Nov 5 19:12:40.642: ISAKMP (0:134217748): received packet from 4.3.2.1 dport 500 sport 500 Global (I) QM_IDLE Nov 5 19:12:40.642: ISAKMP: set new node 428155361 to QM_IDLE Nov 5 19:12:40.646: ISAKMP:(0:20:SW:1): processing HASH payload. message ID = 428155361 Nov 5 19:12:40.646: ISAKMP:received payload type 18 Nov 5 19:12:40.646: ISAKMP:(0:20:SW:1): processing DELETE_WITH_REASON payload, message ID = 428155361, reason: DELETE_BY_USER_COMMAND Nov 5 19:12:40.646: ISAKMP:(0:20:SW:1):peer does not do paranoid keepalives. Nov 5 19:12:40.646: ISAKMP:(0:20:SW:1):deleting SA reason "BY user command" state (I) QM_IDLE (peer 4.3.2.1) Nov 5 19:12:40.650: ISAKMP:(0:20:SW:1):deleting node 428155361 error FALSE reason "Informational (in) state 1" Nov 5 19:12:40.650: ISAKMP (0:134217748): received packet from 4.3.2.1 dport 500 sport 500 Global (I) QM_IDLE Nov 5 19:12:40.654: ISAKMP: set new node 1510847877 to QM_IDLE Nov 5 19:12:40.658: ISAKMP:(0:20:SW:1): sending packet to 4.3.2.1 my_port 500 peer_port 500 (I) QM_IDLE Nov 5 19:12:40.658: ISAKMP:(0:20:SW:1):purging node 1510847877 Nov 5 19:12:40.658: ISAKMP:(0:20:SW:1):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL Nov 5 19:12:40.658: ISAKMP:(0:20:SW:1):Old State = IKE_P1_COMPLETE New State = IKE_DEST_SA Nov 5 19:12:40.662: ISAKMP:(0:20:SW:1):deleting SA reason "No reason" state (I) QM_IDLE (peer 4.3.2.1) Nov 5 19:12:40.662: ISAKMP:(0:0:N/A:0):Can't decrement IKE Call Admisstion Control stat outgoing_active since it's already 0. Nov 5 19:12:40.662: ISAKMP: Unlocking IKE struct 0x81893388 for isadb_mark_sa_deleted(), count 0 Nov 5 19:12:40.666: ISAKMP:(0:20:SW:1):deleting node -504537456 error FALSE reason "IKE deleted" Nov 5 19:12:40.666: ISAKMP:(0:20:SW:1):deleting node 428155361 error FALSE reason "IKE deleted" Nov 5 19:12:40.666: ISAKMP:(0:20:SW:1):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH Nov 5 19:12:40.666: ISAKMP:(0:20:SW:1):Old State = IKE_DEST_SA New State = IKE_DEST_SA Nov 5 19:12:42.494: ISAKMP (0:0): received packet from 4.3.2.1 dport 500 sport 500 Global (N) NEW SA Nov 5 19:12:42.498: ISAKMP: Found a peer struct for 4.3.2.1, peer port 500 Nov 5 19:12:42.498: ISAKMP: Locking peer struct 0x81893388, IKE refcount 1 for crypto_isakmp_process_block Nov 5 19:12:42.498: ISAKMP: local port 500, remote port 500 Nov 5 19:12:42.498: ISAKMP: Find a dup sa in the avl tree during calling isadb_insert sa = 81688FC4 Nov 5 19:12:42.498: ISAKMP:(0:0:N/A:0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH Nov 5 19:12:42.502: ISAKMP:(0:0:N/A:0):Old State = IKE_READY New State = IKE_R_MM1 Nov 5 19:12:42.502: ISAKMP:(0:0:N/A:0): processing SA payload. message ID = 0 Nov 5 19:12:42.502: ISAKMP:(0:0:N/A:0): processing vendor id payload Nov 5 19:12:42.502: ISAKMP:(0:0:N/A:0): vendor ID seems Unity/DPD but major 194 mismatch Nov 5 19:12:42.506: ISAKMP:(0:0:N/A:0):found peer pre-shared key matching 4.3.2.1 Nov 5 19:12:42.506: ISAKMP:(0:0:N/A:0): local preshared key found Nov 5 19:12:42.506: ISAKMP : Scanning profiles for xauth ... Nov 5 19:12:42.506: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 1 against priority 1 policy Nov 5 19:12:42.506: ISAKMP: encryption 3DES-CBC Nov 5 19:12:42.506: ISAKMP: hash MD5 Nov 5 19:12:42.506: ISAKMP: default group 2 Nov 5 19:12:42.506: ISAKMP: auth pre-share Nov 5 19:12:42.506: ISAKMP: life type in seconds Nov 5 19:12:42.510: ISAKMP: life duration (VPI) of 0x0 0x1 0x51 0x80 Nov 5 19:12:42.510: ISAKMP:(0:0:N/A:0):atts are acceptable. Next payload is 0 Nov 5 19:12:42.702: ISAKMP:(0:21:SW:1): processing vendor id payload Nov 5 19:12:42.702: ISAKMP:(0:21:SW:1): vendor ID seems Unity/DPD but major 194 mismatch Nov 5 19:12:42.702: ISAKMP:(0:21:SW:1):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE Nov 5 19:12:42.702: ISAKMP:(0:21:SW:1):Old State = IKE_R_MM1 New State = IKE_R_MM1 Nov 5 19:12:42.702: ISAKMP:(0:19:SW:1):purging node 725756112 Nov 5 19:12:42.706: ISAKMP:(0:19:SW:1):purging node -56466309 Nov 5 19:12:42.710: ISAKMP:(0:21:SW:1): sending packet to 4.3.2.1 my_port 500 peer_port 500 (R) MM_SA_SETUP Nov 5 19:12:42.710: ISAKMP:(0:21:SW:1):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE Nov 5 19:12:42.710: ISAKMP:(0:21:SW:1):Old State = IKE_R_MM1 New State = IKE_R_MM2 Nov 5 19:12:42.806: ISAKMP (0:134217749): received packet from 4.3.2.1 dport 500 sport 500 Global (R) MM_SA_SETUP Nov 5 19:12:42.810: ISAKMP:(0:21:SW:1):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH Nov 5 19:12:42.810: ISAKMP:(0:21:SW:1):Old State = IKE_R_MM2 New State = IKE_R_MM3 Nov 5 19:12:42.810: ISAKMP:(0:21:SW:1): processing KE payload. message ID = 0 Nov 5 19:12:43.050: ISAKMP:(0:21:SW:1): processing NONCE payload. message ID = 0 Nov 5 19:12:43.054: ISAKMP:(0:21:SW:1):found peer pre-shared key matching 4.3.2.1 Nov 5 19:12:43.054: ISAKMP:(0:21:SW:1):SKEYID state generated Nov 5 19:12:43.054: ISAKMP:(0:21:SW:1): processing vendor id payload Nov 5 19:12:43.058: ISAKMP:(0:21:SW:1): vendor ID is Unity Nov 5 19:12:43.058: ISAKMP:(0:21:SW:1): processing vendor id payload Nov 5 19:12:43.058: ISAKMP:(0:21:SW:1): vendor ID seems Unity/DPD but major 80 mismatch Nov 5 19:12:43.058: ISAKMP:(0:21:SW:1): vendor ID is XAUTH Nov 5 19:12:43.058: ISAKMP:(0:21:SW:1): processing vendor id payload Nov 5 19:12:43.058: ISAKMP:(0:21:SW:1): speaking to another IOS box! Nov 5 19:12:43.062: ISAKMP:(0:21:SW:1): processing vendor id payload Nov 5 19:12:43.062: ISAKMP:(0:21:SW:1): vendor ID seems Unity/DPD but major 4 mismatch Nov 5 19:12:43.062: ISAKMP:(0:21:SW:1):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE Nov 5 19:12:43.062: ISAKMP:(0:21:SW:1):Old State = IKE_R_MM3 New State = IKE_R_MM3 Nov 5 19:12:43.066: ISAKMP:(0:21:SW:1): sending packet to 4.3.2.1 my_port 500 peer_port 500 (R) MM_KEY_EXCH Nov 5 19:12:43.066: ISAKMP:(0:21:SW:1):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE Nov 5 19:12:43.066: ISAKMP:(0:21:SW:1):Old State = IKE_R_MM3 New State = IKE_R_MM4 Nov 5 19:12:43.182: ISAKMP (0:134217749): received packet from 4.3.2.1 dport 500 sport 500 Global (R) MM_KEY_EXCH Nov 5 19:12:43.182: ISAKMP:(0:21:SW:1):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH Nov 5 19:12:43.182: ISAKMP:(0:21:SW:1):Old State = IKE_R_MM4 New State = IKE_R_MM5 Nov 5 19:12:43.186: ISAKMP:(0:21:SW:1): processing ID payload. message ID = 0 Nov 5 19:12:43.186: ISAKMP (0:134217749): ID payload next-payload : 8 type : 1 address : 4.3.2.1 protocol : 17 port : 500 length : 12 Nov 5 19:12:43.186: ISAKMP:(0:21:SW:1):: peer matches *none* of the profiles Nov 5 19:12:43.190: ISAKMP:(0:21:SW:1): processing HASH payload. message ID = 0 Nov 5 19:12:43.190: ISAKMP:received payload type 17 Nov 5 19:12:43.190: ISAKMP:(0:21:SW:1): processing vendor id payload Nov 5 19:12:43.190: ISAKMP:(0:21:SW:1): vendor ID is DPD Nov 5 19:12:43.190: ISAKMP:(0:21:SW:1):SA authentication status: authenticated Nov 5 19:12:43.194: ISAKMP:(0:21:SW:1):SA has been authenticated with 4.3.2.1 Nov 5 19:12:43.194: ISAKMP:(0:21:SW:1):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE Nov 5 19:12:43.194: ISAKMP:(0:21:SW:1):Old State = IKE_R_MM5 New State = IKE_R_MM5 Nov 5 19:12:43.194: ISAKMP:(0:21:SW:1):SA is doing pre-shared key authentication using id type ID_IPV4_ADDR Nov 5 19:12:43.198: ISAKMP (0:134217749): ID payload next-payload : 8 type : 1 address : 1.2.3.4 protocol : 17 port : 500 length : 12 Nov 5 19:12:43.198: ISAKMP:(0:21:SW:1):Total payload length: 12 Nov 5 19:12:43.202: ISAKMP:(0:21:SW:1): sending packet to 4.3.2.1 my_port 500 peer_port 500 (R) MM_KEY_EXCH Nov 5 19:12:43.202: ISAKMP:(0:21:SW:1):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE Nov 5 19:12:43.202: ISAKMP:(0:21:SW:1):Old State = IKE_R_MM5 New State = IKE_P1_COMPLETE Nov 5 19:12:43.206: ISAKMP:(0:21:SW:1):Input = IKE_MESG_INTERNAL, IKE_PHASE1_COMPLETE Nov 5 19:12:43.206: ISAKMP:(0:21:SW:1):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE Nov 5 19:12:43.382: ISAKMP (0:134217749): received packet from 4.3.2.1 dport 500 sport 500 Global (R) QM_IDLE Nov 5 19:12:43.386: ISAKMP: set new node -1260029690 to QM_IDLE Nov 5 19:12:43.390: ISAKMP:(0:21:SW:1): processing HASH payload. message ID = -1260029690 Nov 5 19:12:43.390: ISAKMP:(0:21:SW:1): processing SA payload. message ID = -1260029690 Nov 5 19:12:43.390: ISAKMP:(0:21:SW:1):Checking IPSec proposal 1 Nov 5 19:12:43.390: ISAKMP: transform 1, ESP_3DES Nov 5 19:12:43.390: ISAKMP: attributes in transform: Nov 5 19:12:43.390: ISAKMP: SA life type in seconds Nov 5 19:12:43.390: ISAKMP: SA life duration (basic) of 28800 Nov 5 19:12:43.390: ISAKMP: encaps is 1 (Tunnel) Nov 5 19:12:43.390: ISAKMP: authenticator is HMAC-MD5 Nov 5 19:12:43.394: ISAKMP:(0:21:SW:1):atts are acceptable. Nov 5 19:12:43.394: ISAKMP:(0:21:SW:1): processing NONCE payload. message ID = -1260029690 Nov 5 19:12:43.394: ISAKMP:(0:21:SW:1): processing ID payload. message ID = -1260029690 Nov 5 19:12:43.394: ISAKMP:(0:21:SW:1): processing ID payload. message ID = -1260029690 Nov 5 19:12:43.398: ISAKMP:(0:21:SW:1): processing NOTIFY INITIAL_CONTACT protocol 1 spi 0, message ID = -1260029690, sa = 81688FC4 Nov 5 19:12:43.398: ISAKMP:(0:21:SW:1):SA authentication status: authenticated Nov 5 19:12:43.398: ISAKMP:(0:21:SW:1): Process initial contact, bring down existing phase 1 and 2 SA's with local 1.2.3.4 remote 4.3.2.1 remote port 500 Nov 5 19:12:43.398: ISAKMP:(0:21:SW:1): asking for 1 spis from ipsec Nov 5 19:12:43.402: ISAKMP:(0:21:SW:1):Node -1260029690, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH Nov 5 19:12:43.402: ISAKMP:(0:21:SW:1):Old State = IKE_QM_READY New State = IKE_QM_SPI_STARVE Nov 5 19:12:43.402: ISAKMP: Unlocking IPSEC struct 0x81893388 from delete_siblings, count 0 Nov 5 19:12:43.406: ISAKMP: received ke message (3/1) Nov 5 19:12:43.406: ISAKMP: set new node 1985888025 to QM_IDLE Nov 5 19:12:43.410: ISAKMP:(0:21:SW:1): sending packet to 4.3.2.1 my_port 500 peer_port 500 (R) QM_IDLE Nov 5 19:12:43.410: ISAKMP:(0:21:SW:1):purging node 1985888025 Nov 5 19:12:43.414: ISAKMP:(0:21:SW:1):Input = IKE_MESG_FROM_IPSEC, IKE_PHASE2_DEL Nov 5 19:12:43.414: ISAKMP:(0:21:SW:1):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE Nov 5 19:12:43.414: ISAKMP: received ke message (2/1) Nov 5 19:12:43.422: ISAKMP: Locking peer struct 0x81893388, IPSEC refcount 1 for for stuff_ke Nov 5 19:12:43.422: ISAKMP:(0:21:SW:1): Creating IPSec SAs Nov 5 19:12:43.422: inbound SA from 4.3.2.1 to 1.2.3.4 (f/i) 0/ 0 (proxy 0.0.0.0 to 172.19.4.0) Nov 5 19:12:43.422: has spi 0x567030A8 and conn_id 0 and flags 2 Nov 5 19:12:43.422: lifetime of 28800 seconds Nov 5 19:12:43.422: has client flags 0x0 Nov 5 19:12:43.422: outbound SA from 1.2.3.4 to 4.3.2.1 (f/i) 0/0 (proxy 172.19.4.0 to 0.0.0.0) Nov 5 19:12:43.426: has spi 1118765858 and conn_id 0 and flags A Nov 5 19:12:43.426: lifetime of 28800 seconds Nov 5 19:12:43.426: has client flags 0x0 Nov 5 19:12:43.426: ISAKMP:(0:21:SW:1): sending packet to 4.3.2.1 my_port 500 peer_port 500 (R) QM_IDLE Nov 5 19:12:43.430: ISAKMP:(0:21:SW:1):Node -1260029690, Input = IKE_MESG_FROM_IPSEC, IKE_SPI_REPLY Nov 5 19:12:43.430: ISAKMP:(0:21:SW:1):Old State = IKE_QM_SPI_STARVE New State = IKE_QM_R_QM2 Nov 5 19:12:43.430: ISAKMP: Locking peer struct 0x81893388, IPSEC refcount 2 for from create_transforms Nov 5 19:12:43.434: ISAKMP: Unlocking IPSEC struct 0x81893388 from create_transforms, count 1 Nov 5 19:12:43.470: ISAKMP (0:134217749): received packet from 4.3.2.1 dport 500 sport 500 Global (R) QM_IDLE Nov 5 19:12:43.474: ISAKMP:(0:21:SW:1):deleting node -1260029690 error FALSE reason "QM done (await)" Nov 5 19:12:43.474: ISAKMP:(0:21:SW:1):Node -1260029690, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH Nov 5 19:12:43.474: ISAKMP:(0:21:SW:1):Old State = IKE_QM_R_QM2 New State = IKE_QM_PHASE2_COMPLETE Nov 5 19:12:52.662: ISAKMP:(0:19:SW:1):purging SA., sa=81892C74, delme=81892C74