I've successfully managed to connect to ASL5 using a road warrior CA setup from one machine on the LAN using the built in VPN client "remote connection?" on a machine with WinXP SP2.
However, when I try to duplicate this feat on a machine with SP1 + Fix KB818043, then the key exchange seem to fail.
I've tailed the ipsec.log file when connecting using both machines and the initial part is identical, until after line 251, where the SP2 machine seems to proceed with the key exchange while the SP1 seems to do nothing. After two additional seconds though, the SP1 machine resubmits the same initial information which would lead up to the key exchange and so it continues on the SP1.
Now, any advice for solving this problem / explaining why the SP1 behaves as it does would be greatly appreciated.
Below is an excerpt from the ASL ipsec.log showing a connection attempt using the SP1 machine.
PS. ASL and both windows machines are connected using Ethernet through the same switch to eliminate infrastructure factors. Also notice the time gap at 18:07:42, which I interpret to signal a new session initialization event by the client.
====== SNIP =======
2006:01:28-18:07:40 (none) pluto[6949]: |
2006:01:28-18:07:40 (none) pluto[6949]: | *received 312 bytes from 192.168.0.252:500 on eth0
2006:01:28-18:07:40 (none) pluto[6949]: | **parse ISAKMP Message:
2006:01:28-18:07:40 (none) pluto[6949]: | initiator cookie:
2006:01:28-18:07:40 (none) pluto[6949]: | 59 51 88 47 af 9f a7 3b
2006:01:28-18:07:40 (none) pluto[6949]: | responder cookie:
2006:01:28-18:07:40 (none) pluto[6949]: | 00 00 00 00 00 00 00 00
2006:01:28-18:07:40 (none) pluto[6949]: | next payload type: ISAKMP_NEXT_SA
2006:01:28-18:07:40 (none) pluto[6949]: | ISAKMP version: ISAKMP Version 1.0
2006:01:28-18:07:40 (none) pluto[6949]: | exchange type: ISAKMP_XCHG_IDPROT
2006:01:28-18:07:40 (none) pluto[6949]: | flags: none
2006:01:28-18:07:40 (none) pluto[6949]: | message ID: 00 00 00 00
2006:01:28-18:07:40 (none) pluto[6949]: | length: 312
2006:01:28-18:07:40 (none) pluto[6949]: | The xchg type is ISAKMP_XCHG_IDPROT (2)
2006:01:28-18:07:40 (none) pluto[6949]: | ***parse ISAKMP Security Association Payload:
2006:01:28-18:07:40 (none) pluto[6949]: | next payload type: ISAKMP_NEXT_VID
2006:01:28-18:07:40 (none) pluto[6949]: | length: 200
2006:01:28-18:07:40 (none) pluto[6949]: | DOI: ISAKMP_DOI_IPSEC
2006:01:28-18:07:40 (none) pluto[6949]: | ***parse ISAKMP Vendor ID Payload:
2006:01:28-18:07:40 (none) pluto[6949]: | next payload type: ISAKMP_NEXT_VID
2006:01:28-18:07:40 (none) pluto[6949]: | length: 24
2006:01:28-18:07:40 (none) pluto[6949]: | ***parse ISAKMP Vendor ID Payload:
2006:01:28-18:07:40 (none) pluto[6949]: | next payload type: ISAKMP_NEXT_VID
2006:01:28-18:07:40 (none) pluto[6949]: | length: 20
2006:01:28-18:07:40 (none) pluto[6949]: | ***parse ISAKMP Vendor ID Payload:
2006:01:28-18:07:40 (none) pluto[6949]: | next payload type: ISAKMP_NEXT_VID
2006:01:28-18:07:40 (none) pluto[6949]: | length: 20
2006:01:28-18:07:40 (none) pluto[6949]: | ***parse ISAKMP Vendor ID Payload:
2006:01:28-18:07:40 (none) pluto[6949]: | next payload type: ISAKMP_NEXT_NONE
2006:01:28-18:07:40 (none) pluto[6949]: | length: 20
2006:01:28-18:07:40 (none) pluto[6949]: packet from 192.168.0.252:500: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000004]
2006:01:28-18:07:40 (none) pluto[6949]: | VID: 1e 2b 51 69 05 99 1c 7d 7c 96 fc bf b5 87 e4 61
2006:01:28-18:07:40 (none) pluto[6949]: | 00 00 00 04
2006:01:28-18:07:40 (none) pluto[6949]: packet from 192.168.0.252:500: ignoring Vendor ID payload [FRAGMENTATION]
2006:01:28-18:07:40 (none) pluto[6949]: | VID: 40 48 b7 d5 6e bc e8 85 25 e7 de 7f 00 d6 c2 d3
2006:01:28-18:07:40 (none) pluto[6949]: packet from 192.168.0.252:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n]
2006:01:28-18:07:40 (none) pluto[6949]: | VID: 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 7b 1f
2006:01:28-18:07:40 (none) pluto[6949]: packet from 192.168.0.252:500: ignoring Vendor ID payload [26244d38eddb61b3...]
2006:01:28-18:07:40 (none) pluto[6949]: | VID: 26 24 4d 38 ed db 61 b3 17 2a 36 e3 d0 cf b8 19
2006:01:28-18:07:40 (none) pluto[6949]: | ****parse IPsec DOI SIT:
2006:01:28-18:07:40 (none) pluto[6949]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
2006:01:28-18:07:40 (none) pluto[6949]: | ****parse ISAKMP Proposal Payload:
2006:01:28-18:07:40 (none) pluto[6949]: | next payload type: ISAKMP_NEXT_NONE
2006:01:28-18:07:40 (none) pluto[6949]: | length: 188
2006:01:28-18:07:40 (none) pluto[6949]: | proposal number: 1
2006:01:28-18:07:40 (none) pluto[6949]: | protocol ID: PROTO_ISAKMP
2006:01:28-18:07:40 (none) pluto[6949]: | SPI size: 0
2006:01:28-18:07:40 (none) pluto[6949]: | number of transforms: 5
2006:01:28-18:07:40 (none) pluto[6949]: | *****parse ISAKMP Transform Payload (ISAKMP):
2006:01:28-18:07:40 (none) pluto[6949]: | next payload type: ISAKMP_NEXT_T
2006:01:28-18:07:40 (none) pluto[6949]: | length: 36
2006:01:28-18:07:40 (none) pluto[6949]: | transform number: 1
2006:01:28-18:07:40 (none) pluto[6949]: | transform ID: KEY_IKE
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 5
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_HASH_ALGORITHM
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 2
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_GROUP_DESCRIPTION
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 14
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_AUTHENTICATION_METHOD
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 3
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_LIFE_TYPE
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 1
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_LIFE_DURATION (variable length)
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 4
2006:01:28-18:07:40 (none) pluto[6949]: | *****parse ISAKMP Transform Payload (ISAKMP):
2006:01:28-18:07:40 (none) pluto[6949]: | next payload type: ISAKMP_NEXT_T
2006:01:28-18:07:40 (none) pluto[6949]: | length: 36
2006:01:28-18:07:40 (none) pluto[6949]: | transform number: 2
2006:01:28-18:07:40 (none) pluto[6949]: | transform ID: KEY_IKE
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 5
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_HASH_ALGORITHM
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 2
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_GROUP_DESCRIPTION
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 2
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_AUTHENTICATION_METHOD
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 3
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_LIFE_TYPE
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 1
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_LIFE_DURATION (variable length)
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 4
2006:01:28-18:07:40 (none) pluto[6949]: | *****parse ISAKMP Transform Payload (ISAKMP):
2006:01:28-18:07:40 (none) pluto[6949]: | next payload type: ISAKMP_NEXT_T
2006:01:28-18:07:40 (none) pluto[6949]: | length: 36
2006:01:28-18:07:40 (none) pluto[6949]: | transform number: 3
2006:01:28-18:07:40 (none) pluto[6949]: | transform ID: KEY_IKE
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 5
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_HASH_ALGORITHM
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 1
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_GROUP_DESCRIPTION
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 2
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_AUTHENTICATION_METHOD
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 3
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_LIFE_TYPE
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 1
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_LIFE_DURATION (variable length)
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 4
2006:01:28-18:07:40 (none) pluto[6949]: | *****parse ISAKMP Transform Payload (ISAKMP):
2006:01:28-18:07:40 (none) pluto[6949]: | next payload type: ISAKMP_NEXT_T
2006:01:28-18:07:40 (none) pluto[6949]: | length: 36
2006:01:28-18:07:40 (none) pluto[6949]: | transform number: 4
2006:01:28-18:07:40 (none) pluto[6949]: | transform ID: KEY_IKE
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 1
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_HASH_ALGORITHM
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 2
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_GROUP_DESCRIPTION
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 1
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_AUTHENTICATION_METHOD
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 3
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_LIFE_TYPE
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 1
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_LIFE_DURATION (variable length)
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 4
2006:01:28-18:07:40 (none) pluto[6949]: | *****parse ISAKMP Transform Payload (ISAKMP):
2006:01:28-18:07:40 (none) pluto[6949]: | next payload type: ISAKMP_NEXT_NONE
2006:01:28-18:07:40 (none) pluto[6949]: | length: 36
2006:01:28-18:07:40 (none) pluto[6949]: | transform number: 5
2006:01:28-18:07:40 (none) pluto[6949]: | transform ID: KEY_IKE
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 1
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_HASH_ALGORITHM
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 1
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_GROUP_DESCRIPTION
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 1
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_AUTHENTICATION_METHOD
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 3
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_LIFE_TYPE
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 1
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_LIFE_DURATION (variable length)
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 4
2006:01:28-18:07:40 (none) pluto[6949]: | instantiated "S_RW_1" for 192.168.0.252
2006:01:28-18:07:40 (none) pluto[6949]: | creating state object #13 at 0x80ef9a0
2006:01:28-18:07:40 (none) pluto[6949]: | ICOOKIE: 59 51 88 47 af 9f a7 3b
2006:01:28-18:07:40 (none) pluto[6949]: | RCOOKIE: 14 c8 2f bc 7a a2 98 3d
2006:01:28-18:07:40 (none) pluto[6949]: | peer: c0 a8 00 fc
2006:01:28-18:07:40 (none) pluto[6949]: | state hash entry 29
2006:01:28-18:07:40 (none) pluto[6949]: | inserting event EVENT_SO_DISCARD, timeout in 0 seconds for #13
2006:01:28-18:07:40 (none) pluto[6949]: "S_RW_1"[3] 192.168.0.252 #13: responding to Main Mode from unknown peer 192.168.0.252
2006:01:28-18:07:40 (none) pluto[6949]: | **emit ISAKMP Message:
2006:01:28-18:07:40 (none) pluto[6949]: | initiator cookie:
2006:01:28-18:07:40 (none) pluto[6949]: | 59 51 88 47 af 9f a7 3b
2006:01:28-18:07:40 (none) pluto[6949]: | responder cookie:
2006:01:28-18:07:40 (none) pluto[6949]: | 14 c8 2f bc 7a a2 98 3d
2006:01:28-18:07:40 (none) pluto[6949]: | next payload type: ISAKMP_NEXT_SA
2006:01:28-18:07:40 (none) pluto[6949]: | ISAKMP version: ISAKMP Version 1.0
2006:01:28-18:07:40 (none) pluto[6949]: | exchange type: ISAKMP_XCHG_IDPROT
2006:01:28-18:07:40 (none) pluto[6949]: | flags: none
2006:01:28-18:07:40 (none) pluto[6949]: | message ID: 00 00 00 00
2006:01:28-18:07:40 (none) pluto[6949]: | ***emit ISAKMP Security Association Payload:
2006:01:28-18:07:40 (none) pluto[6949]: | next payload type: ISAKMP_NEXT_NONE
2006:01:28-18:07:40 (none) pluto[6949]: | DOI: ISAKMP_DOI_IPSEC
2006:01:28-18:07:40 (none) pluto[6949]: | ****parse IPsec DOI SIT:
2006:01:28-18:07:40 (none) pluto[6949]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
2006:01:28-18:07:40 (none) pluto[6949]: | ****parse ISAKMP Proposal Payload:
2006:01:28-18:07:40 (none) pluto[6949]: | next payload type: ISAKMP_NEXT_NONE
2006:01:28-18:07:40 (none) pluto[6949]: | length: 188
2006:01:28-18:07:40 (none) pluto[6949]: | proposal number: 1
2006:01:28-18:07:40 (none) pluto[6949]: | protocol ID: PROTO_ISAKMP
2006:01:28-18:07:40 (none) pluto[6949]: | SPI size: 0
2006:01:28-18:07:40 (none) pluto[6949]: | number of transforms: 5
2006:01:28-18:07:40 (none) pluto[6949]: | *****parse ISAKMP Transform Payload (ISAKMP):
2006:01:28-18:07:40 (none) pluto[6949]: | next payload type: ISAKMP_NEXT_T
2006:01:28-18:07:40 (none) pluto[6949]: | length: 36
2006:01:28-18:07:40 (none) pluto[6949]: | transform number: 1
2006:01:28-18:07:40 (none) pluto[6949]: | transform ID: KEY_IKE
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 5
2006:01:28-18:07:40 (none) pluto[6949]: | [5 is OAKLEY_3DES_CBC]
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_HASH_ALGORITHM
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 2
2006:01:28-18:07:40 (none) pluto[6949]: | [2 is OAKLEY_SHA]
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_GROUP_DESCRIPTION
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 14
2006:01:28-18:07:40 (none) pluto[6949]: | [14 is OAKLEY_GROUP_MODP2048]
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_AUTHENTICATION_METHOD
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 3
2006:01:28-18:07:40 (none) pluto[6949]: | [3 is OAKLEY_RSA_SIG]
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_LIFE_TYPE
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 1
2006:01:28-18:07:40 (none) pluto[6949]: | [1 is OAKLEY_LIFE_SECONDS]
2006:01:28-18:07:40 (none) pluto[6949]: | ******parse ISAKMP Oakley attribute:
2006:01:28-18:07:40 (none) pluto[6949]: | af+type: OAKLEY_LIFE_DURATION (variable length)
2006:01:28-18:07:40 (none) pluto[6949]: | length/value: 4
2006:01:28-18:07:40 (none) pluto[6949]: | long duration: 28800
2006:01:28-18:07:40 (none) pluto[6949]: | Oakley Transform 1 accepted
2006:01:28-18:07:40 (none) pluto[6949]: | ****emit IPsec DOI SIT:
2006:01:28-18:07:40 (none) pluto[6949]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
2006:01:28-18:07:40 (none) pluto[6949]: | ****emit ISAKMP Proposal Payload:
2006:01:28-18:07:40 (none) pluto[6949]: | next payload type: ISAKMP_NEXT_NONE
2006:01:28-18:07:40 (none) pluto[6949]: | proposal number: 1
2006:01:28-18:07:40 (none) pluto[6949]: | protocol ID: PROTO_ISAKMP
2006:01:28-18:07:40 (none) pluto[6949]: | SPI size: 0
2006:01:28-18:07:40 (none) pluto[6949]: | number of transforms: 1
2006:01:28-18:07:40 (none) pluto[6949]: | *****emit ISAKMP Transform Payload (ISAKMP):
2006:01:28-18:07:40 (none) pluto[6949]: | next payload type: ISAKMP_NEXT_NONE
2006:01:28-18:07:40 (none) pluto[6949]: | transform number: 1
2006:01:28-18:07:40 (none) pluto[6949]: | transform ID: KEY_IKE
2006:01:28-18:07:40 (none) pluto[6949]: | emitting 28 raw bytes of attributes into ISAKMP Transform Payload (ISAKMP)
2006:01:28-18:07:40 (none) pluto[6949]: | attributes 80 01 00 05 80 02 00 02 80 04 00 0e 80 03 00 03
2006:01:28-18:07:40 (none) pluto[6949]: | 80 0b 00 01 00 0c 00 04 00 00 70 80
2006:01:28-18:07:40 (none) pluto[6949]: | emitting length of ISAKMP Transform Payload (ISAKMP): 36
2006:01:28-18:07:40 (none) pluto[6949]: | emitting length of ISAKMP Proposal Payload: 44
2006:01:28-18:07:40 (none) pluto[6949]: | emitting length of ISAKMP Security Association Payload: 56
2006:01:28-18:07:40 (none) pluto[6949]: | out_vendorid(): sending [draft-ietf-ipsec-nat-t-ike-02_n]
2006:01:28-18:07:40 (none) pluto[6949]: | ***emit ISAKMP Vendor ID Payload:
2006:01:28-18:07:40 (none) pluto[6949]: | next payload type: ISAKMP_NEXT_NONE
2006:01:28-18:07:40 (none) pluto[6949]: | emitting 16 raw bytes of V_ID into ISAKMP Vendor ID Payload
2006:01:28-18:07:40 (none) pluto[6949]: | V_ID 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 7b 1f
2006:01:28-18:07:40 (none) pluto[6949]: | emitting length of ISAKMP Vendor ID Payload: 20
2006:01:28-18:07:40 (none) pluto[6949]: | emitting length of ISAKMP Message: 104
2006:01:28-18:07:40 (none) pluto[6949]: "S_RW_1"[3] 192.168.0.252 #13: transition from state (null) to state STATE_MAIN_R1
2006:01:28-18:07:40 (none) pluto[6949]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #13
2006:01:28-18:07:40 (none) pluto[6949]: | next event EVENT_RETRANSMIT in 10 seconds for #13
2006:01:28-18:07:42 (none) pluto[6949]: |
2006:01:28-18:07:42 (none) pluto[6949]: | *received 312 bytes from 192.168.0.252:500 on eth0
2006:01:28-18:07:42 (none) pluto[6949]: | **parse ISAKMP Message:
2006:01:28-18:07:42 (none) pluto[6949]: | initiator cookie:
2006:01:28-18:07:42 (none) pluto[6949]: | 59 51 88 47 af 9f a7 3b
2006:01:28-18:07:42 (none) pluto[6949]: | responder cookie:
2006:01:28-18:07:42 (none) pluto[6949]: | 00 00 00 00 00 00 00 00
2006:01:28-18:07:42 (none) pluto[6949]: | next payload type: ISAKMP_NEXT_SA
2006:01:28-18:07:42 (none) pluto[6949]: | ISAKMP version: ISAKMP Version 1.0
2006:01:28-18:07:42 (none) pluto[6949]: | exchange type: ISAKMP_XCHG_IDPROT
2006:01:28-18:07:42 (none) pluto[6949]: | flags: none
2006:01:28-18:07:42 (none) pluto[6949]: | message ID: 00 00 00 00
2006:01:28-18:07:42 (none) pluto[6949]: | length: 312
2006:01:28-18:07:42 (none) pluto[6949]: | The xchg type is ISAKMP_XCHG_IDPROT (2)
2006:01:28-18:07:42 (none) pluto[6949]: | ***parse ISAKMP Security Association Payload:
2006:01:28-18:07:42 (none) pluto[6949]: | next payload type: ISAKMP_NEXT_VID
2006:01:28-18:07:42 (none) pluto[6949]: | length: 200
2006:01:28-18:07:42 (none) pluto[6949]: | DOI: ISAKMP_DOI_IPSEC
... rinse, repeat until client gives up ...
====== SNIP =======
This thread was automatically locked due to age.