Hi.
After help setting up a VPN between two Astaro 4 boxes, I'm having problems getting any traffic to flow between the two despite the IPSEC VPN connection having been established.
My initial problem (now solved) was that the UK end of the VPN was behind a NATing router operated by my ISP. The solution was to set up the remote UK VPN connection as a 'dynamic' IP on the US Astaro box and using T-NAT to traverse this.
When established, both sides indicate success and show the established route. ON the UK side, it looks like:
VPN status:
#########################
000
000 "VPNUS_1": 192.168.0.0/24===192.168.4.14:4500[@asl.mydomain.com]...205.158.156.98:4500[@asl.usa.conquestbm.com]===10.1.6.0/24
000 "VPNUS_1": ike_life: 7800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "VPNUS_1": policy: RSASIG+ENCRYPT+COMPRESS+TUNNEL; interface: eth1; erouted
000 "VPNUS_1": newest ISAKMP SA: #3; newest IPsec SA: #4; eroute owner: #4
000 "VPNUS_1": IKE algorithms wanted: 5_000-1-5, flags=-strict
000 "VPNUS_1": IKE algorithms found: 5_192-1_128-5,
000 "VPNUS_1": IKE algorithm newest: 3DES_CBC_192-MD5-MODP1536 (extension)
000 "VPNUS_1": ESP algorithms wanted: 3_000-1, flags=-strict
000 "VPNUS_1": ESP algorithms loaded: 3_168-1_128,
000 "VPNUS_1": ESP algorithm newest: 3DES_0-HMAC_MD5; pfsgroup=
000
000 #4: "VPNUS_1" STATE_QUICK_I2 (sent QI2, IPsec SA established); EVENT_SA_REPLACE in 2589s; newest IPSEC; eroute owner
000 #4: "VPNUS_1" esp.2e23e13f@aaa.bbb.ccc.ddd esp.cdfb5b7c@192.168.4.14 comp.8b8@aaa.bbb.ccc.ddd comp.564d@192.168.4.14 tun.1004@aaa.bbb.ccc.ddd tun.1003@192.168.4.14
000 #3: "VPNUS_1" STATE_MAIN_I4 (ISAKMP SA established); EVENT_SA_REPLACE in 6961s; newest ISAKMP
000
############################
VPN Routes:
0 192.168.0.0/24 -> 10.1.6.0/24 => tun0x1004@aaa.bbb.ccc.ddd
##############################
Note, the external interface of the US side has been hidden with "aaa.bbb.ccc.ddd" as has references to it's name "asl.mydomain.com"
Looking at this and the established routing table on the UK astaro box looks fine:
192.168.4.0 * 255.255.255.0 U 0 0 0 eth1
192.168.4.0 * 255.255.255.0 U 0 0 0 ipsec0
192.168.0.0 * 255.255.255.0 U 0 0 0 eth0
10.1.6.0 192.168.4.1 255.255.255.0 UG 0 0 0 ipsec0
127.0.0.0 * 255.0.0.0 U 0 0 0 lo
default 192.168.4.1 0.0.0.0 UG 0 0 0 eth1
However, no packets will traverse the tunnel - all that happens is that the packets appear to get dropped - looking at the ifconfig command on the astaro box:
ipsec0 Link encap:Ethernet HWaddr 52:54:00[:D]F:C5:CB
inet addr:192.168.4.14 Mask:255.255.255.0
UP RUNNING NOARP MTU:16260 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:9 overruns:0 carrier:0
collisions:0 txqueuelen:10
The TX dropped count goes up for each outgoing connection, ping, traceroute etc.
It makes me think that the problem is not with the tunnel but with the establishment of the interface/routing
Any ideas more than welcome,
Thanks
Just in case, here's an IKE dump of the established tunnel and the period during attempted connections and pings over the tunnel:
May 6 14:07:15 (none) pluto[19570]: Starting Pluto (FreeS/WAN Version super-freeswan-1.99_kb1)
May 6 14:07:15 (none) pluto[19570]: including X.509 patch (Version 0.9.15)
May 6 14:07:15 (none) pluto[19570]: including NAT-Traversal patch (Version 0.5a)
May 6 14:07:15 (none) pluto[19570]: | opening /dev/urandom
May 6 14:07:15 (none) pluto[19570]: | inserting event EVENT_REINIT_SECRET, timeout in 3600 seconds
May 6 14:07:15 (none) pluto[19570]: ike_alg_register_enc: Activating OAKLEY_AES_CBC: Ok (ret=0)
May 6 14:07:15 (none) pluto[19570]: ike_alg_register_enc: Activating OAKLEY_BLOWFISH_CBC: Ok (ret=0)
May 6 14:07:15 (none) pluto[19570]: ike_alg_register_enc: Activating OAKLEY_CAST_CBC: Ok (ret=0)
May 6 14:07:15 (none) pluto[19570]: ike_alg_register_enc: Activating OAKLEY_SERPENT_CBC: Ok (ret=0)
May 6 14:07:15 (none) pluto[19570]: ike_alg_register_hash: Activating OAKLEY_SHA2_256: Ok (ret=0)
May 6 14:07:15 (none) pluto[19570]: ike_alg_register_hash: Activating OAKLEY_SHA2_512: Ok (ret=0)
May 6 14:07:15 (none) pluto[19570]: ike_alg_register_enc: Activating OAKLEY_TWOFISH_CBC: Ok (ret=0)
May 6 14:07:15 (none) pluto[19570]: ike_alg_register_enc: Activating OAKLEY_SSH_PRIVATE_65289: Ok (ret=0)
May 6 14:07:15 (none) pluto[19570]: | process 19570 listening for PF_KEY_V2 on file descriptor 6
May 6 14:07:15 (none) pluto[19570]: | finish_pfkey_msg: SADB_REGISTER message 1 for AH
May 6 14:07:15 (none) pluto[19570]: | 02 07 00 02 02 00 00 00 01 00 00 00 72 4c 00 00
May 6 14:07:15 (none) pluto[19570]: | pfkey_get: SADB_REGISTER message 1
May 6 14:07:15 (none) pluto[19570]: | AH registered with kernel.
May 6 14:07:15 (none) pluto[19570]: | finish_pfkey_msg: SADB_REGISTER message 2 for ESP
May 6 14:07:15 (none) pluto[19570]: | 02 07 00 03 02 00 00 00 02 00 00 00 72 4c 00 00
May 6 14:07:15 (none) pluto[19570]: | pfkey_get: SADB_REGISTER message 2
May 6 14:07:15 (none) pluto[19570]: | alg_init():memset(0x80cbe60, 0, 128) memset(0x80cbee0, 0, 2048)
May 6 14:07:15 (none) pluto[19570]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: sadb_msg_len=17 sadb_supported_len=56
May 6 14:07:15 (none) pluto[19570]: | kernel_alg_add():satype=3, exttype=14, alg_id=7
May 6 14:07:15 (none) pluto[19570]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[0], exttype=14, satype=3, alg_id=7, alg_ivlen=0, alg_minbits=512, alg_maxbits=512, res=0, ret=1
May 6 14:07:15 (none) pluto[19570]: | kernel_alg_add():satype=3, exttype=14, alg_id=5
May 6 14:07:15 (none) pluto[19570]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[1], exttype=14, satype=3, alg_id=5, alg_ivlen=0, alg_minbits=256, alg_maxbits=256, res=0, ret=1
May 6 14:07:15 (none) pluto[19570]: | kernel_alg_add():satype=3, exttype=14, alg_id=3
May 6 14:07:15 (none) pluto[19570]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[2], exttype=14, satype=3, alg_id=3, alg_ivlen=0, alg_minbits=160, alg_maxbits=160, res=0, ret=1
May 6 14:07:15 (none) pluto[19570]: | kernel_alg_add():satype=3, exttype=14, alg_id=2
May 6 14:07:15 (none) pluto[19570]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[3], exttype=14, satype=3, alg_id=2, alg_ivlen=0, alg_minbits=128, alg_maxbits=128, res=0, ret=1
May 6 14:07:15 (none) pluto[19570]: | kernel_alg_add():satype=3, exttype=14, alg_id=3
May 6 14:07:15 (none) pluto[19570]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[4], exttype=14, satype=3, alg_id=3, alg_ivlen=0, alg_minbits=160, alg_maxbits=160, res=0, ret=1
May 6 14:07:15 (none) pluto[19570]: | kernel_alg_add():satype=3, exttype=14, alg_id=2
May 6 14:07:15 (none) pluto[19570]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[5], exttype=14, satype=3, alg_id=2, alg_ivlen=0, alg_minbits=128, alg_maxbits=128, res=0, ret=1
May 6 14:07:15 (none) pluto[19570]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: sadb_msg_len=17 sadb_supported_len=64
May 6 14:07:15 (none) pluto[19570]: | kernel_alg_add():satype=3, exttype=15, alg_id=11
May 6 14:07:15 (none) pluto[19570]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[6], exttype=15, satype=3, alg_id=11, alg_ivlen=0, alg_minbits=0, alg_maxbits=0, res=0, ret=1
May 6 14:07:15 (none) pluto[19570]: | kernel_alg_add():satype=3, exttype=15, alg_id=252
May 6 14:07:15 (none) pluto[19570]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[7], exttype=15, satype=3, alg_id=252, alg_ivlen=128, alg_minbits=128, alg_maxbits=256, res=0, ret=1
May 6 14:07:15 (none) pluto[19570]: | kernel_alg_add():satype=3, exttype=15, alg_id=253
May 6 14:07:15 (none) pluto[19570]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[8], exttype=15, satype=3, alg_id=253, alg_ivlen=128, alg_minbits=128, alg_maxbits=256, res=0, ret=1
May 6 14:07:15 (none) pluto[19570]: | kernel_alg_add():satype=3, exttype=15, alg_id=7
May 6 14:07:15 (none) pluto[19570]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[9], exttype=15, satype=3, alg_id=7, alg_ivlen=64, alg_minbits=96, alg_maxbits=128, res=0, ret=1
May 6 14:07:15 (none) pluto[19570]: | kernel_alg_add():satype=3, exttype=15, alg_id=12
May 6 14:07:15 (none) pluto[19570]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[10], exttype=15, satype=3, alg_id=12, alg_ivlen=128, alg_minbits=128, alg_maxbits=256, res=0, ret=1
May 6 14:07:15 (none) pluto[19570]: | kernel_alg_add():satype=3, exttype=15, alg_id=3
May 6 14:07:15 (none) pluto[19570]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[11], exttype=15, satype=3, alg_id=3, alg_ivlen=64, alg_minbits=168, alg_maxbits=168, res=0, ret=1
May 6 14:07:15 (none) pluto[19570]: | kernel_alg_add():satype=3, exttype=15, alg_id=3
May 6 14:07:15 (none) pluto[19570]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[12], exttype=15, satype=3, alg_id=3, alg_ivlen=64, alg_minbits=168, alg_maxbits=168, res=0, ret=1
May 6 14:07:15 (none) pluto[19570]: | ESP registered with kernel.
May 6 14:07:15 (none) pluto[19570]: | finish_pfkey_msg: SADB_REGISTER message 3 for IPCOMP
May 6 14:07:15 (none) pluto[19570]: | 02 07 00 0a 02 00 00 00 03 00 00 00 72 4c 00 00
May 6 14:07:15 (none) pluto[19570]: | pfkey_get: SADB_REGISTER message 3
May 6 14:07:15 (none) pluto[19570]: | IPCOMP registered with kernel.
May 6 14:07:15 (none) pluto[19570]: | finish_pfkey_msg: SADB_REGISTER message 4 for IPIP
May 6 14:07:15 (none) pluto[19570]: | 02 07 00 09 02 00 00 00 04 00 00 00 72 4c 00 00
May 6 14:07:15 (none) pluto[19570]: | pfkey_get: SADB_REGISTER message 4
May 6 14:07:15 (none) pluto[19570]: | IPIP registered with kernel.
May 6 14:07:15 (none) pluto[19570]: | inserting event EVENT_SHUNT_SCAN, timeout in 120 seconds
May 6 14:07:15 (none) pluto[19570]: Changing to directory '/etc/ipsec.d/cacerts'
May 6 14:07:15 (none) pluto[19570]: Warning: empty directory
May 6 14:07:15 (none) pluto[19570]: Changing to directory '/etc/ipsec.d/crls'
May 6 14:07:15 (none) pluto[19570]: Warning: empty directory
May 6 14:07:15 (none) pluto[19570]: could not open my default X.509 cert file '/etc/x509cert.der'
May 6 14:07:15 (none) pluto[19570]: OpenPGP certificate file '/etc/pgpcert.pgp' not found
May 6 14:07:15 (none) pluto[19570]: | next event EVENT_SHUNT_SCAN in 120 seconds
May 6 14:07:15 (none) pluto[19570]: |
May 6 14:07:15 (none) pluto[19570]: | *received adns message
May 6 14:07:15 (none) pluto[19570]: ADNS process exited with status 1
May 6 14:07:15 (none) pluto[19570]: | next event EVENT_SHUNT_SCAN in 120 seconds
May 6 14:07:15 (none) pluto[19570]: |
May 6 14:07:15 (none) pluto[19570]: | *received whack message
May 6 14:07:15 (none) pluto[19570]: listening for IKE messages
May 6 14:07:15 (none) pluto[19570]: | found lo with address 127.0.0.1
May 6 14:07:15 (none) pluto[19570]: | found eth0 with address 192.168.0.1
May 6 14:07:15 (none) pluto[19570]: | found eth0:1 with address 217.33.134.252
May 6 14:07:15 (none) pluto[19570]: | found eth1 with address 192.168.4.14
May 6 14:07:15 (none) pluto[19570]: | IP interface eth1 192.168.4.14 has no matching ipsec* interface -- ignored
May 6 14:07:15 (none) pluto[19570]: | IP interface eth0:1 217.33.134.252 has no matching ipsec* interface -- ignored
May 6 14:07:15 (none) pluto[19570]: | IP interface eth0 192.168.0.1 has no matching ipsec* interface -- ignored
May 6 14:07:15 (none) pluto[19570]: | IP interface lo 127.0.0.1 has no matching ipsec* interface -- ignored
May 6 14:07:15 (none) pluto[19570]: | could not open /proc/net/if_inet6
May 6 14:07:15 (none) pluto[19570]: no public interfaces found
May 6 14:07:15 (none) pluto[19570]: loading secrets from "/etc/ipsec.secrets"
May 6 14:07:15 (none) pluto[19570]: | next event EVENT_SHUNT_SCAN in 120 seconds
May 6 14:07:15 (none) pluto[19570]: |
May 6 14:07:15 (none) pluto[19570]: | *received whack message
May 6 14:07:15 (none) pluto[19570]: | next event EVENT_SHUNT_SCAN in 120 seconds
May 6 14:07:18 (none) pluto[19570]: |
May 6 14:07:18 (none) pluto[19570]: | *received whack message
May 6 14:07:18 (none) pluto[19570]: loading secrets from "/etc/ipsec.secrets"
May 6 14:07:18 (none) pluto[19570]: could not open my default X.509 cert file '/etc/x509cert.der'
May 6 14:07:18 (none) pluto[19570]: OpenPGP certificate file '/etc/pgpcert.pgp' not found
May 6 14:07:18 (none) pluto[19570]: Changing to directory '/etc/ipsec.d/cacerts'
May 6 14:07:18 (none) pluto[19570]: Warning: empty directory
May 6 14:07:18 (none) pluto[19570]: Changing to directory '/etc/ipsec.d/crls'
May 6 14:07:18 (none) pluto[19570]: Warning: empty directory
May 6 14:07:18 (none) pluto[19570]: | next event EVENT_SHUNT_SCAN in 117 seconds
May 6 14:07:18 (none) pluto[19570]: |
May 6 14:07:18 (none) pluto[19570]: | *received whack message
May 6 14:07:18 (none) pluto[19570]: listening for IKE messages
May 6 14:07:18 (none) pluto[19570]: | found lo with address 127.0.0.1
May 6 14:07:18 (none) pluto[19570]: | found eth0 with address 192.168.0.1
May 6 14:07:18 (none) pluto[19570]: | found eth0:1 with address 217.33.134.252
May 6 14:07:18 (none) pluto[19570]: | found eth1 with address 192.168.4.14
May 6 14:07:18 (none) pluto[19570]: | found ipsec0 with address 192.168.4.14
May 6 14:07:18 (none) pluto[19570]: adding interface ipsec0/eth1 192.168.4.14
May 6 14:07:18 (none) pluto[19570]: adding interface ipsec0/eth1 192.168.4.14:4500
May 6 14:07:18 (none) pluto[19570]: | IP interface eth0:1 217.33.134.252 has no matching ipsec* interface -- ignored
May 6 14:07:18 (none) pluto[19570]: | IP interface eth0 192.168.0.1 has no matching ipsec* interface -- ignored
May 6 14:07:18 (none) pluto[19570]: | IP interface lo 127.0.0.1 has no matching ipsec* interface -- ignored
May 6 14:07:18 (none) pluto[19570]: | could not open /proc/net/if_inet6
May 6 14:07:18 (none) pluto[19570]: forgetting secrets
May 6 14:07:18 (none) pluto[19570]: loading secrets from "/etc/ipsec.secrets"
May 6 14:07:18 (none) pluto[19570]: | next event EVENT_SHUNT_SCAN in 117 seconds
May 6 14:07:18 (none) pluto[19570]: |
May 6 14:07:18 (none) pluto[19570]: | *received whack message
May 6 14:07:18 (none) pluto[19570]: | from whack: got --esp=3des-md5
May 6 14:07:18 (none) pluto[19570]: | alg_info_parse_str() ealg_buf=3des aalg_buf=md5eklen=0 aklen=0
May 6 14:07:18 (none) pluto[19570]: | enum_search_prefix() calling enum_search(0x80a7c80, "ESP_3DES")
May 6 14:07:18 (none) pluto[19570]: | parser_alg_info_add() ealg_getbyname("3des")=3
May 6 14:07:18 (none) pluto[19570]: | enum_search_prefix() calling enum_search(0x80a8714, "AUTH_ALGORITHM_HMAC_MD5")
May 6 14:07:18 (none) pluto[19570]: | parser_alg_info_add() aalg_getbyname("md5")=1
May 6 14:07:18 (none) pluto[19570]: | __alg_info_esp_add() ealg=3 aalg=1 cnt=1
May 6 14:07:18 (none) pluto[19570]: | esp string values: 3_000-1, flags=-strict
May 6 14:07:18 (none) pluto[19570]: | from whack: got --ike=3des-md5-modp1536
May 6 14:07:18 (none) pluto[19570]: | alg_info_parse_str() ealg_buf=3des aalg_buf=md5eklen=0 aklen=0
May 6 14:07:18 (none) pluto[19570]: | enum_search_prefix() calling enum_search(0x80a88cc, "OAKLEY_3DES")
May 6 14:07:18 (none) pluto[19570]: | enum_search_ppfix() calling enum_search(0x80a88cc, "OAKLEY_3DES_CBC")
May 6 14:07:18 (none) pluto[19570]: | parser_alg_info_add() ealg_getbyname("3des")=5
May 6 14:07:18 (none) pluto[19570]: | enum_search_prefix() calling enum_search(0x80a8948, "OAKLEY_MD5")
May 6 14:07:18 (none) pluto[19570]: | parser_alg_info_add() aalg_getbyname("md5")=1
May 6 14:07:18 (none) pluto[19570]: | enum_search_prefix() calling enum_search(0x80a8cd4, "OAKLEY_GROUP_MODP1536")
May 6 14:07:18 (none) pluto[19570]: | enum_search_ppfix() calling enum_search(0x80a8cd4, "OAKLEY_GROUP_MODP1536 (extension)")
May 6 14:07:18 (none) pluto[19570]: | parser_alg_info_add() modp_getbyname("modp1536")=5
May 6 14:07:18 (none) pluto[19570]: | __alg_info_ike_add() ealg=5 aalg=1 modp_id=5, cnt=1
May 6 14:07:18 (none) pluto[19570]: | ike string values: 5_000-1-5, flags=-strict
May 6 14:07:18 (none) pluto[19570]: | alg_info_addref() alg_info->ref_cnt=1
May 6 14:07:18 (none) pluto[19570]: | alg_info_addref() alg_info->ref_cnt=1
May 6 14:07:18 (none) pluto[19570]: added connection description "VPNConquestUS_1"
May 6 14:07:18 (none) pluto[19570]: | 192.168.0.0/24===192.168.4.14[@asl.mydomain.com]...aaa.bbb.ccc.ddd[@asl.usa.mydomain.com]===10.1.6.0/24
May 6 14:07:18 (none) pluto[19570]: | ike_life: 7800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0; policy: RSASIG+ENCRYPT+COMPRESS+TUNNEL
May 6 14:07:18 (none) pluto[19570]: | next event EVENT_SHUNT_SCAN in 117 seconds
May 6 14:07:18 (none) pluto[19570]: |
May 6 14:07:18 (none) pluto[19570]: | *received whack message
May 6 14:07:18 (none) pluto[19570]: | next event EVENT_SHUNT_SCAN in 117 seconds
May 6 14:07:18 (none) pluto[19570]: |
May 6 14:07:18 (none) pluto[19570]: | *received whack message
May 6 14:07:18 (none) pluto[19570]: | next event EVENT_SHUNT_SCAN in 117 seconds
May 6 14:07:18 (none) pluto[19570]: |
May 6 14:07:18 (none) pluto[19570]: | *received whack message
May 6 14:07:18 (none) pluto[19570]: | creating state object #1 at 0x80e13a0
May 6 14:07:18 (none) pluto[19570]: | ICOOKIE: fb 5a 6e 32 45 5a c6 90
May 6 14:07:18 (none) pluto[19570]: | RCOOKIE: 00 00 00 00 00 00 00 00
May 6 14:07:18 (none) pluto[19570]: | peer: cd 9e 9c 62
May 6 14:07:18 (none) pluto[19570]: | state hash entry 23
May 6 14:07:18 (none) pluto[19570]: | inserting event EVENT_SO_DISCARD, timeout in 0 seconds for #1
May 6 14:07:18 (none) pluto[19570]: | Queuing pending Quick Mode with aaa.bbb.ccc.ddd "VPNConquestUS_1"
May 6 14:07:18 (none) pluto[19570]: "VPNConquestUS_1" #1: initiating Main Mode
May 6 14:07:18 (none) pluto[19570]: | **emit ISAKMP Message:
May 6 14:07:18 (none) pluto[19570]: | initiator cookie:
May 6 14:07:18 (none) pluto[19570]: | fb 5a 6e 32 45 5a c6 90
May 6 14:07:18 (none) pluto[19570]: | responder cookie:
May 6 14:07:18 (none) pluto[19570]: | 00 00 00 00 00 00 00 00
May 6 14:07:18 (none) pluto[19570]: | next payload type: ISAKMP_NEXT_SA
May 6 14:07:18 (none) pluto[19570]: | ISAKMP version: ISAKMP Version 1.0
May 6 14:07:18 (none) pluto[19570]: | exchange type: ISAKMP_XCHG_IDPROT
May 6 14:07:18 (none) pluto[19570]: | flags: none
May 6 14:07:18 (none) pluto[19570]: | message ID: 00 00 00 00
May 6 14:07:18 (none) pluto[19570]: | ***emit ISAKMP Security Association Payload:
May 6 14:07:18 (none) pluto[19570]: | next payload type: ISAKMP_NEXT_NONE
May 6 14:07:18 (none) pluto[19570]: | DOI: ISAKMP_DOI_IPSEC
May 6 14:07:18 (none) pluto[19570]: | ****emit IPsec DOI SIT:
May 6 14:07:18 (none) pluto[19570]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
May 6 14:07:18 (none) pluto[19570]: | 5_000-1-5, flags=-strict
May 6 14:07:18 (none) pluto[19570]: | ****emit ISAKMP Proposal Payload:
May 6 14:07:18 (none) pluto[19570]: | next payload type: ISAKMP_NEXT_NONE
May 6 14:07:18 (none) pluto[19570]: | proposal number: 0
May 6 14:07:18 (none) pluto[19570]: | protocol ID: PROTO_ISAKMP
May 6 14:07:18 (none) pluto[19570]: | SPI size: 0
May 6 14:07:18 (none) pluto[19570]: | number of transforms: 1
May 6 14:07:18 (none) pluto[19570]: | *****emit ISAKMP Transform Payload (ISAKMP):
May 6 14:07:18 (none) pluto[19570]: | next payload type: ISAKMP_NEXT_NONE
May 6 14:07:18 (none) pluto[19570]: | transform number: 0
May 6 14:07:18 (none) pluto[19570]: | transform ID: KEY_IKE
May 6 14:07:18 (none) pluto[19570]: | ******emit ISAKMP Oakley attribute:
May 6 14:07:18 (none) pluto[19570]: | af+type: OAKLEY_LIFE_TYPE
May 6 14:07:18 (none) pluto[19570]: | length/value: 1
May 6 14:07:18 (none) pluto[19570]: | [1 is OAKLEY_LIFE_SECONDS]
May 6 14:07:18 (none) pluto[19570]: | ******emit ISAKMP Oakley attribute:
May 6 14:07:18 (none) pluto[19570]: | af+type: OAKLEY_LIFE_DURATION
May 6 14:07:18 (none) pluto[19570]: | length/value: 7800
May 6 14:07:18 (none) pluto[19570]: | ******emit ISAKMP Oakley attribute:
May 6 14:07:18 (none) pluto[19570]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
May 6 14:07:18 (none) pluto[19570]: | length/value: 5
May 6 14:07:18 (none) pluto[19570]: | [5 is OAKLEY_3DES_CBC]
May 6 14:07:18 (none) pluto[19570]: | ******emit ISAKMP Oakley attribute:
May 6 14:07:18 (none) pluto[19570]: | af+type: OAKLEY_HASH_ALGORITHM
May 6 14:07:18 (none) pluto[19570]: | length/value: 1
May 6 14:07:18 (none) pluto[19570]: | [1 is OAKLEY_MD5]
May 6 14:07:18 (none) pluto[19570]: | ******emit ISAKMP Oakley attribute:
May 6 14:07:18 (none) pluto[19570]: | af+type: OAKLEY_AUTHENTICATION_METHOD
May 6 14:07:18 (none) pluto[19570]: | length/value: 3
May 6 14:07:18 (none) pluto[19570]: | [3 is OAKLEY_RSA_SIG]
May 6 14:07:18 (none) pluto[19570]: | ******emit ISAKMP Oakley attribute:
May 6 14:07:18 (none) pluto[19570]: | af+type: OAKLEY_GROUP_DESCRIPTION
May 6 14:07:18 (none) pluto[19570]: | length/value: 5
May 6 14:07:18 (none) pluto[19570]: | [5 is OAKLEY_GROUP_MODP1536 (extension)]
May 6 14:07:18 (none) pluto[19570]: | emitting length of ISAKMP Transform Payload (ISAKMP): 32
May 6 14:07:18 (none) pluto[19570]: | emitting length of ISAKMP Proposal Payload: 40
May 6 14:07:18 (none) pluto[19570]: | emitting length of ISAKMP Security Association Payload: 52
May 6 14:07:18 (none) pluto[19570]: | out_vendorid(): sending [draft-ietf-ipsec-nat-t-ike-03]
May 6 14:07:18 (none) pluto[19570]: | ***emit ISAKMP Vendor ID Payload:
May 6 14:07:18 (none) pluto[19570]: | next payload type: ISAKMP_NEXT_NONE
May 6 14:07:18 (none) pluto[19570]: | emitting 16 raw bytes of V_ID into ISAKMP Vendor ID Payload
May 6 14:07:18 (none) pluto[19570]: | V_ID 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92 15 52 9d 56
May 6 14:07:18 (none) pluto[19570]: | emitting length of ISAKMP Vendor ID Payload: 20
May 6 14:07:18 (none) pluto[19570]: | out_vendorid(): sending [draft-ietf-ipsec-nat-t-ike-02]
May 6 14:07:18 (none) pluto[19570]: | ***emit ISAKMP Vendor ID Payload:
May 6 14:07:18 (none) pluto[19570]: | next payload type: ISAKMP_NEXT_NONE
May 6 14:07:18 (none) pluto[19570]: | emitting 16 raw bytes of V_ID into ISAKMP Vendor ID Payload
May 6 14:07:18 (none) pluto[19570]: | V_ID cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48
May 6 14:07:18 (none) pluto[19570]: | emitting length of ISAKMP Vendor ID Payload: 20
May 6 14:07:18 (none) pluto[19570]: | out_vendorid(): sending [draft-ietf-ipsec-nat-t-ike-00]
May 6 14:07:18 (none) pluto[19570]: | ***emit ISAKMP Vendor ID Payload:
May 6 14:07:18 (none) pluto[19570]: | next payload type: ISAKMP_NEXT_NONE
May 6 14:07:18 (none) pluto[19570]: | emitting 16 raw bytes of V_ID into ISAKMP Vendor ID Payload
May 6 14:07:18 (none) pluto[19570]: | V_ID 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc
May 6 14:07:18 (none) pluto[19570]: | emitting length of ISAKMP Vendor ID Payload: 20
May 6 14:07:18 (none) pluto[19570]: | emitting length of ISAKMP Message: 140
May 6 14:07:18 (none) pluto[19570]: | sending 140 bytes for main_outI1 through eth1 to aaa.bbb.ccc.ddd:500:
May 6 14:07:18 (none) pluto[19570]: | fb 5a 6e 32 45 5a c6 90 00 00 00 00 00 00 00 00
May 6 14:07:18 (none) pluto[19570]: | 01 10 02 00 00 00 00 00 00 00 00 8c 0d 00 00 34
May 6 14:07:18 (none) pluto[19570]: | 00 00 00 01 00 00 00 01 00 00 00 28 00 01 00 01
May 6 14:07:18 (none) pluto[19570]: | 00 00 00 20 00 01 00 00 80 0b 00 01 80 0c 1e 78
May 6 14:07:18 (none) pluto[19570]: | 80 01 00 05 80 02 00 01 80 03 00 03 80 04 00 05
May 6 14:07:18 (none) pluto[19570]: | 0d 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92
May 6 14:07:18 (none) pluto[19570]: | 15 52 9d 56 0d 00 00 14 cd 60 46 43 35 df 21 f8
May 6 14:07:18 (none) pluto[19570]: | 7c fd b2 fc 68 b6 a4 48 00 00 00 14 44 85 15 2d
May 6 14:07:18 (none) pluto[19570]: | 18 b6 bb cd 0b e8 a8 46 95 79 dd cc
May 6 14:07:18 (none) pluto[19570]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #1
May 6 14:07:18 (none) pluto[19570]: | next event EVENT_RETRANSMIT in 10 seconds for #1
May 6 14:07:18 (none) pluto[19570]: |
May 6 14:07:18 (none) pluto[19570]: | *received whack message
May 6 14:07:18 (none) pluto[19570]: forgetting secrets
May 6 14:07:18 (none) pluto[19570]: loading secrets from "/etc/ipsec.secrets"
May 6 14:07:18 (none) pluto[19570]: could not open my default X.509 cert file '/etc/x509cert.der'
May 6 14:07:18 (none) pluto[19570]: OpenPGP certificate file '/etc/pgpcert.pgp' not found
May 6 14:07:18 (none) pluto[19570]: Changing to directory '/etc/ipsec.d/cacerts'
May 6 14:07:18 (none) pluto[19570]: Warning: empty directory
May 6 14:07:18 (none) pluto[19570]: Changing to directory '/etc/ipsec.d/crls'
May 6 14:07:18 (none) pluto[19570]: Warning: empty directory
May 6 14:07:18 (none) pluto[19570]: | next event EVENT_RETRANSMIT in 10 seconds for #1
May 6 14:07:18 (none) pluto[19570]: |
May 6 14:07:18 (none) pluto[19570]: | *received 100 bytes from aaa.bbb.ccc.ddd:500 on eth1
May 6 14:07:18 (none) pluto[19570]: | fb 5a 6e 32 45 5a c6 90 12 64 3c 0e 6e 05 68 81
May 6 14:07:18 (none) pluto[19570]: | 01 10 02 00 00 00 00 00 00 00 00 64 0d 00 00 34
May 6 14:07:18 (none) pluto[19570]: | 00 00 00 01 00 00 00 01 00 00 00 28 00 01 00 01
May 6 14:07:18 (none) pluto[19570]: | 00 00 00 20 00 01 00 00 80 0b 00 01 80 0c 1e 78
May 6 14:07:18 (none) pluto[19570]: | 80 01 00 05 80 02 00 01 80 03 00 03 80 04 00 05
May 6 14:07:18 (none) pluto[19570]: | 00 00 00 14 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92
May 6 14:07:18 (none) pluto[19570]: | 15 52 9d 56
May 6 14:07:18 (none) pluto[19570]: | **parse ISAKMP Message:
May 6 14:07:18 (none) pluto[19570]: | initiator cookie:
May 6 14:07:18 (none) pluto[19570]: | fb 5a 6e 32 45 5a c6 90
May 6 14:07:18 (none) pluto[19570]: | responder cookie:
May 6 14:07:18 (none) pluto[19570]: | 12 64 3c 0e 6e 05 68 81
May 6 14:07:18 (none) pluto[19570]: | next payload type: ISAKMP_NEXT_SA
May 6 14:07:18 (none) pluto[19570]: | ISAKMP version: ISAKMP Version 1.0
May 6 14:07:18 (none) pluto[19570]: | exchange type: ISAKMP_XCHG_IDPROT
May 6 14:07:18 (none) pluto[19570]: | flags: none
May 6 14:07:18 (none) pluto[19570]: | message ID: 00 00 00 00
May 6 14:07:18 (none) pluto[19570]: | length: 100
May 6 14:07:18 (none) pluto[19570]: | ICOOKIE: fb 5a 6e 32 45 5a c6 90
May 6 14:07:18 (none) pluto[19570]: | RCOOKIE: 12 64 3c 0e 6e 05 68 81
May 6 14:07:18 (none) pluto[19570]: | peer: cd 9e 9c 62
May 6 14:07:18 (none) pluto[19570]: | state hash entry 27
May 6 14:07:18 (none) pluto[19570]: | state object not found
May 6 14:07:18 (none) pluto[19570]: | ICOOKIE: fb 5a 6e 32 45 5a c6 90
May 6 14:07:18 (none) pluto[19570]: | RCOOKIE: 00 00 00 00 00 00 00 00
May 6 14:07:18 (none) pluto[19570]: | peer: cd 9e 9c 62
May 6 14:07:18 (none) pluto[19570]: | state hash entry 23
May 6 14:07:18 (none) pluto[19570]: | state object #1 found, in STATE_MAIN_I1
May 6 14:07:18 (none) pluto[19570]: | ***parse ISAKMP Security Association Payload:
May 6 14:07:18 (none) pluto[19570]: | next payload type: ISAKMP_NEXT_VID
May 6 14:07:18 (none) pluto[19570]: | length: 52
May 6 14:07:18 (none) pluto[19570]: | DOI: ISAKMP_DOI_IPSEC
May 6 14:07:18 (none) pluto[19570]: | ***parse ISAKMP Vendor ID Payload:
May 6 14:07:18 (none) pluto[19570]: | next payload type: ISAKMP_NEXT_NONE
May 6 14:07:18 (none) pluto[19570]: | length: 20
May 6 14:07:18 (none) pluto[19570]: "VPNConquestUS_1" #1: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03]
May 6 14:07:18 (none) pluto[19570]: | VID: 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92 15 52 9d 56
May 6 14:07:18 (none) pluto[19570]: | ****parse IPsec DOI SIT:
May 6 14:07:18 (none) pluto[19570]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
May 6 14:07:18 (none) pluto[19570]: | ****parse ISAKMP Proposal Payload:
May 6 14:07:18 (none) pluto[19570]: | next payload type: ISAKMP_NEXT_NONE
May 6 14:07:18 (none) pluto[19570]: | length: 40
May 6 14:07:18 (none) pluto[19570]: | proposal number: 0
May 6 14:07:18 (none) pluto[19570]: | protocol ID: PROTO_ISAKMP
May 6 14:07:18 (none) pluto[19570]: | SPI size: 0
May 6 14:07:18 (none) pluto[19570]: | number of transforms: 1
May 6 14:07:18 (none) pluto[19570]: | *****parse ISAKMP Transform Payload (ISAKMP):
May 6 14:07:18 (none) pluto[19570]: | next payload type: ISAKMP_NEXT_NONE
May 6 14:07:18 (none) pluto[19570]: | length: 32
May 6 14:07:18 (none) pluto[19570]: | transform number: 0
May 6 14:07:18 (none) pluto[19570]: | transform ID: KEY_IKE
May 6 14:07:18 (none) pluto[19570]: | ******parse ISAKMP Oakley attribute:
May 6 14:07:18 (none) pluto[19570]: | af+type: OAKLEY_LIFE_TYPE
May 6 14:07:18 (none) pluto[19570]: | length/value: 1
May 6 14:07:18 (none) pluto[19570]: | [1 is OAKLEY_LIFE_SECONDS]
May 6 14:07:18 (none) pluto[19570]: | ******parse ISAKMP Oakley attribute:
May 6 14:07:18 (none) pluto[19570]: | af+type: OAKLEY_LIFE_DURATION
May 6 14:07:18 (none) pluto[19570]: | length/value: 7800
May 6 14:07:18 (none) pluto[19570]: | ******parse ISAKMP Oakley attribute:
May 6 14:07:18 (none) pluto[19570]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
May 6 14:07:18 (none) pluto[19570]: | length/value: 5
May 6 14:07:18 (none) pluto[19570]: | [5 is OAKLEY_3DES_CBC]
May 6 14:07:18 (none) pluto[19570]: | ike_alg_enc_ok(ealg=5,key_len=0): blocksize=8, keyminlen=192, keydeflen=192, keymaxlen=192, ret=1
May 6 14:07:18 (none) pluto[19570]: | ******parse ISAKMP Oakley attribute:
May 6 14:07:18 (none) pluto[19570]: | af+type: OAKLEY_HASH_ALGORITHM
May 6 14:07:18 (none) pluto[19570]: | length/value: 1
May 6 14:07:18 (none) pluto[19570]: | [1 is OAKLEY_MD5]
May 6 14:07:18 (none) pluto[19570]: | ******parse ISAKMP Oakley attribute:
May 6 14:07:18 (none) pluto[19570]: | af+type: OAKLEY_AUTHENTICATION_METHOD
May 6 14:07:18 (none) pluto[19570]: | length/value: 3
May 6 14:07:18 (none) pluto[19570]: | [3 is OAKLEY_RSA_SIG]
May 6 14:07:18 (none) pluto[19570]: | ******parse ISAKMP Oakley attribute:
May 6 14:07:18 (none) pluto[19570]: | af+type: OAKLEY_GROUP_DESCRIPTION
May 6 14:07:18 (none) pluto[19570]: | length/value: 5
May 6 14:07:18 (none) pluto[19570]: | [5 is OAKLEY_GROUP_MODP1536 (extension)]
May 6 14:07:18 (none) pluto[19570]: | Oakley Transform 0 accepted
May 6 14:07:18 (none) pluto[19570]: | **emit ISAKMP Message:
May 6 14:07:18 (none) pluto[19570]: | initiator cookie:
May 6 14:07:18 (none) pluto[19570]: | fb 5a 6e 32 45 5a c6 90
May 6 14:07:18 (none) pluto[19570]: | responder cookie:
May 6 14:07:18 (none) pluto[19570]: | 12 64 3c 0e 6e 05 68 81
May 6 14:07:18 (none) pluto[19570]: | next payload type: ISAKMP_NEXT_KE
May 6 14:07:18 (none) pluto[19570]: | ISAKMP version: ISAKMP Version 1.0
May 6 14:07:18 (none) pluto[19570]: | exchange type: ISAKMP_XCHG_IDPROT
May 6 14:07:18 (none) pluto[19570]: | flags: none
May 6 14:07:18 (none) pluto[19570]: | message ID: 00 00 00 00
May 6 14:07:18 (none) pluto[19570]: | Local DH secret:
May 6 14:07:18 (none) pluto[19570]: | cf c9 99 33 92 90 49 98 77 2b 2d 79 8f 27 ea f4
May 6 14:07:18 (none) pluto[19570]: | c9 a3 1a 40 07 e2 96 e9 28 7d da b5 ef df 4a 5a
May 6 14:07:18 (none) pluto[19570]: | Public DH value sent:
May 6 14:07:18 (none) pluto[19570]: | 14 98 3c ed 4c 40 44 29 13 76 dc 82 5f 23 aa 38
May 6 14:07:18 (none) pluto[19570]: | 41 f3 9b ab a7 18 a8 c0 36 5c 24 99 51 dc 8d 21
May 6 14:07:18 (none) pluto[19570]: | 15 a0 3a 1c 59 f9 06 2b 5c e0 a0 73 82 f2 8a 83
May 6 14:07:18 (none) pluto[19570]: | f9 3e a9 a1 7a 53 c5 60 df 1f 82 7e 2a b1 96 b8
May 6 14:07:18 (none) pluto[19570]: | 08 22 96 3e 77 3d e0 c0 12 d9 87 8e 4d c1 8f 9f
May 6 14:07:18 (none) pluto[19570]: | e2 e8 53 2b 18 c1 d0 b9 d4 14 21 c2 07 ca bc db
May 6 14:07:18 (none) pluto[19570]: | 52 1a 98 c1 1b be 96 70 0b 6b 2a 5b 02 9b f3 cf
May 6 14:07:18 (none) pluto[19570]: | 62 b9 be 8e f8 4b 44 f3 66 d1 ef b5 4a 1e 39 03
May 6 14:07:18 (none) pluto[19570]: | ab d2 7e c7 a5 37 e2 63 9b b7 73 42 65 96 4b da
May 6 14:07:18 (none) pluto[19570]: | 0e ec c6 05 a1 70 44 63 ff cc 07 a8 db 5e 27 74
May 6 14:07:18 (none) pluto[19570]: | 4a 6c 24 ce 5a f5 4d 59 d2 f7 54 ad 74 48 bb 14
May 6 14:07:18 (none) pluto[19570]: | 00 f6 58 12 13 74 1e 0c 04 00 ae ad 2d cc cc 94
May 6 14:07:18 (none) pluto[19570]: | ***emit ISAKMP Key Exchange Payload:
May 6 14:07:18 (none) pluto[19570]: | next payload type: ISAKMP_NEXT_NONCE
May 6 14:07:18 (none) pluto[19570]: | emitting 192 raw bytes of keyex value into ISAKMP Key Exchange Payload
May 6 14:07:18 (none) pluto[19570]: | keyex value 14 98 3c ed 4c 40 44 29 13 76 dc 82 5f 23 aa 38
May 6 14:07:18 (none) pluto[19570]: | 41 f3 9b ab a7 18 a8 c0 36 5c 24 99 51 dc 8d 21
May 6 14:07:18 (none) pluto[19570]: | 15 a0 3a 1c 59 f9 06 2b 5c e0 a0 73 82 f2 8a 83
May 6 14:07:18 (none) pluto[19570]: | f9 3e a9 a1 7a 53 c5 60 df 1f 82 7e 2a b1 96 b8
May 6 14:07:18 (none) pluto[19570]: | 08 22 96 3e 77 3d e0 c0 12 d9 87 8e 4d c1 8f 9f
May 6 14:07:18 (none) pluto[19570]: | e2 e8 53 2b 18 c1 d0 b9 d4 14 21 c2 07 ca bc db
May 6 14:07:18 (none) pluto[19570]: | 52 1a 98 c1 1b be 96 70 0b 6b 2a 5b 02 9b f3 cf
May 6 14:07:18 (none) pluto[19570]: | 62 b9 be 8e f8 4b 44 f3 66 d1 ef b5 4a 1e 39 03
May 6 14:07:18 (none) pluto[19570]: | ab d2 7e c7 a5 37 e2 63 9b b7 73 42 65 96 4b da
May 6 14:07:18 (none) pluto[19570]: | 0e ec c6 05 a1 70 44 63 ff cc 07 a8 db 5e 27 74
May 6 14:07:18 (none) pluto[19570]: | 4a 6c 24 ce 5a f5 4d 59 d2 f7 54 ad 74 48 bb 14
May 6 14:07:18 (none) pluto[19570]: | 00 f6 58 12 13 74 1e 0c 04 00 ae ad 2d cc cc 94
May 6 14:07:18 (none) pluto[19570]: | emitting length of ISAKMP Key Exchange Payload: 196
May 6 14:07:18 (none) pluto[19570]: | ***emit ISAKMP Nonce Payload:
May 6 14:07:18 (none) pluto[19570]: | next payload type: ISAKMP_NEXT_NONE
May 6 14:07:18 (none) pluto[19570]: | emitting 16 raw bytes of Ni into ISAKMP Nonce Payload
May 6 14:07:18 (none) pluto[19570]: | Ni f5 28 81 2f a3 f9 12 b3 d8 77 8c 56 23 3c 5e 5f
May 6 14:07:18 (none) pluto[19570]: | emitting length of ISAKMP Nonce Payload: 20
May 6 14:07:18 (none) pluto[19570]: | _natd_hash: hasher=0x80ca380(16)
May 6 14:07:18 (none) pluto[19570]: | _natd_hash: icookie=
May 6 14:07:18 (none) pluto[19570]: | fb 5a 6e 32 45 5a c6 90
May 6 14:07:18 (none) pluto[19570]: | _natd_hash: rcookie=
May 6 14:07:18 (none) pluto[19570]: | 12 64 3c 0e 6e 05 68 81
May 6 14:07:18 (none) pluto[19570]: | _natd_hash: ip= cd 9e 9c 62
May 6 14:07:18 (none) pluto[19570]: | _natd_hash: port=62465
May 6 14:07:18 (none) pluto[19570]: | _natd_hash: hash= 69 96 b8 64 af cb af 9e 2e 54 3b d8 74 5e 95 b2
May 6 14:07:18 (none) pluto[19570]: | ***emit ISAKMP NAT-D Payload:
May 6 14:07:18 (none) pluto[19570]: | next payload type: ISAKMP_NEXT_NAT-D
May 6 14:07:18 (none) pluto[19570]: | emitting 16 raw bytes of NAT-D into ISAKMP NAT-D Payload
May 6 14:07:18 (none) pluto[19570]: | NAT-D 69 96 b8 64 af cb af 9e 2e 54 3b d8 74 5e 95 b2
May 6 14:07:18 (none) pluto[19570]: | emitting length of ISAKMP NAT-D Payload: 20
May 6 14:07:18 (none) pluto[19570]: | _natd_hash: hasher=0x80ca380(16)
May 6 14:07:18 (none) pluto[19570]: | _natd_hash: icookie=
May 6 14:07:18 (none) pluto[19570]: | fb 5a 6e 32 45 5a c6 90
May 6 14:07:18 (none) pluto[19570]: | _natd_hash: rcookie=
May 6 14:07:18 (none) pluto[19570]: | 12 64 3c 0e 6e 05 68 81
May 6 14:07:18 (none) pluto[19570]: | _natd_hash: ip= c0 a8 04 0e
May 6 14:07:18 (none) pluto[19570]: | _natd_hash: port=62465
May 6 14:07:18 (none) pluto[19570]: | _natd_hash: hash= 24 f7 95 74 6d 5d b0 26 53 34 2b a6 06 31 a0 b7
May 6 14:07:18 (none) pluto[19570]: | ***emit ISAKMP NAT-D Payload:
May 6 14:07:18 (none) pluto[19570]: | next payload type: ISAKMP_NEXT_NONE
May 6 14:07:18 (none) pluto[19570]: | emitting 16 raw bytes of NAT-D into ISAKMP NAT-D Payload
May 6 14:07:18 (none) pluto[19570]: | NAT-D 24 f7 95 74 6d 5d b0 26 53 34 2b a6 06 31 a0 b7
May 6 14:07:18 (none) pluto[19570]: | emitting length of ISAKMP NAT-D Payload: 20
May 6 14:07:18 (none) pluto[19570]: | emitting length of ISAKMP Message: 284
May 6 14:07:18 (none) pluto[19570]: | ICOOKIE: fb 5a 6e 32 45 5a c6 90
May 6 14:07:18 (none) pluto[19570]: | RCOOKIE: 00 00 00 00 00 00 00 00
May 6 14:07:18 (none) pluto[19570]: | peer: cd 9e 9c 62
May 6 14:07:18 (none) pluto[19570]: | state hash entry 23
May 6 14:07:18 (none) pluto[19570]: | ICOOKIE: fb 5a 6e 32 45 5a c6 90
May 6 14:07:18 (none) pluto[19570]: | RCOOKIE: 12 64 3c 0e 6e 05 68 81
May 6 14:07:18 (none) pluto[19570]: | peer: cd 9e 9c 62
May 6 14:07:18 (none) pluto[19570]: | state hash entry 27
May 6 14:07:18 (none) pluto[19570]: | sending 284 bytes for STATE_MAIN_I1 through eth1 to aaa.bbb.ccc.ddd:500:
May 6 14:07:18 (none) pluto[19570]: | fb 5a 6e 32 45 5a c6 90 12 64 3c 0e 6e 05 68 81
May 6 14:07:18 (none) pluto[19570]: | 04 10 02 00 00 00 00 00 00 00 01 1c 0a 00 00 c4
May 6 14:07:18 (none) pluto[19570]: | 14 98 3c ed 4c 40 44 29 13 76 dc 82 5f 23 aa 38
May 6 14:07:18 (none) pluto[19570]: | 41 f3 9b ab a7 18 a8 c0 36 5c 24 99 51 dc 8d 21
May 6 14:07:18 (none) pluto[19570]: | 15 a0 3a 1c 59 f9 06 2b 5c e0 a0 73 82 f2 8a 83
May 6 14:07:18 (none) pluto[19570]: | f9 3e a9 a1 7a 53 c5 60 df 1f 82 7e 2a b1 96 b8
May 6 14:07:18 (none) pluto[19570]: | 08 22 96 3e 77 3d e0 c0 12 d9 87 8e 4d c1 8f 9f
May 6 14:07:18 (none) pluto[19570]: | e2 e8 53 2b 18 c1 d0 b9 d4 14 21 c2 07 ca bc db
May 6 14:07:18 (none) pluto[19570]: | 52 1a 98 c1 1b be 96 70 0b 6b 2a 5b 02 9b f3 cf
May 6 14:07:18 (none) pluto[19570]: | 62 b9 be 8e f8 4b 44 f3 66 d1 ef b5 4a 1e 39 03
May 6 14:07:18 (none) pluto[19570]: | ab d2 7e c7 a5 37 e2 63 9b b7 73 42 65 96 4b da
May 6 14:07:18 (none) pluto[19570]: | 0e ec c6 05 a1 70 44 63 ff cc 07 a8 db 5e 27 74
May 6 14:07:18 (none) pluto[19570]: | 4a 6c 24 ce 5a f5 4d 59 d2 f7 54 ad 74 48 bb 14
May 6 14:07:18 (none) pluto[19570]: | 00 f6 58 12 13 74 1e 0c 04 00 ae ad 2d cc cc 94
May 6 14:07:18 (none) pluto[19570]: | 82 00 00 14 f5 28 81 2f a3 f9 12 b3 d8 77 8c 56
May 6 14:07:18 (none) pluto[19570]: | 23 3c 5e 5f 82 00 00 14 69 96 b8 64 af cb af 9e
May 6 14:07:18 (none) pluto[19570]: | 2e 54 3b d8 74 5e 95 b2 00 00 00 14 24 f7 95 74
May 6 14:07:18 (none) pluto[19570]: | 6d 5d b0 26 53 34 2b a6 06 31 a0 b7
May 6 14:07:18 (none) pluto[19570]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #1
May 6 14:07:18 (none) pluto[19570]: | next event EVENT_RETRANSMIT in 10 seconds for #1
May 6 14:07:19 (none) pluto[19570]: |
May 6 14:07:19 (none) pluto[19570]: | *received 284 bytes from aaa.bbb.ccc.ddd:500 on eth1
May 6 14:07:19 (none) pluto[19570]: | fb 5a 6e 32 45 5a c6 90 12 64 3c 0e 6e 05 68 81
May 6 14:07:19 (none) pluto[19570]: | 04 10 02 00 00 00 00 00 00 00 01 1c 0a 00 00 c4
May 6 14:07:19 (none) pluto[19570]: | 5c 5b d5 dd 0e 5e 93 b0 fc b4 1f 08 c5 09 25 26
May 6 14:07:19 (none) pluto[19570]: | 38 ab 93 5b 1b 1a 3c 2f 19 09 e5 de 47 00 28 8b
May 6 14:07:19 (none) pluto[19570]: | 68 e7 c6 99 3e 35 09 81 d6 74 e9 67 f1 91 36 78
May 6 14:07:19 (none) pluto[19570]: | 1e 4e 9c 76 16 fc 57 ae 47 06 c9 57 1f 1a 47 f5
May 6 14:07:19 (none) pluto[19570]: | d4 29 72 dc 0a f7 ac 74 20 a7 ab 1c 09 9a 13 15
May 6 14:07:19 (none) pluto[19570]: | 45 e0 c7 9f f6 03 7c 1c 00 9d d1 45 0b 41 f0 80
May 6 14:07:19 (none) pluto[19570]: | 02 5a b6 58 9c df 59 33 67 59 5d 43 08 5d a6 0f
May 6 14:07:19 (none) pluto[19570]: | 5e f1 71 03 1b 00 d3 6b cc 68 0d 21 fe c9 df 32
May 6 14:07:19 (none) pluto[19570]: | 79 f5 8f 54 40 d2 33 e1 e6 ab 1f 23 b9 99 39 85
May 6 14:07:19 (none) pluto[19570]: | cb 40 21 3f 7b 83 bc c9 22 6d 8f ca 0d d3 83 eb
May 6 14:07:19 (none) pluto[19570]: | 69 9e 5e 17 dc 2f aa 5a 51 bf 13 c7 9b d2 83 6d
May 6 14:07:19 (none) pluto[19570]: | 12 94 b4 b3 0e 52 db c2 e9 bf a7 18 79 ee a4 26
May 6 14:07:19 (none) pluto[19570]: | 82 00 00 14 54 68 74 56 ed 8d c6 8c d1 a7 d2 fc
May 6 14:07:19 (none) pluto[19570]: | e0 42 69 06 82 00 00 14 55 9a be 44 e7 4e d4 c1
May 6 14:07:19 (none) pluto[19570]: | 26 02 1f 25 cc 71 89 c5 00 00 00 14 69 96 b8 64
May 6 14:07:19 (none) pluto[19570]: | af cb af 9e 2e 54 3b d8 74 5e 95 b2
May 6 14:07:19 (none) pluto[19570]: | **parse ISAKMP Message:
May 6 14:07:19 (none) pluto[19570]: | initiator cookie:
May 6 14:07:19 (none) pluto[19570]: | fb 5a 6e 32 45 5a c6 90
May 6 14:07:19 (none) pluto[19570]: | responder cookie:
May 6 14:07:19 (none) pluto[19570]: | 12 64 3c 0e 6e 05 68 81
May 6 14:07:19 (none) pluto[19570]: | next payload type: ISAKMP_NEXT_KE
May 6 14:07:19 (none) pluto[19570]: | ISAKMP version: ISAKMP Version 1.0
May 6 14:07:19 (none) pluto[19570]: | exchange type: ISAKMP_XCHG_IDPROT
May 6 14:07:19 (none) pluto[19570]: | flags: none
May 6 14:07:19 (none) pluto[19570]: | message ID: 00 00 00 00
May 6 14:07:19 (none) pluto[19570]: | length: 284
May 6 14:07:19 (none) pluto[19570]: | ICOOKIE: fb 5a 6e 32 45 5a c6 90
May 6 14:07:19 (none) pluto[19570]: | RCOOKIE: 12 64 3c 0e 6e 05 68 81
May 6 14:07:19 (none) pluto[19570]: | peer: cd 9e 9c 62
May 6 14:07:19 (none) pluto[19570]: | state hash entry 27
May 6 14:07:19 (none) pluto[19570]: | state object #1 found, in STATE_MAIN_I2
May 6 14:07:19 (none) pluto[19570]: | ***parse ISAKMP Key Exchange Payload:
May 6 14:07:19 (none) pluto[19570]: | next payload type: ISAKMP_NEXT_NONCE
May 6 14:07:19 (none) pluto[19570]: | length: 196
May 6 14:07:19 (none) pluto[19570]: | ***parse ISAKMP Nonce Payload:
May 6 14:07:19 (none) pluto[19570]: | next payload type: ISAKMP_NEXT_NAT-D
May 6 14:07:19 (none) pluto[19570]: | length: 20
May 6 14:07:19 (none) pluto[19570]: | ***parse ISAKMP NAT-D Payload:
May 6 14:07:19 (none) pluto[19570]: | next payload type: ISAKMP_NEXT_NAT-D
May 6 14:07:19 (none) pluto[19570]: | length: 20
May 6 14:07:19 (none) pluto[19570]: | ***parse ISAKMP NAT-D Payload:
May 6 14:07:19 (none) pluto[19570]: | next payload type: ISAKMP_NEXT_NONE
May 6 14:07:19 (none) pluto[19570]: | length: 20
May 6 14:07:19 (none) pluto[19570]: | **emit ISAKMP Message:
May 6 14:07:19 (none) pluto[19570]: | initiator cookie:
May 6 14:07:19 (none) pluto[19570]: | fb 5a 6e 32 45 5a c6 90
May 6 14:07:19 (none) pluto[19570]: | responder cookie:
May 6 14:07:19 (none) pluto[19570]: | 12 64 3c 0e 6e 05 68 81
May 6 14:07:19 (none) pluto[19570]: | next payload type: ISAKMP_NEXT_ID
May 6 14:07:19 (none) pluto[19570]: | ISAKMP version: ISAKMP Version 1.0
May 6 14:07:19 (none) pluto[19570]: | exchange type: ISAKMP_XCHG_IDPROT
May 6 14:07:19 (none) pluto[19570]: | flags: ISAKMP_FLAG_ENCRYPTION
May 6 14:07:19 (none) pluto[19570]: | message ID: 00 00 00 00
May 6 14:07:19 (none) pluto[19570]: | DH public value received:
May 6 14:07:19 (none) pluto[19570]: | 5c 5b d5 dd 0e 5e 93 b0 fc b4 1f 08 c5 09 25 26
May 6 14:07:19 (none) pluto[19570]: | 38 ab 93 5b 1b 1a 3c 2f 19 09 e5 de 47 00 28 8b
May 6 14:07:19 (none) pluto[19570]: | 68 e7 c6 99 3e 35 09 81 d6 74 e9 67 f1 91 36 78
May 6 14:07:19 (none) pluto[19570]: | 1e 4e 9c 76 16 fc 57 ae 47 06 c9 57 1f 1a 47 f5
May 6 14:07:19 (none) pluto[19570]: | d4 29 72 dc 0a f7 ac 74 20 a7 ab 1c 09 9a 13 15
May 6 14:07:19 (none) pluto[19570]: | 45 e0 c7 9f f6 03 7c 1c 00 9d d1 45 0b 41 f0 80
May 6 14:07:19 (none) pluto[19570]: | 02 5a b6 58 9c df 59 33 67 59 5d 43 08 5d a6 0f
May 6 14:07:19 (none) pluto[19570]: | 5e f1 71 03 1b 00 d3 6b cc 68 0d 21 fe c9 df 32
May 6 14:07:19 (none) pluto[19570]: | 79 f5 8f 54 40 d2 33 e1 e6 ab 1f 23 b9 99 39 85
May 6 14:07:19 (none) pluto[19570]: | cb 40 21 3f 7b 83 bc c9 22 6d 8f ca 0d d3 83 eb
May 6 14:07:19 (none) pluto[19570]: | 69 9e 5e 17 dc 2f aa 5a 51 bf 13 c7 9b d2 83 6d
May 6 14:07:19 (none) pluto[19570]: | 12 94 b4 b3 0e 52 db c2 e9 bf a7 18 79 ee a4 26
May 6 14:07:19 (none) pluto[19570]: | compute_dh_shared(): time elapsed (OAKLEY_GROUP_MODP1536 (extension)): 12943 usec
May 6 14:07:19 (none) pluto[19570]: | DH shared secret:
May 6 14:07:19 (none) pluto[19570]: | 65 89 c2 4f 24 1e d2 b3 15 e1 e2 92 a0 f8 37 79
May 6 14:07:19 (none) pluto[19570]: | 01 6a 1f 22 6c 6f 9f 22 86 aa b6 b3 ca 1a 75 67
May 6 14:07:19 (none) pluto[19570]: | c9 93 4b 21 f6 7b ef 9d 3b 15 6d ae 87 2c 73 0f
May 6 14:07:19 (none) pluto[19570]: | df a4 ef 4f 69 ed 5b ee 83 20 a0 31 57 ff 89 9b
May 6 14:07:19 (none) pluto[19570]: | ea d7 c3 26 e8 09 43 40 fb 6a 52 76 54 37 cc 6f
May 6 14:07:19 (none) pluto[19570]: | f7 35 94 8b 1f 9a df 43 9a 41 1e b2 31 1c 03 51
May 6 14:07:19 (none) pluto[19570]: | 3f 87 31 21 bd 0c fe cd 7a d0 f1 d6 e2 b4 37 35
May 6 14:07:19 (none) pluto[19570]: | f8 8b 25 66 c8 0d ca 40 af 73 da b2 44 45 8b 2c
May 6 14:07:19 (none) pluto[19570]: | 2d 66 30 5f 06 46 2d cf 7a 27 38 52 44 1f 81 2a
May 6 14:07:19 (none) pluto[19570]: | c4 f0 23 6c c5 75 8d b9 b2 d6 c2 ac 9f 26 0e 02
May 6 14:07:19 (none) pluto[19570]: | ac 30 89 e2 6c 06 3e 6a 04 5a 61 ba 03 fd 43 af
May 6 14:07:19 (none) pluto[19570]: | 45 2d 5a cc f7 b6 65 4a 73 56 78 e0 21 79 f0 1f
May 6 14:07:19 (none) pluto[19570]: | DH_i: 14 98 3c ed 4c 40 44 29 13 76 dc 82 5f 23 aa 38
May 6 14:07:19 (none) pluto[19570]: | 41 f3 9b ab a7 18 a8 c0 36 5c 24 99 51 dc 8d 21
May 6 14:07:19 (none) pluto[19570]: | 15 a0 3a 1c 59 f9 06 2b 5c e0 a0 73 82 f2 8a 83
May 6 14:07:19 (none) pluto[19570]: | f9 3e a9 a1 7a 53 c5 60 df 1f 82 7e 2a b1 96 b8
May 6 14:07:19 (none) pluto[19570]: | 08 22 96 3e 77 3d e0 c0 12 d9 87 8e 4d c1 8f 9f
May 6 14:07:19 (none) pluto[19570]: | e2 e8 53 2b 18 c1 d0 b9 d4 14 21 c2 07 ca bc db
May 6 14:07:19 (none) pluto[19570]: | 52 1a 98 c1 1b be 96 70 0b 6b 2a 5b 02 9b f3 cf
May 6 14:07:19 (none) pluto[19570]: | 62 b9 be 8e f8 4b 44 f3 66 d1 ef b5 4a 1e 39 03
May 6 14:07:19 (none) pluto[19570]: | ab d2 7e c7 a5 37 e2 63 9b b7 73 42 65 96 4b da
May 6 14:07:19 (none) pluto[19570]: | 0e ec c6 05 a1 70 44 63 ff cc 07 a8 db 5e 27 74
May 6 14:07:19 (none) pluto[19570]: | 4a 6c 24 ce 5a f5 4d 59 d2 f7 54 ad 74 48 bb 14
May 6 14:07:19 (none) pluto[19570]: | 00 f6 58 12 13 74 1e 0c 04 00 ae ad 2d cc cc 94
May 6 14:07:19 (none) pluto[19570]: | DH_r: 5c 5b d5 dd 0e 5e 93 b0 fc b4 1f 08 c5 09 25 26
May 6 14:07:19 (none) pluto[19570]: | 38 ab 93 5b 1b 1a 3c 2f 19 09 e5 de 47 00 28 8b
May 6 14:07:19 (none) pluto[19570]: | 68 e7 c6 99 3e 35 09 81 d6 74 e9 67 f1 91 36 78
May 6 14:07:19 (none) pluto[19570]: | 1e 4e 9c 76 16 fc 57 ae 47 06 c9 57 1f 1a 47 f5
May 6 14:07:19 (none) pluto[19570]: | d4 29 72 dc 0a f7 ac 74 20 a7 ab 1c 09 9a 13 15
May 6 14:07:19 (none) pluto[19570]: | 45 e0 c7 9f f6 03 7c 1c 00 9d d1 45 0b 41 f0 80
May 6 14:07:19 (none) pluto[19570]: | 02 5a b6 58 9c df 59 33 67 59 5d 43 08 5d a6 0f
May 6 14:07:19 (none) pluto[19570]: | 5e f1 71 03 1b 00 d3 6b cc 68 0d 21 fe c9 df 32
May 6 14:07:19 (none) pluto[19570]: | 79 f5 8f 54 40 d2 33 e1 e6 ab 1f 23 b9 99 39 85
May 6 14:07:19 (none) pluto[19570]: | cb 40 21 3f 7b 83 bc c9 22 6d 8f ca 0d d3 83 eb
May 6 14:07:19 (none) pluto[19570]: | 69 9e 5e 17 dc 2f aa 5a 51 bf 13 c7 9b d2 83 6d
May 6 14:07:19 (none) pluto[19570]: | 12 94 b4 b3 0e 52 db c2 e9 bf a7 18 79 ee a4 26
May 6 14:07:19 (none) pluto[19570]: | Skeyid: 07 d0 69 a0 c6 8b 73 a5 d5 1a 40 d5 e7 4a 9b 76
May 6 14:07:19 (none) pluto[19570]: | Skeyid_d: d8 a7 68 0e 04 39 e2 55 0e 02 b8 70 bd 6c 78 6a
May 6 14:07:19 (none) pluto[19570]: | Skeyid_a: a6 86 c5 ba 65 2d e9 b4 dc 5b 88 d7 5c 6c 1c 5a
May 6 14:07:19 (none) pluto[19570]: | Skeyid_e: 4b 1e 7f 8e b3 f7 5c 6a 11 f2 f3 21 40 c3 85 df
May 6 14:07:19 (none) pluto[19570]: | enc key: 88 28 eb fd c5 17 88 84 b6 d9 f4 06 6b 3e b1 bf
May 6 14:07:19 (none) pluto[19570]: | 2e 4a bd bf 78 83 ba d4
May 6 14:07:19 (none) pluto[19570]: | IV: 4f d3 a5 53 f5 f0 c3 5c 6f dd b4 73 8c 04 94 5c
May 6 14:07:19 (none) pluto[19570]: | _natd_hash: hasher=0x80ca380(16)
May 6 14:07:19 (none) pluto[19570]: | _natd_hash: icookie=
May 6 14:07:19 (none) pluto[19570]: | fb 5a 6e 32 45 5a c6 90
May 6 14:07:19 (none) pluto[19570]: | _natd_hash: rcookie=
May 6 14:07:19 (none) pluto[19570]: | 12 64 3c 0e 6e 05 68 81
May 6 14:07:19 (none) pluto[19570]: | _natd_hash: ip= c0 a8 04 0e
May 6 14:07:19 (none) pluto[19570]: | _natd_hash: port=62465
May 6 14:07:19 (none) pluto[19570]: | _natd_hash: hash= 24 f7 95 74 6d 5d b0 26 53 34 2b a6 06 31 a0 b7
May 6 14:07:19 (none) pluto[19570]: | NAT_TRAVERSAL_NAT_BHND_ME
May 6 14:07:19 (none) pluto[19570]: | expected NAT-D: 24 f7 95 74 6d 5d b0 26 53 34 2b a6 06 31 a0 b7
May 6 14:07:19 (none) pluto[19570]: | received NAT-D: 55 9a be 44 e7 4e d4 c1 26 02 1f 25 cc 71 89 c5
May 6 14:07:19 (none) pluto[19570]: | _natd_hash: hasher=0x80ca380(16)
May 6 14:07:19 (none) pluto[19570]: | _natd_hash: icookie=
May 6 14:07:19 (none) pluto[19570]: | fb 5a 6e 32 45 5a c6 90
May 6 14:07:19 (none) pluto[19570]: | _natd_hash: rcookie=
May 6 14:07:19 (none) pluto[19570]: | 12 64 3c 0e 6e 05 68 81
May 6 14:07:19 (none) pluto[19570]: | _natd_hash: ip= cd 9e 9c 62
May 6 14:07:19 (none) pluto[19570]: | _natd_hash: port=62465
May 6 14:07:19 (none) pluto[19570]: | _natd_hash: hash= 69 96 b8 64 af cb af 9e 2e 54 3b d8 74 5e 95 b2
May 6 14:07:19 (none) pluto[19570]: "VPNConquestUS_1" #1: NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike-03: i am NATed
May 6 14:07:19 (none) pluto[19570]: | inserting event EVENT_NAT_T_KEEPALIVE, timeout in 60 seconds
May 6 14:07:19 (none) pluto[19570]: | ***emit ISAKMP Identification Payload (IPsec DOI):
May 6 14:07:19 (none) pluto[19570]: | next payload type: ISAKMP_NEXT_SIG
May 6 14:07:19 (none) pluto[19570]: | ID type: ID_FQDN
May 6 14:07:19 (none) pluto[19570]: | Protocol ID: 0
May 6 14:07:19 (none) pluto[19570]: | port: 0
May 6 14:07:19 (none) pluto[19570]: | emitting 18 raw bytes of my identity into ISAKMP Identification Payload (IPsec DOI)
May 6 14:07:19 (none) pluto[19570]: | my identity 61 73 6c 2e 63 6f 6e 71 75 65 73 74 62 6d 2e 63
May 6 14:07:19 (none) pluto[19570]: | 6f 6d
May 6 14:07:19 (none) pluto[19570]: | emitting length of ISAKMP Identification Payload (IPsec DOI): 26
May 6 14:07:19 (none) pluto[19570]: | hashing 48 bytes of SA
May 6 14:07:19 (none) pluto[19570]: | signing hash with RSA Key *AQN8iZvFh
May 6 14:07:19 (none) pluto[19570]: | ***emit ISAKMP Signature Payload:
May 6 14:07:19 (none) pluto[19570]: | next payload type: ISAKMP_NEXT_NONE
May 6 14:07:19 (none) pluto[19570]: | emitting 256 raw bytes of SIG_I into ISAKMP Signature Payload
May 6 14:07:19 (none) pluto[19570]: | SIG_I 41 5f 6a 0e 6a 90 f1 2c df 56 b9 1c 70 12 00 68
May 6 14:07:19 (none) pluto[19570]: | 89 d4 60 28 31 45 b5 bd 98 f7 cb 4e 5f 2d a4 7e
May 6 14:07:19 (none) pluto[19570]: | d3 79 d5 34 a8 08 96 e3 bc 75 9a 9f 6d 05 88 20
May 6 14:07:19 (none) pluto[19570]: | cb 5a 13 81 67 3f 96 23 f5 c2 dc 00 31 60 75 8d
May 6 14:07:19 (none) pluto[19570]: | bb a7 95 98 5a d6 5e 66 cb ad 52 e3 63 99 d1 a2
May 6 14:07:19 (none) pluto[19570]: | 5a 20 84 58 a7 18 3f 60 87 60 38 19 ac 53 9b 7d
May 6 14:07:19 (none) pluto[19570]: | 9d 3f 35 f8 27 2b 08 2a 7e 12 23 34 7d a6 65 09
May 6 14:07:19 (none) pluto[19570]: | 75 75 24 23 7a b5 dc 45 d5 81 ee a7 3c a4 40 74
May 6 14:07:19 (none) pluto[19570]: | 60 e0 00 f1 f6 8d 28 4e a1 f3 eb 31 1e a8 2f 7e
May 6 14:07:19 (none) pluto[19570]: | 9e 37 0c f4 fd 82 4e 9d 1b 09 f3 62 20 f0 fe 81
May 6 14:07:19 (none) pluto[19570]: | 90 c2 98 21 8b ca b1 f6 ef c6 b1 bd 06 75 a9 1b
May 6 14:07:19 (none) pluto[19570]: | 9c bb 52 79 54 9a 7f 94 ef 26 b2 3c f1 3f 18 65
May 6 14:07:19 (none) pluto[19570]: | bc 8b dd a7 05 c7 03 3c 80 59 2d 4d f9 09 3d 4e
May 6 14:07:19 (none) pluto[19570]: | 59 c8 83 7c 28 27 9b 31 e4 4c 2d 31 5e 9f da 4f
May 6 14:07:19 (none) pluto[19570]: | 00 4d 2f 78 c6 f6 38 b3 63 18 7e 3c 5e 0a 55 c2
May 6 14:07:19 (none) pluto[19570]: | 02 dd c2 ab 4b 3a 0e cb e0 34 5f 8b 2a 9a 4a 8d
May 6 14:07:19 (none) pluto[19570]: | emitting length of ISAKMP Signature Payload: 260
May 6 14:07:19 (none) pluto[19570]: | encrypting:
May 6 14:07:19 (none) pluto[19570]: | 09 00 00 1a 02 00 00 00 61 73 6c 2e 63 6f 6e 71
May 6 14:07:19 (none) pluto[19570]: | 75 65 73 74 62 6d 2e 63 6f 6d 00 00 01 04 41 5f
May 6 14:07:19 (none) pluto[19570]: | 6a 0e 6a 90 f1 2c df 56 b9 1c 70 12 00 68 89 d4
May 6 14:07:19 (none) pluto[19570]: | 60 28 31 45 b5 bd 98 f7 cb 4e 5f 2d a4 7e d3 79
May 6 14:07:19 (none) pluto[19570]: | d5 34 a8 08 96 e3 bc 75 9a 9f 6d 05 88 20 cb 5a
May 6 14:07:19 (none) pluto[19570]: | 13 81 67 3f 96 23 f5 c2 dc 00 31 60 75 8d bb a7
May 6 14:07:19 (none) pluto[19570]: | 95 98 5a d6 5e 66 cb ad 52 e3 63 99 d1 a2 5a 20
May 6 14:07:19 (none) pluto[19570]: | 84 58 a7 18 3f 60 87 60 38 19 ac 53 9b 7d 9d 3f
May 6 14:07:19 (none) pluto[19570]: | 35 f8 27 2b 08 2a 7e 12 23 34 7d a6 65 09 75 75
May 6 14:07:19 (none) pluto[19570]: | 24 23 7a b5 dc 45 d5 81 ee a7 3c a4 40 74 60 e0
May 6 14:07:19 (none) pluto[19570]: | 00 f1 f6 8d 28 4e a1 f3 eb 31 1e a8 2f 7e 9e 37
May 6 14:07:19 (none) pluto[19570]: | 0c f4 fd 82 4e 9d 1b 09 f3 62 20 f0 fe 81 90 c2
May 6 14:07:19 (none) pluto[19570]: | 98 21 8b ca b1 f6 ef c6 b1 bd 06 75 a9 1b 9c bb
May 6 14:07:19 (none) pluto[19570]: | 52 79 54 9a 7f 94 ef 26 b2 3c f1 3f 18 65 bc 8b
May 6 14:07:19 (none) pluto[19570]: | dd a7 05 c7 03 3c 80 59 2d 4d f9 09 3d 4e 59 c8
May 6 14:07:19 (none) pluto[19570]: | 83 7c 28 27 9b 31 e4 4c 2d 31 5e 9f da 4f 00 4d
May 6 14:07:19 (none) pluto[19570]: | 2f 78 c6 f6 38 b3 63 18 7e 3c 5e 0a 55 c2 02 dd
May 6 14:07:19 (none) pluto[19570]: | c2 ab 4b 3a 0e cb e0 34 5f 8b 2a 9a 4a 8d
May 6 14:07:19 (none) pluto[19570]: | emitting 2 zero bytes of encryption padding into ISAKMP Message
May 6 14:07:19 (none) pluto[19570]: | encrypting using OAKLEY_3DES_CBC
May 6 14:07:19 (none) pluto[19570]: | next IV: a2 e2 47 36 8c 82 1c 18
May 6 14:07:19 (none) pluto[19570]: | emitting length of ISAKMP Message: 316
May 6 14:07:19 (none) pluto[19570]: | NAT-T: floating to port 4500
May 6 14:07:19 (none) pluto[19570]: | NAT-T: using interface eth1:4500
May 6 14:07:19 (none) pluto[19570]: | sending 316 bytes for STATE_MAIN_I2 through eth1 to aaa.bbb.ccc.ddd:4500:
May 6 14:07:19 (none) pluto[19570]: | fb 5a 6e 32 45 5a c6 90 12 64 3c 0e 6e 05 68 81
May 6 14:07:19 (none) pluto[19570]: | 05 10 02 01 00 00 00 00 00 00 01 3c 28 3e 5c 6d
May 6 14:07:19 (none) pluto[19570]: | 8a 3e 9c 32 21 d8 f9 2a 42 c7 76 2d 71 f9 89 26
May 6 14:07:19 (none) pluto[19570]: | 4d 22 0f 76 6b e0 d1 b3 d9 ca 81 24 fc 20 b7 34
May 6 14:07:19 (none) pluto[19570]: | e6 cb 1b 35 45 1e 47 24 b0 9a 56 5c 54 32 d8 8a
May 6 14:07:19 (none) pluto[19570]: | 02 36 9b 13 6b d1 b1 ed 6f 7b 84 02 a3 8e 89 29
May 6 14:07:19 (none) pluto[19570]: | aa 9f 48 54 ae 81 8b eb f7 88 c6 5d 46 1c 59 df
May 6 14:07:19 (none) pluto[19570]: | 05 35 b7 ac b0 e0 26 42 bc fe 91 c6 cd 59 7a 09
May 6 14:07:19 (none) pluto[19570]: | 05 7e 98 a8 40 d4 dc e4 aa 63 a4 30 d2 fc 25 34
May 6 14:07:19 (none) pluto[19570]: | 65 78 55 94 0b ad 80 9f f5 e5 b8 f2 1f 13 5e 68
May 6 14:07:19 (none) pluto[19570]: | 24 44 ce ca 11 a0 a2 d4 2f 5b ae 64 d3 5e bf bc
May 6 14:07:19 (none) pluto[19570]: | 90 63 6a a6 dc be 8e 94 e0 72 19 34 17 53 5d 5f
May 6 14:07:19 (none) pluto[19570]: | 24 4d ae 06 c8 dd 38 cb bf 02 12 29 ea 97 59 3e
May 6 14:07:19 (none) pluto[19570]: | 88 40 b4 9f c0 82 a7 62 b7 21 21 88 ec c7 16 21
May 6 14:07:19 (none) pluto[19570]: | 5f d3 f2 12 f8 69 24 dd 95 c6 76 61 c6 a6 9e 28
May 6 14:07:19 (none) pluto[19570]: | 8f c6 2e 10 8f 05 1d 3a 11 22 11 f2 4b fc c0 fa
May 6 14:07:19 (none) pluto[19570]: | 2d 20 20 24 8c fe 68 e1 f4 96 89 5c 0e 91 b8 d3
May 6 14:07:19 (none) pluto[19570]: | c8 f9 6f d5 27 2a 9d 8f aa 7b 31 cc 23 1c d2 ab
May 6 14:07:19 (none) pluto[19570]: | 46 db ee 91 e8 0c d2 78 83 3d fd 7d 25 65 28 e8
May 6 14:07:19 (none) pluto[19570]: | cb 0d 54 62 a2 e2 47 36 8c 82 1c 18
May 6 14:07:19 (none) pluto[19570]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #1
May 6 14:07:19 (none) pluto[19570]: | next event EVENT_RETRANSMIT in 10 seconds for #1
May 6 14:07:20 (none) pluto[19570]: |
May 6 14:07:20 (none) pluto[19570]: | *received 76 bytes from aaa.bbb.ccc.ddd:4500 on eth1
May 6 14:07:20 (none) pluto[19570]: | a2 79 df 05 b3 51 0d 74 1a 55 da 0d ea 8d d7 6c
May 6 14:07:20 (none) pluto[19570]: | 08 10 05 01 46 b2 a6 50 00 00 00 4c e1 28 94 79
May 6 14:07:20 (none) pluto[19570]: | f2 cc e4 4d d6 de 54 aa d3 e6 e6 4e 5e 46 96 23
May 6 14:07:20 (none) pluto[19570]: | f0 65 82 23 4d 2c 36 6e f7 19 93 2a 36 26 68 57
May 6 14:07:20 (none) pluto[19570]: | 62 24 94 2e a3 4b 1b f7 c8 12 c2 f0
May 6 14:07:20 (none) pluto[19570]: | **parse ISAKMP Message:
May 6 14:07:20 (none) pluto[19570]: | initiator cookie:
May 6 14:07:20 (none) pluto[19570]: | a2 79 df 05 b3 51 0d 74
May 6 14:07:20 (none) pluto[19570]: | responder cookie:
May 6 14:07:20 (none) pluto[19570]: | 1a 55 da 0d ea 8d d7 6c
May 6 14:07:20 (none) pluto[19570]: | next payload type: ISAKMP_NEXT_HASH
May 6 14:07:20 (none) pluto[19570]: | ISAKMP version: ISAKMP Version 1.0
May 6 14:07:20 (none) pluto[19570]: | exchange type: ISAKMP_XCHG_INFO
May 6 14:07:20 (none) pluto[19570]: | flags: ISAKMP_FLAG_ENCRYPTION
May 6 14:07:20 (none) pluto[19570]: | message ID: 46 b2 a6 50
May 6 14:07:20 (none) pluto[19570]: | length: 76
May 6 14:07:20 (none) pluto[19570]: | ICOOKIE: a2 79 df 05 b3 51 0d 74
May 6 14:07:20 (none) pluto[19570]: | RCOOKIE: 1a 55 da 0d ea 8d d7 6c
May 6 14:07:20 (none) pluto[19570]: | peer: cd 9e 9c 62
May 6 14:07:20 (none) pluto[19570]: | state hash entry 29
May 6 14:07:20 (none) pluto[19570]: | state object not found
May 6 14:07:20 (none) pluto[19570]: packet from aaa.bbb.ccc.ddd:4500: Informational Exchange is for an unknown (expired?) SA
May 6 14:07:20 (none) pluto[19570]: | next event EVENT_RETRANSMIT in 9 seconds for #1
May 6 14:07:25 (none) pluto[19570]: |
May 6 14:07:25 (none) pluto[19570]: | *received whack message
May 6 14:07:25 (none) pluto[19570]: | kernel_alg_esp_enc_ok(3,0): alg_id=3, alg_ivlen=64, alg_minbits=168, alg_maxbits=168, res=0, ret=1
May 6 14:07:25 (none) pluto[19570]: | kernel_alg_esp_auth_ok(auth=1): ret=1
May 6 14:07:25 (none) pluto[19570]: | kernel_alg_esp_enc_keylen():alg_id=3, keylen=21
May 6 14:07:25 (none) pluto[19570]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
May 6 14:07:25 (none) pluto[19570]: | next event EVENT_RETRANSMIT in 4 seconds for #1
May 6 14:07:29 (none) pluto[19570]: |
May 6 14:07:29 (none) pluto[19570]: | *time to handle event
May 6 14:07:29 (none) pluto[19570]: | event after this is EVENT_NAT_T_KEEPALIVE in 50 seconds
May 6 14:07:29 (none) pluto[19570]: | handling event EVENT_RETRANSMIT for aaa.bbb.ccc.ddd "VPNConquestUS_1" #1
May 6 14:07:29 (none) pluto[19570]: | sending 316 bytes for EVENT_RETRANSMIT through eth1 to aaa.bbb.ccc.ddd:4500:
May 6 14:07:29 (none) pluto[19570]: | fb 5a 6e 32 45 5a c6 90 12 64 3c 0e 6e 05 68 81
May 6 14:07:29 (none) pluto[19570]: | 05 10 02 01 00 00 00 00 00 00 01 3c 28 3e 5c 6d
May 6 14:07:29 (none) pluto[19570]: | 8a 3e 9c 32 21 d8 f9 2a 42 c7 76 2d 71 f9 89 26
May 6 14:07:29 (none) pluto[19570]: | 4d 22 0f 76 6b e0 d1 b3 d9 ca 81 24 fc 20 b7 34
May 6 14:07:29 (none) pluto[19570]: | e6 cb 1b 35 45 1e 47 24 b0 9a 56 5c 54 32 d8 8a
May 6 14:07:29 (none) pluto[19570]: | 02 36 9b 13 6b d1 b1 ed 6f 7b 84 02 a3 8e 89 29
May 6 14:07:29 (none) pluto[19570]: | aa 9f 48 54 ae 81 8b eb f7 88 c6 5d 46 1c 59 df
May 6 14:07:29 (none) pluto[19570]: | 05 35 b7 ac b0 e0 26 42 bc fe 91 c6 cd 59 7a 09
May 6 14:07:29 (none) pluto[19570]: | 05 7e 98 a8 40 d4 dc e4 aa 63 a
This thread was automatically locked due to age.
