Leo Laohoo Thu, 09/12/2013 - 21:56
User Badges:
  • Super Gold, 25000 points or more
  • Hall of Fame,

    The Hall of Fame designation is a lifetime achievement award based on significant overall achievements in the community. 

  • Cisco Designated VIP,

    2017 LAN, Wireless

undebug all

wajid dabir Thu, 09/12/2013 - 22:10
User Badges:

i am not able to login from console also as errors are continuously generating.....so i am able to undebug

Leo Laohoo Thu, 09/12/2013 - 22:12
User Badges:
  • Super Gold, 25000 points or more
  • Hall of Fame,

    The Hall of Fame designation is a lifetime achievement award based on significant overall achievements in the community. 

  • Cisco Designated VIP,

    2017 LAN, Wireless

If you are not able to console in, how did you manage to get the logs?


What error message do you get when you try to console in? 

wajid dabir Thu, 09/12/2013 - 22:16
User Badges:

When i connect the console error start generating,so i am not able to login in router to undebug all.


This eeror i am getting:




ad. message ID = 0

Sep 13 04:27:21.573: ISAKMP (14407): ID payload

    next-payload : 8

    type         : 1

ad. message ID = 0

Sep 13 04:27:21.573: ISAKMP (14407): ID payload

    next-payload : 8

    type         : 1

    address      : 172.35.194.145

    protocol     : 17

    port         : 500

    length       : 12

Sep 13 04:27:21.573: ISAKMP:(0):: peer matches *none* of the profiles

Sep 13 04:27:21.573: ISAKMP:(14407): processing HASH payload. message ID = 0

Sep 13 04:27:21.573: ISAKMP:(14407):SA authentication status:

    authenticated

Sep 13 04:27:21.573: ISAKMP:(14407):SA has been authenticated with 172.35.194.145

Sep 13 04:27:21.573: ISAKMP:(14407):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:27:21.573: ISAKMP:(14407):Old State = IKE_I_MM5  New State = IKE_I_MM6


Sep 13 04:27:21.573: ISAKMP:(14407):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Sep 13 04:27:21.573: ISAKMP:(14407):Old State = IKE_I_MM6  New State = IKE_I_MM6


Sep 13 04:27:21.573: ISAKMP:(14407):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

Sep 13 04:27:21.573: ISAKMP:(14407):Old State = IKE_I_MM6  New State = IKE_P1_COMPLETE


Sep 13 04:27:21.573: ISAKMP:(14407):beginning Quick Mode exchange, M-ID of 737401177

Sep 13 04:27:21.573: ISAKMP:(14407):QM Initiator gets spi

Sep 13 04:27:21.577: ISAKMP:(14407): sending packet to 172.35.194.145 my_port 500 peer_port 500 (I) QM_IDLE     

Sep 13 04:27:21.577: ISAKMP:(14407):Sending an IKE IPv4 Packet.

Sep 13 04:27:21.577: ISAKMP:(14407):Node 737401177, Input = IKE_MESG_INTERNAL, IKE_INIT_QM

Sep 13 04:27:21.577: ISAKMP:(14407):Old State = IKE_QM_READY  New State = IKE_QM_I_QM1

Sep 13 04:27:21.577: ISAKMP:(14407):Input = IKE_MESG_INTERNAL, IKE_PHASE1_COMPLETE

Sep 13 04:27:21.577: ISAKMP:(14407):Old State = IKE_P1_COMPLETE  New State = IKE_P1_COMPLETE


Sep 13 04:27:21.645: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP

Sep 13 04:27:21.645: ISAKMP:(0): phase 1 packet is a duplicate of a previous packet.

Sep 13 04:27:21.645: ISAKMP:(0): retransmitting due to retransmit phase 1

Sep 13 04:27:21.665: ISAKMP (14407): received packet from 172.35.194.145 dport 500 sport 500 Global (I) QM_IDLE     

Sep 13 04:27:21.665: ISAKMP:(14407): processing HASH payload. message ID = 737401177

Sep 13 04:27:21.665: ISAKMP:(14407): processing SA payload. message ID = 737401177

Sep 13 04:27:21.665: ISAKMP:(14407):Checking IPSec proposal 1

Sep 13 04:27:21.665: ISAKMP: transform 1, ESP_3DES

Sep 13 04:27:21.665: ISAKMP:   attributes in transform:

Sep 13 04:27:21.665: ISAKMP:      encaps is 1 (Tunnel)

Sep 13 04:27:21.665: ISAKMP:      SA life type in seconds

Sep 13 04:27:21.665: ISAKMP:      SA life duration (basic) of 300

Sep 13 04:27:21.665: ISAKMP:      SA life type in kilobytes

Sep 13 04:27:21.665: ISAKMP:      SA life duration (VPI) of  0x0 0x46 0x50 0x0

Sep 13 04:27:21.665: ISAKMP:      authenticator is HMAC-MD5

Sep 13 04:27:21.665: ISAKMP:      group is 2

Sep 13 04:27:21.665: ISAKMP:(14407):atts are acceptable.

Sep 13 04:27:21.665: ISAKMP:(14407): processing NONCE payload. message ID = 737401177

Sep 13 04:27:21.665: ISAKMP:(14407): processing KE payload. message ID = 737401177

Sep 13 04:27:21.669: ISAKMP:(14407): processing ID payload. message ID = 737401177

Sep 13 04:27:21.669: ISAKMP:(14407): processing ID payload. message ID = 737401177

Sep 13 04:27:21.669: ISAKMP:(14407): Creating IPSec SAs

Sep 13 04:27:21.669:         inbound SA from 172.35.194.145 to 172.34.47.57 (f/i)  0/ 0

        (proxy 172.16.2.0 to 0.0.0.0)

Sep 13 04:27:21.669:         has spi 0x3A7219D1 and conn_id 0

Sep 13 04:27:21.669:         lifetime of 300 seconds

Sep 13 04:27:21.669:         lifetime of 4608000 kilobytes

Sep 13 04:27:21.669:         outbound SA from 172.34.47.57 to 172.35.194.145 (f/i) 0/0

        (proxy 0.0.0.0 to 172.16.2.0)

Sep 13 04:27:21.669:         has spi  0x2DB4C49F and conn_id 0

Sep 13 04:27:21.669:         lifetime of 300 seconds

Sep 13 04:27:21.669:         lifetime of 4608000 kilobytes

Sep 13 04:27:21.669: ISAKMP:(14407): sending packet to 172.35.194.145 my_port 500 peer_port 500 (I) QM_IDLE     

Sep 13 04:27:21.669: ISAKMP:(14407):Sending an IKE IPv4 Packet.

Sep 13 04:27:21.669: ISAKMP:(14407):deleting node 737401177 error FALSE reason "No Error"

Sep 13 04:27:21.669: ISAKMP:(14407):Node 737401177, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:27:21.669: ISAKMP:(14407):Old State = IKE_QM_I_QM1  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 04:27:21.929: ISAKMP:(14386):purging node -1519362962

Sep 13 04:27:22.145: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...

Sep 13 04:27:22.145: ISAKMP (0): incrementing error counter on sa, attempt 4 of 5: retransmit phase 1

Sep 13 04:27:22.145: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP

Sep 13 04:27:22.145: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP

Sep 13 04:27:22.145: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:27:22.569: ISAKMP (0): received packet from 172.35.200.91 dport 500 sport 500 Global (R) MM_NO_STATE

Sep 13 04:27:24.841: ISAKMP: set new node -76103279 to QM_IDLE     

Sep 13 04:27:24.841: ISAKMP:(14406): sending packet to 172.35.217.15 my_port 500 peer_port 500 (R) QM_IDLE     

Sep 13 04:27:24.841: ISAKMP:(14406):Sending an IKE IPv4 Packet.

Sep 13 04:27:24.841: ISAKMP:(14406):purging node -76103279

Sep 13 04:27:24.841: ISAKMP:(14406):Input = IKE_MESG_FROM_IPSEC, IKE_PHASE2_DEL

Sep 13 04:27:24.841: ISAKMP:(14406):Old State = IKE_P1_COMPLETE  New State = IKE_P1_COMPLETE


Sep 13 04:27:24.841: ISAKMP (14406): received packet from 172.35.217.15 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:27:24.841: ISAKMP: set new node -1746108638 to QM_IDLE     

Sep 13 04:27:24.841: ISAKMP:(14406): processing HASH payload. message ID = 2548858658

Sep 13 04:27:24.841: ISAKMP:(14406): processing DELETE payload. message ID = 2548858658

Sep 13 04:27:24.841: ISAKMP:(14406):peer does not do paranoid keepalives.


Sep 13 04:27:24.841: ISAKMP:(14406):deleting node -1746108638 error FALSE reason "Informational (in) state 1"

Sep 13 04:27:26.197: ISAKMP:(14384):purging SA., sa=134D9B1C, delme=134D9B1C

Sep 13 04:27:26.233: ISAKMP:(14385):purging SA., sa=1F6EF24, delme=1F6EF24

Sep 13 04:27:27.497: ISAKMP:(14404):purging node 498370353

Sep 13 04:27:28.345: ISAKMP:(0):purging SA., sa=4018B0F0, delme=4018B0F0

Sep 13 04:27:28.845: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...

Sep 13 04:27:28.845: ISAKMP:(0):peer does not do paranoid keepalives.


Sep 13 04:27:28.845: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (I) MM_NO_STATE (peer 172.35.200.87)

Sep 13 04:27:28.845: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (I) MM_NO_STATE (peer 172.35.200.87)

Sep 13 04:27:28.845: ISAKMP: Unlocking peer struct 0x1FB5094 for isadb_mark_sa_deleted(), count 0

Sep 13 04:27:28.845: ISAKMP: Deleting peer node by peer_reap for 172.35.200.87: 1FB5094

Sep 13 04:27:28.845: ISAKMP:(0):deleting node 1013205142 error FALSE reason "IKE deleted"

Sep 13 04:27:28.845: ISAKMP:(0):deleting node -1738356762 error FALSE reason "IKE deleted"

Sep 13 04:27:28.845: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL

Sep 13 04:27:28.845: ISAKMP:(0):Old State = IKE_I_MM1  New State = IKE_DEST_SA


Sep 13 04:27:29.345: ISAKMP:(0): SA request profile is (NULL)

Sep 13 04:27:29.345: ISAKMP: Created a peer struct for 172.35.200.87, peer port 500

Sep 13 04:27:29.345: ISAKMP: New peer created peer = 0x1FB5094 peer_handle = 0x80008B45

Sep 13 04:27:29.345: ISAKMP: Locking peer struct 0x1FB5094, refcount 1 for isakmp_initiator

Sep 13 04:27:29.349: ISAKMP: local port 500, remote port 500

Sep 13 04:27:29.349: ISAKMP: set new node 0 to QM_IDLE     

Sep 13 04:27:29.349: ISAKMP: Find a dup sa in the avl tree during calling isadb_insert sa = 134D9B1C

Sep 13 04:27:29.349: ISAKMP:(0):Can not start Aggressive mode, trying Main mode.

Sep 13 04:27:29.349: ISAKMP:(0):found peer pre-shared key matching 172.35.200.87

Sep 13 04:27:29.349: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID

Sep 13 04:27:29.349: ISAKMP:(0): constructed NAT-T vendor-07 ID

Sep 13 04:27:29.349: ISAKMP:(0): constructed NAT-T vendor-03 ID

Sep 13 04:27:29.349: ISAKMP:(0): constructed NAT-T vendor-02 ID

Sep 13 04:27:29.349: ISAKMP:(0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM

Sep 13 04:27:29.349: ISAKMP:(0):Old State = IKE_READY  New State = IKE_I_MM1


Sep 13 04:27:29.349: ISAKMP:(0): beginning Main Mode exchange

Sep 13 04:27:29.349: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE

Sep 13 04:27:29.349: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:27:30.677: ISAKMP:(14387):purging node 748799546

Sep 13 04:27:31.645: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP

Sep 13 04:27:31.645: ISAKMP:(0): phase 1 packet is a duplicate of a previous packet.

Sep 13 04:27:31.645: ISAKMP:(0): retransmitting due to retransmit phase 1

Sep 13 04:27:31.929: ISAKMP:(14386):purging SA., sa=411CF108, delme=411CF108

Sep 13 04:27:32.145: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...

Sep 13 04:27:32.145: ISAKMP (0): incrementing error counter on sa, attempt 5 of 5: retransmit phase 1

Sep 13 04:27:32.145: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP

Sep 13 04:27:32.145: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP

Sep 13 04:27:32.145: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:27:32.569: ISAKMP (0): received packet from 172.35.200.91 dport 500 sport 500 Global (R) MM_NO_STATE

Sep 13 04:27:32.953: ISAKMP (14389): received packet from 172.35.237.233 dport 500 sport 500 Global (I) QM_IDLE     

Sep 13 04:27:32.953: ISAKMP: set new node 299600500 to QM_IDLE     

Sep 13 04:27:32.953: ISAKMP:(14389): processing HASH payload. message ID = 299600500

Sep 13 04:27:32.953: ISAKMP:received payload type 18

Sep 13 04:27:32.953: ISAKMP:(14389):Processing delete with reason payload

Sep 13 04:27:32.953: ISAKMP:(14389):delete doi = 1

Sep 13 04:27:32.953: ISAKMP:(14389):delete protocol id = 1

Sep 13 04:27:32.953: ISAKMP:(14389):delete spi_size =  16

Sep 13 04:27:32.953: ISAKMP:(14389):delete num spis = 1

Sep 13 04:27:32.953: ISAKMP:(14389):delete_reason = 10

Sep 13 04:27:32.953: ISAKMP:(14389): processing DELETE_WITH_REASON payload, message ID = 299600500, reason: Unknown delete reason!

Sep 13 04:27:32.953: ISAKMP:(14389):peer does not do paranoid keepalives.


Sep 13 04:27:32.953: ISAKMP:(14389):deleting SA reason "IKE SA Lifetime Exceeded" state (I) QM_IDLE       (peer 172.35.237.233)

Sep 13 04:27:32.953: ISAKMP:(14389):deleting node 299600500 error FALSE reason "Informational (in) state 1"

Sep 13 04:27:32.953: ISAKMP: set new node -1993838501 to QM_IDLE     

Sep 13 04:27:32.953: ISAKMP:(14389): sending packet to 172.35.237.233 my_port 500 peer_port 500 (I) QM_IDLE     

Sep 13 04:27:32.953: ISAKMP:(14389):Sending an IKE IPv4 Packet.

Sep 13 04:27:32.953: ISAKMP:(14389):purging node -1993838501

Sep 13 04:27:32.953: ISAKMP:(14389):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL

Sep 13 04:27:32.953: ISAKMP:(14389):Old State = IKE_P1_COMPLETE  New State = IKE_DEST_SA


Sep 13 04:27:32.953: ISAKMP:(14389):deleting SA reason "IKE SA Lifetime Exceeded" state (I) QM_IDLE       (peer 172.35.237.233)

Sep 13 04:27:32.953: ISAKMP: Unlocking peer struct 0x10D668C for isadb_mark_sa_deleted(), count 0

Sep 13 04:27:32.953: ISAKMP:(14389):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:27:32.953: ISAKMP:(14389):Old State = IKE_DEST_SA  New State = IKE_DEST_SA


Sep 13 04:27:33.249: ISAKMP: ignoring request to send delete notify (no ISAKMP sa) src 172.34.47.57 dst 172.35.237.233 for SPI 0xF84E9858

Sep 13 04:27:36.129: ISAKMP:(14406):purging node -500665922

Sep 13 04:27:38.233: ISAKMP:(0): SA request profile is (NULL)

Sep 13 04:27:38.233: ISAKMP: Created a peer struct for 172.35.194.150, peer port 500

Sep 13 04:27:38.233: ISAKMP: New peer created peer = 0x12370108 peer_handle = 0x8000FFBF

Sep 13 04:27:38.233: ISAKMP: Locking peer struct 0x12370108, refcount 1 for isakmp_initiator

Sep 13 04:27:38.233: ISAKMP: local port 500, remote port 500

Sep 13 04:27:38.233: ISAKMP: set new node 0 to QM_IDLE     

Sep 13 04:27:38.233: ISAKMP:(0):insert sa successfully sa = 4018B0F0

Sep 13 04:27:38.233: ISAKMP:(0):Can not start Aggressive mode, trying Main mode.

Sep 13 04:27:38.233: ISAKMP:(0):found peer pre-shared key matching 172.35.194.150

Sep 13 04:27:38.233: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID

Sep 13 04:27:38.233: ISAKMP:(0): constructed NAT-T vendor-07 ID

Sep 13 04:27:38.233: ISAKMP:(0): constructed NAT-T vendor-03 ID

Sep 13 04:27:38.233: ISAKMP:(0): constructed NAT-T vendor-02 ID

Sep 13 04:27:38.233: ISAKMP:(0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM

Sep 13 04:27:38.233: ISAKMP:(0):Old State = IKE_READY  New State = IKE_I_MM1


Sep 13 04:27:38.233: ISAKMP:(0): beginning Main Mode exchange

Sep 13 04:27:38.233: ISAKMP:(0): sending packet to 172.35.194.150 my_port 500 peer_port 500 (I) MM_NO_STATE

Sep 13 04:27:38.233: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:27:39.129: ISAKMP:(0): SA request profile is (NULL)

Sep 13 04:27:39.129: ISAKMP: Found a peer struct for 172.34.47.146, peer port 500

Sep 13 04:27:39.129: ISAKMP: Locking peer struct 0x10E9688, refcount 1 for isakmp_initiator

Sep 13 04:27:39.129: ISAKMP: local port 500, remote port 500

Sep 13 04:27:39.129: ISAKMP: set new node 0 to QM_IDLE     

Sep 13 04:27:39.129: ISAKMP:(0):insert sa successfully sa = 1F6EF24

Sep 13 04:27:39.129: ISAKMP:(0):Can not start Aggressive mode, trying Main mode.

Sep 13 04:27:39.129: ISAKMP:(0):found peer pre-shared key matching 172.34.47.146

Sep 13 04:27:39.129: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID

Sep 13 04:27:39.129: ISAKMP:(0): constructed NAT-T vendor-07 ID

Sep 13 04:27:39.129: ISAKMP:(0): constructed NAT-T vendor-03 ID

Sep 13 04:27:39.129: ISAKMP:(0): constructed NAT-T vendor-02 ID

Sep 13 04:27:39.129: ISAKMP:(0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM

Sep 13 04:27:39.129: ISAKMP:(0):Old State = IKE_READY  New State = IKE_I_MM1


Sep 13 04:27:39.129: ISAKMP:(0): beginning Main Mode exchange

Sep 13 04:27:39.129: ISAKMP:(0): sending packet to 172.34.47.146 my_port 500 peer_port 500 (I) MM_NO_STATE

Sep 13 04:27:39.129: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:27:39.217: ISAKMP (0): received packet from 172.34.47.146 dport 500 sport 500 Global (I) MM_NO_STATE

Sep 13 04:27:39.217: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:27:39.217: ISAKMP:(0):Old State = IKE_I_MM1  New State = IKE_I_MM2


Sep 13 04:27:39.217: ISAKMP:(0): processing SA payload. message ID = 0

Sep 13 04:27:39.217: ISAKMP:(0): processing vendor id payload

Sep 13 04:27:39.217: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch

Sep 13 04:27:39.217: ISAKMP (0): vendor ID is NAT-T RFC 3947

Sep 13 04:27:39.217: ISAKMP:(0):found peer pre-shared key matching 172.34.47.146

Sep 13 04:27:39.217: ISAKMP:(0): local preshared key found

Sep 13 04:27:39.217: ISAKMP : Scanning profiles for xauth ...

Sep 13 04:27:39.217: ISAKMP:(0):Checking ISAKMP transform 1 against priority 30 policy

Sep 13 04:27:39.217: ISAKMP:      encryption 3DES-CBC

Sep 13 04:27:39.217: ISAKMP:      hash MD5

Sep 13 04:27:39.217: ISAKMP:      default group 2

Sep 13 04:27:39.217: ISAKMP:      auth pre-share

Sep 13 04:27:39.217: ISAKMP:      life type in seconds

Sep 13 04:27:39.217: ISAKMP:      life duration (basic) of 300

Sep 13 04:27:39.217: ISAKMP:(0):atts are acceptable. Next payload is 0

Sep 13 04:27:39.217: ISAKMP:(0):Acceptable atts:actual life: 0

Sep 13 04:27:39.217: ISAKMP:(0):Acceptable atts:life: 0

Sep 13 04:27:39.217: ISAKMP:(0):Basic life_in_seconds:300

Sep 13 04:27:39.217: ISAKMP:(0):Returning Actual lifetime: 300

Sep 13 04:27:39.217: ISAKMP:(0)::Started lifetime timer: 300.


Sep 13 04:27:39.217: ISAKMP:(0): processing vendor id payload

Sep 13 04:27:39.217: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch

Sep 13 04:27:39.217: ISAKMP (0): vendor ID is NAT-T RFC 3947

Sep 13 04:27:39.217: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Sep 13 04:27:39.217: ISAKMP:(0):Old State = IKE_I_MM2  New State = IKE_I_MM2


Sep 13 04:27:39.217: ISAKMP:(0): sending packet to 172.34.47.146 my_port 500 peer_port 500 (I) MM_SA_SETUP

Sep 13 04:27:39.217: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:27:39.217: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

Sep 13 04:27:39.217: ISAKMP:(0):Old State = IKE_I_MM2  New State = IKE_I_MM3


Sep 13 04:27:39.293: ISAKMP (0): received packet from 172.34.47.146 dport 500 sport 500 Global (I) MM_SA_SETUP

Sep 13 04:27:39.293: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:27:39.293: ISAKMP:(0):Old State = IKE_I_MM3  New State = IKE_I_MM4


Sep 13 04:27:39.293: ISAKMP:(0): processing KE payload. message ID = 0

Sep 13 04:27:39.293: ISAKMP:(0): processing NONCE payload. message ID = 0

Sep 13 04:27:39.293: ISAKMP:(0):found peer pre-shared key matching 172.34.47.146

Sep 13 04:27:39.293: ISAKMP:(14408): processing vendor id payload

Sep 13 04:27:39.293: ISAKMP:(14408): vendor ID is Unity

Sep 13 04:27:39.293: ISAKMP:(14408): processing vendor id payload

Sep 13 04:27:39.293: ISAKMP:(14408): vendor ID is DPD

Sep 13 04:27:39.293: ISAKMP:(14408): processing vendor id payload

Sep 13 04:27:39.293: ISAKMP:(14408): speaking to another IOS box!

Sep 13 04:27:39.293: ISAKMP:received payload type 20

Sep 13 04:27:39.293: ISAKMP (14408): His hash no match - this node outside NAT

Sep 13 04:27:39.293: ISAKMP:received payload type 20

Sep 13 04:27:39.293: ISAKMP (14408): No NAT Found for self or peer

Sep 13 04:27:39.293: ISAKMP:(14408):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Sep 13 04:27:39.297: ISAKMP:(14408):Old State = IKE_I_MM4  New State = IKE_I_MM4


Sep 13 04:27:39.297: ISAKMP:(14408):SA is doing pre-shared key authentication using id type ID_IPV4_ADDR

Sep 13 04:27:39.297: ISAKMP (14408): ID payload

    next-payload : 8

    type         : 1

    address      : 172.34.47.57

    protocol     : 17

    port         : 500

    length       : 12

Sep 13 04:27:39.297: ISAKMP:(14408):Total payload length: 12

Sep 13 04:27:39.297: ISAKMP:(14408): sending packet to 172.34.47.146 my_port 500 peer_port 500 (I) MM_KEY_EXCH

Sep 13 04:27:39.297: ISAKMP:(14408):Sending an IKE IPv4 Packet.

Sep 13 04:27:39.297: ISAKMP:(14408):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

Sep 13 04:27:39.297: ISAKMP:(14408):Old State = IKE_I_MM4  New State = IKE_I_MM5


Sep 13 04:27:39.337: ISAKMP (14408): received packet from 172.34.47.146 dport 500 sport 500 Global (I) MM_KEY_EXCH

Sep 13 04:27:39.337: ISAKMP:(14408): processing ID payload. message ID = 0

Sep 13 04:27:39.337: ISAKMP (14408): ID payload

    next-payload : 8

    type         : 1

    address      : 172.34.47.146

    protocol     : 17

    port         : 500

    length       : 12

Sep 13 04:27:39.337: ISAKMP:(0):: peer matches *none* of the profiles

Sep 13 04:27:39.337: ISAKMP:(14408): processing HASH payload. message ID = 0

Sep 13 04:27:39.337: ISAKMP:(14408):SA authentication status:

    authenticated

Sep 13 04:27:39.337: ISAKMP:(14408):SA has been authenticated with 172.34.47.146

Sep 13 04:27:39.337: ISAKMP:(14408):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:27:39.337: ISAKMP:(14408):Old State = IKE_I_MM5  New State = IKE_I_MM6


Sep 13 04:27:39.337: ISAKMP:(14408):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Sep 13 04:27:39.337: ISAKMP:(14408):Old State = IKE_I_MM6  New State = IKE_I_MM6


Sep 13 04:27:39.337: ISAKMP:(14408):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

Sep 13 04:27:39.337: ISAKMP:(14408):Old State = IKE_I_MM6  New State = IKE_P1_COMPLETE


Sep 13 04:27:39.337: ISAKMP:(14408):beginning Quick Mode exchange, M-ID of 119951985

Sep 13 04:27:39.341: ISAKMP:(14408):QM Initiator gets spi

Sep 13 04:27:39.341: ISAKMP:(14408): sending packet to 172.34.47.146 my_port 500 peer_port 500 (I) QM_IDLE     

Sep 13 04:27:39.341: ISAKMP:(14408):Sending an IKE IPv4 Packet.

Sep 13 04:27:39.341: ISAKMP:(14408):Node 119951985, Input = IKE_MESG_INTERNAL, IKE_INIT_QM

Sep 13 04:27:39.341: ISAKMP:(14408):Old State = IKE_QM_READY  New State = IKE_QM_I_QM1

Sep 13 04:27:39.341: ISAKMP:(14408):Input = IKE_MESG_INTERNAL, IKE_PHASE1_COMPLETE

Sep 13 04:27:39.341: ISAKMP:(14408):Old State = IKE_P1_COMPLETE  New State = IKE_P1_COMPLETE


Sep 13 04:27:39.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...

Sep 13 04:27:39.349: ISAKMP (0): incrementing error counter on sa, attempt 1 of 5: retransmit phase 1

Sep 13 04:27:39.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE

Sep 13 04:27:39.349: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE

Sep 13 04:27:39.349: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:27:39.437: ISAKMP (14408): received packet from 172.34.47.146 dport 500 sport 500 Global (I) QM_IDLE     

Sep 13 04:27:39.437: ISAKMP:(14408): processing HASH payload. message ID = 119951985

Sep 13 04:27:39.437: ISAKMP:(14408): processing SA payload. message ID = 119951985

Sep 13 04:27:39.437: ISAKMP:(14408):Checking IPSec proposal 1

Sep 13 04:27:39.437: ISAKMP: transform 1, ESP_3DES

Sep 13 04:27:39.437: ISAKMP:   attributes in transform:

Sep 13 04:27:39.437: ISAKMP:      encaps is 1 (Tunnel)

Sep 13 04:27:39.437: ISAKMP:      SA life type in seconds

Sep 13 04:27:39.437: ISAKMP:      SA life duration (basic) of 300

Sep 13 04:27:39.437: ISAKMP:      SA life type in kilobytes

Sep 13 04:27:39.437: ISAKMP:      SA life duration (VPI) of  0x0 0x46 0x50 0x0

Sep 13 04:27:39.437: ISAKMP:      authenticator is HMAC-MD5

Sep 13 04:27:39.437: ISAKMP:      group is 2

Sep 13 04:27:39.437: ISAKMP:(14408):atts are acceptable.

Sep 13 04:27:39.437: ISAKMP:(14408): processing NONCE payload. message ID = 119951985

Sep 13 04:27:39.437: ISAKMP:(14408): processing KE payload. message ID = 119951985

Sep 13 04:27:39.441: ISAKMP:(14408): processing ID payload. message ID = 119951985

Sep 13 04:27:39.441: ISAKMP:(14408): processing ID payload. message ID = 119951985

Sep 13 04:27:39.441: ISAKMP:(14408): Creating IPSec SAs

Sep 13 04:27:39.441:         inbound SA from 172.34.47.146 to 172.34.47.57 (f/i)  0/ 0

        (proxy 172.16.1.0 to 0.0.0.0)

Sep 13 04:27:39.441:         has spi 0x650E4D42 and conn_id 0

Sep 13 04:27:39.441:         lifetime of 300 seconds

Sep 13 04:27:39.441:         lifetime of 4608000 kilobytes

Sep 13 04:27:39.441:         outbound SA from 172.34.47.57 to 172.34.47.146 (f/i) 0/0

        (proxy 0.0.0.0 to 172.16.1.0)

Sep 13 04:27:39.441:         has spi  0xDB5D5974 and conn_id 0

Sep 13 04:27:39.441:         lifetime of 300 seconds

Sep 13 04:27:39.441:         lifetime of 4608000 kilobytes

Sep 13 04:27:39.441: ISAKMP:(14408): sending packet to 172.34.47.146 my_port 500 peer_port 500 (I) QM_IDLE     

Sep 13 04:27:39.441: ISAKMP:(14408):Sending an IKE IPv4 Packet.

Sep 13 04:27:39.441: ISAKMP:(14408):deleting node 119951985 error FALSE reason "No Error"

Sep 13 04:27:39.441: ISAKMP:(14408):Node 119951985, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:27:39.441: ISAKMP:(14408):Old State = IKE_QM_I_QM1  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 04:27:40.389: ISAKMP (0): received packet from 172.35.206.48 dport 500 sport 500 Global (N) NEW SA

Sep 13 04:27:40.389: ISAKMP: Found a peer struct for 172.35.206.48, peer port 500

Sep 13 04:27:40.389: ISAKMP: Locking peer struct 0x1E9F854, refcount 1 for crypto_isakmp_process_block

Sep 13 04:27:40.389: ISAKMP: local port 500, remote port 500

Sep 13 04:27:40.389: ISAKMP:(0):insert sa successfully sa = 411CEBDC

Sep 13 04:27:40.389: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:27:40.389: ISAKMP:(0):Old State = IKE_READY  New State = IKE_R_MM1


Sep 13 04:27:40.389: ISAKMP:(0): processing SA payload. message ID = 0

Sep 13 04:27:40.389: ISAKMP:(0): processing vendor id payload

Sep 13 04:27:40.389: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch

Sep 13 04:27:40.389: ISAKMP (0): vendor ID is NAT-T RFC 3947

Sep 13 04:27:40.389: ISAKMP:(0): processing vendor id payload

Sep 13 04:27:40.389: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch

Sep 13 04:27:40.389: ISAKMP (0): vendor ID is NAT-T v7

Sep 13 04:27:40.389: ISAKMP:(0): processing vendor id payload

Sep 13 04:27:40.389: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch

Sep 13 04:27:40.389: ISAKMP:(0): vendor ID is NAT-T v3

Sep 13 04:27:40.389: ISAKMP:(0): processing vendor id payload

Sep 13 04:27:40.389: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch

Sep 13 04:27:40.389: ISAKMP:(0): vendor ID is NAT-T v2

Sep 13 04:27:40.389: ISAKMP:(0):found peer pre-shared key matching 172.35.206.48

Sep 13 04:27:40.389: ISAKMP:(0): local preshared key found

Sep 13 04:27:40.389: ISAKMP : Scanning profiles for xauth ...

Sep 13 04:27:40.389: ISAKMP:(0):Checking ISAKMP transform 1 against priority 30 policy

Sep 13 04:27:40.389: ISAKMP:      encryption 3DES-CBC

Sep 13 04:27:40.389: ISAKMP:      hash MD5

Sep 13 04:27:40.389: ISAKMP:      default group 2

Sep 13 04:27:40.389: ISAKMP:      auth pre-share

Sep 13 04:27:40.389: ISAKMP:      life type in seconds

Sep 13 04:27:40.389: ISAKMP:      life duration (basic) of 300

Sep 13 04:27:40.389: ISAKMP:(0):atts are acceptable. Next payload is 0

Sep 13 04:27:40.389: ISAKMP:(0):Acceptable atts:actual life: 0

Sep 13 04:27:40.389: ISAKMP:(0):Acceptable atts:life: 0

Sep 13 04:27:40.389: ISAKMP:(0):Basic life_in_seconds:300

Sep 13 04:27:40.389: ISAKMP:(0):Returning Actual lifetime: 300

Sep 13 04:27:40.389: ISAKMP:(0)::Started lifetime timer: 300.


Sep 13 04:27:40.389: ISAKMP:(0): processing vendor id payload

Sep 13 04:27:40.389: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch

Sep 13 04:27:40.389: ISAKMP (0): vendor ID is NAT-T RFC 3947

Sep 13 04:27:40.389: ISAKMP:(0): processing vendor id payload

Sep 13 04:27:40.389: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch

Sep 13 04:27:40.389: ISAKMP (0): vendor ID is NAT-T v7

Sep 13 04:27:40.389: ISAKMP:(0): processing vendor id payload

Sep 13 04:27:40.389: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch

Sep 13 04:27:40.389: ISAKMP:(0): vendor ID is NAT-T v3

Sep 13 04:27:40.389: ISAKMP:(0): processing vendor id payload

Sep 13 04:27:40.389: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch

Sep 13 04:27:40.389: ISAKMP:(0): vendor ID is NAT-T v2

Sep 13 04:27:40.389: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Sep 13 04:27:40.389: ISAKMP:(0):Old State = IKE_R_MM1  New State = IKE_R_MM1


Sep 13 04:27:40.389: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID

Sep 13 04:27:40.389: ISAKMP:(0): sending packet to 172.35.206.48 my_port 500 peer_port 500 (R) MM_SA_SETUP

Sep 13 04:27:40.389: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:27:40.389: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

Sep 13 04:27:40.389: ISAKMP:(0):Old State = IKE_R_MM1  New State = IKE_R_MM2


Sep 13 04:27:40.473: ISAKMP (0): received packet from 172.35.206.48 dport 500 sport 500 Global (R) MM_SA_SETUP

Sep 13 04:27:40.473: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:27:40.473: ISAKMP:(0):Old State = IKE_R_MM2  New State = IKE_R_MM3


Sep 13 04:27:40.473: ISAKMP:(0): processing KE payload. message ID = 0

Sep 13 04:27:40.473: ISAKMP:(0): processing NONCE payload. message ID = 0

Sep 13 04:27:40.473: ISAKMP:(0):found peer pre-shared key matching 172.35.206.48

Sep 13 04:27:40.473: ISAKMP:(14409): processing vendor id payload

Sep 13 04:27:40.473: ISAKMP:(14409): vendor ID is DPD

Sep 13 04:27:40.473: ISAKMP:(14409): processing vendor id payload

Sep 13 04:27:40.473: ISAKMP:(14409): speaking to another IOS box!

Sep 13 04:27:40.473: ISAKMP:(14409): processing vendor id payload

Sep 13 04:27:40.473: ISAKMP:(14409): vendor ID seems Unity/DPD but major 129 mismatch

Sep 13 04:27:40.473: ISAKMP:(14409): vendor ID is XAUTH

Sep 13 04:27:40.473: ISAKMP:received payload type 20

Sep 13 04:27:40.473: ISAKMP (14409): His hash no match - this node outside NAT

Sep 13 04:27:40.473: ISAKMP:received payload type 20

Sep 13 04:27:40.477: ISAKMP (14409): No NAT Found for self or peer

Sep 13 04:27:40.477: ISAKMP:(14409):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Sep 13 04:27:40.477: ISAKMP:(14409):Old State = IKE_R_MM3  New State = IKE_R_MM3


Sep 13 04:27:40.477: ISAKMP:(14409): sending packet to 172.35.206.48 my_port 500 peer_port 500 (R) MM_KEY_EXCH

Sep 13 04:27:40.477: ISAKMP:(14409):Sending an IKE IPv4 Packet.

Sep 13 04:27:40.477: ISAKMP:(14409):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

Sep 13 04:27:40.677: ISAKMP:(14387):purging SA., sa=40177E8C, delme=40177E8C

Sep 13 04:27:40.741: ISAKMP (14409): received packet from 172.35.206.48 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:27:40.741: ISAKMP:(14409):deleting node 1404442059 error FALSE reason "QM done (await)"

Sep 13 04:27:40.741: ISAKMP:(14409):Node 1404442059, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:27:40.741: ISAKMP:(14409):Old State = IKE_QM_R_QM2  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 04:27:42.145: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...

Sep 13 04:27:42.145: ISAKMP:(0):peer does not do paranoid keepalives.


Sep 13 04:27:42.145: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (R) MM_SA_SETUP (peer 172.35.200.87)

Sep 13 04:27:42.145: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (R) MM_SA_SETUP (peer 172.35.200.87)

Sep 13 04:27:42.145: ISAKMP: Unlocking peer struct 0x134DB41C for isadb_mark_sa_deleted(), count 0

Sep 13 04:27:42.145: ISAKMP: Deleting peer node by peer_reap for 172.35.200.87: 134DB41C

Sep 13 04:27:42.145: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL

Sep 13 04:27:42.145: ISAKMP:(0):Old State = IKE_R_MM2  New State = IKE_DEST_SA


Sep 13 04:27:42.569: ISAKMP:(0):purging SA., sa=411BD47C, delme=411BD47C

Sep 13 04:27:42.737: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (N) NEW SA

Sep 13 04:27:42.737: ISAKMP: Created a peer struct for 172.35.200.87, peer port 500

Sep 13 04:27:42.737: ISAKMP: New peer created peer = 0x411472DC peer_handle = 0x800104D2

Sep 13 04:27:42.737: ISAKMP: Locking peer struct 0x411472DC, refcount 1 for crypto_isakmp_process_block

Sep 13 04:27:42.737: ISAKMP: local port 500, remote port 500

Sep 13 04:27:42.737: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

Sep 13 04:27:42.737: ISAKMP:(0):Old State = IKE_R_MM1  New State = IKE_R_MM2


Sep 13 04:27:44.397: ISAKMP:(14389):purging node -595111776

Sep 13 04:27:48.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...

Sep 13 04:27:48.233: ISAKMP (0): incrementing error counter on sa, attempt 1 of 5: retransmit phase 1

Sep 13 04:27:48.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE

Sep 13 04:27:48.233: ISAKMP:(0): sending packet to 172.35.194.150 my_port 500 peer_port 500 (I) MM_NO_STATE

Sep 13 04:27:48.233: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:27:49.105: ISAKMP (14391): received packet from 172.35.194.155 dport 500 sport 500 Global (I) QM_IDLE     

Sep 13 04:27:49.105: ISAKMP: set new node 1659709134 to QM_IDLE     

Sep 13 04:27:49.105: ISAKMP:(14391): processing HASH payload. message ID = 1659709134

Sep 13 04:27:49.105: ISAKMP:(14391): processing SA payload. message ID = 1659709134

Sep 13 04:27:49.105: ISAKMP:(14391):Checking IPSec proposal 1

Sep 13 04:27:49.105: ISAKMP: transform 1, ESP_3DES

Sep 13 04:27:49.105: ISAKMP:   attributes in transform:

Sep 13 04:27:49.105: ISAKMP:      encaps is 1 (Tunnel)

Sep 13 04:27:49.105: ISAKMP:      SA life type in seconds

Sep 13 04:27:49.105: ISAKMP:      SA life duration (basic) of 300

Sep 13 04:27:49.105: ISAKMP:      SA life type in kilobytes

Sep 13 04:27:49.105: ISAKMP:      SA life duration (VPI) of  0x0 0x46 0x50 0x0

Sep 13 04:27:49.105: ISAKMP:      authenticator is HMAC-MD5

Sep 13 04:27:49.105: ISAKMP:      group is 2

Sep 13 04:27:49.105: ISAKMP:(14391):atts are acceptable.

Sep 13 04:27:49.105: ISAKMP:(14391): processing NONCE payload. message ID = 1659709134

Sep 13 04:27:49.105: ISAKMP:(14391): processing KE payload. message ID = 1659709134

Sep 13 04:27:49.109: ISAKMP:(14391): processing ID payload. message ID = 1659709134

Sep 13 04:27:49.109: ISAKMP:(14391): processing ID payload. message ID = 1659709134

Sep 13 04:27:49.109: ISAKMP:(14391):QM Responder gets spi

Sep 13 04:27:49.109: ISAKMP:(14391):Node 1659709134, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:27:49.109: ISAKMP:(14391):Old State = IKE_QM_READY  New State = IKE_QM_SPI_STARVE

Sep 13 04:27:49.109: ISAKMP:(14391): Creating IPSec SAs

Sep 13 04:27:49.109:         inbound SA from 172.35.194.155 to 172.34.47.57 (f/i)  0/ 0

        (proxy 172.20.15.0 to 0.0.0.0)

Sep 13 04:27:49.109:         has spi 0x1EA3FBBE and conn_id 0

Sep 13 04:27:49.109:         lifetime of 300 seconds

Sep 13 04:27:49.109:         lifetime of 4608000 kilobytes

Sep 13 04:27:49.109:         outbound SA from 172.34.47.57 to 172.35.194.155 (f/i) 0/0

        (proxy 0.0.0.0 to 172.20.15.0)

Sep 13 04:27:49.109:         has spi  0xFD092D0D and conn_id 0

Sep 13 04:27:49.109:         lifetime of 300 seconds

Sep 13 04:27:49.109:         lifetime of 4608000 kilobytes

Sep 13 04:27:49.109: ISAKMP:(14391): sending packet to 172.35.194.155 my_port 500 peer_port 500 (I) QM_IDLE     

Sep 13 04:27:49.109: ISAKMP:(14391):Sending an IKE IPv4 Packet.

Sep 13 04:27:49.109: ISAKMP:(14391):Node 1659709134, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI

Sep 13 04:27:49.109: ISAKMP:(14391):Old State = IKE_QM_SPI_STARVE  New State = IKE_QM_R_QM2

Sep 13 04:27:49.201: ISAKMP (14391): received packet from 172.35.194.155 dport 500 sport 500 Global (I) QM_IDLE     

Sep 13 04:27:49.201: ISAKMP:(14391):deleting node 1659709134 error FALSE reason "QM done (await)"

Sep 13 04:27:49.201: ISAKMP:(14391):Node 1659709134, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:27:49.201: ISAKMP:(14391):Old State = IKE_QM_R_QM2  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 04:27:49.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...

Sep 13 04:27:49.349: ISAKMP (0): incrementing error counter on sa, attempt 2 of 5: retransmit phase 1

Sep 13 04:27:49.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE

Sep 13 04:27:49.349: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE

Sep 13 04:27:49.349: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:27:52.733: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP

Sep 13 04:27:52.733: ISAKMP:(0): phase 1 packet is a duplicate of a previous packet.

Sep 13 04:27:52.733: ISAKMP:(0): retransmitting due to retransmit phase 1

Sep 13 04:27:53.233: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...

Sep 13 04:27:53.233: ISAKMP (0): incrementing error counter on sa, attempt 1 of 5: retransmit phase 1

Sep 13 04:27:53.233: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP

Sep 13 04:27:53.233: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP

Sep 13 04:27:53.233: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:27:55.933: ISAKMP (14390): received packet from 172.35.200.88 dport 500 sport 500 Global (I) QM_IDLE     

Sep 13 04:27:55.933: ISAKMP: set new node 8155520 to QM_IDLE     

Sep 13 04:27:55.933: ISAKMP:(14390): processing HASH payload. message ID = 8155520

Sep 13 04:27:55.933: ISAKMP:received payload type 18

Sep 13 04:27:55.933: ISAKMP:(14390):Processing delete with reason payload

Sep 13 04:27:55.933: ISAKMP:(14390):delete doi = 1

Sep 13 04:27:55.933: ISAKMP:(14390):delete protocol id = 1

Sep 13 04:27:55.933: ISAKMP:(14390):delete spi_size =  16

Sep 13 04:27:55.933: ISAKMP:(14390):delete num spis = 1

Sep 13 04:27:55.933: ISAKMP:(14390):delete_reason = 10

Sep 13 04:27:55.933: ISAKMP:(14390): processing DELETE_WITH_REASON payload, message ID = 8155520, reason: Unknown delete reason!

Sep 13 04:27:55.933: ISAKMP:(14390):peer does not do paranoid keepalives.


Sep 13 04:27:55.933: ISAKMP:(14390):deleting SA reason "IKE SA Lifetime Exceeded" state (I) QM_IDLE       (peer 172.35.200.88)

Sep 13 04:27:55.933: ISAKMP:(14390):deleting node 8155520 error FALSE reason "Informational (in) state 1"

Sep 13 04:27:55.933: ISAKMP: set new node -797376214 to QM_IDLE     

Sep 13 04:27:55.933: ISAKMP:(14390): sending packet to 172.35.200.88 my_port 500 peer_port 500 (I) QM_IDLE     

Sep 13 04:27:55.933: ISAKMP:(14390):Sending an IKE IPv4 Packet.

Sep 13 04:27:55.933: ISAKMP:(14390):purging node -797376214

Sep 13 04:27:55.933: ISAKMP:(14390):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL

Sep 13 04:27:55.933: ISAKMP:(14390):Old State = IKE_P1_COMPLETE  New State = IKE_DEST_SA


Sep 13 04:27:55.933: ISAKMP:(14390):deleting SA reason "IKE SA Lifetime Exceeded" state (I) QM_IDLE       (peer 172.35.200.88)

Sep 13 04:27:55.933: ISAKMP: Unlocking peer struct 0x40176A60 for isadb_mark_sa_deleted(), count 0

Sep 13 04:27:55.933: ISAKMP:(14390):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:27:55.933: ISAKMP:(14390):Old State = IKE_DEST_SA  New State = IKE_DEST_SA


Sep 13 04:27:56.689: ISAKMP (14407): received packet from 172.35.194.145 dport 500 sport 500 Global (I) QM_IDLE     

Sep 13 04:27:56.689: ISAKMP: set new node -2143616241 to QM_IDLE     

Sep 13 04:27:56.689: ISAKMP:(14407): processing HASH payload. message ID = 2151351055

Sep 13 04:27:56.689: ISAKMP:(14407): processing DELETE payload. message ID = 2151351055

Sep 13 04:27:56.689: ISAKMP:(14407):peer does not do paranoid keepalives.


Sep 13 04:27:56.689: ISAKMP:(14407):deleting node -2143616241 error FALSE reason "Informational (in) state 1"

Sep 13 04:27:56.921: ISAKMP: ignoring request to send delete notify (no ISAKMP sa) src 172.34.47.57 dst 172.35.200.88 for SPI 0x51E70BCC

Sep 13 04:27:58.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...

Sep 13 04:27:58.233: ISAKMP (0): incrementing error counter on sa, attempt 2 of 5: retransmit phase 1

Sep 13 04:27:58.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE

Sep 13 04:27:58.233: ISAKMP:(0): sending packet to 172.35.194.150 my_port 500 peer_port 500 (I) MM_NO_STATE

Sep 13 04:27:58.233: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:27:58.313: ISAKMP:(14388):purging SA., sa=411CFB24, delme=411CFB24

Sep 13 04:27:59.345: ISAKMP: set new node 0 to QM_IDLE     

Sep 13 04:27:59.345: ISAKMP:(0):SA is still budding. Attached new ipsec request to it. (local 172.34.47.57, remote 172.35.200.87)

Sep 13 04:27:59.345: ISAKMP: Error while processing SA request: Failed to initialize SA

Sep 13 04:27:59.345: ISAKMP: Error while processing KMI message 0, error 2.

Sep 13 04:27:59.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...

Sep 13 04:27:59.349: ISAKMP (0): incrementing error counter on sa, attempt 3 of 5: retransmit phase 1

Sep 13 04:27:59.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE

Sep 13 04:27:59.349: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE

Sep 13 04:27:59.349: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:28:02.733: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP

Sep 13 04:28:02.733: ISAKMP:(0): phase 1 packet is a duplicate of a previous packet.

Sep 13 04:28:02.733: ISAKMP:(0): retransmitting due to retransmit phase 1

Sep 13 04:28:03.233: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...

Sep 13 04:28:03.233: ISAKMP (0): incrementing error counter on sa, attempt 2 of 5: retransmit phase 1

Sep 13 04:28:03.233: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP

Sep 13 04:28:03.233: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP

Sep 13 04:28:03.233: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:28:07.489: ISAKMP:(14390):purging node -1766959579

Sep 13 04:28:08.233: ISAKMP: set new node 0 to QM_IDLE     

Sep 13 04:28:08.233: ISAKMP:(0):SA is still budding. Attached new ipsec request to it. (local 172.34.47.57, remote 172.35.194.150)

Sep 13 04:28:08.233: ISAKMP: Error while processing SA request: Failed to initialize SA

Sep 13 04:28:08.233: ISAKMP: Error while processing KMI message 0, error 2.

Sep 13 04:28:08.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...

Sep 13 04:28:08.233: ISAKMP (0): incrementing error counter on sa, attempt 3 of 5: retransmit phase 1

Sep 13 04:28:08.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE

Sep 13 04:28:08.233: ISAKMP:(0): sending packet to 172.35.194.150 my_port 500 peer_port 500 (I) MM_NO_STATE

Sep 13 04:28:08.233: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:28:09.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...

Sep 13 04:28:09.349: ISAKMP (0): incrementing error counter on sa, attempt 4 of 5: retransmit phase 1

Sep 13 04:28:09.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE

Sep 13 04:28:09.349: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE

Sep 13 04:28:09.349: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:28:11.669: ISAKMP:(14407):purging node 737401177

Sep 13 04:28:12.565: ISAKMP (0): received packet from 172.35.200.91 dport 500 sport 500 Global (N) NEW SA

Sep 13 04:28:12.565: ISAKMP: Created a peer struct for 172.35.200.91, peer port 500

Sep 13 04:28:12.565: ISAKMP: New peer created peer = 0x134E3340 peer_handle = 0x8000F1E6

Sep 13 04:28:12.565: ISAKMP: Locking peer struct 0x134E3340, refcount 1 for crypto_isakmp_process_block

Sep 13 04:28:12.565: ISAKMP: local port 500, remote port 500

Sep 13 04:28:12.565: ISAKMP:(0):insert sa successfully sa = 411BD47C

Sep 13 04:28:12.565: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:28:12.565: ISAKMP:(0):Old State = IKE_READY  New State = IKE_R_MM1


Sep 13 04:28:12.565: ISAKMP:(0): processing SA payload. message ID = 0

Sep 13 04:28:12.565: ISAKMP:(0): processing vendor id payload

Sep 13 04:28:12.565: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch

Sep 13 04:28:12.565: ISAKMP (0): vendor ID is NAT-T RFC 3947

Sep 13 04:28:12.565: ISAKMP:(0): processing vendor id payload

Sep 13 04:28:12.565: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch

Sep 13 04:28:12.565: ISAKMP (0): vendor ID is NAT-T v7

Sep 13 04:28:12.565: ISAKMP:(0): processing vendor id payload

Sep 13 04:28:12.565: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch

Sep 13 04:28:12.565: ISAKMP:(0): vendor ID is NAT-T v3

Sep 13 04:28:12.565: ISAKMP:(0): processing vendor id payload

Sep 13 04:28:12.565: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch

Sep 13 04:28:12.565: ISAKMP:(0): vendor ID is NAT-T v2

Sep 13 04:28:12.565: ISAKMP:(0):No pre-shared key with 172.35.200.91!

Sep 13 04:28:12.565: ISAKMP : Scanning profiles for xauth ...

Sep 13 04:28:12.565: ISAKMP:(0):Checking ISAKMP transform 1 against priority 30 policy

Sep 13 04:28:12.565: ISAKMP:      encryption 3DES-CBC

Sep 13 04:28:12.565: ISAKMP:      hash MD5

Sep 13 04:28:12.565: ISAKMP:      default group 2

Sep 13 04:28:12.565: ISAKMP:      auth pre-share

Sep 13 04:28:12.565: ISAKMP:      life type in seconds

Sep 13 04:28:12.565: ISAKMP:      life duration (basic) of 300

Sep 13 04:28:12.565: ISAKMP:(0):Preshared authentication offered but does not match policy!

Sep 13 04:28:12.565: ISAKMP:(0):atts are not acceptable. Next payload is 0

Sep 13 04:28:12.565: ISAKMP:(0):no offers accepted!

Sep 13 04:28:12.565: ISAKMP:(0): phase 1 SA policy not acceptable! (local 172.34.47.57 remote 172.35.200.91)

Sep 13 04:28:12.565: ISAKMP (0): incrementing error counter on sa, attempt 1 of 5: construct_fail_ag_init

Sep 13 04:28:12.565: ISAKMP:(0): Failed to construct AG informational message.

Sep 13 04:28:12.565: ISAKMP:(0): sending packet to 172.35.200.91 my_port 500 peer_port 500 (R) MM_NO_STATE

Sep 13 04:28:12.565: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:28:12.565: ISAKMP:(0):peer does not do paranoid keepalives.


Sep 13 04:28:12.565: ISAKMP:(0):deleting SA reason "Phase1 SA policy proposal not accepted" state (R) MM_NO_STATE (peer 172.35.200.91)

Sep 13 04:28:12.565: ISAKMP:(0): processing vendor id payload

Sep 13 04:28:12.565: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch

Sep 13 04:28:12.565: ISAKMP (0): vendor ID is NAT-T RFC 3947

Sep 13 04:28:12.565: ISAKMP:(0): processing vendor id payload

Sep 13 04:28:12.565: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch

Sep 13 04:28:12.565: ISAKMP (0): vendor ID is NAT-T v7

Sep 13 04:28:12.565: ISAKMP:(0): processing vendor id payload

Sep 13 04:28:12.565: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch

Sep 13 04:28:12.565: ISAKMP:(0): vendor ID is NAT-T v3

Sep 13 04:28:12.565: ISAKMP:(0): processing vendor id payload

Sep 13 04:28:12.565: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch

Sep 13 04:28:12.565: ISAKMP:(0): vendor ID is NAT-T v2

Sep 13 04:28:12.565: ISAKMP (0): FSM action returned error: 2

Sep 13 04:28:12.565: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Sep 13 04:28:12.565: ISAKMP:(0):Old State = IKE_R_MM1  New State = IKE_R_MM1


Sep 13 04:28:12.565: ISAKMP:(0):deleting SA reason "Phase1 SA policy proposal not accepted" state (R) MM_NO_STATE (peer 172.35.200.91)

Sep 13 04:28:12.565: ISAKMP: Unlocking peer struct 0x134E3340 for isadb_mark_sa_deleted(), count 0

Sep 13 04:28:12.565: ISAKMP: Deleting peer node by peer_reap for 172.35.200.91: 134E3340

Sep 13 04:28:12.565: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL

Sep 13 04:28:12.565: ISAKMP:(0):Old State = IKE_R_MM1  New State = IKE_DEST_SA


Sep 13 04:28:12.733: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP

Sep 13 04:28:12.733: ISAKMP:(0): phase 1 packet is a duplicate of a previous packet.

Sep 13 04:28:12.733: ISAKMP:(0): retransmitting due to retransmit phase 1

Sep 13 04:28:12.933: ISAKMP (14392): received packet from 172.35.200.97 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:28:12.933: ISAKMP: set new node 2101687451 to QM_IDLE     

Sep 13 04:28:12.933: ISAKMP:(14392): processing HASH payload. message ID = 2101687451

Sep 13 04:28:12.933: ISAKMP:(14392): processing SA payload. message ID = 2101687451

Sep 13 04:28:12.933: ISAKMP:(14392):Checking IPSec proposal 1

Sep 13 04:28:12.933: ISAKMP: transform 1, ESP_3DES

Sep 13 04:28:12.933: ISAKMP:   attributes in transform:

Sep 13 04:28:12.933: ISAKMP:      encaps is 1 (Tunnel)

Sep 13 04:28:12.933: ISAKMP:      SA life type in seconds

Sep 13 04:28:12.933: ISAKMP:      SA life duration (basic) of 300

Sep 13 04:28:12.933: ISAKMP:      SA life type in kilobytes

Sep 13 04:28:12.933: ISAKMP:      SA life duration (VPI) of  0x0 0x46 0x50 0x0

Sep 13 04:28:12.933: ISAKMP:      authenticator is HMAC-MD5

Sep 13 04:28:12.933: ISAKMP:      group is 2

Sep 13 04:28:12.933: ISAKMP:(14392):atts are acceptable.

Sep 13 04:28:12.933: ISAKMP:(14392): processing NONCE payload. message ID = 2101687451

Sep 13 04:28:12.933: ISAKMP:(14392): processing KE payload. message ID = 2101687451

Sep 13 04:28:12.937: ISAKMP:(14392): processing ID payload. message ID = 2101687451

Sep 13 04:28:12.937: ISAKMP:(14392): processing ID payload. message ID = 2101687451

Sep 13 04:28:12.937: ISAKMP:(14392):QM Responder gets spi

Sep 13 04:28:12.937: ISAKMP:(14392):Node 2101687451, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:28:12.937: ISAKMP:(14392):Old State = IKE_QM_READY  New State = IKE_QM_SPI_STARVE

Sep 13 04:28:12.937: ISAKMP:(14392): Creating IPSec SAs

Sep 13 04:28:12.937:         inbound SA from 172.35.200.97 to 172.34.47.57 (f/i)  0/ 0

        (proxy 172.16.51.0 to 0.0.0.0)

Sep 13 04:28:12.937:         has spi 0x62BB1BC1 and conn_id 0

Sep 13 04:28:12.937:         lifetime of 300 seconds

Sep 13 04:28:12.937:         lifetime of 4608000 kilobytes

Sep 13 04:28:12.937:         outbound SA from 172.34.47.57 to 172.35.200.97 (f/i) 0/0

        (proxy 0.0.0.0 to 172.16.51.0)

Sep 13 04:28:12.937:         has spi  0xC7740464 and conn_id 0

Sep 13 04:28:12.937:         lifetime of 300 seconds

Sep 13 04:28:12.937:         lifetime of 4608000 kilobytes

Sep 13 04:28:12.937: ISAKMP:(14392): sending packet to 172.35.200.97 my_port 500 peer_port 500 (R) QM_IDLE     

Sep 13 04:28:12.937: ISAKMP:(14392):Sending an IKE IPv4 Packet.

Sep 13 04:28:12.937: ISAKMP:(14392):Node 2101687451, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI

Sep 13 04:28:12.941: ISAKMP:(14392):Old State = IKE_QM_SPI_STARVE  New State = IKE_QM_R_QM2

Sep 13 04:28:13.017: ISAKMP (14392): received packet from 172.35.200.97 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:28:13.017: ISAKMP:(14392):deleting node 2101687451 error FALSE reason "QM done (await)"

Sep 13 04:28:13.017: ISAKMP:(14392):Node 2101687451, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:28:13.017: ISAKMP:(14392):Old State = IKE_QM_R_QM2  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 04:28:13.233: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...

Sep 13 04:28:13.233: ISAKMP (0): incrementing error counter on sa, attempt 3 of 5: retransmit phase 1

Sep 13 04:28:13.233: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP

Sep 13 04:28:13.233: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP

Sep 13 04:28:13.233: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:28:14.841: ISAKMP:(14406):purging node -1746108638

Sep 13 09:58:15: %CRYPTO-4-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet. (ip) vrf/dest_addr= /172.16.102.25, src_addr= 18:17.833: ISAKMP:(14393):atts are acceptable.

Sep 13 04:28:17.833: ISAKMP:(14393): processing NONCE payload. message ID = 1434815361

Sep 13 04:28:17.833: ISAKMP:(14393): processing KE payload. message ID = 1434815361

Sep 13 04:28:17.837: ISAKMP:(14393): processing ID payload. message ID = 1434815361

Sep 13 04:28:17.837: ISAKMP:(14393): processing ID payload. message ID = 1434815361

Sep 13 04:28:17.837: ISAKMP:(14393):QM Responder gets spi

Sep 13 04:28:17.837: ISAKMP:(14393):Node 1434815361, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:28:17.837: ISAKMP:(14393):Old State = IKE_QM_READY  New State = IKE_QM_SPI_STARVE

Sep 13 04:28:17.837: ISAKMP:(14393): Creating IPSec SAs

Sep 13 04:28:17.837:         inbound SA from 172.34.48.125 to 172.34.47.57 (f/i)  0/ 0

        (proxy 172.16.25.0 to 0.0.0.0)

Sep 13 04:28:17.837:         has spi 0x6822241D and conn_id 0

Sep 13 04:28:17.837:         lifetime of 300 seconds

Sep 13 04:28:17.837:         lifetime of 4608000 kilobytes

Sep 13 04:28:17.837:         outbound SA from 172.34.47.57 to 172.34.48.125 (f/i) 0/0

        (proxy 0.0.0.0 to 172.16.25.0)

Sep 13 04:28:17.837:         has spi  0x6B854CE0 and conn_id 0

Sep 13 04:28:17.837:         lifetime of 300 seconds

Sep 13 04:28:17.837:         lifetime of 4608000 kilobytes

Sep 13 04:28:17.837: ISAKMP:(14393): sending packet to 172.34.48.125 my_port 500 peer_port 500 (R) QM_IDLE     

Sep 13 04:28:17.837: ISAKMP:(14393):Sending an IKE IPv4 Packet.

Sep 13 04:28:17.837: ISAKMP:(14393):Node 1434815361, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI

Sep 13 04:28:17.837: ISAKMP:(14393):Old State = IKE_QM_SPI_STARVE  New State = IKE_QM_R_QM2

Sep 13 04:28:17.925: ISAKMP (14393): received packet from 172.34.48.125 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:28:17.925: ISAKMP:(14393):deleting node 1434815361 error FALSE reason "QM done (await)"

Sep 13 04:28:17.925: ISAKMP:(14393):Node 1434815361, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:28:17.925: ISAKMP:(14393):Old State = IKE_QM_R_QM2  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 04:28:18.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...

Sep 13 04:28:18.233: ISAKMP (0): incrementing error counter on sa, attempt 4 of 5: retransmit phase 1

Sep 13 04:28:18.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE

Sep 13 04:28:18.233: ISAKMP:(0): sending packet to 172.35.194.150 my_port 500 peer_port 500 (I) MM_NO_STATE

Sep 13 04:28:18.233: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:28:18.845: ISAKMP:(0):purging node 1013205142

Sep 13 04:28:18.845: ISAKMP:(0):purging node -1738356762

Sep 13 04:28:19.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...

Sep 13 04:28:19.349: ISAKMP (0): incrementing error counter on sa, attempt 5 of 5: retransmit phase 1

Sep 13 04:28:19.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE

Sep 13 04:28:19.349: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE

Sep 13 04:28:19.349: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:28:21.845: ISAKMP (14408): received packet from 172.34.47.146 dport 500 sport 500 Global (I) QM_IDLE     

Sep 13 04:28:21.845: ISAKMP: set new node -1862940807 to QM_IDLE     

Sep 13 04:28:21.845: ISAKMP:(14408): processing HASH payload. message ID = 2432026489

Sep 13 04:28:21.849: ISAKMP:(14408): processing DELETE payload. message ID = 2432026489

Sep 13 04:28:21.849: ISAKMP:(14408):peer does not do paranoid keepalives.


Sep 13 04:28:21.849: ISAKMP:(14408):deleting node -1862940807 error FALSE reason "Informational (in) state 1"

Sep 13 04:28:22.565: ISAKMP (0): received packet from 172.35.200.91 dport 500 sport 500 Global (R) MM_NO_STATE

Sep 13 04:28:22.733: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP

Sep 13 04:28:22.733: ISAKMP:(0): phase 1 packet is a duplicate of a previous packet.

Sep 13 04:28:22.733: ISAKMP:(0): retransmitting due to retransmit phase 1

Sep 13 04:28:22.953: ISAKMP:(14389):purging node 299600500

Sep 13 04:28:23.233: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...

Sep 13 04:28:23.233: ISAKMP (0): incrementing error counter on sa, attempt 4 of 5: retransmit phase 1

Sep 13 04:28:23.233: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP

Sep 13 04:28:23.233: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP

Sep 13 04:28:23.233: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:28:23.241: ISAKMP: set new node 1045526343 to QM_IDLE     

Sep 13 04:28:23.241: ISAKMP:(14409): sending packet to 172.35.206.48 my_port 500 peer_port 500 (R) QM_IDLE     

Sep 13 04:28:23.241: ISAKMP:(14409):Sending an IKE IPv4 Packet.

Sep 13 04:28:23.241: ISAKMP:(14409):purging node 1045526343

Sep 13 04:28:23.241: ISAKMP:(14409):Input = IKE_MESG_FROM_IPSEC, IKE_PHASE2_DEL

Sep 13 04:28:23.241: ISAKMP:(14409):Old State = IKE_P1_COMPLETE  New State = IKE_P1_COMPLETE


Sep 13 04:28:27.125: ISAKMP (14394): received packet from 172.35.194.115 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:28:27.125: ISAKMP: set new node -318471219 to QM_IDLE     

Sep 13 04:28:27.125: ISAKMP:(14394): processing HASH payload. message ID = 3976496077

Sep 13 04:28:27.125: ISAKMP:(14394): processing SA payload. message ID = 3976496077

Sep 13 04:28:27.125: ISAKMP:(14394):Checking IPSec proposal 1

Sep 13 04:28:27.125: ISAKMP: transform 1, ESP_3DES

Sep 13 04:28:27.125: ISAKMP:   attributes in transform:

Sep 13 04:28:27.125: ISAKMP:      encaps is 1 (Tunnel)

Sep 13 04:28:27.125: ISAKMP:      SA life type in seconds

Sep 13 04:28:27.125: ISAKMP:      SA life duration (basic) of 300

Sep 13 04:28:27.125: ISAKMP:      SA life type in kilobytes

Sep 13 04:28:27.125: ISAKMP:      SA life duration (VPI) of  0x0 0x46 0x50 0x0

Sep 13 04:28:27.125: ISAKMP:      authenticator is HMAC-MD5

Sep 13 04:28:27.125: ISAKMP:      group is 2

Sep 13 04:28:27.125: ISAKMP:(14394):atts are acceptable.

Sep 13 04:28:27.125: ISAKMP:(14394): processing NONCE payload. message ID = 3976496077

Sep 13 04:28:27.125: ISAKMP:(14394): processing KE payload. message ID = 3976496077

Sep 13 04:28:27.129: ISAKMP:(14394): processing ID payload. message ID = 3976496077

Sep 13 04:28:27.129: ISAKMP:(14394): processing ID payload. message ID = 3976496077

Sep 13 04:28:27.129: ISAKMP:(14394):QM Responder gets spi

Sep 13 04:28:27.129: ISAKMP:(14394):Node 3976496077, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:28:27.129: ISAKMP:(14394):Old State = IKE_QM_READY  New State = IKE_QM_SPI_STARVE

Sep 13 04:28:27.129: ISAKMP:(14394): Creating IPSec SAs

Sep 13 04:28:27.129:         inbound SA from 172.35.194.115 to 172.34.47.57 (f/i)  0/ 0

        (proxy 172.20.5.0 to 0.0.0.0)

Sep 13 04:28:27.129:         has spi 0x41FB5E5B and conn_id 0

Sep 13 04:28:27.129:         lifetime of 300 seconds

Sep 13 04:28:27.129:         lifetime of 4608000 kilobytes

Sep 13 04:28:27.129:         outbound SA from 172.34.47.57 to 172.35.194.115 (f/i) 0/0

        (proxy 0.0.0.0 to 172.20.5.0)

Sep 13 04:28:27.129:         has spi  0x4E194CEE and conn_id 0

Sep 13 04:28:27.129:         lifetime of 300 seconds

Sep 13 04:28:27.129:         lifetime of 4608000 kilobytes

Sep 13 04:28:27.129: ISAKMP:(14394): sending packet to 172.35.194.115 my_port 500 peer_port 500 (R) QM_IDLE     

Sep 13 04:28:27.129: ISAKMP:(14394):Sending an IKE IPv4 Packet.

Sep 13 04:28:27.129: ISAKMP:(14394):Node 3976496077, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI

Sep 13 04:28:27.129: ISAKMP:(14394):Old State = IKE_QM_SPI_STARVE  New State = IKE_QM_R_QM2

Sep 13 04:28:27.197: ISAKMP (14394): received packet from 172.35.194.115 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:28:27.197: ISAKMP:(14394):deleting node -318471219 error FALSE reason "QM done (await)"

Sep 13 04:28:27.197: ISAKMP:(14394):Node 3976496077, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:28:27.197: ISAKMP:(14394):Old State = IKE_QM_R_QM2  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 04:28:28.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...

Sep 13 04:28:28.233: ISAKMP (0): incrementing error counter on sa, attempt 5 of 5: retransmit phase 1

Sep 13 04:28:28.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE

Sep 13 04:28:28.233: ISAKMP:(0): sending packet to 172.35.194.150 my_port 500 peer_port 500 (I) MM_NO_STATE

Sep 13 04:28:28.233: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:28:28.845: ISAKMP:(0):purging SA., sa=1F4A26C, delme=1F4A26C

Sep 13 04:28:29.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...

Sep 13 04:28:29.349: ISAKMP:(0):peer does not do paranoid keepalives.


Sep 13 04:28:29.349: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (I) MM_NO_STATE (peer 172.35.200.87)

Sep 13 04:28:29.349: ISAKMP:(0):deletitor

Sep 13 04:28:29.849: ISAKMP: local port 500, remote port 500

Sep 13 04:28:29.849: ISAKMP: set new node 0 to QM_IDLE     

Sep 13 04:28:29.849: ISAKMP: Find a dup sa in the avl tree during calling isadb_insert sa = 1FA864C

Sep 13 04:28:29.849: ISAKMP:(0):Can not start Aggressive mode, trying Main mode.

Sep 13 04:28:29.849: ISAKMP:(0):found peer pre-shared key matching 172.35.200.87

Sep 13 04:28:29.849: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID

Sep 13 04:28:29.849: ISAKMP:(0): constructed NAT-T vendor-07 ID

Sep 13 04:28:29.849: ISAKMP:(0): constructed NAT-T vendor-03 ID

Sep 13 04:28:29.849: ISAKMP:(0): constructed NAT-T vendor-02 ID

Sep 13 04:28:29.849: ISAKMP:(0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM

Sep 13 04:28:29.849: ISAKMP:(0):Old State = IKE_READY  New State = IKE_I_MM1


Sep 13 04:28:29.849: ISAKMP:(0): beginning Main Mode exchange

S8:30.229: ISAKMPeted(), count 0

AKMP:(0): sendin4:28:38.233: ISA 172.35.200.87)

Sep 13 04:28:43.233: ISAKMP: Unlocking peer struct 0x411472DC for isadb_mark_sa_deleted(), count 0

Sep 13 04:28:43.233: ISAKMP: Deleting peer node by peer_reap for 172.35.200.87: 411472DC

Sep 13 04:28:43.233: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL

Sep 13 04:28:43.233: ISAKMP:(0):Old State = IKE_R_MM2  New State = IKE_DEST_SA


Sep 13 04:28:45.933: ISAKMP:(14390):purging node 8155520

Sep 13 04:28:46.689: ISAKMP:(14407):purging node -2143616241

Sep 13 04:28:46.781: ISAKMP (14395): received packet from 172.35.200.100 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:28:46.781: ISAKMP: set new node -1638000181 to QM_IDLE     

Sep 13 04:28:46.781: ISAKMP:(14395): processing HASH payload. message ID = 2656967115

Sep 13 04:28:46.781: ISAKMP:(14395): processing SA payload. message ID = 2656967115

Sep 13 04:28:46.781: ISAKMP:(14395):Checking IPSec proposal 1

Sep 13 04:28:46.781: ISAKMP: transform 1, ESP_3DES

Sep 13 04:28:46.781: ISAKMP:   attr

**************ibutes in transform:

Sep 13 04:28:46.781: ISAKMP:      encaps is 1 (Tunnel)

Sep 13 04:28:46.781: ISAKMP:      SA life type in seconds

Sep 13 04:28:46.781: ISAKMP:      SA life duration (basic) of 300

Sep 13 04:28:46.781: ISAKMP:      SA life type in kilobytes

Sep 13 04:28:46.781: ISAKMP:      SA life duration (VPI) of  0x0 0x46 0x50 0x0

Sep 13 04:28:46.781: ISAKMP:      authenticator is HMAC-MD5

Sep 13 04:28:46.781: ISAKMP:      group is 2

Sep 13 04:28:46.781: ISAKMP:(14395):atts are acceptable.

Sep 13 04:28:46.781: ISAKMP:(14395): processing NONCE payload. message ID = 2656967115

Sep 13 04:28:46.781: ISAKMP:(14395): processing KE payload. message ID = 2656967115

Sep 13 04:28:46.785: ISAKMP:(14395): processing ID payload. message ID = 2656967115

Sep 13 04:28:46.785: ISAKMP:(14395): processing ID payload. message ID = 2656967115

Sep 13 04:28:46.785: ISAKMP:(14395):QM Responder gets spi

Sep 13 04:28:46.785: ISAKMP:(14395):Node 2656967115, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:28:46.785: ISAKMP:(14395):Old State = IKE_QM_READY  New State = IKE_QM_SPI_STARVE

Sep 13 04:28:46.785: ISAKMP:(14395): Creating IPSec SAs

Sep 13 04:28:46.785:         inbound SA from 172.35.200.100 to 172.34.47.57 (f/i)  0/ 0

        (proxy 172.17.1.0 to 0.0.0.0)

Sep 13 04:28:46.785:         has spi 0xE85F4668 and conn_id 0

Sep 13 04:28:46.785:         lifetime of 300 seconds

Sep 13 04:28:46.785:         lifetime of 4608000 kilobytes

Sep 13 04:28:46.785:         outbound SA from 172.34.47.57 to 172.35.200.100 (f/i) 0/0

        (proxy 0.0.0.0 to 172.17.1.0)

Sep 13 04:28:46.785:         has spi  0x806D78EA and conn_id 0

Sep 13 04:28:46.785:         lifetime of 300 seconds

Sep 13 04:28:46.785:         lifetime of 4608000 kilobytes

Sep 13 04:28:46.785: ISAKMP:(14395): sending packet to 172.35.200.100 my_port 500 peer_port 500 (R) QM_IDLE     

Sep 13 04:28:46.785: ISAKMP:(14395):Sending an IKE IPv4 Packet.

Sep 13 04:28:46.785: ISAKMP:(14395):Node 2656967115, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI

Sep 13 04:28:46.785: ISAKMP:(14395):Old State = IKE_QM_SPI_STARVE  New State = IKE_QM_R_QM2

Sep 13 04:28:46.857: ISAKMP (14395): received packet from 172.35.200.100 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:28:46.857: ISAKMP:(14395):deleting node -1638000181 error FALSE reason "QM done (await)"

Sep 13 04:28:46.857: ISAKMP:(14395):Node 2656967115, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:28:46.857: ISAKMP:(14395):Old State = IKE_QM_R_QM2  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 04:28:49.509: ISAKMP (14396): received packet from 172.35.222.236 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:28:49.509: ISAKMP: set new node 732513048 to QM_IDLE     

Sep 13 04:28:49.509: ISAKMP:(14396): processing HASH payload. message ID = 732513048

Sep 13 04:28:49.509: ISAKMP:(14396): processing SA payload. message ID = 732513048

Sep 13 04:28:49.509: ISAKMP:(14396):Checking IPSec proposal 1

Sep 13 04:28:49.509: ISAKMP: transform 1, ESP_3DES

Sep 13 04:28:49.509: ISAKMP:   attributes in transform:

Sep 13 04:28:49.509: ISAKMP:      encaps is 1 (Tunnel)

Sep 13 04:28:49.509: ISAKMP:      SA life type in seconds

Sep 13 04:28:49.509: ISAKMP:      SA life duration (basic) of 300

Sep 13 04:28:49.509: ISAKMP:      SA life type in kilobytes

Sep 13 04:28:49.509: ISAKMP:      SA life duration (VPI) of  0x0 0x46 0x50 0x0

Sep 13 04:28:49.509: ISAKMP:      authenticator is HMAC-MD5

Sep 13 04:28:49.509: ISAKMP:      group is 2

Sep 13 04:28:49.509: ISAKMP:(14396):atts are acceptable.

Sep 13 04:28:49.513: ISAKMP:(14396): processing NONCE payload. message ID = 732513048

Sep 13 04:28:49.513: ISAKMP:(14396): processing KE payload. message ID = 732513048

Sep 13 04:28:49.513: ISAKMP:(14396): processing ID payload. message ID = 732513048

Sep 13 04:28:49.513: ISAKMP:(14396): processing ID payload. message ID = 732513048

Sep 13 04:28:49.513: ISAKMP:(14396):QM Responder gets spi

Sep 13 04:28:49.513: ISAKMP:(14396):Node 732513048, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:28:49.513: ISAKMP:(14396):Old State = IKE_QM_READY  New State = IKE_QM_SPI_STARVE

Sep 13 04:28:49.513: ISAKMP:(14396): Creating IPSec SAs

Sep 13 04:28:49.513:         inbound SA from 172.35.222.236 to 172.34.47.57 (f/i)  0/ 0

        (proxy 172.18.1.0 to 0.0.0.0)

Sep 13 04:28:49.513:         has spi 0x18271E39 and conn_id 0

Sep 13 04:28:49.513:         lifetime of 300 seconds

Sep 13 04:28:49.513:         lifetime of 4608000 kilobytes

Sep 13 04:28:49.513:         outbound SA from 172.34.47.57 to 172.35.222.236 (f/i) 0/0

        (proxy 0.0.0.0 to 172.18.1.0)

Sep 13 04:28:49.513:         has spi  0x60244544 and conn_id 0

Sep 13 04:28:49.513:         lifetime of 300 seconds

Sep 13 04:28:49.513:         lifetime of 4608000 kilobytes

Sep 13 04:28:49.513: ISAKMP:(14396): sending packet to 172.35.222.236 my_port 500 peer_port 500 (R) QM_IDLE     

Sep 13 04:28:49.513: ISAKMP:(14396):Sending an IKE IPv4 Packet.

Sep 13 04:28:49.513: ISAKMP:(14396):Node 732513048, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI

Sep 13 04:28:49.513: ISAKMP:(14396):Old State = IKE_QM_SPI_STARVE  New State = IKE_QM_R_QM2

Sep 13 04:28:49.637: ISAKMP (14396): received packet from 172.35.222.236 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:28:49.637: ISAKMP:(14396):deleting node 732513048 error FALSE reason "QM done (await)"

Sep 13 04:28:49.637: ISAKMP:(14396):Node 732513048, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:28:49.637: ISAKMP:(14396):Old State = IKE_QM_R_QM2  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 04:28:49.849: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...

Sep 13 04:28:49.849: ISAKMP (0): incrementing error counter on sa, attempt 2 of 5: retransmit phase 1

Sep 13 04:28:49.849: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE

Sep 13 04:28:49.849: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE

Sep 13 04:28:49.849: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:28:50.513: ISAKMP:(14392):peer does not do paranoid keepalives.


Sep 13 04:28:50.513: ISAKMP:(14392):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE       (peer 172.35.200.97)

Sep 13 04:28:50.513: ISAKMP: set new node -1275615692 to QM_IDLE     

Sep 13 04:28:50.513: ISAKMP:(14392): sending packet to 172.35.200.97 my_port 500 peer_port 500 (R) QM_IDLE     

Sep 13 04:28:50.513: ISAKMP:(14392):Sending an IKE IPv4 Packet.

Sep 13 04:28:50.513: ISAKMP:(14392):purging node -1275615692

Sep 13 04:28:50.513: ISAKMP:(14392):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL

Sep 13 04:28:50.513: ISAKMP:(14392):Old State = IKE_P1_COMPLETE  New State = IKE_DEST_SA


Sep 13 04:28:50.513: ISAKMP:(14392):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE       (peer 172.35.200.97)

Sep 13 04:28:50.513: ISAKMP: Unlocking peer struct 0x10AD358 for isadb_mark_sa_deleted(), count 0

Sep 13 04:28:50.513: ISAKMP:(14392):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:28:50.513: ISAKMP:(14392):Old State = IKE_DEST_SA  New State = IKE_DEST_SA


Sep 13 04:28:50.561: ISAKMP (14392): received packet from 172.35.200.97 dport 500 sport 500 Global (R) MM_NO_STATE

Sep 13 04:28:50.741: ISAKMP: ignoring request to send delete notify (no ISAKMP sa) src 172.34.47.57 dst 172.35.200.97 for SPI 0x2C9C73AF

Sep 13 04:28:51.545: ISAKMP:(14393):peer does not do paranoid keepalives.


Sep 13 04:28:51.545: ISAKMP:(14393):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE       (peer 172.34.48.125)

Sep 13 04:28:51.545: ISAKMP: set new node 1816352009 to QM_IDLE     

Sep 13 04:28:51.545: ISAKMP:(14393): sending packet to 172.34.48.125 my_port 500 peer_port 500 (R) QM_IDLE     

Sep 13 04:28:51.545: ISAKMP:(14393):Sending an IKE IPv4 Packet.

Sep 13 04:28:51.545: ISAKMP:(14393):purging node 1816352009

Sep 13 04:28:51.545: ISAKMP:(14393):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL

Sep 13 04:28:51.545: ISAKMP:(14393):Old State = IKE_P1_COMPLETE  New State = IKE_DEST_SA


Sep 13 04:28:51.545: ISAKMP:(14393):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE       (peer 172.34.48.125)

Sep 13 04:28:51.545: ISAKMP: Unlocking peer struct 0x4007DC90 for isadb_mark_sa_deleted(), count 0

Sep 13 04:28:51.545: ISAKMP:(14393):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:28:51.545: ISAKMP:(14393):Old State = IKE_DEST_SA  New State = IKE_DEST_SA


Sep 13 04:28:51.625: ISAKMP (14393): received packet from 172.34.48.125 dport 500 sport 500 Global (R) MM_NO_STATE

Sep 13 04:28:51.877: ISAKMP: ignoring request to send delete notify (no ISAKMP sa) src 172.34.47.57 dst 172.34.48.125 for SPI 0x7F351D2

Sep 13 04:28:52.269: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (N) NEW SA

Sep 13 04:28:52.269: ISAKMP: Created a peer struct for 172.35.200.87, peer port 500

Sep 13 04:28:52.269: ISAKMP: New peer created peer = 0x12370108 peer_handle = 0x8000F44B

Sep 13 04:28:52.269: ISAKMP: Locking peer struct 0x12370108, refcount 1 for crypto_isakmp_process_block

Sep 13 04:28:52.269: ISAKMP: local port 500, remote port 500

Sep 13 04:28:52.269: ISAKMP: Find a dup sa in the avl tree during calling isadb_insert sa = 1F4A26C

Sep 13 04:28:52.269: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:28:52.269: ISAKMP:(0):Old State = IKE_READY  New State = IKE_R_MM1


Sep 13 04:28:52.269: ISAKMP:(0): processing SA payload. message ID = 0

Sep 13 04:28:52.269: ISAKMP:(0): processing vendor id payload

Sep 13 04:28:52.269: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch

Sep 13 04:28:52.269: ISAKMP (0): vendor ID is NAT-T RFC 3947

Sep 13 04:28:52.269: ISAKMP:(0): processing vendor id payload

Sep 13 04:28:52.269: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch

Sep 13 04:28:52.269: ISAKMP (0): vendor ID is NAT-T v7

Sep 13 04:28:52.269: ISAKMP:(0): processing vendor id payload

Sep 13 04:28:52.269: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch

Sep 13 04:28:52.269: ISAKMP:(0): vendor ID is NAT-T v3

Sep 13 04:28:52.269: ISAKMP:(0): processing vendor id payload

Sep 13 04:28:52.269: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch

Sep 13 04:28:52.269: ISAKMP:(0): vendor ID is NAT-T v2

Sep 13 04:28:52.269: ISAKMP:(0):found peer pre-shared key matching 172.35.200.87

Sep 13 04:28:52.269: ISAKMP:(0): local preshared key found

Sep 13 04:28:52.269: ISAKMP : Scanning profiles for xauth ...

Sep 13 04:28:52.269: ISAKMP:(0):Checking ISAKMP transform 1 against priority 30 policy

Sep 13 04:28:52.269: ISAKMP:      encryption 3DES-CBC

Sep 13 04:28:52.269: ISAKMP:      hash MD5

Sep 13 04:28:52.269: ISAKMP:      default group 2

Sep 13 04:28:52.269: ISAKMP:      auth pre-share

Sep 13 04:28:52.269: ISAKMP:      life type in seconds

Sep 13 04:28:52.269: ISAKMP:      life duration (basic) of 300

Sep 13 04:28:52.269: ISAKMP:(0):atts are acceptable. Next payload is 0

Sep 13 04:28:52.269: ISAKMP:(0):Acceptable atts:actual life: 0

Sep 13 04:28:52.269: ISAKMP:(0):Acceptable atts:life: 0

Sep 13 04:28:52.269: ISAKMP:(0):Basic life_in_seconds:300

Sep 13 04:28:52.269: ISAKMP:(0):Returning Actual lifetime: 300

Sep 13 04:28:52.269: ISAKMP:(0)::Started lifetime timer: 300.


Sep 13 04:28:52.269: ISAKMP:(0): processing vendor id payload

Sep 13 04:28:52.269: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch

Sep 13 04:28:52.269: ISAKMP (0): vendor ID is NAT-T RFC 3947

Sep 13 04:28:52.269: ISAKMP:(0): processing vendor id payload

Sep 13 04:28:52.269: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch

Sep 13 04:28:52.269: ISAKMP (0): vendor ID is NAT-T v7

Sep 13 04:28:52.269: ISAKMP:(0): processing vendor id payload

Sep 13 04:28:52.269: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch

Sep 13 04:28:52.269: ISAKMP:(0): vendor ID is NAT-T v3

Sep 13 04:28:52.269: ISAKMP:(0): processing vendor id payload

Sep 13 04:28:52.269: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch

Sep 13 04:28:52.269: ISAKMP:(0): vendor ID is NAT-T v2

Sep 13 04:28:52.269: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Sep 13 04:28:52.269: ISAKMP:(0):Old State = IKE_R_MM1  New State = IKE_R_MM1


Sep 13 04:28:52.269: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID

Sep 13 04:28:52.269: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP

Sep 13 04:28:52.269: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:28:52.269: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

Sep 13 04:28:52.269: ISAKMP:(0):Old State = IKE_R_MM1  New State = IKE_R_MM2


Sep 13 04:28:55.933: ISAKMP:(14390):purging SA., sa=1FB648C, delme=1FB648C

Sep 13 04:28:59.849: ISAKMP: set new node 0 to QM_IDLE     

Sep 13 04:28:59.849: ISAKMP:(0):SA is still budding. Attached new ipsec request to it. (local 172.34.47.57, remote 172.35.200.87)

Sep 13 04:28:59.849: ISAKMP: Error while processing SA request: Failed to initialize SA

Sep 13 04:28:59.849: ISAKMP: Error while processing KMI message 0, error 2.

Sep 13 04:28:59.849: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...

Sep 13 04:28:59.849: ISAKMP (0): incrementing error counter on sa, attempt 3 of 5: retransmit phase 1

Sep 13 04:28:59.849: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE

Sep 13 04:28:59.849: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE

Sep 13 04:28:59.849: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:29:02.265: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP

Sep 13 04:29:02.265: ISAKMP:(0): phase 1 packet is a duplicate of a previous packet.

Sep 13 04:29:02.265: ISAKMP:(0): retransmitting due to retransmit phase 1

Sep 13 04:29:02.765: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...

Sep 13 04:29:02.765: ISAKMP (0): incrementing error counter on sa, attempt 1 of 5: retransmit phase 1

Sep 13 04:29:02.765: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP

Sep 13 04:29:02.765: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP

Sep 13 04:29:02.765: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:29:03.017: ISAKMP:(14392):purging node 2101687451

Sep 13 04:29:05.309: ISAKMP (14397): received packet from 172.35.194.219 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:29:05.309: ISAKMP: set new node 252378786 to QM_IDLE     

Sep 13 04:29:05.309: ISAKMP:(14397): processing HASH payload. message ID = 252378786

Sep 13 04:29:05.309: ISAKMP:(14397): processing SA payload. message ID = 252378786

Sep 13 04:29:05.309: ISAKMP:(14397):Checking IPSec proposal 1

Sep 13 04:29:05.309: ISAKMP: transform 1, ESP_3DES

Sep 13 04:29:05.309: ISAKMP:   attributes in transform:

Sep 13 04:29:05.309: ISAKMP:      encaps is 1 (Tunnel)

Sep 13 04:29:05.309: ISAKMP:      SA life type in seconds

Sep 13 04:29:05.309: ISAKMP:      SA life duration (basic) of 300

Sep 13 04:29:05.309: ISAKMP:      SA life type in kilobytes

Sep 13 04:29:05.309: ISAKMP:      SA life duration (VPI) of  0x0 0x46 0x50 0x0

Sep 13 04:29:05.309: ISAKMP:      authenticator is HMAC-MD5

Sep 13 04:29:05.309: ISAKMP:      group is 2

Sep 13 04:29:05.309: ISAKMP:(14397):atts are acceptable.

Sep 13 04:29:05.309: ISAKMP:(14397): processing NONCE payload. message ID = 252378786

Sep 13 04:29:05.309: ISAKMP:(14397): processing KE payload. message ID = 252378786

Sep 13 04:29:05.313: ISAKMP:(14397): processing ID payload. message ID = 252378786

Sep 13 04:29:05.313: ISAKMP:(14397): processing ID payload. message ID = 252378786

Sep 13 04:29:05.313: ISAKMP:(14397):QM Responder gets spi

Sep 13 04:29:05.313: ISAKMP:(14397):Node 252378786, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:29:05.313: ISAKMP:(14397):Old State = IKE_QM_READY  New State = IKE_QM_SPI_STARVE

Sep 13 04:29:05.313: ISAKMP:(14397): Creating IPSec SAs

Sep 13 04:29:05.313:         inbound SA from 172.35.194.219 to 172.34.47.57 (f/i)  0/ 0

        (proxy 172.21.1.0 to 0.0.0.0)

Sep 13 04:29:05.313:         has spi 0xF0B346BA and conn_id 0

Sep 13 04:29:05.313:         lifetime of 300 seconds

Sep 13 04:29:05.313:         lifetime of 4608000 kilobytes

Sep 13 04:29:05.313:         outbound SA from 172.34.47.57 to 172.35.194.219 (f/i) 0/0

        (proxy 0.0.0.0 to 172.21.1.0)

Sep 13 04:29:05.313:         has spi  0x857BA967 and conn_id 0

Sep 13 04:29:05.313:         lifetime of 300 seconds

Sep 13 04:29:05.313:         lifetime of 4608000 kilobytes

Sep 13 04:29:05.313: ISAKMP:(14397): sending packet to 172.35.194.219 my_port 500 peer_port 500 (R) QM_IDLE     

Sep 13 04:29:05.313: ISAKMP:(14397):Sending an IKE IPv4 Packet.

Sep 13 04:29:05.313: ISAKMP:(14397):Node 252378786, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI

Sep 13 04:29:05.313: ISAKMP:(14397):Old State = IKE_QM_SPI_STARVE  New State = IKE_QM_R_QM2

Sep 13 04:29:05.389: ISAKMP (14397): received packet from 172.35.194.219 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:29:05.389: ISAKMP:(14397):deleting node 252378786 error FALSE reason "QM done (await)"

Sep 13 04:29:05.389: ISAKMP:(14397):Node 252378786, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:29:05.389: ISAKMP:(14397):Old State = IKE_QM_R_QM2  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 04:29:07.925: ISAKMP:(14393):purging node 1434815361

Sep 13 04:29:08.761: ISAKMP:(14394):peer does not do paranoid keepalives.


Sep 13 04:29:08.761: ISAKMP:(14394):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE       (peer 172.35.194.115)

Sep 13 04:29:08.761: ISAKMP: set new node 1605462269 to QM_IDLE     

Sep 13 04:29:08.761: ISAKMP:(14394): sending packet to 172.35.194.115 my_port 500 peer_port 500 (R) QM_IDLE     

Sep 13 04:29:08.761: ISAKMP:(14394):Sending an IKE IPv4 Packet.

Sep 13 04:29:08.761: ISAKMP:(14394):purging node 1605462269

Sep 13 04:29:08.761: ISAKMP:(14394):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL

Sep 13 04:29:08.761: ISAKMP:(14394):Old State = IKE_P1_COMPLETE  New State = IKE_DEST_SA


Sep 13 04:29:08.761: ISAKMP:(14394):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE       (peer 172.35.194.115)

Sep 13 04:29:08.761: ISAKMP: Unlocking peer struct 0x1067324 for isadb_mark_sa_deleted(), count 0

Sep 13 04:29:08.761: ISAKMP:(14394):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:29:08.761: ISAKMP:(14394):Old State = IKE_DEST_SA  New State = IKE_DEST_SA


Sep 13 04:29:08.801: ISAKMP (14394): received packet from 172.35.194.115 dport 500 sport 500 Global (R) MM_NO_STATE

Sep 13 04:29:08.965: ISAKMP: ignoring request to send delete notify (no ISAKMP sa) src 172.34.47.57 dst 172.35.194.115 for SPI 0x6C824D4D

Sep 13 04:29:09.849: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...

Sep 13 04:29:09.849: ISAKMP (0): incrementing error counter on sa, attempt 4 of 5: retransmit phase 1

Sep 13 04:29:09.849: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE

Sep 13 04:29:09.849: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE

Sep 13 04:29:09.849: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:29:09.905: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (I) MM_NO_STATE

Sep 13 04:29:09.905: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:29:09.905: ISAKMP:(0):Old State = IKE_I_MM1  New State = IKE_I_MM2


Sep 13 04:29:09.905: ISAKMP:(0): processing SA payload. message ID = 0

Sep 13 04:29:09.905: ISAKMP:(0): processing vendor id payload

Sep 13 04:29:09.905: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch

Sep 13 04:29:09.905: ISAKMP (0): vendor ID is NAT-T RFC 3947

Sep 13 04:29:09.905: ISAKMP:(0):found peer pre-shared key matching 172.35.200.87

Sep 13 04:29:09.905: ISAKMP:(0): local preshared key found

Sep 13 04:29:09.905: ISAKMP : Scanning profiles for xauth ...

Sep 13 04:29:09.905: ISAKMP:(0):Checking ISAKMP transform 1 against priority 30 policy

Sep 13 04:29:09.905: ISAKMP:      encryption 3DES-CBC

Sep 13 04:29:09.905: ISAKMP:      hash MD5

Sep 13 04:29:09.905: ISAKMP:      default group 2

Sep 13 04:29:09.905: ISAKMP:      auth pre-share

Sep 13 04:29:09.905: ISAKMP:      life type in seconds

Sep 13 04:29:09.905: ISAKMP:      life duration (basic) of 300

Sep 13 04:29:09.905: ISAKMP:(0):atts are acceptable. Next payload is 0

Sep 13 04:29:09.905: ISAKMP:(0):Acceptable atts:actual life: 0

Sep 13 04:29:09.905: ISAKMP:(0):Acceptable atts:life: 0

Sep 13 04:29:09.905: ISAKMP:(0):Basic life_in_seconds:300

Sep 13 04:29:09.905: ISAKMP:(0):Returning Actual lifetime: 300

Sep 13 04:29:09.905: ISAKMP:(0)::Started lifetime timer: 300.


Sep 13 04:29:09.905: ISAKMP:(0): processing vendor id payload

Sep 13 04:29:09.905: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch

Sep 13 04:29:09.905: ISAKMP (0): vendor ID is NAT-T RFC 3947

Sep 13 04:29:09.905: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Sep 13 04:29:09.905: ISAKMP:(0):Old State = IKE_I_MM2  New State = IKE_I_MM2


Sep 13 04:29:09.905: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_SA_SETUP

Sep 13 04:29:09.905: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:29:09.905: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

Sep 13 04:29:09.905: ISAKMP:(0):Old State = IKE_I_MM2  New State = IKE_I_MM3


Sep 13 04:29:09.969: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (I) MM_SA_SETUP

Sep 13 04:29:09.969: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:29:09.969: ISAKMP:(0):Old State = IKE_I_MM3  New State = IKE_I_MM4


Sep 13 04:29:09.969: ISAKMP:(0): processing KE payload. message ID = 0

Sep 13 04:29:09.969: ISAKMP:(0): processing NONCE payload. message ID = 0

Sep 13 04:29:09.969: ISAKMP:(0):found peer pre-shared key matching 172.35.200.87

Sep 13 04:29:09.969: ISAKMP:(14410): processing vendor id payload

Sep 13 04:29:09.969: ISAKMP:(14410): vendor ID is Unity

Sep 13 04:29:09.969: ISAKMP:(14410): processing vendor id payload

Sep 13 04:29:09.969: ISAKMP:(14410): vendor ID is DPD

Sep 13 04:29:09.969: ISAKMP:(14410): processing vendor id payload

Sep 13 04:29:09.969: ISAKMP:(14410): speaking to another IOS box!

Sep 13 04:29:09.969: ISAKMP:received payload type 20

Sep 13 04:29:09.969: ISAKMP (14410): His hash no match - this node outside NAT

Sep 13 04:29:09.969: ISAKMP:received payload type 20

Sep 13 04:29:09.969: ISAKMP (14410): No NAT Found for self or peer

Sep 13 04:29:09.969: ISAKMP:(14410):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Sep 13 04:29:09.969: ISAKMP:(14410):Old State = IKE_I_MM4  New State = IKE_I_MM4


Sep 13 04:29:09.969: ISAKMP:(14410):SA is doing pre-shared key authentication using id type ID_IPV4_ADDR

Sep 13 04:29:09.969: ISAKMP (14410): ID payload

    next-payload : 8

    type         : 1

    address      : 172.34.47.57

    protocol     : 17

    port         : 500

    length       : 12

Sep 13 04:29:09.969: ISAKMP:(14410):Total payload length: 12

Sep 13 04:29:09.969: ISAKMP:(14410): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_KEY_EXCH

Sep 13 04:29:09.969: ISAKMP:(14410):Sending an IKE IPv4 Packet.

Sep 13 04:29:09.969: ISAKMP:(14410):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

Sep 13 04:29:09.969: ISAKMP:(14410):Old State = IKE_I_MM4  New State = IKE_I_MM5


Sep 13 04:29:10.001: ISAKMP (14410): received packet from 172.35.200.87 dport 500 sport 500 Global (I) MM_KEY_EXCH

Sep 13 04:29:10.001: ISAKMP:(14410): processing ID payload. message ID = 0

Sep 13 04:29:10.005: ISAKMP (14410): ID payload

    next-payload : 8

    type         : 1

    address      : 172.35.200.87

    protocol     : 17

    port         : 500

    length       : 12

Sep 13 04:29:10.005: ISAKMP:(0):: peer matches *none* of the profiles

Sep 13 04:29:10.005: ISAKMP:(14410): processing HASH payload. message ID = 0

Sep 13 04:29:10.005: ISAKMP:(14410):SA authentication status:

    authenticated

Sep 13 04:29:10.005: ISAKMP:(14410):SA has been authenticated with 172.35.200.87

Sep 13 04:29:10.005: ISAKMP: Trying to insert a peer 172.34.47.57/172.35.200.87/500/,  and inserted successfully 1FB5094.

Sep 13 04:29:10.005: ISAKMP:(14410):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:29:10.005: ISAKMP:(14410):Old State = IKE_I_MM5  New State = IKE_I_MM6


Sep 13 04:29:10.005: ISAKMP:(14410):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Sep 13 04:29:10.005: ISAKMP:(14410):Old State = IKE_I_MM6  New State = IKE_I_MM6


Sep 13 04:29:10.005: ISAKMP:(14410):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

Sep 13 04:29:10.005: ISAKMP:(14410):Old State = IKE_I_MM6  New State = IKE_P1_COMPLETE


Sep 13 04:29:10.005: ISAKMP:(14410):beginning Quick Mode exchange, M-ID of 3181362681

Sep 13 04:29:10.009: ISAKMP:(14410):QM Initiator gets spi

Sep 13 04:29:10.009: ISAKMP:(14410): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) QM_IDLE     

Sep 13 04:29:10.009: ISAKMP:(14410):Sending an IKE IPv4 Packet.

Sep 13 04:29:10.009: ISAKMP:(14410):Node 3181362681, Input = IKE_MESG_INTERNAL, IKE_INIT_QM

Sep 13 04:29:10.009: ISAKMP:(14410):Old State = IKE_QM_READY  New State = IKE_QM_I_QM1

Sep 13 04:29:10.009: ISAKMP:(14410):beginning Quick Mode exchange, M-ID of 817986408

Sep 13 04:29:10.009: ISAKMP:(14410):QM Initiator gets spi

Sep 13 04:29:10.009: ISAKMP:(14410): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) QM_IDLE     

Sep 13 04:29:10.009: ISAKMP:(14410):Sending an IKE IPv4 Packet.

Sep 13 04:29:10.009: ISAKMP:(14410):Node 817986408, Input = IKE_MESG_INTERNAL, IKE_INIT_QM

Sep 13 04:29:10.009: ISAKMP:(14410):Old State = IKE_QM_READY  New State = IKE_QM_I_QM1

Sep 13 04:29:10.009: ISAKMP:(14410):Input = IKE_MESG_INTERNAL, IKE_PHASE1_COMPLETE

Sep 13 04:29:10.009: ISAKMP:(14410):Old State = IKE_P1_COMPLETE  New State = IKE_P1_COMPLETE


Sep 13 04:29:10.097: ISAKMP (14410): received packet from 172.35.200.87 dport 500 sport 500 Global (I) QM_IDLE     

Sep 13 04:29:10.097: ISAKMP:(14410): processing HASH payload. message ID = 3181362681

Sep 13 04:29:10.097: ISAKMP:(14410): processing SA payload. message ID = 3181362681

Sep 13 04:29:10.097: ISAKMP:(14410):Checking IPSec proposal 1

Sep 13 04:29:10.097: ISAKMP: transform 1, ESP_3DES

Sep 13 04:29:10.097: ISAKMP:   attributes in transform:

Sep 13 04:29:10.097: ISAKMP:      encaps is 1 (Tunnel)

Sep 13 04:29:10.097: ISAKMP:      SA life type in seconds

Sep 13 04:29:10.097: ISAKMP:      SA life duration (basic) of 300

Sep 13 04:29:10.097: ISAKMP:      SA life type in kilobytes

Sep 13 04:29:10.097: ISAKMP:      SA life duration (VPI) of  0x0 0x46 0x50 0x0

Sep 13 04:29:10.097: ISAKMP:      authenticator is HMAC-MD5

Sep 13 04:29:10.097: ISAKMP:      group is 2

Sep 13 04:29:10.097: ISAKMP:(14410):atts are acceptable.

Sep 13 04:29:10.097: ISAKMP:(14410): processing NONCE payload. message ID = 3181362681

Sep 13 04:29:10.097: ISAKMP:(14410): processing KE payload. message ID = 3181362681

Sep 13 04:29:10.097: ISAKMP:(14410): processing ID payload. message ID = 3181362681

Sep 13 04:29:10.097: ISAKMP:(14410): processing ID payload. message ID = 3181362681

Sep 13 04:29:10.097: ISAKMP:(14410): Creating IPSec SAs

Sep 13 04:29:10.097:         inbound SA from 172.35.200.87 to 172.34.47.57 (f/i)  0/ 0

        (proxy 172.17.31.0 to 0.0.0.0)

Sep 13 04:29:10.097:         has spi 0xEBFEE654 and conn_id 0

Sep 13 04:29:10.097:         lifetime of 300 seconds

Sep 13 04:29:10.097:         lifetime of 4608000 kilobytes

Sep 13 04:29:10.097:         outbound SA from 172.34.47.57 to 172.35.200.87 (f/i) 0/0

        (proxy 0.0.0.0 to 172.17.31.0)

Sep 13 04:29:10.097:         has spi  0xE6FD085C and conn_id 0

Sep 13 04:29:10.097:         lifetime of 300 seconds

Sep 13 04:29:10.097:         lifetime of 4608000 kilobytes

Sep 13 04:29:10.097: ISAKMP:(14410): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) QM_IDLE     

Sep 13 04:29:10.097: ISAKMP:(14410):Sending an IKE IPv4 Packet.

Sep 13 04:29:10.097: ISAKMP:(14410):deleting node -1113604615 error FALSE reason "No Error"

Sep 13 04:29:10.097: ISAKMP:(14410):Node 3181362681, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:29:10.097: ISAKMP:(14410):Old State = IKE_QM_I_QM1  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 04:29:10.149: ISAKMP (14410): received packet from 172.35.200.87 dport 500 sport 500 Global (I) QM_IDLE     

Sep 13 04:29:10.149: ISAKMP:(14410): processing HASH payload. message ID = 817986408

Sep 13 04:29:10.149: ISAKMP:(14410): processing SA payload. message ID = 817986408

Sep 13 04:29:10.149: ISAKMP:(14410):Checking IPSec proposal 1

Sep 13 04:29:10.149: ISAKMP: transform 1, ESP_3DES

Sep 13 04:29:10.149: ISAKMP:   attributes in transform:

Sep 13 04:29:10.149: ISAKMP:      encaps is 1 (Tunnel)

Sep 13 04:29:10.149: ISAKMP:      SA life type in seconds

Sep 13 04:29:10.149: ISAKMP:      SA life duration (basic) of 300

Sep 13 04:29:10.149: ISAKMP:      SA life type in kilobytes

Sep 13 04:29:10.149: ISAKMP:      SA life duration (VPI) of  0x0 0x46 0x50 0x0

Sep 13 04:29:10.149: ISAKMP:      authenticator is HMAC-MD5

Sep 13 04:29:10.149: ISAKMP:      group is 2

Sep 13 04:29:10.149: ISAKMP:(14410):atts are acceptable.

Sep 13 04:29:10.149: ISAKMP:(14410): processing NONCE payload. message ID = 817986408

Sep 13 04:29:10.149: ISAKMP:(14410): processing KE payload. message ID = 817986408

Sep 13 04:29:10.153: ISAKMP:(14410): processing ID payload. message ID = 817986408

Sep 13 04:29:10.153: ISAKMP:(14410): processing ID payload. message ID = 817986408

Sep 13 04:29:10.153: ISAKMP:(14410): Creating IPSec SAs

Sep 13 04:29:10.153:         inbound SA from 172.35.200.87 to 172.34.47.57 (f/i)  0/ 0

        (proxy 172.17.31.0 to 0.0.0.0)

Sep 13 04:29:10.153:         has spi 0xD674D8D6 and conn_id 0

Sep 13 04:29:10.153:         lifetime of 300 seconds

Sep 13 04:29:10.153:         lifetime of 4608000 kilobytes

Sep 13 04:29:10.153:         outbound SA from 172.34.47.57 to 172.35.200.87 (f/i) 0/0

        (proxy 0.0.0.0 to 172.17.31.0)

Sep 13 04:29:10.153:         has spi  0xB5CFF75B and conn_id 0

Sep 13 04:29:10.153:         lifetime of 300 seconds

Sep 13 04:29:10.153:         lifetime of 4608000 kilobytes

Sep 13 04:29:10.153: ISAKMP:(14410): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) QM_IDLE     

Sep 13 04:29:10.153: ISAKMP:(14410):Sending an IKE IPv4 Packet.

Sep 13 04:29:10.153: ISAKMP:(14410):deleting node 817986408 error FALSE reason "No Error"

Sep 13 04:29:10.153: ISAKMP:(14410):Node 817986408, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:29:10.153: ISAKMP:(14410):Old State = IKE_QM_I_QM1  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 04:29:11.573: ISAKMP (0): received packet from 172.34.49.33 dport 500 sport 500 Global (N) NEW SA

Sep 13 04:29:11.573: ISAKMP: Found a peer struct for 172.34.49.33, peer port 500

Sep 13 04:29:11.573: ISAKMP: Locking peer struct 0x1F79C08, refcount 1 for crypto_isakmp_process_block

Sep 13 04:29:11.573: ISAKMP: local port 500, remote port 500

Sep 13 04:29:11.573: ISAKMP:(0):insert sa successfully sa = 1FB648C

Sep 13 04:29:11.573: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:29:11.573: ISAKMP:(0):Old State = IKE_READY  New State = IKE_R_MM1


Sep 13 04:29:11.573: ISAKMP:(0): processing SA payload. message ID = 0

Sep 13 04:29:11.573: ISAKMP:(0): processing vendor id payload

Sep 13 04:29:11.573: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch

Sep 13 04:29:11.573: ISAKMP (0): vendor ID is NAT-T RFC 3947

Sep 13 04:29:11.573: ISAKMP:(0): processing vendor id payload

Sep 13 04:29:11.573: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch

Sep 13 04:29:11.573: ISAKMP (0): vendor ID is NAT-T v7

Sep 13 04:29:11.573: ISAKMP:(0): processing vendor id payload

Sep 13 04:29:11.573: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch

Sep 13 04:29:11.573: ISAKMP:(0): vendor ID is NAT-T v3

Sep 13 04:29:11.573: ISAKMP:(0): processing vendor id payload

Sep 13 04:29:11.573: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch

Sep 13 04:29:11.573: ISAKMP:(0): vendor ID is NAT-T v2

Sep 13 04:29:11.573: ISAKMP:(0):found peer pre-shared key matching 172.34.49.33

Sep 13 04:29:11.573: ISAKMP:(0): local preshared key found

Sep 13 04:29:11.573: ISAKMP : Scanning profiles for xauth ...

Sep 13 04:29:11.573: ISAKMP:(0):Checking ISAKMP transform 1 against priority 30 policy

Sep 13 04:29:11.573: ISAKMP:      encryption 3DES-CBC

Sep 13 04:29:11.573: ISAKMP:      hash MD5

Sep 13 04:29:11.573: ISAKMP:      default group 2

Sep 13 04:29:11.573: ISAKMP:      auth pre-share

Sep 13 04:29:11.573: ISAKMP:      life type in seconds

Sep 13 04:29:11.573: ISAKMP:      life duration (basic) of 300

Sep 13 04:29:11.573: ISAKMP:(0):atts are acceptable. Next payload is 0

Sep 13 04:29:11.573: ISAKMP:(0):Acceptable atts:actual life: 0

Sep 13 04:29:11.573: ISAKMP:(0):Acceptable atts:life: 0

Sep 13 04:29:11.573: ISAKMP:(0):Basic life_in_seconds:300

Sep 13 04:29:11.573: ISAKMP:(0):Returning Actual lifetime: 300

Sep 13 04:29:11.573: ISAKMP:(0)::Started lifetime timer: 300.


Sep 13 04:29:11.573: ISAKMP:(0): processing vendor id payload

Sep 13 04:29:11.573: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch

Sep 13 04:29:11.573: ISAKMP (0): vendor ID is NAT-T RFC 3947

Sep 13 04:29:11.573: ISAKMP:(0): processing vendor id payload

Sep 13 04:29:11.577: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch

Sep 13 04:29:11.577: ISAKMP (0): vendor ID is NAT-T v7

Sep 13 04:29:11.577: ISAKMP:(0): processing vendor id payload

Sep 13 04:29:11.577: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch

Sep 13 04:29:11.577: ISAKMP:(0): vendor ID is NAT-T v3

Sep 13 04:29:11.577: ISAKMP:(0): processing vendor id payload

Sep 13 04:29:11.577: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch

Sep 13 04:29:11.577: ISAKMP:(0): vendor ID is NAT-T v2

Sep 13 04:29:11.577: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Sep 13 04:29:11.577: ISAKMP:(0):Old State = IKE_R_MM1  New State = IKE_R_MM1


Sep 13 04:29:11.577: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID

Sep 13 04:29:11.577: ISAKMP:(0): sending packet to 172.34.49.33 my_port 500 peer_port 500 (R) MM_SA_SETUP

Sep 13 04:29:11.577: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:29:11.577: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

Sep 13 04:29:11.577: ISAKMP:(0):Old State = IKE_R_MM1  New State = IKE_R_MM2


Sep 13 04:29:11.701: ISAKMP (0): received packet from 172.34.49.33 dport 500 sport 500 Global (R) MM_SA_SETUP

Sep 13 04:29:11.701: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:29:11.701: ISAKMP:(0):Old State = IKE_R_MM2  New State = IKE_R_MM3


Sep 13 04:29:11.701: ISAKMP:(0): processing KE payload. message ID = 0

Sep 13 04:29:11.701: ISAKMP:(0): processing NONCE payload. message ID = 0

Sep 13 04:29:11.701: ISAKMP:(0):found peer pre-shared key matching 172.34.49.33

Sep 13 04:29:11.701: ISAKMP:(14411): processing vendor id payload

Sep 13 04:29:11.701: ISAKMP:(14411): vendor ID is DPD

Sep 13 04:29:11.701: ISAKMP:(14411): processing vendor id payload

Sep 13 04:29:11.701: ISAKMP:(14411): speaking to another IOS box!

Sep 13 04:29:11.701: ISAKMP:(14411): processing vendor id payload

Sep 13 04:29:11.701: ISAKMP:(14411): vendor ID seems Unity/DPD but major 194 mismatch

Sep 13 04:29:11.701: ISAKMP:(14411): vendor ID is XAUTH

Sep 13 04:29:11.701: ISAKMP:received payload type 20

Sep 13 04:29:11.701: ISAKMP (14411): His hash no match - this node outside NAT

Sep 13 04:29:11.701: ISAKMP:received payload type 20

Sep 13 04:29:11.701: ISAKMP (14411): No NAT Found for self or peer

Sep 13 04:29:11.701: ISAKMP:(14411):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Sep 13 04:29:11.701: ISAKMP:(14411):Old State = IKE_R_MM3  New State = IKE_R_MM3


Sep 13 04:29:11.705: ISAKMP:(14411): sending packet to 172.34.49.33 my_port 500 peer_port 500 (R) MM_KEY_EXCH

Sep 13 04:29:11.705: ISAKMP:(14411):Sending an IKE IPv4 Packet.

Sep 13 04:29:11.705: ISAKMP:(14411):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

Sep 13 04:29:11.705: ISAKMP:(14411):Old State = IKE_R_MM3  New State = IKE_R_MM4


Sep 13 04:29:11.825: ISAKMP (14411): received packet from 172.34.49.33 dport 500 sport 500 Global (R) MM_KEY_EXCH

Sep 13 04:29:11.825: ISAKMP:(14411):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:29:11.825: ISAKMP:(14411):Old State = IKE_R_MM4  New State = IKE_R_MM5


Sep 13 04:29:11.825: ISAKMP:(14411): processing ID payload. message ID = 0

Sep 13 04:29:11.825: ISAKMP (14411): ID payload

    next-payload : 8

    type         : 1

    address      : 172.34.49.33

    protocol     : 17

    port         : 500

    length       : 12

Sep 13 04:29:11.825: ISAKMP:(0):: peer matches *none* of the profiles

Sep 13 04:29:11.825: ISAKMP:(14411): processing HASH payload. message ID = 0

Sep 13 04:29:11.825: ISAKMP:(14411):SA authentication status:

    authenticated

Sep 13 04:29:11.825: ISAKMP:(14411):SA has been authenticated with 172.34.49.33

Sep 13 04:29:11.825: ISAKMP:(14411):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Sep 13 04:29:11.825: ISAKMP:(14411):Old State = IKE_R_MM5  New State = IKE_R_MM5


Sep 13 04:29:11.825: ISAKMP:(14411):SA is doing pre-shared key authentication using id type ID_IPV4_ADDR

Sep 13 04:29:11.825: ISAKMP (14411): ID payload

    next-payload : 8

    type         : 1

    address      : 172.34.47.57

    protocol     : 17

    port         : 500

    length       : 12

Sep 13 04:29:11.825: ISAKMP:(14411):Total payload length: 12

Sep 13 04:29:11.825: ISAKMP:(14411): sending packet to 172.34.49.33 my_port 500 peer_port 500 (R) MM_KEY_EXCH

Sep 13 04:29:11.825: ISAKMP:(14411):Sending an IKE IPv4 Packet.

Sep 13 04:29:11.825: ISAKMP:(14411):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

Sep 13 04:29:11.825: ISAKMP:(14411):Old State = IKE_R_MM5  New State = IKE_P1_COMPLETE


Sep 13 04:29:11.825: ISAKMP:(14411):Input = IKE_MESG_INTERNAL, IKE_PHASE1_COMPLETE

Sep 13 04:29:11.825: ISAKMP:(14411):Old State = IKE_P1_COMPLETE  New State = IKE_P1_COMPLETE


Sep 13 04:29:11.849: ISAKMP:(14408):purging node -1862940807

Sep 13 04:29:11.949: ISAKMP (14411): received packet from 172.34.49.33 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:29:11.949: ISAKMP: set new node 316969593 to QM_IDLE     

Sep 13 04:29:11.949: ISAKMP:(14411): processing HASH payload. message ID = 316969593

Sep 13 04:29:11.949: ISAKMP:(14411): processing SA payload. message ID = 316969593

Sep 13 04:29:11.949: ISAKMP:(14411):Checking IPSec proposal 1

Sep 13 04:29:11.949: ISAKMP: transform 1, ESP_3DES

Sep 13 04:29:11.949: ISAKMP:   attributes in transform:

Sep 13 04:29:11.949: ISAKMP:      encaps is 1 (Tunnel)

Sep 13 04:29:11.949: ISAKMP:      SA life type in seconds

Sep 13 04:29:11.949: ISAKMP:      SA life duration (basic) of 300

Sep 13 04:29:11.949: ISAKMP:      SA life type in kilobytes

Sep 13 04:29:11.949: ISAKMP:      SA life duration (VPI) of  0x0 0x46 0x50 0x0

Sep 13 04:29:11.949: ISAKMP:      authenticator is HMAC-MD5

Sep 13 04:29:11.949: ISAKMP:      group is 2

Sep 13 04:29:11.949: ISAKMP:(14411):atts are acceptable.

Sep 13 04:29:11.949: ISAKMP:(14411): processing NONCE payload. message ID = 316969593

Sep 13 04:29:11.949: ISAKMP:(14411): processing KE payload. message ID = 316969593

Sep 13 04:29:11.949: ISAKMP:(14411): processing ID payload. message ID = 316969593

Sep 13 04:29:11.949: ISAKMP:(14411): processing ID payload. message ID = 316969593

Sep 13 04:29:11.949: ISAKMP:(14411):QM Responder gets spi

Sep 13 04:29:11.949: ISAKMP:(14411):Node 316969593, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:29:11.949: ISAKMP:(14411):Old State = IKE_QM_READY  New State = IKE_QM_SPI_STARVE

Sep 13 04:29:11.949: ISAKMP:(14411): Creating IPSec SAs

Sep 13 04:29:11.949:         inbound SA from 172.34.49.33 to 172.34.47.57 (f/i)  0/ 0

        (proxy 172.19.100.0 to 0.0.0.0)

Sep 13 04:29:11.949:         has spi 0x9E311248 and conn_id 0

Sep 13 04:29:11.949:         lifetime of 300 seconds

Sep 13 04:29:11.949:         lifetime of 4608000 kilobytes

Sep 13 04:29:11.949:         outbound SA from 172.34.47.57 to 172.34.49.33 (f/i) 0/0

        (proxy 0.0.0.0 to 172.19.100.0)

Sep 13 04:29:11.949:         has spi  0x812E13CD and conn_id 0

Sep 13 04:29:11.949:         lifetime of 300 seconds

Sep 13 04:29:11.949:         lifetime of 4608000 kilobytes

Sep 13 04:29:11.949: ISAKMP:(14411): sending packet to 172.34.49.33 my_port 500 peer_port 500 (R) QM_IDLE     

Sep 13 04:29:11.949: ISAKMP:(14411):Sending an IKE IPv4 Packet.

Sep 13 04:29:11.949: ISAKMP:(14411):Node 316969593, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI

Sep 13 04:29:11.949: ISAKMP:(14411):Old State = IKE_QM_SPI_STARVE  New State = IKE_QM_R_QM2

Sep 13 04:29:12.073: ISAKMP (14411): received packet from 172.34.49.33 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:29:12.073: ISAKMP:(14411):deleting node 316969593 error FALSE reason "QM done (await)"

Sep 13 04:29:12.073: ISAKMP:(14411):Node 316969593, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:29:12.073: ISAKMP:(14411):Old State = IKE_QM_R_QM2  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 04:29:12.265: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP

Sep 13 04:29:12.265: ISAKMP:(0): phase 1 packet is a duplicate of a previous packet.

Sep 13 04:29:12.265: ISAKMP:(0): retransmitting due to retransmit phase 1

Sep 13 04:29:12.565: ISAKMP:(0):purging SA., sa=411BD47C, delme=411BD47C

Sep 13 04:29:12.765: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...

Sep 13 04:29:12.765: ISAKMP (0): incrementing error counter on sa, attempt 2 of 5: retransmit phase 1

Sep 13 04:29:12.765: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP

Sep 13 04:29:12.765: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP

Sep 13 04:29:12.765: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:29:12.817: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP

Sep 13 04:29:12.817: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:29:12.817: ISAKMP:(0):Old State = IKE_R_MM2  New State = IKE_R_MM3


Sep 13 04:29:12.817: ISAKMP:(0): processing KE payload. message ID = 0

Sep 13 04:29:12.817: ISAKMP:(0): processing NONCE payload. message ID = 0

Sep 13 04:29:12.821: ISAKMP:(0):found peer pre-shared key matching 172.35.200.87

Sep 13 04:29:12.821: ISAKMP:(14412): processing vendor id payload

Sep 13 04:29:12.821: ISAKMP:(14412): vendor ID is DPD

Sep 13 04:29:12.821: ISAKMP:(14412): processing vendor id payload

Sep 13 04:29:12.821: ISAKMP:(14412): speaking to another IOS box!

Sep 13 04:29:12.821: ISAKMP:(14412): processing vendor id payload

Sep 13 04:29:12.821: ISAKMP:(14412): vendor ID seems Unity/DPD but major 118 mismatch

Sep 13 04:29:12.821: ISAKMP:(14412): vendor ID is XAUTH

Sep 13 04:29:12.821: ISAKMP:received payload type 20

Sep 13 04:29:12.821: ISAKMP (14412): His hash no match - this node outside NAT

Sep 13 04:29:12.821: ISAKMP:received payload type 20

Sep 13 04:29:12.821: ISAKMP (14412): No NAT Found for self or peer

Sep 13 04:29:12.821: ISAKMP:(14412):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Sep 13 04:29:12.821: ISAKMP:(14412):Old State = IKE_R_MM3  New State = IKE_R_MM3


Sep 13 04:29:12.821: ISAKMP:(14412): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_KEY_EXCH

Sep 13 04:29:12.821: ISAKMP:(14412):Sending an IKE IPv4 Packet.

Sep 13 04:29:12.821: ISAKMP:(14412):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

Sep 13 04:29:12.821: ISAKMP:(14412):Old State = IKE_R_MM3  New State = IKE_R_MM4


Sep 13 04:29:12.881: ISAKMP (14412): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_KEY_EXCH

Sep 13 04:29:12.881: ISAKMP:(14412):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:29:12.881: ISAKMP:(14412):Old State = IKE_R_MM4  New State = IKE_R_MM5


Sep 13 04:29:12.881: ISAKMP:(14412): processing ID payload. message ID = 0

Sep 13 04:29:12.881: ISAKMP (14412): ID payload

    next-payload : 8

    type         : 1

    address      : 172.35.200.87

    protocol     : 17

    port         : 500

    length       : 12

Sep 13 04:29:12.881: ISAKMP:(0):: peer matches *none* of the profiles

Sep 13 04:29:12.881: ISAKMP:(14412): processing HASH payload. message ID = 0

Sep 13 04:29:12.881: ISAKMP:(14412):SA authentication status:

    authenticated

Sep 13 04:29:12.881: ISAKMP:(14412):SA has been authenticated with 172.35.200.87

Sep 13 04:29:12.881: ISAKMP: Trying to insert a peer 172.34.47.57/172.35.200.87/500/,  and found existing one 1FB5094 to reuse, free 12370108

Sep 13 04:29:12.881: ISAKMP: Unlocking peer struct 0x12370108 Reuse existing peer, count 0

Sep 13 04:29:12.881: ISAKMP: Deleting peer node by peer_reap for 172.35.200.87: 12370108

Sep 13 04:29:12.881: ISAKMP: Locking peer struct 0x1FB5094, refcount 2 for Reuse existing peer

Sep 13 04:29:12.881: ISAKMP:(14412):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Sep 13 04:29:12.881: ISAKMP:(14412):Old State = IKE_R_MM5  New State = IKE_R_MM5


Sep 13 04:29:12.885: ISAKMP:(14412):SA is doing

Sep 13 04:29:12.997: ISAKMP:(14412):Node 2632555641, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI

Sep 13 04:29:12.997: ISAKMP:(14412):Old State = IKE_QM_SPI_STARVE  New State = IKE_QM_R_QM2

Sep 13 04:29:13.077: ISAKMP (14412): received packet from 172.35.200.87 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:29:13.077: ISAKMP:(14412):deleting node -1662411655 error FALSE reason "QM done (await)"

Sep 13 04:29:13.077: ISAKMP:(14412):Node 2632555641, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:29:13.077: ISAKMP:(14412):Old State = IKE_QM_R_QM2  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 04:29:15.137: ISAKMP: set new node 0 to QM_IDLE     

Sep 13 04:29:15.137: SA has outstanding requests  (local 19.73.214.124 port 500, remote 19.73.214.96 port 500)

Sep 13 04:29:15.137: ISAKMP:(14399): sitting IDLE. Starting QM immediately (QM_IDLE      )

Sep 13 04:29:15.137: ISAKMP:(14399):beginning Quick Mode exchange, M-ID of 1817951830

Sep 13 04:29:15.137: ISAKMP:(14399):QM Initiator gets spi

Sep 13 04:29:15.137: ISAKMP:(14399): sending packet to 172.35.232.241 my_port 500 peer_port 500 (I) QM_IDLE     

Sep 13 04:29:15.137: ISAKMP:(14399):Sending an IKE IPv4 Packet.

Sep 13 04:29:15.137: ISAKMP:(14399):Node 1817951830, Input = IKE_MESG_INTERNAL, IKE_INIT_QM

Sep 13 04:29:15.137: ISAKMP:(14399):Old State = IKE_QM_READY  New State = IKE_QM_I_QM1

Sep 13 04:29:15.229: ISAKMP (14399): received packet from 172.35.232.241 dport 500 sport 500 Global (I) QM_IDLE     

Sep 13 04:29:15.229: ISAKMP:(14399): processing HASH payload. message ID = 1817951830

Sep 13 04:29:15.229: ISAKMP:(14399): processing SA payload. message ID = 1817951830

Sep 13 04:29:15.229: ISAKMP:(14399):Checking IPSec proposal 1

Sep 13 04:29:15.229: ISAKMP: transform 1, ESP_3DES

Sep 13 04:29:15.229: ISAKMP:   attributes in transform:

Sep 13 04:29:15.229: ISAKMP:      encaps is 1 (Tunnel)

Sep 13 04:29:15.229: ISAKMP:      SA life type in seconds

Sep 13 04:29:15.229: ISAKMP:      SA life duration (basic) of 300

Sep 13 04:29:15.229: ISAKMP:      SA life type in kilobytes

Sep 13 04:29:15.229: ISAKMP:      SA life duration (VPI) of  0x0 0x46 0x50 0x0

Sep 13 04:29:15.229: ISAKMP:      authenticator is HMAC-MD5

Sep 13 04:29:15.229: ISAKMP:      group is 2

Sep 13 04:29:15.229: ISAKMP:(14399):atts are acceptable.

Sep 13 04:29:15.229: ISAKMP:(14399): processing NONCE payload. message ID = 1817951830

Sep 13 04:29:15.229: ISAKMP:(14399): processing KE payload. message ID = 1817951830

Sep 13 04:29:15.233: ISAKMP:(14399): processing ID payload. message ID = 1817951830

Sep 13 04:29:15.233:         lifetime of 4608000 kilobytes

Sep 13 04:29:15.233: ISAKMP:(14399): sending packet to 172.35.232.241 my_port 500 peer_port 500 (I) QM_IDLE     

Sep 13 04:29:15.233: ISAKMP:(14399):Sending an IKE IPv4 Packet.

Sep 13 04:29:15.233: ISAKMP:(14399):deleting node 1817951830 error FALSE reason "No Error"

Sep 13 04:29:15.233: ISAKMP:(14399):Node 1817951830, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:29:15.233: ISAKMP:(14399):Old State = IKE_QM_I_QM1  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 09:59:15: %CRYPTO-4-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet. (ip) vrf/dest_addr= /172.16.102.30, src_addr= 172.16.10.199, prot= 17

Sep 13 04:29:17.197: ISAKMP:(14394):purging node -318471219

Sep 13 04:29:19.349: ISAKMP:(0):purging node 18447477

Sep 13 04:29:19.349: ISAKMP:(0):purging node -1384134144

Sep 13 04:29:19.665: ISAKMP:(14395):peer does not do paranoid keepalives.


Sep 13 04:29:19.665: ISAKMP:(14395):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE       (peer 172.35.200.100)

Sep 13 04:29:19.665: ISAKMP: set new node -2085630984 to QM_IDLE     

Sep 13 04:29:19.665: ISAKMP:(14395): sending packet to 172.35.200.100 my_port 500 peer_port 500 (R) QM_IDLE     

Sep 13 04:29:19.665: ISAKMP:(14395):Sending an IKE IPv4 Packet.

Sep 13 04:29:19.665: ISAKMP:(14395):purging node -2085630984

Sep 13 04:29:19.665: ISAKMP:(14395):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL

Sep 13 04:29:19.665: ISAKMP:(14395):Old State = IKE_P1_COMPLETE  New State = IKE_DEST_SA


Sep 13 04:29:19.665: ISAKMP:(14395):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE       (peer 172.35.200.100)

Sep 13 04:29:19.665: ISAKMP: Unlocking peer struct 0x1F7036C for isadb_mark_sa_deleted(), count 0

Sep 13 04:29:19.665: ISAKMP:(14395):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:29:19.665: ISAKMP:(14395):Old State = IKE_DEST_SA  New State = IKE_DEST_SA


Sep 13 04:29:19.705: ISAKMP (14395): received packet from 172.35.200.100 dport 500 sport 500 Global (R) MM_NO_STATE

Sep 13 04:29:19.925: ISAKMP: ignoring request to send delete notify (no ISAKMP sa) src 172.34.47.57 dst 172.35.200.100 for SPI 0xFEBEA21C

Sep 13 04:29:20.229: ISAKMP:(14391):purging node 617903236

Sep 13 04:29:21.865: ISAKMP:(14396):peer does not do paranoid keepalives.


Sep 13 04:29:21.865: ISAKMP:(14396):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE       (peer 172.35.222.236)

Sep 13 04:29:21.865: ISAKMP: set new node 197862031 to QM_IDLE     

Sep 13 04:29:21.865: ISAKMP:(14396): sending packet to 172.35.222.236 my_port 500 peer_port 500 (R) QM_IDLE     

Sep 13 04:29:21.865: ISAKMP:(14396):Sending an IKE IPv4 Packet.

Sep 13 04:29:21.865: ISAKMP:(14396):purging node 197862031

Sep 13 04:29:21.865: ISAKMP:(14396):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL

Sep 13 04:29:21.865: ISAKMP:(14396):Old State = IKE_P1_COMPLETE  New State = IKE_DEST_SA


Sep 13 04:29:21.865: ISAKMP:(14396):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE       (peer 172.35.222.236)

Sep 13 04:29:21.865: ISAKMP: Unlocking peer struct 0x41145720 for isadb_mark_sa_deleted(), count 0

Sep 13 04:29:21.865: ISAKMP:(14396):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:29:21.865: ISAKMP:(14396):Old State = IKE_DEST_SA  New State = IKE_DEST_SA


Sep 13 04:29:21.957: ISAKMP (14396): received packet from 172.35.222.236 dport 500 sport 500 Global (R) MM_NO_STATE

Sep 13 04:29:22.405: ISAKMP: ignoring request to send delete notify (no ISAKMP sa) src 172.34.47.57 dst 172.35.222.236 for SPI 0xB29B24CB

Sep 13 04:29:24.989: ISAKMP (14400): received packet from 172.35.247.239 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:29:24.989: ISAKMP: set new node 1895761073 to QM_IDLE     

Sep 13 04:29:24.989: ISAKMP:(14400): processing HASH payload. message ID = 1895761073

Sep 13 04:29:24.989: ISAKMP:(14400): processing SA payload. message ID = 1895761073

Sep 13 04:29:24.989: ISAKMP:(14400):Checking IPSec proposal 1

Sep 13 04:29:24.989: ISAKMP: transform 1, ESP_3DES

Sep 13 04:29:24.989: ISAKMP:   attributes in transform:

Sep 13 04:29:24.989: ISAKMP:      encaps is 1 (Tunnel)

Sep 13 04:29:24.989: ISAKMP:      SA life type in seconds

Sep 13 04:29:24.989: ISAKMP:      SA life duration (basic) of 300

Sep 13 04:29:24.989: ISAKMP:      SA life type in kilobytes

Sep 13 04:29:24.989: ISAKMP:      SA life duration (VPI) of  0x0 0x46 0x50 0x0

Sep 13 04:29:24.989: ISAKMP:      authenticator is HMAC-MD5

Sep 13 04:29:24.989: ISAKMP:      group is 2

Sep 13 04:29:24.989: ISAKMP:(14400):atts are acceptable.

Sep 13 04:29:24.989: ISAKMP:(14400): processing NONCE payload. message ID = 1895761073

Sep 13 04:29:24.989: ISAKMP:(14400): processing KE payload. message ID = 1895761073

Sep 13 04:29:24.993: ISAKMP:(14400): processing ID payload. message ID = 1895761073

Sep 13 04:29:24.993: ISAKMP:(14400): processing ID payload. message ID = 1895761073

Sep 13 04:29:24.993: ISAKMP:(14400):QM Responder gets spi

Sep 13 04:29:24.993: ISAKMP:(14400):Node 1895761073, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:29:24.993: ISAKMP:(14400):Old State = IKE_QM_READY  New State = IKE_QM_SPI_STARVE

Sep 13 04:29:24.993: ISAKMP:(14400): Creating IPSec SAs

Sep 13 04:29:24.993:         inbound SA from 172.35.247.239 to 172.34.47.57 (f/i)  0/ 0

        (proxy 172.17.19.0 to 0.0.0.0)

Sep 13 04:29:24.993:         has spi 0x9D41C37A and conn_id 0

Sep 13 04:29:24.993:         lifetime of 300 seconds

Sep 13 04:29:24.993:         lifetime of 4608000 kilobytes

Sep 13 04:29:24.993:         outbound SA from 172.34.47.57 to 172.35.247.239 (f/i) 0/0

        (proxy 0.0.0.0 to 172.17.19.0)

Sep 13 04:29:24.993:         has spi  0xD31F8C67 and conn_id 0

Sep 13 04:29:24.993:         lifetime of 300 seconds

Sep 13 04:29:24.993:         lifetime of 4608000 kilobytes

Sep 13 04:29:24.993: ISAKMP:(14400): sending packet to 172.35.247.239 my_port 500 peer_port 500 (R) QM_IDLE     

Sep 13 04:29:24.993: ISAKMP:(14400):Sending an IKE IPv4 Packet.

Sep 13 04:29:24.993: ISAKMP:(14400):Node 1895761073, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI

Sep 13 04:29:24.993: ISAKMP:(14400):Old State = IKE_QM_SPI_STARVE  New State = IKE_QM_R_QM2

Sep 13 04:29:25.061: ISAKMP (14400): received packet from 172.35.247.239 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:29:25.061: ISAKMP:(14400):deleting node 1895761073 error FALSE reason "QM done (await)"

Sep 13 04:29:25.061: ISAKMP:(14400):Node 1895761073, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:29:25.061: ISAKMP:(14400):Old State = IKE_QM_R_QM2  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 04:29:25.089: ISAKMP:(0): SA request profile is (NULL)

Sep 13 04:29:25.089: ISAKMP: Found a peer struct for 172.35.194.218, peer port 500

Sep 13 04:29:25.089: ISAKMP: Locking peer struct 0x1EB7CCC, refcount 1 for isakmp_initiator

Sep 13 04:29:25.089: ISAKMP: local port 500, remote port 500

Sep 13 04:29:25.089: ISAKMP: set new node 0 to QM_IDLE     

Sep 13 04:29:25.089: ISAKMP:(0):insert sa successfully sa = 134DC94C

Sep 13 04:29:25.089: ISAKMP:(0):Can not start Aggressive mode, trying Main mode.

Sep 13 04:29:25.089: ISAKMP:(0):found peer pre-shared key matching 172.35.194.218

Sep 13 04:29:25.089: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID

Sep 13 04:29:25.089: ISAKMP:(0): constructed NAT-T vendor-07 ID

Sep 13 04:29:25.089: ISAKMP:(0): constructed NAT-T vendor-03 ID

Sep 13 04:29:25.509:         lifetime of 4608000 kilobytes

Sep 13 04:29:25.509: ISAKMP:(14413): sending packet to 172.35.194.218 my_port 500 peer_port 500 (I) QM_IDLE     

Sep 13 04:29:25.509: ISAKMP:(14413):Sending an IKE IPv4 Packet.

Sep 13 04:29:25.509: ISAKMP:(14413):deleting node -1204938463 error FALSE reason "No Error"

Sep 13 04:29:25.509: ISAKMP:(14413):Node 3090028833, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:29:25.509: ISAKMP:(14413):Old State = IKE_QM_I_QM1  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 04:29:25.621: ISAKMP (14413): received packet from 172.35.194.218 dport 500 sport 500 Global (I) QM_IDLE     

Sep 13 04:29:28.233: ISAKMP:(0):purging node 1447299565

Sep 13 04:29:28.233: ISAKMP:(0):purging node -1227412869

Sep 13 04:29:29.349: ISAKMP:(0):purging SA., sa=134D9B1C, delme=134D9B1C

Sep 13 04:29:30.229: ISAKMP:(14391):purging SA., sa=1FA2A94, delme=1FA2A94

Sep 13 04:29:35.145: ISAKMP (14412): received packet from 172.35.200.87 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:29:35.145: ISAKMP: set new node 925689348 to QM_IDLE     

Sep 13 04:29:35.145: ISAKMP:(14412): processing HASH payload. message ID = 925689348

Sep 13 04:29:35.145: ISAKMP:(14412): processing DELETE payload. message ID = 925689348

Sep 13 04:29:35.145: ISAKMP:(14412):peer does not do paranoid keepalives.


Sep 13 04:29:35.145: ISAKMP:(14412):deleting node 925689348 error FALSE reason "Informational (in) state 1"

Sep 13 04:29:35.153: ISAKMP: set new node 1929835961 to QM_IDLE     

Sep 13 04:29:35.153: ISAKMP:(14410): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) QM_IDLE     

Sep 13 04:29:35.153: ISAKMP:(14410):Sending an IKE IPv4 Packet.

Sep 13 04:29:35.153: ISAKMP:(14410):purging node 1929835961

Sep 13 04:29:35.153: ISAKMP:(14410):Input = IKE_MESG_FROM_IPSEC, IKE_PHASE2_DEL

Se

    address      : 172.35.194.145

    protocol     : 17

    port         : 500

    length       : 12

Sep 13 04:27:21.573: ISAKMP:(0):: peer matches *none* of the profiles

Sep 13 04:27:21.573: ISAKMP:(14407): processing HASH payload. message ID = 0

Sep 13 04:27:21.573: ISAKMP:(14407):SA authentication status:

    authenticated

Sep 13 04:27:21.573: ISAKMP:(14407):SA has been authenticated with 172.35.194.145

Sep 13 04:27:21.573: ISAKMP:(14407):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:27:21.573: ISAKMP:(14407):Old State = IKE_I_MM5  New State = IKE_I_MM6


Sep 13 04:27:21.573: ISAKMP:(14407):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Sep 13 04:27:21.573: ISAKMP:(14407):Old State = IKE_I_MM6  New State = IKE_I_MM6


Sep 13 04:27:21.573: ISAKMP:(14407):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

Sep 13 04:27:21.573: ISAKMP:(14407):Old State = IKE_I_MM6  New State = IKE_P1_COMPLETE


Sep 13 04:27:21.573: ISAKMP:(14407):beginning Quick Mode exchange, M-ID of 737401177

Sep 13 04:27:21.573: ISAKMP:(14407):QM Initiator gets spi

Sep 13 04:27:21.577: ISAKMP:(14407): sending packet to 172.35.194.145 my_port 500 peer_port 500 (I) QM_IDLE     

Sep 13 04:27:21.577: ISAKMP:(14407):Sending an IKE IPv4 Packet.

Sep 13 04:27:21.577: ISAKMP:(14407):Node 737401177, Input = IKE_MESG_INTERNAL, IKE_INIT_QM

Sep 13 04:27:21.577: ISAKMP:(14407):Old State = IKE_QM_READY  New State = IKE_QM_I_QM1

Sep 13 04:27:21.577: ISAKMP:(14407):Input = IKE_MESG_INTERNAL, IKE_PHASE1_COMPLETE

Sep 13 04:27:21.577: ISAKMP:(14407):Old State = IKE_P1_COMPLETE  New State = IKE_P1_COMPLETE


Sep 13 04:27:21.645: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP

Sep 13 04:27:21.645: ISAKMP:(0): phase 1 packet is a duplicate of a previous packet.

Sep 13 04:27:21.645: ISAKMP:(0): retransmitting due to retransmit phase 1

Sep 13 04:27:21.665: ISAKMP (14407): received packet from 172.35.194.145 dport 500 sport 500 Global (I) QM_IDLE     

Sep 13 04:27:21.665: ISAKMP:(14407): processing HASH payload. message ID = 737401177

Sep 13 04:27:21.665: ISAKMP:(14407): processing SA payload. message ID = 737401177

Sep 13 04:27:21.665: ISAKMP:(14407):Checking IPSec proposal 1

Sep 13 04:27:21.665: ISAKMP: transform 1, ESP_3DES

Sep 13 04:27:21.665: ISAKMP:   attributes in transform:

Sep 13 04:27:21.665: ISAKMP:      encaps is 1 (Tunnel)

Sep 13 04:27:21.665: ISAKMP:      SA life type in seconds

Sep 13 04:27:21.665: ISAKMP:      SA life duration (basic) of 300

Sep 13 04:27:21.665: ISAKMP:      SA life type in kilobytes

Sep 13 04:27:21.665: ISAKMP:      SA life duration (VPI) of  0x0 0x46 0x50 0x0

Sep 13 04:27:21.665: ISAKMP:      authenticator is HMAC-MD5

Sep 13 04:27:21.665: ISAKMP:      group is 2

Sep 13 04:27:21.665: ISAKMP:(14407):atts are acceptable.

Sep 13 04:27:21.665: ISAKMP:(14407): processing NONCE payload. message ID = 737401177

Sep 13 04:27:21.665: ISAKMP:(14407): processing KE payload. message ID = 737401177

Sep 13 04:27:21.669: ISAKMP:(14407): processing ID payload. message ID = 737401177

Sep 13 04:27:21.669: ISAKMP:(14407): processing ID payload. message ID = 737401177

Sep 13 04:27:21.669: ISAKMP:(14407): Creating IPSec SAs

Sep 13 04:27:21.669:         inbound SA from 172.35.194.145 to 172.34.47.57 (f/i)  0/ 0

        (proxy 172.16.2.0 to 0.0.0.0)

Sep 13 04:27:21.669:         has spi 0x3A7219D1 and conn_id 0

Sep 13 04:27:21.669:         lifetime of 300 seconds

Sep 13 04:27:21.669:         lifetime of 4608000 kilobytes

Sep 13 04:27:21.669:         outbound SA from 172.34.47.57 to 172.35.194.145 (f/i) 0/0

        (proxy 0.0.0.0 to 172.16.2.0)

Sep 13 04:27:21.669:         has spi  0x2DB4C49F and conn_id 0

Sep 13 04:27:21.669:         lifetime of 300 seconds

Sep 13 04:27:21.669:         lifetime of 4608000 kilobytes

Sep 13 04:27:21.669: ISAKMP:(14407): sending packet to 172.35.194.145 my_port 500 peer_port 500 (I) QM_IDLE     

Sep 13 04:27:21.669: ISAKMP:(14407):Sending an IKE IPv4 Packet.

Sep 13 04:27:21.669: ISAKMP:(14407):deleting node 737401177 error FALSE reason "No Error"

Sep 13 04:27:21.669: ISAKMP:(14407):Node 737401177, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:27:21.669: ISAKMP:(14407):Old State = IKE_QM_I_QM1  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 04:27:21.929: ISAKMP:(14386):purging node -1519362962

Sep 13 04:27:22.145: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...

Sep 13 04:27:22.145: ISAKMP (0): incrementing error counter on sa, attempt 4 of 5: retransmit phase 1

Sep 13 04:27:22.145: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP

Sep 13 04:27:22.145: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP

Sep 13 04:27:22.145: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:27:22.569: ISAKMP (0): received packet from 172.35.200.91 dport 500 sport 500 Global (R) MM_NO_STATE

Sep 13 04:27:24.841: ISAKMP: set new node -76103279 to QM_IDLE     

Sep 13 04:27:24.841: ISAKMP:(14406): sending packet to 172.35.217.15 my_port 500 peer_port 500 (R) QM_IDLE     

Sep 13 04:27:24.841: ISAKMP:(14406):Sending an IKE IPv4 Packet.

Sep 13 04:27:24.841: ISAKMP:(14406):purging node -76103279

Sep 13 04:27:24.841: ISAKMP:(14406):Input = IKE_MESG_FROM_IPSEC, IKE_PHASE2_DEL

Sep 13 04:27:24.841: ISAKMP:(14406):Old State = IKE_P1_COMPLETE  New State = IKE_P1_COMPLETE


Sep 13 04:27:24.841: ISAKMP (14406): received packet from 172.35.217.15 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:27:24.841: ISAKMP: set new node -1746108638 to QM_IDLE     

Sep 13 04:27:24.841: ISAKMP:(14406): processing HASH payload. message ID = 2548858658

Sep 13 04:27:24.841: ISAKMP:(14406): processing DELETE payload. message ID = 2548858658

Sep 13 04:27:24.841: ISAKMP:(14406):peer does not do paranoid keepalives.


Sep 13 04:27:24.841: ISAKMP:(14406):deleting node -1746108638 error FALSE reason "Informational (in) state 1"

Sep 13 04:27:26.197: ISAKMP:(14384):purging SA., sa=134D9B1C, delme=134D9B1C

Sep 13 04:27:26.233: ISAKMP:(14385):purging SA., sa=1F6EF24, delme=1F6EF24

Sep 13 04:27:27.497: ISAKMP:(14404):purging node 498370353

Sep 13 04:27:28.345: ISAKMP:(0):purging SA., sa=4018B0F0, delme=4018B0F0

Sep 13 04:27:28.845: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...

Sep 13 04:27:28.845: ISAKMP:(0):peer does not do paranoid keepalives.


Sep 13 04:27:28.845: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (I) MM_NO_STATE (peer 172.35.200.87)

Sep 13 04:27:28.845: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (I) MM_NO_STATE (peer 172.35.200.87)

Sep 13 04:27:28.845: ISAKMP: Unlocking peer struct 0x1FB5094 for isadb_mark_sa_deleted(), count 0

Sep 13 04:27:28.845: ISAKMP: Deleting peer node by peer_reap for 172.35.200.87: 1FB5094

Sep 13 04:27:28.845: ISAKMP:(0):deleting node 1013205142 error FALSE reason "IKE deleted"

Sep 13 04:27:28.845: ISAKMP:(0):deleting node -1738356762 error FALSE reason "IKE deleted"

Sep 13 04:27:28.845: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL

Sep 13 04:27:28.845: ISAKMP:(0):Old State = IKE_I_MM1  New State = IKE_DEST_SA


Sep 13 04:27:29.345: ISAKMP:(0): SA request profile is (NULL)

Sep 13 04:27:29.345: ISAKMP: Created a peer struct for 172.35.200.87, peer port 500

Sep 13 04:27:29.345: ISAKMP: New peer created peer = 0x1FB5094 peer_handle = 0x80008B45

Sep 13 04:27:29.345: ISAKMP: Locking peer struct 0x1FB5094, refcount 1 for isakmp_initiator

Sep 13 04:27:29.349: ISAKMP: local port 500, remote port 500

Sep 13 04:27:29.349: ISAKMP: set new node 0 to QM_IDLE     

Sep 13 04:27:29.349: ISAKMP: Find a dup sa in the avl tree during calling isadb_insert sa = 134D9B1C

Sep 13 04:27:29.349: ISAKMP:(0):Can not start Aggressive mode, trying Main mode.

Sep 13 04:27:29.349: ISAKMP:(0):found peer pre-shared key matching 172.35.200.87

Sep 13 04:27:29.349: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID

Sep 13 04:27:29.349: ISAKMP:(0): constructed NAT-T vendor-07 ID

Sep 13 04:27:29.349: ISAKMP:(0): constructed NAT-T vendor-03 ID

Sep 13 04:27:29.349: ISAKMP:(0): constructed NAT-T vendor-02 ID

Sep 13 04:27:29.349: ISAKMP:(0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM

Sep 13 04:27:29.349: ISAKMP:(0):Old State = IKE_READY  New State = IKE_I_MM1


Sep 13 04:27:29.349: ISAKMP:(0): beginning Main Mode exchange

Sep 13 04:27:29.349: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE

Sep 13 04:27:29.349: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:27:30.677: ISAKMP:(14387):purging node 748799546

Sep 13 04:27:31.645: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP

Sep 13 04:27:31.645: ISAKMP:(0): phase 1 packet is a duplicate of a previous packet.

Sep 13 04:27:31.645: ISAKMP:(0): retransmitting due to retransmit phase 1

Sep 13 04:27:31.929: ISAKMP:(14386):purging SA., sa=411CF108, delme=411CF108

Sep 13 04:27:32.145: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...

Sep 13 04:27:32.145: ISAKMP (0): incrementing error counter on sa, attempt 5 of 5: retransmit phase 1

Sep 13 04:27:32.145: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP

Sep 13 04:27:32.145: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP

Sep 13 04:27:32.145: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:27:32.569: ISAKMP (0): received packet from 172.35.200.91 dport 500 sport 500 Global (R) MM_NO_STATE

Sep 13 04:27:32.953: ISAKMP (14389): received packet from 172.35.237.233 dport 500 sport 500 Global (I) QM_IDLE     

Sep 13 04:27:32.953: ISAKMP: set new node 299600500 to QM_IDLE     

Sep 13 04:27:32.953: ISAKMP:(14389): processing HASH payload. message ID = 299600500

Sep 13 04:27:32.953: ISAKMP:received payload type 18

Sep 13 04:27:32.953: ISAKMP:(14389):Processing delete with reason payload

Sep 13 04:27:32.953: ISAKMP:(14389):delete doi = 1

Sep 13 04:27:32.953: ISAKMP:(14389):delete protocol id = 1

Sep 13 04:27:32.953: ISAKMP:(14389):delete spi_size =  16

Sep 13 04:27:32.953: ISAKMP:(14389):delete num spis = 1

Sep 13 04:27:32.953: ISAKMP:(14389):delete_reason = 10

Sep 13 04:27:32.953: ISAKMP:(14389): processing DELETE_WITH_REASON payload, message ID = 299600500, reason: Unknown delete reason!

Sep 13 04:27:32.953: ISAKMP:(14389):peer does not do paranoid keepalives.


Sep 13 04:27:32.953: ISAKMP:(14389):deleting SA reason "IKE SA Lifetime Exceeded" state (I) QM_IDLE       (peer 172.35.237.233)

Sep 13 04:27:32.953: ISAKMP:(14389):deleting node 299600500 error FALSE reason "Informational (in) state 1"

Sep 13 04:27:32.953: ISAKMP: set new node -1993838501 to QM_IDLE     

Sep 13 04:27:32.953: ISAKMP:(14389): sending packet to 172.35.237.233 my_port 500 peer_port 500 (I) QM_IDLE     

Sep 13 04:27:32.953: ISAKMP:(14389):Sending an IKE IPv4 Packet.

Sep 13 04:27:32.953: ISAKMP:(14389):purging node -1993838501

Sep 13 04:27:32.953: ISAKMP:(14389):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL

Sep 13 04:27:32.953: ISAKMP:(14389):Old State = IKE_P1_COMPLETE  New State = IKE_DEST_SA


Sep 13 04:27:32.953: ISAKMP:(14389):deleting SA reason "IKE SA Lifetime Exceeded" state (I) QM_IDLE       (peer 172.35.237.233)

Sep 13 04:27:32.953: ISAKMP: Unlocking peer struct 0x10D668C for isadb_mark_sa_deleted(), count 0

Sep 13 04:27:32.953: ISAKMP:(14389):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:27:32.953: ISAKMP:(14389):Old State = IKE_DEST_SA  New State = IKE_DEST_SA


Sep 13 04:27:33.249: ISAKMP: ignoring request to send delete notify (no ISAKMP sa) src 172.34.47.57 dst 172.35.237.233 for SPI 0xF84E9858

Sep 13 04:27:36.129: ISAKMP:(14406):purging node -500665922

Sep 13 04:27:38.233: ISAKMP:(0): SA request profile is (NULL)

Sep 13 04:27:38.233: ISAKMP: Created a peer struct for 172.35.194.150, peer port 500

Sep 13 04:27:38.233: ISAKMP: New peer created peer = 0x12370108 peer_handle = 0x8000FFBF

Sep 13 04:27:38.233: ISAKMP: Locking peer struct 0x12370108, refcount 1 for isakmp_initiator

Sep 13 04:27:38.233: ISAKMP: local port 500, remote port 500

Sep 13 04:27:38.233: ISAKMP: set new node 0 to QM_IDLE     

Sep 13 04:27:38.233: ISAKMP:(0):insert sa successfully sa = 4018B0F0

Sep 13 04:27:38.233: ISAKMP:(0):Can not start Aggressive mode, trying Main mode.

Sep 13 04:27:38.233: ISAKMP:(0):found peer pre-shared key matching 172.35.194.150

Sep 13 04:27:38.233: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID

Sep 13 04:27:38.233: ISAKMP:(0): constructed NAT-T vendor-07 ID

Sep 13 04:27:38.233: ISAKMP:(0): constructed NAT-T vendor-03 ID

Sep 13 04:27:38.233: ISAKMP:(0): constructed NAT-T vendor-02 ID

Sep 13 04:27:38.233: ISAKMP:(0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM

Sep 13 04:27:38.233: ISAKMP:(0):Old State = IKE_READY  New State = IKE_I_MM1


Sep 13 04:27:38.233: ISAKMP:(0): beginning Main Mode exchange

Sep 13 04:27:38.233: ISAKMP:(0): sending packet to 172.35.194.150 my_port 500 peer_port 500 (I) MM_NO_STATE

Sep 13 04:27:38.233: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:27:39.129: ISAKMP:(0): SA request profile is (NULL)

Sep 13 04:27:39.129: ISAKMP: Found a peer struct for 172.34.47.146, peer port 500

Sep 13 04:27:39.129: ISAKMP: Locking peer struct 0x10E9688, refcount 1 for isakmp_initiator

Sep 13 04:27:39.129: ISAKMP: local port 500, remote port 500

Sep 13 04:27:39.129: ISAKMP: set new node 0 to QM_IDLE     

Sep 13 04:27:39.129: ISAKMP:(0):insert sa successfully sa = 1F6EF24

Sep 13 04:27:39.129: ISAKMP:(0):Can not start Aggressive mode, trying Main mode.

Sep 13 04:27:39.129: ISAKMP:(0):found peer pre-shared key matching 172.34.47.146

Sep 13 04:27:39.129: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID

Sep 13 04:27:39.129: ISAKMP:(0): constructed NAT-T vendor-07 ID

Sep 13 04:27:39.129: ISAKMP:(0): constructed NAT-T vendor-03 ID

Sep 13 04:27:39.129: ISAKMP:(0): constructed NAT-T vendor-02 ID

Sep 13 04:27:39.129: ISAKMP:(0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM

Sep 13 04:27:39.129: ISAKMP:(0):Old State = IKE_READY  New State = IKE_I_MM1


Sep 13 04:27:39.129: ISAKMP:(0): beginning Main Mode exchange

Sep 13 04:27:39.129: ISAKMP:(0): sending packet to 172.34.47.146 my_port 500 peer_port 500 (I) MM_NO_STATE

Sep 13 04:27:39.129: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:27:39.217: ISAKMP (0): received packet from 172.34.47.146 dport 500 sport 500 Global (I) MM_NO_STATE

Sep 13 04:27:39.217: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:27:39.217: ISAKMP:(0):Old State = IKE_I_MM1  New State = IKE_I_MM2


Sep 13 04:27:39.217: ISAKMP:(0): processing SA payload. message ID = 0

Sep 13 04:27:39.217: ISAKMP:(0): processing vendor id payload

Sep 13 04:27:39.217: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch

Sep 13 04:27:39.217: ISAKMP (0): vendor ID is NAT-T RFC 3947

Sep 13 04:27:39.217: ISAKMP:(0):found peer pre-shared key matching 172.34.47.146

Sep 13 04:27:39.217: ISAKMP:(0): local preshared key found

Sep 13 04:27:39.217: ISAKMP : Scanning profiles for xauth ...

Sep 13 04:27:39.217: ISAKMP:(0):Checking ISAKMP transform 1 against priority 30 policy

Sep 13 04:27:39.217: ISAKMP:      encryption 3DES-CBC

Sep 13 04:27:39.217: ISAKMP:      hash MD5

Sep 13 04:27:39.217: ISAKMP:      default group 2

Sep 13 04:27:39.217: ISAKMP:      auth pre-share

Sep 13 04:27:39.217: ISAKMP:      life type in seconds

Sep 13 04:27:39.217: ISAKMP:      life duration (basic) of 300

Sep 13 04:27:39.217: ISAKMP:(0):atts are acceptable. Next payload is 0

Sep 13 04:27:39.217: ISAKMP:(0):Acceptable atts:actual life: 0

Sep 13 04:27:39.217: ISAKMP:(0):Acceptable atts:life: 0

Sep 13 04:27:39.217: ISAKMP:(0):Basic life_in_seconds:300

Sep 13 04:27:39.217: ISAKMP:(0):Returning Actual lifetime: 300

Sep 13 04:27:39.217: ISAKMP:(0)::Started lifetime timer: 300.


Sep 13 04:27:39.217: ISAKMP:(0): processing vendor id payload

Sep 13 04:27:39.217: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch

Sep 13 04:27:39.217: ISAKMP (0): vendor ID is NAT-T RFC 3947

Sep 13 04:27:39.217: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Sep 13 04:27:39.217: ISAKMP:(0):Old State = IKE_I_MM2  New State = IKE_I_MM2


Sep 13 04:27:39.217: ISAKMP:(0): sending packet to 172.34.47.146 my_port 500 peer_port 500 (I) MM_SA_SETUP

Sep 13 04:27:39.217: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:27:39.217: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

Sep 13 04:27:39.217: ISAKMP:(0):Old State = IKE_I_MM2  New State = IKE_I_MM3


Sep 13 04:27:39.293: ISAKMP (0): received packet from 172.34.47.146 dport 500 sport 500 Global (I) MM_SA_SETUP

Sep 13 04:27:39.293: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:27:39.293: ISAKMP:(0):Old State = IKE_I_MM3  New State = IKE_I_MM4


Sep 13 04:27:39.293: ISAKMP:(0): processing KE payload. message ID = 0

Sep 13 04:27:39.293: ISAKMP:(0): processing NONCE payload. message ID = 0

Sep 13 04:27:39.293: ISAKMP:(0):found peer pre-shared key matching 172.34.47.146

Sep 13 04:27:39.293: ISAKMP:(14408): processing vendor id payload

Sep 13 04:27:39.293: ISAKMP:(14408): vendor ID is Unity

Sep 13 04:27:39.293: ISAKMP:(14408): processing vendor id payload

Sep 13 04:27:39.293: ISAKMP:(14408): vendor ID is DPD

Sep 13 04:27:39.293: ISAKMP:(14408): processing vendor id payload

Sep 13 04:27:39.293: ISAKMP:(14408): speaking to another IOS box!

Sep 13 04:27:39.293: ISAKMP:received payload type 20

Sep 13 04:27:39.293: ISAKMP (14408): His hash no match - this node outside NAT

Sep 13 04:27:39.293: ISAKMP:received payload type 20

Sep 13 04:27:39.293: ISAKMP (14408): No NAT Found for self or peer

Sep 13 04:27:39.293: ISAKMP:(14408):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Sep 13 04:27:39.297: ISAKMP:(14408):Old State = IKE_I_MM4  New State = IKE_I_MM4


Sep 13 04:27:39.297: ISAKMP:(14408):SA is doing pre-shared key authentication using id type ID_IPV4_ADDR

Sep 13 04:27:39.297: ISAKMP (14408): ID payload

    next-payload : 8

    type         : 1

    address      : 172.34.47.57

    protocol     : 17

    port         : 500

    length       : 12

Sep 13 04:27:39.297: ISAKMP:(14408):Total payload length: 12

Sep 13 04:27:39.297: ISAKMP:(14408): sending packet to 172.34.47.146 my_port 500 peer_port 500 (I) MM_KEY_EXCH

Sep 13 04:27:39.297: ISAKMP:(14408):Sending an IKE IPv4 Packet.

Sep 13 04:27:39.297: ISAKMP:(14408):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

Sep 13 04:27:39.297: ISAKMP:(14408):Old State = IKE_I_MM4  New State = IKE_I_MM5


Sep 13 04:27:39.337: ISAKMP (14408): received packet from 172.34.47.146 dport 500 sport 500 Global (I) MM_KEY_EXCH

Sep 13 04:27:39.337: ISAKMP:(14408): processing ID payload. message ID = 0

Sep 13 04:27:39.337: ISAKMP (14408): ID payload

    next-payload : 8

    type         : 1

    address      : 172.34.47.146

    protocol     : 17

    port         : 500

    length       : 12

Sep 13 04:27:39.337: ISAKMP:(0):: peer matches *none* of the profiles

Sep 13 04:27:39.337: ISAKMP:(14408): processing HASH payload. message ID = 0

Sep 13 04:27:39.337: ISAKMP:(14408):SA authentication status:

    authenticated

Sep 13 04:27:39.337: ISAKMP:(14408):SA has been authenticated with 172.34.47.146

Sep 13 04:27:39.337: ISAKMP:(14408):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:27:39.337: ISAKMP:(14408):Old State = IKE_I_MM5  New State = IKE_I_MM6


Sep 13 04:27:39.337: ISAKMP:(14408):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Sep 13 04:27:39.337: ISAKMP:(14408):Old State = IKE_I_MM6  New State = IKE_I_MM6


Sep 13 04:27:39.337: ISAKMP:(14408):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

Sep 13 04:27:39.337: ISAKMP:(14408):Old State = IKE_I_MM6  New State = IKE_P1_COMPLETE


Sep 13 04:27:39.337: ISAKMP:(14408):beginning Quick Mode exchange, M-ID of 119951985

Sep 13 04:27:39.341: ISAKMP:(14408):QM Initiator gets spi

Sep 13 04:27:39.341: ISAKMP:(14408): sending packet to 172.34.47.146 my_port 500 peer_port 500 (I) QM_IDLE     

Sep 13 04:27:39.341: ISAKMP:(14408):Sending an IKE IPv4 Packet.

Sep 13 04:27:39.341: ISAKMP:(14408):Node 119951985, Input = IKE_MESG_INTERNAL, IKE_INIT_QM

Sep 13 04:27:39.341: ISAKMP:(14408):Old State = IKE_QM_READY  New State = IKE_QM_I_QM1

Sep 13 04:27:39.341: ISAKMP:(14408):Input = IKE_MESG_INTERNAL, IKE_PHASE1_COMPLETE

Sep 13 04:27:39.341: ISAKMP:(14408):Old State = IKE_P1_COMPLETE  New State = IKE_P1_COMPLETE


Sep 13 04:27:39.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...

Sep 13 04:27:39.349: ISAKMP (0): incrementing error counter on sa, attempt 1 of 5: retransmit phase 1

Sep 13 04:27:39.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE

Sep 13 04:27:39.349: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE

Sep 13 04:27:39.349: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:27:39.437: ISAKMP (14408): received packet from 172.34.47.146 dport 500 sport 500 Global (I) QM_IDLE     

Sep 13 04:27:39.437: ISAKMP:(14408): processing HASH payload. message ID = 119951985

Sep 13 04:27:39.437: ISAKMP:(14408): processing SA payload. message ID = 119951985

Sep 13 04:27:39.437: ISAKMP:(14408):Checking IPSec proposal 1

Sep 13 04:27:39.437: ISAKMP: transform 1, ESP_3DES

Sep 13 04:27:39.437: ISAKMP:   attributes in transform:

Sep 13 04:27:39.437: ISAKMP:      encaps is 1 (Tunnel)

Sep 13 04:27:39.437: ISAKMP:      SA life type in seconds

Sep 13 04:27:39.437: ISAKMP:      SA life duration (basic) of 300

Sep 13 04:27:39.437: ISAKMP:      SA life type in kilobytes

Sep 13 04:27:39.437: ISAKMP:      SA life duration (VPI) of  0x0 0x46 0x50 0x0

Sep 13 04:27:39.437: ISAKMP:      authenticator is HMAC-MD5

Sep 13 04:27:39.437: ISAKMP:      group is 2

Sep 13 04:27:39.437: ISAKMP:(14408):atts are acceptable.

Sep 13 04:27:39.437: ISAKMP:(14408): processing NONCE payload. message ID = 119951985

Sep 13 04:27:39.437: ISAKMP:(14408): processing KE payload. message ID = 119951985

Sep 13 04:27:39.441: ISAKMP:(14408): processing ID payload. message ID = 119951985

Sep 13 04:27:39.441: ISAKMP:(14408): processing ID payload. message ID = 119951985

Sep 13 04:27:39.441: ISAKMP:(14408): Creating IPSec SAs

Sep 13 04:27:39.441:         inbound SA from 172.34.47.146 to 172.34.47.57 (f/i)  0/ 0

        (proxy 172.16.1.0 to 0.0.0.0)

Sep 13 04:27:39.441:         has spi 0x650E4D42 and conn_id 0

Sep 13 04:27:39.441:         lifetime of 300 seconds

Sep 13 04:27:39.441:         lifetime of 4608000 kilobytes

Sep 13 04:27:39.441:         outbound SA from 172.34.47.57 to 172.34.47.146 (f/i) 0/0

        (proxy 0.0.0.0 to 172.16.1.0)

Sep 13 04:27:39.441:         has spi  0xDB5D5974 and conn_id 0

Sep 13 04:27:39.441:         lifetime of 300 seconds

Sep 13 04:27:39.441:         lifetime of 4608000 kilobytes

Sep 13 04:27:39.441: ISAKMP:(14408): sending packet to 172.34.47.146 my_port 500 peer_port 500 (I) QM_IDLE     

Sep 13 04:27:39.441: ISAKMP:(14408):Sending an IKE IPv4 Packet.

Sep 13 04:27:39.441: ISAKMP:(14408):deleting node 119951985 error FALSE reason "No Error"

Sep 13 04:27:39.441: ISAKMP:(14408):Node 119951985, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:27:39.441: ISAKMP:(14408):Old State = IKE_QM_I_QM1  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 04:27:40.389: ISAKMP (0): received packet from 172.35.206.48 dport 500 sport 500 Global (N) NEW SA

Sep 13 04:27:40.389: ISAKMP: Found a peer struct for 172.35.206.48, peer port 500

Sep 13 04:27:40.389: ISAKMP: Locking peer struct 0x1E9F854, refcount 1 for crypto_isakmp_process_block

Sep 13 04:27:40.389: ISAKMP: local port 500, remote port 500

Sep 13 04:27:40.389: ISAKMP:(0):insert sa successfully sa = 411CEBDC

Sep 13 04:27:40.389: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:27:40.389: ISAKMP:(0):Old State = IKE_READY  New State = IKE_R_MM1


Sep 13 04:27:40.389: ISAKMP:(0): processing SA payload. message ID = 0

Sep 13 04:27:40.389: ISAKMP:(0): processing vendor id payload

Sep 13 04:27:40.389: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch

Sep 13 04:27:40.389: ISAKMP (0): vendor ID is NAT-T RFC 3947

Sep 13 04:27:40.389: ISAKMP:(0): processing vendor id payload

Sep 13 04:27:40.389: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch

Sep 13 04:27:40.389: ISAKMP (0): vendor ID is NAT-T v7

Sep 13 04:27:40.389: ISAKMP:(0): processing vendor id payload

Sep 13 04:27:40.389: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch

Sep 13 04:27:40.389: ISAKMP:(0): vendor ID is NAT-T v3

Sep 13 04:27:40.389: ISAKMP:(0): processing vendor id payload

Sep 13 04:27:40.389: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch

Sep 13 04:27:40.389: ISAKMP:(0): vendor ID is NAT-T v2

Sep 13 04:27:40.389: ISAKMP:(0):found peer pre-shared key matching 172.35.206.48

Sep 13 04:27:40.389: ISAKMP:(0): local preshared key found

Sep 13 04:27:40.389: ISAKMP : Scanning profiles for xauth ...

Sep 13 04:27:40.389: ISAKMP:(0):Checking ISAKMP transform 1 against priority 30 policy

Sep 13 04:27:40.389: ISAKMP:      encryption 3DES-CBC

Sep 13 04:27:40.389: ISAKMP:      hash MD5

Sep 13 04:27:40.389: ISAKMP:      default group 2

Sep 13 04:27:40.389: ISAKMP:      auth pre-share

Sep 13 04:27:40.389: ISAKMP:      life type in seconds

Sep 13 04:27:40.389: ISAKMP:      life duration (basic) of 300

Sep 13 04:27:40.389: ISAKMP:(0):atts are acceptable. Next payload is 0

Sep 13 04:27:40.389: ISAKMP:(0):Acceptable atts:actual life: 0

Sep 13 04:27:40.389: ISAKMP:(0):Acceptable atts:life: 0

Sep 13 04:27:40.389: ISAKMP:(0):Basic life_in_seconds:300

Sep 13 04:27:40.389: ISAKMP:(0):Returning Actual lifetime: 300

Sep 13 04:27:40.389: ISAKMP:(0)::Started lifetime timer: 300.


Sep 13 04:27:40.389: ISAKMP:(0): processing vendor id payload

Sep 13 04:27:40.389: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch

Sep 13 04:27:40.389: ISAKMP (0): vendor ID is NAT-T RFC 3947

Sep 13 04:27:40.389: ISAKMP:(0): processing vendor id payload

Sep 13 04:27:40.389: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch

Sep 13 04:27:40.389: ISAKMP (0): vendor ID is NAT-T v7

Sep 13 04:27:40.389: ISAKMP:(0): processing vendor id payload

Sep 13 04:27:40.389: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch

Sep 13 04:27:40.389: ISAKMP:(0): vendor ID is NAT-T v3

Sep 13 04:27:40.389: ISAKMP:(0): processing vendor id payload

Sep 13 04:27:40.389: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch

Sep 13 04:27:40.389: ISAKMP:(0): vendor ID is NAT-T v2

Sep 13 04:27:40.389: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Sep 13 04:27:40.389: ISAKMP:(0):Old State = IKE_R_MM1  New State = IKE_R_MM1


Sep 13 04:27:40.389: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID

Sep 13 04:27:40.389: ISAKMP:(0): sending packet to 172.35.206.48 my_port 500 peer_port 500 (R) MM_SA_SETUP

Sep 13 04:27:40.389: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:27:40.389: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

Sep 13 04:27:40.389: ISAKMP:(0):Old State = IKE_R_MM1  New State = IKE_R_MM2


Sep 13 04:27:40.473: ISAKMP (0): received packet from 172.35.206.48 dport 500 sport 500 Global (R) MM_SA_SETUP

Sep 13 04:27:40.473: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:27:40.473: ISAKMP:(0):Old State = IKE_R_MM2  New State = IKE_R_MM3


Sep 13 04:27:40.473: ISAKMP:(0): processing KE payload. message ID = 0

Sep 13 04:27:40.473: ISAKMP:(0): processing NONCE payload. message ID = 0

Sep 13 04:27:40.473: ISAKMP:(0):found peer pre-shared key matching 172.35.206.48

Sep 13 04:27:40.473: ISAKMP:(14409): processing vendor id payload

Sep 13 04:27:40.473: ISAKMP:(14409): vendor ID is DPD

Sep 13 04:27:40.473: ISAKMP:(14409): processing vendor id payload

Sep 13 04:27:40.473: ISAKMP:(14409): speaking to another IOS box!

Sep 13 04:27:40.473: ISAKMP:(14409): processing vendor id payload

Sep 13 04:27:40.473: ISAKMP:(14409): vendor ID seems Unity/DPD but major 129 mismatch

Sep 13 04:27:40.473: ISAKMP:(14409): vendor ID is XAUTH

Sep 13 04:27:40.473: ISAKMP:received payload type 20

Sep 13 04:27:40.473: ISAKMP (14409): His hash no match - this node outside NAT

Sep 13 04:27:40.473: ISAKMP:received payload type 20

Sep 13 04:27:40.477: ISAKMP (14409): No NAT Found for self or peer

Sep 13 04:27:40.477: ISAKMP:(14409):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Sep 13 04:27:40.477: ISAKMP:(14409):Old State = IKE_R_MM3  New State = IKE_R_MM3


Sep 13 04:27:40.477: ISAKMP:(14409): sending packet to 172.35.206.48 my_port 500 peer_port 500 (R) MM_KEY_EXCH

Sep 13 04:27:40.477: ISAKMP:(14409):Sending an IKE IPv4 Packet.

Sep 13 04:27:40.477: ISAKMP:(14409):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

Sep 13 04:27:40.677: ISAKMP:(14387):purging SA., sa=40177E8C, delme=40177E8C

Sep 13 04:27:40.741: ISAKMP (14409): received packet from 172.35.206.48 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:27:40.741: ISAKMP:(14409):deleting node 1404442059 error FALSE reason "QM done (await)"

Sep 13 04:27:40.741: ISAKMP:(14409):Node 1404442059, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:27:40.741: ISAKMP:(14409):Old State = IKE_QM_R_QM2  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 04:27:42.145: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...

Sep 13 04:27:42.145: ISAKMP:(0):peer does not do paranoid keepalives.


Sep 13 04:27:42.145: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (R) MM_SA_SETUP (peer 172.35.200.87)

Sep 13 04:27:42.145: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (R) MM_SA_SETUP (peer 172.35.200.87)

Sep 13 04:27:42.145: ISAKMP: Unlocking peer struct 0x134DB41C for isadb_mark_sa_deleted(), count 0

Sep 13 04:27:42.145: ISAKMP: Deleting peer node by peer_reap for 172.35.200.87: 134DB41C

Sep 13 04:27:42.145: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL

Sep 13 04:27:42.145: ISAKMP:(0):Old State = IKE_R_MM2  New State = IKE_DEST_SA


Sep 13 04:27:42.569: ISAKMP:(0):purging SA., sa=411BD47C, delme=411BD47C

Sep 13 04:27:42.737: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (N) NEW SA

Sep 13 04:27:42.737: ISAKMP: Created a peer struct for 172.35.200.87, peer port 500

Sep 13 04:27:42.737: ISAKMP: New peer created peer = 0x411472DC peer_handle = 0x800104D2

Sep 13 04:27:42.737: ISAKMP: Locking peer struct 0x411472DC, refcount 1 for crypto_isakmp_process_block

Sep 13 04:27:42.737: ISAKMP: local port 500, remote port 500

Sep 13 04:27:42.737: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

Sep 13 04:27:42.737: ISAKMP:(0):Old State = IKE_R_MM1  New State = IKE_R_MM2


Sep 13 04:27:44.397: ISAKMP:(14389):purging node -595111776

Sep 13 04:27:48.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...

Sep 13 04:27:48.233: ISAKMP (0): incrementing error counter on sa, attempt 1 of 5: retransmit phase 1

Sep 13 04:27:48.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE

Sep 13 04:27:48.233: ISAKMP:(0): sending packet to 172.35.194.150 my_port 500 peer_port 500 (I) MM_NO_STATE

Sep 13 04:27:48.233: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:27:49.105: ISAKMP (14391): received packet from 172.35.194.155 dport 500 sport 500 Global (I) QM_IDLE     

Sep 13 04:27:49.105: ISAKMP: set new node 1659709134 to QM_IDLE     

Sep 13 04:27:49.105: ISAKMP:(14391): processing HASH payload. message ID = 1659709134

Sep 13 04:27:49.105: ISAKMP:(14391): processing SA payload. message ID = 1659709134

Sep 13 04:27:49.105: ISAKMP:(14391):Checking IPSec proposal 1

Sep 13 04:27:49.105: ISAKMP: transform 1, ESP_3DES

Sep 13 04:27:49.105: ISAKMP:   attributes in transform:

Sep 13 04:27:49.105: ISAKMP:      encaps is 1 (Tunnel)

Sep 13 04:27:49.105: ISAKMP:      SA life type in seconds

Sep 13 04:27:49.105: ISAKMP:      SA life duration (basic) of 300

Sep 13 04:27:49.105: ISAKMP:      SA life type in kilobytes

Sep 13 04:27:49.105: ISAKMP:      SA life duration (VPI) of  0x0 0x46 0x50 0x0

Sep 13 04:27:49.105: ISAKMP:      authenticator is HMAC-MD5

Sep 13 04:27:49.105: ISAKMP:      group is 2

Sep 13 04:27:49.105: ISAKMP:(14391):atts are acceptable.

Sep 13 04:27:49.105: ISAKMP:(14391): processing NONCE payload. message ID = 1659709134

Sep 13 04:27:49.105: ISAKMP:(14391): processing KE payload. message ID = 1659709134

Sep 13 04:27:49.109: ISAKMP:(14391): processing ID payload. message ID = 1659709134

Sep 13 04:27:49.109: ISAKMP:(14391): processing ID payload. message ID = 1659709134

Sep 13 04:27:49.109: ISAKMP:(14391):QM Responder gets spi

Sep 13 04:27:49.109: ISAKMP:(14391):Node 1659709134, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:27:49.109: ISAKMP:(14391):Old State = IKE_QM_READY  New State = IKE_QM_SPI_STARVE

Sep 13 04:27:49.109: ISAKMP:(14391): Creating IPSec SAs

Sep 13 04:27:49.109:         inbound SA from 172.35.194.155 to 172.34.47.57 (f/i)  0/ 0

        (proxy 172.20.15.0 to 0.0.0.0)

Sep 13 04:27:49.109:         has spi 0x1EA3FBBE and conn_id 0

Sep 13 04:27:49.109:         lifetime of 300 seconds

Sep 13 04:27:49.109:         lifetime of 4608000 kilobytes

Sep 13 04:27:49.109:         outbound SA from 172.34.47.57 to 172.35.194.155 (f/i) 0/0

        (proxy 0.0.0.0 to 172.20.15.0)

Sep 13 04:27:49.109:         has spi  0xFD092D0D and conn_id 0

Sep 13 04:27:49.109:         lifetime of 300 seconds

Sep 13 04:27:49.109:         lifetime of 4608000 kilobytes

Sep 13 04:27:49.109: ISAKMP:(14391): sending packet to 172.35.194.155 my_port 500 peer_port 500 (I) QM_IDLE     

Sep 13 04:27:49.109: ISAKMP:(14391):Sending an IKE IPv4 Packet.

Sep 13 04:27:49.109: ISAKMP:(14391):Node 1659709134, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI

Sep 13 04:27:49.109: ISAKMP:(14391):Old State = IKE_QM_SPI_STARVE  New State = IKE_QM_R_QM2

Sep 13 04:27:49.201: ISAKMP (14391): received packet from 172.35.194.155 dport 500 sport 500 Global (I) QM_IDLE     

Sep 13 04:27:49.201: ISAKMP:(14391):deleting node 1659709134 error FALSE reason "QM done (await)"

Sep 13 04:27:49.201: ISAKMP:(14391):Node 1659709134, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:27:49.201: ISAKMP:(14391):Old State = IKE_QM_R_QM2  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 04:27:49.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...

Sep 13 04:27:49.349: ISAKMP (0): incrementing error counter on sa, attempt 2 of 5: retransmit phase 1

Sep 13 04:27:49.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE

Sep 13 04:27:49.349: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE

Sep 13 04:27:49.349: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:27:52.733: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP

Sep 13 04:27:52.733: ISAKMP:(0): phase 1 packet is a duplicate of a previous packet.

Sep 13 04:27:52.733: ISAKMP:(0): retransmitting due to retransmit phase 1

Sep 13 04:27:53.233: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...

Sep 13 04:27:53.233: ISAKMP (0): incrementing error counter on sa, attempt 1 of 5: retransmit phase 1

Sep 13 04:27:53.233: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP

Sep 13 04:27:53.233: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP

Sep 13 04:27:53.233: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:27:55.933: ISAKMP (14390): received packet from 172.35.200.88 dport 500 sport 500 Global (I) QM_IDLE     

Sep 13 04:27:55.933: ISAKMP: set new node 8155520 to QM_IDLE     

Sep 13 04:27:55.933: ISAKMP:(14390): processing HASH payload. message ID = 8155520

Sep 13 04:27:55.933: ISAKMP:received payload type 18

Sep 13 04:27:55.933: ISAKMP:(14390):Processing delete with reason payload

Sep 13 04:27:55.933: ISAKMP:(14390):delete doi = 1

Sep 13 04:27:55.933: ISAKMP:(14390):delete protocol id = 1

Sep 13 04:27:55.933: ISAKMP:(14390):delete spi_size =  16

Sep 13 04:27:55.933: ISAKMP:(14390):delete num spis = 1

Sep 13 04:27:55.933: ISAKMP:(14390):delete_reason = 10

Sep 13 04:27:55.933: ISAKMP:(14390): processing DELETE_WITH_REASON payload, message ID = 8155520, reason: Unknown delete reason!

Sep 13 04:27:55.933: ISAKMP:(14390):peer does not do paranoid keepalives.


Sep 13 04:27:55.933: ISAKMP:(14390):deleting SA reason "IKE SA Lifetime Exceeded" state (I) QM_IDLE       (peer 172.35.200.88)

Sep 13 04:27:55.933: ISAKMP:(14390):deleting node 8155520 error FALSE reason "Informational (in) state 1"

Sep 13 04:27:55.933: ISAKMP: set new node -797376214 to QM_IDLE     

Sep 13 04:27:55.933: ISAKMP:(14390): sending packet to 172.35.200.88 my_port 500 peer_port 500 (I) QM_IDLE     

Sep 13 04:27:55.933: ISAKMP:(14390):Sending an IKE IPv4 Packet.

Sep 13 04:27:55.933: ISAKMP:(14390):purging node -797376214

Sep 13 04:27:55.933: ISAKMP:(14390):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL

Sep 13 04:27:55.933: ISAKMP:(14390):Old State = IKE_P1_COMPLETE  New State = IKE_DEST_SA


Sep 13 04:27:55.933: ISAKMP:(14390):deleting SA reason "IKE SA Lifetime Exceeded" state (I) QM_IDLE       (peer 172.35.200.88)

Sep 13 04:27:55.933: ISAKMP: Unlocking peer struct 0x40176A60 for isadb_mark_sa_deleted(), count 0

Sep 13 04:27:55.933: ISAKMP:(14390):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:27:55.933: ISAKMP:(14390):Old State = IKE_DEST_SA  New State = IKE_DEST_SA


Sep 13 04:27:56.689: ISAKMP (14407): received packet from 172.35.194.145 dport 500 sport 500 Global (I) QM_IDLE     

Sep 13 04:27:56.689: ISAKMP: set new node -2143616241 to QM_IDLE     

Sep 13 04:27:56.689: ISAKMP:(14407): processing HASH payload. message ID = 2151351055

Sep 13 04:27:56.689: ISAKMP:(14407): processing DELETE payload. message ID = 2151351055

Sep 13 04:27:56.689: ISAKMP:(14407):peer does not do paranoid keepalives.


Sep 13 04:27:56.689: ISAKMP:(14407):deleting node -2143616241 error FALSE reason "Informational (in) state 1"

Sep 13 04:27:56.921: ISAKMP: ignoring request to send delete notify (no ISAKMP sa) src 172.34.47.57 dst 172.35.200.88 for SPI 0x51E70BCC

Sep 13 04:27:58.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...

Sep 13 04:27:58.233: ISAKMP (0): incrementing error counter on sa, attempt 2 of 5: retransmit phase 1

Sep 13 04:27:58.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE

Sep 13 04:27:58.233: ISAKMP:(0): sending packet to 172.35.194.150 my_port 500 peer_port 500 (I) MM_NO_STATE

Sep 13 04:27:58.233: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:27:58.313: ISAKMP:(14388):purging SA., sa=411CFB24, delme=411CFB24

Sep 13 04:27:59.345: ISAKMP: set new node 0 to QM_IDLE     

Sep 13 04:27:59.345: ISAKMP:(0):SA is still budding. Attached new ipsec request to it. (local 172.34.47.57, remote 172.35.200.87)

Sep 13 04:27:59.345: ISAKMP: Error while processing SA request: Failed to initialize SA

Sep 13 04:27:59.345: ISAKMP: Error while processing KMI message 0, error 2.

Sep 13 04:27:59.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...

Sep 13 04:27:59.349: ISAKMP (0): incrementing error counter on sa, attempt 3 of 5: retransmit phase 1

Sep 13 04:27:59.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE

Sep 13 04:27:59.349: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE

Sep 13 04:27:59.349: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:28:02.733: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP

Sep 13 04:28:02.733: ISAKMP:(0): phase 1 packet is a duplicate of a previous packet.

Sep 13 04:28:02.733: ISAKMP:(0): retransmitting due to retransmit phase 1

Sep 13 04:28:03.233: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...

Sep 13 04:28:03.233: ISAKMP (0): incrementing error counter on sa, attempt 2 of 5: retransmit phase 1

Sep 13 04:28:03.233: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP

Sep 13 04:28:03.233: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP

Sep 13 04:28:03.233: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:28:07.489: ISAKMP:(14390):purging node -1766959579

Sep 13 04:28:08.233: ISAKMP: set new node 0 to QM_IDLE     

Sep 13 04:28:08.233: ISAKMP:(0):SA is still budding. Attached new ipsec request to it. (local 172.34.47.57, remote 172.35.194.150)

Sep 13 04:28:08.233: ISAKMP: Error while processing SA request: Failed to initialize SA

Sep 13 04:28:08.233: ISAKMP: Error while processing KMI message 0, error 2.

Sep 13 04:28:08.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...

Sep 13 04:28:08.233: ISAKMP (0): incrementing error counter on sa, attempt 3 of 5: retransmit phase 1

Sep 13 04:28:08.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE

Sep 13 04:28:08.233: ISAKMP:(0): sending packet to 172.35.194.150 my_port 500 peer_port 500 (I) MM_NO_STATE

Sep 13 04:28:08.233: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:28:09.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...

Sep 13 04:28:09.349: ISAKMP (0): incrementing error counter on sa, attempt 4 of 5: retransmit phase 1

Sep 13 04:28:09.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE

Sep 13 04:28:09.349: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE

Sep 13 04:28:09.349: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:28:11.669: ISAKMP:(14407):purging node 737401177

Sep 13 04:28:12.565: ISAKMP (0): received packet from 172.35.200.91 dport 500 sport 500 Global (N) NEW SA

Sep 13 04:28:12.565: ISAKMP: Created a peer struct for 172.35.200.91, peer port 500

Sep 13 04:28:12.565: ISAKMP: New peer created peer = 0x134E3340 peer_handle = 0x8000F1E6

Sep 13 04:28:12.565: ISAKMP: Locking peer struct 0x134E3340, refcount 1 for crypto_isakmp_process_block

Sep 13 04:28:12.565: ISAKMP: local port 500, remote port 500

Sep 13 04:28:12.565: ISAKMP:(0):insert sa successfully sa = 411BD47C

Sep 13 04:28:12.565: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:28:12.565: ISAKMP:(0):Old State = IKE_READY  New State = IKE_R_MM1


Sep 13 04:28:12.565: ISAKMP:(0): processing SA payload. message ID = 0

Sep 13 04:28:12.565: ISAKMP:(0): processing vendor id payload

Sep 13 04:28:12.565: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch

Sep 13 04:28:12.565: ISAKMP (0): vendor ID is NAT-T RFC 3947

Sep 13 04:28:12.565: ISAKMP:(0): processing vendor id payload

Sep 13 04:28:12.565: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch

Sep 13 04:28:12.565: ISAKMP (0): vendor ID is NAT-T v7

Sep 13 04:28:12.565: ISAKMP:(0): processing vendor id payload

Sep 13 04:28:12.565: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch

Sep 13 04:28:12.565: ISAKMP:(0): vendor ID is NAT-T v3

Sep 13 04:28:12.565: ISAKMP:(0): processing vendor id payload

Sep 13 04:28:12.565: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch

Sep 13 04:28:12.565: ISAKMP:(0): vendor ID is NAT-T v2

Sep 13 04:28:12.565: ISAKMP:(0):No pre-shared key with 172.35.200.91!

Sep 13 04:28:12.565: ISAKMP : Scanning profiles for xauth ...

Sep 13 04:28:12.565: ISAKMP:(0):Checking ISAKMP transform 1 against priority 30 policy

Sep 13 04:28:12.565: ISAKMP:      encryption 3DES-CBC

Sep 13 04:28:12.565: ISAKMP:      hash MD5

Sep 13 04:28:12.565: ISAKMP:      default group 2

Sep 13 04:28:12.565: ISAKMP:      auth pre-share

Sep 13 04:28:12.565: ISAKMP:      life type in seconds

Sep 13 04:28:12.565: ISAKMP:      life duration (basic) of 300

Sep 13 04:28:12.565: ISAKMP:(0):Preshared authentication offered but does not match policy!

Sep 13 04:28:12.565: ISAKMP:(0):atts are not acceptable. Next payload is 0

Sep 13 04:28:12.565: ISAKMP:(0):no offers accepted!

Sep 13 04:28:12.565: ISAKMP:(0): phase 1 SA policy not acceptable! (local 172.34.47.57 remote 172.35.200.91)

Sep 13 04:28:12.565: ISAKMP (0): incrementing error counter on sa, attempt 1 of 5: construct_fail_ag_init

Sep 13 04:28:12.565: ISAKMP:(0): Failed to construct AG informational message.

Sep 13 04:28:12.565: ISAKMP:(0): sending packet to 172.35.200.91 my_port 500 peer_port 500 (R) MM_NO_STATE

Sep 13 04:28:12.565: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:28:12.565: ISAKMP:(0):peer does not do paranoid keepalives.


Sep 13 04:28:12.565: ISAKMP:(0):deleting SA reason "Phase1 SA policy proposal not accepted" state (R) MM_NO_STATE (peer 172.35.200.91)

Sep 13 04:28:12.565: ISAKMP:(0): processing vendor id payload

Sep 13 04:28:12.565: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch

Sep 13 04:28:12.565: ISAKMP (0): vendor ID is NAT-T RFC 3947

Sep 13 04:28:12.565: ISAKMP:(0): processing vendor id payload

Sep 13 04:28:12.565: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch

Sep 13 04:28:12.565: ISAKMP (0): vendor ID is NAT-T v7

Sep 13 04:28:12.565: ISAKMP:(0): processing vendor id payload

Sep 13 04:28:12.565: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch

Sep 13 04:28:12.565: ISAKMP:(0): vendor ID is NAT-T v3

Sep 13 04:28:12.565: ISAKMP:(0): processing vendor id payload

Sep 13 04:28:12.565: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch

Sep 13 04:28:12.565: ISAKMP:(0): vendor ID is NAT-T v2

Sep 13 04:28:12.565: ISAKMP (0): FSM action returned error: 2

Sep 13 04:28:12.565: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Sep 13 04:28:12.565: ISAKMP:(0):Old State = IKE_R_MM1  New State = IKE_R_MM1


Sep 13 04:28:12.565: ISAKMP:(0):deleting SA reason "Phase1 SA policy proposal not accepted" state (R) MM_NO_STATE (peer 172.35.200.91)

Sep 13 04:28:12.565: ISAKMP: Unlocking peer struct 0x134E3340 for isadb_mark_sa_deleted(), count 0

Sep 13 04:28:12.565: ISAKMP: Deleting peer node by peer_reap for 172.35.200.91: 134E3340

Sep 13 04:28:12.565: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL

Sep 13 04:28:12.565: ISAKMP:(0):Old State = IKE_R_MM1  New State = IKE_DEST_SA


Sep 13 04:28:12.733: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP

Sep 13 04:28:12.733: ISAKMP:(0): phase 1 packet is a duplicate of a previous packet.

Sep 13 04:28:12.733: ISAKMP:(0): retransmitting due to retransmit phase 1

Sep 13 04:28:12.933: ISAKMP (14392): received packet from 172.35.200.97 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:28:12.933: ISAKMP: set new node 2101687451 to QM_IDLE     

Sep 13 04:28:12.933: ISAKMP:(14392): processing HASH payload. message ID = 2101687451

Sep 13 04:28:12.933: ISAKMP:(14392): processing SA payload. message ID = 2101687451

Sep 13 04:28:12.933: ISAKMP:(14392):Checking IPSec proposal 1

Sep 13 04:28:12.933: ISAKMP: transform 1, ESP_3DES

Sep 13 04:28:12.933: ISAKMP:   attributes in transform:

Sep 13 04:28:12.933: ISAKMP:      encaps is 1 (Tunnel)

Sep 13 04:28:12.933: ISAKMP:      SA life type in seconds

Sep 13 04:28:12.933: ISAKMP:      SA life duration (basic) of 300

Sep 13 04:28:12.933: ISAKMP:      SA life type in kilobytes

Sep 13 04:28:12.933: ISAKMP:      SA life duration (VPI) of  0x0 0x46 0x50 0x0

Sep 13 04:28:12.933: ISAKMP:      authenticator is HMAC-MD5

Sep 13 04:28:12.933: ISAKMP:      group is 2

Sep 13 04:28:12.933: ISAKMP:(14392):atts are acceptable.

Sep 13 04:28:12.933: ISAKMP:(14392): processing NONCE payload. message ID = 2101687451

Sep 13 04:28:12.933: ISAKMP:(14392): processing KE payload. message ID = 2101687451

Sep 13 04:28:12.937: ISAKMP:(14392): processing ID payload. message ID = 2101687451

Sep 13 04:28:12.937: ISAKMP:(14392): processing ID payload. message ID = 2101687451

Sep 13 04:28:12.937: ISAKMP:(14392):QM Responder gets spi

Sep 13 04:28:12.937: ISAKMP:(14392):Node 2101687451, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:28:12.937: ISAKMP:(14392):Old State = IKE_QM_READY  New State = IKE_QM_SPI_STARVE

Sep 13 04:28:12.937: ISAKMP:(14392): Creating IPSec SAs

Sep 13 04:28:12.937:         inbound SA from 172.35.200.97 to 172.34.47.57 (f/i)  0/ 0

        (proxy 172.16.51.0 to 0.0.0.0)

Sep 13 04:28:12.937:         has spi 0x62BB1BC1 and conn_id 0

Sep 13 04:28:12.937:         lifetime of 300 seconds

Sep 13 04:28:12.937:         lifetime of 4608000 kilobytes

Sep 13 04:28:12.937:         outbound SA from 172.34.47.57 to 172.35.200.97 (f/i) 0/0

        (proxy 0.0.0.0 to 172.16.51.0)

Sep 13 04:28:12.937:         has spi  0xC7740464 and conn_id 0

Sep 13 04:28:12.937:         lifetime of 300 seconds

Sep 13 04:28:12.937:         lifetime of 4608000 kilobytes

Sep 13 04:28:12.937: ISAKMP:(14392): sending packet to 172.35.200.97 my_port 500 peer_port 500 (R) QM_IDLE     

Sep 13 04:28:12.937: ISAKMP:(14392):Sending an IKE IPv4 Packet.

Sep 13 04:28:12.937: ISAKMP:(14392):Node 2101687451, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI

Sep 13 04:28:12.941: ISAKMP:(14392):Old State = IKE_QM_SPI_STARVE  New State = IKE_QM_R_QM2

Sep 13 04:28:13.017: ISAKMP (14392): received packet from 172.35.200.97 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:28:13.017: ISAKMP:(14392):deleting node 2101687451 error FALSE reason "QM done (await)"

Sep 13 04:28:13.017: ISAKMP:(14392):Node 2101687451, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:28:13.017: ISAKMP:(14392):Old State = IKE_QM_R_QM2  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 04:28:13.233: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...

Sep 13 04:28:13.233: ISAKMP (0): incrementing error counter on sa, attempt 3 of 5: retransmit phase 1

Sep 13 04:28:13.233: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP

Sep 13 04:28:13.233: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP

Sep 13 04:28:13.233: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:28:14.841: ISAKMP:(14406):purging node -1746108638

Sep 13 09:58:15: %CRYPTO-4-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet. (ip) vrf/dest_addr= /172.16.102.25, src_addr= 18:17.833: ISAKMP:(14393):atts are acceptable.

Sep 13 04:28:17.833: ISAKMP:(14393): processing NONCE payload. message ID = 1434815361

Sep 13 04:28:17.833: ISAKMP:(14393): processing KE payload. message ID = 1434815361

Sep 13 04:28:17.837: ISAKMP:(14393): processing ID payload. message ID = 1434815361

Sep 13 04:28:17.837: ISAKMP:(14393): processing ID payload. message ID = 1434815361

Sep 13 04:28:17.837: ISAKMP:(14393):QM Responder gets spi

Sep 13 04:28:17.837: ISAKMP:(14393):Node 1434815361, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:28:17.837: ISAKMP:(14393):Old State = IKE_QM_READY  New State = IKE_QM_SPI_STARVE

Sep 13 04:28:17.837: ISAKMP:(14393): Creating IPSec SAs

Sep 13 04:28:17.837:         inbound SA from 172.34.48.125 to 172.34.47.57 (f/i)  0/ 0

        (proxy 172.16.25.0 to 0.0.0.0)

Sep 13 04:28:17.837:         has spi 0x6822241D and conn_id 0

Sep 13 04:28:17.837:         lifetime of 300 seconds

Sep 13 04:28:17.837:         lifetime of 4608000 kilobytes

Sep 13 04:28:17.837:         outbound SA from 172.34.47.57 to 172.34.48.125 (f/i) 0/0

        (proxy 0.0.0.0 to 172.16.25.0)

Sep 13 04:28:17.837:         has spi  0x6B854CE0 and conn_id 0

Sep 13 04:28:17.837:         lifetime of 300 seconds

Sep 13 04:28:17.837:         lifetime of 4608000 kilobytes

Sep 13 04:28:17.837: ISAKMP:(14393): sending packet to 172.34.48.125 my_port 500 peer_port 500 (R) QM_IDLE     

Sep 13 04:28:17.837: ISAKMP:(14393):Sending an IKE IPv4 Packet.

Sep 13 04:28:17.837: ISAKMP:(14393):Node 1434815361, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI

Sep 13 04:28:17.837: ISAKMP:(14393):Old State = IKE_QM_SPI_STARVE  New State = IKE_QM_R_QM2

Sep 13 04:28:17.925: ISAKMP (14393): received packet from 172.34.48.125 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:28:17.925: ISAKMP:(14393):deleting node 1434815361 error FALSE reason "QM done (await)"

Sep 13 04:28:17.925: ISAKMP:(14393):Node 1434815361, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:28:17.925: ISAKMP:(14393):Old State = IKE_QM_R_QM2  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 04:28:18.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...

Sep 13 04:28:18.233: ISAKMP (0): incrementing error counter on sa, attempt 4 of 5: retransmit phase 1

Sep 13 04:28:18.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE

Sep 13 04:28:18.233: ISAKMP:(0): sending packet to 172.35.194.150 my_port 500 peer_port 500 (I) MM_NO_STATE

Sep 13 04:28:18.233: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:28:18.845: ISAKMP:(0):purging node 1013205142

Sep 13 04:28:18.845: ISAKMP:(0):purging node -1738356762

Sep 13 04:28:19.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...

Sep 13 04:28:19.349: ISAKMP (0): incrementing error counter on sa, attempt 5 of 5: retransmit phase 1

Sep 13 04:28:19.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE

Sep 13 04:28:19.349: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE

Sep 13 04:28:19.349: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:28:21.845: ISAKMP (14408): received packet from 172.34.47.146 dport 500 sport 500 Global (I) QM_IDLE     

Sep 13 04:28:21.845: ISAKMP: set new node -1862940807 to QM_IDLE     

Sep 13 04:28:21.845: ISAKMP:(14408): processing HASH payload. message ID = 2432026489

Sep 13 04:28:21.849: ISAKMP:(14408): processing DELETE payload. message ID = 2432026489

Sep 13 04:28:21.849: ISAKMP:(14408):peer does not do paranoid keepalives.


Sep 13 04:28:21.849: ISAKMP:(14408):deleting node -1862940807 error FALSE reason "Informational (in) state 1"

Sep 13 04:28:22.565: ISAKMP (0): received packet from 172.35.200.91 dport 500 sport 500 Global (R) MM_NO_STATE

Sep 13 04:28:22.733: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP

Sep 13 04:28:22.733: ISAKMP:(0): phase 1 packet is a duplicate of a previous packet.

Sep 13 04:28:22.733: ISAKMP:(0): retransmitting due to retransmit phase 1

Sep 13 04:28:22.953: ISAKMP:(14389):purging node 299600500

Sep 13 04:28:23.233: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...

Sep 13 04:28:23.233: ISAKMP (0): incrementing error counter on sa, attempt 4 of 5: retransmit phase 1

Sep 13 04:28:23.233: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP

Sep 13 04:28:23.233: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP

Sep 13 04:28:23.233: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:28:23.241: ISAKMP: set new node 1045526343 to QM_IDLE     

Sep 13 04:28:23.241: ISAKMP:(14409): sending packet to 172.35.206.48 my_port 500 peer_port 500 (R) QM_IDLE     

Sep 13 04:28:23.241: ISAKMP:(14409):Sending an IKE IPv4 Packet.

Sep 13 04:28:23.241: ISAKMP:(14409):purging node 1045526343

Sep 13 04:28:23.241: ISAKMP:(14409):Input = IKE_MESG_FROM_IPSEC, IKE_PHASE2_DEL

Sep 13 04:28:23.241: ISAKMP:(14409):Old State = IKE_P1_COMPLETE  New State = IKE_P1_COMPLETE


Sep 13 04:28:27.125: ISAKMP (14394): received packet from 172.35.194.115 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:28:27.125: ISAKMP: set new node -318471219 to QM_IDLE     

Sep 13 04:28:27.125: ISAKMP:(14394): processing HASH payload. message ID = 3976496077

Sep 13 04:28:27.125: ISAKMP:(14394): processing SA payload. message ID = 3976496077

Sep 13 04:28:27.125: ISAKMP:(14394):Checking IPSec proposal 1

Sep 13 04:28:27.125: ISAKMP: transform 1, ESP_3DES

Sep 13 04:28:27.125: ISAKMP:   attributes in transform:

Sep 13 04:28:27.125: ISAKMP:      encaps is 1 (Tunnel)

Sep 13 04:28:27.125: ISAKMP:      SA life type in seconds

Sep 13 04:28:27.125: ISAKMP:      SA life duration (basic) of 300

Sep 13 04:28:27.125: ISAKMP:      SA life type in kilobytes

Sep 13 04:28:27.125: ISAKMP:      SA life duration (VPI) of  0x0 0x46 0x50 0x0

Sep 13 04:28:27.125: ISAKMP:      authenticator is HMAC-MD5

Sep 13 04:28:27.125: ISAKMP:      group is 2

Sep 13 04:28:27.125: ISAKMP:(14394):atts are acceptable.

Sep 13 04:28:27.125: ISAKMP:(14394): processing NONCE payload. message ID = 3976496077

Sep 13 04:28:27.125: ISAKMP:(14394): processing KE payload. message ID = 3976496077

Sep 13 04:28:27.129: ISAKMP:(14394): processing ID payload. message ID = 3976496077

Sep 13 04:28:27.129: ISAKMP:(14394): processing ID payload. message ID = 3976496077

Sep 13 04:28:27.129: ISAKMP:(14394):QM Responder gets spi

Sep 13 04:28:27.129: ISAKMP:(14394):Node 3976496077, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:28:27.129: ISAKMP:(14394):Old State = IKE_QM_READY  New State = IKE_QM_SPI_STARVE

Sep 13 04:28:27.129: ISAKMP:(14394): Creating IPSec SAs

Sep 13 04:28:27.129:         inbound SA from 172.35.194.115 to 172.34.47.57 (f/i)  0/ 0

        (proxy 172.20.5.0 to 0.0.0.0)

Sep 13 04:28:27.129:         has spi 0x41FB5E5B and conn_id 0

Sep 13 04:28:27.129:         lifetime of 300 seconds

Sep 13 04:28:27.129:         lifetime of 4608000 kilobytes

Sep 13 04:28:27.129:         outbound SA from 172.34.47.57 to 172.35.194.115 (f/i) 0/0

        (proxy 0.0.0.0 to 172.20.5.0)

Sep 13 04:28:27.129:         has spi  0x4E194CEE and conn_id 0

Sep 13 04:28:27.129:         lifetime of 300 seconds

Sep 13 04:28:27.129:         lifetime of 4608000 kilobytes

Sep 13 04:28:27.129: ISAKMP:(14394): sending packet to 172.35.194.115 my_port 500 peer_port 500 (R) QM_IDLE     

Sep 13 04:28:27.129: ISAKMP:(14394):Sending an IKE IPv4 Packet.

Sep 13 04:28:27.129: ISAKMP:(14394):Node 3976496077, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI

Sep 13 04:28:27.129: ISAKMP:(14394):Old State = IKE_QM_SPI_STARVE  New State = IKE_QM_R_QM2

Sep 13 04:28:27.197: ISAKMP (14394): received packet from 172.35.194.115 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:28:27.197: ISAKMP:(14394):deleting node -318471219 error FALSE reason "QM done (await)"

Sep 13 04:28:27.197: ISAKMP:(14394):Node 3976496077, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:28:27.197: ISAKMP:(14394):Old State = IKE_QM_R_QM2  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 04:28:28.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...

Sep 13 04:28:28.233: ISAKMP (0): incrementing error counter on sa, attempt 5 of 5: retransmit phase 1

Sep 13 04:28:28.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE

Sep 13 04:28:28.233: ISAKMP:(0): sending packet to 172.35.194.150 my_port 500 peer_port 500 (I) MM_NO_STATE

Sep 13 04:28:28.233: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:28:28.845: ISAKMP:(0):purging SA., sa=1F4A26C, delme=1F4A26C

Sep 13 04:28:29.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...

Sep 13 04:28:29.349: ISAKMP:(0):peer does not do paranoid keepalives.


Sep 13 04:28:29.349: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (I) MM_NO_STATE (peer 172.35.200.87)

Sep 13 04:28:29.349: ISAKMP:(0):deletitor

Sep 13 04:28:29.849: ISAKMP: local port 500, remote port 500

Sep 13 04:28:29.849: ISAKMP: set new node 0 to QM_IDLE     

Sep 13 04:28:29.849: ISAKMP: Find a dup sa in the avl tree during calling isadb_insert sa = 1FA864C

Sep 13 04:28:29.849: ISAKMP:(0):Can not start Aggressive mode, trying Main mode.

Sep 13 04:28:29.849: ISAKMP:(0):found peer pre-shared key matching 172.35.200.87

Sep 13 04:28:29.849: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID

Sep 13 04:28:29.849: ISAKMP:(0): constructed NAT-T vendor-07 ID

Sep 13 04:28:29.849: ISAKMP:(0): constructed NAT-T vendor-03 ID

Sep 13 04:28:29.849: ISAKMP:(0): constructed NAT-T vendor-02 ID

Sep 13 04:28:29.849: ISAKMP:(0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM

Sep 13 04:28:29.849: ISAKMP:(0):Old State = IKE_READY  New State = IKE_I_MM1


Sep 13 04:28:29.849: ISAKMP:(0): beginning Main Mode exchange

S8:30.229: ISAKMPeted(), count 0

AKMP:(0): sendin4:28:38.233: ISA 172.35.200.87)

Sep 13 04:28:43.233: ISAKMP: Unlocking peer struct 0x411472DC for isadb_mark_sa_deleted(), count 0

Sep 13 04:28:43.233: ISAKMP: Deleting peer node by peer_reap for 172.35.200.87: 411472DC

Sep 13 04:28:43.233: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL

Sep 13 04:28:43.233: ISAKMP:(0):Old State = IKE_R_MM2  New State = IKE_DEST_SA


Sep 13 04:28:45.933: ISAKMP:(14390):purging node 8155520

Sep 13 04:28:46.689: ISAKMP:(14407):purging node -2143616241

Sep 13 04:28:46.781: ISAKMP (14395): received packet from 172.35.200.100 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:28:46.781: ISAKMP: set new node -1638000181 to QM_IDLE     

Sep 13 04:28:46.781: ISAKMP:(14395): processing HASH payload. message ID = 2656967115

Sep 13 04:28:46.781: ISAKMP:(14395): processing SA payload. message ID = 2656967115

Sep 13 04:28:46.781: ISAKMP:(14395):Checking IPSec proposal 1

Sep 13 04:28:46.781: ISAKMP: transform 1, ESP_3DES

Sep 13 04:28:46.781: ISAKMP:   attr

**************ibutes in transform:

Sep 13 04:28:46.781: ISAKMP:      encaps is 1 (Tunnel)

Sep 13 04:28:46.781: ISAKMP:      SA life type in seconds

Sep 13 04:28:46.781: ISAKMP:      SA life duration (basic) of 300

Sep 13 04:28:46.781: ISAKMP:      SA life type in kilobytes

Sep 13 04:28:46.781: ISAKMP:      SA life duration (VPI) of  0x0 0x46 0x50 0x0

Sep 13 04:28:46.781: ISAKMP:      authenticator is HMAC-MD5

Sep 13 04:28:46.781: ISAKMP:      group is 2

Sep 13 04:28:46.781: ISAKMP:(14395):atts are acceptable.

Sep 13 04:28:46.781: ISAKMP:(14395): processing NONCE payload. message ID = 2656967115

Sep 13 04:28:46.781: ISAKMP:(14395): processing KE payload. message ID = 2656967115

Sep 13 04:28:46.785: ISAKMP:(14395): processing ID payload. message ID = 2656967115

Sep 13 04:28:46.785: ISAKMP:(14395): processing ID payload. message ID = 2656967115

Sep 13 04:28:46.785: ISAKMP:(14395):QM Responder gets spi

Sep 13 04:28:46.785: ISAKMP:(14395):Node 2656967115, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:28:46.785: ISAKMP:(14395):Old State = IKE_QM_READY  New State = IKE_QM_SPI_STARVE

Sep 13 04:28:46.785: ISAKMP:(14395): Creating IPSec SAs

Sep 13 04:28:46.785:         inbound SA from 172.35.200.100 to 172.34.47.57 (f/i)  0/ 0

        (proxy 172.17.1.0 to 0.0.0.0)

Sep 13 04:28:46.785:         has spi 0xE85F4668 and conn_id 0

Sep 13 04:28:46.785:         lifetime of 300 seconds

Sep 13 04:28:46.785:         lifetime of 4608000 kilobytes

Sep 13 04:28:46.785:         outbound SA from 172.34.47.57 to 172.35.200.100 (f/i) 0/0

        (proxy 0.0.0.0 to 172.17.1.0)

Sep 13 04:28:46.785:         has spi  0x806D78EA and conn_id 0

Sep 13 04:28:46.785:         lifetime of 300 seconds

Sep 13 04:28:46.785:         lifetime of 4608000 kilobytes

Sep 13 04:28:46.785: ISAKMP:(14395): sending packet to 172.35.200.100 my_port 500 peer_port 500 (R) QM_IDLE     

Sep 13 04:28:46.785: ISAKMP:(14395):Sending an IKE IPv4 Packet.

Sep 13 04:28:46.785: ISAKMP:(14395):Node 2656967115, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI

Sep 13 04:28:46.785: ISAKMP:(14395):Old State = IKE_QM_SPI_STARVE  New State = IKE_QM_R_QM2

Sep 13 04:28:46.857: ISAKMP (14395): received packet from 172.35.200.100 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:28:46.857: ISAKMP:(14395):deleting node -1638000181 error FALSE reason "QM done (await)"

Sep 13 04:28:46.857: ISAKMP:(14395):Node 2656967115, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:28:46.857: ISAKMP:(14395):Old State = IKE_QM_R_QM2  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 04:28:49.509: ISAKMP (14396): received packet from 172.35.222.236 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:28:49.509: ISAKMP: set new node 732513048 to QM_IDLE     

Sep 13 04:28:49.509: ISAKMP:(14396): processing HASH payload. message ID = 732513048

Sep 13 04:28:49.509: ISAKMP:(14396): processing SA payload. message ID = 732513048

Sep 13 04:28:49.509: ISAKMP:(14396):Checking IPSec proposal 1

Sep 13 04:28:49.509: ISAKMP: transform 1, ESP_3DES

Sep 13 04:28:49.509: ISAKMP:   attributes in transform:

Sep 13 04:28:49.509: ISAKMP:      encaps is 1 (Tunnel)

Sep 13 04:28:49.509: ISAKMP:      SA life type in seconds

Sep 13 04:28:49.509: ISAKMP:      SA life duration (basic) of 300

Sep 13 04:28:49.509: ISAKMP:      SA life type in kilobytes

Sep 13 04:28:49.509: ISAKMP:      SA life duration (VPI) of  0x0 0x46 0x50 0x0

Sep 13 04:28:49.509: ISAKMP:      authenticator is HMAC-MD5

Sep 13 04:28:49.509: ISAKMP:      group is 2

Sep 13 04:28:49.509: ISAKMP:(14396):atts are acceptable.

Sep 13 04:28:49.513: ISAKMP:(14396): processing NONCE payload. message ID = 732513048

Sep 13 04:28:49.513: ISAKMP:(14396): processing KE payload. message ID = 732513048

Sep 13 04:28:49.513: ISAKMP:(14396): processing ID payload. message ID = 732513048

Sep 13 04:28:49.513: ISAKMP:(14396): processing ID payload. message ID = 732513048

Sep 13 04:28:49.513: ISAKMP:(14396):QM Responder gets spi

Sep 13 04:28:49.513: ISAKMP:(14396):Node 732513048, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:28:49.513: ISAKMP:(14396):Old State = IKE_QM_READY  New State = IKE_QM_SPI_STARVE

Sep 13 04:28:49.513: ISAKMP:(14396): Creating IPSec SAs

Sep 13 04:28:49.513:         inbound SA from 172.35.222.236 to 172.34.47.57 (f/i)  0/ 0

        (proxy 172.18.1.0 to 0.0.0.0)

Sep 13 04:28:49.513:         has spi 0x18271E39 and conn_id 0

Sep 13 04:28:49.513:         lifetime of 300 seconds

Sep 13 04:28:49.513:         lifetime of 4608000 kilobytes

Sep 13 04:28:49.513:         outbound SA from 172.34.47.57 to 172.35.222.236 (f/i) 0/0

        (proxy 0.0.0.0 to 172.18.1.0)

Sep 13 04:28:49.513:         has spi  0x60244544 and conn_id 0

Sep 13 04:28:49.513:         lifetime of 300 seconds

Sep 13 04:28:49.513:         lifetime of 4608000 kilobytes

Sep 13 04:28:49.513: ISAKMP:(14396): sending packet to 172.35.222.236 my_port 500 peer_port 500 (R) QM_IDLE     

Sep 13 04:28:49.513: ISAKMP:(14396):Sending an IKE IPv4 Packet.

Sep 13 04:28:49.513: ISAKMP:(14396):Node 732513048, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI

Sep 13 04:28:49.513: ISAKMP:(14396):Old State = IKE_QM_SPI_STARVE  New State = IKE_QM_R_QM2

Sep 13 04:28:49.637: ISAKMP (14396): received packet from 172.35.222.236 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:28:49.637: ISAKMP:(14396):deleting node 732513048 error FALSE reason "QM done (await)"

Sep 13 04:28:49.637: ISAKMP:(14396):Node 732513048, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:28:49.637: ISAKMP:(14396):Old State = IKE_QM_R_QM2  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 04:28:49.849: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...

Sep 13 04:28:49.849: ISAKMP (0): incrementing error counter on sa, attempt 2 of 5: retransmit phase 1

Sep 13 04:28:49.849: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE

Sep 13 04:28:49.849: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE

Sep 13 04:28:49.849: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:28:50.513: ISAKMP:(14392):peer does not do paranoid keepalives.


Sep 13 04:28:50.513: ISAKMP:(14392):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE       (peer 172.35.200.97)

Sep 13 04:28:50.513: ISAKMP: set new node -1275615692 to QM_IDLE     

Sep 13 04:28:50.513: ISAKMP:(14392): sending packet to 172.35.200.97 my_port 500 peer_port 500 (R) QM_IDLE     

Sep 13 04:28:50.513: ISAKMP:(14392):Sending an IKE IPv4 Packet.

Sep 13 04:28:50.513: ISAKMP:(14392):purging node -1275615692

Sep 13 04:28:50.513: ISAKMP:(14392):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL

Sep 13 04:28:50.513: ISAKMP:(14392):Old State = IKE_P1_COMPLETE  New State = IKE_DEST_SA


Sep 13 04:28:50.513: ISAKMP:(14392):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE       (peer 172.35.200.97)

Sep 13 04:28:50.513: ISAKMP: Unlocking peer struct 0x10AD358 for isadb_mark_sa_deleted(), count 0

Sep 13 04:28:50.513: ISAKMP:(14392):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:28:50.513: ISAKMP:(14392):Old State = IKE_DEST_SA  New State = IKE_DEST_SA


Sep 13 04:28:50.561: ISAKMP (14392): received packet from 172.35.200.97 dport 500 sport 500 Global (R) MM_NO_STATE

Sep 13 04:28:50.741: ISAKMP: ignoring request to send delete notify (no ISAKMP sa) src 172.34.47.57 dst 172.35.200.97 for SPI 0x2C9C73AF

Sep 13 04:28:51.545: ISAKMP:(14393):peer does not do paranoid keepalives.


Sep 13 04:28:51.545: ISAKMP:(14393):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE       (peer 172.34.48.125)

Sep 13 04:28:51.545: ISAKMP: set new node 1816352009 to QM_IDLE     

Sep 13 04:28:51.545: ISAKMP:(14393): sending packet to 172.34.48.125 my_port 500 peer_port 500 (R) QM_IDLE     

Sep 13 04:28:51.545: ISAKMP:(14393):Sending an IKE IPv4 Packet.

Sep 13 04:28:51.545: ISAKMP:(14393):purging node 1816352009

Sep 13 04:28:51.545: ISAKMP:(14393):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL

Sep 13 04:28:51.545: ISAKMP:(14393):Old State = IKE_P1_COMPLETE  New State = IKE_DEST_SA


Sep 13 04:28:51.545: ISAKMP:(14393):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE       (peer 172.34.48.125)

Sep 13 04:28:51.545: ISAKMP: Unlocking peer struct 0x4007DC90 for isadb_mark_sa_deleted(), count 0

Sep 13 04:28:51.545: ISAKMP:(14393):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:28:51.545: ISAKMP:(14393):Old State = IKE_DEST_SA  New State = IKE_DEST_SA


Sep 13 04:28:51.625: ISAKMP (14393): received packet from 172.34.48.125 dport 500 sport 500 Global (R) MM_NO_STATE

Sep 13 04:28:51.877: ISAKMP: ignoring request to send delete notify (no ISAKMP sa) src 172.34.47.57 dst 172.34.48.125 for SPI 0x7F351D2

Sep 13 04:28:52.269: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (N) NEW SA

Sep 13 04:28:52.269: ISAKMP: Created a peer struct for 172.35.200.87, peer port 500

Sep 13 04:28:52.269: ISAKMP: New peer created peer = 0x12370108 peer_handle = 0x8000F44B

Sep 13 04:28:52.269: ISAKMP: Locking peer struct 0x12370108, refcount 1 for crypto_isakmp_process_block

Sep 13 04:28:52.269: ISAKMP: local port 500, remote port 500

Sep 13 04:28:52.269: ISAKMP: Find a dup sa in the avl tree during calling isadb_insert sa = 1F4A26C

Sep 13 04:28:52.269: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:28:52.269: ISAKMP:(0):Old State = IKE_READY  New State = IKE_R_MM1


Sep 13 04:28:52.269: ISAKMP:(0): processing SA payload. message ID = 0

Sep 13 04:28:52.269: ISAKMP:(0): processing vendor id payload

Sep 13 04:28:52.269: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch

Sep 13 04:28:52.269: ISAKMP (0): vendor ID is NAT-T RFC 3947

Sep 13 04:28:52.269: ISAKMP:(0): processing vendor id payload

Sep 13 04:28:52.269: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch

Sep 13 04:28:52.269: ISAKMP (0): vendor ID is NAT-T v7

Sep 13 04:28:52.269: ISAKMP:(0): processing vendor id payload

Sep 13 04:28:52.269: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch

Sep 13 04:28:52.269: ISAKMP:(0): vendor ID is NAT-T v3

Sep 13 04:28:52.269: ISAKMP:(0): processing vendor id payload

Sep 13 04:28:52.269: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch

Sep 13 04:28:52.269: ISAKMP:(0): vendor ID is NAT-T v2

Sep 13 04:28:52.269: ISAKMP:(0):found peer pre-shared key matching 172.35.200.87

Sep 13 04:28:52.269: ISAKMP:(0): local preshared key found

Sep 13 04:28:52.269: ISAKMP : Scanning profiles for xauth ...

Sep 13 04:28:52.269: ISAKMP:(0):Checking ISAKMP transform 1 against priority 30 policy

Sep 13 04:28:52.269: ISAKMP:      encryption 3DES-CBC

Sep 13 04:28:52.269: ISAKMP:      hash MD5

Sep 13 04:28:52.269: ISAKMP:      default group 2

Sep 13 04:28:52.269: ISAKMP:      auth pre-share

Sep 13 04:28:52.269: ISAKMP:      life type in seconds

Sep 13 04:28:52.269: ISAKMP:      life duration (basic) of 300

Sep 13 04:28:52.269: ISAKMP:(0):atts are acceptable. Next payload is 0

Sep 13 04:28:52.269: ISAKMP:(0):Acceptable atts:actual life: 0

Sep 13 04:28:52.269: ISAKMP:(0):Acceptable atts:life: 0

Sep 13 04:28:52.269: ISAKMP:(0):Basic life_in_seconds:300

Sep 13 04:28:52.269: ISAKMP:(0):Returning Actual lifetime: 300

Sep 13 04:28:52.269: ISAKMP:(0)::Started lifetime timer: 300.


Sep 13 04:28:52.269: ISAKMP:(0): processing vendor id payload

Sep 13 04:28:52.269: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch

Sep 13 04:28:52.269: ISAKMP (0): vendor ID is NAT-T RFC 3947

Sep 13 04:28:52.269: ISAKMP:(0): processing vendor id payload

Sep 13 04:28:52.269: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch

Sep 13 04:28:52.269: ISAKMP (0): vendor ID is NAT-T v7

Sep 13 04:28:52.269: ISAKMP:(0): processing vendor id payload

Sep 13 04:28:52.269: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch

Sep 13 04:28:52.269: ISAKMP:(0): vendor ID is NAT-T v3

Sep 13 04:28:52.269: ISAKMP:(0): processing vendor id payload

Sep 13 04:28:52.269: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch

Sep 13 04:28:52.269: ISAKMP:(0): vendor ID is NAT-T v2

Sep 13 04:28:52.269: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Sep 13 04:28:52.269: ISAKMP:(0):Old State = IKE_R_MM1  New State = IKE_R_MM1


Sep 13 04:28:52.269: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID

Sep 13 04:28:52.269: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP

Sep 13 04:28:52.269: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:28:52.269: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

Sep 13 04:28:52.269: ISAKMP:(0):Old State = IKE_R_MM1  New State = IKE_R_MM2


Sep 13 04:28:55.933: ISAKMP:(14390):purging SA., sa=1FB648C, delme=1FB648C

Sep 13 04:28:59.849: ISAKMP: set new node 0 to QM_IDLE     

Sep 13 04:28:59.849: ISAKMP:(0):SA is still budding. Attached new ipsec request to it. (local 172.34.47.57, remote 172.35.200.87)

Sep 13 04:28:59.849: ISAKMP: Error while processing SA request: Failed to initialize SA

Sep 13 04:28:59.849: ISAKMP: Error while processing KMI message 0, error 2.

Sep 13 04:28:59.849: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...

Sep 13 04:28:59.849: ISAKMP (0): incrementing error counter on sa, attempt 3 of 5: retransmit phase 1

Sep 13 04:28:59.849: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE

Sep 13 04:28:59.849: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE

Sep 13 04:28:59.849: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:29:02.265: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP

Sep 13 04:29:02.265: ISAKMP:(0): phase 1 packet is a duplicate of a previous packet.

Sep 13 04:29:02.265: ISAKMP:(0): retransmitting due to retransmit phase 1

Sep 13 04:29:02.765: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...

Sep 13 04:29:02.765: ISAKMP (0): incrementing error counter on sa, attempt 1 of 5: retransmit phase 1

Sep 13 04:29:02.765: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP

Sep 13 04:29:02.765: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP

Sep 13 04:29:02.765: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:29:03.017: ISAKMP:(14392):purging node 2101687451

Sep 13 04:29:05.309: ISAKMP (14397): received packet from 172.35.194.219 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:29:05.309: ISAKMP: set new node 252378786 to QM_IDLE     

Sep 13 04:29:05.309: ISAKMP:(14397): processing HASH payload. message ID = 252378786

Sep 13 04:29:05.309: ISAKMP:(14397): processing SA payload. message ID = 252378786

Sep 13 04:29:05.309: ISAKMP:(14397):Checking IPSec proposal 1

Sep 13 04:29:05.309: ISAKMP: transform 1, ESP_3DES

Sep 13 04:29:05.309: ISAKMP:   attributes in transform:

Sep 13 04:29:05.309: ISAKMP:      encaps is 1 (Tunnel)

Sep 13 04:29:05.309: ISAKMP:      SA life type in seconds

Sep 13 04:29:05.309: ISAKMP:      SA life duration (basic) of 300

Sep 13 04:29:05.309: ISAKMP:      SA life type in kilobytes

Sep 13 04:29:05.309: ISAKMP:      SA life duration (VPI) of  0x0 0x46 0x50 0x0

Sep 13 04:29:05.309: ISAKMP:      authenticator is HMAC-MD5

Sep 13 04:29:05.309: ISAKMP:      group is 2

Sep 13 04:29:05.309: ISAKMP:(14397):atts are acceptable.

Sep 13 04:29:05.309: ISAKMP:(14397): processing NONCE payload. message ID = 252378786

Sep 13 04:29:05.309: ISAKMP:(14397): processing KE payload. message ID = 252378786

Sep 13 04:29:05.313: ISAKMP:(14397): processing ID payload. message ID = 252378786

Sep 13 04:29:05.313: ISAKMP:(14397): processing ID payload. message ID = 252378786

Sep 13 04:29:05.313: ISAKMP:(14397):QM Responder gets spi

Sep 13 04:29:05.313: ISAKMP:(14397):Node 252378786, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:29:05.313: ISAKMP:(14397):Old State = IKE_QM_READY  New State = IKE_QM_SPI_STARVE

Sep 13 04:29:05.313: ISAKMP:(14397): Creating IPSec SAs

Sep 13 04:29:05.313:         inbound SA from 172.35.194.219 to 172.34.47.57 (f/i)  0/ 0

        (proxy 172.21.1.0 to 0.0.0.0)

Sep 13 04:29:05.313:         has spi 0xF0B346BA and conn_id 0

Sep 13 04:29:05.313:         lifetime of 300 seconds

Sep 13 04:29:05.313:         lifetime of 4608000 kilobytes

Sep 13 04:29:05.313:         outbound SA from 172.34.47.57 to 172.35.194.219 (f/i) 0/0

        (proxy 0.0.0.0 to 172.21.1.0)

Sep 13 04:29:05.313:         has spi  0x857BA967 and conn_id 0

Sep 13 04:29:05.313:         lifetime of 300 seconds

Sep 13 04:29:05.313:         lifetime of 4608000 kilobytes

Sep 13 04:29:05.313: ISAKMP:(14397): sending packet to 172.35.194.219 my_port 500 peer_port 500 (R) QM_IDLE     

Sep 13 04:29:05.313: ISAKMP:(14397):Sending an IKE IPv4 Packet.

Sep 13 04:29:05.313: ISAKMP:(14397):Node 252378786, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI

Sep 13 04:29:05.313: ISAKMP:(14397):Old State = IKE_QM_SPI_STARVE  New State = IKE_QM_R_QM2

Sep 13 04:29:05.389: ISAKMP (14397): received packet from 172.35.194.219 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:29:05.389: ISAKMP:(14397):deleting node 252378786 error FALSE reason "QM done (await)"

Sep 13 04:29:05.389: ISAKMP:(14397):Node 252378786, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:29:05.389: ISAKMP:(14397):Old State = IKE_QM_R_QM2  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 04:29:07.925: ISAKMP:(14393):purging node 1434815361

Sep 13 04:29:08.761: ISAKMP:(14394):peer does not do paranoid keepalives.


Sep 13 04:29:08.761: ISAKMP:(14394):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE       (peer 172.35.194.115)

Sep 13 04:29:08.761: ISAKMP: set new node 1605462269 to QM_IDLE     

Sep 13 04:29:08.761: ISAKMP:(14394): sending packet to 172.35.194.115 my_port 500 peer_port 500 (R) QM_IDLE     

Sep 13 04:29:08.761: ISAKMP:(14394):Sending an IKE IPv4 Packet.

Sep 13 04:29:08.761: ISAKMP:(14394):purging node 1605462269

Sep 13 04:29:08.761: ISAKMP:(14394):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL

Sep 13 04:29:08.761: ISAKMP:(14394):Old State = IKE_P1_COMPLETE  New State = IKE_DEST_SA


Sep 13 04:29:08.761: ISAKMP:(14394):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE       (peer 172.35.194.115)

Sep 13 04:29:08.761: ISAKMP: Unlocking peer struct 0x1067324 for isadb_mark_sa_deleted(), count 0

Sep 13 04:29:08.761: ISAKMP:(14394):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:29:08.761: ISAKMP:(14394):Old State = IKE_DEST_SA  New State = IKE_DEST_SA


Sep 13 04:29:08.801: ISAKMP (14394): received packet from 172.35.194.115 dport 500 sport 500 Global (R) MM_NO_STATE

Sep 13 04:29:08.965: ISAKMP: ignoring request to send delete notify (no ISAKMP sa) src 172.34.47.57 dst 172.35.194.115 for SPI 0x6C824D4D

Sep 13 04:29:09.849: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...

Sep 13 04:29:09.849: ISAKMP (0): incrementing error counter on sa, attempt 4 of 5: retransmit phase 1

Sep 13 04:29:09.849: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE

Sep 13 04:29:09.849: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE

Sep 13 04:29:09.849: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:29:09.905: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (I) MM_NO_STATE

Sep 13 04:29:09.905: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:29:09.905: ISAKMP:(0):Old State = IKE_I_MM1  New State = IKE_I_MM2


Sep 13 04:29:09.905: ISAKMP:(0): processing SA payload. message ID = 0

Sep 13 04:29:09.905: ISAKMP:(0): processing vendor id payload

Sep 13 04:29:09.905: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch

Sep 13 04:29:09.905: ISAKMP (0): vendor ID is NAT-T RFC 3947

Sep 13 04:29:09.905: ISAKMP:(0):found peer pre-shared key matching 172.35.200.87

Sep 13 04:29:09.905: ISAKMP:(0): local preshared key found

Sep 13 04:29:09.905: ISAKMP : Scanning profiles for xauth ...

Sep 13 04:29:09.905: ISAKMP:(0):Checking ISAKMP transform 1 against priority 30 policy

Sep 13 04:29:09.905: ISAKMP:      encryption 3DES-CBC

Sep 13 04:29:09.905: ISAKMP:      hash MD5

Sep 13 04:29:09.905: ISAKMP:      default group 2

Sep 13 04:29:09.905: ISAKMP:      auth pre-share

Sep 13 04:29:09.905: ISAKMP:      life type in seconds

Sep 13 04:29:09.905: ISAKMP:      life duration (basic) of 300

Sep 13 04:29:09.905: ISAKMP:(0):atts are acceptable. Next payload is 0

Sep 13 04:29:09.905: ISAKMP:(0):Acceptable atts:actual life: 0

Sep 13 04:29:09.905: ISAKMP:(0):Acceptable atts:life: 0

Sep 13 04:29:09.905: ISAKMP:(0):Basic life_in_seconds:300

Sep 13 04:29:09.905: ISAKMP:(0):Returning Actual lifetime: 300

Sep 13 04:29:09.905: ISAKMP:(0)::Started lifetime timer: 300.


Sep 13 04:29:09.905: ISAKMP:(0): processing vendor id payload

Sep 13 04:29:09.905: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch

Sep 13 04:29:09.905: ISAKMP (0): vendor ID is NAT-T RFC 3947

Sep 13 04:29:09.905: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Sep 13 04:29:09.905: ISAKMP:(0):Old State = IKE_I_MM2  New State = IKE_I_MM2


Sep 13 04:29:09.905: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_SA_SETUP

Sep 13 04:29:09.905: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:29:09.905: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

Sep 13 04:29:09.905: ISAKMP:(0):Old State = IKE_I_MM2  New State = IKE_I_MM3


Sep 13 04:29:09.969: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (I) MM_SA_SETUP

Sep 13 04:29:09.969: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:29:09.969: ISAKMP:(0):Old State = IKE_I_MM3  New State = IKE_I_MM4


Sep 13 04:29:09.969: ISAKMP:(0): processing KE payload. message ID = 0

Sep 13 04:29:09.969: ISAKMP:(0): processing NONCE payload. message ID = 0

Sep 13 04:29:09.969: ISAKMP:(0):found peer pre-shared key matching 172.35.200.87

Sep 13 04:29:09.969: ISAKMP:(14410): processing vendor id payload

Sep 13 04:29:09.969: ISAKMP:(14410): vendor ID is Unity

Sep 13 04:29:09.969: ISAKMP:(14410): processing vendor id payload

Sep 13 04:29:09.969: ISAKMP:(14410): vendor ID is DPD

Sep 13 04:29:09.969: ISAKMP:(14410): processing vendor id payload

Sep 13 04:29:09.969: ISAKMP:(14410): speaking to another IOS box!

Sep 13 04:29:09.969: ISAKMP:received payload type 20

Sep 13 04:29:09.969: ISAKMP (14410): His hash no match - this node outside NAT

Sep 13 04:29:09.969: ISAKMP:received payload type 20

Sep 13 04:29:09.969: ISAKMP (14410): No NAT Found for self or peer

Sep 13 04:29:09.969: ISAKMP:(14410):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Sep 13 04:29:09.969: ISAKMP:(14410):Old State = IKE_I_MM4  New State = IKE_I_MM4


Sep 13 04:29:09.969: ISAKMP:(14410):SA is doing pre-shared key authentication using id type ID_IPV4_ADDR

Sep 13 04:29:09.969: ISAKMP (14410): ID payload

    next-payload : 8

    type         : 1

    address      : 172.34.47.57

    protocol     : 17

    port         : 500

    length       : 12

Sep 13 04:29:09.969: ISAKMP:(14410):Total payload length: 12

Sep 13 04:29:09.969: ISAKMP:(14410): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_KEY_EXCH

Sep 13 04:29:09.969: ISAKMP:(14410):Sending an IKE IPv4 Packet.

Sep 13 04:29:09.969: ISAKMP:(14410):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

Sep 13 04:29:09.969: ISAKMP:(14410):Old State = IKE_I_MM4  New State = IKE_I_MM5


Sep 13 04:29:10.001: ISAKMP (14410): received packet from 172.35.200.87 dport 500 sport 500 Global (I) MM_KEY_EXCH

Sep 13 04:29:10.001: ISAKMP:(14410): processing ID payload. message ID = 0

Sep 13 04:29:10.005: ISAKMP (14410): ID payload

    next-payload : 8

    type         : 1

    address      : 172.35.200.87

    protocol     : 17

    port         : 500

    length       : 12

Sep 13 04:29:10.005: ISAKMP:(0):: peer matches *none* of the profiles

Sep 13 04:29:10.005: ISAKMP:(14410): processing HASH payload. message ID = 0

Sep 13 04:29:10.005: ISAKMP:(14410):SA authentication status:

    authenticated

Sep 13 04:29:10.005: ISAKMP:(14410):SA has been authenticated with 172.35.200.87

Sep 13 04:29:10.005: ISAKMP: Trying to insert a peer 172.34.47.57/172.35.200.87/500/,  and inserted successfully 1FB5094.

Sep 13 04:29:10.005: ISAKMP:(14410):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:29:10.005: ISAKMP:(14410):Old State = IKE_I_MM5  New State = IKE_I_MM6


Sep 13 04:29:10.005: ISAKMP:(14410):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Sep 13 04:29:10.005: ISAKMP:(14410):Old State = IKE_I_MM6  New State = IKE_I_MM6


Sep 13 04:29:10.005: ISAKMP:(14410):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

Sep 13 04:29:10.005: ISAKMP:(14410):Old State = IKE_I_MM6  New State = IKE_P1_COMPLETE


Sep 13 04:29:10.005: ISAKMP:(14410):beginning Quick Mode exchange, M-ID of 3181362681

Sep 13 04:29:10.009: ISAKMP:(14410):QM Initiator gets spi

Sep 13 04:29:10.009: ISAKMP:(14410): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) QM_IDLE     

Sep 13 04:29:10.009: ISAKMP:(14410):Sending an IKE IPv4 Packet.

Sep 13 04:29:10.009: ISAKMP:(14410):Node 3181362681, Input = IKE_MESG_INTERNAL, IKE_INIT_QM

Sep 13 04:29:10.009: ISAKMP:(14410):Old State = IKE_QM_READY  New State = IKE_QM_I_QM1

Sep 13 04:29:10.009: ISAKMP:(14410):beginning Quick Mode exchange, M-ID of 817986408

Sep 13 04:29:10.009: ISAKMP:(14410):QM Initiator gets spi

Sep 13 04:29:10.009: ISAKMP:(14410): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) QM_IDLE     

Sep 13 04:29:10.009: ISAKMP:(14410):Sending an IKE IPv4 Packet.

Sep 13 04:29:10.009: ISAKMP:(14410):Node 817986408, Input = IKE_MESG_INTERNAL, IKE_INIT_QM

Sep 13 04:29:10.009: ISAKMP:(14410):Old State = IKE_QM_READY  New State = IKE_QM_I_QM1

Sep 13 04:29:10.009: ISAKMP:(14410):Input = IKE_MESG_INTERNAL, IKE_PHASE1_COMPLETE

Sep 13 04:29:10.009: ISAKMP:(14410):Old State = IKE_P1_COMPLETE  New State = IKE_P1_COMPLETE


Sep 13 04:29:10.097: ISAKMP (14410): received packet from 172.35.200.87 dport 500 sport 500 Global (I) QM_IDLE     

Sep 13 04:29:10.097: ISAKMP:(14410): processing HASH payload. message ID = 3181362681

Sep 13 04:29:10.097: ISAKMP:(14410): processing SA payload. message ID = 3181362681

Sep 13 04:29:10.097: ISAKMP:(14410):Checking IPSec proposal 1

Sep 13 04:29:10.097: ISAKMP: transform 1, ESP_3DES

Sep 13 04:29:10.097: ISAKMP:   attributes in transform:

Sep 13 04:29:10.097: ISAKMP:      encaps is 1 (Tunnel)

Sep 13 04:29:10.097: ISAKMP:      SA life type in seconds

Sep 13 04:29:10.097: ISAKMP:      SA life duration (basic) of 300

Sep 13 04:29:10.097: ISAKMP:      SA life type in kilobytes

Sep 13 04:29:10.097: ISAKMP:      SA life duration (VPI) of  0x0 0x46 0x50 0x0

Sep 13 04:29:10.097: ISAKMP:      authenticator is HMAC-MD5

Sep 13 04:29:10.097: ISAKMP:      group is 2

Sep 13 04:29:10.097: ISAKMP:(14410):atts are acceptable.

Sep 13 04:29:10.097: ISAKMP:(14410): processing NONCE payload. message ID = 3181362681

Sep 13 04:29:10.097: ISAKMP:(14410): processing KE payload. message ID = 3181362681

Sep 13 04:29:10.097: ISAKMP:(14410): processing ID payload. message ID = 3181362681

Sep 13 04:29:10.097: ISAKMP:(14410): processing ID payload. message ID = 3181362681

Sep 13 04:29:10.097: ISAKMP:(14410): Creating IPSec SAs

Sep 13 04:29:10.097:         inbound SA from 172.35.200.87 to 172.34.47.57 (f/i)  0/ 0

        (proxy 172.17.31.0 to 0.0.0.0)

Sep 13 04:29:10.097:         has spi 0xEBFEE654 and conn_id 0

Sep 13 04:29:10.097:         lifetime of 300 seconds

Sep 13 04:29:10.097:         lifetime of 4608000 kilobytes

Sep 13 04:29:10.097:         outbound SA from 172.34.47.57 to 172.35.200.87 (f/i) 0/0

        (proxy 0.0.0.0 to 172.17.31.0)

Sep 13 04:29:10.097:         has spi  0xE6FD085C and conn_id 0

Sep 13 04:29:10.097:         lifetime of 300 seconds

Sep 13 04:29:10.097:         lifetime of 4608000 kilobytes

Sep 13 04:29:10.097: ISAKMP:(14410): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) QM_IDLE     

Sep 13 04:29:10.097: ISAKMP:(14410):Sending an IKE IPv4 Packet.

Sep 13 04:29:10.097: ISAKMP:(14410):deleting node -1113604615 error FALSE reason "No Error"

Sep 13 04:29:10.097: ISAKMP:(14410):Node 3181362681, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:29:10.097: ISAKMP:(14410):Old State = IKE_QM_I_QM1  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 04:29:10.149: ISAKMP (14410): received packet from 172.35.200.87 dport 500 sport 500 Global (I) QM_IDLE     

Sep 13 04:29:10.149: ISAKMP:(14410): processing HASH payload. message ID = 817986408

Sep 13 04:29:10.149: ISAKMP:(14410): processing SA payload. message ID = 817986408

Sep 13 04:29:10.149: ISAKMP:(14410):Checking IPSec proposal 1

Sep 13 04:29:10.149: ISAKMP: transform 1, ESP_3DES

Sep 13 04:29:10.149: ISAKMP:   attributes in transform:

Sep 13 04:29:10.149: ISAKMP:      encaps is 1 (Tunnel)

Sep 13 04:29:10.149: ISAKMP:      SA life type in seconds

Sep 13 04:29:10.149: ISAKMP:      SA life duration (basic) of 300

Sep 13 04:29:10.149: ISAKMP:      SA life type in kilobytes

Sep 13 04:29:10.149: ISAKMP:      SA life duration (VPI) of  0x0 0x46 0x50 0x0

Sep 13 04:29:10.149: ISAKMP:      authenticator is HMAC-MD5

Sep 13 04:29:10.149: ISAKMP:      group is 2

Sep 13 04:29:10.149: ISAKMP:(14410):atts are acceptable.

Sep 13 04:29:10.149: ISAKMP:(14410): processing NONCE payload. message ID = 817986408

Sep 13 04:29:10.149: ISAKMP:(14410): processing KE payload. message ID = 817986408

Sep 13 04:29:10.153: ISAKMP:(14410): processing ID payload. message ID = 817986408

Sep 13 04:29:10.153: ISAKMP:(14410): processing ID payload. message ID = 817986408

Sep 13 04:29:10.153: ISAKMP:(14410): Creating IPSec SAs

Sep 13 04:29:10.153:         inbound SA from 172.35.200.87 to 172.34.47.57 (f/i)  0/ 0

        (proxy 172.17.31.0 to 0.0.0.0)

Sep 13 04:29:10.153:         has spi 0xD674D8D6 and conn_id 0

Sep 13 04:29:10.153:         lifetime of 300 seconds

Sep 13 04:29:10.153:         lifetime of 4608000 kilobytes

Sep 13 04:29:10.153:         outbound SA from 172.34.47.57 to 172.35.200.87 (f/i) 0/0

        (proxy 0.0.0.0 to 172.17.31.0)

Sep 13 04:29:10.153:         has spi  0xB5CFF75B and conn_id 0

Sep 13 04:29:10.153:         lifetime of 300 seconds

Sep 13 04:29:10.153:         lifetime of 4608000 kilobytes

Sep 13 04:29:10.153: ISAKMP:(14410): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) QM_IDLE     

Sep 13 04:29:10.153: ISAKMP:(14410):Sending an IKE IPv4 Packet.

Sep 13 04:29:10.153: ISAKMP:(14410):deleting node 817986408 error FALSE reason "No Error"

Sep 13 04:29:10.153: ISAKMP:(14410):Node 817986408, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:29:10.153: ISAKMP:(14410):Old State = IKE_QM_I_QM1  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 04:29:11.573: ISAKMP (0): received packet from 172.34.49.33 dport 500 sport 500 Global (N) NEW SA

Sep 13 04:29:11.573: ISAKMP: Found a peer struct for 172.34.49.33, peer port 500

Sep 13 04:29:11.573: ISAKMP: Locking peer struct 0x1F79C08, refcount 1 for crypto_isakmp_process_block

Sep 13 04:29:11.573: ISAKMP: local port 500, remote port 500

Sep 13 04:29:11.573: ISAKMP:(0):insert sa successfully sa = 1FB648C

Sep 13 04:29:11.573: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:29:11.573: ISAKMP:(0):Old State = IKE_READY  New State = IKE_R_MM1


Sep 13 04:29:11.573: ISAKMP:(0): processing SA payload. message ID = 0

Sep 13 04:29:11.573: ISAKMP:(0): processing vendor id payload

Sep 13 04:29:11.573: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch

Sep 13 04:29:11.573: ISAKMP (0): vendor ID is NAT-T RFC 3947

Sep 13 04:29:11.573: ISAKMP:(0): processing vendor id payload

Sep 13 04:29:11.573: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch

Sep 13 04:29:11.573: ISAKMP (0): vendor ID is NAT-T v7

Sep 13 04:29:11.573: ISAKMP:(0): processing vendor id payload

Sep 13 04:29:11.573: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch

Sep 13 04:29:11.573: ISAKMP:(0): vendor ID is NAT-T v3

Sep 13 04:29:11.573: ISAKMP:(0): processing vendor id payload

Sep 13 04:29:11.573: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch

Sep 13 04:29:11.573: ISAKMP:(0): vendor ID is NAT-T v2

Sep 13 04:29:11.573: ISAKMP:(0):found peer pre-shared key matching 172.34.49.33

Sep 13 04:29:11.573: ISAKMP:(0): local preshared key found

Sep 13 04:29:11.573: ISAKMP : Scanning profiles for xauth ...

Sep 13 04:29:11.573: ISAKMP:(0):Checking ISAKMP transform 1 against priority 30 policy

Sep 13 04:29:11.573: ISAKMP:      encryption 3DES-CBC

Sep 13 04:29:11.573: ISAKMP:      hash MD5

Sep 13 04:29:11.573: ISAKMP:      default group 2

Sep 13 04:29:11.573: ISAKMP:      auth pre-share

Sep 13 04:29:11.573: ISAKMP:      life type in seconds

Sep 13 04:29:11.573: ISAKMP:      life duration (basic) of 300

Sep 13 04:29:11.573: ISAKMP:(0):atts are acceptable. Next payload is 0

Sep 13 04:29:11.573: ISAKMP:(0):Acceptable atts:actual life: 0

Sep 13 04:29:11.573: ISAKMP:(0):Acceptable atts:life: 0

Sep 13 04:29:11.573: ISAKMP:(0):Basic life_in_seconds:300

Sep 13 04:29:11.573: ISAKMP:(0):Returning Actual lifetime: 300

Sep 13 04:29:11.573: ISAKMP:(0)::Started lifetime timer: 300.


Sep 13 04:29:11.573: ISAKMP:(0): processing vendor id payload

Sep 13 04:29:11.573: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch

Sep 13 04:29:11.573: ISAKMP (0): vendor ID is NAT-T RFC 3947

Sep 13 04:29:11.573: ISAKMP:(0): processing vendor id payload

Sep 13 04:29:11.577: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch

Sep 13 04:29:11.577: ISAKMP (0): vendor ID is NAT-T v7

Sep 13 04:29:11.577: ISAKMP:(0): processing vendor id payload

Sep 13 04:29:11.577: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch

Sep 13 04:29:11.577: ISAKMP:(0): vendor ID is NAT-T v3

Sep 13 04:29:11.577: ISAKMP:(0): processing vendor id payload

Sep 13 04:29:11.577: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch

Sep 13 04:29:11.577: ISAKMP:(0): vendor ID is NAT-T v2

Sep 13 04:29:11.577: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Sep 13 04:29:11.577: ISAKMP:(0):Old State = IKE_R_MM1  New State = IKE_R_MM1


Sep 13 04:29:11.577: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID

Sep 13 04:29:11.577: ISAKMP:(0): sending packet to 172.34.49.33 my_port 500 peer_port 500 (R) MM_SA_SETUP

Sep 13 04:29:11.577: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:29:11.577: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

Sep 13 04:29:11.577: ISAKMP:(0):Old State = IKE_R_MM1  New State = IKE_R_MM2


Sep 13 04:29:11.701: ISAKMP (0): received packet from 172.34.49.33 dport 500 sport 500 Global (R) MM_SA_SETUP

Sep 13 04:29:11.701: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:29:11.701: ISAKMP:(0):Old State = IKE_R_MM2  New State = IKE_R_MM3


Sep 13 04:29:11.701: ISAKMP:(0): processing KE payload. message ID = 0

Sep 13 04:29:11.701: ISAKMP:(0): processing NONCE payload. message ID = 0

Sep 13 04:29:11.701: ISAKMP:(0):found peer pre-shared key matching 172.34.49.33

Sep 13 04:29:11.701: ISAKMP:(14411): processing vendor id payload

Sep 13 04:29:11.701: ISAKMP:(14411): vendor ID is DPD

Sep 13 04:29:11.701: ISAKMP:(14411): processing vendor id payload

Sep 13 04:29:11.701: ISAKMP:(14411): speaking to another IOS box!

Sep 13 04:29:11.701: ISAKMP:(14411): processing vendor id payload

Sep 13 04:29:11.701: ISAKMP:(14411): vendor ID seems Unity/DPD but major 194 mismatch

Sep 13 04:29:11.701: ISAKMP:(14411): vendor ID is XAUTH

Sep 13 04:29:11.701: ISAKMP:received payload type 20

Sep 13 04:29:11.701: ISAKMP (14411): His hash no match - this node outside NAT

Sep 13 04:29:11.701: ISAKMP:received payload type 20

Sep 13 04:29:11.701: ISAKMP (14411): No NAT Found for self or peer

Sep 13 04:29:11.701: ISAKMP:(14411):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Sep 13 04:29:11.701: ISAKMP:(14411):Old State = IKE_R_MM3  New State = IKE_R_MM3


Sep 13 04:29:11.705: ISAKMP:(14411): sending packet to 172.34.49.33 my_port 500 peer_port 500 (R) MM_KEY_EXCH

Sep 13 04:29:11.705: ISAKMP:(14411):Sending an IKE IPv4 Packet.

Sep 13 04:29:11.705: ISAKMP:(14411):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

Sep 13 04:29:11.705: ISAKMP:(14411):Old State = IKE_R_MM3  New State = IKE_R_MM4


Sep 13 04:29:11.825: ISAKMP (14411): received packet from 172.34.49.33 dport 500 sport 500 Global (R) MM_KEY_EXCH

Sep 13 04:29:11.825: ISAKMP:(14411):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:29:11.825: ISAKMP:(14411):Old State = IKE_R_MM4  New State = IKE_R_MM5


Sep 13 04:29:11.825: ISAKMP:(14411): processing ID payload. message ID = 0

Sep 13 04:29:11.825: ISAKMP (14411): ID payload

    next-payload : 8

    type         : 1

    address      : 172.34.49.33

    protocol     : 17

    port         : 500

    length       : 12

Sep 13 04:29:11.825: ISAKMP:(0):: peer matches *none* of the profiles

Sep 13 04:29:11.825: ISAKMP:(14411): processing HASH payload. message ID = 0

Sep 13 04:29:11.825: ISAKMP:(14411):SA authentication status:

    authenticated

Sep 13 04:29:11.825: ISAKMP:(14411):SA has been authenticated with 172.34.49.33

Sep 13 04:29:11.825: ISAKMP:(14411):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Sep 13 04:29:11.825: ISAKMP:(14411):Old State = IKE_R_MM5  New State = IKE_R_MM5


Sep 13 04:29:11.825: ISAKMP:(14411):SA is doing pre-shared key authentication using id type ID_IPV4_ADDR

Sep 13 04:29:11.825: ISAKMP (14411): ID payload

    next-payload : 8

    type         : 1

    address      : 172.34.47.57

    protocol     : 17

    port         : 500

    length       : 12

Sep 13 04:29:11.825: ISAKMP:(14411):Total payload length: 12

Sep 13 04:29:11.825: ISAKMP:(14411): sending packet to 172.34.49.33 my_port 500 peer_port 500 (R) MM_KEY_EXCH

Sep 13 04:29:11.825: ISAKMP:(14411):Sending an IKE IPv4 Packet.

Sep 13 04:29:11.825: ISAKMP:(14411):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

Sep 13 04:29:11.825: ISAKMP:(14411):Old State = IKE_R_MM5  New State = IKE_P1_COMPLETE


Sep 13 04:29:11.825: ISAKMP:(14411):Input = IKE_MESG_INTERNAL, IKE_PHASE1_COMPLETE

Sep 13 04:29:11.825: ISAKMP:(14411):Old State = IKE_P1_COMPLETE  New State = IKE_P1_COMPLETE


Sep 13 04:29:11.849: ISAKMP:(14408):purging node -1862940807

Sep 13 04:29:11.949: ISAKMP (14411): received packet from 172.34.49.33 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:29:11.949: ISAKMP: set new node 316969593 to QM_IDLE     

Sep 13 04:29:11.949: ISAKMP:(14411): processing HASH payload. message ID = 316969593

Sep 13 04:29:11.949: ISAKMP:(14411): processing SA payload. message ID = 316969593

Sep 13 04:29:11.949: ISAKMP:(14411):Checking IPSec proposal 1

Sep 13 04:29:11.949: ISAKMP: transform 1, ESP_3DES

Sep 13 04:29:11.949: ISAKMP:   attributes in transform:

Sep 13 04:29:11.949: ISAKMP:      encaps is 1 (Tunnel)

Sep 13 04:29:11.949: ISAKMP:      SA life type in seconds

Sep 13 04:29:11.949: ISAKMP:      SA life duration (basic) of 300

Sep 13 04:29:11.949: ISAKMP:      SA life type in kilobytes

Sep 13 04:29:11.949: ISAKMP:      SA life duration (VPI) of  0x0 0x46 0x50 0x0

Sep 13 04:29:11.949: ISAKMP:      authenticator is HMAC-MD5

Sep 13 04:29:11.949: ISAKMP:      group is 2

Sep 13 04:29:11.949: ISAKMP:(14411):atts are acceptable.

Sep 13 04:29:11.949: ISAKMP:(14411): processing NONCE payload. message ID = 316969593

Sep 13 04:29:11.949: ISAKMP:(14411): processing KE payload. message ID = 316969593

Sep 13 04:29:11.949: ISAKMP:(14411): processing ID payload. message ID = 316969593

Sep 13 04:29:11.949: ISAKMP:(14411): processing ID payload. message ID = 316969593

Sep 13 04:29:11.949: ISAKMP:(14411):QM Responder gets spi

Sep 13 04:29:11.949: ISAKMP:(14411):Node 316969593, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:29:11.949: ISAKMP:(14411):Old State = IKE_QM_READY  New State = IKE_QM_SPI_STARVE

Sep 13 04:29:11.949: ISAKMP:(14411): Creating IPSec SAs

Sep 13 04:29:11.949:         inbound SA from 172.34.49.33 to 172.34.47.57 (f/i)  0/ 0

        (proxy 172.19.100.0 to 0.0.0.0)

Sep 13 04:29:11.949:         has spi 0x9E311248 and conn_id 0

Sep 13 04:29:11.949:         lifetime of 300 seconds

Sep 13 04:29:11.949:         lifetime of 4608000 kilobytes

Sep 13 04:29:11.949:         outbound SA from 172.34.47.57 to 172.34.49.33 (f/i) 0/0

        (proxy 0.0.0.0 to 172.19.100.0)

Sep 13 04:29:11.949:         has spi  0x812E13CD and conn_id 0

Sep 13 04:29:11.949:         lifetime of 300 seconds

Sep 13 04:29:11.949:         lifetime of 4608000 kilobytes

Sep 13 04:29:11.949: ISAKMP:(14411): sending packet to 172.34.49.33 my_port 500 peer_port 500 (R) QM_IDLE     

Sep 13 04:29:11.949: ISAKMP:(14411):Sending an IKE IPv4 Packet.

Sep 13 04:29:11.949: ISAKMP:(14411):Node 316969593, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI

Sep 13 04:29:11.949: ISAKMP:(14411):Old State = IKE_QM_SPI_STARVE  New State = IKE_QM_R_QM2

Sep 13 04:29:12.073: ISAKMP (14411): received packet from 172.34.49.33 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:29:12.073: ISAKMP:(14411):deleting node 316969593 error FALSE reason "QM done (await)"

Sep 13 04:29:12.073: ISAKMP:(14411):Node 316969593, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:29:12.073: ISAKMP:(14411):Old State = IKE_QM_R_QM2  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 04:29:12.265: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP

Sep 13 04:29:12.265: ISAKMP:(0): phase 1 packet is a duplicate of a previous packet.

Sep 13 04:29:12.265: ISAKMP:(0): retransmitting due to retransmit phase 1

Sep 13 04:29:12.565: ISAKMP:(0):purging SA., sa=411BD47C, delme=411BD47C

Sep 13 04:29:12.765: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...

Sep 13 04:29:12.765: ISAKMP (0): incrementing error counter on sa, attempt 2 of 5: retransmit phase 1

Sep 13 04:29:12.765: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP

Sep 13 04:29:12.765: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP

Sep 13 04:29:12.765: ISAKMP:(0):Sending an IKE IPv4 Packet.

Sep 13 04:29:12.817: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP

Sep 13 04:29:12.817: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:29:12.817: ISAKMP:(0):Old State = IKE_R_MM2  New State = IKE_R_MM3


Sep 13 04:29:12.817: ISAKMP:(0): processing KE payload. message ID = 0

Sep 13 04:29:12.817: ISAKMP:(0): processing NONCE payload. message ID = 0

Sep 13 04:29:12.821: ISAKMP:(0):found peer pre-shared key matching 172.35.200.87

Sep 13 04:29:12.821: ISAKMP:(14412): processing vendor id payload

Sep 13 04:29:12.821: ISAKMP:(14412): vendor ID is DPD

Sep 13 04:29:12.821: ISAKMP:(14412): processing vendor id payload

Sep 13 04:29:12.821: ISAKMP:(14412): speaking to another IOS box!

Sep 13 04:29:12.821: ISAKMP:(14412): processing vendor id payload

Sep 13 04:29:12.821: ISAKMP:(14412): vendor ID seems Unity/DPD but major 118 mismatch

Sep 13 04:29:12.821: ISAKMP:(14412): vendor ID is XAUTH

Sep 13 04:29:12.821: ISAKMP:received payload type 20

Sep 13 04:29:12.821: ISAKMP (14412): His hash no match - this node outside NAT

Sep 13 04:29:12.821: ISAKMP:received payload type 20

Sep 13 04:29:12.821: ISAKMP (14412): No NAT Found for self or peer

Sep 13 04:29:12.821: ISAKMP:(14412):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Sep 13 04:29:12.821: ISAKMP:(14412):Old State = IKE_R_MM3  New State = IKE_R_MM3


Sep 13 04:29:12.821: ISAKMP:(14412): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_KEY_EXCH

Sep 13 04:29:12.821: ISAKMP:(14412):Sending an IKE IPv4 Packet.

Sep 13 04:29:12.821: ISAKMP:(14412):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE

Sep 13 04:29:12.821: ISAKMP:(14412):Old State = IKE_R_MM3  New State = IKE_R_MM4


Sep 13 04:29:12.881: ISAKMP (14412): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_KEY_EXCH

Sep 13 04:29:12.881: ISAKMP:(14412):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:29:12.881: ISAKMP:(14412):Old State = IKE_R_MM4  New State = IKE_R_MM5


Sep 13 04:29:12.881: ISAKMP:(14412): processing ID payload. message ID = 0

Sep 13 04:29:12.881: ISAKMP (14412): ID payload

    next-payload : 8

    type         : 1

    address      : 172.35.200.87

    protocol     : 17

    port         : 500

    length       : 12

Sep 13 04:29:12.881: ISAKMP:(0):: peer matches *none* of the profiles

Sep 13 04:29:12.881: ISAKMP:(14412): processing HASH payload. message ID = 0

Sep 13 04:29:12.881: ISAKMP:(14412):SA authentication status:

    authenticated

Sep 13 04:29:12.881: ISAKMP:(14412):SA has been authenticated with 172.35.200.87

Sep 13 04:29:12.881: ISAKMP: Trying to insert a peer 172.34.47.57/172.35.200.87/500/,  and found existing one 1FB5094 to reuse, free 12370108

Sep 13 04:29:12.881: ISAKMP: Unlocking peer struct 0x12370108 Reuse existing peer, count 0

Sep 13 04:29:12.881: ISAKMP: Deleting peer node by peer_reap for 172.35.200.87: 12370108

Sep 13 04:29:12.881: ISAKMP: Locking peer struct 0x1FB5094, refcount 2 for Reuse existing peer

Sep 13 04:29:12.881: ISAKMP:(14412):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Sep 13 04:29:12.881: ISAKMP:(14412):Old State = IKE_R_MM5  New State = IKE_R_MM5


Sep 13 04:29:12.885: ISAKMP:(14412):SA is doing

Sep 13 04:29:12.997: ISAKMP:(14412):Node 2632555641, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI

Sep 13 04:29:12.997: ISAKMP:(14412):Old State = IKE_QM_SPI_STARVE  New State = IKE_QM_R_QM2

Sep 13 04:29:13.077: ISAKMP (14412): received packet from 172.35.200.87 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:29:13.077: ISAKMP:(14412):deleting node -1662411655 error FALSE reason "QM done (await)"

Sep 13 04:29:13.077: ISAKMP:(14412):Node 2632555641, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:29:13.077: ISAKMP:(14412):Old State = IKE_QM_R_QM2  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 04:29:15.137: ISAKMP: set new node 0 to QM_IDLE     

Sep 13 04:29:15.137: SA has outstanding requests  (local 19.73.214.124 port 500, remote 19.73.214.96 port 500)

Sep 13 04:29:15.137: ISAKMP:(14399): sitting IDLE. Starting QM immediately (QM_IDLE      )

Sep 13 04:29:15.137: ISAKMP:(14399):beginning Quick Mode exchange, M-ID of 1817951830

Sep 13 04:29:15.137: ISAKMP:(14399):QM Initiator gets spi

Sep 13 04:29:15.137: ISAKMP:(14399): sending packet to 172.35.232.241 my_port 500 peer_port 500 (I) QM_IDLE     

Sep 13 04:29:15.137: ISAKMP:(14399):Sending an IKE IPv4 Packet.

Sep 13 04:29:15.137: ISAKMP:(14399):Node 1817951830, Input = IKE_MESG_INTERNAL, IKE_INIT_QM

Sep 13 04:29:15.137: ISAKMP:(14399):Old State = IKE_QM_READY  New State = IKE_QM_I_QM1

Sep 13 04:29:15.229: ISAKMP (14399): received packet from 172.35.232.241 dport 500 sport 500 Global (I) QM_IDLE     

Sep 13 04:29:15.229: ISAKMP:(14399): processing HASH payload. message ID = 1817951830

Sep 13 04:29:15.229: ISAKMP:(14399): processing SA payload. message ID = 1817951830

Sep 13 04:29:15.229: ISAKMP:(14399):Checking IPSec proposal 1

Sep 13 04:29:15.229: ISAKMP: transform 1, ESP_3DES

Sep 13 04:29:15.229: ISAKMP:   attributes in transform:

Sep 13 04:29:15.229: ISAKMP:      encaps is 1 (Tunnel)

Sep 13 04:29:15.229: ISAKMP:      SA life type in seconds

Sep 13 04:29:15.229: ISAKMP:      SA life duration (basic) of 300

Sep 13 04:29:15.229: ISAKMP:      SA life type in kilobytes

Sep 13 04:29:15.229: ISAKMP:      SA life duration (VPI) of  0x0 0x46 0x50 0x0

Sep 13 04:29:15.229: ISAKMP:      authenticator is HMAC-MD5

Sep 13 04:29:15.229: ISAKMP:      group is 2

Sep 13 04:29:15.229: ISAKMP:(14399):atts are acceptable.

Sep 13 04:29:15.229: ISAKMP:(14399): processing NONCE payload. message ID = 1817951830

Sep 13 04:29:15.229: ISAKMP:(14399): processing KE payload. message ID = 1817951830

Sep 13 04:29:15.233: ISAKMP:(14399): processing ID payload. message ID = 1817951830

Sep 13 04:29:15.233:         lifetime of 4608000 kilobytes

Sep 13 04:29:15.233: ISAKMP:(14399): sending packet to 172.35.232.241 my_port 500 peer_port 500 (I) QM_IDLE     

Sep 13 04:29:15.233: ISAKMP:(14399):Sending an IKE IPv4 Packet.

Sep 13 04:29:15.233: ISAKMP:(14399):deleting node 1817951830 error FALSE reason "No Error"

Sep 13 04:29:15.233: ISAKMP:(14399):Node 1817951830, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:29:15.233: ISAKMP:(14399):Old State = IKE_QM_I_QM1  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 09:59:15: %CRYPTO-4-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet. (ip) vrf/dest_addr= /172.16.102.30, src_addr= 172.16.10.199, prot= 17

Sep 13 04:29:17.197: ISAKMP:(14394):purging node -318471219

Sep 13 04:29:19.349: ISAKMP:(0):purging node 18447477

Sep 13 04:29:19.349: ISAKMP:(0):purging node -1384134144

Sep 13 04:29:19.665: ISAKMP:(14395):peer does not do paranoid keepalives.


Sep 13 04:29:19.665: ISAKMP:(14395):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE       (peer 172.35.200.100)

Sep 13 04:29:19.665: ISAKMP: set new node -2085630984 to QM_IDLE     

Sep 13 04:29:19.665: ISAKMP:(14395): sending packet to 172.35.200.100 my_port 500 peer_port 500 (R) QM_IDLE     

Sep 13 04:29:19.665: ISAKMP:(14395):Sending an IKE IPv4 Packet.

Sep 13 04:29:19.665: ISAKMP:(14395):purging node -2085630984

Sep 13 04:29:19.665: ISAKMP:(14395):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL

Sep 13 04:29:19.665: ISAKMP:(14395):Old State = IKE_P1_COMPLETE  New State = IKE_DEST_SA


Sep 13 04:29:19.665: ISAKMP:(14395):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE       (peer 172.35.200.100)

Sep 13 04:29:19.665: ISAKMP: Unlocking peer struct 0x1F7036C for isadb_mark_sa_deleted(), count 0

Sep 13 04:29:19.665: ISAKMP:(14395):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:29:19.665: ISAKMP:(14395):Old State = IKE_DEST_SA  New State = IKE_DEST_SA


Sep 13 04:29:19.705: ISAKMP (14395): received packet from 172.35.200.100 dport 500 sport 500 Global (R) MM_NO_STATE

Sep 13 04:29:19.925: ISAKMP: ignoring request to send delete notify (no ISAKMP sa) src 172.34.47.57 dst 172.35.200.100 for SPI 0xFEBEA21C

Sep 13 04:29:20.229: ISAKMP:(14391):purging node 617903236

Sep 13 04:29:21.865: ISAKMP:(14396):peer does not do paranoid keepalives.


Sep 13 04:29:21.865: ISAKMP:(14396):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE       (peer 172.35.222.236)

Sep 13 04:29:21.865: ISAKMP: set new node 197862031 to QM_IDLE     

Sep 13 04:29:21.865: ISAKMP:(14396): sending packet to 172.35.222.236 my_port 500 peer_port 500 (R) QM_IDLE     

Sep 13 04:29:21.865: ISAKMP:(14396):Sending an IKE IPv4 Packet.

Sep 13 04:29:21.865: ISAKMP:(14396):purging node 197862031

Sep 13 04:29:21.865: ISAKMP:(14396):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL

Sep 13 04:29:21.865: ISAKMP:(14396):Old State = IKE_P1_COMPLETE  New State = IKE_DEST_SA


Sep 13 04:29:21.865: ISAKMP:(14396):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE       (peer 172.35.222.236)

Sep 13 04:29:21.865: ISAKMP: Unlocking peer struct 0x41145720 for isadb_mark_sa_deleted(), count 0

Sep 13 04:29:21.865: ISAKMP:(14396):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH

Sep 13 04:29:21.865: ISAKMP:(14396):Old State = IKE_DEST_SA  New State = IKE_DEST_SA


Sep 13 04:29:21.957: ISAKMP (14396): received packet from 172.35.222.236 dport 500 sport 500 Global (R) MM_NO_STATE

Sep 13 04:29:22.405: ISAKMP: ignoring request to send delete notify (no ISAKMP sa) src 172.34.47.57 dst 172.35.222.236 for SPI 0xB29B24CB

Sep 13 04:29:24.989: ISAKMP (14400): received packet from 172.35.247.239 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:29:24.989: ISAKMP: set new node 1895761073 to QM_IDLE     

Sep 13 04:29:24.989: ISAKMP:(14400): processing HASH payload. message ID = 1895761073

Sep 13 04:29:24.989: ISAKMP:(14400): processing SA payload. message ID = 1895761073

Sep 13 04:29:24.989: ISAKMP:(14400):Checking IPSec proposal 1

Sep 13 04:29:24.989: ISAKMP: transform 1, ESP_3DES

Sep 13 04:29:24.989: ISAKMP:   attributes in transform:

Sep 13 04:29:24.989: ISAKMP:      encaps is 1 (Tunnel)

Sep 13 04:29:24.989: ISAKMP:      SA life type in seconds

Sep 13 04:29:24.989: ISAKMP:      SA life duration (basic) of 300

Sep 13 04:29:24.989: ISAKMP:      SA life type in kilobytes

Sep 13 04:29:24.989: ISAKMP:      SA life duration (VPI) of  0x0 0x46 0x50 0x0

Sep 13 04:29:24.989: ISAKMP:      authenticator is HMAC-MD5

Sep 13 04:29:24.989: ISAKMP:      group is 2

Sep 13 04:29:24.989: ISAKMP:(14400):atts are acceptable.

Sep 13 04:29:24.989: ISAKMP:(14400): processing NONCE payload. message ID = 1895761073

Sep 13 04:29:24.989: ISAKMP:(14400): processing KE payload. message ID = 1895761073

Sep 13 04:29:24.993: ISAKMP:(14400): processing ID payload. message ID = 1895761073

Sep 13 04:29:24.993: ISAKMP:(14400): processing ID payload. message ID = 1895761073

Sep 13 04:29:24.993: ISAKMP:(14400):QM Responder gets spi

Sep 13 04:29:24.993: ISAKMP:(14400):Node 1895761073, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:29:24.993: ISAKMP:(14400):Old State = IKE_QM_READY  New State = IKE_QM_SPI_STARVE

Sep 13 04:29:24.993: ISAKMP:(14400): Creating IPSec SAs

Sep 13 04:29:24.993:         inbound SA from 172.35.247.239 to 172.34.47.57 (f/i)  0/ 0

        (proxy 172.17.19.0 to 0.0.0.0)

Sep 13 04:29:24.993:         has spi 0x9D41C37A and conn_id 0

Sep 13 04:29:24.993:         lifetime of 300 seconds

Sep 13 04:29:24.993:         lifetime of 4608000 kilobytes

Sep 13 04:29:24.993:         outbound SA from 172.34.47.57 to 172.35.247.239 (f/i) 0/0

        (proxy 0.0.0.0 to 172.17.19.0)

Sep 13 04:29:24.993:         has spi  0xD31F8C67 and conn_id 0

Sep 13 04:29:24.993:         lifetime of 300 seconds

Sep 13 04:29:24.993:         lifetime of 4608000 kilobytes

Sep 13 04:29:24.993: ISAKMP:(14400): sending packet to 172.35.247.239 my_port 500 peer_port 500 (R) QM_IDLE     

Sep 13 04:29:24.993: ISAKMP:(14400):Sending an IKE IPv4 Packet.

Sep 13 04:29:24.993: ISAKMP:(14400):Node 1895761073, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI

Sep 13 04:29:24.993: ISAKMP:(14400):Old State = IKE_QM_SPI_STARVE  New State = IKE_QM_R_QM2

Sep 13 04:29:25.061: ISAKMP (14400): received packet from 172.35.247.239 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:29:25.061: ISAKMP:(14400):deleting node 1895761073 error FALSE reason "QM done (await)"

Sep 13 04:29:25.061: ISAKMP:(14400):Node 1895761073, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:29:25.061: ISAKMP:(14400):Old State = IKE_QM_R_QM2  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 04:29:25.089: ISAKMP:(0): SA request profile is (NULL)

Sep 13 04:29:25.089: ISAKMP: Found a peer struct for 172.35.194.218, peer port 500

Sep 13 04:29:25.089: ISAKMP: Locking peer struct 0x1EB7CCC, refcount 1 for isakmp_initiator

Sep 13 04:29:25.089: ISAKMP: local port 500, remote port 500

Sep 13 04:29:25.089: ISAKMP: set new node 0 to QM_IDLE     

Sep 13 04:29:25.089: ISAKMP:(0):insert sa successfully sa = 134DC94C

Sep 13 04:29:25.089: ISAKMP:(0):Can not start Aggressive mode, trying Main mode.

Sep 13 04:29:25.089: ISAKMP:(0):found peer pre-shared key matching 172.35.194.218

Sep 13 04:29:25.089: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID

Sep 13 04:29:25.089: ISAKMP:(0): constructed NAT-T vendor-07 ID

Sep 13 04:29:25.089: ISAKMP:(0): constructed NAT-T vendor-03 ID

Sep 13 04:29:25.509:         lifetime of 4608000 kilobytes

Sep 13 04:29:25.509: ISAKMP:(14413): sending packet to 172.35.194.218 my_port 500 peer_port 500 (I) QM_IDLE     

Sep 13 04:29:25.509: ISAKMP:(14413):Sending an IKE IPv4 Packet.

Sep 13 04:29:25.509: ISAKMP:(14413):deleting node -1204938463 error FALSE reason "No Error"

Sep 13 04:29:25.509: ISAKMP:(14413):Node 3090028833, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH

Sep 13 04:29:25.509: ISAKMP:(14413):Old State = IKE_QM_I_QM1  New State = IKE_QM_PHASE2_COMPLETE

Sep 13 04:29:25.621: ISAKMP (14413): received packet from 172.35.194.218 dport 500 sport 500 Global (I) QM_IDLE     

Sep 13 04:29:28.233: ISAKMP:(0):purging node 1447299565

Sep 13 04:29:28.233: ISAKMP:(0):purging node -1227412869

Sep 13 04:29:29.349: ISAKMP:(0):purging SA., sa=134D9B1C, delme=134D9B1C

Sep 13 04:29:30.229: ISAKMP:(14391):purging SA., sa=1FA2A94, delme=1FA2A94

Sep 13 04:29:35.145: ISAKMP (14412): received packet from 172.35.200.87 dport 500 sport 500 Global (R) QM_IDLE     

Sep 13 04:29:35.145: ISAKMP: set new node 925689348 to QM_IDLE     

Sep 13 04:29:35.145: ISAKMP:(14412): processing HASH payload. message ID = 925689348

Sep 13 04:29:35.145: ISAKMP:(14412): processing DELETE payload. message ID = 925689348

Sep 13 04:29:35.145: ISAKMP:(14412):peer does not do paranoid keepalives.


Sep 13 04:29:35.145: ISAKMP:(14412):deleting node 925689348 error FALSE reason "Informational (in) state 1"

Sep 13 04:29:35.153: ISAKMP: set new node 1929835961 to QM_IDLE     

Sep 13 04:29:35.153: ISAKMP:(14410): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) QM_IDLE     

Sep 13 04:29:35.153: ISAKMP:(14410):Sending an IKE IPv4 Packet.

Sep 13 04:29:35.153: ISAKMP:(14410):purging node 1929835961

Sep 13 04:29:35.153: ISAKMP:(14410):Input = IKE_MESG_FROM_IPSEC, IKE_PHASE2_DEL

Se

Leo Laohoo Thu, 09/12/2013 - 22:29
User Badges:
  • Super Gold, 25000 points or more
  • Hall of Fame,

    The Hall of Fame designation is a lifetime achievement award based on significant overall achievements in the community. 

  • Cisco Designated VIP,

    2017 LAN, Wireless

Reboot the router. 

wajid dabir Thu, 09/12/2013 - 22:33
User Badges:

I can not reboot the router as it is live.no other solution?

Kelvin Willacey Fri, 09/13/2013 - 11:09
User Badges:
  • Bronze, 100 points or more

Can you telnet/ssh to the router? I assume once you don't have terminal monitor on then you should be getting those messages and you can disable the debug as Leo suggested.

Actions

This Discussion