Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 10 replies
  • Subscribers 1 subscriber
  • Views 7296 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

VPN IPSec - Sophos x Sonicwall

Siarom
We have a problem of connection and reconnection between a Sophos UTM and a Sonicwall. The client complains about disconnection between the sites, but we can't detect anything wrong in the settings.

Does anyone have a light? [:S]


This thread was automatically locked due to age.
Parents
  • 0
    We changed the direction of establishing the VPN. Our Sophos now initiates the connection. Other parameters were not changed ... 

    The problem continues ... Sophos would test and confirm if this is really a bug? 

    Note: We will change the authentication for RSA keys. Post the result and logs and then. 



    2014:04:23-23:46:17 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21543: starting keying attempt 226 of an unlimited number

    2014:04:23-23:46:17 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21549: initiating Main Mode to replace #21543

    2014:04:23-23:46:17 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21548: discarding duplicate packet; already STATE_MAIN_I3

    2014:04:23-23:46:17 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21549: received Vendor ID payload [RFC 3947]

    2014:04:23-23:46:17 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21549: ignoring Vendor ID payload [FRAGMENTATION c0000000]

    2014:04:23-23:46:17 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21549: enabling possible NAT-traversal with method 3

    2014:04:23-23:46:17 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21549: ignoring Vendor ID payload [Cisco-Unity]

    2014:04:23-23:46:17 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21549: received Vendor ID payload [XAUTH]

    2014:04:23-23:46:17 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21549: ignoring Vendor ID payload [5879f23a527c1950ea902a1d9bdf046d]

    2014:04:23-23:46:17 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21549: ignoring Vendor ID payload [Cisco VPN 3000 Series]

    2014:04:23-23:46:17 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21549: NAT-Traversal: Result using RFC 3947: no NAT detected

    2014:04:23-23:46:17 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21549: Informational Exchange message must be encrypted

    2014:04:23-23:46:17 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21546: discarding duplicate packet; already STATE_MAIN_I3

    2014:04:23-23:46:25 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21548: discarding duplicate packet; already STATE_MAIN_I3

    2014:04:23-23:46:25 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21546: discarding duplicate packet; already STATE_MAIN_I3

    2014:04:23-23:46:28 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21549: discarding duplicate packet; already STATE_MAIN_I3

    2014:04:23-23:46:29 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21546: next payload type of ISAKMP Hash Payload has an unknown value: 254

    2014:04:23-23:46:29 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21546: malformed payload in packet

    2014:04:23-23:46:32 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21544: max number of retransmissions (2) reached STATE_MAIN_I3.  Possible authentication failure: no acceptable response to our first encrypted message

    2014:04:23-23:46:32 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21544: starting keying attempt 31 of an unlimited number

    2014:04:23-23:46:32 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21550: initiating Main Mode to replace #21544

    2014:04:23-23:46:32 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21550: received Vendor ID payload [RFC 3947]

    2014:04:23-23:46:32 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21550: ignoring Vendor ID payload [FRAGMENTATION c0000000]

    2014:04:23-23:46:32 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21550: enabling possible NAT-traversal with method 3

    2014:04:23-23:46:32 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21550: ignoring Vendor ID payload [Cisco-Unity]

    2014:04:23-23:46:32 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21550: received Vendor ID payload [XAUTH]

    2014:04:23-23:46:32 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21550: ignoring Vendor ID payload [6f99318a439ee1f1e543353ed54584ef]

    2014:04:23-23:46:32 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21550: ignoring Vendor ID payload [Cisco VPN 3000 Series]

    2014:04:23-23:46:32 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21550: NAT-Traversal: Result using RFC 3947: no NAT detected

    2014:04:23-23:46:32 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21550: Informational Exchange message must be encrypted

    2014:04:23-23:46:33 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteNatal_0" #21031: ignoring informational payload, type NO_PROPOSAL_CHOSEN

    2014:04:23-23:46:33 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21548: discarding duplicate packet; already STATE_MAIN_I3

    2014:04:23-23:46:36 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21549: discarding duplicate packet; already STATE_MAIN_I3

    2014:04:23-23:46:37 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21548: next payload type of ISAKMP Hash Payload has an unknown value: 134

    2014:04:23-23:46:37 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21548: malformed payload in packet

    2014:04:23-23:46:42 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21550: discarding duplicate packet; already STATE_MAIN_I3

    2014:04:23-23:46:44 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21549: discarding duplicate packet; already STATE_MAIN_I3

    2014:04:23-23:46:47 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21549: next payload type of ISAKMP Hash Payload has an unknown value: 188

    2014:04:23-23:46:47 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21549: malformed payload in packet

    2014:04:23-23:46:50 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21550: discarding duplicate packet; already STATE_MAIN_I3

    2014:04:23-23:46:51 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21545: max number of retransmissions (2) reached STATE_MAIN_I3.  Possible authentication failure: no acceptable response to our first encrypted message

    2014:04:23-23:46:51 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21545: starting keying attempt 80 of an unlimited number

    2014:04:23-23:46:51 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21551: initiating Main Mode to replace #21545

    2014:04:23-23:46:51 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21551: received Vendor ID payload [RFC 3947]

    2014:04:23-23:46:51 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21551: ignoring Vendor ID payload [FRAGMENTATION c0000000]

    2014:04:23-23:46:51 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21551: enabling possible NAT-traversal with method 3

    2014:04:23-23:46:51 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21551: ignoring Vendor ID payload [Cisco-Unity]

    2014:04:23-23:46:51 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21551: received Vendor ID payload [XAUTH]

    2014:04:23-23:46:51 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21551: ignoring Vendor ID payload [29be875b04fe7b400fd6926cf858ab34]

    2014:04:23-23:46:51 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21551: ignoring Vendor ID payload [Cisco VPN 3000 Series]

    2014:04:23-23:46:51 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21551: NAT-Traversal: Result using RFC 3947: no NAT detected

    2014:04:23-23:46:51 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21551: Informational Exchange message must be encrypted

    2014:04:23-23:46:58 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21550: discarding duplicate packet; already STATE_MAIN_I3

    2014:04:23-23:47:01 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21551: discarding duplicate packet; already STATE_MAIN_I3

    2014:04:23-23:47:02 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21550: next payload type of ISAKMP Hash Payload has an unknown value: 182

    2014:04:23-23:47:02 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21550: malformed payload in packet

    2014:04:23-23:47:09 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21551: discarding duplicate packet; already STATE_MAIN_I3

    2014:04:23-23:47:09 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21546: max number of retransmissions (2) reached STATE_MAIN_I3.  Possible authentication failure: no acceptable response to our first encrypted message
Reply
  • 0
    We changed the direction of establishing the VPN. Our Sophos now initiates the connection. Other parameters were not changed ... 

    The problem continues ... Sophos would test and confirm if this is really a bug? 

    Note: We will change the authentication for RSA keys. Post the result and logs and then. 



    2014:04:23-23:46:17 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21543: starting keying attempt 226 of an unlimited number

    2014:04:23-23:46:17 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21549: initiating Main Mode to replace #21543

    2014:04:23-23:46:17 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21548: discarding duplicate packet; already STATE_MAIN_I3

    2014:04:23-23:46:17 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21549: received Vendor ID payload [RFC 3947]

    2014:04:23-23:46:17 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21549: ignoring Vendor ID payload [FRAGMENTATION c0000000]

    2014:04:23-23:46:17 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21549: enabling possible NAT-traversal with method 3

    2014:04:23-23:46:17 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21549: ignoring Vendor ID payload [Cisco-Unity]

    2014:04:23-23:46:17 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21549: received Vendor ID payload [XAUTH]

    2014:04:23-23:46:17 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21549: ignoring Vendor ID payload [5879f23a527c1950ea902a1d9bdf046d]

    2014:04:23-23:46:17 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21549: ignoring Vendor ID payload [Cisco VPN 3000 Series]

    2014:04:23-23:46:17 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21549: NAT-Traversal: Result using RFC 3947: no NAT detected

    2014:04:23-23:46:17 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21549: Informational Exchange message must be encrypted

    2014:04:23-23:46:17 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21546: discarding duplicate packet; already STATE_MAIN_I3

    2014:04:23-23:46:25 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21548: discarding duplicate packet; already STATE_MAIN_I3

    2014:04:23-23:46:25 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21546: discarding duplicate packet; already STATE_MAIN_I3

    2014:04:23-23:46:28 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21549: discarding duplicate packet; already STATE_MAIN_I3

    2014:04:23-23:46:29 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21546: next payload type of ISAKMP Hash Payload has an unknown value: 254

    2014:04:23-23:46:29 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21546: malformed payload in packet

    2014:04:23-23:46:32 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21544: max number of retransmissions (2) reached STATE_MAIN_I3.  Possible authentication failure: no acceptable response to our first encrypted message

    2014:04:23-23:46:32 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21544: starting keying attempt 31 of an unlimited number

    2014:04:23-23:46:32 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21550: initiating Main Mode to replace #21544

    2014:04:23-23:46:32 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21550: received Vendor ID payload [RFC 3947]

    2014:04:23-23:46:32 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21550: ignoring Vendor ID payload [FRAGMENTATION c0000000]

    2014:04:23-23:46:32 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21550: enabling possible NAT-traversal with method 3

    2014:04:23-23:46:32 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21550: ignoring Vendor ID payload [Cisco-Unity]

    2014:04:23-23:46:32 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21550: received Vendor ID payload [XAUTH]

    2014:04:23-23:46:32 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21550: ignoring Vendor ID payload [6f99318a439ee1f1e543353ed54584ef]

    2014:04:23-23:46:32 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21550: ignoring Vendor ID payload [Cisco VPN 3000 Series]

    2014:04:23-23:46:32 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21550: NAT-Traversal: Result using RFC 3947: no NAT detected

    2014:04:23-23:46:32 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21550: Informational Exchange message must be encrypted

    2014:04:23-23:46:33 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteNatal_0" #21031: ignoring informational payload, type NO_PROPOSAL_CHOSEN

    2014:04:23-23:46:33 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21548: discarding duplicate packet; already STATE_MAIN_I3

    2014:04:23-23:46:36 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21549: discarding duplicate packet; already STATE_MAIN_I3

    2014:04:23-23:46:37 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21548: next payload type of ISAKMP Hash Payload has an unknown value: 134

    2014:04:23-23:46:37 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21548: malformed payload in packet

    2014:04:23-23:46:42 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21550: discarding duplicate packet; already STATE_MAIN_I3

    2014:04:23-23:46:44 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21549: discarding duplicate packet; already STATE_MAIN_I3

    2014:04:23-23:46:47 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21549: next payload type of ISAKMP Hash Payload has an unknown value: 188

    2014:04:23-23:46:47 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21549: malformed payload in packet

    2014:04:23-23:46:50 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21550: discarding duplicate packet; already STATE_MAIN_I3

    2014:04:23-23:46:51 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21545: max number of retransmissions (2) reached STATE_MAIN_I3.  Possible authentication failure: no acceptable response to our first encrypted message

    2014:04:23-23:46:51 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21545: starting keying attempt 80 of an unlimited number

    2014:04:23-23:46:51 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21551: initiating Main Mode to replace #21545

    2014:04:23-23:46:51 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21551: received Vendor ID payload [RFC 3947]

    2014:04:23-23:46:51 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21551: ignoring Vendor ID payload [FRAGMENTATION c0000000]

    2014:04:23-23:46:51 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21551: enabling possible NAT-traversal with method 3

    2014:04:23-23:46:51 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21551: ignoring Vendor ID payload [Cisco-Unity]

    2014:04:23-23:46:51 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21551: received Vendor ID payload [XAUTH]

    2014:04:23-23:46:51 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21551: ignoring Vendor ID payload [29be875b04fe7b400fd6926cf858ab34]

    2014:04:23-23:46:51 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21551: ignoring Vendor ID payload [Cisco VPN 3000 Series]

    2014:04:23-23:46:51 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21551: NAT-Traversal: Result using RFC 3947: no NAT detected

    2014:04:23-23:46:51 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21551: Informational Exchange message must be encrypted

    2014:04:23-23:46:58 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21550: discarding duplicate packet; already STATE_MAIN_I3

    2014:04:23-23:47:01 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21551: discarding duplicate packet; already STATE_MAIN_I3

    2014:04:23-23:47:02 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21550: next payload type of ISAKMP Hash Payload has an unknown value: 182

    2014:04:23-23:47:02 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21550: malformed payload in packet

    2014:04:23-23:47:09 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21551: discarding duplicate packet; already STATE_MAIN_I3

    2014:04:23-23:47:09 UTM-VM-CLIG285-FANCARD pluto[5888]: "S_REF_IpsSitDataCenteLinx_0"[5] 200.213.30.250 #21546: max number of retransmissions (2) reached STATE_MAIN_I3.  Possible authentication failure: no acceptable response to our first encrypted message
Children
No Data
Unfiltered HTML