09-12-2013 09:48 PM - edited 03-04-2019 09:01 PM
I am not able to take console of my 3900 router as it is continuously generating error.
Find the attached error file.
please suggest me how do i troubleshoot this problem.
Regards,
Wajid dabir
09-12-2013 09:56 PM
undebug all
09-12-2013 10:10 PM
i am not able to login from console also as errors are continuously generating.....so i am able to undebug
09-12-2013 10:12 PM
If you are not able to console in, how did you manage to get the logs?
What error message do you get when you try to console in?
09-12-2013 10:16 PM
When i connect the console error start generating,so i am not able to login in router to undebug all.
This eeror i am getting:
ad. message ID = 0
Sep 13 04:27:21.573: ISAKMP (14407): ID payload
next-payload : 8
type : 1
ad. message ID = 0
Sep 13 04:27:21.573: ISAKMP (14407): ID payload
next-payload : 8
type : 1
address : 172.35.194.145
protocol : 17
port : 500
length : 12
Sep 13 04:27:21.573: ISAKMP:(0):: peer matches *none* of the profiles
Sep 13 04:27:21.573: ISAKMP:(14407): processing HASH payload. message ID = 0
Sep 13 04:27:21.573: ISAKMP:(14407):SA authentication status:
authenticated
Sep 13 04:27:21.573: ISAKMP:(14407):SA has been authenticated with 172.35.194.145
Sep 13 04:27:21.573: ISAKMP:(14407):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:27:21.573: ISAKMP:(14407):Old State = IKE_I_MM5 New State = IKE_I_MM6
Sep 13 04:27:21.573: ISAKMP:(14407):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Sep 13 04:27:21.573: ISAKMP:(14407):Old State = IKE_I_MM6 New State = IKE_I_MM6
Sep 13 04:27:21.573: ISAKMP:(14407):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
Sep 13 04:27:21.573: ISAKMP:(14407):Old State = IKE_I_MM6 New State = IKE_P1_COMPLETE
Sep 13 04:27:21.573: ISAKMP:(14407):beginning Quick Mode exchange, M-ID of 737401177
Sep 13 04:27:21.573: ISAKMP:(14407):QM Initiator gets spi
Sep 13 04:27:21.577: ISAKMP:(14407): sending packet to 172.35.194.145 my_port 500 peer_port 500 (I) QM_IDLE
Sep 13 04:27:21.577: ISAKMP:(14407):Sending an IKE IPv4 Packet.
Sep 13 04:27:21.577: ISAKMP:(14407):Node 737401177, Input = IKE_MESG_INTERNAL, IKE_INIT_QM
Sep 13 04:27:21.577: ISAKMP:(14407):Old State = IKE_QM_READY New State = IKE_QM_I_QM1
Sep 13 04:27:21.577: ISAKMP:(14407):Input = IKE_MESG_INTERNAL, IKE_PHASE1_COMPLETE
Sep 13 04:27:21.577: ISAKMP:(14407):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
Sep 13 04:27:21.645: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP
Sep 13 04:27:21.645: ISAKMP:(0): phase 1 packet is a duplicate of a previous packet.
Sep 13 04:27:21.645: ISAKMP:(0): retransmitting due to retransmit phase 1
Sep 13 04:27:21.665: ISAKMP (14407): received packet from 172.35.194.145 dport 500 sport 500 Global (I) QM_IDLE
Sep 13 04:27:21.665: ISAKMP:(14407): processing HASH payload. message ID = 737401177
Sep 13 04:27:21.665: ISAKMP:(14407): processing SA payload. message ID = 737401177
Sep 13 04:27:21.665: ISAKMP:(14407):Checking IPSec proposal 1
Sep 13 04:27:21.665: ISAKMP: transform 1, ESP_3DES
Sep 13 04:27:21.665: ISAKMP: attributes in transform:
Sep 13 04:27:21.665: ISAKMP: encaps is 1 (Tunnel)
Sep 13 04:27:21.665: ISAKMP: SA life type in seconds
Sep 13 04:27:21.665: ISAKMP: SA life duration (basic) of 300
Sep 13 04:27:21.665: ISAKMP: SA life type in kilobytes
Sep 13 04:27:21.665: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0
Sep 13 04:27:21.665: ISAKMP: authenticator is HMAC-MD5
Sep 13 04:27:21.665: ISAKMP: group is 2
Sep 13 04:27:21.665: ISAKMP:(14407):atts are acceptable.
Sep 13 04:27:21.665: ISAKMP:(14407): processing NONCE payload. message ID = 737401177
Sep 13 04:27:21.665: ISAKMP:(14407): processing KE payload. message ID = 737401177
Sep 13 04:27:21.669: ISAKMP:(14407): processing ID payload. message ID = 737401177
Sep 13 04:27:21.669: ISAKMP:(14407): processing ID payload. message ID = 737401177
Sep 13 04:27:21.669: ISAKMP:(14407): Creating IPSec SAs
Sep 13 04:27:21.669: inbound SA from 172.35.194.145 to 172.34.47.57 (f/i) 0/ 0
(proxy 172.16.2.0 to 0.0.0.0)
Sep 13 04:27:21.669: has spi 0x3A7219D1 and conn_id 0
Sep 13 04:27:21.669: lifetime of 300 seconds
Sep 13 04:27:21.669: lifetime of 4608000 kilobytes
Sep 13 04:27:21.669: outbound SA from 172.34.47.57 to 172.35.194.145 (f/i) 0/0
(proxy 0.0.0.0 to 172.16.2.0)
Sep 13 04:27:21.669: has spi 0x2DB4C49F and conn_id 0
Sep 13 04:27:21.669: lifetime of 300 seconds
Sep 13 04:27:21.669: lifetime of 4608000 kilobytes
Sep 13 04:27:21.669: ISAKMP:(14407): sending packet to 172.35.194.145 my_port 500 peer_port 500 (I) QM_IDLE
Sep 13 04:27:21.669: ISAKMP:(14407):Sending an IKE IPv4 Packet.
Sep 13 04:27:21.669: ISAKMP:(14407):deleting node 737401177 error FALSE reason "No Error"
Sep 13 04:27:21.669: ISAKMP:(14407):Node 737401177, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:27:21.669: ISAKMP:(14407):Old State = IKE_QM_I_QM1 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 04:27:21.929: ISAKMP:(14386):purging node -1519362962
Sep 13 04:27:22.145: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...
Sep 13 04:27:22.145: ISAKMP (0): incrementing error counter on sa, attempt 4 of 5: retransmit phase 1
Sep 13 04:27:22.145: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP
Sep 13 04:27:22.145: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP
Sep 13 04:27:22.145: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:27:22.569: ISAKMP (0): received packet from 172.35.200.91 dport 500 sport 500 Global (R) MM_NO_STATE
Sep 13 04:27:24.841: ISAKMP: set new node -76103279 to QM_IDLE
Sep 13 04:27:24.841: ISAKMP:(14406): sending packet to 172.35.217.15 my_port 500 peer_port 500 (R) QM_IDLE
Sep 13 04:27:24.841: ISAKMP:(14406):Sending an IKE IPv4 Packet.
Sep 13 04:27:24.841: ISAKMP:(14406):purging node -76103279
Sep 13 04:27:24.841: ISAKMP:(14406):Input = IKE_MESG_FROM_IPSEC, IKE_PHASE2_DEL
Sep 13 04:27:24.841: ISAKMP:(14406):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
Sep 13 04:27:24.841: ISAKMP (14406): received packet from 172.35.217.15 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:27:24.841: ISAKMP: set new node -1746108638 to QM_IDLE
Sep 13 04:27:24.841: ISAKMP:(14406): processing HASH payload. message ID = 2548858658
Sep 13 04:27:24.841: ISAKMP:(14406): processing DELETE payload. message ID = 2548858658
Sep 13 04:27:24.841: ISAKMP:(14406):peer does not do paranoid keepalives.
Sep 13 04:27:24.841: ISAKMP:(14406):deleting node -1746108638 error FALSE reason "Informational (in) state 1"
Sep 13 04:27:26.197: ISAKMP:(14384):purging SA., sa=134D9B1C, delme=134D9B1C
Sep 13 04:27:26.233: ISAKMP:(14385):purging SA., sa=1F6EF24, delme=1F6EF24
Sep 13 04:27:27.497: ISAKMP:(14404):purging node 498370353
Sep 13 04:27:28.345: ISAKMP:(0):purging SA., sa=4018B0F0, delme=4018B0F0
Sep 13 04:27:28.845: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
Sep 13 04:27:28.845: ISAKMP:(0):peer does not do paranoid keepalives.
Sep 13 04:27:28.845: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (I) MM_NO_STATE (peer 172.35.200.87)
Sep 13 04:27:28.845: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (I) MM_NO_STATE (peer 172.35.200.87)
Sep 13 04:27:28.845: ISAKMP: Unlocking peer struct 0x1FB5094 for isadb_mark_sa_deleted(), count 0
Sep 13 04:27:28.845: ISAKMP: Deleting peer node by peer_reap for 172.35.200.87: 1FB5094
Sep 13 04:27:28.845: ISAKMP:(0):deleting node 1013205142 error FALSE reason "IKE deleted"
Sep 13 04:27:28.845: ISAKMP:(0):deleting node -1738356762 error FALSE reason "IKE deleted"
Sep 13 04:27:28.845: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
Sep 13 04:27:28.845: ISAKMP:(0):Old State = IKE_I_MM1 New State = IKE_DEST_SA
Sep 13 04:27:29.345: ISAKMP:(0): SA request profile is (NULL)
Sep 13 04:27:29.345: ISAKMP: Created a peer struct for 172.35.200.87, peer port 500
Sep 13 04:27:29.345: ISAKMP: New peer created peer = 0x1FB5094 peer_handle = 0x80008B45
Sep 13 04:27:29.345: ISAKMP: Locking peer struct 0x1FB5094, refcount 1 for isakmp_initiator
Sep 13 04:27:29.349: ISAKMP: local port 500, remote port 500
Sep 13 04:27:29.349: ISAKMP: set new node 0 to QM_IDLE
Sep 13 04:27:29.349: ISAKMP: Find a dup sa in the avl tree during calling isadb_insert sa = 134D9B1C
Sep 13 04:27:29.349: ISAKMP:(0):Can not start Aggressive mode, trying Main mode.
Sep 13 04:27:29.349: ISAKMP:(0):found peer pre-shared key matching 172.35.200.87
Sep 13 04:27:29.349: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID
Sep 13 04:27:29.349: ISAKMP:(0): constructed NAT-T vendor-07 ID
Sep 13 04:27:29.349: ISAKMP:(0): constructed NAT-T vendor-03 ID
Sep 13 04:27:29.349: ISAKMP:(0): constructed NAT-T vendor-02 ID
Sep 13 04:27:29.349: ISAKMP:(0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM
Sep 13 04:27:29.349: ISAKMP:(0):Old State = IKE_READY New State = IKE_I_MM1
Sep 13 04:27:29.349: ISAKMP:(0): beginning Main Mode exchange
Sep 13 04:27:29.349: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE
Sep 13 04:27:29.349: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:27:30.677: ISAKMP:(14387):purging node 748799546
Sep 13 04:27:31.645: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP
Sep 13 04:27:31.645: ISAKMP:(0): phase 1 packet is a duplicate of a previous packet.
Sep 13 04:27:31.645: ISAKMP:(0): retransmitting due to retransmit phase 1
Sep 13 04:27:31.929: ISAKMP:(14386):purging SA., sa=411CF108, delme=411CF108
Sep 13 04:27:32.145: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...
Sep 13 04:27:32.145: ISAKMP (0): incrementing error counter on sa, attempt 5 of 5: retransmit phase 1
Sep 13 04:27:32.145: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP
Sep 13 04:27:32.145: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP
Sep 13 04:27:32.145: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:27:32.569: ISAKMP (0): received packet from 172.35.200.91 dport 500 sport 500 Global (R) MM_NO_STATE
Sep 13 04:27:32.953: ISAKMP (14389): received packet from 172.35.237.233 dport 500 sport 500 Global (I) QM_IDLE
Sep 13 04:27:32.953: ISAKMP: set new node 299600500 to QM_IDLE
Sep 13 04:27:32.953: ISAKMP:(14389): processing HASH payload. message ID = 299600500
Sep 13 04:27:32.953: ISAKMP:received payload type 18
Sep 13 04:27:32.953: ISAKMP:(14389):Processing delete with reason payload
Sep 13 04:27:32.953: ISAKMP:(14389):delete doi = 1
Sep 13 04:27:32.953: ISAKMP:(14389):delete protocol id = 1
Sep 13 04:27:32.953: ISAKMP:(14389):delete spi_size = 16
Sep 13 04:27:32.953: ISAKMP:(14389):delete num spis = 1
Sep 13 04:27:32.953: ISAKMP:(14389):delete_reason = 10
Sep 13 04:27:32.953: ISAKMP:(14389): processing DELETE_WITH_REASON payload, message ID = 299600500, reason: Unknown delete reason!
Sep 13 04:27:32.953: ISAKMP:(14389):peer does not do paranoid keepalives.
Sep 13 04:27:32.953: ISAKMP:(14389):deleting SA reason "IKE SA Lifetime Exceeded" state (I) QM_IDLE (peer 172.35.237.233)
Sep 13 04:27:32.953: ISAKMP:(14389):deleting node 299600500 error FALSE reason "Informational (in) state 1"
Sep 13 04:27:32.953: ISAKMP: set new node -1993838501 to QM_IDLE
Sep 13 04:27:32.953: ISAKMP:(14389): sending packet to 172.35.237.233 my_port 500 peer_port 500 (I) QM_IDLE
Sep 13 04:27:32.953: ISAKMP:(14389):Sending an IKE IPv4 Packet.
Sep 13 04:27:32.953: ISAKMP:(14389):purging node -1993838501
Sep 13 04:27:32.953: ISAKMP:(14389):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
Sep 13 04:27:32.953: ISAKMP:(14389):Old State = IKE_P1_COMPLETE New State = IKE_DEST_SA
Sep 13 04:27:32.953: ISAKMP:(14389):deleting SA reason "IKE SA Lifetime Exceeded" state (I) QM_IDLE (peer 172.35.237.233)
Sep 13 04:27:32.953: ISAKMP: Unlocking peer struct 0x10D668C for isadb_mark_sa_deleted(), count 0
Sep 13 04:27:32.953: ISAKMP:(14389):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:27:32.953: ISAKMP:(14389):Old State = IKE_DEST_SA New State = IKE_DEST_SA
Sep 13 04:27:33.249: ISAKMP: ignoring request to send delete notify (no ISAKMP sa) src 172.34.47.57 dst 172.35.237.233 for SPI 0xF84E9858
Sep 13 04:27:36.129: ISAKMP:(14406):purging node -500665922
Sep 13 04:27:38.233: ISAKMP:(0): SA request profile is (NULL)
Sep 13 04:27:38.233: ISAKMP: Created a peer struct for 172.35.194.150, peer port 500
Sep 13 04:27:38.233: ISAKMP: New peer created peer = 0x12370108 peer_handle = 0x8000FFBF
Sep 13 04:27:38.233: ISAKMP: Locking peer struct 0x12370108, refcount 1 for isakmp_initiator
Sep 13 04:27:38.233: ISAKMP: local port 500, remote port 500
Sep 13 04:27:38.233: ISAKMP: set new node 0 to QM_IDLE
Sep 13 04:27:38.233: ISAKMP:(0):insert sa successfully sa = 4018B0F0
Sep 13 04:27:38.233: ISAKMP:(0):Can not start Aggressive mode, trying Main mode.
Sep 13 04:27:38.233: ISAKMP:(0):found peer pre-shared key matching 172.35.194.150
Sep 13 04:27:38.233: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID
Sep 13 04:27:38.233: ISAKMP:(0): constructed NAT-T vendor-07 ID
Sep 13 04:27:38.233: ISAKMP:(0): constructed NAT-T vendor-03 ID
Sep 13 04:27:38.233: ISAKMP:(0): constructed NAT-T vendor-02 ID
Sep 13 04:27:38.233: ISAKMP:(0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM
Sep 13 04:27:38.233: ISAKMP:(0):Old State = IKE_READY New State = IKE_I_MM1
Sep 13 04:27:38.233: ISAKMP:(0): beginning Main Mode exchange
Sep 13 04:27:38.233: ISAKMP:(0): sending packet to 172.35.194.150 my_port 500 peer_port 500 (I) MM_NO_STATE
Sep 13 04:27:38.233: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:27:39.129: ISAKMP:(0): SA request profile is (NULL)
Sep 13 04:27:39.129: ISAKMP: Found a peer struct for 172.34.47.146, peer port 500
Sep 13 04:27:39.129: ISAKMP: Locking peer struct 0x10E9688, refcount 1 for isakmp_initiator
Sep 13 04:27:39.129: ISAKMP: local port 500, remote port 500
Sep 13 04:27:39.129: ISAKMP: set new node 0 to QM_IDLE
Sep 13 04:27:39.129: ISAKMP:(0):insert sa successfully sa = 1F6EF24
Sep 13 04:27:39.129: ISAKMP:(0):Can not start Aggressive mode, trying Main mode.
Sep 13 04:27:39.129: ISAKMP:(0):found peer pre-shared key matching 172.34.47.146
Sep 13 04:27:39.129: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID
Sep 13 04:27:39.129: ISAKMP:(0): constructed NAT-T vendor-07 ID
Sep 13 04:27:39.129: ISAKMP:(0): constructed NAT-T vendor-03 ID
Sep 13 04:27:39.129: ISAKMP:(0): constructed NAT-T vendor-02 ID
Sep 13 04:27:39.129: ISAKMP:(0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM
Sep 13 04:27:39.129: ISAKMP:(0):Old State = IKE_READY New State = IKE_I_MM1
Sep 13 04:27:39.129: ISAKMP:(0): beginning Main Mode exchange
Sep 13 04:27:39.129: ISAKMP:(0): sending packet to 172.34.47.146 my_port 500 peer_port 500 (I) MM_NO_STATE
Sep 13 04:27:39.129: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:27:39.217: ISAKMP (0): received packet from 172.34.47.146 dport 500 sport 500 Global (I) MM_NO_STATE
Sep 13 04:27:39.217: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:27:39.217: ISAKMP:(0):Old State = IKE_I_MM1 New State = IKE_I_MM2
Sep 13 04:27:39.217: ISAKMP:(0): processing SA payload. message ID = 0
Sep 13 04:27:39.217: ISAKMP:(0): processing vendor id payload
Sep 13 04:27:39.217: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch
Sep 13 04:27:39.217: ISAKMP (0): vendor ID is NAT-T RFC 3947
Sep 13 04:27:39.217: ISAKMP:(0):found peer pre-shared key matching 172.34.47.146
Sep 13 04:27:39.217: ISAKMP:(0): local preshared key found
Sep 13 04:27:39.217: ISAKMP : Scanning profiles for xauth ...
Sep 13 04:27:39.217: ISAKMP:(0):Checking ISAKMP transform 1 against priority 30 policy
Sep 13 04:27:39.217: ISAKMP: encryption 3DES-CBC
Sep 13 04:27:39.217: ISAKMP: hash MD5
Sep 13 04:27:39.217: ISAKMP: default group 2
Sep 13 04:27:39.217: ISAKMP: auth pre-share
Sep 13 04:27:39.217: ISAKMP: life type in seconds
Sep 13 04:27:39.217: ISAKMP: life duration (basic) of 300
Sep 13 04:27:39.217: ISAKMP:(0):atts are acceptable. Next payload is 0
Sep 13 04:27:39.217: ISAKMP:(0):Acceptable atts:actual life: 0
Sep 13 04:27:39.217: ISAKMP:(0):Acceptable atts:life: 0
Sep 13 04:27:39.217: ISAKMP:(0):Basic life_in_seconds:300
Sep 13 04:27:39.217: ISAKMP:(0):Returning Actual lifetime: 300
Sep 13 04:27:39.217: ISAKMP:(0)::Started lifetime timer: 300.
Sep 13 04:27:39.217: ISAKMP:(0): processing vendor id payload
Sep 13 04:27:39.217: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch
Sep 13 04:27:39.217: ISAKMP (0): vendor ID is NAT-T RFC 3947
Sep 13 04:27:39.217: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Sep 13 04:27:39.217: ISAKMP:(0):Old State = IKE_I_MM2 New State = IKE_I_MM2
Sep 13 04:27:39.217: ISAKMP:(0): sending packet to 172.34.47.146 my_port 500 peer_port 500 (I) MM_SA_SETUP
Sep 13 04:27:39.217: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:27:39.217: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
Sep 13 04:27:39.217: ISAKMP:(0):Old State = IKE_I_MM2 New State = IKE_I_MM3
Sep 13 04:27:39.293: ISAKMP (0): received packet from 172.34.47.146 dport 500 sport 500 Global (I) MM_SA_SETUP
Sep 13 04:27:39.293: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:27:39.293: ISAKMP:(0):Old State = IKE_I_MM3 New State = IKE_I_MM4
Sep 13 04:27:39.293: ISAKMP:(0): processing KE payload. message ID = 0
Sep 13 04:27:39.293: ISAKMP:(0): processing NONCE payload. message ID = 0
Sep 13 04:27:39.293: ISAKMP:(0):found peer pre-shared key matching 172.34.47.146
Sep 13 04:27:39.293: ISAKMP:(14408): processing vendor id payload
Sep 13 04:27:39.293: ISAKMP:(14408): vendor ID is Unity
Sep 13 04:27:39.293: ISAKMP:(14408): processing vendor id payload
Sep 13 04:27:39.293: ISAKMP:(14408): vendor ID is DPD
Sep 13 04:27:39.293: ISAKMP:(14408): processing vendor id payload
Sep 13 04:27:39.293: ISAKMP:(14408): speaking to another IOS box!
Sep 13 04:27:39.293: ISAKMP:received payload type 20
Sep 13 04:27:39.293: ISAKMP (14408): His hash no match - this node outside NAT
Sep 13 04:27:39.293: ISAKMP:received payload type 20
Sep 13 04:27:39.293: ISAKMP (14408): No NAT Found for self or peer
Sep 13 04:27:39.293: ISAKMP:(14408):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Sep 13 04:27:39.297: ISAKMP:(14408):Old State = IKE_I_MM4 New State = IKE_I_MM4
Sep 13 04:27:39.297: ISAKMP:(14408):SA is doing pre-shared key authentication using id type ID_IPV4_ADDR
Sep 13 04:27:39.297: ISAKMP (14408): ID payload
next-payload : 8
type : 1
address : 172.34.47.57
protocol : 17
port : 500
length : 12
Sep 13 04:27:39.297: ISAKMP:(14408):Total payload length: 12
Sep 13 04:27:39.297: ISAKMP:(14408): sending packet to 172.34.47.146 my_port 500 peer_port 500 (I) MM_KEY_EXCH
Sep 13 04:27:39.297: ISAKMP:(14408):Sending an IKE IPv4 Packet.
Sep 13 04:27:39.297: ISAKMP:(14408):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
Sep 13 04:27:39.297: ISAKMP:(14408):Old State = IKE_I_MM4 New State = IKE_I_MM5
Sep 13 04:27:39.337: ISAKMP (14408): received packet from 172.34.47.146 dport 500 sport 500 Global (I) MM_KEY_EXCH
Sep 13 04:27:39.337: ISAKMP:(14408): processing ID payload. message ID = 0
Sep 13 04:27:39.337: ISAKMP (14408): ID payload
next-payload : 8
type : 1
address : 172.34.47.146
protocol : 17
port : 500
length : 12
Sep 13 04:27:39.337: ISAKMP:(0):: peer matches *none* of the profiles
Sep 13 04:27:39.337: ISAKMP:(14408): processing HASH payload. message ID = 0
Sep 13 04:27:39.337: ISAKMP:(14408):SA authentication status:
authenticated
Sep 13 04:27:39.337: ISAKMP:(14408):SA has been authenticated with 172.34.47.146
Sep 13 04:27:39.337: ISAKMP:(14408):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:27:39.337: ISAKMP:(14408):Old State = IKE_I_MM5 New State = IKE_I_MM6
Sep 13 04:27:39.337: ISAKMP:(14408):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Sep 13 04:27:39.337: ISAKMP:(14408):Old State = IKE_I_MM6 New State = IKE_I_MM6
Sep 13 04:27:39.337: ISAKMP:(14408):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
Sep 13 04:27:39.337: ISAKMP:(14408):Old State = IKE_I_MM6 New State = IKE_P1_COMPLETE
Sep 13 04:27:39.337: ISAKMP:(14408):beginning Quick Mode exchange, M-ID of 119951985
Sep 13 04:27:39.341: ISAKMP:(14408):QM Initiator gets spi
Sep 13 04:27:39.341: ISAKMP:(14408): sending packet to 172.34.47.146 my_port 500 peer_port 500 (I) QM_IDLE
Sep 13 04:27:39.341: ISAKMP:(14408):Sending an IKE IPv4 Packet.
Sep 13 04:27:39.341: ISAKMP:(14408):Node 119951985, Input = IKE_MESG_INTERNAL, IKE_INIT_QM
Sep 13 04:27:39.341: ISAKMP:(14408):Old State = IKE_QM_READY New State = IKE_QM_I_QM1
Sep 13 04:27:39.341: ISAKMP:(14408):Input = IKE_MESG_INTERNAL, IKE_PHASE1_COMPLETE
Sep 13 04:27:39.341: ISAKMP:(14408):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
Sep 13 04:27:39.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
Sep 13 04:27:39.349: ISAKMP (0): incrementing error counter on sa, attempt 1 of 5: retransmit phase 1
Sep 13 04:27:39.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
Sep 13 04:27:39.349: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE
Sep 13 04:27:39.349: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:27:39.437: ISAKMP (14408): received packet from 172.34.47.146 dport 500 sport 500 Global (I) QM_IDLE
Sep 13 04:27:39.437: ISAKMP:(14408): processing HASH payload. message ID = 119951985
Sep 13 04:27:39.437: ISAKMP:(14408): processing SA payload. message ID = 119951985
Sep 13 04:27:39.437: ISAKMP:(14408):Checking IPSec proposal 1
Sep 13 04:27:39.437: ISAKMP: transform 1, ESP_3DES
Sep 13 04:27:39.437: ISAKMP: attributes in transform:
Sep 13 04:27:39.437: ISAKMP: encaps is 1 (Tunnel)
Sep 13 04:27:39.437: ISAKMP: SA life type in seconds
Sep 13 04:27:39.437: ISAKMP: SA life duration (basic) of 300
Sep 13 04:27:39.437: ISAKMP: SA life type in kilobytes
Sep 13 04:27:39.437: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0
Sep 13 04:27:39.437: ISAKMP: authenticator is HMAC-MD5
Sep 13 04:27:39.437: ISAKMP: group is 2
Sep 13 04:27:39.437: ISAKMP:(14408):atts are acceptable.
Sep 13 04:27:39.437: ISAKMP:(14408): processing NONCE payload. message ID = 119951985
Sep 13 04:27:39.437: ISAKMP:(14408): processing KE payload. message ID = 119951985
Sep 13 04:27:39.441: ISAKMP:(14408): processing ID payload. message ID = 119951985
Sep 13 04:27:39.441: ISAKMP:(14408): processing ID payload. message ID = 119951985
Sep 13 04:27:39.441: ISAKMP:(14408): Creating IPSec SAs
Sep 13 04:27:39.441: inbound SA from 172.34.47.146 to 172.34.47.57 (f/i) 0/ 0
(proxy 172.16.1.0 to 0.0.0.0)
Sep 13 04:27:39.441: has spi 0x650E4D42 and conn_id 0
Sep 13 04:27:39.441: lifetime of 300 seconds
Sep 13 04:27:39.441: lifetime of 4608000 kilobytes
Sep 13 04:27:39.441: outbound SA from 172.34.47.57 to 172.34.47.146 (f/i) 0/0
(proxy 0.0.0.0 to 172.16.1.0)
Sep 13 04:27:39.441: has spi 0xDB5D5974 and conn_id 0
Sep 13 04:27:39.441: lifetime of 300 seconds
Sep 13 04:27:39.441: lifetime of 4608000 kilobytes
Sep 13 04:27:39.441: ISAKMP:(14408): sending packet to 172.34.47.146 my_port 500 peer_port 500 (I) QM_IDLE
Sep 13 04:27:39.441: ISAKMP:(14408):Sending an IKE IPv4 Packet.
Sep 13 04:27:39.441: ISAKMP:(14408):deleting node 119951985 error FALSE reason "No Error"
Sep 13 04:27:39.441: ISAKMP:(14408):Node 119951985, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:27:39.441: ISAKMP:(14408):Old State = IKE_QM_I_QM1 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 04:27:40.389: ISAKMP (0): received packet from 172.35.206.48 dport 500 sport 500 Global (N) NEW SA
Sep 13 04:27:40.389: ISAKMP: Found a peer struct for 172.35.206.48, peer port 500
Sep 13 04:27:40.389: ISAKMP: Locking peer struct 0x1E9F854, refcount 1 for crypto_isakmp_process_block
Sep 13 04:27:40.389: ISAKMP: local port 500, remote port 500
Sep 13 04:27:40.389: ISAKMP:(0):insert sa successfully sa = 411CEBDC
Sep 13 04:27:40.389: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:27:40.389: ISAKMP:(0):Old State = IKE_READY New State = IKE_R_MM1
Sep 13 04:27:40.389: ISAKMP:(0): processing SA payload. message ID = 0
Sep 13 04:27:40.389: ISAKMP:(0): processing vendor id payload
Sep 13 04:27:40.389: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch
Sep 13 04:27:40.389: ISAKMP (0): vendor ID is NAT-T RFC 3947
Sep 13 04:27:40.389: ISAKMP:(0): processing vendor id payload
Sep 13 04:27:40.389: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch
Sep 13 04:27:40.389: ISAKMP (0): vendor ID is NAT-T v7
Sep 13 04:27:40.389: ISAKMP:(0): processing vendor id payload
Sep 13 04:27:40.389: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch
Sep 13 04:27:40.389: ISAKMP:(0): vendor ID is NAT-T v3
Sep 13 04:27:40.389: ISAKMP:(0): processing vendor id payload
Sep 13 04:27:40.389: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch
Sep 13 04:27:40.389: ISAKMP:(0): vendor ID is NAT-T v2
Sep 13 04:27:40.389: ISAKMP:(0):found peer pre-shared key matching 172.35.206.48
Sep 13 04:27:40.389: ISAKMP:(0): local preshared key found
Sep 13 04:27:40.389: ISAKMP : Scanning profiles for xauth ...
Sep 13 04:27:40.389: ISAKMP:(0):Checking ISAKMP transform 1 against priority 30 policy
Sep 13 04:27:40.389: ISAKMP: encryption 3DES-CBC
Sep 13 04:27:40.389: ISAKMP: hash MD5
Sep 13 04:27:40.389: ISAKMP: default group 2
Sep 13 04:27:40.389: ISAKMP: auth pre-share
Sep 13 04:27:40.389: ISAKMP: life type in seconds
Sep 13 04:27:40.389: ISAKMP: life duration (basic) of 300
Sep 13 04:27:40.389: ISAKMP:(0):atts are acceptable. Next payload is 0
Sep 13 04:27:40.389: ISAKMP:(0):Acceptable atts:actual life: 0
Sep 13 04:27:40.389: ISAKMP:(0):Acceptable atts:life: 0
Sep 13 04:27:40.389: ISAKMP:(0):Basic life_in_seconds:300
Sep 13 04:27:40.389: ISAKMP:(0):Returning Actual lifetime: 300
Sep 13 04:27:40.389: ISAKMP:(0)::Started lifetime timer: 300.
Sep 13 04:27:40.389: ISAKMP:(0): processing vendor id payload
Sep 13 04:27:40.389: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch
Sep 13 04:27:40.389: ISAKMP (0): vendor ID is NAT-T RFC 3947
Sep 13 04:27:40.389: ISAKMP:(0): processing vendor id payload
Sep 13 04:27:40.389: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch
Sep 13 04:27:40.389: ISAKMP (0): vendor ID is NAT-T v7
Sep 13 04:27:40.389: ISAKMP:(0): processing vendor id payload
Sep 13 04:27:40.389: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch
Sep 13 04:27:40.389: ISAKMP:(0): vendor ID is NAT-T v3
Sep 13 04:27:40.389: ISAKMP:(0): processing vendor id payload
Sep 13 04:27:40.389: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch
Sep 13 04:27:40.389: ISAKMP:(0): vendor ID is NAT-T v2
Sep 13 04:27:40.389: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Sep 13 04:27:40.389: ISAKMP:(0):Old State = IKE_R_MM1 New State = IKE_R_MM1
Sep 13 04:27:40.389: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID
Sep 13 04:27:40.389: ISAKMP:(0): sending packet to 172.35.206.48 my_port 500 peer_port 500 (R) MM_SA_SETUP
Sep 13 04:27:40.389: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:27:40.389: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
Sep 13 04:27:40.389: ISAKMP:(0):Old State = IKE_R_MM1 New State = IKE_R_MM2
Sep 13 04:27:40.473: ISAKMP (0): received packet from 172.35.206.48 dport 500 sport 500 Global (R) MM_SA_SETUP
Sep 13 04:27:40.473: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:27:40.473: ISAKMP:(0):Old State = IKE_R_MM2 New State = IKE_R_MM3
Sep 13 04:27:40.473: ISAKMP:(0): processing KE payload. message ID = 0
Sep 13 04:27:40.473: ISAKMP:(0): processing NONCE payload. message ID = 0
Sep 13 04:27:40.473: ISAKMP:(0):found peer pre-shared key matching 172.35.206.48
Sep 13 04:27:40.473: ISAKMP:(14409): processing vendor id payload
Sep 13 04:27:40.473: ISAKMP:(14409): vendor ID is DPD
Sep 13 04:27:40.473: ISAKMP:(14409): processing vendor id payload
Sep 13 04:27:40.473: ISAKMP:(14409): speaking to another IOS box!
Sep 13 04:27:40.473: ISAKMP:(14409): processing vendor id payload
Sep 13 04:27:40.473: ISAKMP:(14409): vendor ID seems Unity/DPD but major 129 mismatch
Sep 13 04:27:40.473: ISAKMP:(14409): vendor ID is XAUTH
Sep 13 04:27:40.473: ISAKMP:received payload type 20
Sep 13 04:27:40.473: ISAKMP (14409): His hash no match - this node outside NAT
Sep 13 04:27:40.473: ISAKMP:received payload type 20
Sep 13 04:27:40.477: ISAKMP (14409): No NAT Found for self or peer
Sep 13 04:27:40.477: ISAKMP:(14409):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Sep 13 04:27:40.477: ISAKMP:(14409):Old State = IKE_R_MM3 New State = IKE_R_MM3
Sep 13 04:27:40.477: ISAKMP:(14409): sending packet to 172.35.206.48 my_port 500 peer_port 500 (R) MM_KEY_EXCH
Sep 13 04:27:40.477: ISAKMP:(14409):Sending an IKE IPv4 Packet.
Sep 13 04:27:40.477: ISAKMP:(14409):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
Sep 13 04:27:40.677: ISAKMP:(14387):purging SA., sa=40177E8C, delme=40177E8C
Sep 13 04:27:40.741: ISAKMP (14409): received packet from 172.35.206.48 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:27:40.741: ISAKMP:(14409):deleting node 1404442059 error FALSE reason "QM done (await)"
Sep 13 04:27:40.741: ISAKMP:(14409):Node 1404442059, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:27:40.741: ISAKMP:(14409):Old State = IKE_QM_R_QM2 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 04:27:42.145: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...
Sep 13 04:27:42.145: ISAKMP:(0):peer does not do paranoid keepalives.
Sep 13 04:27:42.145: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (R) MM_SA_SETUP (peer 172.35.200.87)
Sep 13 04:27:42.145: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (R) MM_SA_SETUP (peer 172.35.200.87)
Sep 13 04:27:42.145: ISAKMP: Unlocking peer struct 0x134DB41C for isadb_mark_sa_deleted(), count 0
Sep 13 04:27:42.145: ISAKMP: Deleting peer node by peer_reap for 172.35.200.87: 134DB41C
Sep 13 04:27:42.145: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
Sep 13 04:27:42.145: ISAKMP:(0):Old State = IKE_R_MM2 New State = IKE_DEST_SA
Sep 13 04:27:42.569: ISAKMP:(0):purging SA., sa=411BD47C, delme=411BD47C
Sep 13 04:27:42.737: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (N) NEW SA
Sep 13 04:27:42.737: ISAKMP: Created a peer struct for 172.35.200.87, peer port 500
Sep 13 04:27:42.737: ISAKMP: New peer created peer = 0x411472DC peer_handle = 0x800104D2
Sep 13 04:27:42.737: ISAKMP: Locking peer struct 0x411472DC, refcount 1 for crypto_isakmp_process_block
Sep 13 04:27:42.737: ISAKMP: local port 500, remote port 500
Sep 13 04:27:42.737: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
Sep 13 04:27:42.737: ISAKMP:(0):Old State = IKE_R_MM1 New State = IKE_R_MM2
Sep 13 04:27:44.397: ISAKMP:(14389):purging node -595111776
Sep 13 04:27:48.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
Sep 13 04:27:48.233: ISAKMP (0): incrementing error counter on sa, attempt 1 of 5: retransmit phase 1
Sep 13 04:27:48.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
Sep 13 04:27:48.233: ISAKMP:(0): sending packet to 172.35.194.150 my_port 500 peer_port 500 (I) MM_NO_STATE
Sep 13 04:27:48.233: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:27:49.105: ISAKMP (14391): received packet from 172.35.194.155 dport 500 sport 500 Global (I) QM_IDLE
Sep 13 04:27:49.105: ISAKMP: set new node 1659709134 to QM_IDLE
Sep 13 04:27:49.105: ISAKMP:(14391): processing HASH payload. message ID = 1659709134
Sep 13 04:27:49.105: ISAKMP:(14391): processing SA payload. message ID = 1659709134
Sep 13 04:27:49.105: ISAKMP:(14391):Checking IPSec proposal 1
Sep 13 04:27:49.105: ISAKMP: transform 1, ESP_3DES
Sep 13 04:27:49.105: ISAKMP: attributes in transform:
Sep 13 04:27:49.105: ISAKMP: encaps is 1 (Tunnel)
Sep 13 04:27:49.105: ISAKMP: SA life type in seconds
Sep 13 04:27:49.105: ISAKMP: SA life duration (basic) of 300
Sep 13 04:27:49.105: ISAKMP: SA life type in kilobytes
Sep 13 04:27:49.105: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0
Sep 13 04:27:49.105: ISAKMP: authenticator is HMAC-MD5
Sep 13 04:27:49.105: ISAKMP: group is 2
Sep 13 04:27:49.105: ISAKMP:(14391):atts are acceptable.
Sep 13 04:27:49.105: ISAKMP:(14391): processing NONCE payload. message ID = 1659709134
Sep 13 04:27:49.105: ISAKMP:(14391): processing KE payload. message ID = 1659709134
Sep 13 04:27:49.109: ISAKMP:(14391): processing ID payload. message ID = 1659709134
Sep 13 04:27:49.109: ISAKMP:(14391): processing ID payload. message ID = 1659709134
Sep 13 04:27:49.109: ISAKMP:(14391):QM Responder gets spi
Sep 13 04:27:49.109: ISAKMP:(14391):Node 1659709134, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:27:49.109: ISAKMP:(14391):Old State = IKE_QM_READY New State = IKE_QM_SPI_STARVE
Sep 13 04:27:49.109: ISAKMP:(14391): Creating IPSec SAs
Sep 13 04:27:49.109: inbound SA from 172.35.194.155 to 172.34.47.57 (f/i) 0/ 0
(proxy 172.20.15.0 to 0.0.0.0)
Sep 13 04:27:49.109: has spi 0x1EA3FBBE and conn_id 0
Sep 13 04:27:49.109: lifetime of 300 seconds
Sep 13 04:27:49.109: lifetime of 4608000 kilobytes
Sep 13 04:27:49.109: outbound SA from 172.34.47.57 to 172.35.194.155 (f/i) 0/0
(proxy 0.0.0.0 to 172.20.15.0)
Sep 13 04:27:49.109: has spi 0xFD092D0D and conn_id 0
Sep 13 04:27:49.109: lifetime of 300 seconds
Sep 13 04:27:49.109: lifetime of 4608000 kilobytes
Sep 13 04:27:49.109: ISAKMP:(14391): sending packet to 172.35.194.155 my_port 500 peer_port 500 (I) QM_IDLE
Sep 13 04:27:49.109: ISAKMP:(14391):Sending an IKE IPv4 Packet.
Sep 13 04:27:49.109: ISAKMP:(14391):Node 1659709134, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI
Sep 13 04:27:49.109: ISAKMP:(14391):Old State = IKE_QM_SPI_STARVE New State = IKE_QM_R_QM2
Sep 13 04:27:49.201: ISAKMP (14391): received packet from 172.35.194.155 dport 500 sport 500 Global (I) QM_IDLE
Sep 13 04:27:49.201: ISAKMP:(14391):deleting node 1659709134 error FALSE reason "QM done (await)"
Sep 13 04:27:49.201: ISAKMP:(14391):Node 1659709134, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:27:49.201: ISAKMP:(14391):Old State = IKE_QM_R_QM2 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 04:27:49.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
Sep 13 04:27:49.349: ISAKMP (0): incrementing error counter on sa, attempt 2 of 5: retransmit phase 1
Sep 13 04:27:49.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
Sep 13 04:27:49.349: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE
Sep 13 04:27:49.349: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:27:52.733: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP
Sep 13 04:27:52.733: ISAKMP:(0): phase 1 packet is a duplicate of a previous packet.
Sep 13 04:27:52.733: ISAKMP:(0): retransmitting due to retransmit phase 1
Sep 13 04:27:53.233: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...
Sep 13 04:27:53.233: ISAKMP (0): incrementing error counter on sa, attempt 1 of 5: retransmit phase 1
Sep 13 04:27:53.233: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP
Sep 13 04:27:53.233: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP
Sep 13 04:27:53.233: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:27:55.933: ISAKMP (14390): received packet from 172.35.200.88 dport 500 sport 500 Global (I) QM_IDLE
Sep 13 04:27:55.933: ISAKMP: set new node 8155520 to QM_IDLE
Sep 13 04:27:55.933: ISAKMP:(14390): processing HASH payload. message ID = 8155520
Sep 13 04:27:55.933: ISAKMP:received payload type 18
Sep 13 04:27:55.933: ISAKMP:(14390):Processing delete with reason payload
Sep 13 04:27:55.933: ISAKMP:(14390):delete doi = 1
Sep 13 04:27:55.933: ISAKMP:(14390):delete protocol id = 1
Sep 13 04:27:55.933: ISAKMP:(14390):delete spi_size = 16
Sep 13 04:27:55.933: ISAKMP:(14390):delete num spis = 1
Sep 13 04:27:55.933: ISAKMP:(14390):delete_reason = 10
Sep 13 04:27:55.933: ISAKMP:(14390): processing DELETE_WITH_REASON payload, message ID = 8155520, reason: Unknown delete reason!
Sep 13 04:27:55.933: ISAKMP:(14390):peer does not do paranoid keepalives.
Sep 13 04:27:55.933: ISAKMP:(14390):deleting SA reason "IKE SA Lifetime Exceeded" state (I) QM_IDLE (peer 172.35.200.88)
Sep 13 04:27:55.933: ISAKMP:(14390):deleting node 8155520 error FALSE reason "Informational (in) state 1"
Sep 13 04:27:55.933: ISAKMP: set new node -797376214 to QM_IDLE
Sep 13 04:27:55.933: ISAKMP:(14390): sending packet to 172.35.200.88 my_port 500 peer_port 500 (I) QM_IDLE
Sep 13 04:27:55.933: ISAKMP:(14390):Sending an IKE IPv4 Packet.
Sep 13 04:27:55.933: ISAKMP:(14390):purging node -797376214
Sep 13 04:27:55.933: ISAKMP:(14390):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
Sep 13 04:27:55.933: ISAKMP:(14390):Old State = IKE_P1_COMPLETE New State = IKE_DEST_SA
Sep 13 04:27:55.933: ISAKMP:(14390):deleting SA reason "IKE SA Lifetime Exceeded" state (I) QM_IDLE (peer 172.35.200.88)
Sep 13 04:27:55.933: ISAKMP: Unlocking peer struct 0x40176A60 for isadb_mark_sa_deleted(), count 0
Sep 13 04:27:55.933: ISAKMP:(14390):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:27:55.933: ISAKMP:(14390):Old State = IKE_DEST_SA New State = IKE_DEST_SA
Sep 13 04:27:56.689: ISAKMP (14407): received packet from 172.35.194.145 dport 500 sport 500 Global (I) QM_IDLE
Sep 13 04:27:56.689: ISAKMP: set new node -2143616241 to QM_IDLE
Sep 13 04:27:56.689: ISAKMP:(14407): processing HASH payload. message ID = 2151351055
Sep 13 04:27:56.689: ISAKMP:(14407): processing DELETE payload. message ID = 2151351055
Sep 13 04:27:56.689: ISAKMP:(14407):peer does not do paranoid keepalives.
Sep 13 04:27:56.689: ISAKMP:(14407):deleting node -2143616241 error FALSE reason "Informational (in) state 1"
Sep 13 04:27:56.921: ISAKMP: ignoring request to send delete notify (no ISAKMP sa) src 172.34.47.57 dst 172.35.200.88 for SPI 0x51E70BCC
Sep 13 04:27:58.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
Sep 13 04:27:58.233: ISAKMP (0): incrementing error counter on sa, attempt 2 of 5: retransmit phase 1
Sep 13 04:27:58.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
Sep 13 04:27:58.233: ISAKMP:(0): sending packet to 172.35.194.150 my_port 500 peer_port 500 (I) MM_NO_STATE
Sep 13 04:27:58.233: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:27:58.313: ISAKMP:(14388):purging SA., sa=411CFB24, delme=411CFB24
Sep 13 04:27:59.345: ISAKMP: set new node 0 to QM_IDLE
Sep 13 04:27:59.345: ISAKMP:(0):SA is still budding. Attached new ipsec request to it. (local 172.34.47.57, remote 172.35.200.87)
Sep 13 04:27:59.345: ISAKMP: Error while processing SA request: Failed to initialize SA
Sep 13 04:27:59.345: ISAKMP: Error while processing KMI message 0, error 2.
Sep 13 04:27:59.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
Sep 13 04:27:59.349: ISAKMP (0): incrementing error counter on sa, attempt 3 of 5: retransmit phase 1
Sep 13 04:27:59.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
Sep 13 04:27:59.349: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE
Sep 13 04:27:59.349: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:28:02.733: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP
Sep 13 04:28:02.733: ISAKMP:(0): phase 1 packet is a duplicate of a previous packet.
Sep 13 04:28:02.733: ISAKMP:(0): retransmitting due to retransmit phase 1
Sep 13 04:28:03.233: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...
Sep 13 04:28:03.233: ISAKMP (0): incrementing error counter on sa, attempt 2 of 5: retransmit phase 1
Sep 13 04:28:03.233: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP
Sep 13 04:28:03.233: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP
Sep 13 04:28:03.233: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:28:07.489: ISAKMP:(14390):purging node -1766959579
Sep 13 04:28:08.233: ISAKMP: set new node 0 to QM_IDLE
Sep 13 04:28:08.233: ISAKMP:(0):SA is still budding. Attached new ipsec request to it. (local 172.34.47.57, remote 172.35.194.150)
Sep 13 04:28:08.233: ISAKMP: Error while processing SA request: Failed to initialize SA
Sep 13 04:28:08.233: ISAKMP: Error while processing KMI message 0, error 2.
Sep 13 04:28:08.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
Sep 13 04:28:08.233: ISAKMP (0): incrementing error counter on sa, attempt 3 of 5: retransmit phase 1
Sep 13 04:28:08.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
Sep 13 04:28:08.233: ISAKMP:(0): sending packet to 172.35.194.150 my_port 500 peer_port 500 (I) MM_NO_STATE
Sep 13 04:28:08.233: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:28:09.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
Sep 13 04:28:09.349: ISAKMP (0): incrementing error counter on sa, attempt 4 of 5: retransmit phase 1
Sep 13 04:28:09.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
Sep 13 04:28:09.349: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE
Sep 13 04:28:09.349: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:28:11.669: ISAKMP:(14407):purging node 737401177
Sep 13 04:28:12.565: ISAKMP (0): received packet from 172.35.200.91 dport 500 sport 500 Global (N) NEW SA
Sep 13 04:28:12.565: ISAKMP: Created a peer struct for 172.35.200.91, peer port 500
Sep 13 04:28:12.565: ISAKMP: New peer created peer = 0x134E3340 peer_handle = 0x8000F1E6
Sep 13 04:28:12.565: ISAKMP: Locking peer struct 0x134E3340, refcount 1 for crypto_isakmp_process_block
Sep 13 04:28:12.565: ISAKMP: local port 500, remote port 500
Sep 13 04:28:12.565: ISAKMP:(0):insert sa successfully sa = 411BD47C
Sep 13 04:28:12.565: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:28:12.565: ISAKMP:(0):Old State = IKE_READY New State = IKE_R_MM1
Sep 13 04:28:12.565: ISAKMP:(0): processing SA payload. message ID = 0
Sep 13 04:28:12.565: ISAKMP:(0): processing vendor id payload
Sep 13 04:28:12.565: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch
Sep 13 04:28:12.565: ISAKMP (0): vendor ID is NAT-T RFC 3947
Sep 13 04:28:12.565: ISAKMP:(0): processing vendor id payload
Sep 13 04:28:12.565: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch
Sep 13 04:28:12.565: ISAKMP (0): vendor ID is NAT-T v7
Sep 13 04:28:12.565: ISAKMP:(0): processing vendor id payload
Sep 13 04:28:12.565: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch
Sep 13 04:28:12.565: ISAKMP:(0): vendor ID is NAT-T v3
Sep 13 04:28:12.565: ISAKMP:(0): processing vendor id payload
Sep 13 04:28:12.565: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch
Sep 13 04:28:12.565: ISAKMP:(0): vendor ID is NAT-T v2
Sep 13 04:28:12.565: ISAKMP:(0):No pre-shared key with 172.35.200.91!
Sep 13 04:28:12.565: ISAKMP : Scanning profiles for xauth ...
Sep 13 04:28:12.565: ISAKMP:(0):Checking ISAKMP transform 1 against priority 30 policy
Sep 13 04:28:12.565: ISAKMP: encryption 3DES-CBC
Sep 13 04:28:12.565: ISAKMP: hash MD5
Sep 13 04:28:12.565: ISAKMP: default group 2
Sep 13 04:28:12.565: ISAKMP: auth pre-share
Sep 13 04:28:12.565: ISAKMP: life type in seconds
Sep 13 04:28:12.565: ISAKMP: life duration (basic) of 300
Sep 13 04:28:12.565: ISAKMP:(0):Preshared authentication offered but does not match policy!
Sep 13 04:28:12.565: ISAKMP:(0):atts are not acceptable. Next payload is 0
Sep 13 04:28:12.565: ISAKMP:(0):no offers accepted!
Sep 13 04:28:12.565: ISAKMP:(0): phase 1 SA policy not acceptable! (local 172.34.47.57 remote 172.35.200.91)
Sep 13 04:28:12.565: ISAKMP (0): incrementing error counter on sa, attempt 1 of 5: construct_fail_ag_init
Sep 13 04:28:12.565: ISAKMP:(0): Failed to construct AG informational message.
Sep 13 04:28:12.565: ISAKMP:(0): sending packet to 172.35.200.91 my_port 500 peer_port 500 (R) MM_NO_STATE
Sep 13 04:28:12.565: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:28:12.565: ISAKMP:(0):peer does not do paranoid keepalives.
Sep 13 04:28:12.565: ISAKMP:(0):deleting SA reason "Phase1 SA policy proposal not accepted" state (R) MM_NO_STATE (peer 172.35.200.91)
Sep 13 04:28:12.565: ISAKMP:(0): processing vendor id payload
Sep 13 04:28:12.565: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch
Sep 13 04:28:12.565: ISAKMP (0): vendor ID is NAT-T RFC 3947
Sep 13 04:28:12.565: ISAKMP:(0): processing vendor id payload
Sep 13 04:28:12.565: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch
Sep 13 04:28:12.565: ISAKMP (0): vendor ID is NAT-T v7
Sep 13 04:28:12.565: ISAKMP:(0): processing vendor id payload
Sep 13 04:28:12.565: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch
Sep 13 04:28:12.565: ISAKMP:(0): vendor ID is NAT-T v3
Sep 13 04:28:12.565: ISAKMP:(0): processing vendor id payload
Sep 13 04:28:12.565: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch
Sep 13 04:28:12.565: ISAKMP:(0): vendor ID is NAT-T v2
Sep 13 04:28:12.565: ISAKMP (0): FSM action returned error: 2
Sep 13 04:28:12.565: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Sep 13 04:28:12.565: ISAKMP:(0):Old State = IKE_R_MM1 New State = IKE_R_MM1
Sep 13 04:28:12.565: ISAKMP:(0):deleting SA reason "Phase1 SA policy proposal not accepted" state (R) MM_NO_STATE (peer 172.35.200.91)
Sep 13 04:28:12.565: ISAKMP: Unlocking peer struct 0x134E3340 for isadb_mark_sa_deleted(), count 0
Sep 13 04:28:12.565: ISAKMP: Deleting peer node by peer_reap for 172.35.200.91: 134E3340
Sep 13 04:28:12.565: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
Sep 13 04:28:12.565: ISAKMP:(0):Old State = IKE_R_MM1 New State = IKE_DEST_SA
Sep 13 04:28:12.733: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP
Sep 13 04:28:12.733: ISAKMP:(0): phase 1 packet is a duplicate of a previous packet.
Sep 13 04:28:12.733: ISAKMP:(0): retransmitting due to retransmit phase 1
Sep 13 04:28:12.933: ISAKMP (14392): received packet from 172.35.200.97 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:28:12.933: ISAKMP: set new node 2101687451 to QM_IDLE
Sep 13 04:28:12.933: ISAKMP:(14392): processing HASH payload. message ID = 2101687451
Sep 13 04:28:12.933: ISAKMP:(14392): processing SA payload. message ID = 2101687451
Sep 13 04:28:12.933: ISAKMP:(14392):Checking IPSec proposal 1
Sep 13 04:28:12.933: ISAKMP: transform 1, ESP_3DES
Sep 13 04:28:12.933: ISAKMP: attributes in transform:
Sep 13 04:28:12.933: ISAKMP: encaps is 1 (Tunnel)
Sep 13 04:28:12.933: ISAKMP: SA life type in seconds
Sep 13 04:28:12.933: ISAKMP: SA life duration (basic) of 300
Sep 13 04:28:12.933: ISAKMP: SA life type in kilobytes
Sep 13 04:28:12.933: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0
Sep 13 04:28:12.933: ISAKMP: authenticator is HMAC-MD5
Sep 13 04:28:12.933: ISAKMP: group is 2
Sep 13 04:28:12.933: ISAKMP:(14392):atts are acceptable.
Sep 13 04:28:12.933: ISAKMP:(14392): processing NONCE payload. message ID = 2101687451
Sep 13 04:28:12.933: ISAKMP:(14392): processing KE payload. message ID = 2101687451
Sep 13 04:28:12.937: ISAKMP:(14392): processing ID payload. message ID = 2101687451
Sep 13 04:28:12.937: ISAKMP:(14392): processing ID payload. message ID = 2101687451
Sep 13 04:28:12.937: ISAKMP:(14392):QM Responder gets spi
Sep 13 04:28:12.937: ISAKMP:(14392):Node 2101687451, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:28:12.937: ISAKMP:(14392):Old State = IKE_QM_READY New State = IKE_QM_SPI_STARVE
Sep 13 04:28:12.937: ISAKMP:(14392): Creating IPSec SAs
Sep 13 04:28:12.937: inbound SA from 172.35.200.97 to 172.34.47.57 (f/i) 0/ 0
(proxy 172.16.51.0 to 0.0.0.0)
Sep 13 04:28:12.937: has spi 0x62BB1BC1 and conn_id 0
Sep 13 04:28:12.937: lifetime of 300 seconds
Sep 13 04:28:12.937: lifetime of 4608000 kilobytes
Sep 13 04:28:12.937: outbound SA from 172.34.47.57 to 172.35.200.97 (f/i) 0/0
(proxy 0.0.0.0 to 172.16.51.0)
Sep 13 04:28:12.937: has spi 0xC7740464 and conn_id 0
Sep 13 04:28:12.937: lifetime of 300 seconds
Sep 13 04:28:12.937: lifetime of 4608000 kilobytes
Sep 13 04:28:12.937: ISAKMP:(14392): sending packet to 172.35.200.97 my_port 500 peer_port 500 (R) QM_IDLE
Sep 13 04:28:12.937: ISAKMP:(14392):Sending an IKE IPv4 Packet.
Sep 13 04:28:12.937: ISAKMP:(14392):Node 2101687451, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI
Sep 13 04:28:12.941: ISAKMP:(14392):Old State = IKE_QM_SPI_STARVE New State = IKE_QM_R_QM2
Sep 13 04:28:13.017: ISAKMP (14392): received packet from 172.35.200.97 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:28:13.017: ISAKMP:(14392):deleting node 2101687451 error FALSE reason "QM done (await)"
Sep 13 04:28:13.017: ISAKMP:(14392):Node 2101687451, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:28:13.017: ISAKMP:(14392):Old State = IKE_QM_R_QM2 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 04:28:13.233: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...
Sep 13 04:28:13.233: ISAKMP (0): incrementing error counter on sa, attempt 3 of 5: retransmit phase 1
Sep 13 04:28:13.233: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP
Sep 13 04:28:13.233: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP
Sep 13 04:28:13.233: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:28:14.841: ISAKMP:(14406):purging node -1746108638
Sep 13 09:58:15: %CRYPTO-4-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet. (ip) vrf/dest_addr= /172.16.102.25, src_addr= 18:17.833: ISAKMP:(14393):atts are acceptable.
Sep 13 04:28:17.833: ISAKMP:(14393): processing NONCE payload. message ID = 1434815361
Sep 13 04:28:17.833: ISAKMP:(14393): processing KE payload. message ID = 1434815361
Sep 13 04:28:17.837: ISAKMP:(14393): processing ID payload. message ID = 1434815361
Sep 13 04:28:17.837: ISAKMP:(14393): processing ID payload. message ID = 1434815361
Sep 13 04:28:17.837: ISAKMP:(14393):QM Responder gets spi
Sep 13 04:28:17.837: ISAKMP:(14393):Node 1434815361, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:28:17.837: ISAKMP:(14393):Old State = IKE_QM_READY New State = IKE_QM_SPI_STARVE
Sep 13 04:28:17.837: ISAKMP:(14393): Creating IPSec SAs
Sep 13 04:28:17.837: inbound SA from 172.34.48.125 to 172.34.47.57 (f/i) 0/ 0
(proxy 172.16.25.0 to 0.0.0.0)
Sep 13 04:28:17.837: has spi 0x6822241D and conn_id 0
Sep 13 04:28:17.837: lifetime of 300 seconds
Sep 13 04:28:17.837: lifetime of 4608000 kilobytes
Sep 13 04:28:17.837: outbound SA from 172.34.47.57 to 172.34.48.125 (f/i) 0/0
(proxy 0.0.0.0 to 172.16.25.0)
Sep 13 04:28:17.837: has spi 0x6B854CE0 and conn_id 0
Sep 13 04:28:17.837: lifetime of 300 seconds
Sep 13 04:28:17.837: lifetime of 4608000 kilobytes
Sep 13 04:28:17.837: ISAKMP:(14393): sending packet to 172.34.48.125 my_port 500 peer_port 500 (R) QM_IDLE
Sep 13 04:28:17.837: ISAKMP:(14393):Sending an IKE IPv4 Packet.
Sep 13 04:28:17.837: ISAKMP:(14393):Node 1434815361, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI
Sep 13 04:28:17.837: ISAKMP:(14393):Old State = IKE_QM_SPI_STARVE New State = IKE_QM_R_QM2
Sep 13 04:28:17.925: ISAKMP (14393): received packet from 172.34.48.125 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:28:17.925: ISAKMP:(14393):deleting node 1434815361 error FALSE reason "QM done (await)"
Sep 13 04:28:17.925: ISAKMP:(14393):Node 1434815361, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:28:17.925: ISAKMP:(14393):Old State = IKE_QM_R_QM2 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 04:28:18.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
Sep 13 04:28:18.233: ISAKMP (0): incrementing error counter on sa, attempt 4 of 5: retransmit phase 1
Sep 13 04:28:18.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
Sep 13 04:28:18.233: ISAKMP:(0): sending packet to 172.35.194.150 my_port 500 peer_port 500 (I) MM_NO_STATE
Sep 13 04:28:18.233: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:28:18.845: ISAKMP:(0):purging node 1013205142
Sep 13 04:28:18.845: ISAKMP:(0):purging node -1738356762
Sep 13 04:28:19.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
Sep 13 04:28:19.349: ISAKMP (0): incrementing error counter on sa, attempt 5 of 5: retransmit phase 1
Sep 13 04:28:19.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
Sep 13 04:28:19.349: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE
Sep 13 04:28:19.349: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:28:21.845: ISAKMP (14408): received packet from 172.34.47.146 dport 500 sport 500 Global (I) QM_IDLE
Sep 13 04:28:21.845: ISAKMP: set new node -1862940807 to QM_IDLE
Sep 13 04:28:21.845: ISAKMP:(14408): processing HASH payload. message ID = 2432026489
Sep 13 04:28:21.849: ISAKMP:(14408): processing DELETE payload. message ID = 2432026489
Sep 13 04:28:21.849: ISAKMP:(14408):peer does not do paranoid keepalives.
Sep 13 04:28:21.849: ISAKMP:(14408):deleting node -1862940807 error FALSE reason "Informational (in) state 1"
Sep 13 04:28:22.565: ISAKMP (0): received packet from 172.35.200.91 dport 500 sport 500 Global (R) MM_NO_STATE
Sep 13 04:28:22.733: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP
Sep 13 04:28:22.733: ISAKMP:(0): phase 1 packet is a duplicate of a previous packet.
Sep 13 04:28:22.733: ISAKMP:(0): retransmitting due to retransmit phase 1
Sep 13 04:28:22.953: ISAKMP:(14389):purging node 299600500
Sep 13 04:28:23.233: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...
Sep 13 04:28:23.233: ISAKMP (0): incrementing error counter on sa, attempt 4 of 5: retransmit phase 1
Sep 13 04:28:23.233: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP
Sep 13 04:28:23.233: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP
Sep 13 04:28:23.233: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:28:23.241: ISAKMP: set new node 1045526343 to QM_IDLE
Sep 13 04:28:23.241: ISAKMP:(14409): sending packet to 172.35.206.48 my_port 500 peer_port 500 (R) QM_IDLE
Sep 13 04:28:23.241: ISAKMP:(14409):Sending an IKE IPv4 Packet.
Sep 13 04:28:23.241: ISAKMP:(14409):purging node 1045526343
Sep 13 04:28:23.241: ISAKMP:(14409):Input = IKE_MESG_FROM_IPSEC, IKE_PHASE2_DEL
Sep 13 04:28:23.241: ISAKMP:(14409):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
Sep 13 04:28:27.125: ISAKMP (14394): received packet from 172.35.194.115 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:28:27.125: ISAKMP: set new node -318471219 to QM_IDLE
Sep 13 04:28:27.125: ISAKMP:(14394): processing HASH payload. message ID = 3976496077
Sep 13 04:28:27.125: ISAKMP:(14394): processing SA payload. message ID = 3976496077
Sep 13 04:28:27.125: ISAKMP:(14394):Checking IPSec proposal 1
Sep 13 04:28:27.125: ISAKMP: transform 1, ESP_3DES
Sep 13 04:28:27.125: ISAKMP: attributes in transform:
Sep 13 04:28:27.125: ISAKMP: encaps is 1 (Tunnel)
Sep 13 04:28:27.125: ISAKMP: SA life type in seconds
Sep 13 04:28:27.125: ISAKMP: SA life duration (basic) of 300
Sep 13 04:28:27.125: ISAKMP: SA life type in kilobytes
Sep 13 04:28:27.125: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0
Sep 13 04:28:27.125: ISAKMP: authenticator is HMAC-MD5
Sep 13 04:28:27.125: ISAKMP: group is 2
Sep 13 04:28:27.125: ISAKMP:(14394):atts are acceptable.
Sep 13 04:28:27.125: ISAKMP:(14394): processing NONCE payload. message ID = 3976496077
Sep 13 04:28:27.125: ISAKMP:(14394): processing KE payload. message ID = 3976496077
Sep 13 04:28:27.129: ISAKMP:(14394): processing ID payload. message ID = 3976496077
Sep 13 04:28:27.129: ISAKMP:(14394): processing ID payload. message ID = 3976496077
Sep 13 04:28:27.129: ISAKMP:(14394):QM Responder gets spi
Sep 13 04:28:27.129: ISAKMP:(14394):Node 3976496077, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:28:27.129: ISAKMP:(14394):Old State = IKE_QM_READY New State = IKE_QM_SPI_STARVE
Sep 13 04:28:27.129: ISAKMP:(14394): Creating IPSec SAs
Sep 13 04:28:27.129: inbound SA from 172.35.194.115 to 172.34.47.57 (f/i) 0/ 0
(proxy 172.20.5.0 to 0.0.0.0)
Sep 13 04:28:27.129: has spi 0x41FB5E5B and conn_id 0
Sep 13 04:28:27.129: lifetime of 300 seconds
Sep 13 04:28:27.129: lifetime of 4608000 kilobytes
Sep 13 04:28:27.129: outbound SA from 172.34.47.57 to 172.35.194.115 (f/i) 0/0
(proxy 0.0.0.0 to 172.20.5.0)
Sep 13 04:28:27.129: has spi 0x4E194CEE and conn_id 0
Sep 13 04:28:27.129: lifetime of 300 seconds
Sep 13 04:28:27.129: lifetime of 4608000 kilobytes
Sep 13 04:28:27.129: ISAKMP:(14394): sending packet to 172.35.194.115 my_port 500 peer_port 500 (R) QM_IDLE
Sep 13 04:28:27.129: ISAKMP:(14394):Sending an IKE IPv4 Packet.
Sep 13 04:28:27.129: ISAKMP:(14394):Node 3976496077, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI
Sep 13 04:28:27.129: ISAKMP:(14394):Old State = IKE_QM_SPI_STARVE New State = IKE_QM_R_QM2
Sep 13 04:28:27.197: ISAKMP (14394): received packet from 172.35.194.115 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:28:27.197: ISAKMP:(14394):deleting node -318471219 error FALSE reason "QM done (await)"
Sep 13 04:28:27.197: ISAKMP:(14394):Node 3976496077, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:28:27.197: ISAKMP:(14394):Old State = IKE_QM_R_QM2 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 04:28:28.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
Sep 13 04:28:28.233: ISAKMP (0): incrementing error counter on sa, attempt 5 of 5: retransmit phase 1
Sep 13 04:28:28.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
Sep 13 04:28:28.233: ISAKMP:(0): sending packet to 172.35.194.150 my_port 500 peer_port 500 (I) MM_NO_STATE
Sep 13 04:28:28.233: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:28:28.845: ISAKMP:(0):purging SA., sa=1F4A26C, delme=1F4A26C
Sep 13 04:28:29.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
Sep 13 04:28:29.349: ISAKMP:(0):peer does not do paranoid keepalives.
Sep 13 04:28:29.349: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (I) MM_NO_STATE (peer 172.35.200.87)
Sep 13 04:28:29.349: ISAKMP:(0):deletitor
Sep 13 04:28:29.849: ISAKMP: local port 500, remote port 500
Sep 13 04:28:29.849: ISAKMP: set new node 0 to QM_IDLE
Sep 13 04:28:29.849: ISAKMP: Find a dup sa in the avl tree during calling isadb_insert sa = 1FA864C
Sep 13 04:28:29.849: ISAKMP:(0):Can not start Aggressive mode, trying Main mode.
Sep 13 04:28:29.849: ISAKMP:(0):found peer pre-shared key matching 172.35.200.87
Sep 13 04:28:29.849: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID
Sep 13 04:28:29.849: ISAKMP:(0): constructed NAT-T vendor-07 ID
Sep 13 04:28:29.849: ISAKMP:(0): constructed NAT-T vendor-03 ID
Sep 13 04:28:29.849: ISAKMP:(0): constructed NAT-T vendor-02 ID
Sep 13 04:28:29.849: ISAKMP:(0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM
Sep 13 04:28:29.849: ISAKMP:(0):Old State = IKE_READY New State = IKE_I_MM1
Sep 13 04:28:29.849: ISAKMP:(0): beginning Main Mode exchange
S8:30.229: ISAKMPeted(), count 0
AKMP:(0): sendin4:28:38.233: ISA 172.35.200.87)
Sep 13 04:28:43.233: ISAKMP: Unlocking peer struct 0x411472DC for isadb_mark_sa_deleted(), count 0
Sep 13 04:28:43.233: ISAKMP: Deleting peer node by peer_reap for 172.35.200.87: 411472DC
Sep 13 04:28:43.233: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
Sep 13 04:28:43.233: ISAKMP:(0):Old State = IKE_R_MM2 New State = IKE_DEST_SA
Sep 13 04:28:45.933: ISAKMP:(14390):purging node 8155520
Sep 13 04:28:46.689: ISAKMP:(14407):purging node -2143616241
Sep 13 04:28:46.781: ISAKMP (14395): received packet from 172.35.200.100 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:28:46.781: ISAKMP: set new node -1638000181 to QM_IDLE
Sep 13 04:28:46.781: ISAKMP:(14395): processing HASH payload. message ID = 2656967115
Sep 13 04:28:46.781: ISAKMP:(14395): processing SA payload. message ID = 2656967115
Sep 13 04:28:46.781: ISAKMP:(14395):Checking IPSec proposal 1
Sep 13 04:28:46.781: ISAKMP: transform 1, ESP_3DES
Sep 13 04:28:46.781: ISAKMP: attr
**************ibutes in transform:
Sep 13 04:28:46.781: ISAKMP: encaps is 1 (Tunnel)
Sep 13 04:28:46.781: ISAKMP: SA life type in seconds
Sep 13 04:28:46.781: ISAKMP: SA life duration (basic) of 300
Sep 13 04:28:46.781: ISAKMP: SA life type in kilobytes
Sep 13 04:28:46.781: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0
Sep 13 04:28:46.781: ISAKMP: authenticator is HMAC-MD5
Sep 13 04:28:46.781: ISAKMP: group is 2
Sep 13 04:28:46.781: ISAKMP:(14395):atts are acceptable.
Sep 13 04:28:46.781: ISAKMP:(14395): processing NONCE payload. message ID = 2656967115
Sep 13 04:28:46.781: ISAKMP:(14395): processing KE payload. message ID = 2656967115
Sep 13 04:28:46.785: ISAKMP:(14395): processing ID payload. message ID = 2656967115
Sep 13 04:28:46.785: ISAKMP:(14395): processing ID payload. message ID = 2656967115
Sep 13 04:28:46.785: ISAKMP:(14395):QM Responder gets spi
Sep 13 04:28:46.785: ISAKMP:(14395):Node 2656967115, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:28:46.785: ISAKMP:(14395):Old State = IKE_QM_READY New State = IKE_QM_SPI_STARVE
Sep 13 04:28:46.785: ISAKMP:(14395): Creating IPSec SAs
Sep 13 04:28:46.785: inbound SA from 172.35.200.100 to 172.34.47.57 (f/i) 0/ 0
(proxy 172.17.1.0 to 0.0.0.0)
Sep 13 04:28:46.785: has spi 0xE85F4668 and conn_id 0
Sep 13 04:28:46.785: lifetime of 300 seconds
Sep 13 04:28:46.785: lifetime of 4608000 kilobytes
Sep 13 04:28:46.785: outbound SA from 172.34.47.57 to 172.35.200.100 (f/i) 0/0
(proxy 0.0.0.0 to 172.17.1.0)
Sep 13 04:28:46.785: has spi 0x806D78EA and conn_id 0
Sep 13 04:28:46.785: lifetime of 300 seconds
Sep 13 04:28:46.785: lifetime of 4608000 kilobytes
Sep 13 04:28:46.785: ISAKMP:(14395): sending packet to 172.35.200.100 my_port 500 peer_port 500 (R) QM_IDLE
Sep 13 04:28:46.785: ISAKMP:(14395):Sending an IKE IPv4 Packet.
Sep 13 04:28:46.785: ISAKMP:(14395):Node 2656967115, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI
Sep 13 04:28:46.785: ISAKMP:(14395):Old State = IKE_QM_SPI_STARVE New State = IKE_QM_R_QM2
Sep 13 04:28:46.857: ISAKMP (14395): received packet from 172.35.200.100 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:28:46.857: ISAKMP:(14395):deleting node -1638000181 error FALSE reason "QM done (await)"
Sep 13 04:28:46.857: ISAKMP:(14395):Node 2656967115, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:28:46.857: ISAKMP:(14395):Old State = IKE_QM_R_QM2 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 04:28:49.509: ISAKMP (14396): received packet from 172.35.222.236 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:28:49.509: ISAKMP: set new node 732513048 to QM_IDLE
Sep 13 04:28:49.509: ISAKMP:(14396): processing HASH payload. message ID = 732513048
Sep 13 04:28:49.509: ISAKMP:(14396): processing SA payload. message ID = 732513048
Sep 13 04:28:49.509: ISAKMP:(14396):Checking IPSec proposal 1
Sep 13 04:28:49.509: ISAKMP: transform 1, ESP_3DES
Sep 13 04:28:49.509: ISAKMP: attributes in transform:
Sep 13 04:28:49.509: ISAKMP: encaps is 1 (Tunnel)
Sep 13 04:28:49.509: ISAKMP: SA life type in seconds
Sep 13 04:28:49.509: ISAKMP: SA life duration (basic) of 300
Sep 13 04:28:49.509: ISAKMP: SA life type in kilobytes
Sep 13 04:28:49.509: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0
Sep 13 04:28:49.509: ISAKMP: authenticator is HMAC-MD5
Sep 13 04:28:49.509: ISAKMP: group is 2
Sep 13 04:28:49.509: ISAKMP:(14396):atts are acceptable.
Sep 13 04:28:49.513: ISAKMP:(14396): processing NONCE payload. message ID = 732513048
Sep 13 04:28:49.513: ISAKMP:(14396): processing KE payload. message ID = 732513048
Sep 13 04:28:49.513: ISAKMP:(14396): processing ID payload. message ID = 732513048
Sep 13 04:28:49.513: ISAKMP:(14396): processing ID payload. message ID = 732513048
Sep 13 04:28:49.513: ISAKMP:(14396):QM Responder gets spi
Sep 13 04:28:49.513: ISAKMP:(14396):Node 732513048, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:28:49.513: ISAKMP:(14396):Old State = IKE_QM_READY New State = IKE_QM_SPI_STARVE
Sep 13 04:28:49.513: ISAKMP:(14396): Creating IPSec SAs
Sep 13 04:28:49.513: inbound SA from 172.35.222.236 to 172.34.47.57 (f/i) 0/ 0
(proxy 172.18.1.0 to 0.0.0.0)
Sep 13 04:28:49.513: has spi 0x18271E39 and conn_id 0
Sep 13 04:28:49.513: lifetime of 300 seconds
Sep 13 04:28:49.513: lifetime of 4608000 kilobytes
Sep 13 04:28:49.513: outbound SA from 172.34.47.57 to 172.35.222.236 (f/i) 0/0
(proxy 0.0.0.0 to 172.18.1.0)
Sep 13 04:28:49.513: has spi 0x60244544 and conn_id 0
Sep 13 04:28:49.513: lifetime of 300 seconds
Sep 13 04:28:49.513: lifetime of 4608000 kilobytes
Sep 13 04:28:49.513: ISAKMP:(14396): sending packet to 172.35.222.236 my_port 500 peer_port 500 (R) QM_IDLE
Sep 13 04:28:49.513: ISAKMP:(14396):Sending an IKE IPv4 Packet.
Sep 13 04:28:49.513: ISAKMP:(14396):Node 732513048, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI
Sep 13 04:28:49.513: ISAKMP:(14396):Old State = IKE_QM_SPI_STARVE New State = IKE_QM_R_QM2
Sep 13 04:28:49.637: ISAKMP (14396): received packet from 172.35.222.236 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:28:49.637: ISAKMP:(14396):deleting node 732513048 error FALSE reason "QM done (await)"
Sep 13 04:28:49.637: ISAKMP:(14396):Node 732513048, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:28:49.637: ISAKMP:(14396):Old State = IKE_QM_R_QM2 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 04:28:49.849: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
Sep 13 04:28:49.849: ISAKMP (0): incrementing error counter on sa, attempt 2 of 5: retransmit phase 1
Sep 13 04:28:49.849: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
Sep 13 04:28:49.849: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE
Sep 13 04:28:49.849: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:28:50.513: ISAKMP:(14392):peer does not do paranoid keepalives.
Sep 13 04:28:50.513: ISAKMP:(14392):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE (peer 172.35.200.97)
Sep 13 04:28:50.513: ISAKMP: set new node -1275615692 to QM_IDLE
Sep 13 04:28:50.513: ISAKMP:(14392): sending packet to 172.35.200.97 my_port 500 peer_port 500 (R) QM_IDLE
Sep 13 04:28:50.513: ISAKMP:(14392):Sending an IKE IPv4 Packet.
Sep 13 04:28:50.513: ISAKMP:(14392):purging node -1275615692
Sep 13 04:28:50.513: ISAKMP:(14392):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
Sep 13 04:28:50.513: ISAKMP:(14392):Old State = IKE_P1_COMPLETE New State = IKE_DEST_SA
Sep 13 04:28:50.513: ISAKMP:(14392):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE (peer 172.35.200.97)
Sep 13 04:28:50.513: ISAKMP: Unlocking peer struct 0x10AD358 for isadb_mark_sa_deleted(), count 0
Sep 13 04:28:50.513: ISAKMP:(14392):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:28:50.513: ISAKMP:(14392):Old State = IKE_DEST_SA New State = IKE_DEST_SA
Sep 13 04:28:50.561: ISAKMP (14392): received packet from 172.35.200.97 dport 500 sport 500 Global (R) MM_NO_STATE
Sep 13 04:28:50.741: ISAKMP: ignoring request to send delete notify (no ISAKMP sa) src 172.34.47.57 dst 172.35.200.97 for SPI 0x2C9C73AF
Sep 13 04:28:51.545: ISAKMP:(14393):peer does not do paranoid keepalives.
Sep 13 04:28:51.545: ISAKMP:(14393):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE (peer 172.34.48.125)
Sep 13 04:28:51.545: ISAKMP: set new node 1816352009 to QM_IDLE
Sep 13 04:28:51.545: ISAKMP:(14393): sending packet to 172.34.48.125 my_port 500 peer_port 500 (R) QM_IDLE
Sep 13 04:28:51.545: ISAKMP:(14393):Sending an IKE IPv4 Packet.
Sep 13 04:28:51.545: ISAKMP:(14393):purging node 1816352009
Sep 13 04:28:51.545: ISAKMP:(14393):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
Sep 13 04:28:51.545: ISAKMP:(14393):Old State = IKE_P1_COMPLETE New State = IKE_DEST_SA
Sep 13 04:28:51.545: ISAKMP:(14393):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE (peer 172.34.48.125)
Sep 13 04:28:51.545: ISAKMP: Unlocking peer struct 0x4007DC90 for isadb_mark_sa_deleted(), count 0
Sep 13 04:28:51.545: ISAKMP:(14393):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:28:51.545: ISAKMP:(14393):Old State = IKE_DEST_SA New State = IKE_DEST_SA
Sep 13 04:28:51.625: ISAKMP (14393): received packet from 172.34.48.125 dport 500 sport 500 Global (R) MM_NO_STATE
Sep 13 04:28:51.877: ISAKMP: ignoring request to send delete notify (no ISAKMP sa) src 172.34.47.57 dst 172.34.48.125 for SPI 0x7F351D2
Sep 13 04:28:52.269: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (N) NEW SA
Sep 13 04:28:52.269: ISAKMP: Created a peer struct for 172.35.200.87, peer port 500
Sep 13 04:28:52.269: ISAKMP: New peer created peer = 0x12370108 peer_handle = 0x8000F44B
Sep 13 04:28:52.269: ISAKMP: Locking peer struct 0x12370108, refcount 1 for crypto_isakmp_process_block
Sep 13 04:28:52.269: ISAKMP: local port 500, remote port 500
Sep 13 04:28:52.269: ISAKMP: Find a dup sa in the avl tree during calling isadb_insert sa = 1F4A26C
Sep 13 04:28:52.269: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:28:52.269: ISAKMP:(0):Old State = IKE_READY New State = IKE_R_MM1
Sep 13 04:28:52.269: ISAKMP:(0): processing SA payload. message ID = 0
Sep 13 04:28:52.269: ISAKMP:(0): processing vendor id payload
Sep 13 04:28:52.269: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch
Sep 13 04:28:52.269: ISAKMP (0): vendor ID is NAT-T RFC 3947
Sep 13 04:28:52.269: ISAKMP:(0): processing vendor id payload
Sep 13 04:28:52.269: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch
Sep 13 04:28:52.269: ISAKMP (0): vendor ID is NAT-T v7
Sep 13 04:28:52.269: ISAKMP:(0): processing vendor id payload
Sep 13 04:28:52.269: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch
Sep 13 04:28:52.269: ISAKMP:(0): vendor ID is NAT-T v3
Sep 13 04:28:52.269: ISAKMP:(0): processing vendor id payload
Sep 13 04:28:52.269: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch
Sep 13 04:28:52.269: ISAKMP:(0): vendor ID is NAT-T v2
Sep 13 04:28:52.269: ISAKMP:(0):found peer pre-shared key matching 172.35.200.87
Sep 13 04:28:52.269: ISAKMP:(0): local preshared key found
Sep 13 04:28:52.269: ISAKMP : Scanning profiles for xauth ...
Sep 13 04:28:52.269: ISAKMP:(0):Checking ISAKMP transform 1 against priority 30 policy
Sep 13 04:28:52.269: ISAKMP: encryption 3DES-CBC
Sep 13 04:28:52.269: ISAKMP: hash MD5
Sep 13 04:28:52.269: ISAKMP: default group 2
Sep 13 04:28:52.269: ISAKMP: auth pre-share
Sep 13 04:28:52.269: ISAKMP: life type in seconds
Sep 13 04:28:52.269: ISAKMP: life duration (basic) of 300
Sep 13 04:28:52.269: ISAKMP:(0):atts are acceptable. Next payload is 0
Sep 13 04:28:52.269: ISAKMP:(0):Acceptable atts:actual life: 0
Sep 13 04:28:52.269: ISAKMP:(0):Acceptable atts:life: 0
Sep 13 04:28:52.269: ISAKMP:(0):Basic life_in_seconds:300
Sep 13 04:28:52.269: ISAKMP:(0):Returning Actual lifetime: 300
Sep 13 04:28:52.269: ISAKMP:(0)::Started lifetime timer: 300.
Sep 13 04:28:52.269: ISAKMP:(0): processing vendor id payload
Sep 13 04:28:52.269: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch
Sep 13 04:28:52.269: ISAKMP (0): vendor ID is NAT-T RFC 3947
Sep 13 04:28:52.269: ISAKMP:(0): processing vendor id payload
Sep 13 04:28:52.269: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch
Sep 13 04:28:52.269: ISAKMP (0): vendor ID is NAT-T v7
Sep 13 04:28:52.269: ISAKMP:(0): processing vendor id payload
Sep 13 04:28:52.269: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch
Sep 13 04:28:52.269: ISAKMP:(0): vendor ID is NAT-T v3
Sep 13 04:28:52.269: ISAKMP:(0): processing vendor id payload
Sep 13 04:28:52.269: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch
Sep 13 04:28:52.269: ISAKMP:(0): vendor ID is NAT-T v2
Sep 13 04:28:52.269: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Sep 13 04:28:52.269: ISAKMP:(0):Old State = IKE_R_MM1 New State = IKE_R_MM1
Sep 13 04:28:52.269: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID
Sep 13 04:28:52.269: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP
Sep 13 04:28:52.269: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:28:52.269: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
Sep 13 04:28:52.269: ISAKMP:(0):Old State = IKE_R_MM1 New State = IKE_R_MM2
Sep 13 04:28:55.933: ISAKMP:(14390):purging SA., sa=1FB648C, delme=1FB648C
Sep 13 04:28:59.849: ISAKMP: set new node 0 to QM_IDLE
Sep 13 04:28:59.849: ISAKMP:(0):SA is still budding. Attached new ipsec request to it. (local 172.34.47.57, remote 172.35.200.87)
Sep 13 04:28:59.849: ISAKMP: Error while processing SA request: Failed to initialize SA
Sep 13 04:28:59.849: ISAKMP: Error while processing KMI message 0, error 2.
Sep 13 04:28:59.849: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
Sep 13 04:28:59.849: ISAKMP (0): incrementing error counter on sa, attempt 3 of 5: retransmit phase 1
Sep 13 04:28:59.849: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
Sep 13 04:28:59.849: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE
Sep 13 04:28:59.849: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:29:02.265: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP
Sep 13 04:29:02.265: ISAKMP:(0): phase 1 packet is a duplicate of a previous packet.
Sep 13 04:29:02.265: ISAKMP:(0): retransmitting due to retransmit phase 1
Sep 13 04:29:02.765: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...
Sep 13 04:29:02.765: ISAKMP (0): incrementing error counter on sa, attempt 1 of 5: retransmit phase 1
Sep 13 04:29:02.765: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP
Sep 13 04:29:02.765: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP
Sep 13 04:29:02.765: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:29:03.017: ISAKMP:(14392):purging node 2101687451
Sep 13 04:29:05.309: ISAKMP (14397): received packet from 172.35.194.219 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:29:05.309: ISAKMP: set new node 252378786 to QM_IDLE
Sep 13 04:29:05.309: ISAKMP:(14397): processing HASH payload. message ID = 252378786
Sep 13 04:29:05.309: ISAKMP:(14397): processing SA payload. message ID = 252378786
Sep 13 04:29:05.309: ISAKMP:(14397):Checking IPSec proposal 1
Sep 13 04:29:05.309: ISAKMP: transform 1, ESP_3DES
Sep 13 04:29:05.309: ISAKMP: attributes in transform:
Sep 13 04:29:05.309: ISAKMP: encaps is 1 (Tunnel)
Sep 13 04:29:05.309: ISAKMP: SA life type in seconds
Sep 13 04:29:05.309: ISAKMP: SA life duration (basic) of 300
Sep 13 04:29:05.309: ISAKMP: SA life type in kilobytes
Sep 13 04:29:05.309: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0
Sep 13 04:29:05.309: ISAKMP: authenticator is HMAC-MD5
Sep 13 04:29:05.309: ISAKMP: group is 2
Sep 13 04:29:05.309: ISAKMP:(14397):atts are acceptable.
Sep 13 04:29:05.309: ISAKMP:(14397): processing NONCE payload. message ID = 252378786
Sep 13 04:29:05.309: ISAKMP:(14397): processing KE payload. message ID = 252378786
Sep 13 04:29:05.313: ISAKMP:(14397): processing ID payload. message ID = 252378786
Sep 13 04:29:05.313: ISAKMP:(14397): processing ID payload. message ID = 252378786
Sep 13 04:29:05.313: ISAKMP:(14397):QM Responder gets spi
Sep 13 04:29:05.313: ISAKMP:(14397):Node 252378786, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:29:05.313: ISAKMP:(14397):Old State = IKE_QM_READY New State = IKE_QM_SPI_STARVE
Sep 13 04:29:05.313: ISAKMP:(14397): Creating IPSec SAs
Sep 13 04:29:05.313: inbound SA from 172.35.194.219 to 172.34.47.57 (f/i) 0/ 0
(proxy 172.21.1.0 to 0.0.0.0)
Sep 13 04:29:05.313: has spi 0xF0B346BA and conn_id 0
Sep 13 04:29:05.313: lifetime of 300 seconds
Sep 13 04:29:05.313: lifetime of 4608000 kilobytes
Sep 13 04:29:05.313: outbound SA from 172.34.47.57 to 172.35.194.219 (f/i) 0/0
(proxy 0.0.0.0 to 172.21.1.0)
Sep 13 04:29:05.313: has spi 0x857BA967 and conn_id 0
Sep 13 04:29:05.313: lifetime of 300 seconds
Sep 13 04:29:05.313: lifetime of 4608000 kilobytes
Sep 13 04:29:05.313: ISAKMP:(14397): sending packet to 172.35.194.219 my_port 500 peer_port 500 (R) QM_IDLE
Sep 13 04:29:05.313: ISAKMP:(14397):Sending an IKE IPv4 Packet.
Sep 13 04:29:05.313: ISAKMP:(14397):Node 252378786, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI
Sep 13 04:29:05.313: ISAKMP:(14397):Old State = IKE_QM_SPI_STARVE New State = IKE_QM_R_QM2
Sep 13 04:29:05.389: ISAKMP (14397): received packet from 172.35.194.219 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:29:05.389: ISAKMP:(14397):deleting node 252378786 error FALSE reason "QM done (await)"
Sep 13 04:29:05.389: ISAKMP:(14397):Node 252378786, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:29:05.389: ISAKMP:(14397):Old State = IKE_QM_R_QM2 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 04:29:07.925: ISAKMP:(14393):purging node 1434815361
Sep 13 04:29:08.761: ISAKMP:(14394):peer does not do paranoid keepalives.
Sep 13 04:29:08.761: ISAKMP:(14394):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE (peer 172.35.194.115)
Sep 13 04:29:08.761: ISAKMP: set new node 1605462269 to QM_IDLE
Sep 13 04:29:08.761: ISAKMP:(14394): sending packet to 172.35.194.115 my_port 500 peer_port 500 (R) QM_IDLE
Sep 13 04:29:08.761: ISAKMP:(14394):Sending an IKE IPv4 Packet.
Sep 13 04:29:08.761: ISAKMP:(14394):purging node 1605462269
Sep 13 04:29:08.761: ISAKMP:(14394):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
Sep 13 04:29:08.761: ISAKMP:(14394):Old State = IKE_P1_COMPLETE New State = IKE_DEST_SA
Sep 13 04:29:08.761: ISAKMP:(14394):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE (peer 172.35.194.115)
Sep 13 04:29:08.761: ISAKMP: Unlocking peer struct 0x1067324 for isadb_mark_sa_deleted(), count 0
Sep 13 04:29:08.761: ISAKMP:(14394):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:29:08.761: ISAKMP:(14394):Old State = IKE_DEST_SA New State = IKE_DEST_SA
Sep 13 04:29:08.801: ISAKMP (14394): received packet from 172.35.194.115 dport 500 sport 500 Global (R) MM_NO_STATE
Sep 13 04:29:08.965: ISAKMP: ignoring request to send delete notify (no ISAKMP sa) src 172.34.47.57 dst 172.35.194.115 for SPI 0x6C824D4D
Sep 13 04:29:09.849: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
Sep 13 04:29:09.849: ISAKMP (0): incrementing error counter on sa, attempt 4 of 5: retransmit phase 1
Sep 13 04:29:09.849: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
Sep 13 04:29:09.849: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE
Sep 13 04:29:09.849: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:29:09.905: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (I) MM_NO_STATE
Sep 13 04:29:09.905: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:29:09.905: ISAKMP:(0):Old State = IKE_I_MM1 New State = IKE_I_MM2
Sep 13 04:29:09.905: ISAKMP:(0): processing SA payload. message ID = 0
Sep 13 04:29:09.905: ISAKMP:(0): processing vendor id payload
Sep 13 04:29:09.905: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch
Sep 13 04:29:09.905: ISAKMP (0): vendor ID is NAT-T RFC 3947
Sep 13 04:29:09.905: ISAKMP:(0):found peer pre-shared key matching 172.35.200.87
Sep 13 04:29:09.905: ISAKMP:(0): local preshared key found
Sep 13 04:29:09.905: ISAKMP : Scanning profiles for xauth ...
Sep 13 04:29:09.905: ISAKMP:(0):Checking ISAKMP transform 1 against priority 30 policy
Sep 13 04:29:09.905: ISAKMP: encryption 3DES-CBC
Sep 13 04:29:09.905: ISAKMP: hash MD5
Sep 13 04:29:09.905: ISAKMP: default group 2
Sep 13 04:29:09.905: ISAKMP: auth pre-share
Sep 13 04:29:09.905: ISAKMP: life type in seconds
Sep 13 04:29:09.905: ISAKMP: life duration (basic) of 300
Sep 13 04:29:09.905: ISAKMP:(0):atts are acceptable. Next payload is 0
Sep 13 04:29:09.905: ISAKMP:(0):Acceptable atts:actual life: 0
Sep 13 04:29:09.905: ISAKMP:(0):Acceptable atts:life: 0
Sep 13 04:29:09.905: ISAKMP:(0):Basic life_in_seconds:300
Sep 13 04:29:09.905: ISAKMP:(0):Returning Actual lifetime: 300
Sep 13 04:29:09.905: ISAKMP:(0)::Started lifetime timer: 300.
Sep 13 04:29:09.905: ISAKMP:(0): processing vendor id payload
Sep 13 04:29:09.905: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch
Sep 13 04:29:09.905: ISAKMP (0): vendor ID is NAT-T RFC 3947
Sep 13 04:29:09.905: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Sep 13 04:29:09.905: ISAKMP:(0):Old State = IKE_I_MM2 New State = IKE_I_MM2
Sep 13 04:29:09.905: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_SA_SETUP
Sep 13 04:29:09.905: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:29:09.905: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
Sep 13 04:29:09.905: ISAKMP:(0):Old State = IKE_I_MM2 New State = IKE_I_MM3
Sep 13 04:29:09.969: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (I) MM_SA_SETUP
Sep 13 04:29:09.969: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:29:09.969: ISAKMP:(0):Old State = IKE_I_MM3 New State = IKE_I_MM4
Sep 13 04:29:09.969: ISAKMP:(0): processing KE payload. message ID = 0
Sep 13 04:29:09.969: ISAKMP:(0): processing NONCE payload. message ID = 0
Sep 13 04:29:09.969: ISAKMP:(0):found peer pre-shared key matching 172.35.200.87
Sep 13 04:29:09.969: ISAKMP:(14410): processing vendor id payload
Sep 13 04:29:09.969: ISAKMP:(14410): vendor ID is Unity
Sep 13 04:29:09.969: ISAKMP:(14410): processing vendor id payload
Sep 13 04:29:09.969: ISAKMP:(14410): vendor ID is DPD
Sep 13 04:29:09.969: ISAKMP:(14410): processing vendor id payload
Sep 13 04:29:09.969: ISAKMP:(14410): speaking to another IOS box!
Sep 13 04:29:09.969: ISAKMP:received payload type 20
Sep 13 04:29:09.969: ISAKMP (14410): His hash no match - this node outside NAT
Sep 13 04:29:09.969: ISAKMP:received payload type 20
Sep 13 04:29:09.969: ISAKMP (14410): No NAT Found for self or peer
Sep 13 04:29:09.969: ISAKMP:(14410):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Sep 13 04:29:09.969: ISAKMP:(14410):Old State = IKE_I_MM4 New State = IKE_I_MM4
Sep 13 04:29:09.969: ISAKMP:(14410):SA is doing pre-shared key authentication using id type ID_IPV4_ADDR
Sep 13 04:29:09.969: ISAKMP (14410): ID payload
next-payload : 8
type : 1
address : 172.34.47.57
protocol : 17
port : 500
length : 12
Sep 13 04:29:09.969: ISAKMP:(14410):Total payload length: 12
Sep 13 04:29:09.969: ISAKMP:(14410): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_KEY_EXCH
Sep 13 04:29:09.969: ISAKMP:(14410):Sending an IKE IPv4 Packet.
Sep 13 04:29:09.969: ISAKMP:(14410):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
Sep 13 04:29:09.969: ISAKMP:(14410):Old State = IKE_I_MM4 New State = IKE_I_MM5
Sep 13 04:29:10.001: ISAKMP (14410): received packet from 172.35.200.87 dport 500 sport 500 Global (I) MM_KEY_EXCH
Sep 13 04:29:10.001: ISAKMP:(14410): processing ID payload. message ID = 0
Sep 13 04:29:10.005: ISAKMP (14410): ID payload
next-payload : 8
type : 1
address : 172.35.200.87
protocol : 17
port : 500
length : 12
Sep 13 04:29:10.005: ISAKMP:(0):: peer matches *none* of the profiles
Sep 13 04:29:10.005: ISAKMP:(14410): processing HASH payload. message ID = 0
Sep 13 04:29:10.005: ISAKMP:(14410):SA authentication status:
authenticated
Sep 13 04:29:10.005: ISAKMP:(14410):SA has been authenticated with 172.35.200.87
Sep 13 04:29:10.005: ISAKMP: Trying to insert a peer 172.34.47.57/172.35.200.87/500/, and inserted successfully 1FB5094.
Sep 13 04:29:10.005: ISAKMP:(14410):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:29:10.005: ISAKMP:(14410):Old State = IKE_I_MM5 New State = IKE_I_MM6
Sep 13 04:29:10.005: ISAKMP:(14410):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Sep 13 04:29:10.005: ISAKMP:(14410):Old State = IKE_I_MM6 New State = IKE_I_MM6
Sep 13 04:29:10.005: ISAKMP:(14410):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
Sep 13 04:29:10.005: ISAKMP:(14410):Old State = IKE_I_MM6 New State = IKE_P1_COMPLETE
Sep 13 04:29:10.005: ISAKMP:(14410):beginning Quick Mode exchange, M-ID of 3181362681
Sep 13 04:29:10.009: ISAKMP:(14410):QM Initiator gets spi
Sep 13 04:29:10.009: ISAKMP:(14410): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) QM_IDLE
Sep 13 04:29:10.009: ISAKMP:(14410):Sending an IKE IPv4 Packet.
Sep 13 04:29:10.009: ISAKMP:(14410):Node 3181362681, Input = IKE_MESG_INTERNAL, IKE_INIT_QM
Sep 13 04:29:10.009: ISAKMP:(14410):Old State = IKE_QM_READY New State = IKE_QM_I_QM1
Sep 13 04:29:10.009: ISAKMP:(14410):beginning Quick Mode exchange, M-ID of 817986408
Sep 13 04:29:10.009: ISAKMP:(14410):QM Initiator gets spi
Sep 13 04:29:10.009: ISAKMP:(14410): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) QM_IDLE
Sep 13 04:29:10.009: ISAKMP:(14410):Sending an IKE IPv4 Packet.
Sep 13 04:29:10.009: ISAKMP:(14410):Node 817986408, Input = IKE_MESG_INTERNAL, IKE_INIT_QM
Sep 13 04:29:10.009: ISAKMP:(14410):Old State = IKE_QM_READY New State = IKE_QM_I_QM1
Sep 13 04:29:10.009: ISAKMP:(14410):Input = IKE_MESG_INTERNAL, IKE_PHASE1_COMPLETE
Sep 13 04:29:10.009: ISAKMP:(14410):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
Sep 13 04:29:10.097: ISAKMP (14410): received packet from 172.35.200.87 dport 500 sport 500 Global (I) QM_IDLE
Sep 13 04:29:10.097: ISAKMP:(14410): processing HASH payload. message ID = 3181362681
Sep 13 04:29:10.097: ISAKMP:(14410): processing SA payload. message ID = 3181362681
Sep 13 04:29:10.097: ISAKMP:(14410):Checking IPSec proposal 1
Sep 13 04:29:10.097: ISAKMP: transform 1, ESP_3DES
Sep 13 04:29:10.097: ISAKMP: attributes in transform:
Sep 13 04:29:10.097: ISAKMP: encaps is 1 (Tunnel)
Sep 13 04:29:10.097: ISAKMP: SA life type in seconds
Sep 13 04:29:10.097: ISAKMP: SA life duration (basic) of 300
Sep 13 04:29:10.097: ISAKMP: SA life type in kilobytes
Sep 13 04:29:10.097: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0
Sep 13 04:29:10.097: ISAKMP: authenticator is HMAC-MD5
Sep 13 04:29:10.097: ISAKMP: group is 2
Sep 13 04:29:10.097: ISAKMP:(14410):atts are acceptable.
Sep 13 04:29:10.097: ISAKMP:(14410): processing NONCE payload. message ID = 3181362681
Sep 13 04:29:10.097: ISAKMP:(14410): processing KE payload. message ID = 3181362681
Sep 13 04:29:10.097: ISAKMP:(14410): processing ID payload. message ID = 3181362681
Sep 13 04:29:10.097: ISAKMP:(14410): processing ID payload. message ID = 3181362681
Sep 13 04:29:10.097: ISAKMP:(14410): Creating IPSec SAs
Sep 13 04:29:10.097: inbound SA from 172.35.200.87 to 172.34.47.57 (f/i) 0/ 0
(proxy 172.17.31.0 to 0.0.0.0)
Sep 13 04:29:10.097: has spi 0xEBFEE654 and conn_id 0
Sep 13 04:29:10.097: lifetime of 300 seconds
Sep 13 04:29:10.097: lifetime of 4608000 kilobytes
Sep 13 04:29:10.097: outbound SA from 172.34.47.57 to 172.35.200.87 (f/i) 0/0
(proxy 0.0.0.0 to 172.17.31.0)
Sep 13 04:29:10.097: has spi 0xE6FD085C and conn_id 0
Sep 13 04:29:10.097: lifetime of 300 seconds
Sep 13 04:29:10.097: lifetime of 4608000 kilobytes
Sep 13 04:29:10.097: ISAKMP:(14410): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) QM_IDLE
Sep 13 04:29:10.097: ISAKMP:(14410):Sending an IKE IPv4 Packet.
Sep 13 04:29:10.097: ISAKMP:(14410):deleting node -1113604615 error FALSE reason "No Error"
Sep 13 04:29:10.097: ISAKMP:(14410):Node 3181362681, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:29:10.097: ISAKMP:(14410):Old State = IKE_QM_I_QM1 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 04:29:10.149: ISAKMP (14410): received packet from 172.35.200.87 dport 500 sport 500 Global (I) QM_IDLE
Sep 13 04:29:10.149: ISAKMP:(14410): processing HASH payload. message ID = 817986408
Sep 13 04:29:10.149: ISAKMP:(14410): processing SA payload. message ID = 817986408
Sep 13 04:29:10.149: ISAKMP:(14410):Checking IPSec proposal 1
Sep 13 04:29:10.149: ISAKMP: transform 1, ESP_3DES
Sep 13 04:29:10.149: ISAKMP: attributes in transform:
Sep 13 04:29:10.149: ISAKMP: encaps is 1 (Tunnel)
Sep 13 04:29:10.149: ISAKMP: SA life type in seconds
Sep 13 04:29:10.149: ISAKMP: SA life duration (basic) of 300
Sep 13 04:29:10.149: ISAKMP: SA life type in kilobytes
Sep 13 04:29:10.149: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0
Sep 13 04:29:10.149: ISAKMP: authenticator is HMAC-MD5
Sep 13 04:29:10.149: ISAKMP: group is 2
Sep 13 04:29:10.149: ISAKMP:(14410):atts are acceptable.
Sep 13 04:29:10.149: ISAKMP:(14410): processing NONCE payload. message ID = 817986408
Sep 13 04:29:10.149: ISAKMP:(14410): processing KE payload. message ID = 817986408
Sep 13 04:29:10.153: ISAKMP:(14410): processing ID payload. message ID = 817986408
Sep 13 04:29:10.153: ISAKMP:(14410): processing ID payload. message ID = 817986408
Sep 13 04:29:10.153: ISAKMP:(14410): Creating IPSec SAs
Sep 13 04:29:10.153: inbound SA from 172.35.200.87 to 172.34.47.57 (f/i) 0/ 0
(proxy 172.17.31.0 to 0.0.0.0)
Sep 13 04:29:10.153: has spi 0xD674D8D6 and conn_id 0
Sep 13 04:29:10.153: lifetime of 300 seconds
Sep 13 04:29:10.153: lifetime of 4608000 kilobytes
Sep 13 04:29:10.153: outbound SA from 172.34.47.57 to 172.35.200.87 (f/i) 0/0
(proxy 0.0.0.0 to 172.17.31.0)
Sep 13 04:29:10.153: has spi 0xB5CFF75B and conn_id 0
Sep 13 04:29:10.153: lifetime of 300 seconds
Sep 13 04:29:10.153: lifetime of 4608000 kilobytes
Sep 13 04:29:10.153: ISAKMP:(14410): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) QM_IDLE
Sep 13 04:29:10.153: ISAKMP:(14410):Sending an IKE IPv4 Packet.
Sep 13 04:29:10.153: ISAKMP:(14410):deleting node 817986408 error FALSE reason "No Error"
Sep 13 04:29:10.153: ISAKMP:(14410):Node 817986408, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:29:10.153: ISAKMP:(14410):Old State = IKE_QM_I_QM1 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 04:29:11.573: ISAKMP (0): received packet from 172.34.49.33 dport 500 sport 500 Global (N) NEW SA
Sep 13 04:29:11.573: ISAKMP: Found a peer struct for 172.34.49.33, peer port 500
Sep 13 04:29:11.573: ISAKMP: Locking peer struct 0x1F79C08, refcount 1 for crypto_isakmp_process_block
Sep 13 04:29:11.573: ISAKMP: local port 500, remote port 500
Sep 13 04:29:11.573: ISAKMP:(0):insert sa successfully sa = 1FB648C
Sep 13 04:29:11.573: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:29:11.573: ISAKMP:(0):Old State = IKE_READY New State = IKE_R_MM1
Sep 13 04:29:11.573: ISAKMP:(0): processing SA payload. message ID = 0
Sep 13 04:29:11.573: ISAKMP:(0): processing vendor id payload
Sep 13 04:29:11.573: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch
Sep 13 04:29:11.573: ISAKMP (0): vendor ID is NAT-T RFC 3947
Sep 13 04:29:11.573: ISAKMP:(0): processing vendor id payload
Sep 13 04:29:11.573: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch
Sep 13 04:29:11.573: ISAKMP (0): vendor ID is NAT-T v7
Sep 13 04:29:11.573: ISAKMP:(0): processing vendor id payload
Sep 13 04:29:11.573: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch
Sep 13 04:29:11.573: ISAKMP:(0): vendor ID is NAT-T v3
Sep 13 04:29:11.573: ISAKMP:(0): processing vendor id payload
Sep 13 04:29:11.573: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch
Sep 13 04:29:11.573: ISAKMP:(0): vendor ID is NAT-T v2
Sep 13 04:29:11.573: ISAKMP:(0):found peer pre-shared key matching 172.34.49.33
Sep 13 04:29:11.573: ISAKMP:(0): local preshared key found
Sep 13 04:29:11.573: ISAKMP : Scanning profiles for xauth ...
Sep 13 04:29:11.573: ISAKMP:(0):Checking ISAKMP transform 1 against priority 30 policy
Sep 13 04:29:11.573: ISAKMP: encryption 3DES-CBC
Sep 13 04:29:11.573: ISAKMP: hash MD5
Sep 13 04:29:11.573: ISAKMP: default group 2
Sep 13 04:29:11.573: ISAKMP: auth pre-share
Sep 13 04:29:11.573: ISAKMP: life type in seconds
Sep 13 04:29:11.573: ISAKMP: life duration (basic) of 300
Sep 13 04:29:11.573: ISAKMP:(0):atts are acceptable. Next payload is 0
Sep 13 04:29:11.573: ISAKMP:(0):Acceptable atts:actual life: 0
Sep 13 04:29:11.573: ISAKMP:(0):Acceptable atts:life: 0
Sep 13 04:29:11.573: ISAKMP:(0):Basic life_in_seconds:300
Sep 13 04:29:11.573: ISAKMP:(0):Returning Actual lifetime: 300
Sep 13 04:29:11.573: ISAKMP:(0)::Started lifetime timer: 300.
Sep 13 04:29:11.573: ISAKMP:(0): processing vendor id payload
Sep 13 04:29:11.573: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch
Sep 13 04:29:11.573: ISAKMP (0): vendor ID is NAT-T RFC 3947
Sep 13 04:29:11.573: ISAKMP:(0): processing vendor id payload
Sep 13 04:29:11.577: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch
Sep 13 04:29:11.577: ISAKMP (0): vendor ID is NAT-T v7
Sep 13 04:29:11.577: ISAKMP:(0): processing vendor id payload
Sep 13 04:29:11.577: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch
Sep 13 04:29:11.577: ISAKMP:(0): vendor ID is NAT-T v3
Sep 13 04:29:11.577: ISAKMP:(0): processing vendor id payload
Sep 13 04:29:11.577: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch
Sep 13 04:29:11.577: ISAKMP:(0): vendor ID is NAT-T v2
Sep 13 04:29:11.577: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Sep 13 04:29:11.577: ISAKMP:(0):Old State = IKE_R_MM1 New State = IKE_R_MM1
Sep 13 04:29:11.577: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID
Sep 13 04:29:11.577: ISAKMP:(0): sending packet to 172.34.49.33 my_port 500 peer_port 500 (R) MM_SA_SETUP
Sep 13 04:29:11.577: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:29:11.577: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
Sep 13 04:29:11.577: ISAKMP:(0):Old State = IKE_R_MM1 New State = IKE_R_MM2
Sep 13 04:29:11.701: ISAKMP (0): received packet from 172.34.49.33 dport 500 sport 500 Global (R) MM_SA_SETUP
Sep 13 04:29:11.701: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:29:11.701: ISAKMP:(0):Old State = IKE_R_MM2 New State = IKE_R_MM3
Sep 13 04:29:11.701: ISAKMP:(0): processing KE payload. message ID = 0
Sep 13 04:29:11.701: ISAKMP:(0): processing NONCE payload. message ID = 0
Sep 13 04:29:11.701: ISAKMP:(0):found peer pre-shared key matching 172.34.49.33
Sep 13 04:29:11.701: ISAKMP:(14411): processing vendor id payload
Sep 13 04:29:11.701: ISAKMP:(14411): vendor ID is DPD
Sep 13 04:29:11.701: ISAKMP:(14411): processing vendor id payload
Sep 13 04:29:11.701: ISAKMP:(14411): speaking to another IOS box!
Sep 13 04:29:11.701: ISAKMP:(14411): processing vendor id payload
Sep 13 04:29:11.701: ISAKMP:(14411): vendor ID seems Unity/DPD but major 194 mismatch
Sep 13 04:29:11.701: ISAKMP:(14411): vendor ID is XAUTH
Sep 13 04:29:11.701: ISAKMP:received payload type 20
Sep 13 04:29:11.701: ISAKMP (14411): His hash no match - this node outside NAT
Sep 13 04:29:11.701: ISAKMP:received payload type 20
Sep 13 04:29:11.701: ISAKMP (14411): No NAT Found for self or peer
Sep 13 04:29:11.701: ISAKMP:(14411):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Sep 13 04:29:11.701: ISAKMP:(14411):Old State = IKE_R_MM3 New State = IKE_R_MM3
Sep 13 04:29:11.705: ISAKMP:(14411): sending packet to 172.34.49.33 my_port 500 peer_port 500 (R) MM_KEY_EXCH
Sep 13 04:29:11.705: ISAKMP:(14411):Sending an IKE IPv4 Packet.
Sep 13 04:29:11.705: ISAKMP:(14411):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
Sep 13 04:29:11.705: ISAKMP:(14411):Old State = IKE_R_MM3 New State = IKE_R_MM4
Sep 13 04:29:11.825: ISAKMP (14411): received packet from 172.34.49.33 dport 500 sport 500 Global (R) MM_KEY_EXCH
Sep 13 04:29:11.825: ISAKMP:(14411):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:29:11.825: ISAKMP:(14411):Old State = IKE_R_MM4 New State = IKE_R_MM5
Sep 13 04:29:11.825: ISAKMP:(14411): processing ID payload. message ID = 0
Sep 13 04:29:11.825: ISAKMP (14411): ID payload
next-payload : 8
type : 1
address : 172.34.49.33
protocol : 17
port : 500
length : 12
Sep 13 04:29:11.825: ISAKMP:(0):: peer matches *none* of the profiles
Sep 13 04:29:11.825: ISAKMP:(14411): processing HASH payload. message ID = 0
Sep 13 04:29:11.825: ISAKMP:(14411):SA authentication status:
authenticated
Sep 13 04:29:11.825: ISAKMP:(14411):SA has been authenticated with 172.34.49.33
Sep 13 04:29:11.825: ISAKMP:(14411):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Sep 13 04:29:11.825: ISAKMP:(14411):Old State = IKE_R_MM5 New State = IKE_R_MM5
Sep 13 04:29:11.825: ISAKMP:(14411):SA is doing pre-shared key authentication using id type ID_IPV4_ADDR
Sep 13 04:29:11.825: ISAKMP (14411): ID payload
next-payload : 8
type : 1
address : 172.34.47.57
protocol : 17
port : 500
length : 12
Sep 13 04:29:11.825: ISAKMP:(14411):Total payload length: 12
Sep 13 04:29:11.825: ISAKMP:(14411): sending packet to 172.34.49.33 my_port 500 peer_port 500 (R) MM_KEY_EXCH
Sep 13 04:29:11.825: ISAKMP:(14411):Sending an IKE IPv4 Packet.
Sep 13 04:29:11.825: ISAKMP:(14411):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
Sep 13 04:29:11.825: ISAKMP:(14411):Old State = IKE_R_MM5 New State = IKE_P1_COMPLETE
Sep 13 04:29:11.825: ISAKMP:(14411):Input = IKE_MESG_INTERNAL, IKE_PHASE1_COMPLETE
Sep 13 04:29:11.825: ISAKMP:(14411):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
Sep 13 04:29:11.849: ISAKMP:(14408):purging node -1862940807
Sep 13 04:29:11.949: ISAKMP (14411): received packet from 172.34.49.33 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:29:11.949: ISAKMP: set new node 316969593 to QM_IDLE
Sep 13 04:29:11.949: ISAKMP:(14411): processing HASH payload. message ID = 316969593
Sep 13 04:29:11.949: ISAKMP:(14411): processing SA payload. message ID = 316969593
Sep 13 04:29:11.949: ISAKMP:(14411):Checking IPSec proposal 1
Sep 13 04:29:11.949: ISAKMP: transform 1, ESP_3DES
Sep 13 04:29:11.949: ISAKMP: attributes in transform:
Sep 13 04:29:11.949: ISAKMP: encaps is 1 (Tunnel)
Sep 13 04:29:11.949: ISAKMP: SA life type in seconds
Sep 13 04:29:11.949: ISAKMP: SA life duration (basic) of 300
Sep 13 04:29:11.949: ISAKMP: SA life type in kilobytes
Sep 13 04:29:11.949: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0
Sep 13 04:29:11.949: ISAKMP: authenticator is HMAC-MD5
Sep 13 04:29:11.949: ISAKMP: group is 2
Sep 13 04:29:11.949: ISAKMP:(14411):atts are acceptable.
Sep 13 04:29:11.949: ISAKMP:(14411): processing NONCE payload. message ID = 316969593
Sep 13 04:29:11.949: ISAKMP:(14411): processing KE payload. message ID = 316969593
Sep 13 04:29:11.949: ISAKMP:(14411): processing ID payload. message ID = 316969593
Sep 13 04:29:11.949: ISAKMP:(14411): processing ID payload. message ID = 316969593
Sep 13 04:29:11.949: ISAKMP:(14411):QM Responder gets spi
Sep 13 04:29:11.949: ISAKMP:(14411):Node 316969593, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:29:11.949: ISAKMP:(14411):Old State = IKE_QM_READY New State = IKE_QM_SPI_STARVE
Sep 13 04:29:11.949: ISAKMP:(14411): Creating IPSec SAs
Sep 13 04:29:11.949: inbound SA from 172.34.49.33 to 172.34.47.57 (f/i) 0/ 0
(proxy 172.19.100.0 to 0.0.0.0)
Sep 13 04:29:11.949: has spi 0x9E311248 and conn_id 0
Sep 13 04:29:11.949: lifetime of 300 seconds
Sep 13 04:29:11.949: lifetime of 4608000 kilobytes
Sep 13 04:29:11.949: outbound SA from 172.34.47.57 to 172.34.49.33 (f/i) 0/0
(proxy 0.0.0.0 to 172.19.100.0)
Sep 13 04:29:11.949: has spi 0x812E13CD and conn_id 0
Sep 13 04:29:11.949: lifetime of 300 seconds
Sep 13 04:29:11.949: lifetime of 4608000 kilobytes
Sep 13 04:29:11.949: ISAKMP:(14411): sending packet to 172.34.49.33 my_port 500 peer_port 500 (R) QM_IDLE
Sep 13 04:29:11.949: ISAKMP:(14411):Sending an IKE IPv4 Packet.
Sep 13 04:29:11.949: ISAKMP:(14411):Node 316969593, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI
Sep 13 04:29:11.949: ISAKMP:(14411):Old State = IKE_QM_SPI_STARVE New State = IKE_QM_R_QM2
Sep 13 04:29:12.073: ISAKMP (14411): received packet from 172.34.49.33 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:29:12.073: ISAKMP:(14411):deleting node 316969593 error FALSE reason "QM done (await)"
Sep 13 04:29:12.073: ISAKMP:(14411):Node 316969593, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:29:12.073: ISAKMP:(14411):Old State = IKE_QM_R_QM2 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 04:29:12.265: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP
Sep 13 04:29:12.265: ISAKMP:(0): phase 1 packet is a duplicate of a previous packet.
Sep 13 04:29:12.265: ISAKMP:(0): retransmitting due to retransmit phase 1
Sep 13 04:29:12.565: ISAKMP:(0):purging SA., sa=411BD47C, delme=411BD47C
Sep 13 04:29:12.765: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...
Sep 13 04:29:12.765: ISAKMP (0): incrementing error counter on sa, attempt 2 of 5: retransmit phase 1
Sep 13 04:29:12.765: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP
Sep 13 04:29:12.765: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP
Sep 13 04:29:12.765: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:29:12.817: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP
Sep 13 04:29:12.817: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:29:12.817: ISAKMP:(0):Old State = IKE_R_MM2 New State = IKE_R_MM3
Sep 13 04:29:12.817: ISAKMP:(0): processing KE payload. message ID = 0
Sep 13 04:29:12.817: ISAKMP:(0): processing NONCE payload. message ID = 0
Sep 13 04:29:12.821: ISAKMP:(0):found peer pre-shared key matching 172.35.200.87
Sep 13 04:29:12.821: ISAKMP:(14412): processing vendor id payload
Sep 13 04:29:12.821: ISAKMP:(14412): vendor ID is DPD
Sep 13 04:29:12.821: ISAKMP:(14412): processing vendor id payload
Sep 13 04:29:12.821: ISAKMP:(14412): speaking to another IOS box!
Sep 13 04:29:12.821: ISAKMP:(14412): processing vendor id payload
Sep 13 04:29:12.821: ISAKMP:(14412): vendor ID seems Unity/DPD but major 118 mismatch
Sep 13 04:29:12.821: ISAKMP:(14412): vendor ID is XAUTH
Sep 13 04:29:12.821: ISAKMP:received payload type 20
Sep 13 04:29:12.821: ISAKMP (14412): His hash no match - this node outside NAT
Sep 13 04:29:12.821: ISAKMP:received payload type 20
Sep 13 04:29:12.821: ISAKMP (14412): No NAT Found for self or peer
Sep 13 04:29:12.821: ISAKMP:(14412):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Sep 13 04:29:12.821: ISAKMP:(14412):Old State = IKE_R_MM3 New State = IKE_R_MM3
Sep 13 04:29:12.821: ISAKMP:(14412): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_KEY_EXCH
Sep 13 04:29:12.821: ISAKMP:(14412):Sending an IKE IPv4 Packet.
Sep 13 04:29:12.821: ISAKMP:(14412):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
Sep 13 04:29:12.821: ISAKMP:(14412):Old State = IKE_R_MM3 New State = IKE_R_MM4
Sep 13 04:29:12.881: ISAKMP (14412): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_KEY_EXCH
Sep 13 04:29:12.881: ISAKMP:(14412):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:29:12.881: ISAKMP:(14412):Old State = IKE_R_MM4 New State = IKE_R_MM5
Sep 13 04:29:12.881: ISAKMP:(14412): processing ID payload. message ID = 0
Sep 13 04:29:12.881: ISAKMP (14412): ID payload
next-payload : 8
type : 1
address : 172.35.200.87
protocol : 17
port : 500
length : 12
Sep 13 04:29:12.881: ISAKMP:(0):: peer matches *none* of the profiles
Sep 13 04:29:12.881: ISAKMP:(14412): processing HASH payload. message ID = 0
Sep 13 04:29:12.881: ISAKMP:(14412):SA authentication status:
authenticated
Sep 13 04:29:12.881: ISAKMP:(14412):SA has been authenticated with 172.35.200.87
Sep 13 04:29:12.881: ISAKMP: Trying to insert a peer 172.34.47.57/172.35.200.87/500/, and found existing one 1FB5094 to reuse, free 12370108
Sep 13 04:29:12.881: ISAKMP: Unlocking peer struct 0x12370108 Reuse existing peer, count 0
Sep 13 04:29:12.881: ISAKMP: Deleting peer node by peer_reap for 172.35.200.87: 12370108
Sep 13 04:29:12.881: ISAKMP: Locking peer struct 0x1FB5094, refcount 2 for Reuse existing peer
Sep 13 04:29:12.881: ISAKMP:(14412):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Sep 13 04:29:12.881: ISAKMP:(14412):Old State = IKE_R_MM5 New State = IKE_R_MM5
Sep 13 04:29:12.885: ISAKMP:(14412):SA is doing
Sep 13 04:29:12.997: ISAKMP:(14412):Node 2632555641, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI
Sep 13 04:29:12.997: ISAKMP:(14412):Old State = IKE_QM_SPI_STARVE New State = IKE_QM_R_QM2
Sep 13 04:29:13.077: ISAKMP (14412): received packet from 172.35.200.87 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:29:13.077: ISAKMP:(14412):deleting node -1662411655 error FALSE reason "QM done (await)"
Sep 13 04:29:13.077: ISAKMP:(14412):Node 2632555641, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:29:13.077: ISAKMP:(14412):Old State = IKE_QM_R_QM2 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 04:29:15.137: ISAKMP: set new node 0 to QM_IDLE
Sep 13 04:29:15.137: SA has outstanding requests (local 19.73.214.124 port 500, remote 19.73.214.96 port 500)
Sep 13 04:29:15.137: ISAKMP:(14399): sitting IDLE. Starting QM immediately (QM_IDLE )
Sep 13 04:29:15.137: ISAKMP:(14399):beginning Quick Mode exchange, M-ID of 1817951830
Sep 13 04:29:15.137: ISAKMP:(14399):QM Initiator gets spi
Sep 13 04:29:15.137: ISAKMP:(14399): sending packet to 172.35.232.241 my_port 500 peer_port 500 (I) QM_IDLE
Sep 13 04:29:15.137: ISAKMP:(14399):Sending an IKE IPv4 Packet.
Sep 13 04:29:15.137: ISAKMP:(14399):Node 1817951830, Input = IKE_MESG_INTERNAL, IKE_INIT_QM
Sep 13 04:29:15.137: ISAKMP:(14399):Old State = IKE_QM_READY New State = IKE_QM_I_QM1
Sep 13 04:29:15.229: ISAKMP (14399): received packet from 172.35.232.241 dport 500 sport 500 Global (I) QM_IDLE
Sep 13 04:29:15.229: ISAKMP:(14399): processing HASH payload. message ID = 1817951830
Sep 13 04:29:15.229: ISAKMP:(14399): processing SA payload. message ID = 1817951830
Sep 13 04:29:15.229: ISAKMP:(14399):Checking IPSec proposal 1
Sep 13 04:29:15.229: ISAKMP: transform 1, ESP_3DES
Sep 13 04:29:15.229: ISAKMP: attributes in transform:
Sep 13 04:29:15.229: ISAKMP: encaps is 1 (Tunnel)
Sep 13 04:29:15.229: ISAKMP: SA life type in seconds
Sep 13 04:29:15.229: ISAKMP: SA life duration (basic) of 300
Sep 13 04:29:15.229: ISAKMP: SA life type in kilobytes
Sep 13 04:29:15.229: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0
Sep 13 04:29:15.229: ISAKMP: authenticator is HMAC-MD5
Sep 13 04:29:15.229: ISAKMP: group is 2
Sep 13 04:29:15.229: ISAKMP:(14399):atts are acceptable.
Sep 13 04:29:15.229: ISAKMP:(14399): processing NONCE payload. message ID = 1817951830
Sep 13 04:29:15.229: ISAKMP:(14399): processing KE payload. message ID = 1817951830
Sep 13 04:29:15.233: ISAKMP:(14399): processing ID payload. message ID = 1817951830
Sep 13 04:29:15.233: lifetime of 4608000 kilobytes
Sep 13 04:29:15.233: ISAKMP:(14399): sending packet to 172.35.232.241 my_port 500 peer_port 500 (I) QM_IDLE
Sep 13 04:29:15.233: ISAKMP:(14399):Sending an IKE IPv4 Packet.
Sep 13 04:29:15.233: ISAKMP:(14399):deleting node 1817951830 error FALSE reason "No Error"
Sep 13 04:29:15.233: ISAKMP:(14399):Node 1817951830, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:29:15.233: ISAKMP:(14399):Old State = IKE_QM_I_QM1 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 09:59:15: %CRYPTO-4-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet. (ip) vrf/dest_addr= /172.16.102.30, src_addr= 172.16.10.199, prot= 17
Sep 13 04:29:17.197: ISAKMP:(14394):purging node -318471219
Sep 13 04:29:19.349: ISAKMP:(0):purging node 18447477
Sep 13 04:29:19.349: ISAKMP:(0):purging node -1384134144
Sep 13 04:29:19.665: ISAKMP:(14395):peer does not do paranoid keepalives.
Sep 13 04:29:19.665: ISAKMP:(14395):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE (peer 172.35.200.100)
Sep 13 04:29:19.665: ISAKMP: set new node -2085630984 to QM_IDLE
Sep 13 04:29:19.665: ISAKMP:(14395): sending packet to 172.35.200.100 my_port 500 peer_port 500 (R) QM_IDLE
Sep 13 04:29:19.665: ISAKMP:(14395):Sending an IKE IPv4 Packet.
Sep 13 04:29:19.665: ISAKMP:(14395):purging node -2085630984
Sep 13 04:29:19.665: ISAKMP:(14395):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
Sep 13 04:29:19.665: ISAKMP:(14395):Old State = IKE_P1_COMPLETE New State = IKE_DEST_SA
Sep 13 04:29:19.665: ISAKMP:(14395):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE (peer 172.35.200.100)
Sep 13 04:29:19.665: ISAKMP: Unlocking peer struct 0x1F7036C for isadb_mark_sa_deleted(), count 0
Sep 13 04:29:19.665: ISAKMP:(14395):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:29:19.665: ISAKMP:(14395):Old State = IKE_DEST_SA New State = IKE_DEST_SA
Sep 13 04:29:19.705: ISAKMP (14395): received packet from 172.35.200.100 dport 500 sport 500 Global (R) MM_NO_STATE
Sep 13 04:29:19.925: ISAKMP: ignoring request to send delete notify (no ISAKMP sa) src 172.34.47.57 dst 172.35.200.100 for SPI 0xFEBEA21C
Sep 13 04:29:20.229: ISAKMP:(14391):purging node 617903236
Sep 13 04:29:21.865: ISAKMP:(14396):peer does not do paranoid keepalives.
Sep 13 04:29:21.865: ISAKMP:(14396):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE (peer 172.35.222.236)
Sep 13 04:29:21.865: ISAKMP: set new node 197862031 to QM_IDLE
Sep 13 04:29:21.865: ISAKMP:(14396): sending packet to 172.35.222.236 my_port 500 peer_port 500 (R) QM_IDLE
Sep 13 04:29:21.865: ISAKMP:(14396):Sending an IKE IPv4 Packet.
Sep 13 04:29:21.865: ISAKMP:(14396):purging node 197862031
Sep 13 04:29:21.865: ISAKMP:(14396):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
Sep 13 04:29:21.865: ISAKMP:(14396):Old State = IKE_P1_COMPLETE New State = IKE_DEST_SA
Sep 13 04:29:21.865: ISAKMP:(14396):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE (peer 172.35.222.236)
Sep 13 04:29:21.865: ISAKMP: Unlocking peer struct 0x41145720 for isadb_mark_sa_deleted(), count 0
Sep 13 04:29:21.865: ISAKMP:(14396):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:29:21.865: ISAKMP:(14396):Old State = IKE_DEST_SA New State = IKE_DEST_SA
Sep 13 04:29:21.957: ISAKMP (14396): received packet from 172.35.222.236 dport 500 sport 500 Global (R) MM_NO_STATE
Sep 13 04:29:22.405: ISAKMP: ignoring request to send delete notify (no ISAKMP sa) src 172.34.47.57 dst 172.35.222.236 for SPI 0xB29B24CB
Sep 13 04:29:24.989: ISAKMP (14400): received packet from 172.35.247.239 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:29:24.989: ISAKMP: set new node 1895761073 to QM_IDLE
Sep 13 04:29:24.989: ISAKMP:(14400): processing HASH payload. message ID = 1895761073
Sep 13 04:29:24.989: ISAKMP:(14400): processing SA payload. message ID = 1895761073
Sep 13 04:29:24.989: ISAKMP:(14400):Checking IPSec proposal 1
Sep 13 04:29:24.989: ISAKMP: transform 1, ESP_3DES
Sep 13 04:29:24.989: ISAKMP: attributes in transform:
Sep 13 04:29:24.989: ISAKMP: encaps is 1 (Tunnel)
Sep 13 04:29:24.989: ISAKMP: SA life type in seconds
Sep 13 04:29:24.989: ISAKMP: SA life duration (basic) of 300
Sep 13 04:29:24.989: ISAKMP: SA life type in kilobytes
Sep 13 04:29:24.989: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0
Sep 13 04:29:24.989: ISAKMP: authenticator is HMAC-MD5
Sep 13 04:29:24.989: ISAKMP: group is 2
Sep 13 04:29:24.989: ISAKMP:(14400):atts are acceptable.
Sep 13 04:29:24.989: ISAKMP:(14400): processing NONCE payload. message ID = 1895761073
Sep 13 04:29:24.989: ISAKMP:(14400): processing KE payload. message ID = 1895761073
Sep 13 04:29:24.993: ISAKMP:(14400): processing ID payload. message ID = 1895761073
Sep 13 04:29:24.993: ISAKMP:(14400): processing ID payload. message ID = 1895761073
Sep 13 04:29:24.993: ISAKMP:(14400):QM Responder gets spi
Sep 13 04:29:24.993: ISAKMP:(14400):Node 1895761073, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:29:24.993: ISAKMP:(14400):Old State = IKE_QM_READY New State = IKE_QM_SPI_STARVE
Sep 13 04:29:24.993: ISAKMP:(14400): Creating IPSec SAs
Sep 13 04:29:24.993: inbound SA from 172.35.247.239 to 172.34.47.57 (f/i) 0/ 0
(proxy 172.17.19.0 to 0.0.0.0)
Sep 13 04:29:24.993: has spi 0x9D41C37A and conn_id 0
Sep 13 04:29:24.993: lifetime of 300 seconds
Sep 13 04:29:24.993: lifetime of 4608000 kilobytes
Sep 13 04:29:24.993: outbound SA from 172.34.47.57 to 172.35.247.239 (f/i) 0/0
(proxy 0.0.0.0 to 172.17.19.0)
Sep 13 04:29:24.993: has spi 0xD31F8C67 and conn_id 0
Sep 13 04:29:24.993: lifetime of 300 seconds
Sep 13 04:29:24.993: lifetime of 4608000 kilobytes
Sep 13 04:29:24.993: ISAKMP:(14400): sending packet to 172.35.247.239 my_port 500 peer_port 500 (R) QM_IDLE
Sep 13 04:29:24.993: ISAKMP:(14400):Sending an IKE IPv4 Packet.
Sep 13 04:29:24.993: ISAKMP:(14400):Node 1895761073, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI
Sep 13 04:29:24.993: ISAKMP:(14400):Old State = IKE_QM_SPI_STARVE New State = IKE_QM_R_QM2
Sep 13 04:29:25.061: ISAKMP (14400): received packet from 172.35.247.239 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:29:25.061: ISAKMP:(14400):deleting node 1895761073 error FALSE reason "QM done (await)"
Sep 13 04:29:25.061: ISAKMP:(14400):Node 1895761073, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:29:25.061: ISAKMP:(14400):Old State = IKE_QM_R_QM2 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 04:29:25.089: ISAKMP:(0): SA request profile is (NULL)
Sep 13 04:29:25.089: ISAKMP: Found a peer struct for 172.35.194.218, peer port 500
Sep 13 04:29:25.089: ISAKMP: Locking peer struct 0x1EB7CCC, refcount 1 for isakmp_initiator
Sep 13 04:29:25.089: ISAKMP: local port 500, remote port 500
Sep 13 04:29:25.089: ISAKMP: set new node 0 to QM_IDLE
Sep 13 04:29:25.089: ISAKMP:(0):insert sa successfully sa = 134DC94C
Sep 13 04:29:25.089: ISAKMP:(0):Can not start Aggressive mode, trying Main mode.
Sep 13 04:29:25.089: ISAKMP:(0):found peer pre-shared key matching 172.35.194.218
Sep 13 04:29:25.089: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID
Sep 13 04:29:25.089: ISAKMP:(0): constructed NAT-T vendor-07 ID
Sep 13 04:29:25.089: ISAKMP:(0): constructed NAT-T vendor-03 ID
Sep 13 04:29:25.509: lifetime of 4608000 kilobytes
Sep 13 04:29:25.509: ISAKMP:(14413): sending packet to 172.35.194.218 my_port 500 peer_port 500 (I) QM_IDLE
Sep 13 04:29:25.509: ISAKMP:(14413):Sending an IKE IPv4 Packet.
Sep 13 04:29:25.509: ISAKMP:(14413):deleting node -1204938463 error FALSE reason "No Error"
Sep 13 04:29:25.509: ISAKMP:(14413):Node 3090028833, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:29:25.509: ISAKMP:(14413):Old State = IKE_QM_I_QM1 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 04:29:25.621: ISAKMP (14413): received packet from 172.35.194.218 dport 500 sport 500 Global (I) QM_IDLE
Sep 13 04:29:28.233: ISAKMP:(0):purging node 1447299565
Sep 13 04:29:28.233: ISAKMP:(0):purging node -1227412869
Sep 13 04:29:29.349: ISAKMP:(0):purging SA., sa=134D9B1C, delme=134D9B1C
Sep 13 04:29:30.229: ISAKMP:(14391):purging SA., sa=1FA2A94, delme=1FA2A94
Sep 13 04:29:35.145: ISAKMP (14412): received packet from 172.35.200.87 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:29:35.145: ISAKMP: set new node 925689348 to QM_IDLE
Sep 13 04:29:35.145: ISAKMP:(14412): processing HASH payload. message ID = 925689348
Sep 13 04:29:35.145: ISAKMP:(14412): processing DELETE payload. message ID = 925689348
Sep 13 04:29:35.145: ISAKMP:(14412):peer does not do paranoid keepalives.
Sep 13 04:29:35.145: ISAKMP:(14412):deleting node 925689348 error FALSE reason "Informational (in) state 1"
Sep 13 04:29:35.153: ISAKMP: set new node 1929835961 to QM_IDLE
Sep 13 04:29:35.153: ISAKMP:(14410): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) QM_IDLE
Sep 13 04:29:35.153: ISAKMP:(14410):Sending an IKE IPv4 Packet.
Sep 13 04:29:35.153: ISAKMP:(14410):purging node 1929835961
Sep 13 04:29:35.153: ISAKMP:(14410):Input = IKE_MESG_FROM_IPSEC, IKE_PHASE2_DEL
Se
address : 172.35.194.145
protocol : 17
port : 500
length : 12
Sep 13 04:27:21.573: ISAKMP:(0):: peer matches *none* of the profiles
Sep 13 04:27:21.573: ISAKMP:(14407): processing HASH payload. message ID = 0
Sep 13 04:27:21.573: ISAKMP:(14407):SA authentication status:
authenticated
Sep 13 04:27:21.573: ISAKMP:(14407):SA has been authenticated with 172.35.194.145
Sep 13 04:27:21.573: ISAKMP:(14407):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:27:21.573: ISAKMP:(14407):Old State = IKE_I_MM5 New State = IKE_I_MM6
Sep 13 04:27:21.573: ISAKMP:(14407):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Sep 13 04:27:21.573: ISAKMP:(14407):Old State = IKE_I_MM6 New State = IKE_I_MM6
Sep 13 04:27:21.573: ISAKMP:(14407):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
Sep 13 04:27:21.573: ISAKMP:(14407):Old State = IKE_I_MM6 New State = IKE_P1_COMPLETE
Sep 13 04:27:21.573: ISAKMP:(14407):beginning Quick Mode exchange, M-ID of 737401177
Sep 13 04:27:21.573: ISAKMP:(14407):QM Initiator gets spi
Sep 13 04:27:21.577: ISAKMP:(14407): sending packet to 172.35.194.145 my_port 500 peer_port 500 (I) QM_IDLE
Sep 13 04:27:21.577: ISAKMP:(14407):Sending an IKE IPv4 Packet.
Sep 13 04:27:21.577: ISAKMP:(14407):Node 737401177, Input = IKE_MESG_INTERNAL, IKE_INIT_QM
Sep 13 04:27:21.577: ISAKMP:(14407):Old State = IKE_QM_READY New State = IKE_QM_I_QM1
Sep 13 04:27:21.577: ISAKMP:(14407):Input = IKE_MESG_INTERNAL, IKE_PHASE1_COMPLETE
Sep 13 04:27:21.577: ISAKMP:(14407):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
Sep 13 04:27:21.645: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP
Sep 13 04:27:21.645: ISAKMP:(0): phase 1 packet is a duplicate of a previous packet.
Sep 13 04:27:21.645: ISAKMP:(0): retransmitting due to retransmit phase 1
Sep 13 04:27:21.665: ISAKMP (14407): received packet from 172.35.194.145 dport 500 sport 500 Global (I) QM_IDLE
Sep 13 04:27:21.665: ISAKMP:(14407): processing HASH payload. message ID = 737401177
Sep 13 04:27:21.665: ISAKMP:(14407): processing SA payload. message ID = 737401177
Sep 13 04:27:21.665: ISAKMP:(14407):Checking IPSec proposal 1
Sep 13 04:27:21.665: ISAKMP: transform 1, ESP_3DES
Sep 13 04:27:21.665: ISAKMP: attributes in transform:
Sep 13 04:27:21.665: ISAKMP: encaps is 1 (Tunnel)
Sep 13 04:27:21.665: ISAKMP: SA life type in seconds
Sep 13 04:27:21.665: ISAKMP: SA life duration (basic) of 300
Sep 13 04:27:21.665: ISAKMP: SA life type in kilobytes
Sep 13 04:27:21.665: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0
Sep 13 04:27:21.665: ISAKMP: authenticator is HMAC-MD5
Sep 13 04:27:21.665: ISAKMP: group is 2
Sep 13 04:27:21.665: ISAKMP:(14407):atts are acceptable.
Sep 13 04:27:21.665: ISAKMP:(14407): processing NONCE payload. message ID = 737401177
Sep 13 04:27:21.665: ISAKMP:(14407): processing KE payload. message ID = 737401177
Sep 13 04:27:21.669: ISAKMP:(14407): processing ID payload. message ID = 737401177
Sep 13 04:27:21.669: ISAKMP:(14407): processing ID payload. message ID = 737401177
Sep 13 04:27:21.669: ISAKMP:(14407): Creating IPSec SAs
Sep 13 04:27:21.669: inbound SA from 172.35.194.145 to 172.34.47.57 (f/i) 0/ 0
(proxy 172.16.2.0 to 0.0.0.0)
Sep 13 04:27:21.669: has spi 0x3A7219D1 and conn_id 0
Sep 13 04:27:21.669: lifetime of 300 seconds
Sep 13 04:27:21.669: lifetime of 4608000 kilobytes
Sep 13 04:27:21.669: outbound SA from 172.34.47.57 to 172.35.194.145 (f/i) 0/0
(proxy 0.0.0.0 to 172.16.2.0)
Sep 13 04:27:21.669: has spi 0x2DB4C49F and conn_id 0
Sep 13 04:27:21.669: lifetime of 300 seconds
Sep 13 04:27:21.669: lifetime of 4608000 kilobytes
Sep 13 04:27:21.669: ISAKMP:(14407): sending packet to 172.35.194.145 my_port 500 peer_port 500 (I) QM_IDLE
Sep 13 04:27:21.669: ISAKMP:(14407):Sending an IKE IPv4 Packet.
Sep 13 04:27:21.669: ISAKMP:(14407):deleting node 737401177 error FALSE reason "No Error"
Sep 13 04:27:21.669: ISAKMP:(14407):Node 737401177, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:27:21.669: ISAKMP:(14407):Old State = IKE_QM_I_QM1 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 04:27:21.929: ISAKMP:(14386):purging node -1519362962
Sep 13 04:27:22.145: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...
Sep 13 04:27:22.145: ISAKMP (0): incrementing error counter on sa, attempt 4 of 5: retransmit phase 1
Sep 13 04:27:22.145: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP
Sep 13 04:27:22.145: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP
Sep 13 04:27:22.145: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:27:22.569: ISAKMP (0): received packet from 172.35.200.91 dport 500 sport 500 Global (R) MM_NO_STATE
Sep 13 04:27:24.841: ISAKMP: set new node -76103279 to QM_IDLE
Sep 13 04:27:24.841: ISAKMP:(14406): sending packet to 172.35.217.15 my_port 500 peer_port 500 (R) QM_IDLE
Sep 13 04:27:24.841: ISAKMP:(14406):Sending an IKE IPv4 Packet.
Sep 13 04:27:24.841: ISAKMP:(14406):purging node -76103279
Sep 13 04:27:24.841: ISAKMP:(14406):Input = IKE_MESG_FROM_IPSEC, IKE_PHASE2_DEL
Sep 13 04:27:24.841: ISAKMP:(14406):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
Sep 13 04:27:24.841: ISAKMP (14406): received packet from 172.35.217.15 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:27:24.841: ISAKMP: set new node -1746108638 to QM_IDLE
Sep 13 04:27:24.841: ISAKMP:(14406): processing HASH payload. message ID = 2548858658
Sep 13 04:27:24.841: ISAKMP:(14406): processing DELETE payload. message ID = 2548858658
Sep 13 04:27:24.841: ISAKMP:(14406):peer does not do paranoid keepalives.
Sep 13 04:27:24.841: ISAKMP:(14406):deleting node -1746108638 error FALSE reason "Informational (in) state 1"
Sep 13 04:27:26.197: ISAKMP:(14384):purging SA., sa=134D9B1C, delme=134D9B1C
Sep 13 04:27:26.233: ISAKMP:(14385):purging SA., sa=1F6EF24, delme=1F6EF24
Sep 13 04:27:27.497: ISAKMP:(14404):purging node 498370353
Sep 13 04:27:28.345: ISAKMP:(0):purging SA., sa=4018B0F0, delme=4018B0F0
Sep 13 04:27:28.845: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
Sep 13 04:27:28.845: ISAKMP:(0):peer does not do paranoid keepalives.
Sep 13 04:27:28.845: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (I) MM_NO_STATE (peer 172.35.200.87)
Sep 13 04:27:28.845: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (I) MM_NO_STATE (peer 172.35.200.87)
Sep 13 04:27:28.845: ISAKMP: Unlocking peer struct 0x1FB5094 for isadb_mark_sa_deleted(), count 0
Sep 13 04:27:28.845: ISAKMP: Deleting peer node by peer_reap for 172.35.200.87: 1FB5094
Sep 13 04:27:28.845: ISAKMP:(0):deleting node 1013205142 error FALSE reason "IKE deleted"
Sep 13 04:27:28.845: ISAKMP:(0):deleting node -1738356762 error FALSE reason "IKE deleted"
Sep 13 04:27:28.845: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
Sep 13 04:27:28.845: ISAKMP:(0):Old State = IKE_I_MM1 New State = IKE_DEST_SA
Sep 13 04:27:29.345: ISAKMP:(0): SA request profile is (NULL)
Sep 13 04:27:29.345: ISAKMP: Created a peer struct for 172.35.200.87, peer port 500
Sep 13 04:27:29.345: ISAKMP: New peer created peer = 0x1FB5094 peer_handle = 0x80008B45
Sep 13 04:27:29.345: ISAKMP: Locking peer struct 0x1FB5094, refcount 1 for isakmp_initiator
Sep 13 04:27:29.349: ISAKMP: local port 500, remote port 500
Sep 13 04:27:29.349: ISAKMP: set new node 0 to QM_IDLE
Sep 13 04:27:29.349: ISAKMP: Find a dup sa in the avl tree during calling isadb_insert sa = 134D9B1C
Sep 13 04:27:29.349: ISAKMP:(0):Can not start Aggressive mode, trying Main mode.
Sep 13 04:27:29.349: ISAKMP:(0):found peer pre-shared key matching 172.35.200.87
Sep 13 04:27:29.349: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID
Sep 13 04:27:29.349: ISAKMP:(0): constructed NAT-T vendor-07 ID
Sep 13 04:27:29.349: ISAKMP:(0): constructed NAT-T vendor-03 ID
Sep 13 04:27:29.349: ISAKMP:(0): constructed NAT-T vendor-02 ID
Sep 13 04:27:29.349: ISAKMP:(0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM
Sep 13 04:27:29.349: ISAKMP:(0):Old State = IKE_READY New State = IKE_I_MM1
Sep 13 04:27:29.349: ISAKMP:(0): beginning Main Mode exchange
Sep 13 04:27:29.349: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE
Sep 13 04:27:29.349: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:27:30.677: ISAKMP:(14387):purging node 748799546
Sep 13 04:27:31.645: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP
Sep 13 04:27:31.645: ISAKMP:(0): phase 1 packet is a duplicate of a previous packet.
Sep 13 04:27:31.645: ISAKMP:(0): retransmitting due to retransmit phase 1
Sep 13 04:27:31.929: ISAKMP:(14386):purging SA., sa=411CF108, delme=411CF108
Sep 13 04:27:32.145: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...
Sep 13 04:27:32.145: ISAKMP (0): incrementing error counter on sa, attempt 5 of 5: retransmit phase 1
Sep 13 04:27:32.145: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP
Sep 13 04:27:32.145: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP
Sep 13 04:27:32.145: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:27:32.569: ISAKMP (0): received packet from 172.35.200.91 dport 500 sport 500 Global (R) MM_NO_STATE
Sep 13 04:27:32.953: ISAKMP (14389): received packet from 172.35.237.233 dport 500 sport 500 Global (I) QM_IDLE
Sep 13 04:27:32.953: ISAKMP: set new node 299600500 to QM_IDLE
Sep 13 04:27:32.953: ISAKMP:(14389): processing HASH payload. message ID = 299600500
Sep 13 04:27:32.953: ISAKMP:received payload type 18
Sep 13 04:27:32.953: ISAKMP:(14389):Processing delete with reason payload
Sep 13 04:27:32.953: ISAKMP:(14389):delete doi = 1
Sep 13 04:27:32.953: ISAKMP:(14389):delete protocol id = 1
Sep 13 04:27:32.953: ISAKMP:(14389):delete spi_size = 16
Sep 13 04:27:32.953: ISAKMP:(14389):delete num spis = 1
Sep 13 04:27:32.953: ISAKMP:(14389):delete_reason = 10
Sep 13 04:27:32.953: ISAKMP:(14389): processing DELETE_WITH_REASON payload, message ID = 299600500, reason: Unknown delete reason!
Sep 13 04:27:32.953: ISAKMP:(14389):peer does not do paranoid keepalives.
Sep 13 04:27:32.953: ISAKMP:(14389):deleting SA reason "IKE SA Lifetime Exceeded" state (I) QM_IDLE (peer 172.35.237.233)
Sep 13 04:27:32.953: ISAKMP:(14389):deleting node 299600500 error FALSE reason "Informational (in) state 1"
Sep 13 04:27:32.953: ISAKMP: set new node -1993838501 to QM_IDLE
Sep 13 04:27:32.953: ISAKMP:(14389): sending packet to 172.35.237.233 my_port 500 peer_port 500 (I) QM_IDLE
Sep 13 04:27:32.953: ISAKMP:(14389):Sending an IKE IPv4 Packet.
Sep 13 04:27:32.953: ISAKMP:(14389):purging node -1993838501
Sep 13 04:27:32.953: ISAKMP:(14389):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
Sep 13 04:27:32.953: ISAKMP:(14389):Old State = IKE_P1_COMPLETE New State = IKE_DEST_SA
Sep 13 04:27:32.953: ISAKMP:(14389):deleting SA reason "IKE SA Lifetime Exceeded" state (I) QM_IDLE (peer 172.35.237.233)
Sep 13 04:27:32.953: ISAKMP: Unlocking peer struct 0x10D668C for isadb_mark_sa_deleted(), count 0
Sep 13 04:27:32.953: ISAKMP:(14389):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:27:32.953: ISAKMP:(14389):Old State = IKE_DEST_SA New State = IKE_DEST_SA
Sep 13 04:27:33.249: ISAKMP: ignoring request to send delete notify (no ISAKMP sa) src 172.34.47.57 dst 172.35.237.233 for SPI 0xF84E9858
Sep 13 04:27:36.129: ISAKMP:(14406):purging node -500665922
Sep 13 04:27:38.233: ISAKMP:(0): SA request profile is (NULL)
Sep 13 04:27:38.233: ISAKMP: Created a peer struct for 172.35.194.150, peer port 500
Sep 13 04:27:38.233: ISAKMP: New peer created peer = 0x12370108 peer_handle = 0x8000FFBF
Sep 13 04:27:38.233: ISAKMP: Locking peer struct 0x12370108, refcount 1 for isakmp_initiator
Sep 13 04:27:38.233: ISAKMP: local port 500, remote port 500
Sep 13 04:27:38.233: ISAKMP: set new node 0 to QM_IDLE
Sep 13 04:27:38.233: ISAKMP:(0):insert sa successfully sa = 4018B0F0
Sep 13 04:27:38.233: ISAKMP:(0):Can not start Aggressive mode, trying Main mode.
Sep 13 04:27:38.233: ISAKMP:(0):found peer pre-shared key matching 172.35.194.150
Sep 13 04:27:38.233: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID
Sep 13 04:27:38.233: ISAKMP:(0): constructed NAT-T vendor-07 ID
Sep 13 04:27:38.233: ISAKMP:(0): constructed NAT-T vendor-03 ID
Sep 13 04:27:38.233: ISAKMP:(0): constructed NAT-T vendor-02 ID
Sep 13 04:27:38.233: ISAKMP:(0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM
Sep 13 04:27:38.233: ISAKMP:(0):Old State = IKE_READY New State = IKE_I_MM1
Sep 13 04:27:38.233: ISAKMP:(0): beginning Main Mode exchange
Sep 13 04:27:38.233: ISAKMP:(0): sending packet to 172.35.194.150 my_port 500 peer_port 500 (I) MM_NO_STATE
Sep 13 04:27:38.233: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:27:39.129: ISAKMP:(0): SA request profile is (NULL)
Sep 13 04:27:39.129: ISAKMP: Found a peer struct for 172.34.47.146, peer port 500
Sep 13 04:27:39.129: ISAKMP: Locking peer struct 0x10E9688, refcount 1 for isakmp_initiator
Sep 13 04:27:39.129: ISAKMP: local port 500, remote port 500
Sep 13 04:27:39.129: ISAKMP: set new node 0 to QM_IDLE
Sep 13 04:27:39.129: ISAKMP:(0):insert sa successfully sa = 1F6EF24
Sep 13 04:27:39.129: ISAKMP:(0):Can not start Aggressive mode, trying Main mode.
Sep 13 04:27:39.129: ISAKMP:(0):found peer pre-shared key matching 172.34.47.146
Sep 13 04:27:39.129: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID
Sep 13 04:27:39.129: ISAKMP:(0): constructed NAT-T vendor-07 ID
Sep 13 04:27:39.129: ISAKMP:(0): constructed NAT-T vendor-03 ID
Sep 13 04:27:39.129: ISAKMP:(0): constructed NAT-T vendor-02 ID
Sep 13 04:27:39.129: ISAKMP:(0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM
Sep 13 04:27:39.129: ISAKMP:(0):Old State = IKE_READY New State = IKE_I_MM1
Sep 13 04:27:39.129: ISAKMP:(0): beginning Main Mode exchange
Sep 13 04:27:39.129: ISAKMP:(0): sending packet to 172.34.47.146 my_port 500 peer_port 500 (I) MM_NO_STATE
Sep 13 04:27:39.129: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:27:39.217: ISAKMP (0): received packet from 172.34.47.146 dport 500 sport 500 Global (I) MM_NO_STATE
Sep 13 04:27:39.217: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:27:39.217: ISAKMP:(0):Old State = IKE_I_MM1 New State = IKE_I_MM2
Sep 13 04:27:39.217: ISAKMP:(0): processing SA payload. message ID = 0
Sep 13 04:27:39.217: ISAKMP:(0): processing vendor id payload
Sep 13 04:27:39.217: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch
Sep 13 04:27:39.217: ISAKMP (0): vendor ID is NAT-T RFC 3947
Sep 13 04:27:39.217: ISAKMP:(0):found peer pre-shared key matching 172.34.47.146
Sep 13 04:27:39.217: ISAKMP:(0): local preshared key found
Sep 13 04:27:39.217: ISAKMP : Scanning profiles for xauth ...
Sep 13 04:27:39.217: ISAKMP:(0):Checking ISAKMP transform 1 against priority 30 policy
Sep 13 04:27:39.217: ISAKMP: encryption 3DES-CBC
Sep 13 04:27:39.217: ISAKMP: hash MD5
Sep 13 04:27:39.217: ISAKMP: default group 2
Sep 13 04:27:39.217: ISAKMP: auth pre-share
Sep 13 04:27:39.217: ISAKMP: life type in seconds
Sep 13 04:27:39.217: ISAKMP: life duration (basic) of 300
Sep 13 04:27:39.217: ISAKMP:(0):atts are acceptable. Next payload is 0
Sep 13 04:27:39.217: ISAKMP:(0):Acceptable atts:actual life: 0
Sep 13 04:27:39.217: ISAKMP:(0):Acceptable atts:life: 0
Sep 13 04:27:39.217: ISAKMP:(0):Basic life_in_seconds:300
Sep 13 04:27:39.217: ISAKMP:(0):Returning Actual lifetime: 300
Sep 13 04:27:39.217: ISAKMP:(0)::Started lifetime timer: 300.
Sep 13 04:27:39.217: ISAKMP:(0): processing vendor id payload
Sep 13 04:27:39.217: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch
Sep 13 04:27:39.217: ISAKMP (0): vendor ID is NAT-T RFC 3947
Sep 13 04:27:39.217: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Sep 13 04:27:39.217: ISAKMP:(0):Old State = IKE_I_MM2 New State = IKE_I_MM2
Sep 13 04:27:39.217: ISAKMP:(0): sending packet to 172.34.47.146 my_port 500 peer_port 500 (I) MM_SA_SETUP
Sep 13 04:27:39.217: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:27:39.217: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
Sep 13 04:27:39.217: ISAKMP:(0):Old State = IKE_I_MM2 New State = IKE_I_MM3
Sep 13 04:27:39.293: ISAKMP (0): received packet from 172.34.47.146 dport 500 sport 500 Global (I) MM_SA_SETUP
Sep 13 04:27:39.293: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:27:39.293: ISAKMP:(0):Old State = IKE_I_MM3 New State = IKE_I_MM4
Sep 13 04:27:39.293: ISAKMP:(0): processing KE payload. message ID = 0
Sep 13 04:27:39.293: ISAKMP:(0): processing NONCE payload. message ID = 0
Sep 13 04:27:39.293: ISAKMP:(0):found peer pre-shared key matching 172.34.47.146
Sep 13 04:27:39.293: ISAKMP:(14408): processing vendor id payload
Sep 13 04:27:39.293: ISAKMP:(14408): vendor ID is Unity
Sep 13 04:27:39.293: ISAKMP:(14408): processing vendor id payload
Sep 13 04:27:39.293: ISAKMP:(14408): vendor ID is DPD
Sep 13 04:27:39.293: ISAKMP:(14408): processing vendor id payload
Sep 13 04:27:39.293: ISAKMP:(14408): speaking to another IOS box!
Sep 13 04:27:39.293: ISAKMP:received payload type 20
Sep 13 04:27:39.293: ISAKMP (14408): His hash no match - this node outside NAT
Sep 13 04:27:39.293: ISAKMP:received payload type 20
Sep 13 04:27:39.293: ISAKMP (14408): No NAT Found for self or peer
Sep 13 04:27:39.293: ISAKMP:(14408):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Sep 13 04:27:39.297: ISAKMP:(14408):Old State = IKE_I_MM4 New State = IKE_I_MM4
Sep 13 04:27:39.297: ISAKMP:(14408):SA is doing pre-shared key authentication using id type ID_IPV4_ADDR
Sep 13 04:27:39.297: ISAKMP (14408): ID payload
next-payload : 8
type : 1
address : 172.34.47.57
protocol : 17
port : 500
length : 12
Sep 13 04:27:39.297: ISAKMP:(14408):Total payload length: 12
Sep 13 04:27:39.297: ISAKMP:(14408): sending packet to 172.34.47.146 my_port 500 peer_port 500 (I) MM_KEY_EXCH
Sep 13 04:27:39.297: ISAKMP:(14408):Sending an IKE IPv4 Packet.
Sep 13 04:27:39.297: ISAKMP:(14408):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
Sep 13 04:27:39.297: ISAKMP:(14408):Old State = IKE_I_MM4 New State = IKE_I_MM5
Sep 13 04:27:39.337: ISAKMP (14408): received packet from 172.34.47.146 dport 500 sport 500 Global (I) MM_KEY_EXCH
Sep 13 04:27:39.337: ISAKMP:(14408): processing ID payload. message ID = 0
Sep 13 04:27:39.337: ISAKMP (14408): ID payload
next-payload : 8
type : 1
address : 172.34.47.146
protocol : 17
port : 500
length : 12
Sep 13 04:27:39.337: ISAKMP:(0):: peer matches *none* of the profiles
Sep 13 04:27:39.337: ISAKMP:(14408): processing HASH payload. message ID = 0
Sep 13 04:27:39.337: ISAKMP:(14408):SA authentication status:
authenticated
Sep 13 04:27:39.337: ISAKMP:(14408):SA has been authenticated with 172.34.47.146
Sep 13 04:27:39.337: ISAKMP:(14408):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:27:39.337: ISAKMP:(14408):Old State = IKE_I_MM5 New State = IKE_I_MM6
Sep 13 04:27:39.337: ISAKMP:(14408):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Sep 13 04:27:39.337: ISAKMP:(14408):Old State = IKE_I_MM6 New State = IKE_I_MM6
Sep 13 04:27:39.337: ISAKMP:(14408):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
Sep 13 04:27:39.337: ISAKMP:(14408):Old State = IKE_I_MM6 New State = IKE_P1_COMPLETE
Sep 13 04:27:39.337: ISAKMP:(14408):beginning Quick Mode exchange, M-ID of 119951985
Sep 13 04:27:39.341: ISAKMP:(14408):QM Initiator gets spi
Sep 13 04:27:39.341: ISAKMP:(14408): sending packet to 172.34.47.146 my_port 500 peer_port 500 (I) QM_IDLE
Sep 13 04:27:39.341: ISAKMP:(14408):Sending an IKE IPv4 Packet.
Sep 13 04:27:39.341: ISAKMP:(14408):Node 119951985, Input = IKE_MESG_INTERNAL, IKE_INIT_QM
Sep 13 04:27:39.341: ISAKMP:(14408):Old State = IKE_QM_READY New State = IKE_QM_I_QM1
Sep 13 04:27:39.341: ISAKMP:(14408):Input = IKE_MESG_INTERNAL, IKE_PHASE1_COMPLETE
Sep 13 04:27:39.341: ISAKMP:(14408):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
Sep 13 04:27:39.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
Sep 13 04:27:39.349: ISAKMP (0): incrementing error counter on sa, attempt 1 of 5: retransmit phase 1
Sep 13 04:27:39.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
Sep 13 04:27:39.349: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE
Sep 13 04:27:39.349: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:27:39.437: ISAKMP (14408): received packet from 172.34.47.146 dport 500 sport 500 Global (I) QM_IDLE
Sep 13 04:27:39.437: ISAKMP:(14408): processing HASH payload. message ID = 119951985
Sep 13 04:27:39.437: ISAKMP:(14408): processing SA payload. message ID = 119951985
Sep 13 04:27:39.437: ISAKMP:(14408):Checking IPSec proposal 1
Sep 13 04:27:39.437: ISAKMP: transform 1, ESP_3DES
Sep 13 04:27:39.437: ISAKMP: attributes in transform:
Sep 13 04:27:39.437: ISAKMP: encaps is 1 (Tunnel)
Sep 13 04:27:39.437: ISAKMP: SA life type in seconds
Sep 13 04:27:39.437: ISAKMP: SA life duration (basic) of 300
Sep 13 04:27:39.437: ISAKMP: SA life type in kilobytes
Sep 13 04:27:39.437: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0
Sep 13 04:27:39.437: ISAKMP: authenticator is HMAC-MD5
Sep 13 04:27:39.437: ISAKMP: group is 2
Sep 13 04:27:39.437: ISAKMP:(14408):atts are acceptable.
Sep 13 04:27:39.437: ISAKMP:(14408): processing NONCE payload. message ID = 119951985
Sep 13 04:27:39.437: ISAKMP:(14408): processing KE payload. message ID = 119951985
Sep 13 04:27:39.441: ISAKMP:(14408): processing ID payload. message ID = 119951985
Sep 13 04:27:39.441: ISAKMP:(14408): processing ID payload. message ID = 119951985
Sep 13 04:27:39.441: ISAKMP:(14408): Creating IPSec SAs
Sep 13 04:27:39.441: inbound SA from 172.34.47.146 to 172.34.47.57 (f/i) 0/ 0
(proxy 172.16.1.0 to 0.0.0.0)
Sep 13 04:27:39.441: has spi 0x650E4D42 and conn_id 0
Sep 13 04:27:39.441: lifetime of 300 seconds
Sep 13 04:27:39.441: lifetime of 4608000 kilobytes
Sep 13 04:27:39.441: outbound SA from 172.34.47.57 to 172.34.47.146 (f/i) 0/0
(proxy 0.0.0.0 to 172.16.1.0)
Sep 13 04:27:39.441: has spi 0xDB5D5974 and conn_id 0
Sep 13 04:27:39.441: lifetime of 300 seconds
Sep 13 04:27:39.441: lifetime of 4608000 kilobytes
Sep 13 04:27:39.441: ISAKMP:(14408): sending packet to 172.34.47.146 my_port 500 peer_port 500 (I) QM_IDLE
Sep 13 04:27:39.441: ISAKMP:(14408):Sending an IKE IPv4 Packet.
Sep 13 04:27:39.441: ISAKMP:(14408):deleting node 119951985 error FALSE reason "No Error"
Sep 13 04:27:39.441: ISAKMP:(14408):Node 119951985, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:27:39.441: ISAKMP:(14408):Old State = IKE_QM_I_QM1 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 04:27:40.389: ISAKMP (0): received packet from 172.35.206.48 dport 500 sport 500 Global (N) NEW SA
Sep 13 04:27:40.389: ISAKMP: Found a peer struct for 172.35.206.48, peer port 500
Sep 13 04:27:40.389: ISAKMP: Locking peer struct 0x1E9F854, refcount 1 for crypto_isakmp_process_block
Sep 13 04:27:40.389: ISAKMP: local port 500, remote port 500
Sep 13 04:27:40.389: ISAKMP:(0):insert sa successfully sa = 411CEBDC
Sep 13 04:27:40.389: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:27:40.389: ISAKMP:(0):Old State = IKE_READY New State = IKE_R_MM1
Sep 13 04:27:40.389: ISAKMP:(0): processing SA payload. message ID = 0
Sep 13 04:27:40.389: ISAKMP:(0): processing vendor id payload
Sep 13 04:27:40.389: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch
Sep 13 04:27:40.389: ISAKMP (0): vendor ID is NAT-T RFC 3947
Sep 13 04:27:40.389: ISAKMP:(0): processing vendor id payload
Sep 13 04:27:40.389: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch
Sep 13 04:27:40.389: ISAKMP (0): vendor ID is NAT-T v7
Sep 13 04:27:40.389: ISAKMP:(0): processing vendor id payload
Sep 13 04:27:40.389: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch
Sep 13 04:27:40.389: ISAKMP:(0): vendor ID is NAT-T v3
Sep 13 04:27:40.389: ISAKMP:(0): processing vendor id payload
Sep 13 04:27:40.389: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch
Sep 13 04:27:40.389: ISAKMP:(0): vendor ID is NAT-T v2
Sep 13 04:27:40.389: ISAKMP:(0):found peer pre-shared key matching 172.35.206.48
Sep 13 04:27:40.389: ISAKMP:(0): local preshared key found
Sep 13 04:27:40.389: ISAKMP : Scanning profiles for xauth ...
Sep 13 04:27:40.389: ISAKMP:(0):Checking ISAKMP transform 1 against priority 30 policy
Sep 13 04:27:40.389: ISAKMP: encryption 3DES-CBC
Sep 13 04:27:40.389: ISAKMP: hash MD5
Sep 13 04:27:40.389: ISAKMP: default group 2
Sep 13 04:27:40.389: ISAKMP: auth pre-share
Sep 13 04:27:40.389: ISAKMP: life type in seconds
Sep 13 04:27:40.389: ISAKMP: life duration (basic) of 300
Sep 13 04:27:40.389: ISAKMP:(0):atts are acceptable. Next payload is 0
Sep 13 04:27:40.389: ISAKMP:(0):Acceptable atts:actual life: 0
Sep 13 04:27:40.389: ISAKMP:(0):Acceptable atts:life: 0
Sep 13 04:27:40.389: ISAKMP:(0):Basic life_in_seconds:300
Sep 13 04:27:40.389: ISAKMP:(0):Returning Actual lifetime: 300
Sep 13 04:27:40.389: ISAKMP:(0)::Started lifetime timer: 300.
Sep 13 04:27:40.389: ISAKMP:(0): processing vendor id payload
Sep 13 04:27:40.389: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch
Sep 13 04:27:40.389: ISAKMP (0): vendor ID is NAT-T RFC 3947
Sep 13 04:27:40.389: ISAKMP:(0): processing vendor id payload
Sep 13 04:27:40.389: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch
Sep 13 04:27:40.389: ISAKMP (0): vendor ID is NAT-T v7
Sep 13 04:27:40.389: ISAKMP:(0): processing vendor id payload
Sep 13 04:27:40.389: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch
Sep 13 04:27:40.389: ISAKMP:(0): vendor ID is NAT-T v3
Sep 13 04:27:40.389: ISAKMP:(0): processing vendor id payload
Sep 13 04:27:40.389: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch
Sep 13 04:27:40.389: ISAKMP:(0): vendor ID is NAT-T v2
Sep 13 04:27:40.389: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Sep 13 04:27:40.389: ISAKMP:(0):Old State = IKE_R_MM1 New State = IKE_R_MM1
Sep 13 04:27:40.389: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID
Sep 13 04:27:40.389: ISAKMP:(0): sending packet to 172.35.206.48 my_port 500 peer_port 500 (R) MM_SA_SETUP
Sep 13 04:27:40.389: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:27:40.389: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
Sep 13 04:27:40.389: ISAKMP:(0):Old State = IKE_R_MM1 New State = IKE_R_MM2
Sep 13 04:27:40.473: ISAKMP (0): received packet from 172.35.206.48 dport 500 sport 500 Global (R) MM_SA_SETUP
Sep 13 04:27:40.473: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:27:40.473: ISAKMP:(0):Old State = IKE_R_MM2 New State = IKE_R_MM3
Sep 13 04:27:40.473: ISAKMP:(0): processing KE payload. message ID = 0
Sep 13 04:27:40.473: ISAKMP:(0): processing NONCE payload. message ID = 0
Sep 13 04:27:40.473: ISAKMP:(0):found peer pre-shared key matching 172.35.206.48
Sep 13 04:27:40.473: ISAKMP:(14409): processing vendor id payload
Sep 13 04:27:40.473: ISAKMP:(14409): vendor ID is DPD
Sep 13 04:27:40.473: ISAKMP:(14409): processing vendor id payload
Sep 13 04:27:40.473: ISAKMP:(14409): speaking to another IOS box!
Sep 13 04:27:40.473: ISAKMP:(14409): processing vendor id payload
Sep 13 04:27:40.473: ISAKMP:(14409): vendor ID seems Unity/DPD but major 129 mismatch
Sep 13 04:27:40.473: ISAKMP:(14409): vendor ID is XAUTH
Sep 13 04:27:40.473: ISAKMP:received payload type 20
Sep 13 04:27:40.473: ISAKMP (14409): His hash no match - this node outside NAT
Sep 13 04:27:40.473: ISAKMP:received payload type 20
Sep 13 04:27:40.477: ISAKMP (14409): No NAT Found for self or peer
Sep 13 04:27:40.477: ISAKMP:(14409):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Sep 13 04:27:40.477: ISAKMP:(14409):Old State = IKE_R_MM3 New State = IKE_R_MM3
Sep 13 04:27:40.477: ISAKMP:(14409): sending packet to 172.35.206.48 my_port 500 peer_port 500 (R) MM_KEY_EXCH
Sep 13 04:27:40.477: ISAKMP:(14409):Sending an IKE IPv4 Packet.
Sep 13 04:27:40.477: ISAKMP:(14409):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
Sep 13 04:27:40.677: ISAKMP:(14387):purging SA., sa=40177E8C, delme=40177E8C
Sep 13 04:27:40.741: ISAKMP (14409): received packet from 172.35.206.48 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:27:40.741: ISAKMP:(14409):deleting node 1404442059 error FALSE reason "QM done (await)"
Sep 13 04:27:40.741: ISAKMP:(14409):Node 1404442059, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:27:40.741: ISAKMP:(14409):Old State = IKE_QM_R_QM2 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 04:27:42.145: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...
Sep 13 04:27:42.145: ISAKMP:(0):peer does not do paranoid keepalives.
Sep 13 04:27:42.145: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (R) MM_SA_SETUP (peer 172.35.200.87)
Sep 13 04:27:42.145: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (R) MM_SA_SETUP (peer 172.35.200.87)
Sep 13 04:27:42.145: ISAKMP: Unlocking peer struct 0x134DB41C for isadb_mark_sa_deleted(), count 0
Sep 13 04:27:42.145: ISAKMP: Deleting peer node by peer_reap for 172.35.200.87: 134DB41C
Sep 13 04:27:42.145: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
Sep 13 04:27:42.145: ISAKMP:(0):Old State = IKE_R_MM2 New State = IKE_DEST_SA
Sep 13 04:27:42.569: ISAKMP:(0):purging SA., sa=411BD47C, delme=411BD47C
Sep 13 04:27:42.737: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (N) NEW SA
Sep 13 04:27:42.737: ISAKMP: Created a peer struct for 172.35.200.87, peer port 500
Sep 13 04:27:42.737: ISAKMP: New peer created peer = 0x411472DC peer_handle = 0x800104D2
Sep 13 04:27:42.737: ISAKMP: Locking peer struct 0x411472DC, refcount 1 for crypto_isakmp_process_block
Sep 13 04:27:42.737: ISAKMP: local port 500, remote port 500
Sep 13 04:27:42.737: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
Sep 13 04:27:42.737: ISAKMP:(0):Old State = IKE_R_MM1 New State = IKE_R_MM2
Sep 13 04:27:44.397: ISAKMP:(14389):purging node -595111776
Sep 13 04:27:48.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
Sep 13 04:27:48.233: ISAKMP (0): incrementing error counter on sa, attempt 1 of 5: retransmit phase 1
Sep 13 04:27:48.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
Sep 13 04:27:48.233: ISAKMP:(0): sending packet to 172.35.194.150 my_port 500 peer_port 500 (I) MM_NO_STATE
Sep 13 04:27:48.233: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:27:49.105: ISAKMP (14391): received packet from 172.35.194.155 dport 500 sport 500 Global (I) QM_IDLE
Sep 13 04:27:49.105: ISAKMP: set new node 1659709134 to QM_IDLE
Sep 13 04:27:49.105: ISAKMP:(14391): processing HASH payload. message ID = 1659709134
Sep 13 04:27:49.105: ISAKMP:(14391): processing SA payload. message ID = 1659709134
Sep 13 04:27:49.105: ISAKMP:(14391):Checking IPSec proposal 1
Sep 13 04:27:49.105: ISAKMP: transform 1, ESP_3DES
Sep 13 04:27:49.105: ISAKMP: attributes in transform:
Sep 13 04:27:49.105: ISAKMP: encaps is 1 (Tunnel)
Sep 13 04:27:49.105: ISAKMP: SA life type in seconds
Sep 13 04:27:49.105: ISAKMP: SA life duration (basic) of 300
Sep 13 04:27:49.105: ISAKMP: SA life type in kilobytes
Sep 13 04:27:49.105: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0
Sep 13 04:27:49.105: ISAKMP: authenticator is HMAC-MD5
Sep 13 04:27:49.105: ISAKMP: group is 2
Sep 13 04:27:49.105: ISAKMP:(14391):atts are acceptable.
Sep 13 04:27:49.105: ISAKMP:(14391): processing NONCE payload. message ID = 1659709134
Sep 13 04:27:49.105: ISAKMP:(14391): processing KE payload. message ID = 1659709134
Sep 13 04:27:49.109: ISAKMP:(14391): processing ID payload. message ID = 1659709134
Sep 13 04:27:49.109: ISAKMP:(14391): processing ID payload. message ID = 1659709134
Sep 13 04:27:49.109: ISAKMP:(14391):QM Responder gets spi
Sep 13 04:27:49.109: ISAKMP:(14391):Node 1659709134, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:27:49.109: ISAKMP:(14391):Old State = IKE_QM_READY New State = IKE_QM_SPI_STARVE
Sep 13 04:27:49.109: ISAKMP:(14391): Creating IPSec SAs
Sep 13 04:27:49.109: inbound SA from 172.35.194.155 to 172.34.47.57 (f/i) 0/ 0
(proxy 172.20.15.0 to 0.0.0.0)
Sep 13 04:27:49.109: has spi 0x1EA3FBBE and conn_id 0
Sep 13 04:27:49.109: lifetime of 300 seconds
Sep 13 04:27:49.109: lifetime of 4608000 kilobytes
Sep 13 04:27:49.109: outbound SA from 172.34.47.57 to 172.35.194.155 (f/i) 0/0
(proxy 0.0.0.0 to 172.20.15.0)
Sep 13 04:27:49.109: has spi 0xFD092D0D and conn_id 0
Sep 13 04:27:49.109: lifetime of 300 seconds
Sep 13 04:27:49.109: lifetime of 4608000 kilobytes
Sep 13 04:27:49.109: ISAKMP:(14391): sending packet to 172.35.194.155 my_port 500 peer_port 500 (I) QM_IDLE
Sep 13 04:27:49.109: ISAKMP:(14391):Sending an IKE IPv4 Packet.
Sep 13 04:27:49.109: ISAKMP:(14391):Node 1659709134, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI
Sep 13 04:27:49.109: ISAKMP:(14391):Old State = IKE_QM_SPI_STARVE New State = IKE_QM_R_QM2
Sep 13 04:27:49.201: ISAKMP (14391): received packet from 172.35.194.155 dport 500 sport 500 Global (I) QM_IDLE
Sep 13 04:27:49.201: ISAKMP:(14391):deleting node 1659709134 error FALSE reason "QM done (await)"
Sep 13 04:27:49.201: ISAKMP:(14391):Node 1659709134, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:27:49.201: ISAKMP:(14391):Old State = IKE_QM_R_QM2 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 04:27:49.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
Sep 13 04:27:49.349: ISAKMP (0): incrementing error counter on sa, attempt 2 of 5: retransmit phase 1
Sep 13 04:27:49.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
Sep 13 04:27:49.349: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE
Sep 13 04:27:49.349: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:27:52.733: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP
Sep 13 04:27:52.733: ISAKMP:(0): phase 1 packet is a duplicate of a previous packet.
Sep 13 04:27:52.733: ISAKMP:(0): retransmitting due to retransmit phase 1
Sep 13 04:27:53.233: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...
Sep 13 04:27:53.233: ISAKMP (0): incrementing error counter on sa, attempt 1 of 5: retransmit phase 1
Sep 13 04:27:53.233: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP
Sep 13 04:27:53.233: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP
Sep 13 04:27:53.233: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:27:55.933: ISAKMP (14390): received packet from 172.35.200.88 dport 500 sport 500 Global (I) QM_IDLE
Sep 13 04:27:55.933: ISAKMP: set new node 8155520 to QM_IDLE
Sep 13 04:27:55.933: ISAKMP:(14390): processing HASH payload. message ID = 8155520
Sep 13 04:27:55.933: ISAKMP:received payload type 18
Sep 13 04:27:55.933: ISAKMP:(14390):Processing delete with reason payload
Sep 13 04:27:55.933: ISAKMP:(14390):delete doi = 1
Sep 13 04:27:55.933: ISAKMP:(14390):delete protocol id = 1
Sep 13 04:27:55.933: ISAKMP:(14390):delete spi_size = 16
Sep 13 04:27:55.933: ISAKMP:(14390):delete num spis = 1
Sep 13 04:27:55.933: ISAKMP:(14390):delete_reason = 10
Sep 13 04:27:55.933: ISAKMP:(14390): processing DELETE_WITH_REASON payload, message ID = 8155520, reason: Unknown delete reason!
Sep 13 04:27:55.933: ISAKMP:(14390):peer does not do paranoid keepalives.
Sep 13 04:27:55.933: ISAKMP:(14390):deleting SA reason "IKE SA Lifetime Exceeded" state (I) QM_IDLE (peer 172.35.200.88)
Sep 13 04:27:55.933: ISAKMP:(14390):deleting node 8155520 error FALSE reason "Informational (in) state 1"
Sep 13 04:27:55.933: ISAKMP: set new node -797376214 to QM_IDLE
Sep 13 04:27:55.933: ISAKMP:(14390): sending packet to 172.35.200.88 my_port 500 peer_port 500 (I) QM_IDLE
Sep 13 04:27:55.933: ISAKMP:(14390):Sending an IKE IPv4 Packet.
Sep 13 04:27:55.933: ISAKMP:(14390):purging node -797376214
Sep 13 04:27:55.933: ISAKMP:(14390):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
Sep 13 04:27:55.933: ISAKMP:(14390):Old State = IKE_P1_COMPLETE New State = IKE_DEST_SA
Sep 13 04:27:55.933: ISAKMP:(14390):deleting SA reason "IKE SA Lifetime Exceeded" state (I) QM_IDLE (peer 172.35.200.88)
Sep 13 04:27:55.933: ISAKMP: Unlocking peer struct 0x40176A60 for isadb_mark_sa_deleted(), count 0
Sep 13 04:27:55.933: ISAKMP:(14390):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:27:55.933: ISAKMP:(14390):Old State = IKE_DEST_SA New State = IKE_DEST_SA
Sep 13 04:27:56.689: ISAKMP (14407): received packet from 172.35.194.145 dport 500 sport 500 Global (I) QM_IDLE
Sep 13 04:27:56.689: ISAKMP: set new node -2143616241 to QM_IDLE
Sep 13 04:27:56.689: ISAKMP:(14407): processing HASH payload. message ID = 2151351055
Sep 13 04:27:56.689: ISAKMP:(14407): processing DELETE payload. message ID = 2151351055
Sep 13 04:27:56.689: ISAKMP:(14407):peer does not do paranoid keepalives.
Sep 13 04:27:56.689: ISAKMP:(14407):deleting node -2143616241 error FALSE reason "Informational (in) state 1"
Sep 13 04:27:56.921: ISAKMP: ignoring request to send delete notify (no ISAKMP sa) src 172.34.47.57 dst 172.35.200.88 for SPI 0x51E70BCC
Sep 13 04:27:58.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
Sep 13 04:27:58.233: ISAKMP (0): incrementing error counter on sa, attempt 2 of 5: retransmit phase 1
Sep 13 04:27:58.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
Sep 13 04:27:58.233: ISAKMP:(0): sending packet to 172.35.194.150 my_port 500 peer_port 500 (I) MM_NO_STATE
Sep 13 04:27:58.233: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:27:58.313: ISAKMP:(14388):purging SA., sa=411CFB24, delme=411CFB24
Sep 13 04:27:59.345: ISAKMP: set new node 0 to QM_IDLE
Sep 13 04:27:59.345: ISAKMP:(0):SA is still budding. Attached new ipsec request to it. (local 172.34.47.57, remote 172.35.200.87)
Sep 13 04:27:59.345: ISAKMP: Error while processing SA request: Failed to initialize SA
Sep 13 04:27:59.345: ISAKMP: Error while processing KMI message 0, error 2.
Sep 13 04:27:59.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
Sep 13 04:27:59.349: ISAKMP (0): incrementing error counter on sa, attempt 3 of 5: retransmit phase 1
Sep 13 04:27:59.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
Sep 13 04:27:59.349: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE
Sep 13 04:27:59.349: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:28:02.733: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP
Sep 13 04:28:02.733: ISAKMP:(0): phase 1 packet is a duplicate of a previous packet.
Sep 13 04:28:02.733: ISAKMP:(0): retransmitting due to retransmit phase 1
Sep 13 04:28:03.233: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...
Sep 13 04:28:03.233: ISAKMP (0): incrementing error counter on sa, attempt 2 of 5: retransmit phase 1
Sep 13 04:28:03.233: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP
Sep 13 04:28:03.233: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP
Sep 13 04:28:03.233: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:28:07.489: ISAKMP:(14390):purging node -1766959579
Sep 13 04:28:08.233: ISAKMP: set new node 0 to QM_IDLE
Sep 13 04:28:08.233: ISAKMP:(0):SA is still budding. Attached new ipsec request to it. (local 172.34.47.57, remote 172.35.194.150)
Sep 13 04:28:08.233: ISAKMP: Error while processing SA request: Failed to initialize SA
Sep 13 04:28:08.233: ISAKMP: Error while processing KMI message 0, error 2.
Sep 13 04:28:08.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
Sep 13 04:28:08.233: ISAKMP (0): incrementing error counter on sa, attempt 3 of 5: retransmit phase 1
Sep 13 04:28:08.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
Sep 13 04:28:08.233: ISAKMP:(0): sending packet to 172.35.194.150 my_port 500 peer_port 500 (I) MM_NO_STATE
Sep 13 04:28:08.233: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:28:09.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
Sep 13 04:28:09.349: ISAKMP (0): incrementing error counter on sa, attempt 4 of 5: retransmit phase 1
Sep 13 04:28:09.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
Sep 13 04:28:09.349: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE
Sep 13 04:28:09.349: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:28:11.669: ISAKMP:(14407):purging node 737401177
Sep 13 04:28:12.565: ISAKMP (0): received packet from 172.35.200.91 dport 500 sport 500 Global (N) NEW SA
Sep 13 04:28:12.565: ISAKMP: Created a peer struct for 172.35.200.91, peer port 500
Sep 13 04:28:12.565: ISAKMP: New peer created peer = 0x134E3340 peer_handle = 0x8000F1E6
Sep 13 04:28:12.565: ISAKMP: Locking peer struct 0x134E3340, refcount 1 for crypto_isakmp_process_block
Sep 13 04:28:12.565: ISAKMP: local port 500, remote port 500
Sep 13 04:28:12.565: ISAKMP:(0):insert sa successfully sa = 411BD47C
Sep 13 04:28:12.565: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:28:12.565: ISAKMP:(0):Old State = IKE_READY New State = IKE_R_MM1
Sep 13 04:28:12.565: ISAKMP:(0): processing SA payload. message ID = 0
Sep 13 04:28:12.565: ISAKMP:(0): processing vendor id payload
Sep 13 04:28:12.565: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch
Sep 13 04:28:12.565: ISAKMP (0): vendor ID is NAT-T RFC 3947
Sep 13 04:28:12.565: ISAKMP:(0): processing vendor id payload
Sep 13 04:28:12.565: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch
Sep 13 04:28:12.565: ISAKMP (0): vendor ID is NAT-T v7
Sep 13 04:28:12.565: ISAKMP:(0): processing vendor id payload
Sep 13 04:28:12.565: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch
Sep 13 04:28:12.565: ISAKMP:(0): vendor ID is NAT-T v3
Sep 13 04:28:12.565: ISAKMP:(0): processing vendor id payload
Sep 13 04:28:12.565: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch
Sep 13 04:28:12.565: ISAKMP:(0): vendor ID is NAT-T v2
Sep 13 04:28:12.565: ISAKMP:(0):No pre-shared key with 172.35.200.91!
Sep 13 04:28:12.565: ISAKMP : Scanning profiles for xauth ...
Sep 13 04:28:12.565: ISAKMP:(0):Checking ISAKMP transform 1 against priority 30 policy
Sep 13 04:28:12.565: ISAKMP: encryption 3DES-CBC
Sep 13 04:28:12.565: ISAKMP: hash MD5
Sep 13 04:28:12.565: ISAKMP: default group 2
Sep 13 04:28:12.565: ISAKMP: auth pre-share
Sep 13 04:28:12.565: ISAKMP: life type in seconds
Sep 13 04:28:12.565: ISAKMP: life duration (basic) of 300
Sep 13 04:28:12.565: ISAKMP:(0):Preshared authentication offered but does not match policy!
Sep 13 04:28:12.565: ISAKMP:(0):atts are not acceptable. Next payload is 0
Sep 13 04:28:12.565: ISAKMP:(0):no offers accepted!
Sep 13 04:28:12.565: ISAKMP:(0): phase 1 SA policy not acceptable! (local 172.34.47.57 remote 172.35.200.91)
Sep 13 04:28:12.565: ISAKMP (0): incrementing error counter on sa, attempt 1 of 5: construct_fail_ag_init
Sep 13 04:28:12.565: ISAKMP:(0): Failed to construct AG informational message.
Sep 13 04:28:12.565: ISAKMP:(0): sending packet to 172.35.200.91 my_port 500 peer_port 500 (R) MM_NO_STATE
Sep 13 04:28:12.565: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:28:12.565: ISAKMP:(0):peer does not do paranoid keepalives.
Sep 13 04:28:12.565: ISAKMP:(0):deleting SA reason "Phase1 SA policy proposal not accepted" state (R) MM_NO_STATE (peer 172.35.200.91)
Sep 13 04:28:12.565: ISAKMP:(0): processing vendor id payload
Sep 13 04:28:12.565: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch
Sep 13 04:28:12.565: ISAKMP (0): vendor ID is NAT-T RFC 3947
Sep 13 04:28:12.565: ISAKMP:(0): processing vendor id payload
Sep 13 04:28:12.565: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch
Sep 13 04:28:12.565: ISAKMP (0): vendor ID is NAT-T v7
Sep 13 04:28:12.565: ISAKMP:(0): processing vendor id payload
Sep 13 04:28:12.565: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch
Sep 13 04:28:12.565: ISAKMP:(0): vendor ID is NAT-T v3
Sep 13 04:28:12.565: ISAKMP:(0): processing vendor id payload
Sep 13 04:28:12.565: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch
Sep 13 04:28:12.565: ISAKMP:(0): vendor ID is NAT-T v2
Sep 13 04:28:12.565: ISAKMP (0): FSM action returned error: 2
Sep 13 04:28:12.565: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Sep 13 04:28:12.565: ISAKMP:(0):Old State = IKE_R_MM1 New State = IKE_R_MM1
Sep 13 04:28:12.565: ISAKMP:(0):deleting SA reason "Phase1 SA policy proposal not accepted" state (R) MM_NO_STATE (peer 172.35.200.91)
Sep 13 04:28:12.565: ISAKMP: Unlocking peer struct 0x134E3340 for isadb_mark_sa_deleted(), count 0
Sep 13 04:28:12.565: ISAKMP: Deleting peer node by peer_reap for 172.35.200.91: 134E3340
Sep 13 04:28:12.565: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
Sep 13 04:28:12.565: ISAKMP:(0):Old State = IKE_R_MM1 New State = IKE_DEST_SA
Sep 13 04:28:12.733: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP
Sep 13 04:28:12.733: ISAKMP:(0): phase 1 packet is a duplicate of a previous packet.
Sep 13 04:28:12.733: ISAKMP:(0): retransmitting due to retransmit phase 1
Sep 13 04:28:12.933: ISAKMP (14392): received packet from 172.35.200.97 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:28:12.933: ISAKMP: set new node 2101687451 to QM_IDLE
Sep 13 04:28:12.933: ISAKMP:(14392): processing HASH payload. message ID = 2101687451
Sep 13 04:28:12.933: ISAKMP:(14392): processing SA payload. message ID = 2101687451
Sep 13 04:28:12.933: ISAKMP:(14392):Checking IPSec proposal 1
Sep 13 04:28:12.933: ISAKMP: transform 1, ESP_3DES
Sep 13 04:28:12.933: ISAKMP: attributes in transform:
Sep 13 04:28:12.933: ISAKMP: encaps is 1 (Tunnel)
Sep 13 04:28:12.933: ISAKMP: SA life type in seconds
Sep 13 04:28:12.933: ISAKMP: SA life duration (basic) of 300
Sep 13 04:28:12.933: ISAKMP: SA life type in kilobytes
Sep 13 04:28:12.933: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0
Sep 13 04:28:12.933: ISAKMP: authenticator is HMAC-MD5
Sep 13 04:28:12.933: ISAKMP: group is 2
Sep 13 04:28:12.933: ISAKMP:(14392):atts are acceptable.
Sep 13 04:28:12.933: ISAKMP:(14392): processing NONCE payload. message ID = 2101687451
Sep 13 04:28:12.933: ISAKMP:(14392): processing KE payload. message ID = 2101687451
Sep 13 04:28:12.937: ISAKMP:(14392): processing ID payload. message ID = 2101687451
Sep 13 04:28:12.937: ISAKMP:(14392): processing ID payload. message ID = 2101687451
Sep 13 04:28:12.937: ISAKMP:(14392):QM Responder gets spi
Sep 13 04:28:12.937: ISAKMP:(14392):Node 2101687451, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:28:12.937: ISAKMP:(14392):Old State = IKE_QM_READY New State = IKE_QM_SPI_STARVE
Sep 13 04:28:12.937: ISAKMP:(14392): Creating IPSec SAs
Sep 13 04:28:12.937: inbound SA from 172.35.200.97 to 172.34.47.57 (f/i) 0/ 0
(proxy 172.16.51.0 to 0.0.0.0)
Sep 13 04:28:12.937: has spi 0x62BB1BC1 and conn_id 0
Sep 13 04:28:12.937: lifetime of 300 seconds
Sep 13 04:28:12.937: lifetime of 4608000 kilobytes
Sep 13 04:28:12.937: outbound SA from 172.34.47.57 to 172.35.200.97 (f/i) 0/0
(proxy 0.0.0.0 to 172.16.51.0)
Sep 13 04:28:12.937: has spi 0xC7740464 and conn_id 0
Sep 13 04:28:12.937: lifetime of 300 seconds
Sep 13 04:28:12.937: lifetime of 4608000 kilobytes
Sep 13 04:28:12.937: ISAKMP:(14392): sending packet to 172.35.200.97 my_port 500 peer_port 500 (R) QM_IDLE
Sep 13 04:28:12.937: ISAKMP:(14392):Sending an IKE IPv4 Packet.
Sep 13 04:28:12.937: ISAKMP:(14392):Node 2101687451, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI
Sep 13 04:28:12.941: ISAKMP:(14392):Old State = IKE_QM_SPI_STARVE New State = IKE_QM_R_QM2
Sep 13 04:28:13.017: ISAKMP (14392): received packet from 172.35.200.97 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:28:13.017: ISAKMP:(14392):deleting node 2101687451 error FALSE reason "QM done (await)"
Sep 13 04:28:13.017: ISAKMP:(14392):Node 2101687451, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:28:13.017: ISAKMP:(14392):Old State = IKE_QM_R_QM2 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 04:28:13.233: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...
Sep 13 04:28:13.233: ISAKMP (0): incrementing error counter on sa, attempt 3 of 5: retransmit phase 1
Sep 13 04:28:13.233: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP
Sep 13 04:28:13.233: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP
Sep 13 04:28:13.233: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:28:14.841: ISAKMP:(14406):purging node -1746108638
Sep 13 09:58:15: %CRYPTO-4-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet. (ip) vrf/dest_addr= /172.16.102.25, src_addr= 18:17.833: ISAKMP:(14393):atts are acceptable.
Sep 13 04:28:17.833: ISAKMP:(14393): processing NONCE payload. message ID = 1434815361
Sep 13 04:28:17.833: ISAKMP:(14393): processing KE payload. message ID = 1434815361
Sep 13 04:28:17.837: ISAKMP:(14393): processing ID payload. message ID = 1434815361
Sep 13 04:28:17.837: ISAKMP:(14393): processing ID payload. message ID = 1434815361
Sep 13 04:28:17.837: ISAKMP:(14393):QM Responder gets spi
Sep 13 04:28:17.837: ISAKMP:(14393):Node 1434815361, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:28:17.837: ISAKMP:(14393):Old State = IKE_QM_READY New State = IKE_QM_SPI_STARVE
Sep 13 04:28:17.837: ISAKMP:(14393): Creating IPSec SAs
Sep 13 04:28:17.837: inbound SA from 172.34.48.125 to 172.34.47.57 (f/i) 0/ 0
(proxy 172.16.25.0 to 0.0.0.0)
Sep 13 04:28:17.837: has spi 0x6822241D and conn_id 0
Sep 13 04:28:17.837: lifetime of 300 seconds
Sep 13 04:28:17.837: lifetime of 4608000 kilobytes
Sep 13 04:28:17.837: outbound SA from 172.34.47.57 to 172.34.48.125 (f/i) 0/0
(proxy 0.0.0.0 to 172.16.25.0)
Sep 13 04:28:17.837: has spi 0x6B854CE0 and conn_id 0
Sep 13 04:28:17.837: lifetime of 300 seconds
Sep 13 04:28:17.837: lifetime of 4608000 kilobytes
Sep 13 04:28:17.837: ISAKMP:(14393): sending packet to 172.34.48.125 my_port 500 peer_port 500 (R) QM_IDLE
Sep 13 04:28:17.837: ISAKMP:(14393):Sending an IKE IPv4 Packet.
Sep 13 04:28:17.837: ISAKMP:(14393):Node 1434815361, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI
Sep 13 04:28:17.837: ISAKMP:(14393):Old State = IKE_QM_SPI_STARVE New State = IKE_QM_R_QM2
Sep 13 04:28:17.925: ISAKMP (14393): received packet from 172.34.48.125 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:28:17.925: ISAKMP:(14393):deleting node 1434815361 error FALSE reason "QM done (await)"
Sep 13 04:28:17.925: ISAKMP:(14393):Node 1434815361, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:28:17.925: ISAKMP:(14393):Old State = IKE_QM_R_QM2 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 04:28:18.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
Sep 13 04:28:18.233: ISAKMP (0): incrementing error counter on sa, attempt 4 of 5: retransmit phase 1
Sep 13 04:28:18.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
Sep 13 04:28:18.233: ISAKMP:(0): sending packet to 172.35.194.150 my_port 500 peer_port 500 (I) MM_NO_STATE
Sep 13 04:28:18.233: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:28:18.845: ISAKMP:(0):purging node 1013205142
Sep 13 04:28:18.845: ISAKMP:(0):purging node -1738356762
Sep 13 04:28:19.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
Sep 13 04:28:19.349: ISAKMP (0): incrementing error counter on sa, attempt 5 of 5: retransmit phase 1
Sep 13 04:28:19.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
Sep 13 04:28:19.349: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE
Sep 13 04:28:19.349: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:28:21.845: ISAKMP (14408): received packet from 172.34.47.146 dport 500 sport 500 Global (I) QM_IDLE
Sep 13 04:28:21.845: ISAKMP: set new node -1862940807 to QM_IDLE
Sep 13 04:28:21.845: ISAKMP:(14408): processing HASH payload. message ID = 2432026489
Sep 13 04:28:21.849: ISAKMP:(14408): processing DELETE payload. message ID = 2432026489
Sep 13 04:28:21.849: ISAKMP:(14408):peer does not do paranoid keepalives.
Sep 13 04:28:21.849: ISAKMP:(14408):deleting node -1862940807 error FALSE reason "Informational (in) state 1"
Sep 13 04:28:22.565: ISAKMP (0): received packet from 172.35.200.91 dport 500 sport 500 Global (R) MM_NO_STATE
Sep 13 04:28:22.733: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP
Sep 13 04:28:22.733: ISAKMP:(0): phase 1 packet is a duplicate of a previous packet.
Sep 13 04:28:22.733: ISAKMP:(0): retransmitting due to retransmit phase 1
Sep 13 04:28:22.953: ISAKMP:(14389):purging node 299600500
Sep 13 04:28:23.233: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...
Sep 13 04:28:23.233: ISAKMP (0): incrementing error counter on sa, attempt 4 of 5: retransmit phase 1
Sep 13 04:28:23.233: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP
Sep 13 04:28:23.233: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP
Sep 13 04:28:23.233: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:28:23.241: ISAKMP: set new node 1045526343 to QM_IDLE
Sep 13 04:28:23.241: ISAKMP:(14409): sending packet to 172.35.206.48 my_port 500 peer_port 500 (R) QM_IDLE
Sep 13 04:28:23.241: ISAKMP:(14409):Sending an IKE IPv4 Packet.
Sep 13 04:28:23.241: ISAKMP:(14409):purging node 1045526343
Sep 13 04:28:23.241: ISAKMP:(14409):Input = IKE_MESG_FROM_IPSEC, IKE_PHASE2_DEL
Sep 13 04:28:23.241: ISAKMP:(14409):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
Sep 13 04:28:27.125: ISAKMP (14394): received packet from 172.35.194.115 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:28:27.125: ISAKMP: set new node -318471219 to QM_IDLE
Sep 13 04:28:27.125: ISAKMP:(14394): processing HASH payload. message ID = 3976496077
Sep 13 04:28:27.125: ISAKMP:(14394): processing SA payload. message ID = 3976496077
Sep 13 04:28:27.125: ISAKMP:(14394):Checking IPSec proposal 1
Sep 13 04:28:27.125: ISAKMP: transform 1, ESP_3DES
Sep 13 04:28:27.125: ISAKMP: attributes in transform:
Sep 13 04:28:27.125: ISAKMP: encaps is 1 (Tunnel)
Sep 13 04:28:27.125: ISAKMP: SA life type in seconds
Sep 13 04:28:27.125: ISAKMP: SA life duration (basic) of 300
Sep 13 04:28:27.125: ISAKMP: SA life type in kilobytes
Sep 13 04:28:27.125: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0
Sep 13 04:28:27.125: ISAKMP: authenticator is HMAC-MD5
Sep 13 04:28:27.125: ISAKMP: group is 2
Sep 13 04:28:27.125: ISAKMP:(14394):atts are acceptable.
Sep 13 04:28:27.125: ISAKMP:(14394): processing NONCE payload. message ID = 3976496077
Sep 13 04:28:27.125: ISAKMP:(14394): processing KE payload. message ID = 3976496077
Sep 13 04:28:27.129: ISAKMP:(14394): processing ID payload. message ID = 3976496077
Sep 13 04:28:27.129: ISAKMP:(14394): processing ID payload. message ID = 3976496077
Sep 13 04:28:27.129: ISAKMP:(14394):QM Responder gets spi
Sep 13 04:28:27.129: ISAKMP:(14394):Node 3976496077, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:28:27.129: ISAKMP:(14394):Old State = IKE_QM_READY New State = IKE_QM_SPI_STARVE
Sep 13 04:28:27.129: ISAKMP:(14394): Creating IPSec SAs
Sep 13 04:28:27.129: inbound SA from 172.35.194.115 to 172.34.47.57 (f/i) 0/ 0
(proxy 172.20.5.0 to 0.0.0.0)
Sep 13 04:28:27.129: has spi 0x41FB5E5B and conn_id 0
Sep 13 04:28:27.129: lifetime of 300 seconds
Sep 13 04:28:27.129: lifetime of 4608000 kilobytes
Sep 13 04:28:27.129: outbound SA from 172.34.47.57 to 172.35.194.115 (f/i) 0/0
(proxy 0.0.0.0 to 172.20.5.0)
Sep 13 04:28:27.129: has spi 0x4E194CEE and conn_id 0
Sep 13 04:28:27.129: lifetime of 300 seconds
Sep 13 04:28:27.129: lifetime of 4608000 kilobytes
Sep 13 04:28:27.129: ISAKMP:(14394): sending packet to 172.35.194.115 my_port 500 peer_port 500 (R) QM_IDLE
Sep 13 04:28:27.129: ISAKMP:(14394):Sending an IKE IPv4 Packet.
Sep 13 04:28:27.129: ISAKMP:(14394):Node 3976496077, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI
Sep 13 04:28:27.129: ISAKMP:(14394):Old State = IKE_QM_SPI_STARVE New State = IKE_QM_R_QM2
Sep 13 04:28:27.197: ISAKMP (14394): received packet from 172.35.194.115 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:28:27.197: ISAKMP:(14394):deleting node -318471219 error FALSE reason "QM done (await)"
Sep 13 04:28:27.197: ISAKMP:(14394):Node 3976496077, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:28:27.197: ISAKMP:(14394):Old State = IKE_QM_R_QM2 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 04:28:28.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
Sep 13 04:28:28.233: ISAKMP (0): incrementing error counter on sa, attempt 5 of 5: retransmit phase 1
Sep 13 04:28:28.233: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
Sep 13 04:28:28.233: ISAKMP:(0): sending packet to 172.35.194.150 my_port 500 peer_port 500 (I) MM_NO_STATE
Sep 13 04:28:28.233: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:28:28.845: ISAKMP:(0):purging SA., sa=1F4A26C, delme=1F4A26C
Sep 13 04:28:29.349: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
Sep 13 04:28:29.349: ISAKMP:(0):peer does not do paranoid keepalives.
Sep 13 04:28:29.349: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (I) MM_NO_STATE (peer 172.35.200.87)
Sep 13 04:28:29.349: ISAKMP:(0):deletitor
Sep 13 04:28:29.849: ISAKMP: local port 500, remote port 500
Sep 13 04:28:29.849: ISAKMP: set new node 0 to QM_IDLE
Sep 13 04:28:29.849: ISAKMP: Find a dup sa in the avl tree during calling isadb_insert sa = 1FA864C
Sep 13 04:28:29.849: ISAKMP:(0):Can not start Aggressive mode, trying Main mode.
Sep 13 04:28:29.849: ISAKMP:(0):found peer pre-shared key matching 172.35.200.87
Sep 13 04:28:29.849: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID
Sep 13 04:28:29.849: ISAKMP:(0): constructed NAT-T vendor-07 ID
Sep 13 04:28:29.849: ISAKMP:(0): constructed NAT-T vendor-03 ID
Sep 13 04:28:29.849: ISAKMP:(0): constructed NAT-T vendor-02 ID
Sep 13 04:28:29.849: ISAKMP:(0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM
Sep 13 04:28:29.849: ISAKMP:(0):Old State = IKE_READY New State = IKE_I_MM1
Sep 13 04:28:29.849: ISAKMP:(0): beginning Main Mode exchange
S8:30.229: ISAKMPeted(), count 0
AKMP:(0): sendin4:28:38.233: ISA 172.35.200.87)
Sep 13 04:28:43.233: ISAKMP: Unlocking peer struct 0x411472DC for isadb_mark_sa_deleted(), count 0
Sep 13 04:28:43.233: ISAKMP: Deleting peer node by peer_reap for 172.35.200.87: 411472DC
Sep 13 04:28:43.233: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
Sep 13 04:28:43.233: ISAKMP:(0):Old State = IKE_R_MM2 New State = IKE_DEST_SA
Sep 13 04:28:45.933: ISAKMP:(14390):purging node 8155520
Sep 13 04:28:46.689: ISAKMP:(14407):purging node -2143616241
Sep 13 04:28:46.781: ISAKMP (14395): received packet from 172.35.200.100 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:28:46.781: ISAKMP: set new node -1638000181 to QM_IDLE
Sep 13 04:28:46.781: ISAKMP:(14395): processing HASH payload. message ID = 2656967115
Sep 13 04:28:46.781: ISAKMP:(14395): processing SA payload. message ID = 2656967115
Sep 13 04:28:46.781: ISAKMP:(14395):Checking IPSec proposal 1
Sep 13 04:28:46.781: ISAKMP: transform 1, ESP_3DES
Sep 13 04:28:46.781: ISAKMP: attr
**************ibutes in transform:
Sep 13 04:28:46.781: ISAKMP: encaps is 1 (Tunnel)
Sep 13 04:28:46.781: ISAKMP: SA life type in seconds
Sep 13 04:28:46.781: ISAKMP: SA life duration (basic) of 300
Sep 13 04:28:46.781: ISAKMP: SA life type in kilobytes
Sep 13 04:28:46.781: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0
Sep 13 04:28:46.781: ISAKMP: authenticator is HMAC-MD5
Sep 13 04:28:46.781: ISAKMP: group is 2
Sep 13 04:28:46.781: ISAKMP:(14395):atts are acceptable.
Sep 13 04:28:46.781: ISAKMP:(14395): processing NONCE payload. message ID = 2656967115
Sep 13 04:28:46.781: ISAKMP:(14395): processing KE payload. message ID = 2656967115
Sep 13 04:28:46.785: ISAKMP:(14395): processing ID payload. message ID = 2656967115
Sep 13 04:28:46.785: ISAKMP:(14395): processing ID payload. message ID = 2656967115
Sep 13 04:28:46.785: ISAKMP:(14395):QM Responder gets spi
Sep 13 04:28:46.785: ISAKMP:(14395):Node 2656967115, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:28:46.785: ISAKMP:(14395):Old State = IKE_QM_READY New State = IKE_QM_SPI_STARVE
Sep 13 04:28:46.785: ISAKMP:(14395): Creating IPSec SAs
Sep 13 04:28:46.785: inbound SA from 172.35.200.100 to 172.34.47.57 (f/i) 0/ 0
(proxy 172.17.1.0 to 0.0.0.0)
Sep 13 04:28:46.785: has spi 0xE85F4668 and conn_id 0
Sep 13 04:28:46.785: lifetime of 300 seconds
Sep 13 04:28:46.785: lifetime of 4608000 kilobytes
Sep 13 04:28:46.785: outbound SA from 172.34.47.57 to 172.35.200.100 (f/i) 0/0
(proxy 0.0.0.0 to 172.17.1.0)
Sep 13 04:28:46.785: has spi 0x806D78EA and conn_id 0
Sep 13 04:28:46.785: lifetime of 300 seconds
Sep 13 04:28:46.785: lifetime of 4608000 kilobytes
Sep 13 04:28:46.785: ISAKMP:(14395): sending packet to 172.35.200.100 my_port 500 peer_port 500 (R) QM_IDLE
Sep 13 04:28:46.785: ISAKMP:(14395):Sending an IKE IPv4 Packet.
Sep 13 04:28:46.785: ISAKMP:(14395):Node 2656967115, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI
Sep 13 04:28:46.785: ISAKMP:(14395):Old State = IKE_QM_SPI_STARVE New State = IKE_QM_R_QM2
Sep 13 04:28:46.857: ISAKMP (14395): received packet from 172.35.200.100 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:28:46.857: ISAKMP:(14395):deleting node -1638000181 error FALSE reason "QM done (await)"
Sep 13 04:28:46.857: ISAKMP:(14395):Node 2656967115, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:28:46.857: ISAKMP:(14395):Old State = IKE_QM_R_QM2 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 04:28:49.509: ISAKMP (14396): received packet from 172.35.222.236 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:28:49.509: ISAKMP: set new node 732513048 to QM_IDLE
Sep 13 04:28:49.509: ISAKMP:(14396): processing HASH payload. message ID = 732513048
Sep 13 04:28:49.509: ISAKMP:(14396): processing SA payload. message ID = 732513048
Sep 13 04:28:49.509: ISAKMP:(14396):Checking IPSec proposal 1
Sep 13 04:28:49.509: ISAKMP: transform 1, ESP_3DES
Sep 13 04:28:49.509: ISAKMP: attributes in transform:
Sep 13 04:28:49.509: ISAKMP: encaps is 1 (Tunnel)
Sep 13 04:28:49.509: ISAKMP: SA life type in seconds
Sep 13 04:28:49.509: ISAKMP: SA life duration (basic) of 300
Sep 13 04:28:49.509: ISAKMP: SA life type in kilobytes
Sep 13 04:28:49.509: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0
Sep 13 04:28:49.509: ISAKMP: authenticator is HMAC-MD5
Sep 13 04:28:49.509: ISAKMP: group is 2
Sep 13 04:28:49.509: ISAKMP:(14396):atts are acceptable.
Sep 13 04:28:49.513: ISAKMP:(14396): processing NONCE payload. message ID = 732513048
Sep 13 04:28:49.513: ISAKMP:(14396): processing KE payload. message ID = 732513048
Sep 13 04:28:49.513: ISAKMP:(14396): processing ID payload. message ID = 732513048
Sep 13 04:28:49.513: ISAKMP:(14396): processing ID payload. message ID = 732513048
Sep 13 04:28:49.513: ISAKMP:(14396):QM Responder gets spi
Sep 13 04:28:49.513: ISAKMP:(14396):Node 732513048, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:28:49.513: ISAKMP:(14396):Old State = IKE_QM_READY New State = IKE_QM_SPI_STARVE
Sep 13 04:28:49.513: ISAKMP:(14396): Creating IPSec SAs
Sep 13 04:28:49.513: inbound SA from 172.35.222.236 to 172.34.47.57 (f/i) 0/ 0
(proxy 172.18.1.0 to 0.0.0.0)
Sep 13 04:28:49.513: has spi 0x18271E39 and conn_id 0
Sep 13 04:28:49.513: lifetime of 300 seconds
Sep 13 04:28:49.513: lifetime of 4608000 kilobytes
Sep 13 04:28:49.513: outbound SA from 172.34.47.57 to 172.35.222.236 (f/i) 0/0
(proxy 0.0.0.0 to 172.18.1.0)
Sep 13 04:28:49.513: has spi 0x60244544 and conn_id 0
Sep 13 04:28:49.513: lifetime of 300 seconds
Sep 13 04:28:49.513: lifetime of 4608000 kilobytes
Sep 13 04:28:49.513: ISAKMP:(14396): sending packet to 172.35.222.236 my_port 500 peer_port 500 (R) QM_IDLE
Sep 13 04:28:49.513: ISAKMP:(14396):Sending an IKE IPv4 Packet.
Sep 13 04:28:49.513: ISAKMP:(14396):Node 732513048, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI
Sep 13 04:28:49.513: ISAKMP:(14396):Old State = IKE_QM_SPI_STARVE New State = IKE_QM_R_QM2
Sep 13 04:28:49.637: ISAKMP (14396): received packet from 172.35.222.236 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:28:49.637: ISAKMP:(14396):deleting node 732513048 error FALSE reason "QM done (await)"
Sep 13 04:28:49.637: ISAKMP:(14396):Node 732513048, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:28:49.637: ISAKMP:(14396):Old State = IKE_QM_R_QM2 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 04:28:49.849: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
Sep 13 04:28:49.849: ISAKMP (0): incrementing error counter on sa, attempt 2 of 5: retransmit phase 1
Sep 13 04:28:49.849: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
Sep 13 04:28:49.849: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE
Sep 13 04:28:49.849: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:28:50.513: ISAKMP:(14392):peer does not do paranoid keepalives.
Sep 13 04:28:50.513: ISAKMP:(14392):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE (peer 172.35.200.97)
Sep 13 04:28:50.513: ISAKMP: set new node -1275615692 to QM_IDLE
Sep 13 04:28:50.513: ISAKMP:(14392): sending packet to 172.35.200.97 my_port 500 peer_port 500 (R) QM_IDLE
Sep 13 04:28:50.513: ISAKMP:(14392):Sending an IKE IPv4 Packet.
Sep 13 04:28:50.513: ISAKMP:(14392):purging node -1275615692
Sep 13 04:28:50.513: ISAKMP:(14392):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
Sep 13 04:28:50.513: ISAKMP:(14392):Old State = IKE_P1_COMPLETE New State = IKE_DEST_SA
Sep 13 04:28:50.513: ISAKMP:(14392):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE (peer 172.35.200.97)
Sep 13 04:28:50.513: ISAKMP: Unlocking peer struct 0x10AD358 for isadb_mark_sa_deleted(), count 0
Sep 13 04:28:50.513: ISAKMP:(14392):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:28:50.513: ISAKMP:(14392):Old State = IKE_DEST_SA New State = IKE_DEST_SA
Sep 13 04:28:50.561: ISAKMP (14392): received packet from 172.35.200.97 dport 500 sport 500 Global (R) MM_NO_STATE
Sep 13 04:28:50.741: ISAKMP: ignoring request to send delete notify (no ISAKMP sa) src 172.34.47.57 dst 172.35.200.97 for SPI 0x2C9C73AF
Sep 13 04:28:51.545: ISAKMP:(14393):peer does not do paranoid keepalives.
Sep 13 04:28:51.545: ISAKMP:(14393):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE (peer 172.34.48.125)
Sep 13 04:28:51.545: ISAKMP: set new node 1816352009 to QM_IDLE
Sep 13 04:28:51.545: ISAKMP:(14393): sending packet to 172.34.48.125 my_port 500 peer_port 500 (R) QM_IDLE
Sep 13 04:28:51.545: ISAKMP:(14393):Sending an IKE IPv4 Packet.
Sep 13 04:28:51.545: ISAKMP:(14393):purging node 1816352009
Sep 13 04:28:51.545: ISAKMP:(14393):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
Sep 13 04:28:51.545: ISAKMP:(14393):Old State = IKE_P1_COMPLETE New State = IKE_DEST_SA
Sep 13 04:28:51.545: ISAKMP:(14393):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE (peer 172.34.48.125)
Sep 13 04:28:51.545: ISAKMP: Unlocking peer struct 0x4007DC90 for isadb_mark_sa_deleted(), count 0
Sep 13 04:28:51.545: ISAKMP:(14393):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:28:51.545: ISAKMP:(14393):Old State = IKE_DEST_SA New State = IKE_DEST_SA
Sep 13 04:28:51.625: ISAKMP (14393): received packet from 172.34.48.125 dport 500 sport 500 Global (R) MM_NO_STATE
Sep 13 04:28:51.877: ISAKMP: ignoring request to send delete notify (no ISAKMP sa) src 172.34.47.57 dst 172.34.48.125 for SPI 0x7F351D2
Sep 13 04:28:52.269: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (N) NEW SA
Sep 13 04:28:52.269: ISAKMP: Created a peer struct for 172.35.200.87, peer port 500
Sep 13 04:28:52.269: ISAKMP: New peer created peer = 0x12370108 peer_handle = 0x8000F44B
Sep 13 04:28:52.269: ISAKMP: Locking peer struct 0x12370108, refcount 1 for crypto_isakmp_process_block
Sep 13 04:28:52.269: ISAKMP: local port 500, remote port 500
Sep 13 04:28:52.269: ISAKMP: Find a dup sa in the avl tree during calling isadb_insert sa = 1F4A26C
Sep 13 04:28:52.269: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:28:52.269: ISAKMP:(0):Old State = IKE_READY New State = IKE_R_MM1
Sep 13 04:28:52.269: ISAKMP:(0): processing SA payload. message ID = 0
Sep 13 04:28:52.269: ISAKMP:(0): processing vendor id payload
Sep 13 04:28:52.269: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch
Sep 13 04:28:52.269: ISAKMP (0): vendor ID is NAT-T RFC 3947
Sep 13 04:28:52.269: ISAKMP:(0): processing vendor id payload
Sep 13 04:28:52.269: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch
Sep 13 04:28:52.269: ISAKMP (0): vendor ID is NAT-T v7
Sep 13 04:28:52.269: ISAKMP:(0): processing vendor id payload
Sep 13 04:28:52.269: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch
Sep 13 04:28:52.269: ISAKMP:(0): vendor ID is NAT-T v3
Sep 13 04:28:52.269: ISAKMP:(0): processing vendor id payload
Sep 13 04:28:52.269: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch
Sep 13 04:28:52.269: ISAKMP:(0): vendor ID is NAT-T v2
Sep 13 04:28:52.269: ISAKMP:(0):found peer pre-shared key matching 172.35.200.87
Sep 13 04:28:52.269: ISAKMP:(0): local preshared key found
Sep 13 04:28:52.269: ISAKMP : Scanning profiles for xauth ...
Sep 13 04:28:52.269: ISAKMP:(0):Checking ISAKMP transform 1 against priority 30 policy
Sep 13 04:28:52.269: ISAKMP: encryption 3DES-CBC
Sep 13 04:28:52.269: ISAKMP: hash MD5
Sep 13 04:28:52.269: ISAKMP: default group 2
Sep 13 04:28:52.269: ISAKMP: auth pre-share
Sep 13 04:28:52.269: ISAKMP: life type in seconds
Sep 13 04:28:52.269: ISAKMP: life duration (basic) of 300
Sep 13 04:28:52.269: ISAKMP:(0):atts are acceptable. Next payload is 0
Sep 13 04:28:52.269: ISAKMP:(0):Acceptable atts:actual life: 0
Sep 13 04:28:52.269: ISAKMP:(0):Acceptable atts:life: 0
Sep 13 04:28:52.269: ISAKMP:(0):Basic life_in_seconds:300
Sep 13 04:28:52.269: ISAKMP:(0):Returning Actual lifetime: 300
Sep 13 04:28:52.269: ISAKMP:(0)::Started lifetime timer: 300.
Sep 13 04:28:52.269: ISAKMP:(0): processing vendor id payload
Sep 13 04:28:52.269: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch
Sep 13 04:28:52.269: ISAKMP (0): vendor ID is NAT-T RFC 3947
Sep 13 04:28:52.269: ISAKMP:(0): processing vendor id payload
Sep 13 04:28:52.269: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch
Sep 13 04:28:52.269: ISAKMP (0): vendor ID is NAT-T v7
Sep 13 04:28:52.269: ISAKMP:(0): processing vendor id payload
Sep 13 04:28:52.269: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch
Sep 13 04:28:52.269: ISAKMP:(0): vendor ID is NAT-T v3
Sep 13 04:28:52.269: ISAKMP:(0): processing vendor id payload
Sep 13 04:28:52.269: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch
Sep 13 04:28:52.269: ISAKMP:(0): vendor ID is NAT-T v2
Sep 13 04:28:52.269: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Sep 13 04:28:52.269: ISAKMP:(0):Old State = IKE_R_MM1 New State = IKE_R_MM1
Sep 13 04:28:52.269: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID
Sep 13 04:28:52.269: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP
Sep 13 04:28:52.269: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:28:52.269: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
Sep 13 04:28:52.269: ISAKMP:(0):Old State = IKE_R_MM1 New State = IKE_R_MM2
Sep 13 04:28:55.933: ISAKMP:(14390):purging SA., sa=1FB648C, delme=1FB648C
Sep 13 04:28:59.849: ISAKMP: set new node 0 to QM_IDLE
Sep 13 04:28:59.849: ISAKMP:(0):SA is still budding. Attached new ipsec request to it. (local 172.34.47.57, remote 172.35.200.87)
Sep 13 04:28:59.849: ISAKMP: Error while processing SA request: Failed to initialize SA
Sep 13 04:28:59.849: ISAKMP: Error while processing KMI message 0, error 2.
Sep 13 04:28:59.849: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
Sep 13 04:28:59.849: ISAKMP (0): incrementing error counter on sa, attempt 3 of 5: retransmit phase 1
Sep 13 04:28:59.849: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
Sep 13 04:28:59.849: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE
Sep 13 04:28:59.849: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:29:02.265: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP
Sep 13 04:29:02.265: ISAKMP:(0): phase 1 packet is a duplicate of a previous packet.
Sep 13 04:29:02.265: ISAKMP:(0): retransmitting due to retransmit phase 1
Sep 13 04:29:02.765: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...
Sep 13 04:29:02.765: ISAKMP (0): incrementing error counter on sa, attempt 1 of 5: retransmit phase 1
Sep 13 04:29:02.765: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP
Sep 13 04:29:02.765: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP
Sep 13 04:29:02.765: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:29:03.017: ISAKMP:(14392):purging node 2101687451
Sep 13 04:29:05.309: ISAKMP (14397): received packet from 172.35.194.219 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:29:05.309: ISAKMP: set new node 252378786 to QM_IDLE
Sep 13 04:29:05.309: ISAKMP:(14397): processing HASH payload. message ID = 252378786
Sep 13 04:29:05.309: ISAKMP:(14397): processing SA payload. message ID = 252378786
Sep 13 04:29:05.309: ISAKMP:(14397):Checking IPSec proposal 1
Sep 13 04:29:05.309: ISAKMP: transform 1, ESP_3DES
Sep 13 04:29:05.309: ISAKMP: attributes in transform:
Sep 13 04:29:05.309: ISAKMP: encaps is 1 (Tunnel)
Sep 13 04:29:05.309: ISAKMP: SA life type in seconds
Sep 13 04:29:05.309: ISAKMP: SA life duration (basic) of 300
Sep 13 04:29:05.309: ISAKMP: SA life type in kilobytes
Sep 13 04:29:05.309: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0
Sep 13 04:29:05.309: ISAKMP: authenticator is HMAC-MD5
Sep 13 04:29:05.309: ISAKMP: group is 2
Sep 13 04:29:05.309: ISAKMP:(14397):atts are acceptable.
Sep 13 04:29:05.309: ISAKMP:(14397): processing NONCE payload. message ID = 252378786
Sep 13 04:29:05.309: ISAKMP:(14397): processing KE payload. message ID = 252378786
Sep 13 04:29:05.313: ISAKMP:(14397): processing ID payload. message ID = 252378786
Sep 13 04:29:05.313: ISAKMP:(14397): processing ID payload. message ID = 252378786
Sep 13 04:29:05.313: ISAKMP:(14397):QM Responder gets spi
Sep 13 04:29:05.313: ISAKMP:(14397):Node 252378786, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:29:05.313: ISAKMP:(14397):Old State = IKE_QM_READY New State = IKE_QM_SPI_STARVE
Sep 13 04:29:05.313: ISAKMP:(14397): Creating IPSec SAs
Sep 13 04:29:05.313: inbound SA from 172.35.194.219 to 172.34.47.57 (f/i) 0/ 0
(proxy 172.21.1.0 to 0.0.0.0)
Sep 13 04:29:05.313: has spi 0xF0B346BA and conn_id 0
Sep 13 04:29:05.313: lifetime of 300 seconds
Sep 13 04:29:05.313: lifetime of 4608000 kilobytes
Sep 13 04:29:05.313: outbound SA from 172.34.47.57 to 172.35.194.219 (f/i) 0/0
(proxy 0.0.0.0 to 172.21.1.0)
Sep 13 04:29:05.313: has spi 0x857BA967 and conn_id 0
Sep 13 04:29:05.313: lifetime of 300 seconds
Sep 13 04:29:05.313: lifetime of 4608000 kilobytes
Sep 13 04:29:05.313: ISAKMP:(14397): sending packet to 172.35.194.219 my_port 500 peer_port 500 (R) QM_IDLE
Sep 13 04:29:05.313: ISAKMP:(14397):Sending an IKE IPv4 Packet.
Sep 13 04:29:05.313: ISAKMP:(14397):Node 252378786, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI
Sep 13 04:29:05.313: ISAKMP:(14397):Old State = IKE_QM_SPI_STARVE New State = IKE_QM_R_QM2
Sep 13 04:29:05.389: ISAKMP (14397): received packet from 172.35.194.219 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:29:05.389: ISAKMP:(14397):deleting node 252378786 error FALSE reason "QM done (await)"
Sep 13 04:29:05.389: ISAKMP:(14397):Node 252378786, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:29:05.389: ISAKMP:(14397):Old State = IKE_QM_R_QM2 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 04:29:07.925: ISAKMP:(14393):purging node 1434815361
Sep 13 04:29:08.761: ISAKMP:(14394):peer does not do paranoid keepalives.
Sep 13 04:29:08.761: ISAKMP:(14394):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE (peer 172.35.194.115)
Sep 13 04:29:08.761: ISAKMP: set new node 1605462269 to QM_IDLE
Sep 13 04:29:08.761: ISAKMP:(14394): sending packet to 172.35.194.115 my_port 500 peer_port 500 (R) QM_IDLE
Sep 13 04:29:08.761: ISAKMP:(14394):Sending an IKE IPv4 Packet.
Sep 13 04:29:08.761: ISAKMP:(14394):purging node 1605462269
Sep 13 04:29:08.761: ISAKMP:(14394):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
Sep 13 04:29:08.761: ISAKMP:(14394):Old State = IKE_P1_COMPLETE New State = IKE_DEST_SA
Sep 13 04:29:08.761: ISAKMP:(14394):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE (peer 172.35.194.115)
Sep 13 04:29:08.761: ISAKMP: Unlocking peer struct 0x1067324 for isadb_mark_sa_deleted(), count 0
Sep 13 04:29:08.761: ISAKMP:(14394):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:29:08.761: ISAKMP:(14394):Old State = IKE_DEST_SA New State = IKE_DEST_SA
Sep 13 04:29:08.801: ISAKMP (14394): received packet from 172.35.194.115 dport 500 sport 500 Global (R) MM_NO_STATE
Sep 13 04:29:08.965: ISAKMP: ignoring request to send delete notify (no ISAKMP sa) src 172.34.47.57 dst 172.35.194.115 for SPI 0x6C824D4D
Sep 13 04:29:09.849: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
Sep 13 04:29:09.849: ISAKMP (0): incrementing error counter on sa, attempt 4 of 5: retransmit phase 1
Sep 13 04:29:09.849: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
Sep 13 04:29:09.849: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_NO_STATE
Sep 13 04:29:09.849: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:29:09.905: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (I) MM_NO_STATE
Sep 13 04:29:09.905: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:29:09.905: ISAKMP:(0):Old State = IKE_I_MM1 New State = IKE_I_MM2
Sep 13 04:29:09.905: ISAKMP:(0): processing SA payload. message ID = 0
Sep 13 04:29:09.905: ISAKMP:(0): processing vendor id payload
Sep 13 04:29:09.905: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch
Sep 13 04:29:09.905: ISAKMP (0): vendor ID is NAT-T RFC 3947
Sep 13 04:29:09.905: ISAKMP:(0):found peer pre-shared key matching 172.35.200.87
Sep 13 04:29:09.905: ISAKMP:(0): local preshared key found
Sep 13 04:29:09.905: ISAKMP : Scanning profiles for xauth ...
Sep 13 04:29:09.905: ISAKMP:(0):Checking ISAKMP transform 1 against priority 30 policy
Sep 13 04:29:09.905: ISAKMP: encryption 3DES-CBC
Sep 13 04:29:09.905: ISAKMP: hash MD5
Sep 13 04:29:09.905: ISAKMP: default group 2
Sep 13 04:29:09.905: ISAKMP: auth pre-share
Sep 13 04:29:09.905: ISAKMP: life type in seconds
Sep 13 04:29:09.905: ISAKMP: life duration (basic) of 300
Sep 13 04:29:09.905: ISAKMP:(0):atts are acceptable. Next payload is 0
Sep 13 04:29:09.905: ISAKMP:(0):Acceptable atts:actual life: 0
Sep 13 04:29:09.905: ISAKMP:(0):Acceptable atts:life: 0
Sep 13 04:29:09.905: ISAKMP:(0):Basic life_in_seconds:300
Sep 13 04:29:09.905: ISAKMP:(0):Returning Actual lifetime: 300
Sep 13 04:29:09.905: ISAKMP:(0)::Started lifetime timer: 300.
Sep 13 04:29:09.905: ISAKMP:(0): processing vendor id payload
Sep 13 04:29:09.905: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch
Sep 13 04:29:09.905: ISAKMP (0): vendor ID is NAT-T RFC 3947
Sep 13 04:29:09.905: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Sep 13 04:29:09.905: ISAKMP:(0):Old State = IKE_I_MM2 New State = IKE_I_MM2
Sep 13 04:29:09.905: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_SA_SETUP
Sep 13 04:29:09.905: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:29:09.905: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
Sep 13 04:29:09.905: ISAKMP:(0):Old State = IKE_I_MM2 New State = IKE_I_MM3
Sep 13 04:29:09.969: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (I) MM_SA_SETUP
Sep 13 04:29:09.969: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:29:09.969: ISAKMP:(0):Old State = IKE_I_MM3 New State = IKE_I_MM4
Sep 13 04:29:09.969: ISAKMP:(0): processing KE payload. message ID = 0
Sep 13 04:29:09.969: ISAKMP:(0): processing NONCE payload. message ID = 0
Sep 13 04:29:09.969: ISAKMP:(0):found peer pre-shared key matching 172.35.200.87
Sep 13 04:29:09.969: ISAKMP:(14410): processing vendor id payload
Sep 13 04:29:09.969: ISAKMP:(14410): vendor ID is Unity
Sep 13 04:29:09.969: ISAKMP:(14410): processing vendor id payload
Sep 13 04:29:09.969: ISAKMP:(14410): vendor ID is DPD
Sep 13 04:29:09.969: ISAKMP:(14410): processing vendor id payload
Sep 13 04:29:09.969: ISAKMP:(14410): speaking to another IOS box!
Sep 13 04:29:09.969: ISAKMP:received payload type 20
Sep 13 04:29:09.969: ISAKMP (14410): His hash no match - this node outside NAT
Sep 13 04:29:09.969: ISAKMP:received payload type 20
Sep 13 04:29:09.969: ISAKMP (14410): No NAT Found for self or peer
Sep 13 04:29:09.969: ISAKMP:(14410):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Sep 13 04:29:09.969: ISAKMP:(14410):Old State = IKE_I_MM4 New State = IKE_I_MM4
Sep 13 04:29:09.969: ISAKMP:(14410):SA is doing pre-shared key authentication using id type ID_IPV4_ADDR
Sep 13 04:29:09.969: ISAKMP (14410): ID payload
next-payload : 8
type : 1
address : 172.34.47.57
protocol : 17
port : 500
length : 12
Sep 13 04:29:09.969: ISAKMP:(14410):Total payload length: 12
Sep 13 04:29:09.969: ISAKMP:(14410): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) MM_KEY_EXCH
Sep 13 04:29:09.969: ISAKMP:(14410):Sending an IKE IPv4 Packet.
Sep 13 04:29:09.969: ISAKMP:(14410):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
Sep 13 04:29:09.969: ISAKMP:(14410):Old State = IKE_I_MM4 New State = IKE_I_MM5
Sep 13 04:29:10.001: ISAKMP (14410): received packet from 172.35.200.87 dport 500 sport 500 Global (I) MM_KEY_EXCH
Sep 13 04:29:10.001: ISAKMP:(14410): processing ID payload. message ID = 0
Sep 13 04:29:10.005: ISAKMP (14410): ID payload
next-payload : 8
type : 1
address : 172.35.200.87
protocol : 17
port : 500
length : 12
Sep 13 04:29:10.005: ISAKMP:(0):: peer matches *none* of the profiles
Sep 13 04:29:10.005: ISAKMP:(14410): processing HASH payload. message ID = 0
Sep 13 04:29:10.005: ISAKMP:(14410):SA authentication status:
authenticated
Sep 13 04:29:10.005: ISAKMP:(14410):SA has been authenticated with 172.35.200.87
Sep 13 04:29:10.005: ISAKMP: Trying to insert a peer 172.34.47.57/172.35.200.87/500/, and inserted successfully 1FB5094.
Sep 13 04:29:10.005: ISAKMP:(14410):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:29:10.005: ISAKMP:(14410):Old State = IKE_I_MM5 New State = IKE_I_MM6
Sep 13 04:29:10.005: ISAKMP:(14410):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Sep 13 04:29:10.005: ISAKMP:(14410):Old State = IKE_I_MM6 New State = IKE_I_MM6
Sep 13 04:29:10.005: ISAKMP:(14410):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
Sep 13 04:29:10.005: ISAKMP:(14410):Old State = IKE_I_MM6 New State = IKE_P1_COMPLETE
Sep 13 04:29:10.005: ISAKMP:(14410):beginning Quick Mode exchange, M-ID of 3181362681
Sep 13 04:29:10.009: ISAKMP:(14410):QM Initiator gets spi
Sep 13 04:29:10.009: ISAKMP:(14410): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) QM_IDLE
Sep 13 04:29:10.009: ISAKMP:(14410):Sending an IKE IPv4 Packet.
Sep 13 04:29:10.009: ISAKMP:(14410):Node 3181362681, Input = IKE_MESG_INTERNAL, IKE_INIT_QM
Sep 13 04:29:10.009: ISAKMP:(14410):Old State = IKE_QM_READY New State = IKE_QM_I_QM1
Sep 13 04:29:10.009: ISAKMP:(14410):beginning Quick Mode exchange, M-ID of 817986408
Sep 13 04:29:10.009: ISAKMP:(14410):QM Initiator gets spi
Sep 13 04:29:10.009: ISAKMP:(14410): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) QM_IDLE
Sep 13 04:29:10.009: ISAKMP:(14410):Sending an IKE IPv4 Packet.
Sep 13 04:29:10.009: ISAKMP:(14410):Node 817986408, Input = IKE_MESG_INTERNAL, IKE_INIT_QM
Sep 13 04:29:10.009: ISAKMP:(14410):Old State = IKE_QM_READY New State = IKE_QM_I_QM1
Sep 13 04:29:10.009: ISAKMP:(14410):Input = IKE_MESG_INTERNAL, IKE_PHASE1_COMPLETE
Sep 13 04:29:10.009: ISAKMP:(14410):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
Sep 13 04:29:10.097: ISAKMP (14410): received packet from 172.35.200.87 dport 500 sport 500 Global (I) QM_IDLE
Sep 13 04:29:10.097: ISAKMP:(14410): processing HASH payload. message ID = 3181362681
Sep 13 04:29:10.097: ISAKMP:(14410): processing SA payload. message ID = 3181362681
Sep 13 04:29:10.097: ISAKMP:(14410):Checking IPSec proposal 1
Sep 13 04:29:10.097: ISAKMP: transform 1, ESP_3DES
Sep 13 04:29:10.097: ISAKMP: attributes in transform:
Sep 13 04:29:10.097: ISAKMP: encaps is 1 (Tunnel)
Sep 13 04:29:10.097: ISAKMP: SA life type in seconds
Sep 13 04:29:10.097: ISAKMP: SA life duration (basic) of 300
Sep 13 04:29:10.097: ISAKMP: SA life type in kilobytes
Sep 13 04:29:10.097: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0
Sep 13 04:29:10.097: ISAKMP: authenticator is HMAC-MD5
Sep 13 04:29:10.097: ISAKMP: group is 2
Sep 13 04:29:10.097: ISAKMP:(14410):atts are acceptable.
Sep 13 04:29:10.097: ISAKMP:(14410): processing NONCE payload. message ID = 3181362681
Sep 13 04:29:10.097: ISAKMP:(14410): processing KE payload. message ID = 3181362681
Sep 13 04:29:10.097: ISAKMP:(14410): processing ID payload. message ID = 3181362681
Sep 13 04:29:10.097: ISAKMP:(14410): processing ID payload. message ID = 3181362681
Sep 13 04:29:10.097: ISAKMP:(14410): Creating IPSec SAs
Sep 13 04:29:10.097: inbound SA from 172.35.200.87 to 172.34.47.57 (f/i) 0/ 0
(proxy 172.17.31.0 to 0.0.0.0)
Sep 13 04:29:10.097: has spi 0xEBFEE654 and conn_id 0
Sep 13 04:29:10.097: lifetime of 300 seconds
Sep 13 04:29:10.097: lifetime of 4608000 kilobytes
Sep 13 04:29:10.097: outbound SA from 172.34.47.57 to 172.35.200.87 (f/i) 0/0
(proxy 0.0.0.0 to 172.17.31.0)
Sep 13 04:29:10.097: has spi 0xE6FD085C and conn_id 0
Sep 13 04:29:10.097: lifetime of 300 seconds
Sep 13 04:29:10.097: lifetime of 4608000 kilobytes
Sep 13 04:29:10.097: ISAKMP:(14410): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) QM_IDLE
Sep 13 04:29:10.097: ISAKMP:(14410):Sending an IKE IPv4 Packet.
Sep 13 04:29:10.097: ISAKMP:(14410):deleting node -1113604615 error FALSE reason "No Error"
Sep 13 04:29:10.097: ISAKMP:(14410):Node 3181362681, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:29:10.097: ISAKMP:(14410):Old State = IKE_QM_I_QM1 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 04:29:10.149: ISAKMP (14410): received packet from 172.35.200.87 dport 500 sport 500 Global (I) QM_IDLE
Sep 13 04:29:10.149: ISAKMP:(14410): processing HASH payload. message ID = 817986408
Sep 13 04:29:10.149: ISAKMP:(14410): processing SA payload. message ID = 817986408
Sep 13 04:29:10.149: ISAKMP:(14410):Checking IPSec proposal 1
Sep 13 04:29:10.149: ISAKMP: transform 1, ESP_3DES
Sep 13 04:29:10.149: ISAKMP: attributes in transform:
Sep 13 04:29:10.149: ISAKMP: encaps is 1 (Tunnel)
Sep 13 04:29:10.149: ISAKMP: SA life type in seconds
Sep 13 04:29:10.149: ISAKMP: SA life duration (basic) of 300
Sep 13 04:29:10.149: ISAKMP: SA life type in kilobytes
Sep 13 04:29:10.149: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0
Sep 13 04:29:10.149: ISAKMP: authenticator is HMAC-MD5
Sep 13 04:29:10.149: ISAKMP: group is 2
Sep 13 04:29:10.149: ISAKMP:(14410):atts are acceptable.
Sep 13 04:29:10.149: ISAKMP:(14410): processing NONCE payload. message ID = 817986408
Sep 13 04:29:10.149: ISAKMP:(14410): processing KE payload. message ID = 817986408
Sep 13 04:29:10.153: ISAKMP:(14410): processing ID payload. message ID = 817986408
Sep 13 04:29:10.153: ISAKMP:(14410): processing ID payload. message ID = 817986408
Sep 13 04:29:10.153: ISAKMP:(14410): Creating IPSec SAs
Sep 13 04:29:10.153: inbound SA from 172.35.200.87 to 172.34.47.57 (f/i) 0/ 0
(proxy 172.17.31.0 to 0.0.0.0)
Sep 13 04:29:10.153: has spi 0xD674D8D6 and conn_id 0
Sep 13 04:29:10.153: lifetime of 300 seconds
Sep 13 04:29:10.153: lifetime of 4608000 kilobytes
Sep 13 04:29:10.153: outbound SA from 172.34.47.57 to 172.35.200.87 (f/i) 0/0
(proxy 0.0.0.0 to 172.17.31.0)
Sep 13 04:29:10.153: has spi 0xB5CFF75B and conn_id 0
Sep 13 04:29:10.153: lifetime of 300 seconds
Sep 13 04:29:10.153: lifetime of 4608000 kilobytes
Sep 13 04:29:10.153: ISAKMP:(14410): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) QM_IDLE
Sep 13 04:29:10.153: ISAKMP:(14410):Sending an IKE IPv4 Packet.
Sep 13 04:29:10.153: ISAKMP:(14410):deleting node 817986408 error FALSE reason "No Error"
Sep 13 04:29:10.153: ISAKMP:(14410):Node 817986408, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:29:10.153: ISAKMP:(14410):Old State = IKE_QM_I_QM1 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 04:29:11.573: ISAKMP (0): received packet from 172.34.49.33 dport 500 sport 500 Global (N) NEW SA
Sep 13 04:29:11.573: ISAKMP: Found a peer struct for 172.34.49.33, peer port 500
Sep 13 04:29:11.573: ISAKMP: Locking peer struct 0x1F79C08, refcount 1 for crypto_isakmp_process_block
Sep 13 04:29:11.573: ISAKMP: local port 500, remote port 500
Sep 13 04:29:11.573: ISAKMP:(0):insert sa successfully sa = 1FB648C
Sep 13 04:29:11.573: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:29:11.573: ISAKMP:(0):Old State = IKE_READY New State = IKE_R_MM1
Sep 13 04:29:11.573: ISAKMP:(0): processing SA payload. message ID = 0
Sep 13 04:29:11.573: ISAKMP:(0): processing vendor id payload
Sep 13 04:29:11.573: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch
Sep 13 04:29:11.573: ISAKMP (0): vendor ID is NAT-T RFC 3947
Sep 13 04:29:11.573: ISAKMP:(0): processing vendor id payload
Sep 13 04:29:11.573: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch
Sep 13 04:29:11.573: ISAKMP (0): vendor ID is NAT-T v7
Sep 13 04:29:11.573: ISAKMP:(0): processing vendor id payload
Sep 13 04:29:11.573: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch
Sep 13 04:29:11.573: ISAKMP:(0): vendor ID is NAT-T v3
Sep 13 04:29:11.573: ISAKMP:(0): processing vendor id payload
Sep 13 04:29:11.573: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch
Sep 13 04:29:11.573: ISAKMP:(0): vendor ID is NAT-T v2
Sep 13 04:29:11.573: ISAKMP:(0):found peer pre-shared key matching 172.34.49.33
Sep 13 04:29:11.573: ISAKMP:(0): local preshared key found
Sep 13 04:29:11.573: ISAKMP : Scanning profiles for xauth ...
Sep 13 04:29:11.573: ISAKMP:(0):Checking ISAKMP transform 1 against priority 30 policy
Sep 13 04:29:11.573: ISAKMP: encryption 3DES-CBC
Sep 13 04:29:11.573: ISAKMP: hash MD5
Sep 13 04:29:11.573: ISAKMP: default group 2
Sep 13 04:29:11.573: ISAKMP: auth pre-share
Sep 13 04:29:11.573: ISAKMP: life type in seconds
Sep 13 04:29:11.573: ISAKMP: life duration (basic) of 300
Sep 13 04:29:11.573: ISAKMP:(0):atts are acceptable. Next payload is 0
Sep 13 04:29:11.573: ISAKMP:(0):Acceptable atts:actual life: 0
Sep 13 04:29:11.573: ISAKMP:(0):Acceptable atts:life: 0
Sep 13 04:29:11.573: ISAKMP:(0):Basic life_in_seconds:300
Sep 13 04:29:11.573: ISAKMP:(0):Returning Actual lifetime: 300
Sep 13 04:29:11.573: ISAKMP:(0)::Started lifetime timer: 300.
Sep 13 04:29:11.573: ISAKMP:(0): processing vendor id payload
Sep 13 04:29:11.573: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch
Sep 13 04:29:11.573: ISAKMP (0): vendor ID is NAT-T RFC 3947
Sep 13 04:29:11.573: ISAKMP:(0): processing vendor id payload
Sep 13 04:29:11.577: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch
Sep 13 04:29:11.577: ISAKMP (0): vendor ID is NAT-T v7
Sep 13 04:29:11.577: ISAKMP:(0): processing vendor id payload
Sep 13 04:29:11.577: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch
Sep 13 04:29:11.577: ISAKMP:(0): vendor ID is NAT-T v3
Sep 13 04:29:11.577: ISAKMP:(0): processing vendor id payload
Sep 13 04:29:11.577: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch
Sep 13 04:29:11.577: ISAKMP:(0): vendor ID is NAT-T v2
Sep 13 04:29:11.577: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Sep 13 04:29:11.577: ISAKMP:(0):Old State = IKE_R_MM1 New State = IKE_R_MM1
Sep 13 04:29:11.577: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID
Sep 13 04:29:11.577: ISAKMP:(0): sending packet to 172.34.49.33 my_port 500 peer_port 500 (R) MM_SA_SETUP
Sep 13 04:29:11.577: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:29:11.577: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
Sep 13 04:29:11.577: ISAKMP:(0):Old State = IKE_R_MM1 New State = IKE_R_MM2
Sep 13 04:29:11.701: ISAKMP (0): received packet from 172.34.49.33 dport 500 sport 500 Global (R) MM_SA_SETUP
Sep 13 04:29:11.701: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:29:11.701: ISAKMP:(0):Old State = IKE_R_MM2 New State = IKE_R_MM3
Sep 13 04:29:11.701: ISAKMP:(0): processing KE payload. message ID = 0
Sep 13 04:29:11.701: ISAKMP:(0): processing NONCE payload. message ID = 0
Sep 13 04:29:11.701: ISAKMP:(0):found peer pre-shared key matching 172.34.49.33
Sep 13 04:29:11.701: ISAKMP:(14411): processing vendor id payload
Sep 13 04:29:11.701: ISAKMP:(14411): vendor ID is DPD
Sep 13 04:29:11.701: ISAKMP:(14411): processing vendor id payload
Sep 13 04:29:11.701: ISAKMP:(14411): speaking to another IOS box!
Sep 13 04:29:11.701: ISAKMP:(14411): processing vendor id payload
Sep 13 04:29:11.701: ISAKMP:(14411): vendor ID seems Unity/DPD but major 194 mismatch
Sep 13 04:29:11.701: ISAKMP:(14411): vendor ID is XAUTH
Sep 13 04:29:11.701: ISAKMP:received payload type 20
Sep 13 04:29:11.701: ISAKMP (14411): His hash no match - this node outside NAT
Sep 13 04:29:11.701: ISAKMP:received payload type 20
Sep 13 04:29:11.701: ISAKMP (14411): No NAT Found for self or peer
Sep 13 04:29:11.701: ISAKMP:(14411):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Sep 13 04:29:11.701: ISAKMP:(14411):Old State = IKE_R_MM3 New State = IKE_R_MM3
Sep 13 04:29:11.705: ISAKMP:(14411): sending packet to 172.34.49.33 my_port 500 peer_port 500 (R) MM_KEY_EXCH
Sep 13 04:29:11.705: ISAKMP:(14411):Sending an IKE IPv4 Packet.
Sep 13 04:29:11.705: ISAKMP:(14411):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
Sep 13 04:29:11.705: ISAKMP:(14411):Old State = IKE_R_MM3 New State = IKE_R_MM4
Sep 13 04:29:11.825: ISAKMP (14411): received packet from 172.34.49.33 dport 500 sport 500 Global (R) MM_KEY_EXCH
Sep 13 04:29:11.825: ISAKMP:(14411):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:29:11.825: ISAKMP:(14411):Old State = IKE_R_MM4 New State = IKE_R_MM5
Sep 13 04:29:11.825: ISAKMP:(14411): processing ID payload. message ID = 0
Sep 13 04:29:11.825: ISAKMP (14411): ID payload
next-payload : 8
type : 1
address : 172.34.49.33
protocol : 17
port : 500
length : 12
Sep 13 04:29:11.825: ISAKMP:(0):: peer matches *none* of the profiles
Sep 13 04:29:11.825: ISAKMP:(14411): processing HASH payload. message ID = 0
Sep 13 04:29:11.825: ISAKMP:(14411):SA authentication status:
authenticated
Sep 13 04:29:11.825: ISAKMP:(14411):SA has been authenticated with 172.34.49.33
Sep 13 04:29:11.825: ISAKMP:(14411):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Sep 13 04:29:11.825: ISAKMP:(14411):Old State = IKE_R_MM5 New State = IKE_R_MM5
Sep 13 04:29:11.825: ISAKMP:(14411):SA is doing pre-shared key authentication using id type ID_IPV4_ADDR
Sep 13 04:29:11.825: ISAKMP (14411): ID payload
next-payload : 8
type : 1
address : 172.34.47.57
protocol : 17
port : 500
length : 12
Sep 13 04:29:11.825: ISAKMP:(14411):Total payload length: 12
Sep 13 04:29:11.825: ISAKMP:(14411): sending packet to 172.34.49.33 my_port 500 peer_port 500 (R) MM_KEY_EXCH
Sep 13 04:29:11.825: ISAKMP:(14411):Sending an IKE IPv4 Packet.
Sep 13 04:29:11.825: ISAKMP:(14411):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
Sep 13 04:29:11.825: ISAKMP:(14411):Old State = IKE_R_MM5 New State = IKE_P1_COMPLETE
Sep 13 04:29:11.825: ISAKMP:(14411):Input = IKE_MESG_INTERNAL, IKE_PHASE1_COMPLETE
Sep 13 04:29:11.825: ISAKMP:(14411):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
Sep 13 04:29:11.849: ISAKMP:(14408):purging node -1862940807
Sep 13 04:29:11.949: ISAKMP (14411): received packet from 172.34.49.33 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:29:11.949: ISAKMP: set new node 316969593 to QM_IDLE
Sep 13 04:29:11.949: ISAKMP:(14411): processing HASH payload. message ID = 316969593
Sep 13 04:29:11.949: ISAKMP:(14411): processing SA payload. message ID = 316969593
Sep 13 04:29:11.949: ISAKMP:(14411):Checking IPSec proposal 1
Sep 13 04:29:11.949: ISAKMP: transform 1, ESP_3DES
Sep 13 04:29:11.949: ISAKMP: attributes in transform:
Sep 13 04:29:11.949: ISAKMP: encaps is 1 (Tunnel)
Sep 13 04:29:11.949: ISAKMP: SA life type in seconds
Sep 13 04:29:11.949: ISAKMP: SA life duration (basic) of 300
Sep 13 04:29:11.949: ISAKMP: SA life type in kilobytes
Sep 13 04:29:11.949: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0
Sep 13 04:29:11.949: ISAKMP: authenticator is HMAC-MD5
Sep 13 04:29:11.949: ISAKMP: group is 2
Sep 13 04:29:11.949: ISAKMP:(14411):atts are acceptable.
Sep 13 04:29:11.949: ISAKMP:(14411): processing NONCE payload. message ID = 316969593
Sep 13 04:29:11.949: ISAKMP:(14411): processing KE payload. message ID = 316969593
Sep 13 04:29:11.949: ISAKMP:(14411): processing ID payload. message ID = 316969593
Sep 13 04:29:11.949: ISAKMP:(14411): processing ID payload. message ID = 316969593
Sep 13 04:29:11.949: ISAKMP:(14411):QM Responder gets spi
Sep 13 04:29:11.949: ISAKMP:(14411):Node 316969593, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:29:11.949: ISAKMP:(14411):Old State = IKE_QM_READY New State = IKE_QM_SPI_STARVE
Sep 13 04:29:11.949: ISAKMP:(14411): Creating IPSec SAs
Sep 13 04:29:11.949: inbound SA from 172.34.49.33 to 172.34.47.57 (f/i) 0/ 0
(proxy 172.19.100.0 to 0.0.0.0)
Sep 13 04:29:11.949: has spi 0x9E311248 and conn_id 0
Sep 13 04:29:11.949: lifetime of 300 seconds
Sep 13 04:29:11.949: lifetime of 4608000 kilobytes
Sep 13 04:29:11.949: outbound SA from 172.34.47.57 to 172.34.49.33 (f/i) 0/0
(proxy 0.0.0.0 to 172.19.100.0)
Sep 13 04:29:11.949: has spi 0x812E13CD and conn_id 0
Sep 13 04:29:11.949: lifetime of 300 seconds
Sep 13 04:29:11.949: lifetime of 4608000 kilobytes
Sep 13 04:29:11.949: ISAKMP:(14411): sending packet to 172.34.49.33 my_port 500 peer_port 500 (R) QM_IDLE
Sep 13 04:29:11.949: ISAKMP:(14411):Sending an IKE IPv4 Packet.
Sep 13 04:29:11.949: ISAKMP:(14411):Node 316969593, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI
Sep 13 04:29:11.949: ISAKMP:(14411):Old State = IKE_QM_SPI_STARVE New State = IKE_QM_R_QM2
Sep 13 04:29:12.073: ISAKMP (14411): received packet from 172.34.49.33 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:29:12.073: ISAKMP:(14411):deleting node 316969593 error FALSE reason "QM done (await)"
Sep 13 04:29:12.073: ISAKMP:(14411):Node 316969593, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:29:12.073: ISAKMP:(14411):Old State = IKE_QM_R_QM2 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 04:29:12.265: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP
Sep 13 04:29:12.265: ISAKMP:(0): phase 1 packet is a duplicate of a previous packet.
Sep 13 04:29:12.265: ISAKMP:(0): retransmitting due to retransmit phase 1
Sep 13 04:29:12.565: ISAKMP:(0):purging SA., sa=411BD47C, delme=411BD47C
Sep 13 04:29:12.765: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...
Sep 13 04:29:12.765: ISAKMP (0): incrementing error counter on sa, attempt 2 of 5: retransmit phase 1
Sep 13 04:29:12.765: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP
Sep 13 04:29:12.765: ISAKMP:(0): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_SA_SETUP
Sep 13 04:29:12.765: ISAKMP:(0):Sending an IKE IPv4 Packet.
Sep 13 04:29:12.817: ISAKMP (0): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_SA_SETUP
Sep 13 04:29:12.817: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:29:12.817: ISAKMP:(0):Old State = IKE_R_MM2 New State = IKE_R_MM3
Sep 13 04:29:12.817: ISAKMP:(0): processing KE payload. message ID = 0
Sep 13 04:29:12.817: ISAKMP:(0): processing NONCE payload. message ID = 0
Sep 13 04:29:12.821: ISAKMP:(0):found peer pre-shared key matching 172.35.200.87
Sep 13 04:29:12.821: ISAKMP:(14412): processing vendor id payload
Sep 13 04:29:12.821: ISAKMP:(14412): vendor ID is DPD
Sep 13 04:29:12.821: ISAKMP:(14412): processing vendor id payload
Sep 13 04:29:12.821: ISAKMP:(14412): speaking to another IOS box!
Sep 13 04:29:12.821: ISAKMP:(14412): processing vendor id payload
Sep 13 04:29:12.821: ISAKMP:(14412): vendor ID seems Unity/DPD but major 118 mismatch
Sep 13 04:29:12.821: ISAKMP:(14412): vendor ID is XAUTH
Sep 13 04:29:12.821: ISAKMP:received payload type 20
Sep 13 04:29:12.821: ISAKMP (14412): His hash no match - this node outside NAT
Sep 13 04:29:12.821: ISAKMP:received payload type 20
Sep 13 04:29:12.821: ISAKMP (14412): No NAT Found for self or peer
Sep 13 04:29:12.821: ISAKMP:(14412):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Sep 13 04:29:12.821: ISAKMP:(14412):Old State = IKE_R_MM3 New State = IKE_R_MM3
Sep 13 04:29:12.821: ISAKMP:(14412): sending packet to 172.35.200.87 my_port 500 peer_port 500 (R) MM_KEY_EXCH
Sep 13 04:29:12.821: ISAKMP:(14412):Sending an IKE IPv4 Packet.
Sep 13 04:29:12.821: ISAKMP:(14412):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
Sep 13 04:29:12.821: ISAKMP:(14412):Old State = IKE_R_MM3 New State = IKE_R_MM4
Sep 13 04:29:12.881: ISAKMP (14412): received packet from 172.35.200.87 dport 500 sport 500 Global (R) MM_KEY_EXCH
Sep 13 04:29:12.881: ISAKMP:(14412):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:29:12.881: ISAKMP:(14412):Old State = IKE_R_MM4 New State = IKE_R_MM5
Sep 13 04:29:12.881: ISAKMP:(14412): processing ID payload. message ID = 0
Sep 13 04:29:12.881: ISAKMP (14412): ID payload
next-payload : 8
type : 1
address : 172.35.200.87
protocol : 17
port : 500
length : 12
Sep 13 04:29:12.881: ISAKMP:(0):: peer matches *none* of the profiles
Sep 13 04:29:12.881: ISAKMP:(14412): processing HASH payload. message ID = 0
Sep 13 04:29:12.881: ISAKMP:(14412):SA authentication status:
authenticated
Sep 13 04:29:12.881: ISAKMP:(14412):SA has been authenticated with 172.35.200.87
Sep 13 04:29:12.881: ISAKMP: Trying to insert a peer 172.34.47.57/172.35.200.87/500/, and found existing one 1FB5094 to reuse, free 12370108
Sep 13 04:29:12.881: ISAKMP: Unlocking peer struct 0x12370108 Reuse existing peer, count 0
Sep 13 04:29:12.881: ISAKMP: Deleting peer node by peer_reap for 172.35.200.87: 12370108
Sep 13 04:29:12.881: ISAKMP: Locking peer struct 0x1FB5094, refcount 2 for Reuse existing peer
Sep 13 04:29:12.881: ISAKMP:(14412):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
Sep 13 04:29:12.881: ISAKMP:(14412):Old State = IKE_R_MM5 New State = IKE_R_MM5
Sep 13 04:29:12.885: ISAKMP:(14412):SA is doing
Sep 13 04:29:12.997: ISAKMP:(14412):Node 2632555641, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI
Sep 13 04:29:12.997: ISAKMP:(14412):Old State = IKE_QM_SPI_STARVE New State = IKE_QM_R_QM2
Sep 13 04:29:13.077: ISAKMP (14412): received packet from 172.35.200.87 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:29:13.077: ISAKMP:(14412):deleting node -1662411655 error FALSE reason "QM done (await)"
Sep 13 04:29:13.077: ISAKMP:(14412):Node 2632555641, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:29:13.077: ISAKMP:(14412):Old State = IKE_QM_R_QM2 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 04:29:15.137: ISAKMP: set new node 0 to QM_IDLE
Sep 13 04:29:15.137: SA has outstanding requests (local 19.73.214.124 port 500, remote 19.73.214.96 port 500)
Sep 13 04:29:15.137: ISAKMP:(14399): sitting IDLE. Starting QM immediately (QM_IDLE )
Sep 13 04:29:15.137: ISAKMP:(14399):beginning Quick Mode exchange, M-ID of 1817951830
Sep 13 04:29:15.137: ISAKMP:(14399):QM Initiator gets spi
Sep 13 04:29:15.137: ISAKMP:(14399): sending packet to 172.35.232.241 my_port 500 peer_port 500 (I) QM_IDLE
Sep 13 04:29:15.137: ISAKMP:(14399):Sending an IKE IPv4 Packet.
Sep 13 04:29:15.137: ISAKMP:(14399):Node 1817951830, Input = IKE_MESG_INTERNAL, IKE_INIT_QM
Sep 13 04:29:15.137: ISAKMP:(14399):Old State = IKE_QM_READY New State = IKE_QM_I_QM1
Sep 13 04:29:15.229: ISAKMP (14399): received packet from 172.35.232.241 dport 500 sport 500 Global (I) QM_IDLE
Sep 13 04:29:15.229: ISAKMP:(14399): processing HASH payload. message ID = 1817951830
Sep 13 04:29:15.229: ISAKMP:(14399): processing SA payload. message ID = 1817951830
Sep 13 04:29:15.229: ISAKMP:(14399):Checking IPSec proposal 1
Sep 13 04:29:15.229: ISAKMP: transform 1, ESP_3DES
Sep 13 04:29:15.229: ISAKMP: attributes in transform:
Sep 13 04:29:15.229: ISAKMP: encaps is 1 (Tunnel)
Sep 13 04:29:15.229: ISAKMP: SA life type in seconds
Sep 13 04:29:15.229: ISAKMP: SA life duration (basic) of 300
Sep 13 04:29:15.229: ISAKMP: SA life type in kilobytes
Sep 13 04:29:15.229: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0
Sep 13 04:29:15.229: ISAKMP: authenticator is HMAC-MD5
Sep 13 04:29:15.229: ISAKMP: group is 2
Sep 13 04:29:15.229: ISAKMP:(14399):atts are acceptable.
Sep 13 04:29:15.229: ISAKMP:(14399): processing NONCE payload. message ID = 1817951830
Sep 13 04:29:15.229: ISAKMP:(14399): processing KE payload. message ID = 1817951830
Sep 13 04:29:15.233: ISAKMP:(14399): processing ID payload. message ID = 1817951830
Sep 13 04:29:15.233: lifetime of 4608000 kilobytes
Sep 13 04:29:15.233: ISAKMP:(14399): sending packet to 172.35.232.241 my_port 500 peer_port 500 (I) QM_IDLE
Sep 13 04:29:15.233: ISAKMP:(14399):Sending an IKE IPv4 Packet.
Sep 13 04:29:15.233: ISAKMP:(14399):deleting node 1817951830 error FALSE reason "No Error"
Sep 13 04:29:15.233: ISAKMP:(14399):Node 1817951830, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:29:15.233: ISAKMP:(14399):Old State = IKE_QM_I_QM1 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 09:59:15: %CRYPTO-4-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet. (ip) vrf/dest_addr= /172.16.102.30, src_addr= 172.16.10.199, prot= 17
Sep 13 04:29:17.197: ISAKMP:(14394):purging node -318471219
Sep 13 04:29:19.349: ISAKMP:(0):purging node 18447477
Sep 13 04:29:19.349: ISAKMP:(0):purging node -1384134144
Sep 13 04:29:19.665: ISAKMP:(14395):peer does not do paranoid keepalives.
Sep 13 04:29:19.665: ISAKMP:(14395):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE (peer 172.35.200.100)
Sep 13 04:29:19.665: ISAKMP: set new node -2085630984 to QM_IDLE
Sep 13 04:29:19.665: ISAKMP:(14395): sending packet to 172.35.200.100 my_port 500 peer_port 500 (R) QM_IDLE
Sep 13 04:29:19.665: ISAKMP:(14395):Sending an IKE IPv4 Packet.
Sep 13 04:29:19.665: ISAKMP:(14395):purging node -2085630984
Sep 13 04:29:19.665: ISAKMP:(14395):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
Sep 13 04:29:19.665: ISAKMP:(14395):Old State = IKE_P1_COMPLETE New State = IKE_DEST_SA
Sep 13 04:29:19.665: ISAKMP:(14395):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE (peer 172.35.200.100)
Sep 13 04:29:19.665: ISAKMP: Unlocking peer struct 0x1F7036C for isadb_mark_sa_deleted(), count 0
Sep 13 04:29:19.665: ISAKMP:(14395):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:29:19.665: ISAKMP:(14395):Old State = IKE_DEST_SA New State = IKE_DEST_SA
Sep 13 04:29:19.705: ISAKMP (14395): received packet from 172.35.200.100 dport 500 sport 500 Global (R) MM_NO_STATE
Sep 13 04:29:19.925: ISAKMP: ignoring request to send delete notify (no ISAKMP sa) src 172.34.47.57 dst 172.35.200.100 for SPI 0xFEBEA21C
Sep 13 04:29:20.229: ISAKMP:(14391):purging node 617903236
Sep 13 04:29:21.865: ISAKMP:(14396):peer does not do paranoid keepalives.
Sep 13 04:29:21.865: ISAKMP:(14396):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE (peer 172.35.222.236)
Sep 13 04:29:21.865: ISAKMP: set new node 197862031 to QM_IDLE
Sep 13 04:29:21.865: ISAKMP:(14396): sending packet to 172.35.222.236 my_port 500 peer_port 500 (R) QM_IDLE
Sep 13 04:29:21.865: ISAKMP:(14396):Sending an IKE IPv4 Packet.
Sep 13 04:29:21.865: ISAKMP:(14396):purging node 197862031
Sep 13 04:29:21.865: ISAKMP:(14396):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
Sep 13 04:29:21.865: ISAKMP:(14396):Old State = IKE_P1_COMPLETE New State = IKE_DEST_SA
Sep 13 04:29:21.865: ISAKMP:(14396):deleting SA reason "IKE SA Lifetime Exceeded" state (R) QM_IDLE (peer 172.35.222.236)
Sep 13 04:29:21.865: ISAKMP: Unlocking peer struct 0x41145720 for isadb_mark_sa_deleted(), count 0
Sep 13 04:29:21.865: ISAKMP:(14396):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
Sep 13 04:29:21.865: ISAKMP:(14396):Old State = IKE_DEST_SA New State = IKE_DEST_SA
Sep 13 04:29:21.957: ISAKMP (14396): received packet from 172.35.222.236 dport 500 sport 500 Global (R) MM_NO_STATE
Sep 13 04:29:22.405: ISAKMP: ignoring request to send delete notify (no ISAKMP sa) src 172.34.47.57 dst 172.35.222.236 for SPI 0xB29B24CB
Sep 13 04:29:24.989: ISAKMP (14400): received packet from 172.35.247.239 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:29:24.989: ISAKMP: set new node 1895761073 to QM_IDLE
Sep 13 04:29:24.989: ISAKMP:(14400): processing HASH payload. message ID = 1895761073
Sep 13 04:29:24.989: ISAKMP:(14400): processing SA payload. message ID = 1895761073
Sep 13 04:29:24.989: ISAKMP:(14400):Checking IPSec proposal 1
Sep 13 04:29:24.989: ISAKMP: transform 1, ESP_3DES
Sep 13 04:29:24.989: ISAKMP: attributes in transform:
Sep 13 04:29:24.989: ISAKMP: encaps is 1 (Tunnel)
Sep 13 04:29:24.989: ISAKMP: SA life type in seconds
Sep 13 04:29:24.989: ISAKMP: SA life duration (basic) of 300
Sep 13 04:29:24.989: ISAKMP: SA life type in kilobytes
Sep 13 04:29:24.989: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0
Sep 13 04:29:24.989: ISAKMP: authenticator is HMAC-MD5
Sep 13 04:29:24.989: ISAKMP: group is 2
Sep 13 04:29:24.989: ISAKMP:(14400):atts are acceptable.
Sep 13 04:29:24.989: ISAKMP:(14400): processing NONCE payload. message ID = 1895761073
Sep 13 04:29:24.989: ISAKMP:(14400): processing KE payload. message ID = 1895761073
Sep 13 04:29:24.993: ISAKMP:(14400): processing ID payload. message ID = 1895761073
Sep 13 04:29:24.993: ISAKMP:(14400): processing ID payload. message ID = 1895761073
Sep 13 04:29:24.993: ISAKMP:(14400):QM Responder gets spi
Sep 13 04:29:24.993: ISAKMP:(14400):Node 1895761073, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:29:24.993: ISAKMP:(14400):Old State = IKE_QM_READY New State = IKE_QM_SPI_STARVE
Sep 13 04:29:24.993: ISAKMP:(14400): Creating IPSec SAs
Sep 13 04:29:24.993: inbound SA from 172.35.247.239 to 172.34.47.57 (f/i) 0/ 0
(proxy 172.17.19.0 to 0.0.0.0)
Sep 13 04:29:24.993: has spi 0x9D41C37A and conn_id 0
Sep 13 04:29:24.993: lifetime of 300 seconds
Sep 13 04:29:24.993: lifetime of 4608000 kilobytes
Sep 13 04:29:24.993: outbound SA from 172.34.47.57 to 172.35.247.239 (f/i) 0/0
(proxy 0.0.0.0 to 172.17.19.0)
Sep 13 04:29:24.993: has spi 0xD31F8C67 and conn_id 0
Sep 13 04:29:24.993: lifetime of 300 seconds
Sep 13 04:29:24.993: lifetime of 4608000 kilobytes
Sep 13 04:29:24.993: ISAKMP:(14400): sending packet to 172.35.247.239 my_port 500 peer_port 500 (R) QM_IDLE
Sep 13 04:29:24.993: ISAKMP:(14400):Sending an IKE IPv4 Packet.
Sep 13 04:29:24.993: ISAKMP:(14400):Node 1895761073, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI
Sep 13 04:29:24.993: ISAKMP:(14400):Old State = IKE_QM_SPI_STARVE New State = IKE_QM_R_QM2
Sep 13 04:29:25.061: ISAKMP (14400): received packet from 172.35.247.239 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:29:25.061: ISAKMP:(14400):deleting node 1895761073 error FALSE reason "QM done (await)"
Sep 13 04:29:25.061: ISAKMP:(14400):Node 1895761073, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:29:25.061: ISAKMP:(14400):Old State = IKE_QM_R_QM2 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 04:29:25.089: ISAKMP:(0): SA request profile is (NULL)
Sep 13 04:29:25.089: ISAKMP: Found a peer struct for 172.35.194.218, peer port 500
Sep 13 04:29:25.089: ISAKMP: Locking peer struct 0x1EB7CCC, refcount 1 for isakmp_initiator
Sep 13 04:29:25.089: ISAKMP: local port 500, remote port 500
Sep 13 04:29:25.089: ISAKMP: set new node 0 to QM_IDLE
Sep 13 04:29:25.089: ISAKMP:(0):insert sa successfully sa = 134DC94C
Sep 13 04:29:25.089: ISAKMP:(0):Can not start Aggressive mode, trying Main mode.
Sep 13 04:29:25.089: ISAKMP:(0):found peer pre-shared key matching 172.35.194.218
Sep 13 04:29:25.089: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID
Sep 13 04:29:25.089: ISAKMP:(0): constructed NAT-T vendor-07 ID
Sep 13 04:29:25.089: ISAKMP:(0): constructed NAT-T vendor-03 ID
Sep 13 04:29:25.509: lifetime of 4608000 kilobytes
Sep 13 04:29:25.509: ISAKMP:(14413): sending packet to 172.35.194.218 my_port 500 peer_port 500 (I) QM_IDLE
Sep 13 04:29:25.509: ISAKMP:(14413):Sending an IKE IPv4 Packet.
Sep 13 04:29:25.509: ISAKMP:(14413):deleting node -1204938463 error FALSE reason "No Error"
Sep 13 04:29:25.509: ISAKMP:(14413):Node 3090028833, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
Sep 13 04:29:25.509: ISAKMP:(14413):Old State = IKE_QM_I_QM1 New State = IKE_QM_PHASE2_COMPLETE
Sep 13 04:29:25.621: ISAKMP (14413): received packet from 172.35.194.218 dport 500 sport 500 Global (I) QM_IDLE
Sep 13 04:29:28.233: ISAKMP:(0):purging node 1447299565
Sep 13 04:29:28.233: ISAKMP:(0):purging node -1227412869
Sep 13 04:29:29.349: ISAKMP:(0):purging SA., sa=134D9B1C, delme=134D9B1C
Sep 13 04:29:30.229: ISAKMP:(14391):purging SA., sa=1FA2A94, delme=1FA2A94
Sep 13 04:29:35.145: ISAKMP (14412): received packet from 172.35.200.87 dport 500 sport 500 Global (R) QM_IDLE
Sep 13 04:29:35.145: ISAKMP: set new node 925689348 to QM_IDLE
Sep 13 04:29:35.145: ISAKMP:(14412): processing HASH payload. message ID = 925689348
Sep 13 04:29:35.145: ISAKMP:(14412): processing DELETE payload. message ID = 925689348
Sep 13 04:29:35.145: ISAKMP:(14412):peer does not do paranoid keepalives.
Sep 13 04:29:35.145: ISAKMP:(14412):deleting node 925689348 error FALSE reason "Informational (in) state 1"
Sep 13 04:29:35.153: ISAKMP: set new node 1929835961 to QM_IDLE
Sep 13 04:29:35.153: ISAKMP:(14410): sending packet to 172.35.200.87 my_port 500 peer_port 500 (I) QM_IDLE
Sep 13 04:29:35.153: ISAKMP:(14410):Sending an IKE IPv4 Packet.
Sep 13 04:29:35.153: ISAKMP:(14410):purging node 1929835961
Sep 13 04:29:35.153: ISAKMP:(14410):Input = IKE_MESG_FROM_IPSEC, IKE_PHASE2_DEL
Se
09-12-2013 10:29 PM
Reboot the router.
09-12-2013 10:29 PM
Anyone reply,how do i stop this logs.
09-12-2013 10:33 PM
I can not reboot the router as it is live.no other solution?
09-13-2013 11:09 AM
Can you telnet/ssh to the router? I assume once you don't have terminal monitor on then you should be getting those messages and you can disable the debug as Leo suggested.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: