Hi,
I have a net to net vpn between 2 ASL 6.100 and it work find. But when i upgrade to ASL 6.101 on both side then problem come. The Vpn died on a few hour and it will not comming back, ihave to manually off and on and it died again a few min. I have re configure the vpn but still the same.
Net to net using IPSEC AES
below is a IPSEC VPN log file:
2005:11:16-12:39:20 (none) pluto[3593]: "S_hq__wx_0" #58: initiating Quick Mode RSASIG+ENCRYPT+TUNNEL+UP to replace #57 {using isakmp#54}
2005:11:16-12:39:21 (none) pluto[3593]: "S_hq__wx_0" #58: Dead Peer Detection (RFC 3706): enabled
2005:11:16-12:39:21 (none) pluto[3593]: "S_hq__wx_0" #58: transition from state STATE_QUICK_I1 to state STATE_QUICK_I2
2005:11:16-12:41:29 (none) pluto[3593]: "S_hq__wx_0" #54: ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0x43368f57) not found (maybe expired)
2005:11:16-12:41:29 (none) pluto[3593]: "S_hq__wx_0" #54: received and ignored informational message
2005:11:16-12:48:15 (none) pluto[3593]: "S_hq__wx_0" #54: received Delete SA(0x43368f58) payload: deleting IPSEC State #57
2005:11:16-12:48:15 (none) pluto[3593]: "S_hq__wx_0" #54: received and ignored informational message
2005:11:16-12:48:15 (none) pluto[3593]: "S_hq__wx_0" #54: received Delete SA payload: deleting ISAKMP State #54
2005:11:16-12:48:15 (none) pluto[3593]: packet from 10.0.0.1:500: received and ignored informational message
2005:11:16-12:48:25 (none) pluto[3593]: packet from 10.0.0.1:500: received Vendor ID payload [Openswan (this version) 2.3.1 X.509-1.5.4 LDAP_V3 PLUTO_SENDS_VENDORID PLUTO_USES_KEYRR]
2005:11:16-12:48:25 (none) pluto[3593]: packet from 10.0.0.1:500: received Vendor ID payload [Dead Peer Detection]
2005:11:16-12:48:25 (none) pluto[3593]: packet from 10.0.0.1:500: received Vendor ID payload [RFC 3947] method set to=109
2005:11:16-12:48:25 (none) pluto[3593]: packet from 10.0.0.1:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03] meth=108, but already using method 109
2005:11:16-12:48:25 (none) pluto[3593]: packet from 10.0.0.1:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02] meth=107, but already using method 109
2005:11:16-12:48:25 (none) pluto[3593]: packet from 10.0.0.1:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-00]
2005:11:16-12:48:25 (none) pluto[3593]: "S_hq__wx_0" #59: responding to Main Mode
2005:11:16-12:48:25 (none) pluto[3593]: "S_hq__wx_0" #59: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1
2005:11:16-12:48:25 (none) pluto[3593]: "S_hq__wx_0" #59: NAT-Traversal: Result using RFC 3947 (NAT-Traversal): no NAT detected
2005:11:16-12:48:25 (none) pluto[3593]: "S_hq__wx_0" #59: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2
2005:11:16-12:48:35 (none) pluto[3593]: "S_hq__wx_0" #59: Main mode peer ID is ID_IPV4_ADDR: '10.0.0.1'
2005:11:16-12:48:35 (none) pluto[3593]: "S_hq__wx_0" #59: I did not send a certificate because I do not have one.
2005:11:16-12:48:35 (none) pluto[3593]: "S_hq__wx_0" #59: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3
2005:11:16-12:48:35 (none) pluto[3593]: "S_hq__wx_0" #59: sent MR3, ISAKMP SA established
2005:11:16-12:48:35 (none) pluto[3593]: "S_hq__wx_0" #59: Dead Peer Detection (RFC 3706): enabled
2005:11:16-12:48:36 (none) pluto[3593]: "S_hq__wx_0" #60: responding to Quick Mode {msgid:76860e86}
2005:11:16-12:48:36 (none) pluto[3593]: "S_hq__wx_0" #60: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1
2005:11:16-12:48:36 (none) pluto[3593]: "S_hq__wx_0" #60: Dead Peer Detection (RFC 3706): enabled
2005:11:16-12:48:36 (none) pluto[3593]: "S_hq__wx_0" #60: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2
2005:11:16-13:26:56 (none) pluto[3593]: "S_hq__wx_0" #59: DPD: No response from peer - declaring peer dead
2005:11:16-13:26:56 (none) pluto[3593]: "S_hq__wx_0" #58: deleting state (STATE_QUICK_I2)
2005:11:16-13:26:56 (none) pluto[3593]: "S_hq__wx_0" #60: deleting state (STATE_QUICK_R2)
2005:11:16-13:26:56 (none) pluto[3593]: "S_hq__wx_0" #59: deleting state (STATE_MAIN_R3)
2005:11:16-13:26:56 (none) pluto[3593]: DPD: Restarting Connection
2005:11:16-13:26:56 (none) pluto[3593]: "S_hq__wx_0" #61: initiating Main Mode
2005:11:16-13:26:56 (none) pluto[3593]: "S_hq__wx_0" #61: received Vendor ID payload [Openswan (this version) 2.3.1 X.509-1.5.4 LDAP_V3 PLUTO_SENDS_VENDORID PLUTO_USES_KEYRR]
2005:11:16-13:26:56 (none) pluto[3593]: "S_hq__wx_0" #61: received Vendor ID payload [Dead Peer Detection]
2005:11:16-13:26:56 (none) pluto[3593]: "S_hq__wx_0" #61: received Vendor ID payload [RFC 3947] method set to=109
2005:11:16-13:26:56 (none) pluto[3593]: "S_hq__wx_0" #61: enabling possible NAT-traversal with method 3
2005:11:16-13:26:56 (none) pluto[3593]: "S_hq__wx_0" #61: transition from state STATE_MAIN_I1 to state STATE_MAIN_I2
2005:11:16-13:26:56 (none) pluto[3593]: "S_hq__wx_0" #61: I did not send a certificate because I do not have one.
2005:11:16-13:26:56 (none) pluto[3593]: "S_hq__wx_0" #61: NAT-Traversal: Result using RFC 3947 (NAT-Traversal): no NAT detected
2005:11:16-13:26:56 (none) pluto[3593]: "S_hq__wx_0" #61: transition from state STATE_MAIN_I2 to state STATE_MAIN_I3
2005:11:16-13:26:56 (none) pluto[3593]: "S_hq__wx_0" #61: Main mode peer ID is ID_IPV4_ADDR: '10.0.0.1'
2005:11:16-13:26:56 (none) pluto[3593]: "S_hq__wx_0" #61: transition from state STATE_MAIN_I3 to state STATE_MAIN_I4
2005:11:16-13:26:56 (none) pluto[3593]: "S_hq__wx_0" #61: ISAKMP SA established
2005:11:16-13:26:56 (none) pluto[3593]: "S_hq__wx_0" #61: Dead Peer Detection (RFC 3706): enabled
2005:11:16-13:26:56 (none) pluto[3593]: "S_hq__wx_0" #62: initiating Quick Mode RSASIG+ENCRYPT+TUNNEL+UP {using isakmp#61}
2005:11:16-13:26:57 (none) pluto[3593]: "S_hq__wx_0" #62: Dead Peer Detection (RFC 3706): enabled
2005:11:16-13:26:57 (none) pluto[3593]: "S_hq__wx_0" #62: transition from state STATE_QUICK_I1 to state STATE_QUICK_I2
2005:11:16-14:14:56 (none) pluto[3593]: "S_hq__wx_0" #63: initiating Quick Mode RSASIG+ENCRYPT+TUNNEL+UP to replace #62 {using isakmp#61}
2005:11:16-14:14:57 (none) pluto[3593]: "S_hq__wx_0" #63: Dead Peer Detection (RFC 3706): enabled
2005:11:16-14:14:57 (none) pluto[3593]: "S_hq__wx_0" #63: transition from state STATE_QUICK_I1 to state STATE_QUICK_I2
2005:11:16-14:26:57 (none) pluto[3593]: "S_hq__wx_0" #61: received Delete SA(0x43368f5b) payload: deleting IPSEC State #62
2005:11:16-14:26:57 (none) pluto[3593]: "S_hq__wx_0" #61: received and ignored informational message
2005:11:16-14:57:09 (none) pluto[3593]: "S_hq__wx_0" #64: initiating Quick Mode RSASIG+ENCRYPT+TUNNEL+UP to replace #63 {using isakmp#61}
2005:11:16-14:57:09 (none) pluto[3593]: "S_hq__wx_0" #64: Dead Peer Detection (RFC 3706): enabled
2005:11:16-14:57:09 (none) pluto[3593]: "S_hq__wx_0" #64: transition from state STATE_QUICK_I1 to state STATE_QUICK_I2
2005:11:16-15:12:02 (none) pluto[3593]: "S_hq__wx_0" #61: received Delete SA payload: replace IPSEC State #64 in 10 seconds
2005:11:16-15:12:02 (none) pluto[3593]: "S_hq__wx_0" #61: received and ignored informational message
2005:11:16-15:12:02 (none) pluto[3593]: "S_hq__wx_0" #61: received Delete SA(0x43368f5c) payload: deleting IPSEC State #63
2005:11:16-15:12:02 (none) pluto[3593]: "S_hq__wx_0" #61: received and ignored informational message
2005:11:16-15:12:02 (none) pluto[3593]: "S_hq__wx_0" #61: received Delete SA payload: deleting ISAKMP State #61
2005:11:16-15:12:02 (none) pluto[3593]: packet from 10.0.0.1:500: received and ignored informational message
2005:11:16-15:12:02 (none) pluto[3593]: packet from 10.0.0.1:500: received Vendor ID payload [Openswan (this version) 2.3.1 X.509-1.5.4 LDAP_V3 PLUTO_SENDS_VENDORID PLUTO_USES_KEYRR]
2005:11:16-15:12:02 (none) pluto[3593]: packet from 10.0.0.1:500: received Vendor ID payload [Dead Peer Detection]
2005:11:16-15:12:02 (none) pluto[3593]: packet from 10.0.0.1:500: received Vendor ID payload [RFC 3947] method set to=109
2005:11:16-15:12:02 (none) pluto[3593]: packet from 10.0.0.1:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03] meth=108, but already using method 109
2005:11:16-15:12:02 (none) pluto[3593]: packet from 10.0.0.1:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02] meth=107, but already using method 109
2005:11:16-15:12:02 (none) pluto[3593]: packet from 10.0.0.1:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-00]
2005:11:16-15:12:02 (none) pluto[3593]: "S_hq__wx_0" #65: responding to Main Mode
2005:11:16-15:12:02 (none) pluto[3593]: "S_hq__wx_0" #65: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1
2005:11:16-15:12:02 (none) pluto[3593]: "S_hq__wx_0" #65: NAT-Traversal: Result using RFC 3947 (NAT-Traversal): no NAT detected
2005:11:16-15:12:02 (none) pluto[3593]: "S_hq__wx_0" #65: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2
2005:11:16-15:12:02 (none) pluto[3593]: "S_hq__wx_0" #65: Main mode peer ID is ID_IPV4_ADDR: '10.0.0.1'
2005:11:16-15:12:02 (none) pluto[3593]: "S_hq__wx_0" #65: I did not send a certificate because I do not have one.
2005:11:16-15:12:02 (none) pluto[3593]: "S_hq__wx_0" #65: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3
2005:11:16-15:12:02 (none) pluto[3593]: "S_hq__wx_0" #65: sent MR3, ISAKMP SA established
2005:11:16-15:12:02 (none) pluto[3593]: "S_hq__wx_0" #65: Dead Peer Detection (RFC 3706): enabled
2005:11:16-15:12:03 (none) pluto[3593]: "S_hq__wx_0" #66: responding to Quick Mode {msgid:e17987a5}
2005:11:16-15:12:03 (none) pluto[3593]: "S_hq__wx_0" #66: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1
2005:11:16-15:12:12 (none) pluto[3593]: "S_hq__wx_0" #67: initiating Quick Mode RSASIG+ENCRYPT+TUNNEL+UP to replace #64 {using isakmp#65}
2005:11:16-15:12:12 (none) pluto[3593]: "S_hq__wx_0" #67: Dead Peer Detection (RFC 3706): enabled
2005:11:16-15:12:12 (none) pluto[3593]: "S_hq__wx_0" #67: transition from state STATE_QUICK_I1 to state STATE_QUICK_I2
2005:11:16-15:22:05 (none) pluto[3593]: "S_hq__wx_0" #65: received Delete SA payload: replace IPSEC State #67 in 10 seconds
2005:11:16-15:22:05 (none) pluto[3593]: "S_hq__wx_0" #65: received and ignored informational message
2005:11:16-15:22:05 (none) pluto[3593]: "S_hq__wx_0" #65: ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0x43368f5e) not found (maybe expired)
2005:11:16-15:22:05 (none) pluto[3593]: "S_hq__wx_0" #65: received and ignored informational message
2005:11:16-15:22:05 (none) pluto[3593]: "S_hq__wx_0" #65: received Delete SA payload: deleting ISAKMP State #65
2005:11:16-15:22:05 (none) pluto[3593]: packet from 10.0.0.1:500: received and ignored informational message
2005:11:16-15:22:05 (none) pluto[3593]: packet from 10.0.0.1:500: received Vendor ID payload [Openswan (this version) 2.3.1 X.509-1.5.4 LDAP_V3 PLUTO_SENDS_VENDORID PLUTO_USES_KEYRR]
2005:11:16-15:22:05 (none) pluto[3593]: packet from 10.0.0.1:500: received Vendor ID payload [Dead Peer Detection]
2005:11:16-15:22:05 (none) pluto[3593]: packet from 10.0.0.1:500: received Vendor ID payload [RFC 3947] method set to=109
2005:11:16-15:22:05 (none) pluto[3593]: packet from 10.0.0.1:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03] meth=108, but already using method 109
2005:11:16-15:22:05 (none) pluto[3593]: packet from 10.0.0.1:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02] meth=107, but already using method 109
2005:11:16-15:22:05 (none) pluto[3593]: packet from 10.0.0.1:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-00]
2005:11:16-15:22:05 (none) pluto[3593]: "S_hq__wx_0" #68: responding to Main Mode
2005:11:16-15:22:05 (none) pluto[3593]: "S_hq__wx_0" #68: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1
2005:11:16-15:22:15 (none) pluto[3593]: "S_hq__wx_0" #69: initiating Main Mode
2005:11:16-15:22:16 (none) pluto[3593]: "S_hq__wx_0" #68: NAT-Traversal: Result using RFC 3947 (NAT-Traversal): no NAT detected
2005:11:16-15:22:16 (none) pluto[3593]: "S_hq__wx_0" #68: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2
2005:11:16-15:22:16 (none) pluto[3593]: "S_hq__wx_0" #69: received Vendor ID payload [Openswan (this version) 2.3.1 X.509-1.5.4 LDAP_V3 PLUTO_SENDS_VENDORID PLUTO_USES_KEYRR]
2005:11:16-15:22:16 (none) pluto[3593]: "S_hq__wx_0" #69: received Vendor ID payload [Dead Peer Detection]
2005:11:16-15:22:16 (none) pluto[3593]: "S_hq__wx_0" #69: received Vendor ID payload [RFC 3947] method set to=109
2005:11:16-15:22:16 (none) pluto[3593]: "S_hq__wx_0" #69: enabling possible NAT-traversal with method 3
2005:11:16-15:22:16 (none) pluto[3593]: "S_hq__wx_0" #69: transition from state STATE_MAIN_I1 to state STATE_MAIN_I2
2005:11:16-15:22:25 (none) pluto[3593]: "S_hq__wx_0" #67: IPsec SA expired (LATEST!)
2005:11:16-15:22:26 (none) pluto[3593]: "S_hq__wx_0" #68: Main mode peer ID is ID_IPV4_ADDR: '10.0.0.1'
2005:11:16-15:22:26 (none) pluto[3593]: "S_hq__wx_0" #68: I did not send a certificate because I do not have one.
2005:11:16-15:22:26 (none) pluto[3593]: "S_hq__wx_0" #68: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3
2005:11:16-15:22:26 (none) pluto[3593]: "S_hq__wx_0" #68: sent MR3, ISAKMP SA established
2005:11:16-15:22:26 (none) pluto[3593]: "S_hq__wx_0" #68: Dead Peer Detection (RFC 3706): enabled
2005:11:16-15:22:26 (none) pluto[3593]: "S_hq__wx_0" #70: responding to Quick Mode {msgid[:D]7af762c}
2005:11:16-15:22:26 (none) pluto[3593]: "S_hq__wx_0" #70: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1
2005:11:16-15:25:58 (none) pluto[3593]: shutting down
2005:11:16-15:25:58 (none) pluto[3593]: forgetting secrets
2005:11:16-15:25:58 (none) pluto[3593]: "S_hq__wx_0": deleting connection
2005:11:16-15:25:58 (none) pluto[3593]: "S_hq__wx_0" #70: deleting state (STATE_QUICK_R1)
2005:11:16-15:25:58 (none) pluto[3593]: "S_hq__wx_0" #69: deleting state (STATE_MAIN_I2)
2005:11:16-15:25:58 (none) pluto[3593]: "S_hq__wx_0" #68: deleting state (STATE_MAIN_R3)
2005:11:16-15:25:58 (none) pluto[3593]: shutting down interface ipsec0/br0 11.0.1.5:4500
2005:11:16-15:25:58 (none) pluto[3593]: shutting down interface ipsec0/br0 11.0.1.5:500
2005:11:16-15:25:58 (none) ipsec_starter[3582]: child 3593 (Pluto) has quit (exit code 0)
2005:11:16-15:25:58 (none) ipsec_starter[3582]: shutting down interface ipsec0/br0
2005:11:16-15:26:00 (none) ipsec_starter[20194]: Starting Openswan IPsec 2.3.1 [starter]...
2005:11:16-15:26:00 (none) ipsec_starter[20206]: attaching interface ipsec0 to br0
2005:11:16-15:26:01 (none) ipsec_starter[20206]: Attempting to start pluto...
2005:11:16-15:26:01 (none) pluto[20214]: Starting Pluto (Openswan Version 2.3.1 X.509-1.5.4 LDAP_V3 PLUTO_SENDS_VENDORID PLUTO_USES_KEYRR; Vendor ID OECoXlTMFvoT)
2005:11:16-15:26:01 (none) pluto[20214]: Setting port floating to on
2005:11:16-15:26:01 (none) pluto[20214]: port floating activate 1/1
2005:11:16-15:26:01 (none) pluto[20214]: including NAT-Traversal patch (Version 0.6c)
2005:11:16-15:26:01 (none) pluto[20214]: ike_alg_register_enc(): Activating OAKLEY_TWOFISH_CBC_SSH: Ok (ret=0)
2005:11:16-15:26:01 (none) pluto[20214]: ike_alg_register_enc(): Activating OAKLEY_TWOFISH_CBC: Ok (ret=0)
2005:11:16-15:26:01 (none) pluto[20214]: ike_alg_register_enc(): Activating OAKLEY_SERPENT_CBC: Ok (ret=0)
2005:11:16-15:26:01 (none) pluto[20214]: ike_alg_register_enc(): Activating OAKLEY_AES_CBC: Ok (ret=0)
2005:11:16-15:26:01 (none) pluto[20214]: ike_alg_register_enc(): Activating OAKLEY_BLOWFISH_CBC: Ok (ret=0)
2005:11:16-15:26:01 (none) pluto[20214]: ike_alg_register_hash(): Activating OAKLEY_SHA2_512: Ok (ret=0)
2005:11:16-15:26:01 (none) pluto[20214]: ike_alg_register_hash(): Activating OAKLEY_SHA2_256: Ok (ret=0)
2005:11:16-15:26:01 (none) pluto[20214]: no helpers will be started, all cryptographic operations will be done inline
2005:11:16-15:26:01 (none) pluto[20214]: Using KLIPS IPsec interface code
2005:11:16-15:26:01 (none) pluto[20214]: Changing to directory '/etc/ipsec.d/cacerts'
2005:11:16-15:26:01 (none) pluto[20214]: Could not change to directory '/etc/ipsec.d/aacerts'
2005:11:16-15:26:01 (none) pluto[20214]: Could not change to directory '/etc/ipsec.d/ocspcerts'
2005:11:16-15:26:01 (none) pluto[20214]: Changing to directory '/etc/ipsec.d/crls'
2005:11:16-15:26:01 (none) pluto[20214]: Warning: empty directory
2005:11:16-15:26:01 (none) ipsec_starter[20206]: pluto (20214) started
2005:11:16-15:26:01 (none) pluto[20214]: listening for IKE messages
2005:11:16-15:26:01 (none) pluto[20214]: adding interface ipsec0/br0 11.0.1.5:500
2005:11:16-15:26:01 (none) pluto[20214]: adding interface ipsec0/br0 11.0.1.5:4500
2005:11:16-15:26:01 (none) pluto[20214]: loading secrets from "/etc/ipsec.secrets"
2005:11:16-15:26:01 (none) pluto[20214]: added connection description "S_hq__wx_0"
2005:11:16-15:26:01 (none) pluto[20214]: "S_hq__wx_0" #1: initiating Main Mode
2005:11:16-15:26:12 (none) pluto[20214]: "S_hq__wx_0" #1: received Vendor ID payload [Openswan (this version) 2.3.1 X.509-1.5.4 LDAP_V3 PLUTO_SENDS_VENDORID PLUTO_USES_KEYRR]
2005:11:16-15:26:12 (none) pluto[20214]: "S_hq__wx_0" #1: received Vendor ID payload [Dead Peer Detection]
2005:11:16-15:26:12 (none) pluto[20214]: "S_hq__wx_0" #1: received Vendor ID payload [RFC 3947] method set to=109
2005:11:16-15:26:12 (none) pluto[20214]: "S_hq__wx_0" #1: enabling possible NAT-traversal with method 3
2005:11:16-15:26:12 (none) pluto[20214]: "S_hq__wx_0" #1: transition from state STATE_MAIN_I1 to state STATE_MAIN_I2
2005:11:16-15:26:12 (none) pluto[20214]: "S_hq__wx_0" #1: I did not send a certificate because I do not have one.
2005:11:16-15:26:12 (none) pluto[20214]: "S_hq__wx_0" #1: NAT-Traversal: Result using RFC 3947 (NAT-Traversal): no NAT detected
2005:11:16-15:26:12 (none) pluto[20214]: "S_hq__wx_0" #1: transition from state STATE_MAIN_I2 to state STATE_MAIN_I3
2005:11:16-15:26:12 (none) pluto[20214]: "S_hq__wx_0" #1: Main mode peer ID is ID_IPV4_ADDR: '10.0.0.1'
2005:11:16-15:26:12 (none) pluto[20214]: "S_hq__wx_0" #1: transition from state STATE_MAIN_I3 to state STATE_MAIN_I4
2005:11:16-15:26:12 (none) pluto[20214]: "S_hq__wx_0" #1: ISAKMP SA established
2005:11:16-15:26:12 (none) pluto[20214]: "S_hq__wx_0" #1: Dead Peer Detection (RFC 3706): enabled
2005:11:16-15:26:12 (none) pluto[20214]: "S_hq__wx_0" #2: initiating Quick Mode RSASIG+ENCRYPT+TUNNEL+UP {using isakmp#1}
2005:11:16-15:26:12 (none) pluto[20214]: "S_hq__wx_0" #2: Dead Peer Detection (RFC 3706): enabled
2005:11:16-15:26:12 (none) pluto[20214]: "S_hq__wx_0" #2: transition from state STATE_QUICK_I1 to state STATE_QUICK_I2
2005:11:16-15:38:00 (none) pluto[20214]: "S_hq__wx_0" #1: ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0x43368f60) not found (maybe expired)
2005:11:16-15:38:00 (none) pluto[20214]: "S_hq__wx_0" #1: received and ignored informational message
2005:11:16-15:38:00 (none) pluto[20214]: "S_hq__wx_0" #1: received Delete SA payload: deleting ISAKMP State #1
2005:11:16-15:38:00 (none) pluto[20214]: packet from 10.0.0.1:500: received and ignored informational message
2005:11:16-15:38:09 (none) pluto[20214]: packet from 10.0.0.1:500: received Vendor ID payload [Openswan (this version) 2.3.1 X.509-1.5.4 LDAP_V3 PLUTO_SENDS_VENDORID PLUTO_USES_KEYRR]
2005:11:16-15:38:09 (none) pluto[20214]: packet from 10.0.0.1:500: received Vendor ID payload [Dead Peer Detection]
2005:11:16-15:38:09 (none) pluto[20214]: packet from 10.0.0.1:500: received Vendor ID payload [RFC 3947] method set to=109
2005:11:16-15:38:09 (none) pluto[20214]: packet from 10.0.0.1:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03] meth=108, but already using method 109
2005:11:16-15:38:09 (none) pluto[20214]: packet from 10.0.0.1:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02] meth=107, but already using method 109
2005:11:16-15:38:09 (none) pluto[20214]: packet from 10.0.0.1:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-00]
2005:11:16-15:38:09 (none) pluto[20214]: "S_hq__wx_0" #3: responding to Main Mode
2005:11:16-15:38:09 (none) pluto[20214]: "S_hq__wx_0" #3: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1
2005:11:16-15:38:30 (none) pluto[20214]: "S_hq__wx_0" #2: DPD Error: could not find newest phase 1 state
2005:11:16-15:39:19 (none) pluto[20214]: "S_hq__wx_0" #3: max number of retransmissions (2) reached STATE_MAIN_R1
anyone pls help!!
How can i revese to ASL 6.100 without reinstall ASL??
This thread was automatically locked due to age.
