minsuj at electrang
Nov 14, 2004, 2:31 PM
Post #7 of 11
(1463 views)
Permalink
|
Maurice Massar ? ?:
>
>maybe IOS does not like that vpnc responds to type 0x82 NAT-Discovery
>payloads with type 0x0F NAT-D payloads.
>
>Try revision 35 please, I changed vpnc to always respond using the same
>type as the peer.
>
>
>
ok.. i think almost done..
thank you.. but not finished.. :)
with-natt still fail..
here are 4 log..
* vpnc --disable-natt ( success !! )
* cisco ios log when vpnc --disable-natt
* vpnc (--enable-natt) ( fail !! )
* cisco ios log when vpnc (--enable-natt)
[root [at] localhos trunk]# ./vpnc
./vpnc: quick mode response rejected: INVALID_MESSAGE_ID
check pfs setting
[root [at] localhos trunk]# ./vpnc --disable-natt
VPNC started in background (pid: 7051)...
== vpnc level 3 log --disable-natt ==
[root [at] localhos trunk]# ./vpnc --disable-natt --debug 3
hex_test: 00010203
vpnc version 0.3.1
S1
S2
S3
using interface tun0
S4
S4.1
i_cookie: de2b6cad e1375ed2
i_nonce: 159a85d9 12685e75 842284b8 649b20cd b63a76d5
S4.2
dh_public:
2649fe37 1ed5fdc7 f118ebd6 d6bd0876 1cd57769 7bc2fd6f fd8a4d43 86eb8c18
5da8ce75 5b4f55ef 6cfd933f 7cd626b0 ecf4c8af 562c8d83 5fe52ac3 8eb0562c
ce01d18c 4a94948e 0829d8ed 22c5334c 37374a27 db5cd562 02423502 74e57ee5
4cec7fa1 b29a6d4c 1e894a0a 5a1e8d65 f40f7ce5 1672e6c6 bde72610 3be3be08
S4.3
sending: ========================>
BEGIN_PARSE
i_cookie: de2b6cad e1375ed2
r_cookie: 00000000 00000000
payload: 01
isakmp_version: 10
exchange_type: 04
flags: 00
message_id: 00000000
len: 00000235
PARSING PAYLOAD type: 01
next_type: 04
length: 014c
sa.doi: 00000001
sa.situation: 00000001
PARSING PAYLOAD type: 02
next_type: 00
length: 0140
p.number: 00
p.prot_id: 01
p.spi_size: 00
length: 08
p.spi:
PARSING PAYLOAD type: 03
next_type: 03
length: 0028
t.number: 00
t.id: 01
t.attributes.type: 000e
t.attributes.u.attr_16: 0100
t.attributes.type: 0001
t.attributes.u.attr_16: 0007
t.attributes.type: 0002
t.attributes.u.attr_16: 0002
t.attributes.type: 0003
t.attributes.u.attr_16: fde9
t.attributes.type: 0004
t.attributes.u.attr_16: 0002
t.attributes.type: 000b
t.attributes.u.attr_16: 0001
t.attributes.type: 000c
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 03
length: 0028
t.number: 01
t.id: 01
t.attributes.type: 000e
t.attributes.u.attr_16: 0100
t.attributes.type: 0001
t.attributes.u.attr_16: 0007
t.attributes.type: 0002
t.attributes.u.attr_16: 0001
t.attributes.type: 0003
t.attributes.u.attr_16: fde9
t.attributes.type: 0004
t.attributes.u.attr_16: 0002
t.attributes.type: 000b
t.attributes.u.attr_16: 0001
t.attributes.type: 000c
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 03
length: 0028
t.number: 02
t.id: 01
t.attributes.type: 000e
t.attributes.u.attr_16: 00c0
t.attributes.type: 0001
t.attributes.u.attr_16: 0007
t.attributes.type: 0002
t.attributes.u.attr_16: 0002
t.attributes.type: 0003
t.attributes.u.attr_16: fde9
t.attributes.type: 0004
t.attributes.u.attr_16: 0002
t.attributes.type: 000b
t.attributes.u.attr_16: 0001
t.attributes.type: 000c
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 03
length: 0028
t.number: 03
t.id: 01
t.attributes.type: 000e
t.attributes.u.attr_16: 00c0
t.attributes.type: 0001
t.attributes.u.attr_16: 0007
t.attributes.type: 0002
t.attributes.u.attr_16: 0001
t.attributes.type: 0003
t.attributes.u.attr_16: fde9
t.attributes.type: 0004
t.attributes.u.attr_16: 0002
t.attributes.type: 000b
t.attributes.u.attr_16: 0001
t.attributes.type: 000c
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 03
length: 0028
t.number: 04
t.id: 01
t.attributes.type: 000e
t.attributes.u.attr_16: 0080
t.attributes.type: 0001
t.attributes.u.attr_16: 0007
t.attributes.type: 0002
t.attributes.u.attr_16: 0002
t.attributes.type: 0003
t.attributes.u.attr_16: fde9
t.attributes.type: 0004
t.attributes.u.attr_16: 0002
t.attributes.type: 000b
t.attributes.u.attr_16: 0001
t.attributes.type: 000c
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 03
length: 0028
t.number: 05
t.id: 01
t.attributes.type: 000e
t.attributes.u.attr_16: 0080
t.attributes.type: 0001
t.attributes.u.attr_16: 0007
t.attributes.type: 0002
t.attributes.u.attr_16: 0001
t.attributes.type: 0003
t.attributes.u.attr_16: fde9
t.attributes.type: 0004
t.attributes.u.attr_16: 0002
t.attributes.type: 000b
t.attributes.u.attr_16: 0001
t.attributes.type: 000c
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 03
length: 0024
t.number: 06
t.id: 01
t.attributes.type: 0001
t.attributes.u.attr_16: 0005
t.attributes.type: 0002
t.attributes.u.attr_16: 0002
t.attributes.type: 0003
t.attributes.u.attr_16: fde9
t.attributes.type: 0004
t.attributes.u.attr_16: 0002
t.attributes.type: 000b
t.attributes.u.attr_16: 0001
t.attributes.type: 000c
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 00
length: 0024
t.number: 07
t.id: 01
t.attributes.type: 0001
t.attributes.u.attr_16: 0005
t.attributes.type: 0002
t.attributes.u.attr_16: 0001
t.attributes.type: 0003
t.attributes.u.attr_16: fde9
t.attributes.type: 0004
t.attributes.u.attr_16: 0002
t.attributes.type: 000b
t.attributes.u.attr_16: 0001
t.attributes.type: 000c
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 02
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 01
PARSING PAYLOAD type: 04
next_type: 0a
length: 0084
ke.data:
2649fe37 1ed5fdc7 f118ebd6 d6bd0876 1cd57769 7bc2fd6f fd8a4d43 86eb8c18
5da8ce75 5b4f55ef 6cfd933f 7cd626b0 ecf4c8af 562c8d83 5fe52ac3 8eb0562c
ce01d18c 4a94948e 0829d8ed 22c5334c 37374a27 db5cd562 02423502 74e57ee5
4cec7fa1 b29a6d4c 1e894a0a 5a1e8d65 f40f7ce5 1672e6c6 bde72610 3be3be08
DONE PARSING PAYLOAD type: 04
PARSING PAYLOAD type: 0a
next_type: 05
length: 0018
ke.data: 159a85d9 12685e75 842284b8 649b20cd b63a76d5
DONE PARSING PAYLOAD type: 0a
PARSING PAYLOAD type: 05
next_type: 0d
length: 0011
id.type: 0b
id.protocol: 11
id.port: f401
id.data: 76706e63 6c69656e 74
DONE PARSING PAYLOAD type: 05
PARSING PAYLOAD type: 0d
next_type: 0d
length: 000c
ke.data: 09002689 dfd6b712
DONE PARSING PAYLOAD type: 0d
PARSING PAYLOAD type: 0d
next_type: 00
length: 0014
ke.data: 12f5f28c 457168a9 702d9fe2 74cc0100
DONE PARSING PAYLOAD type: 0d
PARSING PAYLOAD type: 00
PARSE_OK
S4.4
BEGIN_PARSE
i_cookie: de2b6cad e1375ed2
r_cookie: 941f91a3 32e13503
payload: 01
isakmp_version: 10
exchange_type: 04
flags: 00
message_id: 00000000
len: 00000158
PARSING PAYLOAD type: 01
next_type: 0d
length: 0038
sa.doi: 00000001
sa.situation: 00000001
PARSING PAYLOAD type: 02
next_type: 00
length: 002c
p.number: 01
p.prot_id: 01
p.spi_size: 00
length: 01
p.spi:
PARSING PAYLOAD type: 03
next_type: 00
length: 0024
t.number: 01
t.id: 01
t.attributes.type: 0001
t.attributes.u.attr_16: 0005
t.attributes.type: 0002
t.attributes.u.attr_16: 0001
t.attributes.type: 0004
t.attributes.u.attr_16: 0002
t.attributes.type: 0003
t.attributes.u.attr_16: fde9
t.attributes.type: 000b
t.attributes.u.attr_16: 0001
t.attributes.type: 000c
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 02
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 01
PARSING PAYLOAD type: 0d
next_type: 0d
length: 0014
ke.data: 12f5f28c 457168a9 702d9fe2 74cc0100
DONE PARSING PAYLOAD type: 0d
PARSING PAYLOAD type: 0d
next_type: 0d
length: 0014
ke.data: afcad713 68a1f1c9 6b8696fc 77570100
DONE PARSING PAYLOAD type: 0d
PARSING PAYLOAD type: 0d
next_type: 0d
length: 0014
ke.data: 61d836be 32e03503 eff195fe 8a208a26
DONE PARSING PAYLOAD type: 0d
PARSING PAYLOAD type: 0d
next_type: 04
length: 000c
ke.data: 09002689 dfd6b712
DONE PARSING PAYLOAD type: 0d
PARSING PAYLOAD type: 04
next_type: 05
length: 0084
ke.data:
f45a107c d95b31a2 89074cfc f190feab afdbaa13 1f2942b0 30fbd3a6 e20193d9
24277813 81dc9144 2470d4f7 bb2520db fd67c2e8 a1e083ff b5593dc1 8c4d1f21
2d8121f5 eb14f543 c38ea94a 2c3e8cea 2b27a75e 22772343 80665b9d b8b63d69
c9cb62de ac1c63f0 0e1e95cd aed79c6e a263697e b4fa8ae2 01a1fd86 06556b20
DONE PARSING PAYLOAD type: 04
PARSING PAYLOAD type: 05
next_type: 0a
length: 000c
id.type: 01
id.protocol: 11
id.port: 0000
id.data: dc473864
DONE PARSING PAYLOAD type: 05
PARSING PAYLOAD type: 0a
next_type: 08
length: 0018
ke.data: 5da84ab5 43b3b9b7 fb14668e a4bddcb2 c2a615f7
DONE PARSING PAYLOAD type: 0a
PARSING PAYLOAD type: 08
next_type: 00
length: 0014
ke.data: 2ab04837 d25634ce 6f76a05c 69851e40
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 00
PARSE_OK
IKE SA selected 3des-md5
skeyid: 3cafe4e0 44d41f9c 12fa445f 99bbdb2e
returned_hash: ec2987c2 4c16ca47 e62769c6 d9657b06
dh_shared_secret:
09747133 387a7817 e425a98f df3d5cbe a262a616 88c7825b 576d4f70 d2064dcb
1c50dae2 0a35ed28 64462a9d 6219a5d6 4e6e68ff 6d06360b e98624f5 0bada9fc
bf68860a 4a1d248b 0e4b9940 b3dc1c20 1c66d7b1 62fa5cf0 be22f974 9af0ddd0
b55dde90 083764e4 8982ad8b b3a9b8fc 790cbd60 d21dc883 9853a2dd 6eb366b4
skeyid_d: fd12f2a8 51548cb7 cd0a5cbd afe4ebf3
skeyid_a: e800ebb8 a5c00c75 6dd93ad4 2d2dcdf7
skeyid_e: 97523527 3deca5b6 59b43f60 18c61fb5
enc-key: 7d43abc8 91820820 d0fb1dbe 66543e11 832aa6c4 0fad12bd
current_iv: 893b001e ec415d8f
S4.5
NAT status: no NAT-T VID seen
size = 88, blksz = 8, padding = 0
sending: ========================>
BEGIN_PARSE
i_cookie: de2b6cad e1375ed2
r_cookie: 941f91a3 32e13503
payload: 08
isakmp_version: 10
exchange_type: 04
flags: 01
message_id: 00000000
len: 00000074
PARSING PAYLOAD type: 08
next_type: 0b
length: 0014
ke.data: ec2987c2 4c16ca47 e62769c6 d9657b06
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 0b
next_type: 0d
length: 001c
n.doi: 00000001
n.protocol: 01
n.spi_length: 10
n.type: 6002
n.spi: de2b6cad e1375ed2 941f91a3 32e13503
n.data:
DONE PARSING PAYLOAD type: 0b
PARSING PAYLOAD type: 0d
next_type: 0d
length: 0014
ke.data: 126e1f57 7291153b 20485f7f 155b4bc8
DONE PARSING PAYLOAD type: 0d
PARSING PAYLOAD type: 0d
next_type: 00
length: 0014
ke.data: 12f5f28c 457168a9 702d9fe2 74cc0100
DONE PARSING PAYLOAD type: 0d
PARSING PAYLOAD type: 00
PARSE_OK
initial_iv: 8044c04c d740d8ae
S4.6
S5
S5.1
S5.2
BEGIN_PARSE
i_cookie: de2b6cad e1375ed2
r_cookie: 941f91a3 32e13503
payload: 08
isakmp_version: 10
exchange_type: 05
flags: 01
message_id: 0cc4a3c7
len: 0000005c
PARSING PAYLOAD type: 08
next_type: 0b
length: 0014
ke.data: e8056d7e 8e0fef4e 2e507d34 9af4af5f
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 0b
next_type: 00
length: 0028
n.doi: 00000001
n.protocol: 01
n.spi_length: 10
n.type: 6000
n.spi: de2b6cad e1375ed2 941f91a3 32e13503
n.data: 800b0001 000c0004 00015180
DONE PARSING PAYLOAD type: 0b
PARSING PAYLOAD type: 00
PARSE_OK
hashlen: 16
u.hash.length: 16
expected_hash: e8056d7e 8e0fef4e 2e507d34 9af4af5f
h->u.hash.data: e8056d7e 8e0fef4e 2e507d34 9af4af5f
got responder liftime notice, ignoring..
S5.2
BEGIN_PARSE
i_cookie: de2b6cad e1375ed2
r_cookie: 941f91a3 32e13503
payload: 08
isakmp_version: 10
exchange_type: 06
flags: 01
message_id: 83eb9a93
len: 00000044
PARSING PAYLOAD type: 08
next_type: 0e
length: 0014
ke.data: b3b7c0b6 dcb60f62 6d89c225 e89dd0a2
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 0e
next_type: 00
length: 0010
modecfg.type: 01
t.id: 0000
t.attributes.type: 4089
(not dumping xauth data length)
(not dumping xauth data)
t.attributes.type: 408a
(not dumping xauth data length)
(not dumping xauth data)
DONE PARSING PAYLOAD type: 0e
PARSING PAYLOAD type: 00
PARSE_OK
hashlen: 16
u.hash.length: 16
expected_hash: b3b7c0b6 dcb60f62 6d89c225 e89dd0a2
h->u.hash.data: b3b7c0b6 dcb60f62 6d89c225 e89dd0a2
S5.3
S5.4
S5.5
size = 50, blksz = 8, padding = 6
sending: ========================>
BEGIN_PARSE
i_cookie: de2b6cad e1375ed2
r_cookie: 941f91a3 32e13503
payload: 08
isakmp_version: 10
exchange_type: 06
flags: 01
message_id: 83eb9a93
len: 00000054
PARSING PAYLOAD type: 08
next_type: 0e
length: 0014
ke.data: 81ea4a68 f4fa713e a26005e3 3213afb8
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 0e
next_type: 00
length: 001e
modecfg.type: 02
t.id: 0000
t.attributes.type: 408a
(not dumping xauth data length)
(not dumping xauth data)
t.attributes.type: 4089
(not dumping xauth data length)
(not dumping xauth data)
DONE PARSING PAYLOAD type: 0e
PARSING PAYLOAD type: 00
PARSE_OK
S5.2
BEGIN_PARSE
i_cookie: de2b6cad e1375ed2
r_cookie: 941f91a3 32e13503
payload: 08
isakmp_version: 10
exchange_type: 06
flags: 01
message_id: ebf7316c
len: 00000044
PARSING PAYLOAD type: 08
next_type: 0e
length: 0014
ke.data: 2e9f02ee 02c5f4dd 107473b3 30375573
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 0e
next_type: 00
length: 000c
modecfg.type: 03
t.id: 0000
t.attributes.type: 408f
(not dumping xauth data)
DONE PARSING PAYLOAD type: 0e
PARSING PAYLOAD type: 00
PARSE_OK
hashlen: 16
u.hash.length: 16
expected_hash: 2e9f02ee 02c5f4dd 107473b3 30375573
h->u.hash.data: 2e9f02ee 02c5f4dd 107473b3 30375573
S5.3
S5.6
size = 32, blksz = 8, padding = 0
sending: ========================>
BEGIN_PARSE
i_cookie: de2b6cad e1375ed2
r_cookie: 941f91a3 32e13503
payload: 08
isakmp_version: 10
exchange_type: 06
flags: 01
message_id: ebf7316c
len: 0000003c
PARSING PAYLOAD type: 08
next_type: 0e
length: 0014
ke.data: 31d251aa 1dd0b0c0 a06b85dd 649f55b3
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 0e
next_type: 00
length: 000c
modecfg.type: 04
t.id: 0000
t.attributes.type: 408f
(not dumping xauth data)
DONE PARSING PAYLOAD type: 0e
PARSING PAYLOAD type: 00
PARSE_OK
S5.7
S6
size = 121, blksz = 8, padding = 7
sending: ========================>
BEGIN_PARSE
i_cookie: de2b6cad e1375ed2
r_cookie: 941f91a3 32e13503
payload: 08
isakmp_version: 10
exchange_type: 06
flags: 01
message_id: 82216dc9
len: 0000009c
PARSING PAYLOAD type: 08
next_type: 0e
length: 0014
ke.data: 3754fe69 40e0f67e 83cac1a2 db1807c0
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 0e
next_type: 00
length: 0065
modecfg.type: 01
t.id: 0014
t.attributes.type: 0001
t.attributes.u.lots.length: 0000
t.attributes.u.lots.data:
t.attributes.type: 0002
t.attributes.u.lots.length: 0000
t.attributes.u.lots.data:
t.attributes.type: 0003
t.attributes.u.lots.length: 0000
t.attributes.u.lots.data:
t.attributes.type: 0004
t.attributes.u.lots.length: 0000
t.attributes.u.lots.data:
t.attributes.type: 7002
t.attributes.u.lots.length: 0000
t.attributes.u.lots.data:
t.attributes.type: 7007
t.attributes.u.lots.length: 0000
t.attributes.u.lots.data:
t.attributes.type: 7000
t.attributes.u.lots.length: 0000
t.attributes.u.lots.data:
t.attributes.type: 700a
t.attributes.u.lots.length: 0015
t.attributes.u.lots.data: 6c6f6361 6c686f73 742e6c6f 63616c64 6f6d6169 6e
t.attributes.type: 0007
t.attributes.u.lots.length: 0024
t.attributes.u.lots.data:
43697363 6f205379 7374656d 73205650 4e20436c 69656e74 20302e33 2e313a4c
696e7578
DONE PARSING PAYLOAD type: 0e
PARSING PAYLOAD type: 00
PARSE_OK
BEGIN_PARSE
i_cookie: de2b6cad e1375ed2
r_cookie: 941f91a3 32e13503
payload: 08
isakmp_version: 10
exchange_type: 06
flags: 01
message_id: 82216dc9
len: 0000017c
PARSING PAYLOAD type: 08
next_type: 0e
length: 0014
ke.data: 87ee91c2 816da3f0 656f21af 3de5cf20
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 0e
next_type: 00
length: 0149
modecfg.type: 02
t.id: 0014
t.attributes.type: 0001
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: ac1f644c
t.attributes.type: 0003
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: d3e8be01
t.attributes.type: 0003
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: d3e8bf01
t.attributes.type: 0004
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: d3e8be08
t.attributes.type: 0004
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: d3e8bf08
t.attributes.type: 7002
t.attributes.u.lots.length: 0008
t.attributes.u.lots.data: 6e657867 2e6e6574
t.attributes.type: 0007
t.attributes.u.lots.length: 0109
t.attributes.u.lots.data:
43697363 6f20496e 7465726e 6574776f 726b204f 70657261 74696e67 20537973
74656d20 536f6674 77617265 200a494f 53202874 6d292052 53502053 6f667477
61726520 28525350 2d494b39 4f335356 2d4d292c 20566572 73696f6e 2031322e
32283135 29543134 2c205245 4c454153 4520534f 46545741 52452028 66633429
0a546563 686e6963 616c2053 7570706f 72743a20 68747470 3a2f2f77 77772e63
6973636f 2e636f6d 2f746563 68737570 706f7274 0a436f70 79726967 68742028
63292031 3938362d 32303034 20627920 63697363 6f205379 7374656d 732c2049
6e632e0a 436f6d70 696c6564 20536174 2032382d 4175672d 30342031 393a3134
20627920 636d6f6e 67
DONE PARSING PAYLOAD type: 0e
PARSING PAYLOAD type: 00
PARSE_OK
hashlen: 16
u.hash.length: 16
expected_hash: 87ee91c2 816da3f0 656f21af 3de5cf20
h->u.hash.data: 87ee91c2 816da3f0 656f21af 3de5cf20
Remote Application Version: Cisco Internetwork Operating System Software
IOS (tm) RSP Software (RSP-IK9O3SV-M), Version 12.2(15)T14, RELEASE
SOFTWARE (fc4)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2004 by cisco Systems, Inc.
Compiled Sat 28-Aug-04 19:14 by cmong
got address 172.31.100.76
S7
S7.1
S7.2
size = 428, blksz = 8, padding = 4
sending: ========================>
BEGIN_PARSE
i_cookie: de2b6cad e1375ed2
r_cookie: 941f91a3 32e13503
payload: 08
isakmp_version: 10
exchange_type: 20
flags: 01
message_id: 0b651e73
len: 000001cc
PARSING PAYLOAD type: 08
next_type: 01
length: 0014
ke.data: 02248205 55b576ce 60f22eb6 9abaa852
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 01
next_type: 0a
length: 0164
sa.doi: 00000001
sa.situation: 00000001
PARSING PAYLOAD type: 02
next_type: 02
length: 002c
p.number: 00
p.prot_id: 03
p.spi_size: 04
length: 01
p.spi: caef254c
PARSING PAYLOAD type: 03
next_type: 00
length: 0020
t.number: 00
t.id: 0c
t.attributes.type: 0006
t.attributes.u.attr_16: 0100
t.attributes.type: 0004
t.attributes.u.attr_16: 0001
t.attributes.type: 0005
t.attributes.u.attr_16: 0002
t.attributes.type: 0001
t.attributes.u.attr_16: 0001
t.attributes.type: 0002
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 02
PARSING PAYLOAD type: 02
next_type: 02
length: 002c
p.number: 01
p.prot_id: 03
p.spi_size: 04
length: 01
p.spi: caef254c
PARSING PAYLOAD type: 03
next_type: 00
length: 0020
t.number: 00
t.id: 0c
t.attributes.type: 0006
t.attributes.u.attr_16: 0100
t.attributes.type: 0004
t.attributes.u.attr_16: 0001
t.attributes.type: 0005
t.attributes.u.attr_16: 0001
t.attributes.type: 0001
t.attributes.u.attr_16: 0001
t.attributes.type: 0002
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 02
PARSING PAYLOAD type: 02
next_type: 02
length: 002c
p.number: 02
p.prot_id: 03
p.spi_size: 04
length: 01
p.spi: caef254c
PARSING PAYLOAD type: 03
next_type: 00
length: 0020
t.number: 00
t.id: 0c
t.attributes.type: 0006
t.attributes.u.attr_16: 00c0
t.attributes.type: 0004
t.attributes.u.attr_16: 0001
t.attributes.type: 0005
t.attributes.u.attr_16: 0002
t.attributes.type: 0001
t.attributes.u.attr_16: 0001
t.attributes.type: 0002
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 02
PARSING PAYLOAD type: 02
next_type: 02
length: 002c
p.number: 03
p.prot_id: 03
p.spi_size: 04
length: 01
p.spi: caef254c
PARSING PAYLOAD type: 03
next_type: 00
length: 0020
t.number: 00
t.id: 0c
t.attributes.type: 0006
t.attributes.u.attr_16: 00c0
t.attributes.type: 0004
t.attributes.u.attr_16: 0001
t.attributes.type: 0005
t.attributes.u.attr_16: 0001
t.attributes.type: 0001
t.attributes.u.attr_16: 0001
t.attributes.type: 0002
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 02
PARSING PAYLOAD type: 02
next_type: 02
length: 002c
p.number: 04
p.prot_id: 03
p.spi_size: 04
length: 01
p.spi: caef254c
PARSING PAYLOAD type: 03
next_type: 00
length: 0020
t.number: 00
t.id: 0c
t.attributes.type: 0006
t.attributes.u.attr_16: 0080
t.attributes.type: 0004
t.attributes.u.attr_16: 0001
t.attributes.type: 0005
t.attributes.u.attr_16: 0002
t.attributes.type: 0001
t.attributes.u.attr_16: 0001
t.attributes.type: 0002
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 02
PARSING PAYLOAD type: 02
next_type: 02
length: 002c
p.number: 05
p.prot_id: 03
p.spi_size: 04
length: 01
p.spi: caef254c
PARSING PAYLOAD type: 03
next_type: 00
length: 0020
t.number: 00
t.id: 0c
t.attributes.type: 0006
t.attributes.u.attr_16: 0080
t.attributes.type: 0004
t.attributes.u.attr_16: 0001
t.attributes.type: 0005
t.attributes.u.attr_16: 0001
t.attributes.type: 0001
t.attributes.u.attr_16: 0001
t.attributes.type: 0002
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 02
PARSING PAYLOAD type: 02
next_type: 02
length: 0028
p.number: 06
p.prot_id: 03
p.spi_size: 04
length: 01
p.spi: caef254c
PARSING PAYLOAD type: 03
next_type: 00
length: 001c
t.number: 00
t.id: 03
t.attributes.type: 0004
t.attributes.u.attr_16: 0001
t.attributes.type: 0005
t.attributes.u.attr_16: 0002
t.attributes.type: 0001
t.attributes.u.attr_16: 0001
t.attributes.type: 0002
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 02
PARSING PAYLOAD type: 02
next_type: 00
length: 0028
p.number: 07
p.prot_id: 03
p.spi_size: 04
length: 01
p.spi: caef254c
PARSING PAYLOAD type: 03
next_type: 00
length: 001c
t.number: 00
t.id: 03
t.attributes.type: 0004
t.attributes.u.attr_16: 0001
t.attributes.type: 0005
t.attributes.u.attr_16: 0001
t.attributes.type: 0001
t.attributes.u.attr_16: 0001
t.attributes.type: 0002
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 02
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 01
PARSING PAYLOAD type: 0a
next_type: 05
length: 0018
ke.data: 27030dd5 06fe48f8 9112b138 8fc9bb78 84921a81
DONE PARSING PAYLOAD type: 0a
PARSING PAYLOAD type: 05
next_type: 05
length: 000c
id.type: 01
id.protocol: 00
id.port: 0000
id.data: ac1f644c
DONE PARSING PAYLOAD type: 05
PARSING PAYLOAD type: 05
next_type: 00
length: 0010
id.type: 04
id.protocol: 00
id.port: 0000
id.data: 00000000 00000000
DONE PARSING PAYLOAD type: 05
PARSING PAYLOAD type: 00
PARSE_OK
S7.3
BEGIN_PARSE
i_cookie: de2b6cad e1375ed2
r_cookie: 941f91a3 32e13503
payload: 08
isakmp_version: 10
exchange_type: 20
flags: 01
message_id: 0b651e73
len: 000000cc
PARSING PAYLOAD type: 08
next_type: 01
length: 0014
ke.data: 7efd2d42 7068588a 3da9834f a3c9baf1
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 01
next_type: 0a
length: 0038
sa.doi: 00000001
sa.situation: 00000001
PARSING PAYLOAD type: 02
next_type: 00
length: 002c
p.number: 01
p.prot_id: 03
p.spi_size: 04
length: 01
p.spi: 47504d95
PARSING PAYLOAD type: 03
next_type: 00
length: 0020
t.number: 01
t.id: 0c
t.attributes.type: 0004
t.attributes.u.attr_16: 0001
t.attributes.type: 0001
t.attributes.u.attr_16: 0001
t.attributes.type: 0002
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
t.attributes.type: 0005
t.attributes.u.attr_16: 0002
t.attributes.type: 0006
t.attributes.u.attr_16: 0100
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 02
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 01
PARSING PAYLOAD type: 0a
next_type: 05
length: 0018
ke.data: db5bfb1e 48e204b7 f247634a 579f729f 781e94b4
DONE PARSING PAYLOAD type: 0a
PARSING PAYLOAD type: 05
next_type: 05
length: 000c
id.type: 01
id.protocol: 00
id.port: 0000
id.data: ac1f644c
DONE PARSING PAYLOAD type: 05
PARSING PAYLOAD type: 05
next_type: 0b
length: 0010
id.type: 04
id.protocol: 00
id.port: 0000
id.data: 00000000 00000000
DONE PARSING PAYLOAD type: 05
PARSING PAYLOAD type: 0b
next_type: 00
length: 0028
n.doi: 00000001
n.protocol: 03
n.spi_length: 04
n.type: 6000
n.spi: 47504d95
n.data: 80010001 00020004 00000e10 80010002 00020004 00465000
DONE PARSING PAYLOAD type: 0b
PARSING PAYLOAD type: 00
PARSE_OK
hashlen: 16
u.hash.length: 16
expected_hash: 7efd2d42 7068588a 3da9834f a3c9baf1
h->u.hash.data: 7efd2d42 7068588a 3da9834f a3c9baf1
S7.4
S7.5
S7.6
IPSEC SA selected aes256-sha1
authing NULL package!
size = 20, blksz = 8, padding = 4
sending: ========================>
BEGIN_PARSE
i_cookie: de2b6cad e1375ed2
r_cookie: 941f91a3 32e13503
payload: 08
isakmp_version: 10
exchange_type: 20
flags: 01
message_id: 0b651e73
len: 00000034
PARSING PAYLOAD type: 08
next_type: 00
length: 0014
ke.data: 3e1f9eda 4bf2cee4 1b3be706 d157f661
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 00
PARSE_OK
S7.7
size = 68, blksz = 8, padding = 4
sending: ========================>
BEGIN_PARSE
i_cookie: de2b6cad e1375ed2
r_cookie: 941f91a3 32e13503
payload: 08
isakmp_version: 10
exchange_type: 05
flags: 01
message_id: e6167958
len: 00000064
PARSING PAYLOAD type: 08
next_type: 0c
length: 0014
ke.data: 547a067e 09e35b75 316eb2ea cc6ba608
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 0c
next_type: 0c
length: 0014
n.doi: 00000001
n.protocol: 03
n.spi_length: 04
d.num_spi: 0002
d.spi: caef254c
d.spi: 47504d95
DONE PARSING PAYLOAD type: 0c
PARSING PAYLOAD type: 0c
next_type: 00
length: 001c
n.doi: 00000001
n.protocol: 01
n.spi_length: 10
d.num_spi: 0001
d.spi: de2b6cad e1375ed2 941f91a3 32e13503
DONE PARSING PAYLOAD type: 0c
PARSING PAYLOAD type: 00
PARSE_OK
S7.8
S7.9
generating 52 bytes keymat (cnt=4)
generating 52 bytes keymat (cnt=4)
S7.10
tous.enc_secret: 0a2ad0d8 2bba4fe9 2e594f87 d0016adb 38fc9973 843aa8ff
97679154 252edf1c
tous.auth_secret: 09a008ef 116832c6 12751916 7020e768 1901f51e
tothem.enc_secret: 746a3e43 b92e609a d7a0e976 19abfb02 ab9e5a25 3fa3e0df
982c07ca 2bdcda58
tothem.auth_secret: 0f7c29a8 f72b7c61 7109a1f4 b9663c12 6c047afa
VPNC started in background (pid: 7135)...
== cisco ios log --disable-natt ==
1w4d: ISAKMP (0:0): received packet from 172.31.182.33 dport 500 sport
500 Global (N) NEW SA
1w4d: ISAKMP: Created a peer struct for 172.31.182.33, peer port 500
1w4d: ISAKMP: Locking peer struct 0x4482F598, IKE refcount 1 for
crypto_ikmp_config_initialize_sa
1w4d: ISAKMP (0:0): Setting client config settings 44769EA4
1w4d: ISAKMP (0:0): (Re)Setting client xauth list and state
1w4d: ISAKMP: local port 500, remote port 500
1w4d: ISAKMP: insert sa successfully sa = 4483BEC0
1w4d: ISAKMP (6:1): processing SA payload. message ID = 0
1w4d: ISAKMP (6:1): processing ID payload. message ID = 0
1w4d: ISAKMP (6:1): peer matches xauth profile
1w4d: ISAKMP: Looking for a matching key for 172.31.182.33 in default
1w4d: ISAKMP (6:1): (Re)Setting client xauth list userauthen and state
1w4d: ISAKMP (6:1): processing vendor id payload
1w4d: ISAKMP (6:1): vendor ID seems Unity/DPD but major 242 mismatch
1w4d: ISAKMP (6:1): vendor ID is XAUTH
1w4d: ISAKMP (6:1): processing vendor id payload
1w4d: ISAKMP (6:1): vendor ID is Unity
1w4d: ISAKMP (6:1) Authentication by xauth preshared
1w4d: ISAKMP (6:1): Checking ISAKMP transform 0 against priority 1 policy
1w4d: ISAKMP: keylength of 256
1w4d: ISAKMP: encryption AES-CBC
1w4d: ISAKMP: hash SHA
1w4d: ISAKMP: auth XAUTHInitPreShared
1w4d: ISAKMP: default group 2
1w4d: ISAKMP: life type in seconds
1w4d: ISAKMP: life duration (VPI) of 0x0 0x1 0x51 0x80
1w4d: ISAKMP (6:1): Encryption algorithm offered does not match policy!
1w4d: ISAKMP (6:1): atts are not acceptable. Next payload is 3
1w4d: ISAKMP (6:1): Checking ISAKMP transform 1 against priority 1 policy
1w4d: ISAKMP: keylength of 256
1w4d: ISAKMP: encryption AES-CBC
1w4d: ISAKMP: hash MD5
1w4d: ISAKMP: auth XAUTHInitPreShared
1w4d: ISAKMP: default group 2
1w4d: ISAKMP: life type in seconds
1w4d: ISAKMP: life duration (VPI) of 0x0 0x1 0x51 0x80
1w4d: ISAKMP (6:1): Encryption algorithm offered does not match policy!
1w4d: ISAKMP (6:1): atts are not acceptable. Next payload is 3
1w4d: ISAKMP (6:1): Checking ISAKMP transform 2 against priority 1 policy
1w4d: ISAKMP: keylength of 192
1w4d: ISAKMP: encryption AES-CBC
1w4d: ISAKMP: hash SHA
1w4d: ISAKMP: auth XAUTHInitPreShared
1w4d: ISAKMP: default group 2
1w4d: ISAKMP: life type in seconds
1w4d: ISAKMP: life duration (VPI) of 0x0 0x1 0x51 0x80
1w4d: ISAKMP (6:1): Encryption algorithm offered does not match policy!
1w4d: ISAKMP (6:1): atts are not acceptable. Next payload is 3
1w4d: ISAKMP (6:1): Checking ISAKMP transform 3 against priority 1 policy
1w4d: ISAKMP: keylength of 192
1w4d: ISAKMP: encryption AES-CBC
1w4d: ISAKMP: hash MD5
1w4d: ISAKMP: auth XAUTHInitPreShared
1w4d: ISAKMP: default group 2
1w4d: ISAKMP: life type in seconds
1w4d: ISAKMP: life duration (VPI) of 0x0 0x1 0x51 0x80
1w4d: ISAKMP (6:1): Encryption algorithm offered does not match policy!
1w4d: ISAKMP (6:1): atts are not acceptable. Next payload is 3
1w4d: ISAKMP (6:1): Checking ISAKMP transform 4 against priority 1 policy
1w4d: ISAKMP: keylength of 128
1w4d: ISAKMP: encryption AES-CBC
1w4d: ISAKMP: hash SHA
1w4d: ISAKMP: auth XAUTHInitPreShared
1w4d: ISAKMP: default group 2
1w4d: ISAKMP: life type in seconds
1w4d: ISAKMP: life duration (VPI) of 0x0 0x1 0x51 0x80
1w4d: ISAKMP (6:1): Encryption algorithm offered does not match policy!
1w4d: ISAKMP (6:1): atts are not acceptable. Next payload is 3
1w4d: ISAKMP (6:1): Checking ISAKMP transform 5 against priority 1 policy
1w4d: ISAKMP: keylength of 128
1w4d: ISAKMP: encryption AES-CBC
1w4d: ISAKMP: hash MD5
1w4d: ISAKMP: auth XAUTHInitPreShared
1w4d: ISAKMP: default group 2
1w4d: ISAKMP: life type in seconds
1w4d: ISAKMP: life duration (VPI) of 0x0 0x1 0x51 0x80
1w4d: ISAKMP (6:1): Encryption algorithm offered does not match policy!
1w4d: ISAKMP (6:1): atts are not acceptable. Next payload is 3
1w4d: ISAKMP (6:1): Checking ISAKMP transform 6 against priority 1 policy
1w4d: ISAKMP: encryption 3DES-CBC
1w4d: ISAKMP: hash SHA
1w4d: ISAKMP: auth XAUTHInitPreShared
1w4d: ISAKMP: default group 2
1w4d: ISAKMP: life type in seconds
1w4d: ISAKMP: life duration (VPI) of 0x0 0x1 0x51 0x80
1w4d: ISAKMP (6:1): Hash algorithm offered does not match policy!
1w4d: ISAKMP (6:1): atts are not acceptable. Next payload is 3
1w4d: ISAKMP (6:1): Checking ISAKMP transform 7 against priority 1 policy
1w4d: ISAKMP: encryption 3DES-CBC
1w4d: ISAKMP: hash MD5
1w4d: ISAKMP: auth XAUTHInitPreShared
1w4d: ISAKMP: default group 2
1w4d: ISAKMP: life type in seconds
1w4d: ISAKMP: life duration (VPI) of 0x0 0x1 0x51 0x80
1w4d: ISAKMP (6:1): atts are acceptable. Next payload is 0
1w4d: ISAKMP (6:1): processing KE payload. message ID = 0
1w4d: ISAKMP (6:1): processing NONCE payload. message ID = 0
1w4d: ISAKMP (6:1): processing vendor id payload
1w4d: ISAKMP (6:1): vendor ID seems Unity/DPD but major 242 mismatch
1w4d: ISAKMP (6:1): vendor ID is XAUTH
1w4d: ISAKMP (6:1): processing vendor id payload
1w4d: ISAKMP (6:1): vendor ID is Unity
1w4d: ISAKMP (6:1): Input = IKE_MESG_FROM_PEER, IKE_AM_EXCH
1w4d: ISAKMP (6:1): Old State = IKE_READY New State = IKE_R_AM_AAA_AWAIT
1w4d: ISAKMP: got callback 1
1w4d: ISAKMP (6:1): SKEYID state generated
1w4d: ISAKMP (6:1): SA is doing pre-shared key authentication plus XAUTH
using id type ID_IPV4_ADDR
1w4d: ISAKMP (1): ID payload
next-payload : 10
type : 1
addr : 220.71.56.100
protocol : 17
port : 0
length : 8
1w4d: ISAKMP (1): Total payload length: 12
1w4d: ISAKMP (6:1): sending packet to 172.31.182.33 my_port 500
peer_port 500 (R) AG_INIT_EXCH
1w4d: ISAKMP (6:1): Input = IKE_MESG_FROM_AAA, PRESHARED_KEY_REPLY
1w4d: ISAKMP (6:1): Old State = IKE_R_AM_AAA_AWAIT New State = IKE_R_AM2
1w4d: ISAKMP (6:1): received packet from 172.31.182.33 dport 500 sport
500 Global (R) AG_INIT_EXCH
1w4d: ISAKMP (6:1): processing HASH payload. message ID = 0
1w4d: ISAKMP (6:1): processing NOTIFY INITIAL_CONTACT protocol 1
spi 0, message ID = 0, sa = 4483BEC0
1w4d: ISAKMP (6:1): Process initial contact,
bring down existing phase 1 and 2 SA's with local 220.71.56.100 remote
172.31.182.33 remote port 500
1w4d: ISAKMP (6:1): returning IP addr to the address pool
1w4d: ISAKMP (6:1): processing vendor id payload
1w4d: ISAKMP (6:1): vendor ID seems Unity/DPD but major 75 mismatch
1w4d: ISAKMP (6:1): processing vendor id payload
1w4d: ISAKMP (6:1): vendor ID is Unity
1w4d: ISAKMP (6:1): SA has been authenticated with 172.31.182.33
1w4d: ISAKMP: Trying to insert a peer 172.31.182.33/500/, and inserted
successfully.
1w4d: ISAKMP: set new node 210601530 to CONF_XAUTH
1w4d: ISAKMP (6:1): sending packet to 172.31.182.33 my_port 500
peer_port 500 (R) QM_IDLE
1w4d: ISAKMP (6:1): purging node 210601530
1w4d: ISAKMP: Sending phase 1 responder lifetime 86400
1w4d: ISAKMP (6:1): Input = IKE_MESG_FROM_PEER, IKE_AM_EXCH
1w4d: ISAKMP (6:1): Old State = IKE_R_AM2 New State = IKE_P1_COMPLETE
1w4d: IPSEC(key_engine): got a queue event...
1w4d: Delete IPsec SA by IC, local 220.71.56.100 remote 172.31.182.33
peer port 500
1w4d: IPSEC(delete_sa): deleting SA,
(sa) sa_dest= 220.71.56.100, sa_prot= 50,
sa_spi= 0x47504D95(1196445077),
sa_trans= esp-aes 256 esp-sha-hmac , sa_conn_id= 2000
1w4d: IPSEC(delete_sa): deleting SA,
(sa) sa_dest= 172.31.182.33, sa_prot= 50,
sa_spi= 0xCAEF254C(3404670284),
sa_trans= esp-aes 256 esp-sha-hmac , sa_conn_id= 2001
1w4d: ISAKMP (6:1): Need XAUTH
1w4d: ISAKMP (6:1): Input = IKE_MESG_INTERNAL, IKE_PHASE1_COMPLETE
1w4d: ISAKMP (6:1): Old State = IKE_P1_COMPLETE New State =
IKE_XAUTH_AAA_START_LOGIN_AWAIT
1w4d: ISAKMP: received ke message (4/1)
1w4d: ISAKMP: Unlocking IPSEC struct 0x447B35E8 notified by IPSec, count 0
1w4d: ISAKMP: returning address 172.31.100.77 to pool
1w4d: ISAKMP: received ke message (3/1)
1w4d: ISAKMP (6:1): Unknown Input: state =
IKE_XAUTH_AAA_START_LOGIN_AWAIT, major, minor = IKE_MESG_FROM_IPSEC,
IKE_PHASE2_DEL
1w4d: ISAKMP: got callback 1
1w4d: ISAKMP: set new node -1532701960 to CONF_XAUTH
1w4d: ISAKMP/xauth: request attribute XAUTH_USER_NAME_V2
1w4d: ISAKMP/xauth: request attribute XAUTH_USER_PASSWORD_V2
1w4d: ISAKMP (6:1): initiating peer config to 172.31.182.33. ID =
-1532701960
1w4d: ISAKMP (6:1): sending packet to 172.31.182.33 my_port 500
peer_port 500 (R) CONF_XAUTH
1w4d: ISAKMP (6:1): Input = IKE_MESG_FROM_AAA, IKE_AAA_START_LOGIN
1w4d: ISAKMP (6:1): Old State = IKE_XAUTH_AAA_START_LOGIN_AWAIT New
State = IKE_XAUTH_REQ_SENT
1w4d: ISAKMP (6:1): received packet from 172.31.182.33 dport 500 sport
500 Global (R) CONF_XAUTH
1w4d: ISAKMP (6:1): processing transaction payload from 172.31.182.33.
message ID = -1532701960
1w4d: ISAKMP: Config payload REPLY
1w4d: ISAKMP/xauth: reply attribute XAUTH_USER_PASSWORD_V2
1w4d: ISAKMP/xauth: reply attribute XAUTH_USER_NAME_V2
1w4d: ISAKMP (6:1): deleting node -1532701960 error FALSE reason "done
with xauth request/reply exchange"
1w4d: ISAKMP (6:1): Input = IKE_MESG_FROM_PEER, IKE_CFG_REPLY
1w4d: ISAKMP (6:1): Old State = IKE_XAUTH_REQ_SENT New State =
IKE_XAUTH_AAA_CONT_LOGIN_AWAIT
1w4d: ISAKMP: got callback 1
1w4d: ISAKMP: set new node 1852532310 to CONF_XAUTH
1w4d: ISAKMP (6:1): initiating peer config to 172.31.182.33. ID = 1852532310
1w4d: ISAKMP (6:1): sending packet to 172.31.182.33 my_port 500
peer_port 500 (R) CONF_XAUTH
1w4d: ISAKMP (6:1): Input = IKE_MESG_FROM_AAA, IKE_AAA_CONT_LOGIN
1w4d: ISAKMP (6:1): Old State = IKE_XAUTH_AAA_CONT_LOGIN_AWAIT New State
= IKE_XAUTH_SET_SENT
1w4d: ISAKMP (6:1): received packet from 172.31.182.33 dport 500 sport
500 Global (R) CONF_XAUTH
1w4d: ISAKMP (6:1): processing transaction payload from 172.31.182.33.
message ID = 1852532310
1w4d: ISAKMP: Config payload ACK
1w4d: ISAKMP (6:1): XAUTH ACK Processed
1w4d: ISAKMP (6:1): deleting node 1852532310 error FALSE reason "done
with transaction"
1w4d: ISAKMP (6:1): Input = IKE_MESG_FROM_PEER, IKE_CFG_ACK
1w4d: ISAKMP (6:1): Old State = IKE_XAUTH_SET_SENT New State =
IKE_P1_COMPLETE
1w4d: ISAKMP (6:1): received packet from 172.31.182.33 dport 500 sport
500 Global (R) QM_IDLE
1w4d: ISAKMP: set new node 481543844 to QM_IDLE
1w4d: ISAKMP (6:1): processing transaction payload from 172.31.182.33.
message ID = 481543844
1w4d: ISAKMP: Config payload REQUEST
1w4d: ISAKMP (6:1): checking request:
1w4d: ISAKMP: IP4_ADDRESS
1w4d: ISAKMP: IP4_NETMASK
1w4d: ISAKMP: IP4_DNS
1w4d: ISAKMP: IP4_NBNS
1w4d: ISAKMP: DEFAULT_DOMAIN
1w4d: ISAKMP: UNKNOWN Unknown Attr: 0x7007
1w4d: ISAKMP: UNKNOWN Unknown Attr: 0x7000
1w4d: ISAKMP: UNKNOWN Unknown Attr: 0x700A
1w4d: ISAKMP: APPLICATION_VERSION
1w4d: ISAKMP (6:1): Input = IKE_MESG_FROM_PEER, IKE_CFG_REQUEST
1w4d: ISAKMP (6:1): Old State = IKE_P1_COMPLETE New State =
IKE_CONFIG_AUTHOR_AAA_AWAIT
1w4d: ISAKMP (6:1): Input = IKE_MESG_INTERNAL, IKE_PHASE1_COMPLETE
1w4d: ISAKMP (6:1): Old State = IKE_CONFIG_AUTHOR_AAA_AWAIT New State =
IKE_CONFIG_AUTHOR_AAA_AWAIT
1w4d: ISAKMP: got callback 1
1w4d: ISAKMP (6:1): attributes sent in message:
1w4d: Address: 0.2.0.0
1w4d: ISAKMP (6:1): allocating address 172.31.100.81
1w4d: ISAKMP: Sending private address: 172.31.100.81
1w4d: ISAKMP: Sending IP4_DNS server address: 172.31.190.1
1w4d: ISAKMP: Sending IP4_DNS server address: 172.31.191.1
1w4d: ISAKMP: Sending IP4_NBNS server address: 172.31.190.8
1w4d: ISAKMP: Sending IP4_NBNS server address: 172.31.191.8
1w4d: ISAKMP: Sending DEFAULT_DOMAIN default domain name: nexg.net
1w4d: ISAKMP (6/1): Unknown Attr: UNKNOWN (0x7007)
1w4d: ISAKMP (6/1): Unknown Attr: UNKNOWN (0x7000)
1w4d: ISAKMP (6/1): Unknown Attr: UNKNOWN (0x700A)
1w4d: ISAKMP: Sending APPLICATION_VERSION string: Cisco Internetwork
Operating System Software
IOS (tm) RSP Software (RSP-IK9O3SV-M), Version 12.2(15)T14, RELEASE
SOFTWARE (fc4)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2004 by cisco Systems, Inc.
Compiled Sat 28-Aug-04 19:14 by cmong
1w4d: ISAKMP (6:1): responding to peer config from 172.31.182.33. ID =
481543844
1w4d: ISAKMP (6:1): sending packet to 172.31.182.33 my_port 500
peer_port 500 (R) CONF_ADDR
1w4d: ISAKMP (6:1): deleting node 481543844 error FALSE reason ""
1w4d: ISAKMP (6:1): Input = IKE_MESG_FROM_AAA, IKE_AAA_GROUP_ATTR
1w4d: ISAKMP (6:1): Old State = IKE_CONFIG_AUTHOR_AAA_AWAIT New State =
IKE_P1_COMPLETE
1w4d: ISAKMP (6:1): received packet from 172.31.182.33 dport 500 sport
500 Global (R) QM_IDLE
1w4d: ISAKMP: set new node -49322920 to QM_IDLE
1w4d: ISAKMP (6:1): processing HASH payload. message ID = -49322920
1w4d: ISAKMP (6:1): processing SA payload. message ID = -49322920
1w4d: ISAKMP (6:1): Checking IPSec proposal 0
1w4d: ISAKMP: transform 0, ESP_AES
1w4d: ISAKMP: attributes in transform:
1w4d: ISAKMP: key length is 256
1w4d: ISAKMP: encaps is 1
1w4d: ISAKMP: authenticator is HMAC-SHA
1w4d: ISAKMP: SA life type in seconds
1w4d: ISAKMP: SA life duration (VPI) of 0x0 0x1 0x51 0x80
1w4d: ISAKMP (6:1): atts are acceptable.
1w4d: IPSEC(validate_proposal_request): proposal part #1,
(key eng. msg.) INBOUND local= 220.71.56.100, remote= 172.31.182.33,
local_proxy= 0.0.0.0/0.0.0.0/0/0 (type=4),
remote_proxy= 172.31.100.81/255.255.255.255/0/0 (type=1),
protocol= ESP, transform= esp-aes 256 esp-sha-hmac ,
lifedur= 0s and 0kb,
spi= 0x0(0), conn_id= 0, keysize= 256, flags= 0x2
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: ISAKMP (6:1): processing NONCE payload. message ID = -49322920
1w4d: ISAKMP (6:1): processing ID payload. message ID = -49322920
1w4d: ISAKMP (6:1): processing ID payload. message ID = -49322920
1w4d: ISAKMP (6:1): asking for 1 spis from ipsec
1w4d: ISAKMP (6:1): Node -49322920, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
1w4d: ISAKMP (6:1): Old State = IKE_QM_READY New State = IKE_QM_SPI_STARVE
1w4d: IPSEC(key_engine): got a queue event...
1w4d: IPSEC(spi_response): getting spi 1081526423 for SA
from 220.71.56.100 to 172.31.182.33 for prot 3
1w4d: ISAKMP: received ke message (2/1)
1w4d: ISAKMP (6:1): sending packet to 172.31.182.33 my_port 500
peer_port 500 (R) QM_IDLE
1w4d: ISAKMP (6:1): Node -49322920, Input = IKE_MESG_FROM_IPSEC,
IKE_SPI_REPLY
1w4d: ISAKMP (6:1): Old State = IKE_QM_SPI_STARVE New State = IKE_QM_R_QM2
1w4d: ISAKMP (6:1): received packet from 172.31.182.33 dport 500 sport
500 Global (R) QM_IDLE
1w4d: ISAKMP: Locking peer struct 0x4482F598, IPSEC refcount 1 for for
stuff_ke
1w4d: ISAKMP (6:1): Creating IPSec SAs
1w4d: inbound SA from 172.31.182.33 to 220.71.56.100 (f/i) 0/ 0
(proxy 172.31.100.81 to 0.0.0.0)
1w4d: has spi 0x4076C897 and conn_id 2000 and flags 2
1w4d: lifetime of 86400 seconds
1w4d: has client flags 0x0
1w4d: outbound SA from 220.71.56.100 to 172.31.182.33 (f/i) 0/ 0 (proxy
0.0.0.0 to 172.31.100.81 )
1w4d: has spi -1429735299 and conn_id 2001 and flags A
1w4d: lifetime of 86400 seconds
1w4d: has client flags 0x0
1w4d: ISAKMP (6:1): deleting node -49322920 error FALSE reason "quick
mode done (await)"
1w4d: ISAKMP (6:1): Node -49322920, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
1w4d: ISAKMP (6:1): Old State = IKE_QM_R_QM2 New State =
IKE_QM_PHASE2_COMPLETE
1w4d: IPSEC(key_engine): got a queue event...
1w4d: IPSEC(initialize_sas): ,
(key eng. msg.) INBOUND local= 220.71.56.100, remote= 172.31.182.33,
local_proxy= 0.0.0.0/0.0.0.0/0/0 (type=4),
remote_proxy= 172.31.100.81/0.0.0.0/0/0 (type=1),
protocol= ESP, transform= esp-aes 256 esp-sha-hmac ,
lifedur= 86400s and 0kb,
spi= 0x4076C897(1081526423), conn_id= 2000, keysize= 256, flags= 0x2
1w4d: IPSEC(initialize_sas): ,
(key eng. msg.) OUTBOUND local= 220.71.56.100, remote= 172.31.182.33,
local_proxy= 0.0.0.0/0.0.0.0/0/0 (type=4),
remote_proxy= 172.31.100.81/0.0.0.0/0/0 (type=1),
protocol= ESP, transform= esp-aes 256 esp-sha-hmac ,
lifedur= 86400s and 0kb,
spi= 0xAAC7F87D(2865231997), conn_id= 2001, keysize= 256, flags= 0xA
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(add mtree): src 0.0.0.0, dest 172.31.100.81, dest_port 0
1w4d: IPSEC(create_sa): sa created,
(sa) sa_dest= 220.71.56.100, sa_prot= 50,
sa_spi= 0x4076C897(1081526423),
sa_trans= esp-aes 256 esp-sha-hmac , sa_conn_id= 2000
1w4d: IPSEC(create_sa): sa created,
(sa) sa_dest= 172.31.182.33, sa_prot= 50,
sa_spi= 0xAAC7F87D(2865231997),
sa_trans= esp-aes 256 esp-sha-hmac , sa_conn_id= 2001
1w4d: ISAKMP (6:1): purging node 481543844
1w4d: ISAKMP (6:1): purging node -49322920
== vpnc level 3 log --enable-natt ==
[root [at] localhos trunk]# ./vpnc --debug 3
hex_test: 00010203
vpnc version 0.3.1
S1
S2
S3
using interface tun0
S4
S4.1
i_cookie: 7ab53743 74841d2b
i_nonce: 277084be f6e29fad 8dd88ae4 e27dc876 f7f68059
S4.2
dh_public:
d769cab9 1520a519 b98a51cc fa14793a a2e6244e f7228f2e 0673f4b9 d3812418
ef78d67d 4e360390 5431da11 da6c5506 d017ba59 f6d7f3ed e527faac b59e49fc
dc9d52cd 256b6d98 9fcd4f25 3955d174 35a646e6 a99505ab 3a05714c ec7af33d
e5238b42 502d9084 6674a2ed 989a676b 4fb22844 39ce61be d72aba92 9a88862e
S4.3
sending: ========================>
BEGIN_PARSE
i_cookie: 7ab53743 74841d2b
r_cookie: 00000000 00000000
payload: 01
isakmp_version: 10
exchange_type: 04
flags: 00
message_id: 00000000
len: 00000249
PARSING PAYLOAD type: 01
next_type: 04
length: 014c
sa.doi: 00000001
sa.situation: 00000001
PARSING PAYLOAD type: 02
next_type: 00
length: 0140
p.number: 00
p.prot_id: 01
p.spi_size: 00
length: 08
p.spi:
PARSING PAYLOAD type: 03
next_type: 03
length: 0028
t.number: 00
t.id: 01
t.attributes.type: 000e
t.attributes.u.attr_16: 0100
t.attributes.type: 0001
t.attributes.u.attr_16: 0007
t.attributes.type: 0002
t.attributes.u.attr_16: 0002
t.attributes.type: 0003
t.attributes.u.attr_16: fde9
t.attributes.type: 0004
t.attributes.u.attr_16: 0002
t.attributes.type: 000b
t.attributes.u.attr_16: 0001
t.attributes.type: 000c
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 03
length: 0028
t.number: 01
t.id: 01
t.attributes.type: 000e
t.attributes.u.attr_16: 0100
t.attributes.type: 0001
t.attributes.u.attr_16: 0007
t.attributes.type: 0002
t.attributes.u.attr_16: 0001
t.attributes.type: 0003
t.attributes.u.attr_16: fde9
t.attributes.type: 0004
t.attributes.u.attr_16: 0002
t.attributes.type: 000b
t.attributes.u.attr_16: 0001
t.attributes.type: 000c
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 03
length: 0028
t.number: 02
t.id: 01
t.attributes.type: 000e
t.attributes.u.attr_16: 00c0
t.attributes.type: 0001
t.attributes.u.attr_16: 0007
t.attributes.type: 0002
t.attributes.u.attr_16: 0002
t.attributes.type: 0003
t.attributes.u.attr_16: fde9
t.attributes.type: 0004
t.attributes.u.attr_16: 0002
t.attributes.type: 000b
t.attributes.u.attr_16: 0001
t.attributes.type: 000c
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 03
length: 0028
t.number: 03
t.id: 01
t.attributes.type: 000e
t.attributes.u.attr_16: 00c0
t.attributes.type: 0001
t.attributes.u.attr_16: 0007
t.attributes.type: 0002
t.attributes.u.attr_16: 0001
t.attributes.type: 0003
t.attributes.u.attr_16: fde9
t.attributes.type: 0004
t.attributes.u.attr_16: 0002
t.attributes.type: 000b
t.attributes.u.attr_16: 0001
t.attributes.type: 000c
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 03
length: 0028
t.number: 04
t.id: 01
t.attributes.type: 000e
t.attributes.u.attr_16: 0080
t.attributes.type: 0001
t.attributes.u.attr_16: 0007
t.attributes.type: 0002
t.attributes.u.attr_16: 0002
t.attributes.type: 0003
t.attributes.u.attr_16: fde9
t.attributes.type: 0004
t.attributes.u.attr_16: 0002
t.attributes.type: 000b
t.attributes.u.attr_16: 0001
t.attributes.type: 000c
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 03
length: 0028
t.number: 05
t.id: 01
t.attributes.type: 000e
t.attributes.u.attr_16: 0080
t.attributes.type: 0001
t.attributes.u.attr_16: 0007
t.attributes.type: 0002
t.attributes.u.attr_16: 0001
t.attributes.type: 0003
t.attributes.u.attr_16: fde9
t.attributes.type: 0004
t.attributes.u.attr_16: 0002
t.attributes.type: 000b
t.attributes.u.attr_16: 0001
t.attributes.type: 000c
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 03
length: 0024
t.number: 06
t.id: 01
t.attributes.type: 0001
t.attributes.u.attr_16: 0005
t.attributes.type: 0002
t.attributes.u.attr_16: 0002
t.attributes.type: 0003
t.attributes.u.attr_16: fde9
t.attributes.type: 0004
t.attributes.u.attr_16: 0002
t.attributes.type: 000b
t.attributes.u.attr_16: 0001
t.attributes.type: 000c
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 00
length: 0024
t.number: 07
t.id: 01
t.attributes.type: 0001
t.attributes.u.attr_16: 0005
t.attributes.type: 0002
t.attributes.u.attr_16: 0001
t.attributes.type: 0003
t.attributes.u.attr_16: fde9
t.attributes.type: 0004
t.attributes.u.attr_16: 0002
t.attributes.type: 000b
t.attributes.u.attr_16: 0001
t.attributes.type: 000c
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 02
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 01
PARSING PAYLOAD type: 04
next_type: 0a
length: 0084
ke.data:
d769cab9 1520a519 b98a51cc fa14793a a2e6244e f7228f2e 0673f4b9 d3812418
ef78d67d 4e360390 5431da11 da6c5506 d017ba59 f6d7f3ed e527faac b59e49fc
dc9d52cd 256b6d98 9fcd4f25 3955d174 35a646e6 a99505ab 3a05714c ec7af33d
e5238b42 502d9084 6674a2ed 989a676b 4fb22844 39ce61be d72aba92 9a88862e
DONE PARSING PAYLOAD type: 04
PARSING PAYLOAD type: 0a
next_type: 05
length: 0018
ke.data: 277084be f6e29fad 8dd88ae4 e27dc876 f7f68059
DONE PARSING PAYLOAD type: 0a
PARSING PAYLOAD type: 05
next_type: 0d
length: 0011
id.type: 0b
id.protocol: 11
id.port: f401
id.data: 76706e63 6c69656e 74
DONE PARSING PAYLOAD type: 05
PARSING PAYLOAD type: 0d
next_type: 0d
length: 000c
ke.data: 09002689 dfd6b712
DONE PARSING PAYLOAD type: 0d
PARSING PAYLOAD type: 0d
next_type: 0d
length: 0014
ke.data: 12f5f28c 457168a9 702d9fe2 74cc0100
DONE PARSING PAYLOAD type: 0d
PARSING PAYLOAD type: 0d
next_type: 00
length: 0014
ke.data: 90cb8091 3ebb696e 086381b5 ec427b1f
DONE PARSING PAYLOAD type: 0d
PARSING PAYLOAD type: 00
PARSE_OK
S4.4
BEGIN_PARSE
i_cookie: 7ab53743 74841d2b
r_cookie: 941f91a3 1ade618b
payload: 01
isakmp_version: 10
exchange_type: 04
flags: 00
message_id: 00000000
len: 00000194
PARSING PAYLOAD type: 01
next_type: 0d
length: 0038
sa.doi: 00000001
sa.situation: 00000001
PARSING PAYLOAD type: 02
next_type: 00
length: 002c
p.number: 01
p.prot_id: 01
p.spi_size: 00
length: 01
p.spi:
PARSING PAYLOAD type: 03
next_type: 00
length: 0024
t.number: 01
t.id: 01
t.attributes.type: 0001
t.attributes.u.attr_16: 0005
t.attributes.type: 0002
t.attributes.u.attr_16: 0001
t.attributes.type: 0004
t.attributes.u.attr_16: 0002
t.attributes.type: 0003
t.attributes.u.attr_16: fde9
t.attributes.type: 000b
t.attributes.u.attr_16: 0001
t.attributes.type: 000c
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 02
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 01
PARSING PAYLOAD type: 0d
next_type: 0d
length: 0014
ke.data: 12f5f28c 457168a9 702d9fe2 74cc0100
DONE PARSING PAYLOAD type: 0d
PARSING PAYLOAD type: 0d
next_type: 0d
length: 0014
ke.data: afcad713 68a1f1c9 6b8696fc 77570100
DONE PARSING PAYLOAD type: 0d
PARSING PAYLOAD type: 0d
next_type: 0d
length: 0014
ke.data: 61d836be 1adf618b e4d0088b b86a6612
DONE PARSING PAYLOAD type: 0d
PARSING PAYLOAD type: 0d
next_type: 0d
length: 000c
ke.data: 09002689 dfd6b712
DONE PARSING PAYLOAD type: 0d
PARSING PAYLOAD type: 0d
next_type: 04
length: 0014
ke.data: 90cb8091 3ebb696e 086381b5 ec427b1f
DONE PARSING PAYLOAD type: 0d
PARSING PAYLOAD type: 04
next_type: 05
length: 0084
ke.data:
01263ad3 5ffc4a82 a7eb9500 e6d1e4ae b51752fe 4deb1281 2674c9d7 849ca6b0
7eb1b590 4092a1fd 71f1e629 9001fc6a 9e4b9804 e2384691 1a0fe124 92bb4aa2
c937e7b1 0019cd39 ecedf29b eae519a3 bdf827c5 50763177 c2b286b3 81cf9778
9fb2f616 13f04607 d0a37529 aac3f9d0 d2cfce52 e68f09cd 2189ea4c 60564ca9
DONE PARSING PAYLOAD type: 04
PARSING PAYLOAD type: 05
next_type: 0a
length: 000c
id.type: 01
id.protocol: 11
id.port: 0000
id.data: dc473864
DONE PARSING PAYLOAD type: 05
PARSING PAYLOAD type: 0a
next_type: 08
length: 0018
ke.data: 2099733d 56b0453b 7c10b7a4 22092411 24edc81b
DONE PARSING PAYLOAD type: 0a
PARSING PAYLOAD type: 08
next_type: 82
length: 0014
ke.data: 1ecc368c a1df08a7 87d8d889 e947064e
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 82
next_type: 82
length: 0014
ke.data: 29c5b01f 493eaf38 d291cec1 e89b11a3
DONE PARSING PAYLOAD type: 82
PARSING PAYLOAD type: 82
next_type: 00
length: 0014
ke.data: d8f1898e b3ffd0d3 bedffc5d 8967f56f
DONE PARSING PAYLOAD type: 82
PARSING PAYLOAD type: 00
PARSE_OK
IKE SA selected 3des-md5
peer is using type 130 for NAT-Discovery payloads
peer is using type 130 for NAT-Discovery payloads
skeyid: a5c394db 9590de57 36e766e1 d3b4afe2
returned_hash: 5eae6ed4 e93c2ec7 96198807 80ee1326
dh_shared_secret:
75b1f28c 752b919a c647d1cd 903743f6 01c43882 dfc5e620 14e7ae1f 2864951d
e5f3d21c 66fa2ba6 b0d7e1f4 5c704267 ac350f65 8c72c58a 6ea3f634 b977f49e
62350516 5f053852 0ed7e369 e3f691ad d621b66a 263b49e0 58ca56ad 73fd544b
d2a7b5eb aed489ee 9436e9d3 d6f68549 57cd5f94 1a81f99c 096251cb a501e9fb
skeyid_d: d601e999 95d9a446 0132c5b2 5dbd4cd5
skeyid_a: d415ba7b 597a4ff4 ea066811 cc5268c0
skeyid_e: 1c1ad1e9 3bbace4e 6089bf04 1ce44876
enc-key: 7e95f7ec 5f51263a facf8971 93ceef93 eac833e7 f5648cc4
current_iv: 3eb28612 d279847a
S4.5
NAT status: this end behind NAT? YES -- remote end behind NAT? no
size = 128, blksz = 8, padding = 0
sending: ========================>
BEGIN_PARSE
i_cookie: 7ab53743 74841d2b
r_cookie: 941f91a3 1ade618b
payload: 08
isakmp_version: 10
exchange_type: 04
flags: 01
message_id: 00000000
len: 0000009c
PARSING PAYLOAD type: 08
next_type: 0b
length: 0014
ke.data: 5eae6ed4 e93c2ec7 96198807 80ee1326
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 0b
next_type: 0d
length: 001c
n.doi: 00000001
n.protocol: 01
n.spi_length: 10
n.type: 6002
n.spi: 7ab53743 74841d2b 941f91a3 1ade618b
n.data:
DONE PARSING PAYLOAD type: 0b
PARSING PAYLOAD type: 0d
next_type: 0d
length: 0014
ke.data: 126e1f57 7291153b 20485f7f 155b4bc8
DONE PARSING PAYLOAD type: 0d
PARSING PAYLOAD type: 0d
next_type: 82
length: 0014
ke.data: 12f5f28c 457168a9 702d9fe2 74cc0100
DONE PARSING PAYLOAD type: 0d
PARSING PAYLOAD type: 82
next_type: 82
length: 0014
ke.data: d8f1898e b3ffd0d3 bedffc5d 8967f56f
DONE PARSING PAYLOAD type: 82
PARSING PAYLOAD type: 82
next_type: 00
length: 0014
ke.data: cfe6e964 a2a13ad5 848c470a 1ad46c67
DONE PARSING PAYLOAD type: 82
PARSING PAYLOAD type: 00
PARSE_OK
initial_iv: 31b2037e 9fbabf87
NAT-T mode, adding non-esp marker
S4.6
S5
S5.1
S5.2
BEGIN_PARSE
i_cookie: 7ab53743 74841d2b
r_cookie: 941f91a3 1ade618b
payload: 08
isakmp_version: 10
exchange_type: 05
flags: 01
message_id: b406fbd7
len: 0000005c
PARSING PAYLOAD type: 08
next_type: 0b
length: 0014
ke.data: 9a533922 4dcd439d 6ecff39a daa44f7c
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 0b
next_type: 00
length: 0028
n.doi: 00000001
n.protocol: 01
n.spi_length: 10
n.type: 6000
n.spi: 7ab53743 74841d2b 941f91a3 1ade618b
n.data: 800b0001 000c0004 00015180
DONE PARSING PAYLOAD type: 0b
PARSING PAYLOAD type: 00
PARSE_OK
hashlen: 16
u.hash.length: 16
expected_hash: 9a533922 4dcd439d 6ecff39a daa44f7c
h->u.hash.data: 9a533922 4dcd439d 6ecff39a daa44f7c
got responder liftime notice, ignoring..
S5.2
BEGIN_PARSE
i_cookie: 7ab53743 74841d2b
r_cookie: 941f91a3 1ade618b
payload: 08
isakmp_version: 10
exchange_type: 06
flags: 01
message_id: 1a820f4c
len: 00000044
PARSING PAYLOAD type: 08
next_type: 0e
length: 0014
ke.data: 09ec0366 29e31247 5b873692 90ed8259
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 0e
next_type: 00
length: 0010
modecfg.type: 01
t.id: 0000
t.attributes.type: 4089
(not dumping xauth data length)
(not dumping xauth data)
t.attributes.type: 408a
(not dumping xauth data length)
(not dumping xauth data)
DONE PARSING PAYLOAD type: 0e
PARSING PAYLOAD type: 00
PARSE_OK
hashlen: 16
u.hash.length: 16
expected_hash: 09ec0366 29e31247 5b873692 90ed8259
h->u.hash.data: 09ec0366 29e31247 5b873692 90ed8259
S5.3
S5.4
S5.5
size = 50, blksz = 8, padding = 6
sending: ========================>
BEGIN_PARSE
i_cookie: 7ab53743 74841d2b
r_cookie: 941f91a3 1ade618b
payload: 08
isakmp_version: 10
exchange_type: 06
flags: 01
message_id: 1a820f4c
len: 00000054
PARSING PAYLOAD type: 08
next_type: 0e
length: 0014
ke.data: e126f9ed f5dfac9e fc33afad 28268030
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 0e
next_type: 00
length: 001e
modecfg.type: 02
t.id: 0000
t.attributes.type: 408a
(not dumping xauth data length)
(not dumping xauth data)
t.attributes.type: 4089
(not dumping xauth data length)
(not dumping xauth data)
DONE PARSING PAYLOAD type: 0e
PARSING PAYLOAD type: 00
PARSE_OK
NAT-T mode, adding non-esp marker
S5.2
BEGIN_PARSE
i_cookie: 7ab53743 74841d2b
r_cookie: 941f91a3 1ade618b
payload: 08
isakmp_version: 10
exchange_type: 06
flags: 01
message_id: 48e16b31
len: 00000044
PARSING PAYLOAD type: 08
next_type: 0e
length: 0014
ke.data: 02772422 c6b341e0 5d3b35c4 ad8d6c8e
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 0e
next_type: 00
length: 000c
modecfg.type: 03
t.id: 0000
t.attributes.type: 408f
(not dumping xauth data)
DONE PARSING PAYLOAD type: 0e
PARSING PAYLOAD type: 00
PARSE_OK
hashlen: 16
u.hash.length: 16
expected_hash: 02772422 c6b341e0 5d3b35c4 ad8d6c8e
h->u.hash.data: 02772422 c6b341e0 5d3b35c4 ad8d6c8e
S5.3
S5.6
size = 32, blksz = 8, padding = 0
sending: ========================>
BEGIN_PARSE
i_cookie: 7ab53743 74841d2b
r_cookie: 941f91a3 1ade618b
payload: 08
isakmp_version: 10
exchange_type: 06
flags: 01
message_id: 48e16b31
len: 0000003c
PARSING PAYLOAD type: 08
next_type: 0e
length: 0014
ke.data: 9c58e522 a092ab8f 9eebd419 688cbbf4
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 0e
next_type: 00
length: 000c
modecfg.type: 04
t.id: 0000
t.attributes.type: 408f
(not dumping xauth data)
DONE PARSING PAYLOAD type: 0e
PARSING PAYLOAD type: 00
PARSE_OK
NAT-T mode, adding non-esp marker
S5.7
S6
size = 121, blksz = 8, padding = 7
sending: ========================>
BEGIN_PARSE
i_cookie: 7ab53743 74841d2b
r_cookie: 941f91a3 1ade618b
payload: 08
isakmp_version: 10
exchange_type: 06
flags: 01
message_id: 35d09dfa
len: 0000009c
PARSING PAYLOAD type: 08
next_type: 0e
length: 0014
ke.data: 49e1f5c5 a7da63ed 49d0750b 137111e8
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 0e
next_type: 00
length: 0065
modecfg.type: 01
t.id: 0014
t.attributes.type: 0001
t.attributes.u.lots.length: 0000
t.attributes.u.lots.data:
t.attributes.type: 0002
t.attributes.u.lots.length: 0000
t.attributes.u.lots.data:
t.attributes.type: 0003
t.attributes.u.lots.length: 0000
t.attributes.u.lots.data:
t.attributes.type: 0004
t.attributes.u.lots.length: 0000
t.attributes.u.lots.data:
t.attributes.type: 7002
t.attributes.u.lots.length: 0000
t.attributes.u.lots.data:
t.attributes.type: 7007
t.attributes.u.lots.length: 0000
t.attributes.u.lots.data:
t.attributes.type: 7000
t.attributes.u.lots.length: 0000
t.attributes.u.lots.data:
t.attributes.type: 700a
t.attributes.u.lots.length: 0015
t.attributes.u.lots.data: 6c6f6361 6c686f73 742e6c6f 63616c64 6f6d6169 6e
t.attributes.type: 0007
t.attributes.u.lots.length: 0024
t.attributes.u.lots.data:
43697363 6f205379 7374656d 73205650 4e20436c 69656e74 20302e33 2e313a4c
696e7578
DONE PARSING PAYLOAD type: 0e
PARSING PAYLOAD type: 00
PARSE_OK
NAT-T mode, adding non-esp marker
BEGIN_PARSE
i_cookie: 7ab53743 74841d2b
r_cookie: 941f91a3 1ade618b
payload: 08
isakmp_version: 10
exchange_type: 06
flags: 01
message_id: 35d09dfa
len: 0000017c
PARSING PAYLOAD type: 08
next_type: 0e
length: 0014
ke.data: cb5f3e23 19395161 07959ff1 b7c6d43d
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 0e
next_type: 00
length: 0149
modecfg.type: 02
t.id: 0014
t.attributes.type: 0001
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: ac1f644d
t.attributes.type: 0003
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: d3e8be01
t.attributes.type: 0003
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: d3e8bf01
t.attributes.type: 0004
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: d3e8be08
t.attributes.type: 0004
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: d3e8bf08
t.attributes.type: 7002
t.attributes.u.lots.length: 0008
t.attributes.u.lots.data: 6e657867 2e6e6574
t.attributes.type: 0007
t.attributes.u.lots.length: 0109
t.attributes.u.lots.data:
43697363 6f20496e 7465726e 6574776f 726b204f 70657261 74696e67 20537973
74656d20 536f6674 77617265 200a494f 53202874 6d292052 53502053 6f667477
61726520 28525350 2d494b39 4f335356 2d4d292c 20566572 73696f6e 2031322e
32283135 29543134 2c205245 4c454153 4520534f 46545741 52452028 66633429
0a546563 686e6963 616c2053 7570706f 72743a20 68747470 3a2f2f77 77772e63
6973636f 2e636f6d 2f746563 68737570 706f7274 0a436f70 79726967 68742028
63292031 3938362d 32303034 20627920 63697363 6f205379 7374656d 732c2049
6e632e0a 436f6d70 696c6564 20536174 2032382d 4175672d 30342031 393a3134
20627920 636d6f6e 67
DONE PARSING PAYLOAD type: 0e
PARSING PAYLOAD type: 00
PARSE_OK
hashlen: 16
u.hash.length: 16
expected_hash: cb5f3e23 19395161 07959ff1 b7c6d43d
h->u.hash.data: cb5f3e23 19395161 07959ff1 b7c6d43d
Remote Application Version: Cisco Internetwork Operating System Software
IOS (tm) RSP Software (RSP-IK9O3SV-M), Version 12.2(15)T14, RELEASE
SOFTWARE (fc4)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2004 by cisco Systems, Inc.
Compiled Sat 28-Aug-04 19:14 by cmong
got address 172.31.100.77
S7
S7.1
S7.2
size = 428, blksz = 8, padding = 4
sending: ========================>
BEGIN_PARSE
i_cookie: 7ab53743 74841d2b
r_cookie: 941f91a3 1ade618b
payload: 08
isakmp_version: 10
exchange_type: 20
flags: 01
message_id: 6a2ff90d
len: 000001cc
PARSING PAYLOAD type: 08
next_type: 01
length: 0014
ke.data: cf5eadf6 6450b397 ab5423b9 a8f1fa10
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 01
next_type: 0a
length: 0164
sa.doi: 00000001
sa.situation: 00000001
PARSING PAYLOAD type: 02
next_type: 02
length: 002c
p.number: 00
p.prot_id: 03
p.spi_size: 04
length: 01
p.spi: 73b61893
PARSING PAYLOAD type: 03
next_type: 00
length: 0020
t.number: 00
t.id: 0c
t.attributes.type: 0006
t.attributes.u.attr_16: 0100
t.attributes.type: 0004
t.attributes.u.attr_16: 0003
t.attributes.type: 0005
t.attributes.u.attr_16: 0002
t.attributes.type: 0001
t.attributes.u.attr_16: 0001
t.attributes.type: 0002
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 02
PARSING PAYLOAD type: 02
next_type: 02
length: 002c
p.number: 01
p.prot_id: 03
p.spi_size: 04
length: 01
p.spi: 73b61893
PARSING PAYLOAD type: 03
next_type: 00
length: 0020
t.number: 00
t.id: 0c
t.attributes.type: 0006
t.attributes.u.attr_16: 0100
t.attributes.type: 0004
t.attributes.u.attr_16: 0003
t.attributes.type: 0005
t.attributes.u.attr_16: 0001
t.attributes.type: 0001
t.attributes.u.attr_16: 0001
t.attributes.type: 0002
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 02
PARSING PAYLOAD type: 02
next_type: 02
length: 002c
p.number: 02
p.prot_id: 03
p.spi_size: 04
length: 01
p.spi: 73b61893
PARSING PAYLOAD type: 03
next_type: 00
length: 0020
t.number: 00
t.id: 0c
t.attributes.type: 0006
t.attributes.u.attr_16: 00c0
t.attributes.type: 0004
t.attributes.u.attr_16: 0003
t.attributes.type: 0005
t.attributes.u.attr_16: 0002
t.attributes.type: 0001
t.attributes.u.attr_16: 0001
t.attributes.type: 0002
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 02
PARSING PAYLOAD type: 02
next_type: 02
length: 002c
p.number: 03
p.prot_id: 03
p.spi_size: 04
length: 01
p.spi: 73b61893
PARSING PAYLOAD type: 03
next_type: 00
length: 0020
t.number: 00
t.id: 0c
t.attributes.type: 0006
t.attributes.u.attr_16: 00c0
t.attributes.type: 0004
t.attributes.u.attr_16: 0003
t.attributes.type: 0005
t.attributes.u.attr_16: 0001
t.attributes.type: 0001
t.attributes.u.attr_16: 0001
t.attributes.type: 0002
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 02
PARSING PAYLOAD type: 02
next_type: 02
length: 002c
p.number: 04
p.prot_id: 03
p.spi_size: 04
length: 01
p.spi: 73b61893
PARSING PAYLOAD type: 03
next_type: 00
length: 0020
t.number: 00
t.id: 0c
t.attributes.type: 0006
t.attributes.u.attr_16: 0080
t.attributes.type: 0004
t.attributes.u.attr_16: 0003
t.attributes.type: 0005
t.attributes.u.attr_16: 0002
t.attributes.type: 0001
t.attributes.u.attr_16: 0001
t.attributes.type: 0002
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 02
PARSING PAYLOAD type: 02
next_type: 02
length: 002c
p.number: 05
p.prot_id: 03
p.spi_size: 04
length: 01
p.spi: 73b61893
PARSING PAYLOAD type: 03
next_type: 00
length: 0020
t.number: 00
t.id: 0c
t.attributes.type: 0006
t.attributes.u.attr_16: 0080
t.attributes.type: 0004
t.attributes.u.attr_16: 0003
t.attributes.type: 0005
t.attributes.u.attr_16: 0001
t.attributes.type: 0001
t.attributes.u.attr_16: 0001
t.attributes.type: 0002
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 02
PARSING PAYLOAD type: 02
next_type: 02
length: 0028
p.number: 06
p.prot_id: 03
p.spi_size: 04
length: 01
p.spi: 73b61893
PARSING PAYLOAD type: 03
next_type: 00
length: 001c
t.number: 00
t.id: 03
t.attributes.type: 0004
t.attributes.u.attr_16: 0003
t.attributes.type: 0005
t.attributes.u.attr_16: 0002
t.attributes.type: 0001
t.attributes.u.attr_16: 0001
t.attributes.type: 0002
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 02
PARSING PAYLOAD type: 02
next_type: 00
length: 0028
p.number: 07
p.prot_id: 03
p.spi_size: 04
length: 01
p.spi: 73b61893
PARSING PAYLOAD type: 03
next_type: 00
length: 001c
t.number: 00
t.id: 03
t.attributes.type: 0004
t.attributes.u.attr_16: 0003
t.attributes.type: 0005
t.attributes.u.attr_16: 0001
t.attributes.type: 0001
t.attributes.u.attr_16: 0001
t.attributes.type: 0002
t.attributes.u.lots.length: 0004
t.attributes.u.lots.data: 00015180
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 02
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 01
PARSING PAYLOAD type: 0a
next_type: 05
length: 0018
ke.data: b96ffc9d 579bbdfb 304b1ba9 afc64d0f dea7addc
DONE PARSING PAYLOAD type: 0a
PARSING PAYLOAD type: 05
next_type: 05
length: 000c
id.type: 01
id.protocol: 00
id.port: 0000
id.data: ac1f644d
DONE PARSING PAYLOAD type: 05
PARSING PAYLOAD type: 05
next_type: 00
length: 0010
id.type: 04
id.protocol: 00
id.port: 0000
id.data: 00000000 00000000
DONE PARSING PAYLOAD type: 05
PARSING PAYLOAD type: 00
PARSE_OK
NAT-T mode, adding non-esp marker
S7.3
BEGIN_PARSE
i_cookie: 7ab53743 74841d2b
r_cookie: 941f91a3 1ade618b
payload: 08
isakmp_version: 10
exchange_type: 05
flags: 01
message_id: 4da941f9
len: 000001ac
PARSING PAYLOAD type: 08
next_type: 0b
length: 0014
ke.data: bb8225d6 e33f5102 ee46a62f e7a9b2c3
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 0b
next_type: 00
length: 0174
n.doi: 00000001
n.protocol: 03
n.spi_length: 04
n.type: 000e
n.spi: 73b61893
n.data:
0a000164 00000001 00000001 00000000 44772240 00000000 4483f378 417057d4
00000000 40459744 01000014 ffffffff 01000014 445216b8 4483f378 44772210
447bf8e8 447bf8e8 00000000 447b35e8 447e69a0 00000000 41723ba8 41723aa4
447e697c ffffffff 0df92f6a 44521690 0df92f6a 00000000 015216e0 445216dc
42ae2af0 00000000 00000000 404589b0 447e6978 447e69a0 42ae2af0 40457c80
447723a4 000001cc 404589b0 445217a0 44772240 445216e0 447bfb1c 4275c7f0
447e69a0 447bf8e8 00000001 0000000c 418bd7ec 4483f378 4483f378 433f0000
43f52d38 447bf8e8 00000001 4483f378 4483f378 417246c4 417064b0 445217a4
447e69a0 4483f378 447e69a0 00000001 0000000c 00000000 000001b0 43f52d44
4483f378 433f0000 43f52d38 447bf8e8 43f529ec 416fcf08 42750f94 0df92f6a
00000012 d3e8b621 43f529ec 445217a8 42750f8c 4275083c 42751930 43f529ec
7ab53743
DONE PARSING PAYLOAD type: 0b
PARSING PAYLOAD type: 00
PARSE_OK
hashlen: 16
u.hash.length: 16
expected_hash: dce28cd5 32d920f5 0bd595de 2949e865
h->u.hash.data: bb8225d6 e33f5102 ee46a62f e7a9b2c3
S7.4
S7.5
---!!!!!!!!! entering phase2_fatal !!!!!!!!!---
size = 32, blksz = 8, padding = 0
sending: ========================>
BEGIN_PARSE
i_cookie: 7ab53743 74841d2b
r_cookie: 941f91a3 1ade618b
payload: 08
isakmp_version: 10
exchange_type: 05
flags: 01
message_id: cd35bc2f
len: 0000003c
PARSING PAYLOAD type: 08
next_type: 0b
length: 0014
ke.data: 7da4d6db 217ddf36 b883a203 fc0e3ab1
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 0b
next_type: 00
length: 000c
n.doi: 00000001
n.protocol: 01
n.spi_length: 00
n.type: 0009
n.spi:
n.data:
DONE PARSING PAYLOAD type: 0b
PARSING PAYLOAD type: 00
PARSE_OK
NAT-T mode, adding non-esp marker
size = 48, blksz = 8, padding = 0
sending: ========================>
BEGIN_PARSE
i_cookie: 7ab53743 74841d2b
r_cookie: 941f91a3 1ade618b
payload: 08
isakmp_version: 10
exchange_type: 05
flags: 01
message_id: ca345d00
len: 0000004c
PARSING PAYLOAD type: 08
next_type: 0c
length: 0014
ke.data: 848f144a a99bdc7f f21d06c3 db72759c
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 0c
next_type: 00
length: 001c
n.doi: 00000001
n.protocol: 01
n.spi_length: 10
d.num_spi: 0001
d.spi: 7ab53743 74841d2b 941f91a3 1ade618b
DONE PARSING PAYLOAD type: 0c
PARSING PAYLOAD type: 00
PARSE_OK
NAT-T mode, adding non-esp marker
./vpnc: quick mode response rejected: INVALID_MESSAGE_ID
check pfs setting
== cisco ios log --enable-natt ==
1w4d: ISAKMP (6:19): purging node -99056511
1w4d: ISAKMP (6:19): purging node 1006778924
1w4d: ISAKMP (6:19): purging node 882152494
1w4d: ISAKMP (6:19): purging node -301064444
1w4d: ISAKMP (6:19): peer does not do paranoid keepalives.
1w4d: ISAKMP (6:17): peer does not do paranoid keepalives.
1w4d: ISAKMP (6:17): deleting SA reason "death by tree-walk node" state
(R) QM_IDLE (peer 172.31.182.33) input queue 0
1w4d: ISAKMP: set new node 1085304115 to QM_IDLE
1w4d: ISAKMP (6:17): sending packet to 172.31.182.33 my_port 500
peer_port 500 (R) QM_IDLE
1w4d: ISAKMP (6:17): purging node 1085304115
1w4d: ISAKMP (6:17): Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
1w4d: ISAKMP (6:17): Old State = IKE_P1_COMPLETE New State = IKE_DEST_SA
1w4d: ISAKMP (6:17): deleting SA reason "" state (R) QM_IDLE (peer
172.31.182.33) input queue 0
1w4d: ISAKMP (6:17): deleting node 1484330726 error FALSE reason ""
1w4d: ISAKMP (6:17): Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
1w4d: ISAKMP (6:17): Old State = IKE_DEST_SA New State = IKE_DEST_SA
1w4d: ISAKMP (0:0): received packet from 172.31.182.33 dport 500 sport
500 Global (N) NEW SA
1w4d: ISAKMP: Created a peer struct for 172.31.182.33, peer port 500
1w4d: ISAKMP: Locking peer struct 0x4482F598, IKE refcount 1 for
crypto_ikmp_config_initialize_sa
1w4d: ISAKMP (0:0): Setting client config settings 448172F4
1w4d: ISAKMP (0:0): (Re)Setting client xauth list and state
1w4d: ISAKMP: local port 500, remote port 500
1w4d: ISAKMP: Find a dup sa in the avl tree during calling isadb_insert
sa = 4483F378
1w4d: ISAKMP (6:20): processing SA payload. message ID = 0
1w4d: ISAKMP (6:20): processing ID payload. message ID = 0
1w4d: ISAKMP (6:20): peer matches xauth profile
1w4d: ISAKMP: Looking for a matching key for 172.31.182.33 in default
1w4d: ISAKMP (6:20): (Re)Setting client xauth list userauthen and state
1w4d: ISAKMP (6:20): processing vendor id payload
1w4d: ISAKMP (6:20): vendor ID seems Unity/DPD but major 242 mismatch
1w4d: ISAKMP (6:20): vendor ID is XAUTH
1w4d: ISAKMP (6:20): processing vendor id payload
1w4d: ISAKMP (6:20): vendor ID is Unity
1w4d: ISAKMP (6:20): processing vendor id payload
1w4d: ISAKMP (6:20): vendor ID seems Unity/DPD but major 123 mismatch
1w4d: ISAKMP (6:20): vendor ID is NAT-T v2
1w4d: ISAKMP (6:20) Authentication by xauth preshared
1w4d: ISAKMP (6:20): Checking ISAKMP transform 0 against priority 1 policy
1w4d: ISAKMP: keylength of 256
1w4d: ISAKMP: encryption AES-CBC
1w4d: ISAKMP: hash SHA
1w4d: ISAKMP: auth XAUTHInitPreShared
1w4d: ISAKMP: default group 2
1w4d: ISAKMP: life type in seconds
1w4d: ISAKMP: life duration (VPI) of 0x0 0x1 0x51 0x80
1w4d: ISAKMP (6:20): Encryption algorithm offered does not match policy!
1w4d: ISAKMP (6:20): atts are not acceptable. Next payload is 3
1w4d: ISAKMP (6:20): Checking ISAKMP transform 1 against priority 1 policy
1w4d: ISAKMP: keylength of 256
1w4d: ISAKMP: encryption AES-CBC
1w4d: ISAKMP: hash MD5
1w4d: ISAKMP: auth XAUTHInitPreShared
1w4d: ISAKMP: default group 2
1w4d: ISAKMP: life type in seconds
1w4d: ISAKMP: life duration (VPI) of 0x0 0x1 0x51 0x80
1w4d: ISAKMP (6:20): Encryption algorithm offered does not match policy!
1w4d: ISAKMP (6:20): atts are not acceptable. Next payload is 3
1w4d: ISAKMP (6:20): Checking ISAKMP transform 2 against priority 1 policy
1w4d: ISAKMP: keylength of 192
1w4d: ISAKMP: encryption AES-CBC
1w4d: ISAKMP: hash SHA
1w4d: ISAKMP: auth XAUTHInitPreShared
1w4d: ISAKMP: default group 2
1w4d: ISAKMP: life type in seconds
1w4d: ISAKMP: life duration (VPI) of 0x0 0x1 0x51 0x80
1w4d: ISAKMP (6:20): Encryption algorithm offered does not match policy!
1w4d: ISAKMP (6:20): atts are not acceptable. Next payload is 3
1w4d: ISAKMP (6:20): Checking ISAKMP transform 3 against priority 1 policy
1w4d: ISAKMP: keylength of 192
1w4d: ISAKMP: encryption AES-CBC
1w4d: ISAKMP: hash MD5
1w4d: ISAKMP: auth XAUTHInitPreShared
1w4d: ISAKMP: default group 2
1w4d: ISAKMP: life type in seconds
1w4d: ISAKMP: life duration (VPI) of 0x0 0x1 0x51 0x80
1w4d: ISAKMP (6:20): Encryption algorithm offered does not match policy!
1w4d: ISAKMP (6:20): atts are not acceptable. Next payload is 3
1w4d: ISAKMP (6:20): Checking ISAKMP transform 4 against priority 1 policy
1w4d: ISAKMP: keylength of 128
1w4d: ISAKMP: encryption AES-CBC
1w4d: ISAKMP: hash SHA
1w4d: ISAKMP: auth XAUTHInitPreShared
1w4d: ISAKMP: default group 2
1w4d: ISAKMP: life type in seconds
1w4d: ISAKMP: life duration (VPI) of 0x0 0x1 0x51 0x80
1w4d: ISAKMP (6:20): Encryption algorithm offered does not match policy!
1w4d: ISAKMP (6:20): atts are not acceptable. Next payload is 3
1w4d: ISAKMP (6:20): Checking ISAKMP transform 5 against priority 1 policy
1w4d: ISAKMP: keylength of 128
1w4d: ISAKMP: encryption AES-CBC
1w4d: ISAKMP: hash MD5
1w4d: ISAKMP: auth XAUTHInitPreShared
1w4d: ISAKMP: default group 2
1w4d: ISAKMP: life type in seconds
1w4d: ISAKMP: life duration (VPI) of 0x0 0x1 0x51 0x80
1w4d: ISAKMP (6:20): Encryption algorithm offered does not match policy!
1w4d: ISAKMP (6:20): atts are not acceptable. Next payload is 3
1w4d: ISAKMP (6:20): Checking ISAKMP transform 6 against priority 1 policy
1w4d: ISAKMP: encryption 3DES-CBC
1w4d: ISAKMP: hash SHA
1w4d: ISAKMP: auth XAUTHInitPreShared
1w4d: ISAKMP: default group 2
1w4d: ISAKMP: life type in seconds
1w4d: ISAKMP: life duration (VPI) of 0x0 0x1 0x51 0x80
1w4d: ISAKMP (6:20): Hash algorithm offered does not match policy!
1w4d: ISAKMP (6:20): atts are not acceptable. Next payload is 3
1w4d: ISAKMP (6:20): Checking ISAKMP transform 7 against priority 1 policy
1w4d: ISAKMP: encryption 3DES-CBC
1w4d: ISAKMP: hash MD5
1w4d: ISAKMP: auth XAUTHInitPreShared
1w4d: ISAKMP: default group 2
1w4d: ISAKMP: life type in seconds
1w4d: ISAKMP: life duration (VPI) of 0x0 0x1 0x51 0x80
1w4d: ISAKMP (6:20): atts are acceptable. Next payload is 0
1w4d: ISAKMP (6:20): processing KE payload. message ID = 0
1w4d: ISAKMP (6:20): processing NONCE payload. message ID = 0
1w4d: ISAKMP (6:20): processing vendor id payload
1w4d: ISAKMP (6:20): vendor ID seems Unity/DPD but major 242 mismatch
1w4d: ISAKMP (6:20): vendor ID is XAUTH
1w4d: ISAKMP (6:20): processing vendor id payload
1w4d: ISAKMP (6:20): vendor ID is Unity
1w4d: ISAKMP (6:20): processing vendor id payload
1w4d: ISAKMP (6:20): vendor ID seems Unity/DPD but major 123 mismatch
1w4d: ISAKMP (6:20): vendor ID is NAT-T v2
1w4d: ISAKMP (6:20): Input = IKE_MESG_FROM_PEER, IKE_AM_EXCH
1w4d: ISAKMP (6:20): Old State = IKE_READY New State = IKE_R_AM_AAA_AWAIT
1w4d: ISAKMP (6:19): purging SA., sa=4483E188, delme=4483E188
1w4d: ISAKMP (6:19): purging node -2047324125
1w4d: ISAKMP (6:19): purging node 1503627278
1w4d: ISAKMP (6:19): returning address 172.31.100.79 to pool
1w4d: ISAKMP: Unlocking IKE struct 0x447B85F0 for declare_sa_dead(), count 0
1w4d: ISAKMP: returning address 172.31.100.79 to pool
1w4d: ISAKMP: got callback 1
1w4d: ISAKMP (6:20): SKEYID state generated
1w4d: ISAKMP (6:20): constructed NAT-T vendor-02 ID
1w4d: ISAKMP (6:20): SA is doing pre-shared key authentication plus
XAUTH using id type ID_IPV4_ADDR
1w4d: ISAKMP (20): ID payload
next-payload : 10
type : 1
addr : 220.71.56.100
protocol : 17
port : 0
length : 8
1w4d: ISAKMP (20): Total payload length: 12
1w4d: ISAKMP (6:20): constructed HIS NAT-D
1w4d: ISAKMP (6:20): constructed MINE NAT-D
1w4d: ISAKMP (6:20): sending packet to 172.31.182.33 my_port 500
peer_port 500 (R) AG_INIT_EXCH
1w4d: ISAKMP (6:20): Input = IKE_MESG_FROM_AAA, PRESHARED_KEY_REPLY
1w4d: ISAKMP (6:20): Old State = IKE_R_AM_AAA_AWAIT New State = IKE_R_AM2
1w4d: ISAKMP (6:20): received packet from 172.31.182.33 dport 4500 sport
4500 Global (R) AG_INIT_EXCH
1w4d: ISAKMP (6:20): processing HASH payload. message ID = 0
1w4d: ISAKMP (6:20): processing NOTIFY INITIAL_CONTACT protocol 1
spi 0, message ID = 0, sa = 4483F378
1w4d: ISAKMP (6:20): Process initial contact,
bring down existing phase 1 and 2 SA's with local 220.71.56.100 remote
172.31.182.33 remote port 4500
1w4d: ISAKMP (6:20): returning IP addr to the address pool
1w4d: ISAKMP (6:20): processing vendor id payload
1w4d: ISAKMP (6:20): vendor ID seems Unity/DPD but major 75 mismatch
1w4d: ISAKMP (6:20): processing vendor id payload
1w4d: ISAKMP (6:20): vendor ID is Unity
1w4d: ISAKMP:received payload type 17
1w4d: ISAKMP (6:20): Detected NAT-D payload
1w4d: ISAKMP (6:20): recalc my hash for NAT-D
1w4d: ISAKMP (6:20): NAT does not match MINE hash
1w4d: hash received: 39 56 B1 BA C3 20 93 39 24 1B 2F 1D 7 E6 EC 4F
1w4d: my nat hash : A AE 54 3C A4 78 50 70 3E 79 A3 4E C8 20 9A F0
1w4d: ISAKMP:received payload type 17
1w4d: ISAKMP (6:20): Detected NAT-D payload
1w4d: ISAKMP (6:20): recalc his hash for NAT-D
1w4d: ISAKMP (6:20): NAT does not match HIS hash
1w4d: hash received: 24 A9 1D 5B 21 4F 20 2E C1 DF 40 0 49 5F 2B B6
1w4d: his nat hash : E0 4D 71 5A 2B 92 7 FE F7 D4 A3 F 3 DC 55 43
1w4d: ISAKMP (6:20): SA has been authenticated with 172.31.182.33
1w4d: ISAKMP (6:20): Detected port floating to port = 4500
1w4d: ISAKMP: Trying to insert a peer 172.31.182.33/4500/, and inserted
successfully.
1w4d: ISAKMP: set new node 1936544648 to CONF_XAUTH
1w4d: ISAKMP (6:20): sending packet to 172.31.182.33 my_port 4500
peer_port 4500 (R) QM_IDLE
1w4d: ISAKMP (6:20): purging node 1936544648
1w4d: ISAKMP: Sending phase 1 responder lifetime 86400
1w4d: ISAKMP (6:20): Input = IKE_MESG_FROM_PEER, IKE_AM_EXCH
1w4d: ISAKMP (6:20): Old State = IKE_R_AM2 New State = IKE_P1_COMPLETE
1w4d: IPSEC(key_engine): got a queue event...
1w4d: ISAKMP (6:20): Need XAUTH
1w4d: ISAKMP (6:20): Input = IKE_MESG_INTERNAL, IKE_PHASE1_COMPLETE
1w4d: ISAKMP (6:20): Old State = IKE_P1_COMPLETE New State =
IKE_XAUTH_AAA_START_LOGIN_AWAIT
1w4d: ISAKMP: got callback 1
1w4d: ISAKMP: set new node 1495601336 to CONF_XAUTH
1w4d: ISAKMP/xauth: request attribute XAUTH_USER_NAME_V2
1w4d: ISAKMP/xauth: request attribute XAUTH_USER_PASSWORD_V2
1w4d: ISAKMP (6:20): initiating peer config to 172.31.182.33. ID =
1495601336
1w4d: ISAKMP (6:20): sending packet to 172.31.182.33 my_port 4500
peer_port 4500 (R) CONF_XAUTH
1w4d: ISAKMP (6:20): Input = IKE_MESG_FROM_AAA, IKE_AAA_START_LOGIN
1w4d: ISAKMP (6:20): Old State = IKE_XAUTH_AAA_START_LOGIN_AWAIT New
State = IKE_XAUTH_REQ_SENT
1w4d: ISAKMP (6:20): received packet from 172.31.182.33 dport 4500 sport
4500 Global (R) CONF_XAUTH
1w4d: ISAKMP (6:20): processing transaction payload from 172.31.182.33.
message ID = 1495601336
1w4d: ISAKMP: Config payload REPLY
1w4d: ISAKMP/xauth: reply attribute XAUTH_USER_PASSWORD_V2
1w4d: ISAKMP/xauth: reply attribute XAUTH_USER_NAME_V2
1w4d: ISAKMP (6:20): deleting node 1495601336 error FALSE reason "done
with xauth request/reply exchange"
1w4d: ISAKMP (6:20): Input = IKE_MESG_FROM_PEER, IKE_CFG_REPLY
1w4d: ISAKMP (6:20): Old State = IKE_XAUTH_REQ_SENT New State =
IKE_XAUTH_AAA_CONT_LOGIN_AWAIT
1w4d: ISAKMP: got callback 1
1w4d: ISAKMP: set new node 15838531 to CONF_XAUTH
1w4d: ISAKMP (6:20): initiating peer config to 172.31.182.33. ID = 15838531
1w4d: ISAKMP (6:20): sending packet to 172.31.182.33 my_port 4500
peer_port 4500 (R) CONF_XAUTH
1w4d: ISAKMP (6:20): Input = IKE_MESG_FROM_AAA, IKE_AAA_CONT_LOGIN
1w4d: ISAKMP (6:20): Old State = IKE_XAUTH_AAA_CONT_LOGIN_AWAIT New
State = IKE_XAUTH_SET_SENT
1w4d: ISAKMP (6:20): received packet from 172.31.182.33 dport 4500 sport
4500 Global (R) CONF_XAUTH
1w4d: ISAKMP (6:20): processing transaction payload from 172.31.182.33.
message ID = 15838531
1w4d: ISAKMP: Config payload ACK
1w4d: ISAKMP (6:20): XAUTH ACK Processed
1w4d: ISAKMP (6:20): deleting node 15838531 error FALSE reason "done
with transaction"
1w4d: ISAKMP (6:20): Input = IKE_MESG_FROM_PEER, IKE_CFG_ACK
1w4d: ISAKMP (6:20): Old State = IKE_XAUTH_SET_SENT New State =
IKE_P1_COMPLETE
1w4d: ISAKMP (6:20): received packet from 172.31.182.33 dport 4500 sport
4500 Global (R) QM_IDLE
1w4d: ISAKMP: set new node -1736919248 to QM_IDLE
1w4d: ISAKMP (6:20): processing transaction payload from 172.31.182.33.
message ID = -1736919248
1w4d: ISAKMP: Config payload REQUEST
1w4d: ISAKMP (6:20): checking request:
1w4d: ISAKMP: IP4_ADDRESS
1w4d: ISAKMP: IP4_NETMASK
1w4d: ISAKMP: IP4_DNS
1w4d: ISAKMP: IP4_NBNS
1w4d: ISAKMP: DEFAULT_DOMAIN
1w4d: ISAKMP: UNKNOWN Unknown Attr: 0x7007
1w4d: ISAKMP: UNKNOWN Unknown Attr: 0x7000
1w4d: ISAKMP: UNKNOWN Unknown Attr: 0x700A
1w4d: ISAKMP: APPLICATION_VERSION
1w4d: ISAKMP (6:20): Input = IKE_MESG_FROM_PEER, IKE_CFG_REQUEST
1w4d: ISAKMP (6:20): Old State = IKE_P1_COMPLETE New State =
IKE_CONFIG_AUTHOR_AAA_AWAIT
1w4d: ISAKMP (6:20): Input = IKE_MESG_INTERNAL, IKE_PHASE1_COMPLETE
1w4d: ISAKMP (6:20): Old State = IKE_CONFIG_AUTHOR_AAA_AWAIT New State =
IKE_CONFIG_AUTHOR_AAA_AWAIT
1w4d: ISAKMP: got callback 1
1w4d: ISAKMP (6:20): attributes sent in message:
1w4d: Address: 0.2.0.0
1w4d: ISAKMP (6:20): allocating address 172.31.100.80
1w4d: ISAKMP: Sending private address: 172.31.100.80
1w4d: ISAKMP: Sending IP4_DNS server address: 172.31.190.1
1w4d: ISAKMP: Sending IP4_DNS server address: 172.31.191.1
1w4d: ISAKMP: Sending IP4_NBNS server address: 172.31.190.8
1w4d: ISAKMP: Sending IP4_NBNS server address: 172.31.191.8
1w4d: ISAKMP: Sending DEFAULT_DOMAIN default domain name: nexg.net
1w4d: ISAKMP (6/20): Unknown Attr: UNKNOWN (0x7007)
1w4d: ISAKMP (6/20): Unknown Attr: UNKNOWN (0x7000)
1w4d: ISAKMP (6/20): Unknown Attr: UNKNOWN (0x700A)
1w4d: ISAKMP: Sending APPLICATION_VERSION string: Cisco Internetwork
Operating System Software
IOS (tm) RSP Software (RSP-IK9O3SV-M), Version 12.2(15)T14, RELEASE
SOFTWARE (fc4)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2004 by cisco Systems, Inc.
Compiled Sat 28-Aug-04 19:14 by cmong
1w4d: ISAKMP (6:20): responding to peer config from 172.31.182.33. ID =
-1736919248
1w4d: ISAKMP (6:20): sending packet to 172.31.182.33 my_port 4500
peer_port 4500 (R) CONF_ADDR
1w4d: ISAKMP (6:20): deleting node -1736919248 error FALSE reason ""
1w4d: ISAKMP (6:20): Input = IKE_MESG_FROM_AAA, IKE_AAA_GROUP_ATTR
1w4d: ISAKMP (6:20): Old State = IKE_CONFIG_AUTHOR_AAA_AWAIT New State =
IKE_P1_COMPLETE
1w4d: ISAKMP (6:20): received packet from 172.31.182.33 dport 4500 sport
4500 Global (R) QM_IDLE
1w4d: ISAKMP: set new node -822247518 to QM_IDLE
1w4d: ISAKMP (6:20): processing HASH payload. message ID = -822247518
1w4d: ISAKMP (6:20): processing SA payload. message ID = -822247518
1w4d: ISAKMP (6:20): Checking IPSec proposal 0
1w4d: ISAKMP: transform 0, ESP_AES
1w4d: ISAKMP: attributes in transform:
1w4d: ISAKMP: key length is 256
1w4d: ISAKMP: encaps is 3
1w4d: ISAKMP: authenticator is HMAC-SHA
1w4d: ISAKMP: SA life type in seconds
1w4d: ISAKMP: SA life duration (VPI) of 0x0 0x1 0x51 0x80
1w4d: ISAKMP (6:20): atts are acceptable.
1w4d: IPSEC(validate_proposal_request): proposal part #1,
(key eng. msg.) INBOUND local= 220.71.56.100, remote= 172.31.182.33,
local_proxy= 0.0.0.0/0.0.0.0/0/0 (type=4),
remote_proxy= 172.31.100.80/255.255.255.255/0/0 (type=1),
protocol= ESP, transform= esp-aes 256 esp-sha-hmac ,
lifedur= 0s and 0kb,
spi= 0x0(0), conn_id= 0, keysize= 256, flags= 0x0
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(validate_transform_proposal): invalid transform proposal
flags -- 0x0
1w4d: ISAKMP (6:20): IPSec policy invalidated proposal
1w4d: ISAKMP (6:20): Checking IPSec proposal 1
1w4d: ISAKMP: transform 0, ESP_AES
1w4d: ISAKMP: attributes in transform:
1w4d: ISAKMP: key length is 256
1w4d: ISAKMP: encaps is 3
1w4d: ISAKMP: authenticator is HMAC-MD5
1w4d: ISAKMP: SA life type in seconds
1w4d: ISAKMP: SA life duration (VPI) of 0x0 0x1 0x51 0x80
1w4d: ISAKMP (6:20): atts are acceptable.
1w4d: IPSEC(validate_proposal_request): proposal part #1,
(key eng. msg.) INBOUND local= 220.71.56.100, remote= 172.31.182.33,
local_proxy= 0.0.0.0/0.0.0.0/0/0 (type=4),
remote_proxy= 172.31.100.80/255.255.255.255/0/0 (type=1),
protocol= ESP, transform= esp-aes 256 esp-md5-hmac ,
lifedur= 0s and 0kb,
spi= 0x0(0), conn_id= 0, keysize= 256, flags= 0x0
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(validate_transform_proposal): invalid transform proposal
flags -- 0x0
1w4d: ISAKMP (6:20): IPSec policy invalidated proposal
1w4d: ISAKMP (6:20): Checking IPSec proposal 2
1w4d: ISAKMP: transform 0, ESP_AES
1w4d: ISAKMP: attributes in transform:
1w4d: ISAKMP: key length is 192
1w4d: ISAKMP: encaps is 3
1w4d: ISAKMP: authenticator is HMAC-SHA
1w4d: ISAKMP: SA life type in seconds
1w4d: ISAKMP: SA life duration (VPI) of 0x0 0x1 0x51 0x80
1w4d: ISAKMP (6:20): atts are acceptable.
1w4d: IPSEC(validate_proposal_request): proposal part #1,
(key eng. msg.) INBOUND local= 220.71.56.100, remote= 172.31.182.33,
local_proxy= 0.0.0.0/0.0.0.0/0/0 (type=4),
remote_proxy= 172.31.100.80/255.255.255.255/0/0 (type=1),
protocol= ESP, transform= esp-aes 192 esp-sha-hmac ,
lifedur= 0s and 0kb,
spi= 0x0(0), conn_id= 0, keysize= 192, flags= 0x0
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(validate_transform_proposal): transform proposal not
supported for identity:
{esp-aes 192 esp-sha-hmac }
1w4d: ISAKMP (6:20): IPSec policy invalidated proposal
1w4d: ISAKMP (6:20): Checking IPSec proposal 3
1w4d: ISAKMP: transform 0, ESP_AES
1w4d: ISAKMP: attributes in transform:
1w4d: ISAKMP: key length is 192
1w4d: ISAKMP: encaps is 3
1w4d: ISAKMP: authenticator is HMAC-MD5
1w4d: ISAKMP: SA life type in seconds
1w4d: ISAKMP: SA life duration (VPI) of 0x0 0x1 0x51 0x80
1w4d: ISAKMP (6:20): atts are acceptable.
1w4d: IPSEC(validate_proposal_request): proposal part #1,
(key eng. msg.) INBOUND local= 220.71.56.100, remote= 172.31.182.33,
local_proxy= 0.0.0.0/0.0.0.0/0/0 (type=4),
remote_proxy= 172.31.100.80/255.255.255.255/0/0 (type=1),
protocol= ESP, transform= esp-aes 192 esp-md5-hmac ,
lifedur= 0s and 0kb,
spi= 0x0(0), conn_id= 0, keysize= 192, flags= 0x0
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(validate_transform_proposal): transform proposal not
supported for identity:
{esp-aes 192 esp-md5-hmac }
1w4d: ISAKMP (6:20): IPSec policy invalidated proposal
1w4d: ISAKMP (6:20): Checking IPSec proposal 4
1w4d: ISAKMP: transform 0, ESP_AES
1w4d: ISAKMP: attributes in transform:
1w4d: ISAKMP: key length is 128
1w4d: ISAKMP: encaps is 3
1w4d: ISAKMP: authenticator is HMAC-SHA
1w4d: ISAKMP: SA life type in seconds
1w4d: ISAKMP: SA life duration (VPI) of 0x0 0x1 0x51 0x80
1w4d: ISAKMP (6:20): atts are acceptable.
1w4d: IPSEC(validate_proposal_request): proposal part #1,
(key eng. msg.) INBOUND local= 220.71.56.100, remote= 172.31.182.33,
local_proxy= 0.0.0.0/0.0.0.0/0/0 (type=4),
remote_proxy= 172.31.100.80/255.255.255.255/0/0 (type=1),
protocol= ESP, transform= esp-aes esp-sha-hmac ,
lifedur= 0s and 0kb,
spi= 0x0(0), conn_id= 0, keysize= 128, flags= 0x0
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(validate_transform_proposal): transform proposal not
supported for identity:
{esp-aes esp-sha-hmac }
1w4d: ISAKMP (6:20): IPSec policy invalidated proposal
1w4d: ISAKMP (6:20): Checking IPSec proposal 5
1w4d: ISAKMP: transform 0, ESP_AES
1w4d: ISAKMP: attributes in transform:
1w4d: ISAKMP: key length is 128
1w4d: ISAKMP: encaps is 3
1w4d: ISAKMP: authenticator is HMAC-MD5
1w4d: ISAKMP: SA life type in seconds
1w4d: ISAKMP: SA life duration (VPI) of 0x0 0x1 0x51 0x80
1w4d: ISAKMP (6:20): atts are acceptable.
1w4d: IPSEC(validate_proposal_request): proposal part #1,
(key eng. msg.) INBOUND local= 220.71.56.100, remote= 172.31.182.33,
local_proxy= 0.0.0.0/0.0.0.0/0/0 (type=4),
remote_proxy= 172.31.100.80/255.255.255.255/0/0 (type=1),
protocol= ESP, transform= esp-aes esp-md5-hmac ,
lifedur= 0s and 0kb,
spi= 0x0(0), conn_id= 0, keysize= 128, flags= 0x0
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(validate_transform_proposal): transform proposal not
supported for identity:
{esp-aes esp-md5-hmac }
1w4d: ISAKMP (6:20): IPSec policy invalidated proposal
1w4d: ISAKMP (6:20): Checking IPSec proposal 6
1w4d: ISAKMP: transform 0, ESP_3DES
1w4d: ISAKMP: attributes in transform:
1w4d: ISAKMP: encaps is 3
1w4d: ISAKMP: authenticator is HMAC-SHA
1w4d: ISAKMP: SA life type in seconds
1w4d: ISAKMP: SA life duration (VPI) of 0x0 0x1 0x51 0x80
1w4d: ISAKMP (6:20): atts are acceptable.
1w4d: IPSEC(validate_proposal_request): proposal part #1,
(key eng. msg.) INBOUND local= 220.71.56.100, remote= 172.31.182.33,
local_proxy= 0.0.0.0/0.0.0.0/0/0 (type=4),
remote_proxy= 172.31.100.80/255.255.255.255/0/0 (type=1),
protocol= ESP, transform= esp-3des esp-sha-hmac ,
lifedur= 0s and 0kb,
spi= 0x0(0), conn_id= 0, keysize= 0, flags= 0x0
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(validate_transform_proposal): invalid transform proposal
flags -- 0x0
1w4d: ISAKMP (6:20): IPSec policy invalidated proposal
1w4d: ISAKMP (6:20): Checking IPSec proposal 7
1w4d: ISAKMP: transform 0, ESP_3DES
1w4d: ISAKMP: attributes in transform:
1w4d: ISAKMP: encaps is 3
1w4d: ISAKMP: authenticator is HMAC-MD5
1w4d: ISAKMP: SA life type in seconds
1w4d: ISAKMP: SA life duration (VPI) of 0x0 0x1 0x51 0x80
1w4d: ISAKMP (6:20): atts are acceptable.
1w4d: IPSEC(validate_proposal_request): proposal part #1,
(key eng. msg.) INBOUND local= 220.71.56.100, remote= 172.31.182.33,
local_proxy= 0.0.0.0/0.0.0.0/0/0 (type=4),
remote_proxy= 172.31.100.80/255.255.255.255/0/0 (type=1),
protocol= ESP, transform= esp-3des esp-md5-hmac ,
lifedur= 0s and 0kb,
spi= 0x0(0), conn_id= 0, keysize= 0, flags= 0x0
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(kei_proxy): head = OFMI-NEXG, map->ivrf = , kei->ivrf =
1w4d: IPSEC(validate_transform_proposal): invalid transform proposal
flags -- 0x0
1w4d: ISAKMP (6:20): IPSec policy invalidated proposal
1w4d: ISAKMP (6:20): phase 2 SA policy not acceptable! (local
220.71.56.100 remote 172.31.182.33)
1w4d: ISAKMP: set new node 1969216900 to QM_IDLE
1w4d: ISAKMP (6:20): sending packet to 172.31.182.33 my_port 4500
peer_port 4500 (R) QM_IDLE
1w4d: ISAKMP (6:20): purging node 1969216900
1w4d: ISAKMP (6:20): Node -822247518, Input = IKE_MESG_FROM_PEER,
IKE_QM_EXCH
1w4d: ISAKMP (6:20): Old State = IKE_QM_READY New State = IKE_QM_READY
1w4d: ISAKMP (6:20): received packet from 172.31.182.33 dport 4500 sport
4500 Global (R) QM_IDLE
1w4d: ISAKMP: set new node 1083714183 to QM_IDLE
1w4d: ISAKMP (6:20): processing HASH payload. message ID = 1083714183
1w4d: ISAKMP (6:20): processing NOTIFY INVALID_MESSAGE_ID protocol 1
spi 0, message ID = 1083714183, sa = 4483F378
1w4d: ISAKMP (6:20): incrementing error counter on sa: some bad notify
1w4d: ISAKMP (6:20): deleting node 1083714183 error FALSE reason
"informational (in) state 2"
1w4d: ISAKMP (6:20): Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY
1w4d: ISAKMP (6:20): Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
1w4d: ISAKMP (6:20): received packet from 172.31.182.33 dport 4500 sport
4500 Global (R) QM_IDLE
1w4d: ISAKMP: set new node -763456303 to QM_IDLE
1w4d: ISAKMP (6:20): processing HASH payload. message ID = -763456303
1w4d: ISAKMP (6:20): processing DELETE payload. message ID = -763456303
1w4d: ISAKMP (6:20): peer does not do paranoid keepalives.
1w4d: ISAKMP (6:20): deleting SA reason "P1 delete notify (in)" state
(R) QM_IDLE (peer 172.31.182.33) input queue 0
1w4d: ISAKMP (6:20): deleting node -763456303 error FALSE reason
"informational (in) state 1"
1w4d: ISAKMP (6:20): Input = IKE_MESG_FROM_PEER, IKE_INFO_DELETE
1w4d: ISAKMP (6:20): Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
1w4d: ISAKMP (6:20): Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
1w4d: ISAKMP (6:20): Old State = IKE_P1_COMPLETE New State = IKE_DEST_SA
1w4d: ISAKMP (6:20): deleting SA reason "" state (R) QM_IDLE (peer
172.31.182.33) input queue 0
1w4d: ISAKMP (6:20): deleting node -822247518 error FALSE reason ""
1w4d: ISAKMP (6:20): Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
1w4d: ISAKMP (6:20): Old State = IKE_DEST_SA New State = IKE_DEST_SA
|
