yourname# yourname# yourname# yourname# yourname# yourname# yourname# yourname# yourname# yourname# yourname# yourname# *Mar 1 01:28:05.311: ISAKMP:(0:3:HW:2):purging node 34232267 *Mar 1 01:28:05.311: ISAKMP:(0:3:HW:2):purging node -1752460837 yourname# yourname# yourname# yourname# yourname# yourname# yourname# *Mar 1 01:28:15.311: ISAKMP:(0:3:HW:2):purging SA., sa=830A0834, delme=830A0834 *Mar 1 01:28:18.143: ISAKMP: received ke message (3/1) *Mar 1 01:28:18.143: ISAKMP:(0:4:HW:2):peer does not do paranoid keepalives. *Mar 1 01:28:18.143: ISAKMP:(0:4:HW:2):deleting SA reason "P1 delete notify (in)" state (I) MM_SA_SETUP (peer 146.224.209.201) *Mar 1 01:28:18.143: ISAKMP:(0:4:HW:2):deleting SA reason "P1 delete notify (in)" state (I) MM_SA_SETUP (peer 146.224.209.201) *Mar 1 01:28:18.143: ISAKMP: Unlocking IKE struct 0x8311E10C for isadb_mark_sa_deleted(), count 0 *Mar 1 01:28:18.143: ISAKMP: Deleting peer node by peer_reap for 146.224.209.201: 8311E10C *Mar 1 01:28:18.143: ISAKMP:(0:4:HW:2):deleting node -318767930 error FALSE reason "IKE deleted" *Mar 1 01:28:18.143: ISAKMP:(0:4:HW:2):deleting node 1609856620 error FALSE reason "IKE deleted" *Mar 1 01:28:18.143: ISAKMP:(0:4:HW:2):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL *Mar 1 01:28:18.143: ISAKMP:(0:4:HW:2):Old State = IKE_I_MM3 New State = IKE_DEST_SA *Mar 1 01:28:21.659: ISAKMP: received ke message (1/1) *Mar 1 01:28:21.659: ISAKMP:(0:0:N/A:0): SA request profile is (NULL) *Mar 1 01:28:21.659: ISAKMP: Created a peer struct for 146.224.209.201, peer port 500 *Mar 1 01:28:21.659: ISAKMP: Locking peer struct 0x8311E10C, IKE refcount 1 for isakmp_initiator *Mar 1 01:28:21.659: ISAKMP: local port 500, remote port 500 *Mar 1 01:28:21.659: ISAKMP: set new node 0 to QM_IDLE *Mar 1 01:28:21.659: ISAKMP: Find a dup sa in the avl tree during calling isadb_insert sa = 82E9EF58 *Mar 1 01:28:21.663: ISAKMP:(0:0:N/A:0):Can not start Aggressive mode, trying Main mode. *Mar 1 01:28:21.663: ISAKMP: Looking for a matching key for 146.224.209.201 in default : success *Mar 1 01:28:21.663: ISAKMP:(0:0:N/A:0):found peer pre-shared key matching 146.224.209.201 *Mar 1 01:28:21.663: ISAKMP:(0:0:N/A:0): constructed NAT-T vendor-07 ID *Mar 1 01:28:21.663: ISAKMP:(0:0:N/A:0): constructed NAT-T vendor-03 ID *Mar 1 01:28:21.663: ISAKMP:(0:0:N/A:0): constructed NAT-T vendor-02 ID *Mar 1 01:28:21.663: ISAKMP:(0:0:N/A:0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM *Mar 1 01:28:21.663: ISAKMP:(0:0:N/A:0):Old State = IKE_READY New State = IKE_I_MM1 *Mar 1 01:28:21.663: ISAKMP:(0:0:N/A:0): beginning Main Mode exchange *Mar 1 01:28:21.663: ISAKMP:(0:0:N/A:0): sending packet to 146.224.209.201 my_port 500 peer_port 500 (I) MM_NO_STATE *Mar 1 01:28:22.075: ISAKMP (0:0): received packet from 146.224.209.201 dport 500 sport 500 Global (I) MM_NO_STATE *Mar 1 01:28:22.075: ISAKMP:(0:0:N/A:0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH *Mar 1 01:28:22.075: ISAKMP:(0:0:N/A:0):Old State = IKE_I_MM1 New State = IKE_I_MM2 *Mar 1 01:28:22.079: ISAKMP:(0:0:N/A:0): processing SA payload. message ID = 0 *Mar 1 01:28:22.079: ISAKMP:(0:0:N/A:0): processing vendor id payload *Mar 1 01:28:22.079: ISAKMP:(0:0:N/A:0): vendor ID seems Unity/DPD but major 194 mismatch *Mar 1 01:28:22.079: ISAKMP: Looking for a matching key for 146.224.209.201 in default : success *Mar 1 01:28:22.079: ISAKMP:(0:0:N/A:0):found peer pre-shared key matching 146.224.209.201 *Mar 1 01:28:22.079: ISAKMP:(0:0:N/A:0): local preshared key found *Mar 1 01:28:22.079: ISAKMP : Scanning profiles for xauth ... *Mar 1 01:28:22.079: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 1 against priority 20 policy *Mar 1 01:28:22.079: ISAKMP: encryption 3DES-CBC *Mar 1 01:28:22.079: ISAKMP: hash SHA *Mar 1 01:28:22.079: ISAKMP: default group 2 *Mar 1 01:28:22.079: ISAKMP: auth pre-share *Mar 1 01:28:22.079: ISAKMP: life type in seconds *Mar 1 01:28:22.079: ISAKMP: life duration (VPI) of 0x0 0x1 0x51 0x80 *Mar 1 01:28:22.079: ISAKMP:(0:0:N/A:0):atts are acceptable. Next payload is 0 *Mar 1 01:28:22.111: ISAKMP:(0:5:HW:2): processing vendor id payload *Mar 1 01:28:22.111: ISAKMP:(0:5:HW:2): vendor ID seems Unity/DPD but major 194 mismatch *Mar 1 01:28:22.111: ISAKMP:(0:5:HW:2):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE *Mar 1 01:28:22.111: ISAKMP:(0:5:HW:2):Old State = IKE_I_MM2 New State = IKE_I_MM2 *Mar 1 01:28:22.111: ISAKMP:(0:5:HW:2): sending packet to 146.224.209.201 my_port 500 peer_port 500 (I) MM_SA_SETUP *Mar 1 01:28:22.111: ISAKMP:(0:5:HW:2):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE *Mar 1 01:28:22.111: ISAKMP:(0:5:HW:2):Old State = IKE_I_MM2 New State = IKE_I_MM3 *Mar 1 01:28:32.111: ISAKMP:(0:5:HW:2): retransmitting phase 1 MM_SA_SETUP... *Mar 1 01:28:32.111: ISAKMP:(0:5:HW:2):incrementing error counter on sa: retransmit phase 1 *Mar 1 01:28:32.111: ISAKMP:(0:5:HW:2): retransmitting phase 1 MM_SA_SETUP *Mar 1 01:28:32.111: ISAKMP:(0:5:HW:2): sending packet to 146.224.209.201 my_port 500 peer_port 500 (I) MM_SA_SETUP *Mar 1 01:28:32.619: ISAKMP (0:268435461): received packet from 146.224.209.201 dport 500 sport 500 Global (I) MM_SA_SETUP *Mar 1 01:28:32.619: ISAKMP:(0:5:HW:2):Notify has no hash. Rejected. *Mar 1 01:28:32.619: ISAKMP (0:268435461): Unknown Input IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY: state = IKE_I_MM3 *Mar 1 01:28:32.619: ISAKMP:(0:5:HW:2):Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY *Mar 1 01:28:32.619: ISAKMP:(0:5:HW:2):Old State = IKE_I_MM3 New State = IKE_I_MM3 *Mar 1 01:28:32.619: %CRYPTO-6-IKMP_MODE_FAILURE: Processing of Informational mode failed with peer at 146.224.209.201 yourname#debug crypto ipsec Crypto IPSEC debugging is on yourname# *Mar 1 01:29:21.659: IPSEC(key_engine): request timer fired: count = 2, (identity) local= 201.155.110.94, remote= 146.224.209.201, local_proxy= 172.25.142.0/255.255.255.0/0/0 (type=4), remote_proxy= 172.25.0.0/255.255.0.0/0/0 (type=4) yourname# yourname#