Hi All,
I appear to be getting somewhere, basically if I run a clear cry sa on the spoke device the link comes back up straight away instead of waiting nearly an hour as it normally would, I have attached some debugs, does anybody have any ideas?
Thanks
2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43483: Jul 12 00:19:20.345: IPSEC(sa_request): , 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43484: (key eng. msg.) OUTBOUND local= 81.187.49.119, remote= 194.73.244.238, 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43485: local_proxy= 192.168.117.0/255.255.255.0/0/0 (type=4), 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43486: remote_proxy= 195.111.111.0/255.255.255.0/0/0 (type=4), 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43487: protocol= ESP, transform= NONE (Tunnel), 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43488: lifedur= 3600s and 4608000kb, 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43489: spi= 0xF45B4880(4099623040), conn_id= 0, keysize= 0, flags= 0x0 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43490: Jul 12 00:19:20.345: IPSEC(lifetime_expiry): SA lifetime threshold reached, expiring in 174 seconds 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43491: Jul 12 00:19:20.345: ISAKMP: set new node 0 to QM_IDLE 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43492: Jul 12 00:19:20.345: ISAKMP:(2003): sitting IDLE. Starting QM immediately (QM_IDLE ) 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43493: Jul 12 00:19:20.345: ISAKMP:(2003):beginning Quick Mode exchange, M-ID of -606409090 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43494: Jul 12 00:19:20.345: ISAKMP:(2003):QM Initiator gets spi 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43495: Jul 12 00:19:20.345: crypto_engine: Generate IKE hash 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43496: Jul 12 00:19:20.345: crypto_engine: Encrypt IKE packet 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43497: Jul 12 00:19:20.345: ISAKMP:(2003): sending packet to 194.73.244.238 my_port 500 peer_port 500 (I) QM_IDLE 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43498: Jul 12 00:19:20.349: ISAKMP:(2003):Node -606409090, Input = IKE_MESG_INTERNAL, IKE_INIT_QM 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43499: Jul 12 00:19:20.349: ISAKMP:(2003):Old State = IKE_QM_READY New State = IKE_QM_I_QM1 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43500: Jul 12 00:19:20.377: ISAKMP (0:2003): received packet from 194.73.244.238 dport 500 sport 500 Global (I) QM_IDLE 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43501: Jul 12 00:19:20.377: ISAKMP: set new node 1116960483 to QM_IDLE 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43502: Jul 12 00:19:20.377: crypto_engine: Decrypt IKE packet 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43503: Jul 12 00:19:20.377: crypto_engine: Generate IKE hash 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43504: Jul 12 00:19:20.377: ISAKMP:(2003): processing HASH payload. message ID = 1116960483 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43505: Jul 12 00:19:20.377: ISAKMP:(2003): processing DELETE payload. message ID = 1116960483 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43506: Jul 12 00:19:20.377: ISAKMP:(2003):peer does not do paranoid keepalives. 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43507: 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43508: Jul 12 00:19:20.377: ISAKMP:(2003):deleting node 1116960483 error FALSE reason "Informational (in) state 1" 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43509: Jul 12 00:19:20.377: ISAKMP (0:2003): received packet from 194.73.244.238 dport 500 sport 500 Global (I) QM_IDLE 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43510: Jul 12 00:19:20.377: crypto_engine: Decrypt IKE packet 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43511: Jul 12 00:19:20.377: crypto_engine: Generate IKE hash 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43512: Jul 12 00:19:20.377: ISAKMP:(2003): processing HASH payload. message ID = -606409090 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43513: Jul 12 00:19:20.381: ISAKMP:(2003): processing SA payload. message ID = -606409090 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43514: Jul 12 00:19:20.381: ISAKMP:(2003):Checking IPSec proposal 1 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43515: Jul 12 00:19:20.381: ISAKMP: transform 1, ESP_DES 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43516: Jul 12 00:19:20.381: ISAKMP: attributes in transform: 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43517: Jul 12 00:19:20.381: ISAKMP: encaps is 1 (Tunnel) 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43518: Jul 12 00:19:20.381: ISAKMP: SA life type in seconds 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43519: Jul 12 00:19:20.381: ISAKMP: SA life duration (basic) of 3600 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43520: Jul 12 00:19:20.381: ISAKMP: SA life type in kilobytes 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43521: Jul 12 00:19:20.381: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43522: Jul 12 00:19:20.381: ISAKMP: authenticator is HMAC-MD5 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43523: Jul 12 00:19:20.381: CryptoEngine0: validate proposal 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43524: Jul 12 00:19:20.381: ISAKMP:(2003):atts are acceptable. 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43525: Jul 12 00:19:20.381: IPSEC(validate_proposal_request): proposal part #1 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43526: Jul 12 00:19:20.381: IPSEC(validate_proposal_request): proposal part #1, 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43527: (key eng. msg.) INBOUND local= 81.187.49.119, remote= 194.73.244.238, 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43528: local_proxy= 192.168.117.0/255.255.255.0/0/0 (type=4), 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43529: remote_proxy= 195.111.111.0/255.255.255.0/0/0 (type=4) 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43530: , 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43531: protocol= ESP, transform= esp-des esp-md5-hmac (Tunnel), 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43532: lifedur= 0s and 0kb, 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43533: spi= 0x0(0), conn_id= 0, keysize= 0, flags= 0x0 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43534: Jul 12 00:19:20.381: Crypto mapdb : proxy_match 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43535: src addr : 192.168.117.0 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43536: dst addr : 195.111.111.0 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43537: protocol : 0 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43538: src port : 0 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43539: dst port : 0 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43540: Jul 12 00:19:20.381: ISAKMP:(2003): processing NONCE payload. message ID = -606409090 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43541: Jul 12 00:19:20.381: ISAKMP:(2003): processing ID payload. message ID = -606409090 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43542: Jul 12 00:19:20.381: ISAKMP:(2003): processing ID payload. message ID = -606409090 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43543: Jul 12 00:19:20.381: crypto_engine: Generate IKE hash 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43544: Jul 12 00:19:20.381: crypto_engine: Generate IKE QM keys 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43545: Jul 12 00:19:20.385: crypto_engine: Create IPSec SA (by keys) 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43546: Jul 12 00:19:20.385: crypto_engine: Generate IKE QM keys 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43547: Jul 12 00:19:20.385: crypto_engine: Create IPSec SA (by keys) 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43548: Jul 12 00:19:20.385: ISAKMP:(2003): Creating IPSec SAs 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43549: Jul 12 00:19:20.385: inbound SA from 194.73.244.238 to 81.187.49.119 (f/i) 0/ 0 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43550: (proxy 195.111.111.0 to 192.168.117.0) 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43551: Jul 12 00:19:20.385: has spi 0xF45B4880 and conn_id 0 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43552: Jul 12 00:19:20.385: lifetime of 3600 seconds 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43553: Jul 12 00:19:20.385: lifetime of 4608000 kilobytes 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43554: Jul 12 00:19:20.385: outbound SA from 81.187.49.119 to 194.73.244.238 (f/i) 0/0 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43555: (proxy 192.168.117.0 to 195.111.111.0) 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43556: Jul 12 00:19:20.385: has spi 0xDE65E02 and conn_id 0 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43557: Jul 12 00:19:20.385: lifetime of 3600 seconds 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43558: Jul 12 00:19:20.385: lifetime of 4608000 kilobytes 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43559: Jul 12 00:19:20.385: crypto_engine: Encrypt IKE packet 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43560: Jul 12 00:19:20.385: ISAKMP:(2003): sending packet to 194.73.244.238 my_port 500 peer_port 500 (I) QM_IDLE 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43561: Jul 12 00:19:20.385: ISAKMP:(2003):deleting node -606409090 error FALSE reason "No Error" 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43562: Jul 12 00:19:20.385: ISAKMP:(2003):Node -606409090, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43563: Jul 12 00:19:20.385: ISAKMP:(2003):Old State = IKE_QM_I_QM1 New State = IKE_QM_PHASE2_COMPLETE 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43564: Jul 12 00:19:20.389: IPSEC(key_engine): got a queue event with 1 KMI message(s) 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43565: Jul 12 00:19:20.389: IPSEC(key_engine_delete_sas): rec'd delete notify from ISAKMP 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43566: Jul 12 00:19:20.389: IPSEC(key_engine): got a queue event with 1 KMI message(s) 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43567: Jul 12 00:19:20.389: Crypto mapdb : proxy_match 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43568: src addr : 192.168.117.0 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43569: dst addr : 195.111.111.0 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43570: protocol : 0 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43571: src port : 0 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43572: dst port : 0 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43573: Jul 12 00:19:20.389: IPSEC(crypto_ipsec_sa_find_ident_head): reconnecting with the same proxies and peer 194.73.244.238 2006-07-12 01:18:21 Local7.Debug 192.168.117.1 43574: Jul 12 00:19:20.389: IPSEC(create_sa): sa created 2006-07-12 01:18:22 Local7.Debug 192.168.117.1 43575: , 2006-07-12 01:18:22 Local7.Debug 192.168.117.1 43576: (sa) sa_dest= 81.187.49.119, sa_proto= 50, 2006-07-12 01:18:22 Local7.Debug 192.168.117.1 43577: sa_spi= 0xF45B4880(4099623040), 2006-07-12 01:18:22 Local7.Debug 192.168.117.1 43578: sa_trans= esp-des esp-md5-hmac , sa_conn_id= 39 2006-07-12 01:18:22 Local7.Debug 192.168.117.1 43579: Jul 12 00:19:20.393: IPSEC(create_sa): sa created, 2006-07-12 01:18:22 Local7.Debug 192.168.117.1 43580: (sa) sa_dest= 194.73.244.238, sa_proto= 50, 2006-07-12 01:18:22 Local7.Debug 192.168.117.1 43581: sa_spi= 0xDE65E02(233201154), 2006-07-12 01:18:22 Local7.Debug 192.168.117.1 43582: sa_trans= esp-des esp-md5-hmac , sa_conn_id= 40 2006-07-12 01:18:22 Local7.Debug 192.168.117.1 43583: Jul 12 00:19:20.393: IPSEC(update_current_outbound_sa): updated peer 194.73.244.238 current outbound sa to SPI DE65E02 2006-07-12 01:18:31 Local7.Debug 192.168.117.1 43584: Jul 12 00:19:30.682: ISAKMP (0:2003): received packet from 194.73.244.238 dport 500 sport 500 Global (I) QM_IDLE 2006-07-12 01:18:31 Local7.Debug 192.168.117.1 43585: Jul 12 00:19:30.682: ISAKMP: set new node -1566272128 to QM_IDLE 2006-07-12 01:18:31 Local7.Debug 192.168.117.1 43586: Jul 12 00:19:30.682: crypto_engine: Decrypt IKE packet 2006-07-12 01:18:31 Local7.Debug 192.168.117.1 43587: Jul 12 00:19:30.682: crypto_engine: Generate IKE hash 2006-07-12 01:18:31 Local7.Debug 192.168.117.1 43588: Jul 12 00:19:30.682: ISAKMP:(2003): processing HASH payload. message ID = -1566272128 2006-07-12 01:18:31 Local7.Debug 192.168.117.1 43589: Jul 12 00:19:30.682: ISAKMP:(2003): processing NOTIFY DPD/R_U_THERE protocol 1 2006-07-12 01:18:31 Local7.Debug 192.168.117.1 43590: spi 0, message ID = -1566272128, sa = 83A6A0CC 2006-07-12 01:18:31 Local7.Debug 192.168.117.1 43591: Jul 12 00:19:30.682: ISAKMP:(2003):deleting node -1566272128 error FALSE reason "Informational (in) state 1" 2006-07-12 01:18:31 Local7.Debug 192.168.117.1 43592: Jul 12 00:19:30.682: ISAKMP:(2003):Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY 2006-07-12 01:18:31 Local7.Debug 192.168.117.1 43593: Jul 12 00:19:30.682: ISAKMP:(2003):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE 2006-07-12 01:18:31 Local7.Debug 192.168.117.1 43594: 2006-07-12 01:18:31 Local7.Debug 192.168.117.1 43595: Jul 12 00:19:30.682: ISAKMP:(2003):DPD/R_U_THERE received from peer 194.73.244.238, sequence 0x4AA8C8EB 2006-07-12 01:18:31 Local7.Debug 192.168.117.1 43596: Jul 12 00:19:30.682: ISAKMP: set new node 1013520998 to QM_IDLE 2006-07-12 01:18:31 Local7.Debug 192.168.117.1 43597: Jul 12 00:19:30.682: crypto_engine: Generate IKE hash 2006-07-12 01:18:31 Local7.Debug 192.168.117.1 43598: Jul 12 00:19:30.686: ISAKMP:(2003):Sending NOTIFY DPD/R_U_THERE_ACK protocol 1 2006-07-12 01:18:31 Local7.Debug 192.168.117.1 43599: spi 2212071968, message ID = 1013520998 2006-07-12 01:18:31 Local7.Debug 192.168.117.1 43600: Jul 12 00:19:30.686: ISAKMP:(2003): seq. no 0x4AA8C8EB 2006-07-12 01:18:31 Local7.Debug 192.168.117.1 43601: Jul 12 00:19:30.686: crypto_engine: Encrypt IKE packet 2006-07-12 01:18:32 Local7.Debug 192.168.117.1 43602: Jul 12 00:19:30.686: ISAKMP:(2003): sending packet to 194.73.244.238 my_port 500 peer_port 500 (I) QM_IDLE 2006-07-12 01:18:32 Local7.Debug 192.168.117.1 43603: Jul 12 00:19:30.686: ISAKMP:(2003):purging node 1013520998 2006-07-12 01:18:32 Local7.Debug 192.168.117.1 43604: Jul 12 00:19:30.686: ISAKMP:(2003):Input = IKE_MESG_FROM_PEER, IKE_MESG_KEEP_ALIVE 2006-07-12 01:18:32 Local7.Debug 192.168.117.1 43605: Jul 12 00:19:30.686: ISAKMP:(2003):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE 2006-07-12 01:18:32 Local7.Debug 192.168.117.1 43606: 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43607: Jul 12 00:19:37.420: IPSEC(delete_sa): deleting SA, 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43608: (sa) sa_dest= 81.187.49.119, sa_proto= 50, 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43609: sa_spi= 0x7DE0062B(2111833643), 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43610: sa_trans= esp-des esp-md5-hmac , sa_conn_id= 37, 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43611: (identity) local= 81.187.49.119, remote= 194.73.244.238, 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43612: local_proxy= 192.168.117.0/255.255.255.0/0/0 (type=4), 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43613: remote_proxy= 195.111.111.0/255.255.255.0/0/0 (type=4) 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43614: Jul 12 00:19:37.420: crypto engine: deleting IPSec SA Motorola SEC 1.0:37 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43615: Jul 12 00:19:37.420: crypto_engine: Delete IPSec SA 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43616: Jul 12 00:19:37.420: IPSEC(delete_sa): deleting SA, 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43617: (sa) sa_dest= 194.73.244.238, sa_proto= 50, 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43618: sa_spi= 0x76D8A982(1993910658), 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43619: sa_trans= esp-des esp-md5-hmac , sa_conn_id= 38 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43620: , 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43621: (identity) local= 81.187.49.119, remote= 194.73.244.238, 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43622: local_proxy= 192.168.117.0/255.255.255.0/0/0 (type=4), 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43623: remote_proxy= 195.111.111.0/255.255.255.0/0/0 (type=4) 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43624: Jul 12 00:19:37.420: crypto engine: deleting IPSec SA Motorola SEC 1.0:38 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43625: Jul 12 00:19:37.424: IPSEC(delete_sa): deleting SA, 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43626: (sa) sa_dest= 81.187.49.119, sa_proto= 50, 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43627: sa_spi= 0xF45B4880(4099623040), 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43628: sa_trans= esp-des esp-md5-hmac , sa_conn_id= 39, 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43629: (identity) local= 81.187.49.119, remote= 194.73.244.238, 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43630: local_proxy= 192.168.117.0/255.255.255.0/0/0 (type=4), 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43631: remote_proxy= 195.111.111.0/255.255.255.0/0/0 (type=4) 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43632: Jul 12 00:19:37.424: crypto engine: deleting IPSec SA Motorola SEC 1.0:39 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43633: Jul 12 00:19:37.424: IPSEC(update_current_outbound_sa): updated peer 194.73.244.238 current outbound sa to SPI 0 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43634: Jul 12 00:19:37.424: IPSEC(delete_sa): deleting SA, 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43635: (sa) sa_dest= 194.73.244.238, sa_proto= 50, 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43636: sa_spi= 0xDE65E02(233201154), 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43637: sa_trans= esp-des esp-md5-hmac , sa_conn_id= 40, 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43638: (identity) local= 81.187.49.119, remote= 194.73.244.238, 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43639: local_proxy= 192.168.117.0/255.255.255.0/0/0 (type=4), 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43640: remote_proxy= 195.111.111.0/255.255.255.0/0/0 (type=4) 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43641: Jul 12 00:19:37.424: crypto engine: deleting IPSec SA Motorola SEC 1.0:40 2006-07-12 01:18:38 Local7.Debug 192.168.117.1 43642: Jul 12 00:19:37.428: crypto_engine: Delete IPSec SA 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43643: Jul 12 00:19:37.428: crypto_engine: Delete IPSec SA 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43644: Jul 12 00:19:37.440: crypto_engine: Delete IPSec SA 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43645: Jul 12 00:19:38.424: ISAKMP: set new node -1405985093 to QM_IDLE 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43646: Jul 12 00:19:38.424: crypto_engine: Generate IKE hash 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43647: Jul 12 00:19:38.424: crypto_engine: Encrypt IKE packet 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43648: Jul 12 00:19:38.424: ISAKMP:(2003): sending packet to 194.73.244.238 my_port 500 peer_port 500 (I) QM_IDLE 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43649: Jul 12 00:19:38.424: ISAKMP:(2003):purging node -1405985093 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43650: Jul 12 00:19:38.424: ISAKMP:(2003):Input = IKE_MESG_FROM_IPSEC, IKE_PHASE2_DEL 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43651: Jul 12 00:19:38.424: ISAKMP:(2003):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43652: 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43653: Jul 12 00:19:38.424: ISAKMP: set new node -959847224 to QM_IDLE 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43654: Jul 12 00:19:38.424: crypto_engine: Generate IKE hash 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43655: Jul 12 00:19:38.424: crypto_engine: Encrypt IKE packet 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43656: Jul 12 00:19:38.428: ISAKMP:(2003): sending packet to 194.73.244.238 my_port 500 peer_port 500 (I) QM_IDLE 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43657: Jul 12 00:19:38.428: ISAKMP:(2003):purging node -959847224 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43658: Jul 12 00:19:38.428: ISAKMP:(2003):Input = IKE_MESG_FROM_IPSEC, IKE_PHASE2_DEL 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43659: Jul 12 00:19:38.428: ISAKMP:(2003):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43660: 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43661: Jul 12 00:19:38.860: IPSEC(sa_request): , 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43662: (key eng. msg.) OUTBOUND 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43663: local= 81.187.49.119, remote= 194.73.244.238, 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43664: local_proxy= 192.168.117.0/255.255.255.0/0/0 (type=4), 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43665: remote_proxy= 195.111.111.0/255.255.255.0/0/0 (type=4), 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43666: protocol= ESP, transform= NONE (Tunnel), 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43667: lifedur= 3600s and 4608000kb, 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43668: spi= 0x72768D64(1920372068), conn_id= 0, keysize= 0, flags= 0x0 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43669: Jul 12 00:19:38.860: ISAKMP: set new node 0 to QM_IDLE 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43670: Jul 12 00:19:38.860: ISAKMP:(2003): sitting IDLE. Starting QM immediately (QM_IDLE ) 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43671: Jul 12 00:19:38.860: ISAKMP:(2003):beginning Quick Mode exchange, M-ID of -1231562824 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43672: Jul 12 00:19:38.864: ISAKMP:(2003):QM Initiator gets spi 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43673: Jul 12 00:19:38.864: crypto_engine: Generate IKE hash 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43674: Jul 12 00:19:38.864: crypto_engine: Encrypt IKE packet 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43675: Jul 12 00:19:38.864: ISAKMP:(2003): sending packet to 194.73.244.238 my_port 500 peer_port 500 (I) QM_IDLE 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43676: Jul 12 00:19:38.864: ISAKMP:(2003):Node -1231562824, Input = IKE_MESG_INTERNAL, IKE_INIT_QM 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43677: Jul 12 00:19:38.864: ISAKMP:(2003):Old State = IKE_QM_READY New State = IKE_QM_I_QM1 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43678: Jul 12 00:19:38.892: ISAKMP (0:2003): received packet from 194.73.244.238 dport 500 sport 500 Global (I) QM_IDLE 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43679: Jul 12 00:19:38.892: crypto_engine: Decrypt IKE packet 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43680: Jul 12 00:19:38.892: crypto_engine: Generate IKE hash 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43681: Jul 12 00:19:38.892: ISAKMP:(2003): processing HASH payload. message ID = -1231562824 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43682: Jul 12 00:19:38.892: ISAKMP:(2003): processing SA payload. message ID = -1231562824 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43683: Jul 12 00:19:38.892: ISAKMP:(2003):Checking IPSec proposal 1 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43684: Jul 12 00:19:38.892: ISAKMP: transform 1, ESP_DES 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43685: Jul 12 00:19:38.892: ISAKMP: attributes in transform: 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43686: Jul 12 00:19:38.892: ISAKMP: encaps is 1 (Tunnel) 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43687: Jul 12 00:19:38.892: ISAKMP: SA life type in seconds 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43688: Jul 12 00:19:38.892: ISAKMP: SA life duration (basic) of 3600 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43689: Jul 12 00:19:38.892: ISAKMP: SA life type in kilobytes 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43690: Jul 12 00:19:38.892: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43691: Jul 12 00:19:38.892: ISAKMP: authenticator is HMAC-MD5 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43692: Jul 12 00:19:38.896: CryptoEngine0: validate proposal 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43693: Jul 12 00:19:38.896: ISAKMP:(2003):atts are acceptable. 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43694: Jul 12 00:19:38.896: IPSEC(validate_proposal_request): proposal part #1 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43695: Jul 12 00:19:38.896: IPSEC(validate_proposal_request): proposal part #1, 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43696: (key eng. msg.) INBOUND local= 81.187.49.119, remote= 194.73.244.238, 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43697: local_proxy= 192.168.117.0/255.255.255.0/0/0 (type=4), 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43698: remote_proxy= 195.111.111.0/255.255.255.0/0/0 (type=4), 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43699: protocol= ESP, transform= esp-des esp-md5-hmac (Tunnel), 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43700: lifedur= 0s and 0kb, 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43701: spi= 0x0(0), conn_id= 0, keysize= 0, flags= 0x0 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43702: Jul 12 00:19:38.896: Crypto mapdb : proxy_match 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43703: src addr : 192.168.117.0 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43704: dst addr : 195.111.111.0 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43705: protocol : 0 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43706: src port : 0 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43707: dst port : 0 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43708: Jul 12 00:19:38.896: ISAKMP:(2003): processing NONCE payload. message ID = -1231562824 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43709: Jul 12 00:19:38.896: ISAKMP:(2003): processing ID payload. message ID = -1231562824 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43710: Jul 12 00:19:38.896: ISAKMP:(2003): processing ID payload. message ID = -1231562824 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43711: Jul 12 00:19:38.896: crypto_engine: Generate IKE hash 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43712: Jul 12 00:19:38.896: crypto_engine: Generate IKE QM keys 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43713: Jul 12 00:19:38.896: crypto_engine: Create IPSec SA (by keys) 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43714: Jul 12 00:19:38.896: crypto_engine: Generate IKE QM keys 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43715: Jul 12 00:19:38.896: crypto_engine: Create IPSec SA (by keys) 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43716: Jul 12 00:19:38.896: ISAKMP:(2003): Creating IPSec SAs 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43717: Jul 12 00:19:38.900: inbound SA from 194.73.244.238 to 81.187.49.119 (f/i) 0/ 0 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43718: (proxy 195.111.111.0 to 192.168.117.0) 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43719: Jul 12 00:19:38.900: has spi 0x72768D64 and conn_id 0 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43720: Jul 12 00:19:38.900: lifetime of 3600 seconds 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43721: Jul 12 00:19:38.900: lifetime of 4608000 kilobytes 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43722: Jul 12 00:19:38.900: outbound SA from 81.187.49.119 to 194.73.244.238 (f/i) 0/0 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43723: (proxy 192.168.117.0 to 195.111.111.0) 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43724: Jul 12 00:19:38.900: has spi 0x64A20A19 and conn_id 0 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43725: Jul 12 00:19:38.900: lifetime of 3600 seconds 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43726: Jul 12 00:19:38.900: lifetime of 4608000 kilobytes 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43727: Jul 12 00:19:38.900: crypto_engine: Encrypt IKE packet 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43728: Jul 12 00:19:38.900: ISAKMP:(2003): sending packet to 194.73.244.238 my_port 500 peer_port 500 (I) QM_IDLE 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43729: Jul 12 00:19:38.900: ISAKMP:(2003):deleting node -1231562824 error FALSE reason "No Error" 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43730: Jul 12 00:19:38.900: ISAKMP:(2003):Node -1231562824, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43731: Jul 12 00:19:38.900: ISAKMP:(2003):Old State = IKE_QM_I_QM1 New State = IKE_QM_PHASE2_COMPLETE 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43732: Jul 12 00:19:38.900: IPSEC(key_engine): got a queue event with 1 KMI message(s) 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43733: Jul 12 00:19:38.900: Crypto mapdb : proxy_match 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43734: src addr : 192.168.117.0 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43735: dst addr : 195.111.111.0 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43736: protocol : 0 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43737: src port : 0 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43738: dst port : 0 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43739: Jul 12 00:19:38.900: IPSEC(crypto_ipsec_sa_find_ident_head): reconnecting with the same proxies and peer 194.73.244.238 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43740: Jul 12 00:19:38.904: IPSEC(policy_db_add_ident): src 192.168.117.0, dest 195.111.111.0, dest_port 0 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43741: 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43742: Jul 12 00:19:38.904: IPSEC(create_sa): sa created, 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43743: (sa) sa_dest= 81.187.49.119, sa_proto= 50, 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43744: sa_spi= 0x72768D64(1920372068), 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43745: sa_trans= esp-des esp-md5-hmac , sa_conn_id= 1 2006-07-12 01:18:39 Local7.Debug 192.168.117.1 43746: Jul 12 00:19:38.904: IPSEC(create_sa): sa created 2006-07-12 01:18:40 Local7.Debug 192.168.117.1 43747: , 2006-07-12 01:18:40 Local7.Debug 192.168.117.1 43748: (sa) sa_dest= 194.73.244.238, sa_proto= 50, 2006-07-12 01:18:40 Local7.Debug 192.168.117.1 43749: sa_spi= 0x64A20A19(1688341017), 2006-07-12 01:18:40 Local7.Debug 192.168.117.1 43750: sa_trans= esp-des esp-md5-hmac , sa_conn_id= 2 2006-07-12 01:18:40 Local7.Debug 192.168.117.1 43751: Jul 12 00:19:38.904: IPSEC(update_current_outbound_sa): updated peer 194.73.244.238 current outbound sa to SPI 64A20A19