Nov 03 2009 15:23:43: %ASA-7-609001: Built local-host outside:x.x.x.x Nov 03 2009 15:23:43: %ASA-7-302015: Built inbound UDP connection 6279574 for outside:x.x.x.x/50852 (x.x.x.x/50852) to identity:x.x.x.x/500 (x.x.x.x/500) Nov 03 2009 15:23:43: %ASA-7-713236: IP = x.x.x.x, IKE_DECODE RECEIVED Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 312 Nov 03 2009 15:23:43: %ASA-7-715047: IP = x.x.x.x, processing SA payload Nov 03 2009 15:23:43: %ASA-7-713906: IP = x.x.x.x, Oakley proposal is acceptable Nov 03 2009 15:23:43: %ASA-7-715047: IP = x.x.x.x, processing VID payload Nov 03 2009 15:23:43: %ASA-7-715047: IP = x.x.x.x, processing VID payload Nov 03 2009 15:23:43: %ASA-7-715049: IP = x.x.x.x, Received Fragmentation VID Nov 03 2009 15:23:43: %ASA-7-715047: IP = x.x.x.x, processing VID payload Nov 03 2009 15:23:43: %ASA-7-715049: IP = x.x.x.x, Received NAT-Traversal ver 02 VID Nov 03 2009 15:23:43: %ASA-7-715047: IP = x.x.x.x, processing VID payload Nov 03 2009 15:23:43: %ASA-7-715047: IP = x.x.x.x, processing IKE SA payload Nov 03 2009 15:23:43: %ASA-7-715028: IP = x.x.x.x, IKE SA Proposal # 1, Transform # 2 acceptable Matches global IKE entry # 2 Nov 03 2009 15:23:43: %ASA-7-715046: IP = x.x.x.x, constructing ISAKMP SA payload Nov 03 2009 15:23:43: %ASA-7-715046: IP = x.x.x.x, constructing Fragmentation VID + extended capabilities payload Nov 03 2009 15:23:43: %ASA-7-713236: IP = x.x.x.x, IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + NONE (0) total length : 104 Nov 03 2009 15:23:43: %ASA-7-713236: IP = x.x.x.x, IKE_DECODE RECEIVED Message (msgid=0) with payloads : HDR + KE (4) + NONCE (10) + NONE (0) total length : 184 Nov 03 2009 15:23:43: %ASA-7-715047: IP = x.x.x.x, processing ke payload Nov 03 2009 15:23:43: %ASA-7-715047: IP = x.x.x.x, processing ISA_KE payload Nov 03 2009 15:23:43: %ASA-7-715047: IP = x.x.x.x, processing nonce payload Nov 03 2009 15:23:43: %ASA-7-715046: IP = x.x.x.x, constructing ke payload Nov 03 2009 15:23:43: %ASA-7-715046: IP = x.x.x.x, constructing nonce payload Nov 03 2009 15:23:43: %ASA-7-715046: IP = x.x.x.x, constructing Cisco Unity VID payload Nov 03 2009 15:23:43: %ASA-7-715046: IP = x.x.x.x, constructing xauth V6 VID payload Nov 03 2009 15:23:43: %ASA-7-715048: IP = x.x.x.x, Send IOS VID Nov 03 2009 15:23:43: %ASA-7-715038: IP = x.x.x.x, Constructing ASA spoofing IOS Vendor ID payload (version: 1.0.0, capabilities: 20000001) Nov 03 2009 15:23:43: %ASA-7-715046: IP = x.x.x.x, constructing VID payload Nov 03 2009 15:23:43: %ASA-7-715048: IP = x.x.x.x, Send Altiga/Cisco VPN3000/Cisco ASA GW VID Nov 03 2009 15:23:43: %ASA-7-713906: IP = x.x.x.x, Connection landed on tunnel_group DefaultRAGroup Nov 03 2009 15:23:43: %ASA-6-713905: Group = DefaultRAGroup, IP = x.x.x.x, No valid authentication type found for the tunnel group Nov 03 2009 15:23:43: %ASA-7-713906: Group = DefaultRAGroup, IP = x.x.x.x, Generating keys for Responder... Nov 03 2009 15:23:43: %ASA-7-713236: IP = x.x.x.x, IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + KE (4) + NONCE (10) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 256 Nov 03 2009 15:23:43: %ASA-7-713236: IP = x.x.x.x, IKE_DECODE RECEIVED Message (msgid=0) with payloads : HDR + ID (5) + HASH (8) + NONE (0) total length : 64 Nov 03 2009 15:23:43: %ASA-7-715047: Group = DefaultRAGroup, IP = x.x.x.x, processing ID payload Nov 03 2009 15:23:43: %ASA-7-714011: Group = DefaultRAGroup, IP = x.x.x.x, ID_IPV4_ADDR ID received x.x.x.x Nov 03 2009 15:23:43: %ASA-7-715047: Group = DefaultRAGroup, IP = x.x.x.x, processing hash payload Nov 03 2009 15:23:43: %ASA-7-715076: Group = DefaultRAGroup, IP = x.x.x.x, Computing hash for ISAKMP Nov 03 2009 15:23:43: %ASA-7-713906: IP = x.x.x.x, Connection landed on tunnel_group DefaultRAGroup Nov 03 2009 15:23:43: %ASA-4-713903: Group = DefaultRAGroup, IP = x.x.x.x, Freeing previously allocated memory for authorization-dn-attributes Nov 03 2009 15:23:43: %ASA-6-713905: Group = DefaultRAGroup, IP = x.x.x.x, No valid authentication type found for the tunnel group Nov 03 2009 15:23:43: %ASA-7-715046: Group = DefaultRAGroup, IP = x.x.x.x, constructing ID payload Nov 03 2009 15:23:43: %ASA-7-715046: Group = DefaultRAGroup, IP = x.x.x.x, constructing hash payload Nov 03 2009 15:23:43: %ASA-7-715076: Group = DefaultRAGroup, IP = x.x.x.x, Computing hash for ISAKMP Nov 03 2009 15:23:43: %ASA-7-713236: IP = x.x.x.x, IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + ID (5) + HASH (8) + NONE (0) total length : 64 Nov 03 2009 15:23:43: %ASA-6-113009: AAA retrieved default group policy (DfltGrpPolicy) for user = DefaultRAGroup Nov 03 2009 15:23:43: %ASA-5-713119: Group = DefaultRAGroup, IP = x.x.x.x, PHASE 1 COMPLETED Nov 03 2009 15:23:43: %ASA-7-713121: IP = x.x.x.x, Keep-alive type for this connection: None Nov 03 2009 15:23:43: %ASA-7-715080: Group = DefaultRAGroup, IP = x.x.x.x, Starting P1 rekey timer: 21600 seconds. Nov 03 2009 15:23:43: %ASA-7-714003: IP = x.x.x.x, IKE Responder starting QM: msg id = 3a8337f5 Nov 03 2009 15:23:43: %ASA-7-713236: IP = x.x.x.x, IKE_DECODE RECEIVED Message (msgid=3a8337f5) with payloads : HDR + HASH (8) + SA (1) + NONCE (10) + ID (5) + ID (5) + NONE (0) total length : 1296 Nov 03 2009 15:23:43: %ASA-7-715047: Group = DefaultRAGroup, IP = x.x.x.x, processing hash payload Nov 03 2009 15:23:43: %ASA-7-715047: Group = DefaultRAGroup, IP = x.x.x.x, processing SA payload Nov 03 2009 15:23:43: %ASA-7-715047: Group = DefaultRAGroup, IP = x.x.x.x, processing nonce payload Nov 03 2009 15:23:43: %ASA-7-715047: Group = DefaultRAGroup, IP = x.x.x.x, processing ID payload Nov 03 2009 15:23:43: %ASA-7-714011: Group = DefaultRAGroup, IP = x.x.x.x, ID_IPV4_ADDR ID received x.x.x.x Nov 03 2009 15:23:43: %ASA-7-713025: Group = DefaultRAGroup, IP = x.x.x.x, Received remote Proxy Host data in ID Payload: Address x.x.x.x, Protocol 17, Port 1701 Nov 03 2009 15:23:43: %ASA-7-715047: Group = DefaultRAGroup, IP = x.x.x.x, processing ID payload Nov 03 2009 15:23:43: %ASA-7-714011: Group = DefaultRAGroup, IP = x.x.x.x, ID_IPV4_ADDR ID received x.x.x.x Nov 03 2009 15:23:43: %ASA-7-713024: Group = DefaultRAGroup, IP = x.x.x.x, Received local Proxy Host data in ID Payload: Address x.x.x.x, Protocol 17, Port 1701 Nov 03 2009 15:23:43: %ASA-7-713906: Group = DefaultRAGroup, IP = x.x.x.x, peer is not authenticated by xauth - drop connection. Nov 03 2009 15:23:43: %ASA-3-713902: Group = DefaultRAGroup, IP = x.x.x.x, QM FSM error (P2 struct &0xd8804a80, mess id 0x3a8337f5)! Nov 03 2009 15:23:43: %ASA-7-715065: Group = DefaultRAGroup, IP = x.x.x.x, IKE QM Responder FSM error history (struct &0xd8804a80) , : QM_DONE, EV_ERROR-->QM_BLD_MSG2, EV_PROC_MSG-->QM_BLD_MSG2, EV_HASH_OK-->QM_BLD_MSG2, NullEvent-->QM_BLD_MSG2, EV_COMP_HASH-->QM_BLD_MSG2, EV_VALIDATE_MSG-->QM_BLD_MSG2, EV_DECRYPT_OK-->QM_BLD_MSG2, NullEvent Nov 03 2009 15:23:43: %ASA-7-713906: Group = DefaultRAGroup, IP = x.x.x.x, sending delete/delete with reason message Nov 03 2009 15:23:43: %ASA-3-713902: Group = DefaultRAGroup, IP = x.x.x.x, Removing peer from correlator table failed, no match! Nov 03 2009 15:23:43: %ASA-7-713906: Group = DefaultRAGroup, IP = x.x.x.x, IKE SA MM:868e84e9 rcv'd Terminate: state MM_ACTIVE flags 0x00000042, refcnt 1, tuncnt 0 Nov 03 2009 15:23:43: %ASA-7-713906: Group = DefaultRAGroup, IP = x.x.x.x, IKE SA MM:868e84e9 terminating: flags 0x01000002, refcnt 0, tuncnt 0 Nov 03 2009 15:23:43: %ASA-7-713906: Group = DefaultRAGroup, IP = x.x.x.x, sending delete/delete with reason message Nov 03 2009 15:23:43: %ASA-7-715046: Group = DefaultRAGroup, IP = x.x.x.x, constructing blank hash payload Nov 03 2009 15:23:43: %ASA-7-715046: Group = DefaultRAGroup, IP = x.x.x.x, constructing IKE delete payload Nov 03 2009 15:23:43: %ASA-7-715046: Group = DefaultRAGroup, IP = x.x.x.x, constructing qm hash payload Nov 03 2009 15:23:43: %ASA-7-713236: IP = x.x.x.x, IKE_DECODE SENDING Message (msgid=3646efdd) with payloads : HDR + HASH (8) + DELETE (12) + NONE (0) total length : 80 Nov 03 2009 15:23:43: %ASA-4-113019: Group = DefaultRAGroup, Username = DefaultRAGroup, IP = x.x.x.x, Session disconnected. Session Type: IKE, Duration: 0h:00m:00s, Bytes xmt: 0, Bytes rcv: 0, Reason: Unknown Nov 03 2009 15:23:43: %ASA-7-713906: Ignoring msg to mark SA with dsID 712704 dead because SA deleted Nov 03 2009 15:23:43: %ASA-7-711001: : Group = DefaultRAGroup, IP = x.x.x.x, QM FSM error (P2 struct &0xd8804a80, mess id 0x3a8337f5)! Nov 03 2009 15:23:43: %ASA-7-711001: : Group = DefaultRAGroup, IP = x.x.x.x, Removing peer from correlator table failed, no match! Nov 03 2009 15:23:43: %ASA-7-713236: IP = x.x.x.x, IKE_DECODE RECEIVED Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 312 Nov 03 2009 15:23:43: %ASA-7-715047: IP = x.x.x.x, processing SA payload Nov 03 2009 15:23:43: %ASA-7-713906: IP = x.x.x.x, Oakley proposal is acceptable Nov 03 2009 15:23:43: %ASA-7-715047: IP = x.x.x.x, processing VID payload Nov 03 2009 15:23:43: %ASA-7-715047: IP = x.x.x.x, processing VID payload Nov 03 2009 15:23:43: %ASA-7-715049: IP = x.x.x.x, Received Fragmentation VID Nov 03 2009 15:23:43: %ASA-7-715047: IP = x.x.x.x, processing VID payload Nov 03 2009 15:23:43: %ASA-7-715049: IP = x.x.x.x, Received NAT-Traversal ver 02 VID Nov 03 2009 15:23:43: %ASA-7-715047: IP = x.x.x.x, processing VID payload Nov 03 2009 15:23:43: %ASA-7-715047: IP = x.x.x.x, processing IKE SA payload Nov 03 2009 15:23:43: %ASA-7-715028: IP = x.x.x.x, IKE SA Proposal # 1, Transform # 2 acceptable Matches global IKE entry # 2 Nov 03 2009 15:23:43: %ASA-7-715046: IP = x.x.x.x, constructing ISAKMP SA payload Nov 03 2009 15:23:43: %ASA-7-715046: IP = x.x.x.x, constructing Fragmentation VID + extended capabilities payload Nov 03 2009 15:23:43: %ASA-7-713236: IP = x.x.x.x, IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + NONE (0) total length : 104