I'm trying to setup IPSec VPNs to an ASL 6 from our remote office (home) workers - X.509 certificate based.
I have the VPNs working when the client (XP or Win2K) PC is connected directly to the internet;
however, when a DLink router is placed in between the PC and cable or DSL modem, the VPN won't setup.
IPSec passthrough is enabled and I can view communications in both directions when IKE debugging is turned on.
The problem seems to be an 'erouted' issue with the remote end - see the enclosed output with IKE debugging turned on.
Right after the route is setup, the client end issues a Delete SA.
Any suggestions on how to resolve this issue would be appreciated.
Thanks,
Mike
2006:04:25-13:58:00 (none) pluto[23801]: | *received 252 bytes from w.x.y.z:500 on eth2 (port=500)
2006:04:25-13:58:00 (none) pluto[23801]: | **parse ISAKMP Message:
2006:04:25-13:58:00 (none) pluto[23801]: | initiator cookie:
2006:04:25-13:58:00 (none) pluto[23801]: | 32 1f dd 67 0e 88 f5 34
2006:04:25-13:58:00 (none) pluto[23801]: | responder cookie:
2006:04:25-13:58:00 (none) pluto[23801]: | 00 00 00 00 00 00 00 00
2006:04:25-13:58:00 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_SA
2006:04:25-13:58:00 (none) pluto[23801]: | ISAKMP version: ISAKMP Version 1.0
2006:04:25-13:58:00 (none) pluto[23801]: | exchange type: ISAKMP_XCHG_IDPROT
2006:04:25-13:58:00 (none) pluto[23801]: | flags: none
2006:04:25-13:58:00 (none) pluto[23801]: | message ID: 00 00 00 00
2006:04:25-13:58:00 (none) pluto[23801]: | length: 252
2006:04:25-13:58:00 (none) pluto[23801]: | processing packet with exchange type=ISAKMP_XCHG_IDPROT (2)
2006:04:25-13:58:00 (none) pluto[23801]: | ***parse ISAKMP Security Association Payload:
2006:04:25-13:58:00 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_VID
2006:04:25-13:58:00 (none) pluto[23801]: | length: 200
2006:04:25-13:58:00 (none) pluto[23801]: | DOI: ISAKMP_DOI_IPSEC
2006:04:25-13:58:00 (none) pluto[23801]: | ***parse ISAKMP Vendor ID Payload:
2006:04:25-13:58:00 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_NONE
2006:04:25-13:58:00 (none) pluto[23801]: | length: 24
2006:04:25-13:58:00 (none) pluto[23801]: packet from w.x.y.z:500: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000002]
2006:04:25-13:58:00 (none) pluto[23801]: | ****parse IPsec DOI SIT:
2006:04:25-13:58:00 (none) pluto[23801]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
2006:04:25-13:58:00 (none) pluto[23801]: | ****parse ISAKMP Proposal Payload:
2006:04:25-13:58:00 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_NONE
2006:04:25-13:58:00 (none) pluto[23801]: | length: 188
2006:04:25-13:58:00 (none) pluto[23801]: | proposal number: 1
2006:04:25-13:58:00 (none) pluto[23801]: | protocol ID: PROTO_ISAKMP
2006:04:25-13:58:00 (none) pluto[23801]: | SPI size: 0
2006:04:25-13:58:00 (none) pluto[23801]: | number of transforms: 5
2006:04:25-13:58:00 (none) pluto[23801]: | *****parse ISAKMP Transform Payload (ISAKMP):
2006:04:25-13:58:00 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_T
2006:04:25-13:58:00 (none) pluto[23801]: | length: 36
2006:04:25-13:58:00 (none) pluto[23801]: | transform number: 1
2006:04:25-13:58:00 (none) pluto[23801]: | transform ID: KEY_IKE
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 5
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_HASH_ALGORITHM
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 2
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_GROUP_DESCRIPTION
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 14
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_AUTHENTICATION_METHOD
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 3
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_LIFE_TYPE
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 1
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_LIFE_DURATION (variable length)
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 4
2006:04:25-13:58:00 (none) pluto[23801]: | *****parse ISAKMP Transform Payload (ISAKMP):
2006:04:25-13:58:00 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_T
2006:04:25-13:58:00 (none) pluto[23801]: | length: 36
2006:04:25-13:58:00 (none) pluto[23801]: | transform number: 2
2006:04:25-13:58:00 (none) pluto[23801]: | transform ID: KEY_IKE
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 5
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_HASH_ALGORITHM
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 2
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_GROUP_DESCRIPTION
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 2
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_AUTHENTICATION_METHOD
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 3
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_LIFE_TYPE
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 1
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_LIFE_DURATION (variable length)
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 4
2006:04:25-13:58:00 (none) pluto[23801]: | *****parse ISAKMP Transform Payload (ISAKMP):
2006:04:25-13:58:00 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_T
2006:04:25-13:58:00 (none) pluto[23801]: | length: 36
2006:04:25-13:58:00 (none) pluto[23801]: | transform number: 3
2006:04:25-13:58:00 (none) pluto[23801]: | transform ID: KEY_IKE
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 5
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_HASH_ALGORITHM
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 1
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_GROUP_DESCRIPTION
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 2
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_AUTHENTICATION_METHOD
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 3
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_LIFE_TYPE
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 1
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_LIFE_DURATION (variable length)
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 4
2006:04:25-13:58:00 (none) pluto[23801]: | *****parse ISAKMP Transform Payload (ISAKMP):
2006:04:25-13:58:00 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_T
2006:04:25-13:58:00 (none) pluto[23801]: | length: 36
2006:04:25-13:58:00 (none) pluto[23801]: | transform number: 4
2006:04:25-13:58:00 (none) pluto[23801]: | transform ID: KEY_IKE
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 1
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_HASH_ALGORITHM
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 2
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_GROUP_DESCRIPTION
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 1
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_AUTHENTICATION_METHOD
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 3
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_LIFE_TYPE
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 1
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_LIFE_DURATION (variable length)
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 4
2006:04:25-13:58:00 (none) pluto[23801]: | *****parse ISAKMP Transform Payload (ISAKMP):
2006:04:25-13:58:00 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_NONE
2006:04:25-13:58:00 (none) pluto[23801]: | length: 36
2006:04:25-13:58:00 (none) pluto[23801]: | transform number: 5
2006:04:25-13:58:00 (none) pluto[23801]: | transform ID: KEY_IKE
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 1
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_HASH_ALGORITHM
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 1
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_GROUP_DESCRIPTION
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 1
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_AUTHENTICATION_METHOD
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 3
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_LIFE_TYPE
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 1
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_LIFE_DURATION (variable length)
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 4
2006:04:25-13:58:00 (none) pluto[23801]: | alg_info_addref() alg_info->ref_cnt=7
2006:04:25-13:58:00 (none) pluto[23801]: | alg_info_addref() alg_info->ref_cnt=7
2006:04:25-13:58:00 (none) pluto[23801]: | alg_info_addref() alg_info->ref_cnt=8
2006:04:25-13:58:00 (none) pluto[23801]: | alg_info_addref() alg_info->ref_cnt=8
2006:04:25-13:58:00 (none) pluto[23801]: | instantiated "S_L2TP_using_certs_1" for w.x.y.z
2006:04:25-13:58:00 (none) pluto[23801]: | creating state object #9 at 0x8118f90
2006:04:25-13:58:00 (none) pluto[23801]: | processing connection S_L2TP_using_certs_1[5] w.x.y.z
2006:04:25-13:58:00 (none) pluto[23801]: | ICOOKIE: 32 1f dd 67 0e 88 f5 34
2006:04:25-13:58:00 (none) pluto[23801]: | RCOOKIE: 6b d6 fb 4a 8c 54 47 e1
2006:04:25-13:58:00 (none) pluto[23801]: | peer: d1 52 0e c2
2006:04:25-13:58:00 (none) pluto[23801]: | state hash entry 11
2006:04:25-13:58:00 (none) pluto[23801]: | inserting event EVENT_SO_DISCARD, timeout in 0 seconds for #9
2006:04:25-13:58:00 (none) pluto[23801]: "S_L2TP_using_certs_1"[5] w.x.y.z #9: responding to Main Mode from unknown peer w.x.y.z
2006:04:25-13:58:00 (none) pluto[23801]: | **emit ISAKMP Message:
2006:04:25-13:58:00 (none) pluto[23801]: | initiator cookie:
2006:04:25-13:58:00 (none) pluto[23801]: | 32 1f dd 67 0e 88 f5 34
2006:04:25-13:58:00 (none) pluto[23801]: | responder cookie:
2006:04:25-13:58:00 (none) pluto[23801]: | 6b d6 fb 4a 8c 54 47 e1
2006:04:25-13:58:00 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_SA
2006:04:25-13:58:00 (none) pluto[23801]: | ISAKMP version: ISAKMP Version 1.0
2006:04:25-13:58:00 (none) pluto[23801]: | exchange type: ISAKMP_XCHG_IDPROT
2006:04:25-13:58:00 (none) pluto[23801]: | flags: none
2006:04:25-13:58:00 (none) pluto[23801]: | message ID: 00 00 00 00
2006:04:25-13:58:00 (none) pluto[23801]: | ***emit ISAKMP Security Association Payload:
2006:04:25-13:58:00 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_VID
2006:04:25-13:58:00 (none) pluto[23801]: | DOI: ISAKMP_DOI_IPSEC
2006:04:25-13:58:00 (none) pluto[23801]: | ****parse IPsec DOI SIT:
2006:04:25-13:58:00 (none) pluto[23801]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
2006:04:25-13:58:00 (none) pluto[23801]: | ****parse ISAKMP Proposal Payload:
2006:04:25-13:58:00 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_NONE
2006:04:25-13:58:00 (none) pluto[23801]: | length: 188
2006:04:25-13:58:00 (none) pluto[23801]: | proposal number: 1
2006:04:25-13:58:00 (none) pluto[23801]: | protocol ID: PROTO_ISAKMP
2006:04:25-13:58:00 (none) pluto[23801]: | SPI size: 0
2006:04:25-13:58:00 (none) pluto[23801]: | number of transforms: 5
2006:04:25-13:58:00 (none) pluto[23801]: | *****parse ISAKMP Transform Payload (ISAKMP):
2006:04:25-13:58:00 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_T
2006:04:25-13:58:00 (none) pluto[23801]: | length: 36
2006:04:25-13:58:00 (none) pluto[23801]: | transform number: 1
2006:04:25-13:58:00 (none) pluto[23801]: | transform ID: KEY_IKE
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_ENCRYPTION_ALGORITHM
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 5
2006:04:25-13:58:00 (none) pluto[23801]: | [5 is OAKLEY_3DES_CBC]
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_HASH_ALGORITHM
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 2
2006:04:25-13:58:00 (none) pluto[23801]: | [2 is OAKLEY_SHA1]
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_GROUP_DESCRIPTION
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 14
2006:04:25-13:58:00 (none) pluto[23801]: | [14 is OAKLEY_GROUP_MODP2048]
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_AUTHENTICATION_METHOD
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 3
2006:04:25-13:58:00 (none) pluto[23801]: | [3 is OAKLEY_RSA_SIG]
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_LIFE_TYPE
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 1
2006:04:25-13:58:00 (none) pluto[23801]: | [1 is OAKLEY_LIFE_SECONDS]
2006:04:25-13:58:00 (none) pluto[23801]: | ******parse ISAKMP Oakley attribute:
2006:04:25-13:58:00 (none) pluto[23801]: | af+type: OAKLEY_LIFE_DURATION (variable length)
2006:04:25-13:58:00 (none) pluto[23801]: | length/value: 4
2006:04:25-13:58:00 (none) pluto[23801]: | long duration: 28800
2006:04:25-13:58:00 (none) pluto[23801]: | Oakley Transform 1 accepted
2006:04:25-13:58:00 (none) pluto[23801]: | ****emit IPsec DOI SIT:
2006:04:25-13:58:00 (none) pluto[23801]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
2006:04:25-13:58:00 (none) pluto[23801]: | ****emit ISAKMP Proposal Payload:
2006:04:25-13:58:00 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_NONE
2006:04:25-13:58:00 (none) pluto[23801]: | proposal number: 1
2006:04:25-13:58:00 (none) pluto[23801]: | protocol ID: PROTO_ISAKMP
2006:04:25-13:58:00 (none) pluto[23801]: | SPI size: 0
2006:04:25-13:58:00 (none) pluto[23801]: | number of transforms: 1
2006:04:25-13:58:00 (none) pluto[23801]: | *****emit ISAKMP Transform Payload (ISAKMP):
2006:04:25-13:58:00 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_NONE
2006:04:25-13:58:00 (none) pluto[23801]: | transform number: 1
2006:04:25-13:58:00 (none) pluto[23801]: | transform ID: KEY_IKE
2006:04:25-13:58:00 (none) pluto[23801]: | emitting 28 raw bytes of attributes into ISAKMP Transform Payload (ISAKMP)
2006:04:25-13:58:00 (none) pluto[23801]: | attributes 80 01 00 05 80 02 00 02 80 04 00 0e 80 03 00 03
2006:04:25-13:58:00 (none) pluto[23801]: | 80 0b 00 01 00 0c 00 04 00 00 70 80
2006:04:25-13:58:00 (none) pluto[23801]: | emitting length of ISAKMP Transform Payload (ISAKMP): 36
2006:04:25-13:58:00 (none) pluto[23801]: | emitting length of ISAKMP Proposal Payload: 44
2006:04:25-13:58:00 (none) pluto[23801]: | emitting length of ISAKMP Security Association Payload: 56
2006:04:25-13:58:00 (none) pluto[23801]: | ***emit ISAKMP Vendor ID Payload:
2006:04:25-13:58:00 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_VID
2006:04:25-13:58:00 (none) pluto[23801]: | emitting 12 raw bytes of Vendor ID into ISAKMP Vendor ID Payload
2006:04:25-13:58:00 (none) pluto[23801]: | Vendor ID 4f 45 5b 70 75 41 7d 59 59 58 7e 46
2006:04:25-13:58:00 (none) pluto[23801]: | emitting length of ISAKMP Vendor ID Payload: 16
2006:04:25-13:58:00 (none) pluto[23801]: | ***emit ISAKMP Vendor ID Payload:
2006:04:25-13:58:00 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_NONE
2006:04:25-13:58:00 (none) pluto[23801]: | emitting 16 raw bytes of DPP Vendor ID into ISAKMP Vendor ID Payload
2006:04:25-13:58:00 (none) pluto[23801]: | DPP Vendor ID af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 01 00
2006:04:25-13:58:00 (none) pluto[23801]: | emitting length of ISAKMP Vendor ID Payload: 20
2006:04:25-13:58:00 (none) pluto[23801]: | emitting length of ISAKMP Message: 120
2006:04:25-13:58:00 (none) pluto[23801]: | complete state transition with STF_OK
2006:04:25-13:58:00 (none) pluto[23801]: "S_L2TP_using_certs_1"[5] w.x.y.z #9: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1
2006:04:25-13:58:00 (none) pluto[23801]: | sending reply packet to w.x.y.z:500 (from port=500)
2006:04:25-13:58:00 (none) pluto[23801]: | sending 120 bytes for STATE_MAIN_R0 through eth2:500 to w.x.y.z:500:
2006:04:25-13:58:00 (none) pluto[23801]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #9
2006:04:25-13:58:00 (none) pluto[23801]: "S_L2TP_using_certs_1"[5] w.x.y.z #9: STATE_MAIN_R1: sent MR1, expecting MI2
2006:04:25-13:58:00 (none) pluto[23801]: | modecfg pull: noquirk policy[:P]ush not-client
2006:04:25-13:58:00 (none) pluto[23801]: | phase 1 is done, looking for phase 1 to unpend
2006:04:25-13:58:00 (none) pluto[23801]: | next event EVENT_RETRANSMIT in 10 seconds for #9
2006:04:25-13:58:01 (none) pluto[23801]: |
2006:04:25-13:58:01 (none) pluto[23801]: | *received 312 bytes from w.x.y.z:500 on eth2 (port=500)
2006:04:25-13:58:01 (none) pluto[23801]: | **parse ISAKMP Message:
2006:04:25-13:58:01 (none) pluto[23801]: | initiator cookie:
2006:04:25-13:58:01 (none) pluto[23801]: | 32 1f dd 67 0e 88 f5 34
2006:04:25-13:58:01 (none) pluto[23801]: | responder cookie:
2006:04:25-13:58:01 (none) pluto[23801]: | 6b d6 fb 4a 8c 54 47 e1
2006:04:25-13:58:01 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_KE
2006:04:25-13:58:01 (none) pluto[23801]: | ISAKMP version: ISAKMP Version 1.0
2006:04:25-13:58:01 (none) pluto[23801]: | exchange type: ISAKMP_XCHG_IDPROT
2006:04:25-13:58:01 (none) pluto[23801]: | flags: none
2006:04:25-13:58:01 (none) pluto[23801]: | message ID: 00 00 00 00
2006:04:25-13:58:01 (none) pluto[23801]: | length: 312
2006:04:25-13:58:01 (none) pluto[23801]: | processing packet with exchange type=ISAKMP_XCHG_IDPROT (2)
2006:04:25-13:58:01 (none) pluto[23801]: | ICOOKIE: 32 1f dd 67 0e 88 f5 34
2006:04:25-13:58:01 (none) pluto[23801]: | RCOOKIE: 6b d6 fb 4a 8c 54 47 e1
2006:04:25-13:58:01 (none) pluto[23801]: | peer: d1 52 0e c2
2006:04:25-13:58:01 (none) pluto[23801]: | state hash entry 11
2006:04:25-13:58:01 (none) pluto[23801]: | peer and cookies match on #9, provided msgid 00000000 vs 00000000
2006:04:25-13:58:01 (none) pluto[23801]: | state object #9 found, in STATE_MAIN_R1
2006:04:25-13:58:01 (none) pluto[23801]: | processing connection S_L2TP_using_certs_1[5] w.x.y.z
2006:04:25-13:58:01 (none) pluto[23801]: | ***parse ISAKMP Key Exchange Payload:
2006:04:25-13:58:01 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_NONCE
2006:04:25-13:58:01 (none) pluto[23801]: | length: 260
2006:04:25-13:58:01 (none) pluto[23801]: | ***parse ISAKMP Nonce Payload:
2006:04:25-13:58:01 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_NONE
2006:04:25-13:58:01 (none) pluto[23801]: | length: 24
2006:04:25-13:58:01 (none) pluto[23801]: | **emit ISAKMP Message:
2006:04:25-13:58:01 (none) pluto[23801]: | initiator cookie:
2006:04:25-13:58:01 (none) pluto[23801]: | 32 1f dd 67 0e 88 f5 34
2006:04:25-13:58:01 (none) pluto[23801]: | responder cookie:
2006:04:25-13:58:01 (none) pluto[23801]: | 6b d6 fb 4a 8c 54 47 e1
2006:04:25-13:58:01 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_KE
2006:04:25-13:58:01 (none) pluto[23801]: | ISAKMP version: ISAKMP Version 1.0
2006:04:25-13:58:01 (none) pluto[23801]: | exchange type: ISAKMP_XCHG_IDPROT
2006:04:25-13:58:01 (none) pluto[23801]: | flags: none
2006:04:25-13:58:01 (none) pluto[23801]: | message ID: 00 00 00 00
2006:04:25-13:58:01 (none) pluto[23801]: | DH public value received:
Content removed
2006:04:25-13:58:01 (none) pluto[23801]: | helper -1 doing build_kenonce op id: 0
2006:04:25-13:58:01 (none) pluto[23801]: | Local DH secret:
2006:04:25-13:58:01 (none) pluto[23801]: | 18 53 6a aa 32 59 c6 d5 29 e3 7a 50 6b ff c5 c5
2006:04:25-13:58:01 (none) pluto[23801]: | 01 b1 b5 94 87 ac c9 07 23 41 78 9c fc 99 13 2d
2006:04:25-13:58:01 (none) pluto[23801]: | Public DH value sent:
Content removed
2006:04:25-13:58:01 (none) pluto[23801]: | Generated nonce:
2006:04:25-13:58:01 (none) pluto[23801]: | 14 d4 d5 ec cb c5 87 ed 3a 0e ea d2 06 c0 0c f1
2006:04:25-13:58:01 (none) pluto[23801]: | processing connection S_L2TP_using_certs_1[5] w.x.y.z
2006:04:25-13:58:01 (none) pluto[23801]: | ***emit ISAKMP Key Exchange Payload:
2006:04:25-13:58:01 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_NONCE
2006:04:25-13:58:01 (none) pluto[23801]: | emitting 256 raw bytes of keyex value into ISAKMP Key Exchange Payload
2006:04:25-13:58:01 (none) pluto[23801]: | keyex value
Content removed
2006:04:25-13:58:01 (none) pluto[23801]: | emitting length of ISAKMP Key Exchange Payload: 260
2006:04:25-13:58:01 (none) pluto[23801]: | ***emit ISAKMP Nonce Payload:
2006:04:25-13:58:01 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_NONE
2006:04:25-13:58:01 (none) pluto[23801]: | emitting 16 raw bytes of Nr into ISAKMP Nonce Payload
2006:04:25-13:58:01 (none) pluto[23801]: | Nr 14 d4 d5 ec cb c5 87 ed 3a 0e ea d2 06 c0 0c f1
2006:04:25-13:58:01 (none) pluto[23801]: | emitting length of ISAKMP Nonce Payload: 20
2006:04:25-13:58:01 (none) pluto[23801]: | emitting length of ISAKMP Message: 308
2006:04:25-13:58:01 (none) pluto[23801]: | started looking for secret for C=ca, ST=ON, L=Aurora, O=Canada Law Book, OU=IT, CN=CLB, E=itsupport@canadalawbook.ca->C=*, ST=*, L=*, O=*, OU=*, CN=*, E=* of kind PPK_PSK
2006:04:25-13:58:01 (none) pluto[23801]: | actually looking for secret for C=ca, ST=ON, L=Aurora, O=Canada Law Book, OU=IT, CN=CLB, E=itsupport@canadalawbook.ca->C=*, ST=*, L=*, O=*, OU=*, CN=*, E=* of kind PPK_PSK
2006:04:25-13:58:01 (none) pluto[23801]: | concluding with best_match=0 best=(nil) (lineno=-1)
2006:04:25-13:58:01 (none) pluto[23801]: | calc_dh_shared(): time elapsed (OAKLEY_GROUP_MODP2048): 29793 usec
2006:04:25-13:58:01 (none) pluto[23801]: | DH shared secret:
Content removed
2006:04:25-13:58:01 (none) pluto[23801]: | skeyid inputs (digi+NI+NR+shared) hasher: oakley_sha
2006:04:25-13:58:01 (none) pluto[23801]: | shared:
Content removed
2006:04:25-13:58:01 (none) pluto[23801]: | ni: 69 80 92 56 3a e0 0b 6f 4a 9e 36 17 84 0a 0b 58
2006:04:25-13:58:01 (none) pluto[23801]: | c5 d4 e7 38
2006:04:25-13:58:01 (none) pluto[23801]: | nr: 14 d4 d5 ec cb c5 87 ed 3a 0e ea d2 06 c0 0c f1
2006:04:25-13:58:01 (none) pluto[23801]: | keyid: dd 8f 70 cf f6 a4 02 bf d0 5d cb 53 65 c4 0a 32
2006:04:25-13:58:01 (none) pluto[23801]: | 7b 8e 9c 5b
2006:04:25-13:58:01 (none) pluto[23801]: | DH_i:
Content removed
2006:04:25-13:58:01 (none) pluto[23801]: | DH_r:
Content removed
2006:04:25-13:58:01 (none) pluto[23801]: | Skeyid: dd 8f 70 cf f6 a4 02 bf d0 5d cb 53 65 c4 0a 32
2006:04:25-13:58:01 (none) pluto[23801]: | 7b 8e 9c 5b
2006:04:25-13:58:01 (none) pluto[23801]: | Skeyid_d: d5 86 ba 87 f2 9f 0a b8 d1 d1 50 95 db be df 21
2006:04:25-13:58:01 (none) pluto[23801]: | eb bb 4d f7
2006:04:25-13:58:01 (none) pluto[23801]: | Skeyid_a: fe e7 02 08 0b b7 0e e8 d9 eb ec ff 54 1d 5e c7
2006:04:25-13:58:01 (none) pluto[23801]: | e7 1f fb af
2006:04:25-13:58:01 (none) pluto[23801]: | Skeyid_e: 0f 8e 39 0a 58 3f b5 21 25 bf 99 34 86 d6 9c c3
2006:04:25-13:58:01 (none) pluto[23801]: | d6 da f2 c4
2006:04:25-13:58:01 (none) pluto[23801]: | enc key: c1 c1 4c dc ad a4 bb d4 49 6a d9 ef 38 42 7a 70
2006:04:25-13:58:01 (none) pluto[23801]: | 02 66 e1 0a 3a 2f d7 51
2006:04:25-13:58:01 (none) pluto[23801]: | IV: fa c8 da b1 d5 35 9e 87 13 78 87 ac e4 fe dc a3
2006:04:25-13:58:01 (none) pluto[23801]: | 29 c0 db 86
2006:04:25-13:58:01 (none) pluto[23801]: | complete state transition with STF_OK
2006:04:25-13:58:01 (none) pluto[23801]: "S_L2TP_using_certs_1"[5] w.x.y.z #9: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2
2006:04:25-13:58:01 (none) pluto[23801]: | sending reply packet to w.x.y.z:500 (from port=500)
2006:04:25-13:58:01 (none) pluto[23801]: | sending 308 bytes for STATE_MAIN_R1 through eth2:500 to w.x.y.z:500:
2006:04:25-13:58:01 (none) pluto[23801]: | inserting event EVENT_RETRANSMIT, timeout in 10 seconds for #9
2006:04:25-13:58:01 (none) pluto[23801]: "S_L2TP_using_certs_1"[5] w.x.y.z #9: STATE_MAIN_R2: sent MR2, expecting MI3
2006:04:25-13:58:01 (none) pluto[23801]: | modecfg pull: noquirk policy[:P]ush not-client
2006:04:25-13:58:01 (none) pluto[23801]: | phase 1 is done, looking for phase 1 to unpend
2006:04:25-13:58:01 (none) pluto[23801]: | complete state transition with STF_INLINE
2006:04:25-13:58:01 (none) pluto[23801]: | next event EVENT_RETRANSMIT in 10 seconds for #9
2006:04:25-13:58:01 (none) pluto[23801]: |
2006:04:25-13:58:01 (none) pluto[23801]: | *received 1556 bytes from w.x.y.z:500 on eth2 (port=500)
2006:04:25-13:58:01 (none) pluto[23801]: | **parse ISAKMP Message:
2006:04:25-13:58:01 (none) pluto[23801]: | initiator cookie:
2006:04:25-13:58:01 (none) pluto[23801]: | 32 1f dd 67 0e 88 f5 34
2006:04:25-13:58:01 (none) pluto[23801]: | responder cookie:
2006:04:25-13:58:01 (none) pluto[23801]: | 6b d6 fb 4a 8c 54 47 e1
2006:04:25-13:58:01 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_ID
2006:04:25-13:58:01 (none) pluto[23801]: | ISAKMP version: ISAKMP Version 1.0
2006:04:25-13:58:01 (none) pluto[23801]: | exchange type: ISAKMP_XCHG_IDPROT
2006:04:25-13:58:01 (none) pluto[23801]: | flags: ISAKMP_FLAG_ENCRYPTION
2006:04:25-13:58:01 (none) pluto[23801]: | message ID: 00 00 00 00
2006:04:25-13:58:01 (none) pluto[23801]: | length: 1556
2006:04:25-13:58:01 (none) pluto[23801]: | processing packet with exchange type=ISAKMP_XCHG_IDPROT (2)
2006:04:25-13:58:01 (none) pluto[23801]: | ICOOKIE: 32 1f dd 67 0e 88 f5 34
2006:04:25-13:58:01 (none) pluto[23801]: | RCOOKIE: 6b d6 fb 4a 8c 54 47 e1
2006:04:25-13:58:01 (none) pluto[23801]: | peer: d1 52 0e c2
2006:04:25-13:58:01 (none) pluto[23801]: | state hash entry 11
2006:04:25-13:58:01 (none) pluto[23801]: | peer and cookies match on #9, provided msgid 00000000 vs 00000000
2006:04:25-13:58:01 (none) pluto[23801]: | state object #9 found, in STATE_MAIN_R2
2006:04:25-13:58:01 (none) pluto[23801]: | processing connection S_L2TP_using_certs_1[5] w.x.y.z
2006:04:25-13:58:01 (none) pluto[23801]: | received encrypted packet from w.x.y.z:500
2006:04:25-13:58:01 (none) pluto[23801]: | decrypting 1528 bytes using algorithm OAKLEY_3DES_CBC
2006:04:25-13:58:01 (none) pluto[23801]: | decrypted:
Content removed
2006:04:25-13:58:01 (none) pluto[23801]: | next IV: 0f e5 bc 5f c7 c8 4a f5
2006:04:25-13:58:01 (none) pluto[23801]: | ***parse ISAKMP Identification Payload:
2006:04:25-13:58:01 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_CERT
2006:04:25-13:58:01 (none) pluto[23801]: | length: 141
2006:04:25-13:58:01 (none) pluto[23801]: | ID type: ID_DER_ASN1_DN
2006:04:25-13:58:01 (none) pluto[23801]: | DOI specific A: 0
2006:04:25-13:58:01 (none) pluto[23801]: | DOI specific B: 0
2006:04:25-13:58:01 (none) pluto[23801]: | ***parse ISAKMP Certificate Payload:
2006:04:25-13:58:01 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_SIG
2006:04:25-13:58:01 (none) pluto[23801]: | length: 1038
2006:04:25-13:58:01 (none) pluto[23801]: | cert encoding: CERT_X509_SIGNATURE
2006:04:25-13:58:01 (none) pluto[23801]: | ***parse ISAKMP Signature Payload:
2006:04:25-13:58:01 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_CR
2006:04:25-13:58:01 (none) pluto[23801]: | length: 196
2006:04:25-13:58:01 (none) pluto[23801]: | ***parse ISAKMP Certificate RequestPayload:
2006:04:25-13:58:01 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_NONE
2006:04:25-13:58:01 (none) pluto[23801]: | length: 147
2006:04:25-13:58:01 (none) pluto[23801]: | cert type: CERT_X509_SIGNATURE
2006:04:25-13:58:01 (none) pluto[23801]: | removing 6 bytes of padding
2006:04:25-13:58:01 (none) pluto[23801]: | DER ASN1 DN:
Content removed
2006:04:25-13:58:01 (none) pluto[23801]: "S_L2TP_using_certs_1"[5] w.x.y.z #9: Main mode peer ID is ID_DER_ASN1_DN: 'C=ca, ST=ON, L=NA, O=NA, OU=NA, CN=TESTVPN, E=administrator@canadalawbook.ca'
2006:04:25-13:58:01 (none) pluto[23801]: | L0 - certificate:
2006:04:25-13:58:01 (none) pluto[23801]: | L1 - tbsCertificate:
2006:04:25-13:58:01 (none) pluto[23801]: | L2 - DEFAULT v1:
2006:04:25-13:58:01 (none) pluto[23801]: | L3 - version:
2006:04:25-13:58:01 (none) pluto[23801]: | v3
2006:04:25-13:58:01 (none) pluto[23801]: | L2 - serialNumber:
2006:04:25-13:58:01 (none) pluto[23801]: | L2 - signature:
2006:04:25-13:58:01 (none) pluto[23801]: | L3 - algorithmIdentifier:
2006:04:25-13:58:01 (none) pluto[23801]: | L4 - algorithm:
2006:04:25-13:58:01 (none) pluto[23801]: | 'md5WithRSAEncryption'
2006:04:25-13:58:01 (none) pluto[23801]: | L2 - issuer:
2006:04:25-13:58:01 (none) pluto[23801]: | 'C=ca, ST=ON, L=Aurora, O=Canada Law Book, OU=IT, CN=CLB, E=itsupport@canadalawbook.ca'
2006:04:25-13:58:01 (none) pluto[23801]: | L2 - validity:
2006:04:25-13:58:01 (none) pluto[23801]: | L3 - notBefore:
2006:04:25-13:58:01 (none) pluto[23801]: | L4 - utcTime:
2006:04:25-13:58:01 (none) pluto[23801]: | 'Apr 10 13:44:11 UTC 2006'
2006:04:25-13:58:01 (none) pluto[23801]: | L3 - notAfter:
2006:04:25-13:58:01 (none) pluto[23801]: | L4 - utcTime:
2006:04:25-13:58:01 (none) pluto[23801]: | 'Apr 09 13:44:11 UTC 2010'
2006:04:25-13:58:01 (none) pluto[23801]: | L2 - subject:
2006:04:25-13:58:01 (none) pluto[23801]: | 'C=ca, ST=ON, L=NA, O=NA, OU=NA, CN=TESTVPN, E=administrator@canadalawbook.ca'
2006:04:25-13:58:01 (none) pluto[23801]: | L2 - subjectPublicKeyInfo:
2006:04:25-13:58:01 (none) pluto[23801]: | L3 - algorithm:
2006:04:25-13:58:01 (none) pluto[23801]: | L4 - algorithmIdentifier:
2006:04:25-13:58:01 (none) pluto[23801]: | L5 - algorithm:
2006:04:25-13:58:01 (none) pluto[23801]: | 'rsaEncryption'
2006:04:25-13:58:01 (none) pluto[23801]: | L3 - subjectPublicKey:
2006:04:25-13:58:01 (none) pluto[23801]: | L4 - RSAPublicKey:
2006:04:25-13:58:01 (none) pluto[23801]: | L5 - modulus:
2006:04:25-13:58:01 (none) pluto[23801]: | L5 - publicExponent:
2006:04:25-13:58:01 (none) pluto[23801]: | L2 - optional extensions:
2006:04:25-13:58:01 (none) pluto[23801]: | L3 - extensions:
2006:04:25-13:58:01 (none) pluto[23801]: | L4 - extension:
2006:04:25-13:58:01 (none) pluto[23801]: | L5 - extnID:
2006:04:25-13:58:01 (none) pluto[23801]: | 'subjectKeyIdentifier'
2006:04:25-13:58:01 (none) pluto[23801]: | L5 - critical:
2006:04:25-13:58:01 (none) pluto[23801]: | FALSE
2006:04:25-13:58:01 (none) pluto[23801]: | L5 - extnValue:
2006:04:25-13:58:01 (none) pluto[23801]: | L6 - keyIdentifier:
2006:04:25-13:58:01 (none) pluto[23801]: | L4 - extension:
2006:04:25-13:58:01 (none) pluto[23801]: | L5 - extnID:
2006:04:25-13:58:01 (none) pluto[23801]: | 'authorityKeyIdentifier'
2006:04:25-13:58:01 (none) pluto[23801]: | L5 - critical:
2006:04:25-13:58:01 (none) pluto[23801]: | FALSE
2006:04:25-13:58:01 (none) pluto[23801]: | L5 - extnValue:
2006:04:25-13:58:01 (none) pluto[23801]: | L6 - authorityKeyIdentifier:
2006:04:25-13:58:01 (none) pluto[23801]: | L7 - keyIdentifier:
2006:04:25-13:58:01 (none) pluto[23801]: | L8 - keyIdentifier:
2006:04:25-13:58:01 (none) pluto[23801]: | L7 - authorityCertIssuer:
2006:04:25-13:58:01 (none) pluto[23801]: | L8 - generalNames:
2006:04:25-13:58:01 (none) pluto[23801]: | L9 - generalName:
2006:04:25-13:58:01 (none) pluto[23801]: | L10 - directoryName:
2006:04:25-13:58:01 (none) pluto[23801]: | 'C=ca, ST=ON, L=Aurora, O=Canada Law Book, OU=IT, CN=CLB, E=itsupport@canadalawbook.ca'
2006:04:25-13:58:01 (none) pluto[23801]: | L7 - authorityCertSerialNumber:
2006:04:25-13:58:01 (none) pluto[23801]: | L4 - extension:
2006:04:25-13:58:01 (none) pluto[23801]: | L5 - extnID:
2006:04:25-13:58:01 (none) pluto[23801]: | 'basicConstraints'
2006:04:25-13:58:01 (none) pluto[23801]: | L5 - critical:
2006:04:25-13:58:01 (none) pluto[23801]: | FALSE
2006:04:25-13:58:01 (none) pluto[23801]: | L5 - extnValue:
2006:04:25-13:58:01 (none) pluto[23801]: | L6 - basicConstraints:
2006:04:25-13:58:01 (none) pluto[23801]: | L7 - CA:
2006:04:25-13:58:01 (none) pluto[23801]: | FALSE
2006:04:25-13:58:01 (none) pluto[23801]: | L4 - extension:
2006:04:25-13:58:01 (none) pluto[23801]: | L5 - extnID:
2006:04:25-13:58:01 (none) pluto[23801]: | 'keyUsage'
2006:04:25-13:58:01 (none) pluto[23801]: | L5 - critical:
2006:04:25-13:58:01 (none) pluto[23801]: | FALSE
2006:04:25-13:58:01 (none) pluto[23801]: | L5 - extnValue:
2006:04:25-13:58:01 (none) pluto[23801]: | L4 - extension:
2006:04:25-13:58:01 (none) pluto[23801]: | L5 - extnID:
2006:04:25-13:58:01 (none) pluto[23801]: | 'subjectAltName'
2006:04:25-13:58:01 (none) pluto[23801]: | L5 - critical:
2006:04:25-13:58:01 (none) pluto[23801]: | FALSE
2006:04:25-13:58:01 (none) pluto[23801]: | L5 - extnValue:
2006:04:25-13:58:01 (none) pluto[23801]: | L6 - generalNames: ASN.1 object smaller than 2 octets
2006:04:25-13:58:01 (none) pluto[23801]: | L1 - signatureAlgorithm:
2006:04:25-13:58:01 (none) pluto[23801]: | L2 - algorithmIdentifier:
2006:04:25-13:58:01 (none) pluto[23801]: | L3 - algorithm:
2006:04:25-13:58:01 (none) pluto[23801]: | 'md5WithRSAEncryption'
2006:04:25-13:58:01 (none) pluto[23801]: | L1 - signatureValue:
2006:04:25-13:58:01 (none) pluto[23801]: | signature algorithm: 'md5WithRSAEncryption'
2006:04:25-13:58:01 (none) pluto[23801]: | digest: ac 98 b9 ad 04 a1 96 f5 2a c8 7c 05 b3 fa a1 2c
2006:04:25-13:58:01 (none) pluto[23801]: | decrypted signature:
2006:04:25-13:58:01 (none) pluto[23801]: | 00 00 01 ff ff ff ff ff ff ff ff ff ff ff ff ff
2006:04:25-13:58:01 (none) pluto[23801]: | ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
2006:04:25-13:58:01 (none) pluto[23801]: | ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
2006:04:25-13:58:01 (none) pluto[23801]: | ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
2006:04:25-13:58:01 (none) pluto[23801]: | ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
2006:04:25-13:58:01 (none) pluto[23801]: | ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
2006:04:25-13:58:01 (none) pluto[23801]: | ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
2006:04:25-13:58:01 (none) pluto[23801]: | ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
2006:04:25-13:58:01 (none) pluto[23801]: | ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
2006:04:25-13:58:01 (none) pluto[23801]: | ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 30
2006:04:25-13:58:01 (none) pluto[23801]: | 20 30 0c 06 08 2a 86 48 86 f7 0d 02 05 05 00 04
2006:04:25-13:58:01 (none) pluto[23801]: | 10 ac 98 b9 ad 04 a1 96 f5 2a c8 7c 05 b3 fa a1
2006:04:25-13:58:01 (none) pluto[23801]: | 2c
2006:04:25-13:58:01 (none) pluto[23801]: "S_L2TP_using_certs_1"[5] w.x.y.z #9: no crl from issuer "C=ca, ST=ON, L=Aurora, O=Canada Law Book, OU=IT, CN=CLB, E=itsupport@canadalawbook.ca" found (strict=no)
2006:04:25-13:58:01 (none) pluto[23801]: | signature algorithm: 'md5WithRSAEncryption'
2006:04:25-13:58:01 (none) pluto[23801]: | digest: b2 c5 4e 43 19 d9 7d d2 b9 d4 95 14 bd 40 74 aa
2006:04:25-13:58:01 (none) pluto[23801]: | decrypted signature:
2006:04:25-13:58:01 (none) pluto[23801]: | 00 00 01 ff ff ff ff ff ff ff ff ff ff ff ff ff
2006:04:25-13:58:01 (none) pluto[23801]: | ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
2006:04:25-13:58:01 (none) pluto[23801]: | ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
2006:04:25-13:58:01 (none) pluto[23801]: | ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
2006:04:25-13:58:01 (none) pluto[23801]: | ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
2006:04:25-13:58:01 (none) pluto[23801]: | ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
2006:04:25-13:58:01 (none) pluto[23801]: | ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
2006:04:25-13:58:01 (none) pluto[23801]: | ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
2006:04:25-13:58:01 (none) pluto[23801]: | ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
2006:04:25-13:58:01 (none) pluto[23801]: | ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 30
2006:04:25-13:58:01 (none) pluto[23801]: | 20 30 0c 06 08 2a 86 48 86 f7 0d 02 05 05 00 04
2006:04:25-13:58:01 (none) pluto[23801]: | 10 b2 c5 4e 43 19 d9 7d d2 b9 d4 95 14 bd 40 74
2006:04:25-13:58:01 (none) pluto[23801]: | aa
2006:04:25-13:58:01 (none) pluto[23801]: | reached self-signed root ca
2006:04:25-13:58:01 (none) pluto[23801]: | Public key validated
2006:04:25-13:58:01 (none) pluto[23801]: | CR
Content removed
2006:04:25-13:58:01 (none) pluto[23801]: | requested CA: 'C=ca, ST=ON, L=Aurora, O=Canada Law Book, OU=IT, CN=CLB, E=itsupport@canadalawbook.ca'
2006:04:25-13:58:01 (none) pluto[23801]: | started looking for secret for C=ca, ST=ON, L=Aurora, O=Canada Law Book, OU=IT, CN=CLB, E=itsupport@canadalawbook.ca->C=*, ST=*, L=*, O=*, OU=*, CN=*, E=* of kind PPK_RSA
2006:04:25-13:58:01 (none) pluto[23801]: | searching for certificate PPK_RSA:AwEAAc42b vs PPK_RSA:AwEAAc42b
2006:04:25-13:58:01 (none) pluto[23801]: | started looking for secret for C=ca, ST=ON, L=Aurora, O=Canada Law Book, OU=IT, CN=CLB, E=itsupport@canadalawbook.ca->C=*, ST=*, L=*, O=*, OU=*, CN=*, E=* of kind PPK_RSA
2006:04:25-13:58:01 (none) pluto[23801]: | searching for certificate PPK_RSA:AwEAAc42b vs PPK_RSA:AwEAAc42b
2006:04:25-13:58:01 (none) pluto[23801]: | started looking for secret for C=ca, ST=ON, L=Aurora, O=Canada Law Book, OU=IT, CN=CLB, E=itsupport@canadalawbook.ca->C=*, ST=*, L=*, O=*, OU=*, CN=*, E=* of kind PPK_RSA
2006:04:25-13:58:01 (none) pluto[23801]: | searching for certificate PPK_RSA:AwEAAc42b vs PPK_RSA:AwEAAc42b
2006:04:25-13:58:01 (none) pluto[23801]: | offered CA: 'C=ca, ST=ON, L=Aurora, O=Canada Law Book, OU=IT, CN=CLB, E=itsupport@canadalawbook.ca'
2006:04:25-13:58:01 (none) pluto[23801]: | hashing 196 bytes of SA
2006:04:25-13:58:01 (none) pluto[23801]: | required CA is '%any'
2006:04:25-13:58:01 (none) pluto[23801]: | key issuer CA is 'C=ca, ST=ON, L=Aurora, O=Canada Law Book, OU=IT, CN=CLB, E=itsupport@canadalawbook.ca'
2006:04:25-13:58:01 (none) pluto[23801]: | an RSA Sig check passed with *AwEAAcCIy [preloaded key]
2006:04:25-13:58:01 (none) pluto[23801]: | authentication succeeded
2006:04:25-13:58:01 (none) pluto[23801]: | thinking about whether to send my certificate:
2006:04:25-13:58:01 (none) pluto[23801]: | I have RSA key: OAKLEY_RSA_SIG cert.type: CERT_X509_SIGNATURE
2006:04:25-13:58:01 (none) pluto[23801]: | sendcert: CERT_ALWAYSSEND and I did not get a certificate request
2006:04:25-13:58:01 (none) pluto[23801]: | so send cert.
2006:04:25-13:58:01 (none) pluto[23801]: | **emit ISAKMP Message:
2006:04:25-13:58:01 (none) pluto[23801]: | initiator cookie:
2006:04:25-13:58:01 (none) pluto[23801]: | 32 1f dd 67 0e 88 f5 34
2006:04:25-13:58:01 (none) pluto[23801]: | responder cookie:
2006:04:25-13:58:01 (none) pluto[23801]: | 6b d6 fb 4a 8c 54 47 e1
2006:04:25-13:58:01 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_ID
2006:04:25-13:58:01 (none) pluto[23801]: | ISAKMP version: ISAKMP Version 1.0
2006:04:25-13:58:01 (none) pluto[23801]: | exchange type: ISAKMP_XCHG_IDPROT
2006:04:25-13:58:01 (none) pluto[23801]: | flags: ISAKMP_FLAG_ENCRYPTION
2006:04:25-13:58:01 (none) pluto[23801]: | message ID: 00 00 00 00
2006:04:25-13:58:01 (none) pluto[23801]: | ***emit ISAKMP Identification Payload (IPsec DOI):
2006:04:25-13:58:01 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_CERT
2006:04:25-13:58:01 (none) pluto[23801]: | ID type: ID_DER_ASN1_DN
2006:04:25-13:58:01 (none) pluto[23801]: | Protocol ID: 0
2006:04:25-13:58:01 (none) pluto[23801]: | port: 0
2006:04:25-13:58:01 (none) pluto[23801]: | emitting 142 raw bytes of my identity into ISAKMP Identification Payload (IPsec DOI)
2006:04:25-13:58:01 (none) pluto[23801]: | my identity 30 81 8b 31 0b 30 09 06 03 55 04 06 13 02 63 61
2006:04:25-13:58:01 (none) pluto[23801]: | 31 0b 30 09 06 03 55 04 08 13 02 4f 4e 31 0f 30
2006:04:25-13:58:01 (none) pluto[23801]: | 0d 06 03 55 04 07 13 06 41 75 72 6f 72 61 31 18
2006:04:25-13:58:01 (none) pluto[23801]: | 30 16 06 03 55 04 0a 13 0f 43 61 6e 61 64 61 20
2006:04:25-13:58:01 (none) pluto[23801]: | 4c 61 77 20 42 6f 6f 6b 31 0b 30 09 06 03 55 04
2006:04:25-13:58:01 (none) pluto[23801]: | 0b 13 02 49 54 31 0c 30 0a 06 03 55 04 03 13 03
2006:04:25-13:58:01 (none) pluto[23801]: | 43 4c 42 31 29 30 27 06 09 2a 86 48 86 f7 0d 01
2006:04:25-13:58:01 (none) pluto[23801]: | 09 01 16 1a 69 74 73 75 70 70 6f 72 74 40 63 61
2006:04:25-13:58:01 (none) pluto[23801]: | 6e 61 64 61 6c 61 77 62 6f 6f 6b 2e 63 61
2006:04:25-13:58:01 (none) pluto[23801]: | emitting length of ISAKMP Identification Payload (IPsec DOI): 150
2006:04:25-13:58:01 (none) pluto[23801]: "S_L2TP_using_certs_1"[5] w.x.y.z #9: I am sending my cert
2006:04:25-13:58:01 (none) pluto[23801]: | ***emit ISAKMP Certificate Payload:
2006:04:25-13:58:01 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_SIG
2006:04:25-13:58:01 (none) pluto[23801]: | cert encoding: CERT_X509_SIGNATURE
2006:04:25-13:58:01 (none) pluto[23801]: | emitting 1042 raw bytes of CERT into ISAKMP Certificate Payload
2006:04:25-13:58:01 (none) pluto[23801]: | CERT
Content removed
2006:04:25-13:58:01 (none) pluto[23801]: | emitting length of ISAKMP Certificate Payload: 1047
2006:04:25-13:58:01 (none) pluto[23801]: | hashing 196 bytes of SA
2006:04:25-13:58:01 (none) pluto[23801]: | started looking for secret for C=ca, ST=ON, L=Aurora, O=Canada Law Book, OU=IT, CN=CLB, E=itsupport@canadalawbook.ca->C=ca, ST=ON, L=NA, O=NA, OU=NA, CN=TESTVPN, E=administrator@canadalawbook.ca of kind PPK_RSA
2006:04:25-13:58:01 (none) pluto[23801]: | searching for certificate PPK_RSA:AwEAAc42b vs PPK_RSA:AwEAAc42b
2006:04:25-13:58:01 (none) pluto[23801]: | signing hash with RSA Key *AwEAAc42b
2006:04:25-13:58:01 (none) pluto[23801]: | ***emit ISAKMP Signature Payload:
2006:04:25-13:58:01 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_NONE
2006:04:25-13:58:01 (none) pluto[23801]: | emitting 192 raw bytes of SIG_R into ISAKMP Signature Payload
2006:04:25-13:58:01 (none) pluto[23801]: | SIG_R
Content removed
2006:04:25-13:58:01 (none) pluto[23801]: | emitting length of ISAKMP Signature Payload: 196
2006:04:25-13:58:01 (none) pluto[23801]: | encrypting:
Content removed
2006:04:25-13:58:01 (none) pluto[23801]: | IV:
2006:04:25-13:58:01 (none) pluto[23801]: | 0f e5 bc 5f c7 c8 4a f5
2006:04:25-13:58:01 (none) pluto[23801]: | emitting 7 zero bytes of encryption padding into ISAKMP Message
2006:04:25-13:58:01 (none) pluto[23801]: | encrypting using OAKLEY_3DES_CBC
2006:04:25-13:58:01 (none) pluto[23801]: | next IV: f3 c8 25 ad 4e ef e4 7f
2006:04:25-13:58:01 (none) pluto[23801]: | emitting length of ISAKMP Message: 1428
2006:04:25-13:58:01 (none) pluto[23801]: | last encrypted block of Phase 1:
2006:04:25-13:58:01 (none) pluto[23801]: | f3 c8 25 ad 4e ef e4 7f
2006:04:25-13:58:01 (none) pluto[23801]: | complete state transition with STF_OK
2006:04:25-13:58:01 (none) pluto[23801]: "S_L2TP_using_certs_1"[5] w.x.y.z #9: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3
2006:04:25-13:58:01 (none) pluto[23801]: | sending reply packet to w.x.y.z:500 (from port=500)
2006:04:25-13:58:01 (none) pluto[23801]: | sending 1428 bytes for STATE_MAIN_R2 through eth2:500 to w.x.y.z:500:
2006:04:25-13:58:01 (none) pluto[23801]: | inserting event EVENT_SA_EXPIRE, timeout in 28800 seconds for #9
2006:04:25-13:58:01 (none) pluto[23801]: "S_L2TP_using_certs_1"[5] w.x.y.z #9: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_RSA_SIG cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp2048}
2006:04:25-13:58:01 (none) pluto[23801]: | modecfg pull: noquirk policy[:P]ush not-client
2006:04:25-13:58:01 (none) pluto[23801]: | phase 1 is done, looking for phase 1 to unpend
2006:04:25-13:58:01 (none) pluto[23801]: | next event EVENT_PENDING_PHASE2 in 81 seconds
2006:04:25-13:58:01 (none) pluto[23801]: |
2006:04:25-13:58:01 (none) pluto[23801]: | *received 1300 bytes from w.x.y.z:500 on eth2 (port=500)
2006:04:25-13:58:01 (none) pluto[23801]: | **parse ISAKMP Message:
2006:04:25-13:58:01 (none) pluto[23801]: | initiator cookie:
2006:04:25-13:58:01 (none) pluto[23801]: | 32 1f dd 67 0e 88 f5 34
2006:04:25-13:58:01 (none) pluto[23801]: | responder cookie:
2006:04:25-13:58:01 (none) pluto[23801]: | 6b d6 fb 4a 8c 54 47 e1
2006:04:25-13:58:01 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_HASH
2006:04:25-13:58:01 (none) pluto[23801]: | ISAKMP version: ISAKMP Version 1.0
2006:04:25-13:58:01 (none) pluto[23801]: | exchange type: ISAKMP_XCHG_QUICK
2006:04:25-13:58:01 (none) pluto[23801]: | flags: ISAKMP_FLAG_ENCRYPTION
2006:04:25-13:58:01 (none) pluto[23801]: | message ID: fb 3b 9a 37
2006:04:25-13:58:01 (none) pluto[23801]: | length: 1300
2006:04:25-13:58:01 (none) pluto[23801]: | processing packet with exchange type=ISAKMP_XCHG_QUICK (32)
2006:04:25-13:58:01 (none) pluto[23801]: | ICOOKIE: 32 1f dd 67 0e 88 f5 34
2006:04:25-13:58:01 (none) pluto[23801]: | RCOOKIE: 6b d6 fb 4a 8c 54 47 e1
2006:04:25-13:58:01 (none) pluto[23801]: | peer: d1 52 0e c2
2006:04:25-13:58:01 (none) pluto[23801]: | state hash entry 11
2006:04:25-13:58:01 (none) pluto[23801]: | peer and cookies match on #9, provided msgid fb3b9a37 vs 00000000
2006:04:25-13:58:01 (none) pluto[23801]: | state object not found
2006:04:25-13:58:01 (none) pluto[23801]: | ICOOKIE: 32 1f dd 67 0e 88 f5 34
2006:04:25-13:58:01 (none) pluto[23801]: | RCOOKIE: 6b d6 fb 4a 8c 54 47 e1
2006:04:25-13:58:01 (none) pluto[23801]: | peer: d1 52 0e c2
2006:04:25-13:58:01 (none) pluto[23801]: | state hash entry 11
2006:04:25-13:58:01 (none) pluto[23801]: | peer and cookies match on #9, provided msgid 00000000 vs 00000000
2006:04:25-13:58:01 (none) pluto[23801]: | state object #9 found, in STATE_MAIN_R3
2006:04:25-13:58:01 (none) pluto[23801]: | processing connection S_L2TP_using_certs_1[5] w.x.y.z
2006:04:25-13:58:01 (none) pluto[23801]: | last Phase 1 IV: f3 c8 25 ad 4e ef e4 7f
2006:04:25-13:58:01 (none) pluto[23801]: | current Phase 1 IV: f3 c8 25 ad 4e ef e4 7f
2006:04:25-13:58:01 (none) pluto[23801]: | computed Phase 2 IV:
2006:04:25-13:58:01 (none) pluto[23801]: | e5 84 9b ec 9e 8b 7b e5 25 c1 06 e8 00 a4 c6 a3
2006:04:25-13:58:01 (none) pluto[23801]: | c1 6f de 6e
2006:04:25-13:58:01 (none) pluto[23801]: | received encrypted packet from w.x.y.z:500
2006:04:25-13:58:01 (none) pluto[23801]: | decrypting 1272 bytes using algorithm OAKLEY_3DES_CBC
2006:04:25-13:58:01 (none) pluto[23801]: | decrypted:
Content removed
2006:04:25-13:58:01 (none) pluto[23801]: |
2006:04:25-13:58:01 (none) pluto[23801]: | next IV: 91 12 e1 2a 61 50 40 6d
2006:04:25-13:58:01 (none) pluto[23801]: | ***parse ISAKMP Hash Payload:
2006:04:25-13:58:01 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_SA
2006:04:25-13:58:01 (none) pluto[23801]: | length: 24
2006:04:25-13:58:01 (none) pluto[23801]: | ***parse ISAKMP Security Association Payload:
2006:04:25-13:58:01 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_NONCE
2006:04:25-13:58:01 (none) pluto[23801]: | length: 1196
2006:04:25-13:58:01 (none) pluto[23801]: | DOI: ISAKMP_DOI_IPSEC
2006:04:25-13:58:01 (none) pluto[23801]: | ***parse ISAKMP Nonce Payload:
2006:04:25-13:58:01 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_ID
2006:04:25-13:58:01 (none) pluto[23801]: | length: 24
2006:04:25-13:58:01 (none) pluto[23801]: | ***parse ISAKMP Identification Payload (IPsec DOI):
2006:04:25-13:58:01 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_ID
2006:04:25-13:58:01 (none) pluto[23801]: | length: 12
2006:04:25-13:58:01 (none) pluto[23801]: | ID type: ID_IPV4_ADDR
2006:04:25-13:58:01 (none) pluto[23801]: | Protocol ID: 17
2006:04:25-13:58:01 (none) pluto[23801]: | port: 1701
2006:04:25-13:58:01 (none) pluto[23801]: | ***parse ISAKMP Identification Payload (IPsec DOI):
2006:04:25-13:58:01 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_NONE
2006:04:25-13:58:01 (none) pluto[23801]: | length: 12
2006:04:25-13:58:01 (none) pluto[23801]: | ID type: ID_IPV4_ADDR
2006:04:25-13:58:01 (none) pluto[23801]: | Protocol ID: 17
2006:04:25-13:58:01 (none) pluto[23801]: | port: 0
2006:04:25-13:58:01 (none) pluto[23801]: | removing 4 bytes of padding
2006:04:25-13:58:01 (none) pluto[23801]: | HASH(1) computed:
2006:04:25-13:58:01 (none) pluto[23801]: | 36 f6 5c 93 e5 9a b9 14 cf 65 50 6d 4f f7 ba c1
2006:04:25-13:58:01 (none) pluto[23801]: | 1a 1c 01 b9
2006:04:25-13:58:01 (none) pluto[23801]: | peer client is 192.168.0.100
2006:04:25-13:58:01 (none) pluto[23801]: | peer client protocol/port is 17/1701
2006:04:25-13:58:01 (none) pluto[23801]: | our client is a.b.c.d
2006:04:25-13:58:01 (none) pluto[23801]: | our client protocol/port is 17/0
2006:04:25-13:58:01 (none) pluto[23801]: | duplicating state object #9
2006:04:25-13:58:01 (none) pluto[23801]: | creating state object #10 at 0x811b330
2006:04:25-13:58:01 (none) pluto[23801]: | processing connection S_L2TP_using_certs_1[5] w.x.y.z
2006:04:25-13:58:01 (none) pluto[23801]: | ICOOKIE: 32 1f dd 67 0e 88 f5 34
2006:04:25-13:58:01 (none) pluto[23801]: | RCOOKIE: 6b d6 fb 4a 8c 54 47 e1
2006:04:25-13:58:01 (none) pluto[23801]: | peer: d1 52 0e c2
2006:04:25-13:58:01 (none) pluto[23801]: | state hash entry 11
2006:04:25-13:58:01 (none) pluto[23801]: | inserting event EVENT_SO_DISCARD, timeout in 0 seconds for #10
2006:04:25-13:58:01 (none) pluto[23801]: | ****parse IPsec DOI SIT:
2006:04:25-13:58:01 (none) pluto[23801]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
2006:04:25-13:58:01 (none) pluto[23801]: | ****parse ISAKMP Proposal Payload:
2006:04:25-13:58:01 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_P
2006:04:25-13:58:01 (none) pluto[23801]: | length: 92
2006:04:25-13:58:01 (none) pluto[23801]: | proposal number: 1
2006:04:25-13:58:01 (none) pluto[23801]: | protocol ID: PROTO_IPSEC_ESP
2006:04:25-13:58:01 (none) pluto[23801]: | SPI size: 4
2006:04:25-13:58:01 (none) pluto[23801]: | number of transforms: 2
2006:04:25-13:58:01 (none) pluto[23801]: | parsing 4 raw bytes of ISAKMP Proposal Payload into SPI
2006:04:25-13:58:01 (none) pluto[23801]: | SPI 70 4d 46 39
2006:04:25-13:58:01 (none) pluto[23801]: | ****parse ISAKMP Proposal Payload:
2006:04:25-13:58:01 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_P
2006:04:25-13:58:01 (none) pluto[23801]: | length: 52
2006:04:25-13:58:01 (none) pluto[23801]: | proposal number: 2
2006:04:25-13:58:01 (none) pluto[23801]: | protocol ID: PROTO_IPSEC_AH
2006:04:25-13:58:01 (none) pluto[23801]: | SPI size: 4
2006:04:25-13:58:01 (none) pluto[23801]: | number of transforms: 1
2006:04:25-13:58:01 (none) pluto[23801]: | *****parse ISAKMP Transform Payload (ESP):
2006:04:25-13:58:01 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_T
2006:04:25-13:58:01 (none) pluto[23801]: | length: 40
2006:04:25-13:58:01 (none) pluto[23801]: | transform number: 1
2006:04:25-13:58:01 (none) pluto[23801]: | transform ID: ESP_3DES
2006:04:25-13:58:01 (none) pluto[23801]: | ******parse ISAKMP IPsec DOI attribute:
2006:04:25-13:58:01 (none) pluto[23801]: | af+type: SA_LIFE_TYPE
2006:04:25-13:58:01 (none) pluto[23801]: | length/value: 1
2006:04:25-13:58:01 (none) pluto[23801]: | [1 is SA_LIFE_TYPE_SECONDS]
2006:04:25-13:58:01 (none) pluto[23801]: | ******parse ISAKMP IPsec DOI attribute:
2006:04:25-13:58:01 (none) pluto[23801]: | af+type: SA_LIFE_DURATION (variable length)
2006:04:25-13:58:01 (none) pluto[23801]: | length/value: 4
2006:04:25-13:58:01 (none) pluto[23801]: | long duration: 3600
2006:04:25-13:58:01 (none) pluto[23801]: | ******parse ISAKMP IPsec DOI attribute:
2006:04:25-13:58:01 (none) pluto[23801]: | af+type: SA_LIFE_TYPE
2006:04:25-13:58:01 (none) pluto[23801]: | length/value: 2
2006:04:25-13:58:01 (none) pluto[23801]: | [2 is SA_LIFE_TYPE_KBYTES]
2006:04:25-13:58:01 (none) pluto[23801]: | ******parse ISAKMP IPsec DOI attribute:
2006:04:25-13:58:01 (none) pluto[23801]: | af+type: SA_LIFE_DURATION (variable length)
2006:04:25-13:58:01 (none) pluto[23801]: | length/value: 4
2006:04:25-13:58:01 (none) pluto[23801]: | long duration: 250000
2006:04:25-13:58:01 (none) pluto[23801]: | ******parse ISAKMP IPsec DOI attribute:
2006:04:25-13:58:01 (none) pluto[23801]: | af+type: ENCAPSULATION_MODE
2006:04:25-13:58:01 (none) pluto[23801]: | length/value: 2
2006:04:25-13:58:01 (none) pluto[23801]: | [2 is ENCAPSULATION_MODE_TRANSPORT]
2006:04:25-13:58:01 (none) pluto[23801]: | ******parse ISAKMP IPsec DOI attribute:
2006:04:25-13:58:01 (none) pluto[23801]: | af+type: AUTH_ALGORITHM
2006:04:25-13:58:01 (none) pluto[23801]: | length/value: 1
2006:04:25-13:58:01 (none) pluto[23801]: | [1 is AUTH_ALGORITHM_HMAC_MD5]
2006:04:25-13:58:01 (none) pluto[23801]: | helper -1 doing build_nonce op id: 0
2006:04:25-13:58:01 (none) pluto[23801]: | Generated nonce:
2006:04:25-13:58:01 (none) pluto[23801]: | b8 4f 40 ed e8 1b 70 71 91 53 a3 76 fe 42 2a f1
2006:04:25-13:58:01 (none) pluto[23801]: | processing connection S_L2TP_using_certs_1[5] w.x.y.z
2006:04:25-13:58:01 (none) pluto[23801]: | **emit ISAKMP Message:
2006:04:25-13:58:01 (none) pluto[23801]: | initiator cookie:
2006:04:25-13:58:01 (none) pluto[23801]: | 32 1f dd 67 0e 88 f5 34
2006:04:25-13:58:01 (none) pluto[23801]: | responder cookie:
2006:04:25-13:58:01 (none) pluto[23801]: | 6b d6 fb 4a 8c 54 47 e1
2006:04:25-13:58:01 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_HASH
2006:04:25-13:58:01 (none) pluto[23801]: | ISAKMP version: ISAKMP Version 1.0
2006:04:25-13:58:01 (none) pluto[23801]: | exchange type: ISAKMP_XCHG_QUICK
2006:04:25-13:58:01 (none) pluto[23801]: | flags: ISAKMP_FLAG_ENCRYPTION
2006:04:25-13:58:01 (none) pluto[23801]: | message ID: fb 3b 9a 37
2006:04:25-13:58:01 (none) pluto[23801]: | ***emit ISAKMP Hash Payload:
2006:04:25-13:58:01 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_SA
2006:04:25-13:58:01 (none) pluto[23801]: | emitting 20 zero bytes of HASH into ISAKMP Hash Payload
2006:04:25-13:58:01 (none) pluto[23801]: | emitting length of ISAKMP Hash Payload: 24
2006:04:25-13:58:01 (none) pluto[23801]: | ***emit ISAKMP Security Association Payload:
2006:04:25-13:58:01 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_NONCE
2006:04:25-13:58:01 (none) pluto[23801]: | DOI: ISAKMP_DOI_IPSEC
2006:04:25-13:58:01 (none) pluto[23801]: | ****parse IPsec DOI SIT:
2006:04:25-13:58:01 (none) pluto[23801]: | IPsec DOI SIT: SIT_IDENTITY_ONLY
2006:04:25-13:58:01 (none) pluto[23801]: | ****parse ISAKMP Proposal Payload:
2006:04:25-13:58:01 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_P
2006:04:25-13:58:01 (none) pluto[23801]: | length: 92
2006:04:25-13:58:01 (none) pluto[23801]: | proposal number: 1
2006:04:25-13:58:01 (none) pluto[23801]: | protocol ID: PROTO_IPSEC_ESP
2006:04:25-13:58:01 (none) pluto[23801]: | SPI size: 4
2006:04:25-13:58:01 (none) pluto[23801]: | number of transforms: 2
2006:04:25-13:58:01 (none) pluto[23801]: | parsing 4 raw bytes of ISAKMP Proposal Payload into SPI
2006:04:25-13:58:01 (none) pluto[23801]: | SPI 70 4d 46 39
2006:04:25-13:58:01 (none) pluto[23801]: | ****parse ISAKMP Proposal Payload:
2006:04:25-13:58:01 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_P
2006:04:25-13:58:01 (none) pluto[23801]: | length: 52
2006:04:25-13:58:01 (none) pluto[23801]: | proposal number: 2
2006:04:25-13:58:01 (none) pluto[23801]: | protocol ID: PROTO_IPSEC_AH
2006:04:25-13:58:01 (none) pluto[23801]: | SPI size: 4
2006:04:25-13:58:01 (none) pluto[23801]: | number of transforms: 1
2006:04:25-13:58:01 (none) pluto[23801]: | *****parse ISAKMP Transform Payload (ESP):
2006:04:25-13:58:01 (none) pluto[23801]: | next payload type: ISAKMP_NEXT_T
2006:04:25-13:58:01 (none) pluto[23801]: | length: 40
2006:04:25-13:58:01 (none) pluto[23801]: | transform number: 1
2006:04:25-13:58:01 (none) pluto[23801]: | transform ID: ESP_3DES
2006:04:25-13:58:01 (none) pluto[23801]: | ******parse ISAKMP IPsec DOI attribute:
2006:04:25-13:58:01 (none) pluto[23801]: | af+type: SA_LIFE_TYPE
2006:04:25-13:58:01 (none) pluto[23801]: | length/value: 1
2006:04:25-13:58:01 (none) pluto[23801]: | [1 is SA_LIFE_TYPE_SECONDS]
2006:04:25-13:58:01 (none) pluto[23801]: | ******parse ISAKMP IPsec DOI attribute:
2006:04:25-13:58:01 (none) pluto[23801]: | af+type: SA_LIFE_DURATION (variable length)
2006:04:25-13:58:01 (none) pluto[23801]: | length/value: 4
2006:04:25-13:58:01 (none) pluto[23801]: | long duration: 3600
2006:04:25-13:58:01 (none) pluto[23801]: | ******parse ISAKMP IPsec DOI attribute:
2006:04:25-13:58:01 (none) pluto[23801]: | af+type: SA_LIFE_TYPE
2006:04:25-13:58:01 (none) pluto[23801]: | length/value: 2
2006:04:25-13:58:01 (none) pluto[23801]: | [2 is SA_LIFE_TYPE_KBYTES]
2006:04:25-13:58:01 (none) pluto[23801]: | ******parse ISAKMP IPsec DOI attribute:
2006:04:25-13:58:01 (none) pluto[23801]: | af+type: SA_LIFE_DURATION (variable length)
2006:04:25-13:58:01 (none) pluto[23801]: | length/value: 4
2006:04:25-13:58:01 (none) pluto[23801]: | long duration: 250000
2006:04:25-13:58:01 (none) pluto[23801]: | ******parse ISAKMP IPsec DOI attribute:
2006:04:25-13:58:01 (none) pluto[23801]: | af+type: ENCAPSULATION_MODE
2006:04:25-13:58:01 (none) pluto[23801]: | length/value: 2
2006:04:25-13:58:01 (none) pluto[23801]: | [2 is
This thread was automatically locked due to age.
