Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- ipsek-gre#
- *Nov 11 18:16:06.677: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
- *Nov 11 18:16:06.678: ISAKMP (0): incrementing error counter on sa, attempt 4 of 5: retransmit phase 1
- *Nov 11 18:16:06.678: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
- *Nov 11 18:16:06.678: ISAKMP:(0): sending packet to 1.1.1.2 my_port 500 peer_port 500 (I) MM_NO_STATE
- *Nov 11 18:16:06.678: ISAKMP:(0):Sending an IKE IPv4 Packet.
- ipsek-gre#
- *Nov 11 18:16:11.225: ISAKMP (0): received packet from 1.1.1.2 dport 500 sport 500 Global (R) MM_NO_STATE
- ipsek-gre#
- *Nov 11 18:16:16.686: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
- *Nov 11 18:16:16.686: ISAKMP (0): incrementing error counter on sa, attempt 5 of 5: retransmit phase 1
- *Nov 11 18:16:16.686: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
- *Nov 11 18:16:16.686: ISAKMP:(0): sending packet to 1.1.1.2 my_port 500 peer_port 500 (I) MM_NO_STATE
- *Nov 11 18:16:16.686: ISAKMP:(0):Sending an IKE IPv4 Packet.
- ipsek-gre#
- *Nov 11 18:16:21.223: ISAKMP (0): received packet from 1.1.1.2 dport 500 sport 500 Global (R) MM_NO_STATE
- ipsek-gre#
- *Nov 11 18:16:21.867: %CRYPTO-4-RECVD_PKT_NOT_IPSEC: Rec'd packet not an IPSEC packet. (ip) vrf/dest_addr= /255.255.255.255, src_addr= 2.2.2.1, prot= 17
- ipsek-gre#
- *Nov 11 18:16:26.690: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
- *Nov 11 18:16:26.690: ISAKMP:(0):peer does not do paranoid keepalives.
- *Nov 11 18:16:26.690: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (I) MM_NO_STATE (peer 1.1.1.2)
- *Nov 11 18:16:26.690: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (I) MM_NO_STATE (peer 1.1.1.2)
- *Nov 11 18:16:26.690: ISAKMP: Unlocking peer struct 0xE1B0C1C0 for isadb_mark_sa_deleted(), count 0
- *Nov 11 18:16:26.690: ISAKMP: Deleting peer node by peer_reap for 1.1.1.2: E1B0C1C0
- *Nov 11 18:16:26.690: ISAKMP:(0):deleting node 1761008842 error FALSE reason "IKE deleted"
- ipsek-gre#
- *Nov 11 18:16:26.690: ISAKMP:(0):deleting node -2140441748 error FALSE reason "IKE deleted"
- *Nov 11 18:16:26.690: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
- *Nov 11 18:16:26.690: ISAKMP:(0):Old State = IKE_I_MM1 New State = IKE_DEST_SA
- ipsek-gre#
- *Nov 11 18:16:31.223: ISAKMP:(0):purging SA., sa=E1B0D218, delme=E1B0D218
- *Nov 11 18:16:31.818: ISAKMP (0): received packet from 1.1.1.2 dport 500 sport 500 Global (N) NEW SA
- *Nov 11 18:16:31.818: ISAKMP: Created a peer struct for 1.1.1.2, peer port 500
- *Nov 11 18:16:31.818: ISAKMP: New peer created peer = 0xE1B0C0D0 peer_handle = 0x80000008
- *Nov 11 18:16:31.818: ISAKMP: Locking peer struct 0xE1B0C0D0, refcount 1 for crypto_isakmp_process_block
- *Nov 11 18:16:31.818: ISAKMP: local port 500, remote port 500
- *Nov 11 18:16:31.818: ISAKMP:(0):insert sa successfully sa = E1B0D218
- *Nov 11 18:16:31.818: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
- *Nov 11 18:16:31.818: ISAKMP:(0):Old State = IKE_READY New State = IKE_R_MM1
- *Nov 11 18:16:31.818: ISAKMP:(0): processing SA payload. message ID = 0
- *Nov 11 18:16:31.818: ISAKMP:(0): processing vendor id payload
- *Nov 11 18:16:31.818: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch
- *Nov 11 18:16:31.818: ISAKMP (0): vendor ID is NAT-T RFC 3947
- *Nov 11 18:16:31.818: ISAKMP:(0): processing vendor id payload
- *Nov 11 18:16:31.818: ISAKMP:(0): vendor ID seems Unity/DPD but major 29 mismatch
- *Nov 11 18:16:31.818: ISAKMP:(0): processing vendor id payload
- *Nov 11 18:16:31.818: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch
- *Nov 11 18:16:31.818: ISAKMP (0): vendor ID is NAT-T v7
- *Nov 11 18:16:31.818: ISAKMP:(0): processing vendor id payload
- *Nov 11 18:16:31.818: ISAKMP:(0): vendor ID seems Unity/DPD but major 114 mismatch
- *Nov 11 18:16:31.818: ISAKMP:(0): processing vendor id payload
- *Nov 11 18:16:31.818: ISAKMP:(0): vendor ID seems Unity/DPD but major 227 mismatch
- *Nov 11 18:16:31.818: ISAKMP:(0): processing vendor id payload
- *Nov 11 18:16:31.818: ISAKMP:(0): vendor ID seems Unity/DPD but major 250 mismatch
- *Nov 11 18:16:31.818: ISAKMP:(0): processing vendor id payload
- *Nov 11 18:16:31.818: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch
- *Nov 11 18:16:31.818: ISAKMP:(0): vendor ID is NAT-T v3
- *Nov 11 18:16:31.818: ISAKMP:(0): processing vendor id payload
- *Nov 11 18:16:31.818: ISAKMP:(0): vendor ID seems Unity/DPD but major 164 mismatch
- *Nov 11 18:16:31.818: ISAKMP:(0): processing vendor id payload
- *Nov 11 18:16:31.818: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch
- *Nov 11 18:16:31.818: ISAKMP:(0): vendor ID is NAT-T v2
- *Nov 11 18:16:31.818: ISAKMP:(0): processing vendor id payload
- *Nov 11 18:16:31.818: ISAKMP:(0): vendor ID seems Unity/DPD but major 168 mismatch
- *Nov 11 18:16:31.818: ISAKMP:(0): processing vendor id payload
- *Nov 11 18:16:31.818: ISAKMP:(0): vendor ID seems Unity/DPD but major 221 mismatch
- *Nov 11 18:16:31.818: ISAKMP:(0): processing vendor id payload
- *Nov 11 18:16:31.818: ISAKMP:(0): vendor ID is Unity
- *Nov 11 18:16:31.818: ISAKMP:(0): processing vendor id payload
- *Nov 11 18:16:31.818: ISAKMP:(0): vendor ID is DPD
- *Nov 11 18:16:31.818: ISAKMP:(0):found peer pre-shared key matching 1.1.1.2
- *Nov 11 18:16:31.818: ISAKMP:(0): local preshared key found
- *Nov 11 18:16:31.818: ISAKMP : Scanning profiles for xauth ...
- *Nov 11 18:16:31.818: ISAKMP:(0):Checking ISAKMP transform 1 against priority 1 policy
- *Nov 11 18:16:31.818: ISAKMP: life type in seconds
- *Nov 11 18:16:31.818: ISAKMP: life duration (VPI) of 0x0 0x1 0x51 0x80
- *Nov 11 18:16:31.818: ISAKMP: encryption AES-CBC
- *Nov 11 18:16:31.818: ISAKMP: keylength of 128
- *Nov 11 18:16:31.818: ISAKMP: auth pre-share
- *Nov 11 18:16:31.818: ISAKMP: hash SHA
- *Nov 11 18:16:31.818: ISAKMP: default group 14
- *Nov 11 18:16:31.818: ISAKMP:(0):Proposed key length does not match policy
- *Nov 11 18:16:31.818: ISAKMP:(0):atts are not acceptable. Next payload is 3
- *Nov 11 18:16:31.818: ISAKMP:(0):Checking ISAKMP transform 2 against priority 1 policy
- *Nov 11 18:16:31.818: ISAKMP: life type in seconds
- *Nov 11 18:16:31.818: ISAKMP: life duration (VPI) of 0x0 0x1 0x51 0x80
- *Nov 11 18:16:31.818: ISAKMP: encryption AES-CBC
- *Nov 11 18:16:31.818: ISAKMP: keylength of 128
- *Nov 11 18:16:31.818: ISAKMP: auth pre-share
- *Nov 11 18:16:31.818: ISAKMP: hash SHA
- *Nov 11 18:16:31.818: ISAKMP: default group 2
- *Nov 11 18:16:31.818: ISAKMP:(0):Proposed key length does not match policy
- *Nov 11 18:16:31.818: ISAKMP:(0):atts are not acceptable. Next payload is 3
- *Nov 11 18:16:31.818: ISAKMP:(0):Checking ISAKMP transform 3 against priority 1 policy
- *Nov 11 18:16:31.818: ISAKMP: life type in seconds
- *Nov 11 18:16:31.818: ISAKMP: life duration (VPI) of 0x0 0x1 0x51 0x80
- *Nov 11 18:16:31.818: ISAKMP: encryption 3DES-CBC
- *Nov 11 18:16:31.818: ISAKMP: auth pre-share
- *Nov 11 18:16:31.818: ISAKMP: hash SHA
- *Nov 11 18:16:31.818: ISAKMP: default group 14
- *Nov 11 18:16:31.818: ISAKMP:(0):Encryption algorithm offered does not match policy!
- *Nov 11 18:16:31.818: ISAKMP:(0):atts are not acceptable. Next payload is 3
- *Nov 11 18:16:31.818: ISAKMP:(0):Checking ISAKMP transform 4 against priority 1 policy
- *Nov 11 18:16:31.818: ISAKMP: life type in seconds
- *Nov 11 18:16:31.818: ISAKMP: life duration (VPI) of 0x0 0x1 0x51 0x80
- *Nov 11 18:16:31.818: ISAKMP: encryption 3DES-CBC
- *Nov 11 18:16:31.818: ISAKMP: auth pre-share
- *Nov 11 18:16:31.818: ISAKMP: hash SHA
- *Nov 11 18:16:31.818: ISAKMP: default group 2
- *Nov 11 18:16:31.818: ISAKMP:(0):Encryption algorithm offered does not match policy!
- *Nov 11 18:16:31.818: ISAKMP:(0):atts are not acceptable. Next payload is 0
- *Nov 11 18:16:31.818: ISAKMP:(0):no offers accepted!
- *Nov 11 18:16:31.818: ISAKMP:(0): phase 1 SA policy not acceptable! (local 2.2.2.2 remote 1.1.1.2)
- *Nov 11 18:16:31.818: ISAKMP (0): incrementing error counter on sa, attempt 1 of 5: construct_fail_ag_init
- *Nov 11 18:16:31.818: ISAKMP:(0): Failed to construct AG informational message.
- *Nov 11 18:16:31.818: ISAKMP:(0): sending packet to 1.1.1.2 my_port 500 peer_port 500 (R) MM_NO_STATE
- *Nov 11 18:16:31.818: ISAKMP:(0):Sending an IKE IPv4 Packet.
- *Nov 11 18:16:31.818: ISAKMP:(0):peer does not do paranoid keepalives.
- *Nov 11 18:16:31.818: ISAKMP:(0):deleting SA reason "Phase1 SA policy proposal not accepted" state (R) MM_NO_STATE (peer 1.1.1.2)
- *Nov 11 18:16:31.818: ISAKMP:(0): processing vendor id payload
- *Nov 11 18:16:31.818: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch
- *Nov 11 18:16:31.818: ISAKMP (0): vendor ID is NAT-T RFC 3947
- *Nov 11 18:16:31.818: ISAKMP:(0): processing vendor id payload
- *Nov 11 18:16:31.818: ISAKMP:(0): vendor ID seems Unity/DPD but major 29 mismatch
- *Nov 11 18:16:31.818: ISAKMP:(0): processing vendor id payload
- *Nov 11 18:16:31.818: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch
- *Nov 11 18:16:31.818: ISAKMP (0): vendor ID is NAT-T v7
- *Nov 11 18:16:31.818: ISAKMP:(0): processing vendor id payload
- *Nov 11 18:16:31.818: ISAKMP:(0): vendor ID seems Unity/DPD but major 114 mismatch
- *Nov 11 18:16:31.818: ISAKMP:(0): processing vendor id payload
- *Nov 11 18:16:31.818: ISAKMP:(0): vendor ID seems Unity/DPD but major 227 mismatch
- *Nov 11 18:16:31.818: ISAKMP:(0): processing vendor id payload
- *Nov 11 18:16:31.818: ISAKMP:(0): vendor ID seems Unity/DPD but major 250 mismatch
- *Nov 11 18:16:31.818: ISAKMP:(0): processing vendor id payload
- *Nov 11 18:16:31.818: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch
- *Nov 11 18:16:31.818: ISAKMP:(0): vendor ID is NAT-T v3
- *Nov 11 18:16:31.818: ISAKMP:(0): processing vendor id payload
- *Nov 11 18:16:31.818: ISAKMP:(0): vendor ID seems Unity/DPD but major 164 mismatch
- *Nov 11 18:16:31.818: ISAKMP:(0): processing vendor id payload
- *Nov 11 18:16:31.818: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch
- *Nov 11 18:16:31.818: ISAKMP:(0): vendor ID is NAT-T v2
- *Nov 11 18:16:31.818: ISAKMP:(0): processing vendor id payload
- *Nov 11 18:16:31.818: ISAKMP:(0): vendor ID seems Unity/DPD but major 168 mismatch
- *Nov 11 18:16:31.818: ISAKMP:(0): processing vendor id payload
- *Nov 11 18:16:31.818: ISAKMP:(0): vendor ID seems Unity/DPD but major 221 mismatch
- *Nov 11 18:16:31.818: ISAKMP:(0): processing vendor id payload
- *Nov 11 18:16:31.818: ISAKMP:(0): vendor ID is Unity
- *Nov 11 18:16:31.818: ISAKMP:(0): processing vendor id payload
- *Nov 11 18:16:31.818: ISAKMP:(0): vendor ID is DPD
- *Nov 11 18:16:31.818: ISAKMP (0): FSM action returned error: 2
- *Nov 11 18:16:31.818: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
- ipsek-gre#
- *Nov 11 18:16:31.818: ISAKMP:(0):Old State = IKE_R_MM1 New State = IKE_R_MM1
- *Nov 11 18:16:31.818: ISAKMP:(0):deleting SA reason "Phase1 SA policy proposal not accepted" state (R) MM_NO_STATE (peer 1.1.1.2)
- *Nov 11 18:16:31.818: ISAKMP: Unlocking peer struct 0xE1B0C0D0 for isadb_mark_sa_deleted(), count 0
- *Nov 11 18:16:31.819: ISAKMP: Deleting peer node by peer_reap for 1.1.1.2: E1B0C0D0
- *Nov 11 18:16:31.819: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
- *Nov 11 18:16:31.819: ISAKMP:(0):Old State = IKE_R_MM1 New State = IKE_DEST_SA
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement