Good morning,
we have a problem with a site-to-site VPN.
The VPN connection is fine. But on some days, we get the following message.
2008:12:12-21:56:31 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7711: Informational Exchange message is invalid because it has a previously used Message ID (0xfa9b48d6)
2008:12:12-21:56:35 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7711: Informational Exchange message is invalid because it has a previously used Message ID (0xfa9b48d6)
2008:12:12-21:56:37 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7713: responding to Quick Mode
2008:12:12-21:56:37 (none) pluto[5554]: | NAT-T: new mapping ***.***.***.***:500/4500)
2008:12:12-21:56:37 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7713: pfkey_msg_build of Add SA esp.83d6210e@***.***.***.*** failed, code -22
2008:12:12-21:56:37 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7712: pfkey_msg_build of Add SA esp.6ef57774@***.***.***.*** failed, code -22
2008:12:12-21:57:37 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7713: discarding duplicate packet; already STATE_QUICK_R1
2008:12:12-21:57:47 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7713: max number of retransmissions (2) reached STATE_QUICK_R1
2008:12:12-21:58:38 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7711: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0xbbda5289 (perhaps this is a duplicated packet)
2008:12:12-21:58:38 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7711: sending encrypted notification INVALID_MESSAGE_ID to ***.***.***.***:4500
2008:12:12-21:58:53 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7711: DPD: No response from peer - declaring peer dead
2008:12:12-21:58:53 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7711: DPD: Restarting all connections of peer
2008:12:12-21:58:53 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7712: deleting state (STATE_QUICK_I2)
2008:12:12-21:58:53 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7711: deleting state (STATE_MAIN_I4)
2008:12:12-21:58:53 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7714: initiating Main Mode
2008:12:12-21:59:38 (none) pluto[5554]: packet from ***.***.***.***:4500: Quick Mode message is for a non-existent (expired?) ISAKMP SA
2008:12:12-22:06:34 (none) pluto[5554]: packet from ***.***.***.***:4500: Quick Mode message is for a non-existent (expired?) ISAKMP SA
2008:12:12-22:07:34 (none) pluto[5554]: packet from ***.***.***.***:4500: Quick Mode message is for a non-existent (expired?) ISAKMP SA
2008:12:12-22:08:34 (none) pluto[5554]: packet from ***.***.***.***:4500: Quick Mode message is for a non-existent (expired?) ISAKMP SA
2008:12:12-22:09:34 (none) pluto[5554]: packet from ***.***.***.***:4500: Quick Mode message is for a non-existent (expired?) ISAKMP SA
2008:12:12-22:12:03 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7714: max number of retransmissions (20) reached STATE_MAIN_I1. No response (or no acceptable response) to our first IKE message
2008:12:12-22:12:03 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7714: starting keying attempt 2 of an unlimited number
2008:12:12-22:12:03 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7715: initiating Main Mode to replace #7714
2008:12:12-22:25:13 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7715: max number of retransmissions (20) reached STATE_MAIN_I1. No response (or no acceptable response) to our first IKE message
2008:12:12-22:25:13 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7715: starting keying attempt 3 of an unlimited number
2008:12:12-22:25:13 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7716: initiating Main Mode to replace #7715
2008:12:12-22:38:24 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7716: max number of retransmissions (20) reached STATE_MAIN_I1. No response (or no acceptable response) to our first IKE message
2008:12:12-22:38:24 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7716: starting keying attempt 4 of an unlimited number
2008:12:12-22:38:24 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7717: initiating Main Mode to replace #7716
2008:12:12-22:51:34 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7717: max number of retransmissions (20) reached STATE_MAIN_I1. No response (or no acceptable response) to our first IKE message
2008:12:12-22:51:34 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7717: starting keying attempt 5 of an unlimited number
2008:12:12-22:51:34 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7718: initiating Main Mode to replace #7717
2008:12:12-23:04:44 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7718: max number of retransmissions (20) reached STATE_MAIN_I1. No response (or no acceptable response) to our first IKE message
2008:12:12-23:04:44 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7718: starting keying attempt 6 of an unlimited number
2008:12:12-23:04:44 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7719: initiating Main Mode to replace #7718
2008:12:12-23:17:54 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7719: max number of retransmissions (20) reached STATE_MAIN_I1. No response (or no acceptable response) to our first IKE message
2008:12:12-23:17:54 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7719: starting keying attempt 7 of an unlimited number
2008:12:12-23:17:54 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7720: initiating Main Mode to replace #7719
2008:12:12-23:31:04 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7720: max number of retransmissions (20) reached STATE_MAIN_I1. No response (or no acceptable response) to our first IKE message
2008:12:12-23:31:04 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7720: starting keying attempt 8 of an unlimited number
2008:12:12-23:31:04 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7721: initiating Main Mode to replace #7720
2008:12:12-23:44:14 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7721: max number of retransmissions (20) reached STATE_MAIN_I1. No response (or no acceptable response) to our first IKE message
2008:12:12-23:44:14 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7721: starting keying attempt 9 of an unlimited number
2008:12:12-23:44:14 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7722: initiating Main Mode to replace #7721
2008:12:12-23:57:24 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7722: max number of retransmissions (20) reached STATE_MAIN_I1. No response (or no acceptable response) to our first IKE message
2008:12:12-23:57:24 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7722: starting keying attempt 10 of an unlimited number
2008:12:12-23:57:24 (none) pluto[5554]: "S_REF_OiGgBHGaTW_0" #7723: initiating Main Mode to replace #7722
This status hold until we disable and reenable the connection.
We use the ASG 7.304
Can anyone help please?
Thanks a lot
This thread was automatically locked due to age.
