 16 18:16:03 (none) pluto[13621]: loading secrets from "/etc/ipsec.secrets"
Apr 16 18:16:03 (none) pluto[13621]: | next event EVENT_SHUNT_SCAN in 120 seconds
Apr 16 18:16:06 (none) pluto[13621]: |
Apr 16 18:16:06 (none) pluto[13621]: | *received whack message
Apr 16 18:16:06 (none) pluto[13621]: | next event EVENT_SHUNT_SCAN in 117 seconds
Apr 16 18:16:07 (none) pluto[13621]: |
Apr 16 18:16:07 (none) pluto[13621]: | *received whack message
Apr 16 18:16:07 (none) pluto[13621]: loading secrets from "/etc/ipsec.secrets"
Apr 16 18:16:07 (none) pluto[13621]: could not open my default X.509 cert file '/etc/x509cert.der'
Apr 16 18:16:07 (none) pluto[13621]: OpenPGP certificate file '/etc/pgpcert.pgp' not found
Apr 16 18:16:07 (none) pluto[13621]: Changing to directory '/etc/ipsec.d/cacerts'
Apr 16 18:16:07 (none) pluto[13621]: Warning: empty directory
Apr 16 18:16:07 (none) pluto[13621]: Changing to directory '/etc/ipsec.d/crls'
Apr 16 18:16:07 (none) pluto[13621]: Warning: empty directory
Apr 16 18:16:07 (none) pluto[13621]: | next event EVENT_SHUNT_SCAN in 116 seconds
Apr 16 18:16:07 (none) pluto[13621]: |
Apr 16 18:16:07 (none) pluto[13621]: | *received whack message
Apr 16 18:16:07 (none) pluto[13621]: listening for IKE messages
Apr 16 18:16:07 (none) pluto[13621]: | found lo with address 127.0.0.1
Apr 16 18:16:07 (none) pluto[13621]: | found eth0 with address 192.168.0.1
Apr 16 18:16:07 (none) pluto[13621]: | found eth0:1 with address 217.33.134.252
Apr 16 18:16:07 (none) pluto[13621]: | found eth1 with address 192.168.4.14
Apr 16 18:16:07 (none) pluto[13621]: | found ipsec0 with address 192.168.4.14
Apr 16 18:16:07 (none) pluto[13621]: adding interface ipsec0/eth1 192.168.4.14
Apr 16 18:16:07 (none) pluto[13621]: adding interface ipsec0/eth1 192.168.4.14:4500
Apr 16 18:16:07 (none) pluto[13621]: | IP interface eth0:1 217.33.134.252 has no matching ipsec* interface -- ignored
Apr 16 18:16:07 (none) pluto[13621]: | IP interface eth0 192.168.0.1 has no matching ipsec* interface -- ignored
Apr 16 18:16:07 (none) pluto[13621]: | IP interface lo 127.0.0.1 has no matching ipsec* interface -- ignored
Apr 16 18:16:07 (none) pluto[13621]: | could not open /proc/net/if_inet6
Apr 16 18:16:07 (none) pluto[13621]: forgetting secrets
Apr 16 18:16:07 (none) pluto[13621]: loading secrets from "/etc/ipsec.secrets"
Apr 16 18:16:07 (none) pluto[13621]: | next event EVENT_SHUNT_SCAN in 116 seconds
Apr 16 18:16:07 (none) pluto[13621]: |
Apr 16 18:16:07 (none) pluto[13621]: | *received whack message
Apr 16 18:16:07 (none) pluto[13621]: | from whack: got --esp=3des-md5
Apr 16 18:16:07 (none) pluto[13621]: | alg_info_parse_str() ealg_buf=3des aalg_buf=md5eklen=0 aklen=0
Apr 16 18:16:07 (none) pluto[13621]: | enum_search_prefix() calling enum_search(0x80a7c80, "ESP_3DES")
Apr 16 18:16:07 (none) pluto[13621]: | parser_alg_info_add() ealg_getbyname("3des")=3
Apr 16 18:16:07 (none) pluto[13621]: | enum_search_prefix() calling enum_search(0x80a8714, "AUTH_ALGORITHM_HMAC_MD5")
Apr 16 18:16:07 (none) pluto[13621]: | parser_alg_info_add() aalg_getbyname("md5")=1
Apr 16 18:16:07 (none) pluto[13621]: | __alg_info_esp_add() ealg=3 aalg=1 cnt=1
Apr 16 18:16:07 (none) pluto[13621]: | esp string values: 3_000-1, flags=-strict
Apr 16 18:16:07 (none) pluto[13621]: | from whack: got --ike=3des-md5-modp1536
Apr 16 18:16:07 (none) pluto[13621]: | alg_info_parse_str() ealg_buf=3des aalg_buf=md5eklen=0 aklen=0
Apr 16 18:16:07 (none) pluto[13621]: | enum_search_prefix() calling enum_search(0x80a88cc, "OAKLEY_3DES")
Apr 16 18:16:07 (none) pluto[13621]: | enum_search_ppfix() calling enum_search(0x80a88cc, "OAKLEY_3DES_CBC")
Apr 16 18:16:07 (none) pluto[13621]: | parser_alg_info_add() ealg_getbyname("3des")=5
Apr 16 18:16:07 (none) pluto[13621]: | enum_search_prefix() calling enum_search(0x80a8948, "OAKLEY_MD5")
Apr 16 18:16:07 (none) pluto[13621]: | parser_alg_info_add() aalg_getbyname("md5")=1
Apr 16 18:16:07 (none) pluto[13621]: | enum_search_prefix() calling enum_search(0x80a8cd4, "OAKLEY_GROUP_MODP1536")
Apr 16 18:16:07 (none) pluto[13621]: | enum_search_ppfix() calling enum_search(0x80a8cd4, "OAKLEY_GROUP_MODP1536 (extension)")
Apr 16 18:16:07 (none) pluto[13621]: | parser_alg_info_add() modp_getbyname("modp1536")=5
Apr 16 18:16:07 (none) pluto[13621]: | __alg_info_ike_add() ealg=5 aalg=1 modp_id=5, cnt=1
Apr 16 18:16:07 (none) pluto[13621]: | ike string values: 5_000-1-5, flags=-strict
Apr 16 18:16:07 (none) pluto[13621]: | alg_info_addref() alg_info->ref_cnt=1
Apr 16 18:16:07 (none) pluto[13621]: | alg_info_addref() alg_info->ref_cnt=1
Apr 16 18:16:07 (none) pluto[13621]: added connection description "VPNConquestUS_1"
Apr 16 18:16:07 (none) pluto[13621]: | 192.168.0.0/24===192.168.4.14[@asl.conquestbm.com]...aaa.bbb.ccc.98[@asl.usa.conquestbm.com]===10.1.6.0/24
Apr 16 18:16:07 (none) pluto[13621]: | ike_life: 7800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0; policy: RSASIG+ENCRYPT+COMPRESS+TUNNEL
Apr 16 18:16:07 (none) pluto[13621]: | next event EVENT_SHUNT_SCAN in 116 seconds
Apr 16 18:16:07 (none) pluto[13621]: |
Apr 16 18:16:07 (none) pluto[13621]: | *received whack message
Apr 16 18:16:07 (none) pluto[13621]: | next event EVENT_SHUNT_SCAN in 116 seconds
Apr 16 18:16:07 (none) pluto[13621]: |
Apr 16 18:16:07 (none) pluto[13621]: | *received whack message
Apr 16 18:16:07 (none) pluto[13621]: | next event EVENT_SHUNT_SCAN in 116 seconds
Apr 16 18:16:07 (none) pluto[13621]: |
Apr 16 18:16:07 (none) pluto[13621]: | *received whack message
Apr 16 18:16:07 (none) pluto[13621]: | creating state object #1 at 0x80e13a0
Apr 16 18:16:07 (none) pluto[13621]: | ICOOKIE: ab 35 1d af 03 bf b0 87
Apr 16 18:16:07 (none) pluto[13621]: | RCOOKIE: 00 00 00 00 00 00 00 00
Apr 16 18:16:07 (none) pluto[13621]: | peer: cd 9e 9c 62
Apr 16 18:16:07 (none) pluto[13621]: | state hash entry 28
Apr 16 18:16:07 (none) pluto[13621]: | inserting event EVENT_SO_DISCARD, timeout in 0 seconds for #1
Apr 16 18:16:07 (none) pluto[13621]: | Queuing pending Quick Mode with aaa.bbb.ccc.98 "VPNConquestUS_1"
Apr 16 18:16:07 (none) pluto[13621]: "VPNConquestUS_1" #1: initiating Main Mode
Apr 16 18:16:07 (none) pluto[13621]: | **emit ISAKMP Message:
Apr 16 18:16:07 (none) pluto[13621]: | initiator cookie:
Apr 16 18:16:07 (none) pluto[13621]: | ab 35 1d af 03 bf b0 87
Apr 16 18:16:07 (none) pluto[13621]: | responder cookie:
Apr 16 18:16:07 (none) pluto[13621]: | 00 00 00 00 00 00 00 00
Apr 16 18:16:07 (none) pluto[13621]: | next payload type: ISAKMP_NEXT_SA
Apr 16 18:16:07 (none) pluto[13621]: | ISAKMP version: ISAKMP Version 1.0
Apr 16 18:16:07 (none) pluto[13621]: | exchange type: ISAKMP_XCHG_IDPROT
Apr 16 18:16:07 (none) pluto[13621]: | flags: none
Apr 16 18:16:07 (none) pluto[13621]: | message ID: 00 00 00 00
Apr 16 18:16:07 (none) pluto[13621]: | ***emit ISAKMP Security Association Payload:
Apr 16 18:16:07 (none) pluto[13621]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 18:16:07 (none) pluto[13621]: | DOI: ISAKMP_DOI_IPSEC
Apr 16 18:16:07 (none) pluto[13621]: | ****emit IPsec DOI SIT:
Apr 16 18:16:07 (none) pluto[13621]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
Apr 16 18:16:07 (none) pluto[13621]: | 5_000-1-5, flags=-strict
Apr 16 18:16:07 (none) pluto[13621]: | ****emit ISAKMP Proposal Payload:
Apr 16 18:16:07 (none) pluto[13621]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 18:16:07 (none) pluto[13621]: | proposal number: 0
Apr 16 18:16:07 (none) pluto[13621]: | protocol ID: PROTO_ISAKMP
Apr 16 18:16:07 (none) pluto[13621]: | SPI size: 0
Apr 16 18:16:07 (none) pluto[13621]: | number of transforms: 1
Apr 16 18:16:07 (none) pluto[13621]: | *****emit ISAKMP Transform Payload (ISAKMP):
Apr 16 18:16:07 (none) pluto[13621]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 18:16:07 (none) pluto[13621]: | transform number: 0
Apr 16 18:16:07 (none) pluto[13621]: | transform ID: KEY_IKE
Apr 16 18:16:07 (none) pluto[13621]: | ******emit ISAKMP Oakley attribute:
Apr 16 18:16:07 (none) pluto[13621]: | af+type: OAKLEY_LIFE_TYPE
Apr 16 18:16:07 (none) pluto[13621]: | length/value: 1
Apr 16 18:16:07 (none) pluto[13621]: | [1 is OAKLEY_LIFE_SECONDS]
Apr 16 18:16:07 (none) pluto[13621]: | ******emit ISAKMP Oakley attribute:
Apr 16 18:16:07 (none) pluto[13621]: | af+type: OAKLEY_LIFE_DURATION
Apr 16 18:16:07 (none) pluto[13621]: | length/value: 7800
Apr 16 18:16:07 (none) pluto[13621]: | ******emit ISAKMP Oakley attribute:
Apr 16 18:16:07 (none) pluto[13621]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Apr 16 18:16:07 (none) pluto[13621]: | length/value: 5
Apr 16 18:16:07 (none) pluto[13621]: | [5 is OAKLEY_3DES_CBC]
Apr 16 18:16:07 (none) pluto[13621]: | ******emit ISAKMP Oakley attribute:
Apr 16 18:16:07 (none) pluto[13621]: | af+type: OAKLEY_HASH_ALGORITHM
Apr 16 18:16:07 (none) pluto[13621]: | length/value: 1
Apr 16 18:16:07 (none) pluto[13621]: | [1 is OAKLEY_MD5]
Apr 16 18:16:07 (none) pluto[13621]: | ******emit ISAKMP Oakley attribute:
Apr 16 18:16:07 (none) pluto[13621]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Apr 16 18:16:07 (none) pluto[13621]: | length/value: 3
Apr 16 18:16:07 (none) pluto[13621]: | [3 is OAKLEY_RSA_SIG]
Apr 16 18:16:07 (none) pluto[13621]: | ******emit ISAKMP Oakley attribute:
Apr 16 18:16:07 (none) pluto[13621]: | af+type: OAKLEY_GROUP_DESCRIPTION
Apr 16 18:16:07 (none) pluto[13621]: | length/value: 5
Apr 16 18:16:07 (none) pluto[13621]: | [5 is OAKLEY_GROUP_MODP1536 (extension)]
Apr 16 18:16:07 (none) pluto[13621]: | emitting length of ISAKMP Transform Payload (ISAKMP): 32
Apr 16 18:16:07 (none) pluto[13621]: | emitting length of ISAKMP Proposal Payload: 40
Apr 16 18:16:07 (none) pluto[13621]: | emitting length of ISAKMP Security Association Payload: 52
Apr 16 18:16:07 (none) pluto[13621]: | out_vendorid(): sending [draft-ietf-ipsec-nat-t-ike-03]
Apr 16 18:16:07 (none) pluto[13621]: | ***emit ISAKMP Vendor ID Payload:
Apr 16 18:16:07 (none) pluto[13621]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 18:16:07 (none) pluto[13621]: | emitting 16 raw bytes of V_ID into ISAKMP Vendor ID Payload
Apr 16 18:16:07 (none) pluto[13621]: | V_ID 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92 15 52 9d 56
Apr 16 18:16:07 (none) pluto[13621]: | emitting length of ISAKMP Vendor ID Payload: 20
Apr 16 18:16:07 (none) pluto[13621]: | out_vendorid(): sending [draft-ietf-ipsec-nat-t-ike-02]
Apr 16 18:16:07 (none) pluto[13621]: | ***emit ISAKMP Vendor ID Payload:
Apr 16 18:16:07 (none) pluto[13621]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 18:16:07 (none) pluto[13621]: | emitting 16 raw bytes of V_ID into ISAKMP Vendor ID Payload
Apr 16 18:16:07 (none) pluto[13621]: | V_ID cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48
Apr 16 18:16:07 (none) pluto[13621]: | emitting length of ISAKMP Vendor ID Payload: 20
Apr 16 18:16:07 (none) pluto[13621]: | out_vendorid(): sending [draft-ietf-ipsec-nat-t-ike-00]
Apr 16 18:16:07 (none) pluto[13621]: | ***emit ISAKMP Vendor ID Payload:
Apr 16 18:16:07 (none) pluto[13621]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 18:16:07 (none) pluto[13621]: | emitting 16 raw bytes of V_ID into ISAKMP Vendor ID Payload
Apr 16 18:16:07 (none) pluto[13621]: | V_ID 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc
Apr 16 18:16:07 (none) pluto[13621]: | emitting length of ISAKMP Vendor ID Payload: 20
Apr 16 18:16:07 (none) pluto[13621]: | emitting length of ISAKMP Message: 140
Apr 16 18:16:07 (none) pluto[13621]: | sending 140 bytes for main_outI1 through eth1 to aaa.bbb.ccc.98:500:
Apr 16 18:16:07 (none) pluto[13621]: | ab 35 1d af 03 bf b0 87 00 00 00 00 00 00 00 00
Apr 16 18:16:07 (none) pluto[13621]: | 01 10 02 00 00 00 00 00 00 00 00 8c 0d 00 00 34
Apr 16 18:16:07 (none) pluto[13621]: | 00 00 00 01 00 00 00 01 00 00 00 28 00 01 00 01
Apr 16 18:16:07 (none) pluto[13621]: | 00 00 00 20 00 01 00 00 80 0b 00 01 80 0c 1e 78
Apr 16 18:16:07 (none) pluto[13621]: | 80 01 00 05 80 02 00 01 80 03 00 03 80 04 00 05
Apr 16 18:16:07 (none) pluto[13621]: | 0d 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92
Apr 16 18:16:07 (none) pluto[13621]: | 15 52 9d 56 0d 00 00 14 cd 60 46 43 35 df 21 f8
Apr 16 18:16:07 (none) pluto[13621]: | 7c fd b2 fc 68 b6 a4 48 00 00 00 14 44 85 15 2d
Apr 16 18:16:07 (none) pluto[13621]: | 18 b6 bb cd 0b e8 a8 46 95 79 dd cc
Apr 16 18:16:07 (none) pluto[13621]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #1
Apr 16 18:16:07 (none) pluto[13621]: | next event EVENT_RETRANSMIT in 10 seconds for #1
Apr 16 18:16:07 (none) pluto[13621]: |
Apr 16 18:16:07 (none) pluto[13621]: | *received whack message
Apr 16 18:16:07 (none) pluto[13621]: forgetting secrets
Apr 16 18:16:07 (none) pluto[13621]: loading secrets from "/etc/ipsec.secrets"
Apr 16 18:16:07 (none) pluto[13621]: could not open my default X.509 cert file '/etc/x509cert.der'
Apr 16 18:16:07 (none) pluto[13621]: OpenPGP certificate file '/etc/pgpcert.pgp' not found
Apr 16 18:16:07 (none) pluto[13621]: Changing to directory '/etc/ipsec.d/cacerts'
Apr 16 18:16:07 (none) pluto[13621]: Warning: empty directory
Apr 16 18:16:07 (none) pluto[13621]: Changing to directory '/etc/ipsec.d/crls'
Apr 16 18:16:07 (none) pluto[13621]: Warning: empty directory
Apr 16 18:16:07 (none) pluto[13621]: | next event EVENT_RETRANSMIT in 10 seconds for #1
Apr 16 18:16:07 (none) pluto[13621]: | rejected packet:
Apr 16 18:16:07 (none) pluto[13621]: | ab 35 1d af 03 bf b0 87 00 00 00 00 00 00 00 00
Apr 16 18:16:07 (none) pluto[13621]: | 01 10 02 00 00 00 00 00 00 00 00 8c 0d 00 00 34
Apr 16 18:16:07 (none) pluto[13621]: | 00 00 00 01 00 00 00 01 00 00 00 28 00 01 00 01
Apr 16 18:16:07 (none) pluto[13621]: | 00 00 00 20 00 01 00 00 80 0b 00 01 80 0c 1e 78
Apr 16 18:16:07 (none) pluto[13621]: | 80 01 00 05 80 02 00 01 80 03 00 03 80 04 00 05
Apr 16 18:16:07 (none) pluto[13621]: | 0d 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92
Apr 16 18:16:07 (none) pluto[13621]: | 15 52 9d 56 0d 00 00 14 cd 60 46 43 35 df 21 f8
Apr 16 18:16:07 (none) pluto[13621]: | 7c fd b2 fc 68 b6 a4 48 00 00 00 14 44 85 15 2d
Apr 16 18:16:07 (none) pluto[13621]: | 18 b6 bb cd 0b e8 a8 46 95 79 dd cc
Apr 16 18:16:07 (none) pluto[13621]: | control:
Apr 16 18:16:07 (none) pluto[13621]: | 2c 00 00 00 00 00 00 00 0b 00 00 00 6f 00 00 00
Apr 16 18:16:07 (none) pluto[13621]: | 02 03 03 00 00 00 00 00 00 00 00 00 02 00 00 00
Apr 16 18:16:07 (none) pluto[13621]: | cd 9e 9c 62 00 00 00 00 00 00 00 00
Apr 16 18:16:07 (none) pluto[13621]: | name:
Apr 16 18:16:07 (none) pluto[13621]: | 02 00 01 f4 cd 9e 9c 62 00 00 00 00 00 00 00 00
Apr 16 18:16:07 (none) pluto[13621]: "VPNConquestUS_1" #1: ERROR: asynchronous network error report on eth1 for message to aaa.bbb.ccc.98 port 500, complainant aaa.bbb.ccc.98: Connection refused [errno 111, origin ICMP type 3 code 3 (not authenticated)]
Apr 16 18:16:07 (none) pluto[13621]: | next event EVENT_RETRANSMIT in 10 seconds for #1
Apr 16 18:16:17 (none) pluto[13621]: |
Apr 16 18:16:17 (none) pluto[13621]: | *time to handle event
Apr 16 18:16:17 (none) pluto[13621]: | event after this is EVENT_SHUNT_SCAN in 106 seconds
Apr 16 18:16:17 (none) pluto[13621]: | handling event EVENT_RETRANSMIT for aaa.bbb.ccc.98 "VPNConquestUS_1" #1
Apr 16 18:16:17 (none) pluto[13621]: | sending 140 bytes for EVENT_RETRANSMIT through eth1 to aaa.bbb.ccc.98:500:
Apr 16 18:16:17 (none) pluto[13621]: | ab 35 1d af 03 bf b0 87 00 00 00 00 00 00 00 00
Apr 16 18:16:17 (none) pluto[13621]: | 01 10 02 00 00 00 00 00 00 00 00 8c 0d 00 00 34
Apr 16 18:16:17 (none) pluto[13621]: | 00 00 00 01 00 00 00 01 00 00 00 28 00 01 00 01
Apr 16 18:16:17 (none) pluto[13621]: | 00 00 00 20 00 01 00 00 80 0b 00 01 80 0c 1e 78
Apr 16 18:16:17 (none) pluto[13621]: | 80 01 00 05 80 02 00 01 80 03 00 03 80 04 00 05
Apr 16 18:16:17 (none) pluto[13621]: | 0d 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92
Apr 16 18:16:17 (none) pluto[13621]: | 15 52 9d 56 0d 00 00 14 cd 60 46 43 35 df 21 f8
Apr 16 18:16:17 (none) pluto[13621]: | 7c fd b2 fc 68 b6 a4 48 00 00 00 14 44 85 15 2d
Apr 16 18:16:17 (none) pluto[13621]: | 18 b6 bb cd 0b e8 a8 46 95 79 dd cc
Apr 16 18:16:17 (none) pluto[13621]: | inserting event EVENT_RETRANSMIT, timeout in 20 seconds for #1
Apr 16 18:16:17 (none) pluto[13621]: | next event EVENT_RETRANSMIT in 20 seconds for #1
Apr 16 18:16:17 (none) pluto[13621]: | rejected packet:
Apr 16 18:16:17 (none) pluto[13621]: | ab 35 1d af 03 bf b0 87 00 00 00 00 00 00 00 00
Apr 16 18:16:17 (none) pluto[13621]: | 01 10 02 00 00 00 00 00 00 00 00 8c 0d 00 00 34
Apr 16 18:16:17 (none) pluto[13621]: | 00 00 00 01 00 00 00 01 00 00 00 28 00 01 00 01
Apr 16 18:16:17 (none) pluto[13621]: | 00 00 00 20 00 01 00 00 80 0b 00 01 80 0c 1e 78
Apr 16 18:16:17 (none) pluto[13621]: | 80 01 00 05 80 02 00 01 80 03 00 03 80 04 00 05
Apr 16 18:16:17 (none) pluto[13621]: | 0d 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92
Apr 16 18:16:17 (none) pluto[13621]: | 15 52 9d 56 0d 00 00 14 cd 60 46 43 35 df 21 f8
Apr 16 18:16:17 (none) pluto[13621]: | 7c fd b2 fc 68 b6 a4 48 00 00 00 14 44 85 15 2d
Apr 16 18:16:17 (none) pluto[13621]: | 18 b6 bb cd 0b e8 a8 46 95 79 dd cc
Apr 16 18:16:17 (none) pluto[13621]: | control:
Apr 16 18:16:17 (none) pluto[13621]: | 2c 00 00 00 00 00 00 00 0b 00 00 00 6f 00 00 00
Apr 16 18:16:17 (none) pluto[13621]: | 02 03 03 00 00 00 00 00 00 00 00 00 02 00 00 00
Apr 16 18:16:17 (none) pluto[13621]: | cd 9e 9c 62 00 00 00 00 00 00 00 00
Apr 16 18:16:17 (none) pluto[13621]: | name:
Apr 16 18:16:17 (none) pluto[13621]: | 02 00 01 f4 cd 9e 9c 62 00 00 00 00 00 00 00 00
Apr 16 18:16:17 (none) pluto[13621]: "VPNConquestUS_1" #1: ERROR: asynchronous network error report on eth1 for message to aaa.bbb.ccc.98 port 500, complainant aaa.bbb.ccc.98: Connection refused [errno 111, origin ICMP type 3 code 3 (not authenticated)]
Apr 16 18:16:17 (none) pluto[13621]: | next event EVENT_RETRANSMIT in 20 seconds for #1
Apr 16 18:16:23 (none) pluto[13621]: |
Apr 16 18:16:23 (none) pluto[13621]: | *received 140 bytes from aaa.bbb.ccc.98:41228 on eth1
Apr 16 18:16:23 (none) pluto[13621]: | 3a b6 1c 13 4f d8 51 c7 00 00 00 00 00 00 00 00
Apr 16 18:16:23 (none) pluto[13621]: | 01 10 02 00 00 00 00 00 00 00 00 8c 0d 00 00 34
Apr 16 18:16:23 (none) pluto[13621]: | 00 00 00 01 00 00 00 01 00 00 00 28 00 01 00 01
Apr 16 18:16:23 (none) pluto[13621]: | 00 00 00 20 00 01 00 00 80 0b 00 01 80 0c 1e 78
Apr 16 18:16:23 (none) pluto[13621]: | 80 01 00 05 80 02 00 01 80 03 00 03 80 04 00 05
Apr 16 18:16:23 (none) pluto[13621]: | 0d 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92
Apr 16 18:16:23 (none) pluto[13621]: | 15 52 9d 56 0d 00 00 14 cd 60 46 43 35 df 21 f8
Apr 16 18:16:23 (none) pluto[13621]: | 7c fd b2 fc 68 b6 a4 48 00 00 00 14 44 85 15 2d
Apr 16 18:16:23 (none) pluto[13621]: | 18 b6 bb cd 0b e8 a8 46 95 79 dd cc
Apr 16 18:16:23 (none) pluto[13621]: | **parse ISAKMP Message:
Apr 16 18:16:23 (none) pluto[13621]: | initiator cookie:
Apr 16 18:16:23 (none) pluto[13621]: | 3a b6 1c 13 4f d8 51 c7
Apr 16 18:16:23 (none) pluto[13621]: | responder cookie:
Apr 16 18:16:23 (none) pluto[13621]: | 00 00 00 00 00 00 00 00
Apr 16 18:16:23 (none) pluto[13621]: | next payload type: ISAKMP_NEXT_SA
Apr 16 18:16:23 (none) pluto[13621]: | ISAKMP version: ISAKMP Version 1.0
Apr 16 18:16:23 (none) pluto[13621]: | exchange type: ISAKMP_XCHG_IDPROT
Apr 16 18:16:23 (none) pluto[13621]: | flags: none
Apr 16 18:16:23 (none) pluto[13621]: | message ID: 00 00 00 00
Apr 16 18:16:23 (none) pluto[13621]: | length: 140
Apr 16 18:16:23 (none) pluto[13621]: | ***parse ISAKMP Security Association Payload:
Apr 16 18:16:23 (none) pluto[13621]: | next payload type: ISAKMP_NEXT_VID
Apr 16 18:16:23 (none) pluto[13621]: | length: 52
Apr 16 18:16:23 (none) pluto[13621]: | DOI: ISAKMP_DOI_IPSEC
Apr 16 18:16:23 (none) pluto[13621]: | ***parse ISAKMP Vendor ID Payload:
Apr 16 18:16:23 (none) pluto[13621]: | next payload type: ISAKMP_NEXT_VID
Apr 16 18:16:23 (none) pluto[13621]: | length: 20
Apr 16 18:16:23 (none) pluto[13621]: | ***parse ISAKMP Vendor ID Payload:
Apr 16 18:16:23 (none) pluto[13621]: | next payload type: ISAKMP_NEXT_VID
Apr 16 18:16:23 (none) pluto[13621]: | length: 20
Apr 16 18:16:23 (none) pluto[13621]: | ***parse ISAKMP Vendor ID Payload:
Apr 16 18:16:23 (none) pluto[13621]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 18:16:23 (none) pluto[13621]: | length: 20
Apr 16 18:16:23 (none) pluto[13621]: packet from aaa.bbb.ccc.98:41228: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03]
Apr 16 18:16:23 (none) pluto[13621]: | VID: 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92 15 52 9d 56
Apr 16 18:16:23 (none) pluto[13621]: packet from aaa.bbb.ccc.98:41228: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02]
Apr 16 18:16:23 (none) pluto[13621]: | VID: cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48
Apr 16 18:16:23 (none) pluto[13621]: packet from aaa.bbb.ccc.98:41228: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-00]
Apr 16 18:16:23 (none) pluto[13621]: | VID: 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc
Apr 16 18:16:23 (none) pluto[13621]: packet from aaa.bbb.ccc.98:41228: initial Main Mode message received on 192.168.4.14:500 but no connection has been authorized
Apr 16 18:16:23 (none) pluto[13621]: | next event EVENT_RETRANSMIT in 14 seconds for #1
Apr 16 18:16:26 (none) pluto[13621]: |
Apr 16 18:16:26 (none) pluto[13621]: | *received whack message
Apr 16 18:16:26 (none) pluto[13621]: | kernel_alg_esp_enc_ok(3,0): alg_id=3, alg_ivlen=64, alg_minbits=168, alg_maxbits=168, res=0, ret=1
Apr 16 18:16:26 (none) pluto[13621]: | kernel_alg_esp_auth_ok(auth=1): ret=1
Apr 16 18:16:26 (none) pluto[13621]: | kernel_alg_esp_enc_keylen():alg_id=3, keylen=21
Apr 16 18:16:26 (none) pluto[13621]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
Apr 16 18:16:26 (none) pluto[13621]: | next event EVENT_RETRANSMIT in 11 seconds for #1
Apr 16 18:16:33 (none) pluto[13621]: |
Apr 16 18:16:33 (none) pluto[13621]: | *received 140 bytes from aaa.bbb.ccc.98:41228 on eth1
Apr 16 18:16:33 (none) pluto[13621]: | 3a b6 1c 13 4f d8 51 c7 00 00 00 00 00 00 00 00
Apr 16 18:16:33 (none) pluto[13621]: | 01 10 02 00 00 00 00 00 00 00 00 8c 0d 00 00 34
Apr 16 18:16:33 (none) pluto[13621]: | 00 00 00 01 00 00 00 01 00 00 00 28 00 01 00 01
Apr 16 18:16:33 (none) pluto[13621]: | 00 00 00 20 00 01 00 00 80 0b 00 01 80 0c 1e 78
Apr 16 18:16:33 (none) pluto[13621]: | 80 01 00 05 80 02 00 01 80 03 00 03 80 04 00 05
Apr 16 18:16:33 (none) pluto[13621]: | 0d 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92
Apr 16 18:16:33 (none) pluto[13621]: | 15 52 9d 56 0d 00 00 14 cd 60 46 43 35 df 21 f8
Apr 16 18:16:33 (none) pluto[13621]: | 7c fd b2 fc 68 b6 a4 48 00 00 00 14 44 85 15 2d
Apr 16 18:16:33 (none) pluto[13621]: | 18 b6 bb cd 0b e8 a8 46 95 79 dd cc
Apr 16 18:16:33 (none) pluto[13621]: | **parse ISAKMP Message:
Apr 16 18:16:33 (none) pluto[13621]: | initiator cookie:
Apr 16 18:16:33 (none) pluto[13621]: | 3a b6 1c 13 4f d8 51 c7
Apr 16 18:16:33 (none) pluto[13621]: | responder cookie:
Apr 16 18:16:33 (none) pluto[13621]: | 00 00 00 00 00 00 00 00
Apr 16 18:16:33 (none) pluto[13621]: | next payload type: ISAKMP_NEXT_SA
Apr 16 18:16:33 (none) pluto[13621]: | ISAKMP version: ISAKMP Version 1.0
Apr 16 18:16:33 (none) pluto[13621]: | exchange type: ISAKMP_XCHG_IDPROT
Apr 16 18:16:33 (none) pluto[13621]: | flags: none
Apr 16 18:16:33 (none) pluto[13621]: | message ID: 00 00 00 00
Apr 16 18:16:33 (none) pluto[13621]: | length: 140
Apr 16 18:16:33 (none) pluto[13621]: | ***parse ISAKMP Security Association Payload:
Apr 16 18:16:33 (none) pluto[13621]: | next payload type: ISAKMP_NEXT_VID
Apr 16 18:16:33 (none) pluto[13621]: | length: 52
Apr 16 18:16:33 (none) pluto[13621]: | DOI: ISAKMP_DOI_IPSEC
Apr 16 18:16:33 (none) pluto[13621]: | ***parse ISAKMP Vendor ID Payload:
Apr 16 18:16:33 (none) pluto[13621]: | next payload type: ISAKMP_NEXT_VID
Apr 16 18:16:33 (none) pluto[13621]: | length: 20
Apr 16 18:16:33 (none) pluto[13621]: | ***parse ISAKMP Vendor ID Payload:
Apr 16 18:16:33 (none) pluto[13621]: | next payload type: ISAKMP_NEXT_VID
Apr 16 18:16:33 (none) pluto[13621]: | length: 20
Apr 16 18:16:33 (none) pluto[13621]: | ***parse ISAKMP Vendor ID Payload:
Apr 16 18:16:33 (none) pluto[13621]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 18:16:33 (none) pluto[13621]: | length: 20
Apr 16 18:16:33 (none) pluto[13621]: packet from aaa.bbb.ccc.98:41228: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03]
Apr 16 18:16:33 (none) pluto[13621]: | VID: 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92 15 52 9d 56
Apr 16 18:16:33 (none) pluto[13621]: packet from aaa.bbb.ccc.98:41228: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02]
Apr 16 18:16:33 (none) pluto[13621]: | VID: cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48
Apr 16 18:16:33 (none) pluto[13621]: packet from aaa.bbb.ccc.98:41228: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-00]
Apr 16 18:16:33 (none) pluto[13621]: | VID: 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc
Apr 16 18:16:33 (none) pluto[13621]: packet from aaa.bbb.ccc.98:41228: initial Main Mode message received on 192.168.4.14:500 but no connection has been authorized
Apr 16 18:16:33 (none) pluto[13621]: | next event EVENT_RETRANSMIT in 4 seconds for #1
Apr 16 18:16:37 (none) pluto[13621]: |
Apr 16 18:16:37 (none) pluto[13621]: | *time to handle event
Apr 16 18:16:37 (none) pluto[13621]: | event after this is EVENT_SHUNT_SCAN in 86 seconds
Apr 16 18:16:37 (none) pluto[13621]: | handling event EVENT_RETRANSMIT for aaa.bbb.ccc.98 "VPNConquestUS_1" #1
Apr 16 18:16:37 (none) pluto[13621]: | sending 140 bytes for EVENT_RETRANSMIT through eth1 to aaa.bbb.ccc.98:500:
Apr 16 18:16:37 (none) pluto[13621]: | ab 35 1d af 03 bf b0 87 00 00 00 00 00 00 00 00
Apr 16 18:16:37 (none) pluto[13621]: | 01 10 02 00 00 00 00 00 00 00 00 8c 0d 00 00 34
Apr 16 18:16:37 (none) pluto[13621]: | 00 00 00 01 00 00 00 01 00 00 00 28 00 01 00 01
Apr 16 18:16:37 (none) pluto[13621]: | 00 00 00 20 00 01 00 00 80 0b 00 01 80 0c 1e 78
Apr 16 18:16:37 (none) pluto[13621]: | 80 01 00 05 80 02 00 01 80 03 00 03 80 04 00 05
Apr 16 18:16:37 (none) pluto[13621]: | 0d 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92
Apr 16 18:16:37 (none) pluto[13621]: | 15 52 9d 56 0d 00 00 14 cd 60 46 43 35 df 21 f8
Apr 16 18:16:37 (none) pluto[13621]: | 7c fd b2 fc 68 b6 a4 48 00 00 00 14 44 85 15 2d
Apr 16 18:16:37 (none) pluto[13621]: | 18 b6 bb cd 0b e8 a8 46 95 79 dd cc
Apr 16 18:16:37 (none) pluto[13621]: | inserting event EVENT_RETRANSMIT, timeout in 40 seconds for #1
Apr 16 18:16:37 (none) pluto[13621]: | next event EVENT_RETRANSMIT in 40 seconds for #1
Apr 16 18:16:52 (none) pluto[13621]: |
Apr 16 18:16:52 (none) pluto[13621]: | *received 140 bytes from aaa.bbb.ccc.98:41228 on eth1
Apr 16 18:16:52 (none) pluto[13621]: | 3a b6 1c 13 4f d8 51 c7 00 00 00 00 00 00 00 00
Apr 16 18:16:52 (none) pluto[13621]: | 01 10 02 00 00 00 00 00 00 00 00 8c 0d 00 00 34
Apr 16 18:16:52 (none) pluto[13621]: | 00 00 00 01 00 00 00 01 00 00 00 28 00 01 00 01
Apr 16 18:16:52 (none) pluto[13621]: | 00 00 00 20 00 01 00 00 80 0b 00 01 80 0c 1e 78
Apr 16 18:16:52 (none) pluto[13621]: | 80 01 00 05 80 02 00 01 80 03 00 03 80 04 00 05
Apr 16 18:16:52 (none) pluto[13621]: | 0d 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92
Apr 16 18:16:52 (none) pluto[13621]: | 15 52 9d 56 0d 00 00 14 cd 60 46 43 35 df 21 f8
Apr 16 18:16:52 (none) pluto[13621]: | 7c fd b2 fc 68 b6 a4 48 00 00 00 14 44 85 15 2d
Apr 16 18:16:52 (none) pluto[13621]: | 18 b6 bb cd 0b e8 a8 46 95 79 dd cc
Apr 16 18:16:52 (none) pluto[13621]: | **parse ISAKMP Message:
Apr 16 18:16:52 (none) pluto[13621]: | initiator cookie:
Apr 16 18:16:52 (none) pluto[13621]: | 3a b6 1c 13 4f d8 51 c7
Apr 16 18:16:52 (none) pluto[13621]: | responder cookie:
Apr 16 18:16:52 (none) pluto[13621]: | 00 00 00 00 00 00 00 00
Apr 16 18:16:52 (none) pluto[13621]: | next payload type: ISAKMP_NEXT_SA
Apr 16 18:16:52 (none) pluto[13621]: | ISAKMP version: ISAKMP Version 1.0
Apr 16 18:16:52 (none) pluto[13621]: | exchange type: ISAKMP_XCHG_IDPROT
Apr 16 18:16:52 (none) pluto[13621]: | flags: none
Apr 16 18:16:52 (none) pluto[13621]: | message ID: 00 00 00 00
Apr 16 18:16:52 (none) pluto[13621]: | length: 140
Apr 16 18:16:52 (none) pluto[13621]: | ***parse ISAKMP Security Association Payload:
Apr 16 18:16:52 (none) pluto[13621]: | next payload type: ISAKMP_NEXT_VID
Apr 16 18:16:52 (none) pluto[13621]: | length: 52
Apr 16 18:16:52 (none) pluto[13621]: | DOI: ISAKMP_DOI_IPSEC
Apr 16 18:16:52 (none) pluto[13621]: | ***parse ISAKMP Vendor ID Payload:
Apr 16 18:16:52 (none) pluto[13621]: | next payload type: ISAKMP_NEXT_VID
Apr 16 18:16:52 (none) pluto[13621]: | length: 20
Apr 16 18:16:52 (none) pluto[13621]: | ***parse ISAKMP Vendor ID Payload:
Apr 16 18:16:52 (none) pluto[13621]: | next payload type: ISAKMP_NEXT_VID
Apr 16 18:16:52 (none) pluto[13621]: | length: 20
Apr 16 18:16:52 (none) pluto[13621]: | ***parse ISAKMP Vendor ID Payload:
Apr 16 18:16:52 (none) pluto[13621]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 18:16:52 (none) pluto[13621]: | length: 20
Apr 16 18:16:52 (none) pluto[13621]: packet from aaa.bbb.ccc.98:41228: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03]
Apr 16 18:16:52 (none) pluto[13621]: | VID: 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92 15 52 9d 56
Apr 16 18:16:52 (none) pluto[13621]: packet from aaa.bbb.ccc.98:41228: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02]
Apr 16 18:16:52 (none) pluto[13621]: | VID: cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48
Apr 16 18:16:52 (none) pluto[13621]: packet from aaa.bbb.ccc.98:41228: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-00]
Apr 16 18:16:52 (none) pluto[13621]: | VID: 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc
Apr 16 18:16:52 (none) pluto[13621]: packet from aaa.bbb.ccc.98:41228: initial Main Mode message received on 192.168.4.14:500 but no connection has been authorized
####################
And here is the log for the US
US
Apr 16 13:16:20 (none) pluto[9716]: Starting Pluto (FreeS/WAN Version super-freeswan-1.99_kb1)
Apr 16 13:16:20 (none) pluto[9716]: including X.509 patch (Version 0.9.15)
Apr 16 13:16:20 (none) pluto[9716]: including NAT-Traversal patch (Version 0.5a)
Apr 16 13:16:20 (none) pluto[9716]: | opening /dev/urandom
Apr 16 13:16:20 (none) pluto[9716]: | inserting event EVENT_REINIT_SECRET, timeout in 3600 seconds
Apr 16 13:16:20 (none) pluto[9716]: ike_alg_register_enc: Activating OAKLEY_AES_CBC: Ok (ret=0)
Apr 16 13:16:20 (none) pluto[9716]: ike_alg_register_enc: Activating OAKLEY_BLOWFISH_CBC: Ok (ret=0)
Apr 16 13:16:20 (none) pluto[9716]: ike_alg_register_enc: Activating OAKLEY_CAST_CBC: Ok (ret=0)
Apr 16 13:16:20 (none) pluto[9716]: ike_alg_register_enc: Activating OAKLEY_SERPENT_CBC: Ok (ret=0)
Apr 16 13:16:20 (none) pluto[9716]: ike_alg_register_hash: Activating OAKLEY_SHA2_256: Ok (ret=0)
Apr 16 13:16:20 (none) pluto[9716]: ike_alg_register_hash: Activating OAKLEY_SHA2_512: Ok (ret=0)
Apr 16 13:16:20 (none) pluto[9716]: ike_alg_register_enc: Activating OAKLEY_TWOFISH_CBC: Ok (ret=0)
Apr 16 13:16:20 (none) pluto[9716]: ike_alg_register_enc: Activating OAKLEY_SSH_PRIVATE_65289: Ok (ret=0)
Apr 16 13:16:20 (none) pluto[9716]: | process 9716 listening for PF_KEY_V2 on file descriptor 6
Apr 16 13:16:20 (none) pluto[9716]: | finish_pfkey_msg: SADB_REGISTER message 1 for AH
Apr 16 13:16:20 (none) pluto[9716]: | 02 07 00 02 02 00 00 00 01 00 00 00 f4 25 00 00
Apr 16 13:16:20 (none) pluto[9716]: | pfkey_get: SADB_REGISTER message 1
Apr 16 13:16:20 (none) pluto[9716]: | AH registered with kernel.
Apr 16 13:16:20 (none) pluto[9716]: | finish_pfkey_msg: SADB_REGISTER message 2 for ESP
Apr 16 13:16:20 (none) pluto[9716]: | 02 07 00 03 02 00 00 00 02 00 00 00 f4 25 00 00
Apr 16 13:16:20 (none) pluto[9716]: | pfkey_get: SADB_REGISTER message 2
Apr 16 13:16:20 (none) pluto[9716]: | alg_init():memset(0x80cbe60, 0, 128) memset(0x80cbee0, 0, 2048)
Apr 16 13:16:20 (none) pluto[9716]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: sadb_msg_len=17 sadb_supported_len=56
Apr 16 13:16:20 (none) pluto[9716]: | kernel_alg_add():satype=3, exttype=14, alg_id=7
Apr 16 13:16:20 (none) pluto[9716]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[0], exttype=14, satype=3, alg_id=7, alg_ivlen=0, alg_minbits=512, alg_maxbits=512, res=0, ret=1
Apr 16 13:16:20 (none) pluto[9716]: | kernel_alg_add():satype=3, exttype=14, alg_id=5
Apr 16 13:16:20 (none) pluto[9716]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[1], exttype=14, satype=3, alg_id=5, alg_ivlen=0, alg_minbits=256, alg_maxbits=256, res=0, ret=1
Apr 16 13:16:20 (none) pluto[9716]: | kernel_alg_add():satype=3, exttype=14, alg_id=3
Apr 16 13:16:20 (none) pluto[9716]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[2], exttype=14, satype=3, alg_id=3, alg_ivlen=0, alg_minbits=160, alg_maxbits=160, res=0, ret=1
Apr 16 13:16:20 (none) pluto[9716]: | kernel_alg_add():satype=3, exttype=14, alg_id=2
Apr 16 13:16:20 (none) pluto[9716]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[3], exttype=14, satype=3, alg_id=2, alg_ivlen=0, alg_minbits=128, alg_maxbits=128, res=0, ret=1
Apr 16 13:16:20 (none) pluto[9716]: | kernel_alg_add():satype=3, exttype=14, alg_id=3
Apr 16 13:16:20 (none) pluto[9716]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[4], exttype=14, satype=3, alg_id=3, alg_ivlen=0, alg_minbits=160, alg_maxbits=160, res=0, ret=1
Apr 16 13:16:20 (none) pluto[9716]: | kernel_alg_add():satype=3, exttype=14, alg_id=2
Apr 16 13:16:20 (none) pluto[9716]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[5], exttype=14, satype=3, alg_id=2, alg_ivlen=0, alg_minbits=128, alg_maxbits=128, res=0, ret=1
Apr 16 13:16:20 (none) pluto[9716]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: sadb_msg_len=17 sadb_supported_len=64
Apr 16 13:16:20 (none) pluto[9716]: | kernel_alg_add():satype=3, exttype=15, alg_id=11
Apr 16 13:16:20 (none) pluto[9716]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[6], exttype=15, satype=3, alg_id=11, alg_ivlen=0, alg_minbits=0, alg_maxbits=0, res=0, ret=1
Apr 16 13:16:20 (none) pluto[9716]: | kernel_alg_add():satype=3, exttype=15, alg_id=252
Apr 16 13:16:20 (none) pluto[9716]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[7], exttype=15, satype=3, alg_id=252, alg_ivlen=128, alg_minbits=128, alg_maxbits=256, res=0, ret=1
Apr 16 13:16:20 (none) pluto[9716]: | kernel_alg_add():satype=3, exttype=15, alg_id=253
Apr 16 13:16:20 (none) pluto[9716]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[8], exttype=15, satype=3, alg_id=253, alg_ivlen=128, alg_minbits=128, alg_maxbits=256, res=0, ret=1
Apr 16 13:16:20 (none) pluto[9716]: | kernel_alg_add():satype=3, exttype=15, alg_id=7
Apr 16 13:16:20 (none) pluto[9716]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[9], exttype=15, satype=3, alg_id=7, alg_ivlen=64, alg_minbits=96, alg_maxbits=128, res=0, ret=1
Apr 16 13:16:20 (none) pluto[9716]: | kernel_alg_add():satype=3, exttype=15, alg_id=12
Apr 16 13:16:20 (none) pluto[9716]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[10], exttype=15, satype=3, alg_id=12, alg_ivlen=128, alg_minbits=128, alg_maxbits=256, res=0, ret=1
Apr 16 13:16:20 (none) pluto[9716]: | kernel_alg_add():satype=3, exttype=15, alg_id=3
Apr 16 13:16:20 (none) pluto[9716]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[11], exttype=15, satype=3, alg_id=3, alg_ivlen=64, alg_minbits=168, alg_maxbits=168, res=0, ret=1
Apr 16 13:16:20 (none) pluto[9716]: | kernel_alg_add():satype=3, exttype=15, alg_id=3
Apr 16 13:16:20 (none) pluto[9716]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[12], exttype=15, satype=3, alg_id=3, alg_ivlen=64, alg_minbits=168, alg_maxbits=168, res=0, ret=1
Apr 16 13:16:20 (none) pluto[9716]: | ESP registered with kernel.
Apr 16 13:16:20 (none) pluto[9716]: | finish_pfkey_msg: SADB_REGISTER message 3 for IPCOMP
Apr 16 13:16:20 (none) pluto[9716]: | 02 07 00 0a 02 00 00 00 03 00 00 00 f4 25 00 00
Apr 16 13:16:20 (none) pluto[9716]: | pfkey_get: SADB_REGISTER message 3
Apr 16 13:16:20 (none) pluto[9716]: | IPCOMP registered with kernel.
Apr 16 13:16:20 (none) pluto[9716]: | finish_pfkey_msg: SADB_REGISTER message 4 for IPIP
Apr 16 13:16:20 (none) pluto[9716]: | 02 07 00 09 02 00 00 00 04 00 00 00 f4 25 00 00
Apr 16 13:16:20 (none) pluto[9716]: | pfkey_get: SADB_REGISTER message 4
Apr 16 13:16:20 (none) pluto[9716]: | IPIP registered with kernel.
Apr 16 13:16:20 (none) pluto[9716]: | inserting event EVENT_SHUNT_SCAN, timeout in 120 seconds
Apr 16 13:16:20 (none) pluto[9716]: Changing to directory '/etc/ipsec.d/cacerts'
Apr 16 13:16:20 (none) pluto[9716]: Warning: empty directory
Apr 16 13:16:20 (none) pluto[9716]: Changing to directory '/etc/ipsec.d/crls'
Apr 16 13:16:20 (none) pluto[9716]: Warning: empty directory
Apr 16 13:16:20 (none) pluto[9716]: could not open my default X.509 cert file '/etc/x509cert.der'
Apr 16 13:16:20 (none) pluto[9716]: OpenPGP certificate file '/etc/pgpcert.pgp' not found
Apr 16 13:16:20 (none) pluto[9716]: | next event EVENT_SHUNT_SCAN in 120 seconds
Apr 16 13:16:20 (none) pluto[9716]: |
Apr 16 13:16:20 (none) pluto[9716]: | *received adns message
Apr 16 13:16:20 (none) pluto[9716]: ADNS process exited with status 1
Apr 16 13:16:20 (none) pluto[9716]: |
Apr 16 13:16:20 (none) pluto[9716]: | *received whack message
Apr 16 13:16:20 (none) pluto[9716]: listening for IKE messages
Apr 16 13:16:20 (none) pluto[9716]: | found lo with address 127.0.0.1
Apr 16 13:16:20 (none) pluto[9716]: | found eth0 with address 10.1.6.1
Apr 16 13:16:20 (none) pluto[9716]: | found eth1 with address aaa.bbb.ccc.98
Apr 16 13:16:20 (none) pluto[9716]: | found ppp0 with address 10.136.91.1
Apr 16 13:16:20 (none) pluto[9716]: | IP interface ppp0 10.136.91.1 has no matching ipsec* interface -- ignored
Apr 16 13:16:20 (none) pluto[9716]: | IP interface eth1 aaa.bbb.ccc.98 has no matching ipsec* interface -- ignored
Apr 16 13:16:20 (none) pluto[9716]: | IP interface eth0 10.1.6.1 has no matching ipsec* interface -- ignored
Apr 16 13:16:20 (none) pluto[9716]: | IP interface lo 127.0.0.1 has no matching ipsec* interface -- ignored
Apr 16 13:16:20 (none) pluto[9716]: | could not open /proc/net/if_inet6
Apr 16 13:16:20 (none) pluto[9716]: no public interfaces found
Apr 16 13:16:20 (none) pluto[9716]: loading secrets from "/etc/ipsec.secrets"
Apr 16 13:16:20 (none) pluto[9716]: | next event EVENT_SHUNT_SCAN in 120 seconds
Apr 16 13:16:21 (none) pluto[9716]: |
Apr 16 13:16:21 (none) pluto[9716]: | *received whack message
Apr 16 13:16:21 (none) pluto[9716]: | next event EVENT_SHUNT_SCAN in 119 seconds
Apr 16 13:16:22 (none) pluto[9716]: |
Apr 16 13:16:22 (none) pluto[9716]: | *received whack message
Apr 16 13:16:22 (none) pluto[9716]: loading secrets from "/etc/ipsec.secrets"
Apr 16 13:16:22 (none) pluto[9716]: could not open my default X.509 cert file '/etc/x509cert.der'
Apr 16 13:16:22 (none) pluto[9716]: OpenPGP certificate file '/etc/pgpcert.pgp' not found
Apr 16 13:16:22 (none) pluto[9716]: Changing to directory '/etc/ipsec.d/cacerts'
Apr 16 13:16:22 (none) pluto[9716]: Warning: empty directory
Apr 16 13:16:22 (none) pluto[9716]: Changing to directory '/etc/ipsec.d/crls'
Apr 16 13:16:22 (none) pluto[9716]: Warning: empty directory
Apr 16 13:16:22 (none) pluto[9716]: | next event EVENT_SHUNT_SCAN in 118 seconds
Apr 16 13:16:22 (none) pluto[9716]: |
Apr 16 13:16:22 (none) pluto[9716]: | *received whack message
Apr 16 13:16:22 (none) pluto[9716]: listening for IKE messages
Apr 16 13:16:22 (none) pluto[9716]: | found lo with address 127.0.0.1
Apr 16 13:16:22 (none) pluto[9716]: | found eth0 with address 10.1.6.1
Apr 16 13:16:22 (none) pluto[9716]: | found eth1 with address aaa.bbb.ccc.98
Apr 16 13:16:22 (none) pluto[9716]: | found ppp0 with address 10.136.91.1
Apr 16 13:16:22 (none) pluto[9716]: | found ipsec0 with address aaa.bbb.ccc.98
Apr 16 13:16:22 (none) pluto[9716]: | IP interface ppp0 10.136.91.1 has no matching ipsec* interface -- ignored
Apr 16 13:16:22 (none) pluto[9716]: adding interface ipsec0/eth1 aaa.bbb.ccc.98
Apr 16 13:16:22 (none) pluto[9716]: adding interface ipsec0/eth1 aaa.bbb.ccc.98:4500
Apr 16 13:16:22 (none) pluto[9716]: | IP interface eth0 10.1.6.1 has no matching ipsec* interface -- ignored
Apr 16 13:16:22 (none) pluto[9716]: | IP interface lo 127.0.0.1 has no matching ipsec* interface -- ignored
Apr 16 13:16:22 (none) pluto[9716]: | could not open /proc/net/if_inet6
Apr 16 13:16:22 (none) pluto[9716]: forgetting secrets
Apr 16 13:16:22 (none) pluto[9716]: loading secrets from "/etc/ipsec.secrets"
Apr 16 13:16:22 (none) pluto[9716]: | next event EVENT_SHUNT_SCAN in 118 seconds
Apr 16 13:16:22 (none) pluto[9716]: |
Apr 16 13:16:22 (none) pluto[9716]: | *received whack message
Apr 16 13:16:22 (none) pluto[9716]: | from whack: got --esp=3des-md5
Apr 16 13:16:22 (none) pluto[9716]: | alg_info_parse_str() ealg_buf=3des aalg_buf=md5eklen=0 aklen=0
Apr 16 13:16:22 (none) pluto[9716]: | enum_search_prefix() calling enum_search(0x80a7c80, "ESP_3DES")
Apr 16 13:16:22 (none) pluto[9716]: | parser_alg_info_add() ealg_getbyname("3des")=3
Apr 16 13:16:22 (none) pluto[9716]: | enum_search_prefix() calling enum_search(0x80a8714, "AUTH_ALGORITHM_HMAC_MD5")
Apr 16 13:16:22 (none) pluto[9716]: | parser_alg_info_add() aalg_getbyname("md5")=1
Apr 16 13:16:22 (none) pluto[9716]: | __alg_info_esp_add() ealg=3 aalg=1 cnt=1
Apr 16 13:16:22 (none) pluto[9716]: | esp string values: 3_000-1, flags=-strict
Apr 16 13:16:22 (none) pluto[9716]: | from whack: got --ike=3des-md5-modp1536
Apr 16 13:16:22 (none) pluto[9716]: | alg_info_parse_str() ealg_buf=3des aalg_buf=md5eklen=0 aklen=0
Apr 16 13:16:22 (none) pluto[9716]: | enum_search_prefix() calling enum_search(0x80a88cc, "OAKLEY_3DES")
Apr 16 13:16:22 (none) pluto[9716]: | enum_search_ppfix() calling enum_search(0x80a88cc, "OAKLEY_3DES_CBC")
Apr 16 13:16:22 (none) pluto[9716]: | parser_alg_info_add() ealg_getbyname("3des")=5
Apr 16 13:16:22 (none) pluto[9716]: | enum_search_prefix() calling enum_search(0x80a8948, "OAKLEY_MD5")
Apr 16 13:16:22 (none) pluto[9716]: | parser_alg_info_add() aalg_getbyname("md5")=1
Apr 16 13:16:22 (none) pluto[9716]: | enum_search_prefix() calling enum_search(0x80a8cd4, "OAKLEY_GROUP_MODP1536")
Apr 16 13:16:22 (none) pluto[9716]: | enum_search_ppfix() calling enum_search(0x80a8cd4, "OAKLEY_GROUP_MODP1536 (extension)")
Apr 16 13:16:22 (none) pluto[9716]: | parser_alg_info_add() modp_getbyname("modp1536")=5
Apr 16 13:16:22 (none) pluto[9716]: | __alg_info_ike_add() ealg=5 aalg=1 modp_id=5, cnt=1
Apr 16 13:16:22 (none) pluto[9716]: | ike string values: 5_000-1-5, flags=-strict
Apr 16 13:16:22 (none) pluto[9716]: | alg_info_addref() alg_info->ref_cnt=1
Apr 16 13:16:22 (none) pluto[9716]: | alg_info_addref() alg_info->ref_cnt=1
Apr 16 13:16:22 (none) pluto[9716]: added connection description "VPNConquestUK_1"
Apr 16 13:16:22 (none) pluto[9716]: | 10.1.6.0/24===aaa.bbb.ccc.98[@asl.usa.conquestbm.com]...xxx.yyy.zzz.61[@asl.conquestbm.com]===192.168.0.0/24
Apr 16 13:16:22 (none) pluto[9716]: | ike_life: 7800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0; policy: RSASIG+ENCRYPT+COMPRESS+TUNNEL
Apr 16 13:16:22 (none) pluto[9716]: | next event EVENT_SHUNT_SCAN in 118 seconds
Apr 16 13:16:22 (none) pluto[9716]: |
Apr 16 13:16:22 (none) pluto[9716]: | *received whack message
Apr 16 13:16:22 (none) pluto[9716]: | next event EVENT_SHUNT_SCAN in 118 seconds
Apr 16 13:16:22 (none) pluto[9716]: |
Apr 16 13:16:22 (none) pluto[9716]: | *received whack message
Apr 16 13:16:22 (none) pluto[9716]: | next event EVENT_SHUNT_SCAN in 118 seconds
Apr 16 13:16:22 (none) pluto[9716]: |
Apr 16 13:16:22 (none) pluto[9716]: | *received whack message
Apr 16 13:16:22 (none) pluto[9716]: | creating state object #1 at 0x80e13b0
Apr 16 13:16:22 (none) pluto[9716]: | ICOOKIE: 3a b6 1c 13 4f d8 51 c7
Apr 16 13:16:22 (none) pluto[9716]: | RCOOKIE: 00 00 00 00 00 00 00 00
Apr 16 13:16:22 (none) pluto[9716]: | peer: c2 4b ac 3d
Apr 16 13:16:22 (none) pluto[9716]: | state hash entry 24
Apr 16 13:16:22 (none) pluto[9716]: | inserting event EVENT_SO_DISCARD, timeout in 0 seconds for #1
Apr 16 13:16:22 (none) pluto[9716]: | Queuing pending Quick Mode with xxx.yyy.zzz.61 "VPNConquestUK_1"
Apr 16 13:16:22 (none) pluto[9716]: "VPNConquestUK_1" #1: initiating Main Mode
Apr 16 13:16:22 (none) pluto[9716]: | **emit ISAKMP Message:
Apr 16 13:16:22 (none) pluto[9716]: | initiator cookie:
Apr 16 13:16:22 (none) pluto[9716]: | 3a b6 1c 13 4f d8 51 c7
Apr 16 13:16:22 (none) pluto[9716]: | responder cookie:
Apr 16 13:16:22 (none) pluto[9716]: | 00 00 00 00 00 00 00 00
Apr 16 13:16:22 (none) pluto[9716]: | next payload type: ISAKMP_NEXT_SA
Apr 16 13:16:22 (none) pluto[9716]: | ISAKMP version: ISAKMP Version 1.0
Apr 16 13:16:22 (none) pluto[9716]: | exchange type: ISAKMP_XCHG_IDPROT
Apr 16 13:16:22 (none) pluto[9716]: | flags: none
Apr 16 13:16:22 (none) pluto[9716]: | message ID: 00 00 00 00
Apr 16 13:16:22 (none) pluto[9716]: | ***emit ISAKMP Security Association Payload:
Apr 16 13:16:22 (none) pluto[9716]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 13:16:22 (none) pluto[9716]: | DOI: ISAKMP_DOI_IPSEC
Apr 16 13:16:22 (none) pluto[9716]: | ****emit IPsec DOI SIT:
Apr 16 13:16:22 (none) pluto[9716]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
Apr 16 13:16:22 (none) pluto[9716]: | 5_000-1-5, flags=-strict
Apr 16 13:16:22 (none) pluto[9716]: | ****emit ISAKMP Proposal Payload:
Apr 16 13:16:22 (none) pluto[9716]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 13:16:22 (none) pluto[9716]: | proposal number: 0
Apr 16 13:16:22 (none) pluto[9716]: | protocol ID: PROTO_ISAKMP
Apr 16 13:16:22 (none) pluto[9716]: | SPI size: 0
Apr 16 13:16:22 (none) pluto[9716]: | number of transforms: 1
Apr 16 13:16:22 (none) pluto[9716]: | *****emit ISAKMP Transform Payload (ISAKMP):
Apr 16 13:16:22 (none) pluto[9716]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 13:16:22 (none) pluto[9716]: | transform number: 0
Apr 16 13:16:22 (none) pluto[9716]: | transform ID: KEY_IKE
Apr 16 13:16:22 (none) pluto[9716]: | ******emit ISAKMP Oakley attribute:
Apr 16 13:16:22 (none) pluto[9716]: | af+type: OAKLEY_LIFE_TYPE
Apr 16 13:16:22 (none) pluto[9716]: | length/value: 1
Apr 16 13:16:22 (none) pluto[9716]: | [1 is OAKLEY_LIFE_SECONDS]
Apr 16 13:16:22 (none) pluto[9716]: | ******emit ISAKMP Oakley attribute:
Apr 16 13:16:22 (none) pluto[9716]: | af+type: OAKLEY_LIFE_DURATION
Apr 16 13:16:22 (none) pluto[9716]: | length/value: 7800
Apr 16 13:16:22 (none) pluto[9716]: | ******emit ISAKMP Oakley attribute:
Apr 16 13:16:22 (none) pluto[9716]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
Apr 16 13:16:22 (none) pluto[9716]: | length/value: 5
Apr 16 13:16:22 (none) pluto[9716]: | [5 is OAKLEY_3DES_CBC]
Apr 16 13:16:22 (none) pluto[9716]: | ******emit ISAKMP Oakley attribute:
Apr 16 13:16:22 (none) pluto[9716]: | af+type: OAKLEY_HASH_ALGORITHM
Apr 16 13:16:22 (none) pluto[9716]: | length/value: 1
Apr 16 13:16:22 (none) pluto[9716]: | [1 is OAKLEY_MD5]
Apr 16 13:16:22 (none) pluto[9716]: | ******emit ISAKMP Oakley attribute:
Apr 16 13:16:22 (none) pluto[9716]: | af+type: OAKLEY_AUTHENTICATION_METHOD
Apr 16 13:16:22 (none) pluto[9716]: | length/value: 3
Apr 16 13:16:22 (none) pluto[9716]: | [3 is OAKLEY_RSA_SIG]
Apr 16 13:16:22 (none) pluto[9716]: | ******emit ISAKMP Oakley attribute:
Apr 16 13:16:22 (none) pluto[9716]: | af+type: OAKLEY_GROUP_DESCRIPTION
Apr 16 13:16:22 (none) pluto[9716]: | length/value: 5
Apr 16 13:16:22 (none) pluto[9716]: | [5 is OAKLEY_GROUP_MODP1536 (extension)]
Apr 16 13:16:22 (none) pluto[9716]: | emitting length of ISAKMP Transform Payload (ISAKMP): 32
Apr 16 13:16:22 (none) pluto[9716]: | emitting length of ISAKMP Proposal Payload: 40
Apr 16 13:16:22 (none) pluto[9716]: | emitting length of ISAKMP Security Association Payload: 52
Apr 16 13:16:22 (none) pluto[9716]: | out_vendorid(): sending [draft-ietf-ipsec-nat-t-ike-03]
Apr 16 13:16:22 (none) pluto[9716]: | ***emit ISAKMP Vendor ID Payload:
Apr 16 13:16:22 (none) pluto[9716]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 13:16:22 (none) pluto[9716]: | emitting 16 raw bytes of V_ID into ISAKMP Vendor ID Payload
Apr 16 13:16:22 (none) pluto[9716]: | V_ID 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92 15 52 9d 56
Apr 16 13:16:22 (none) pluto[9716]: | emitting length of ISAKMP Vendor ID Payload: 20
Apr 16 13:16:22 (none) pluto[9716]: | out_vendorid(): sending [draft-ietf-ipsec-nat-t-ike-02]
Apr 16 13:16:22 (none) pluto[9716]: | ***emit ISAKMP Vendor ID Payload:
Apr 16 13:16:22 (none) pluto[9716]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 13:16:22 (none) pluto[9716]: | emitting 16 raw bytes of V_ID into ISAKMP Vendor ID Payload
Apr 16 13:16:22 (none) pluto[9716]: | V_ID cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48
Apr 16 13:16:22 (none) pluto[9716]: | emitting length of ISAKMP Vendor ID Payload: 20
Apr 16 13:16:22 (none) pluto[9716]: | out_vendorid(): sending [draft-ietf-ipsec-nat-t-ike-00]
Apr 16 13:16:22 (none) pluto[9716]: | ***emit ISAKMP Vendor ID Payload:
Apr 16 13:16:22 (none) pluto[9716]: | next payload type: ISAKMP_NEXT_NONE
Apr 16 13:16:22 (none) pluto[9716]: | emitting 16 raw bytes of V_ID into ISAKMP Vendor ID Payload
Apr 16 13:16:22 (none) pluto[9716]: | V_ID 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc
Apr 16 13:16:22 (none) pluto[9716]: | emitting length of ISAKMP Vendor ID Payload: 20
Apr 16 13:16:22 (none) pluto[9716]: | emitting length of ISAKMP Message: 140
Apr 16 13:16:22 (none) pluto[9716]: | sending 140 bytes for main_outI1 through eth1 to xxx.yyy.zzz.61:500:
Apr 16 13:16:22 (none) pluto[9716]: | 3a b6 1c 13 4f d8 51 c7 00 00 00 00 00 00 00 00
Apr 16 13:16:22 (none) pluto[9716]: | 01 10 02 00 00 00 00 00 00 00 00 8c 0d 00 00 34
Apr 16 13:16:22 (none) pluto[9716]: | 00 00 00 01 00 00 00 01 00 00 00 28 00 01 00 01
Apr 16 13:16:22 (none) pluto[9716]: | 00 00 00 20 00 01 00 00 80 0b 00 01 80 0c 1e 78
Apr 16 13:16:22 (none) pluto[9716]: | 80 01 00 05 80 02 00 01 80 03 00 03 80 04 00 05
Apr 16 13:16:22 (none) pluto[9716]: | 0d 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92
Apr 16 13:16:22 (none) pluto[9716]: | 15 52 9d 56 0d 0
This thread was automatically locked due to age.
