Welcome to ISAserver.org

L2TP/IPsec pre-shared key error

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> VPN >> L2TP/IPsec pre-shared key error

Page: [1] 2 next > >>

Message

<< Older Topic Newer Topic >>

L2TP/IPsec pre-shared key error - 18.Oct.2004 11:41:00 PM

mrupright

Posts: 68
Joined: 18.Oct.2004
Status: offline

Greetings!

I am having problems with the pre-shared key and L2TP/IPsec for remote client connections. I understand the inherent security risks of pre-shared keys, but I want to use it as a stop gap while I setup our CA. I have successfully tested pptp so I know (at least I think) that the ISA server is functioning correctly.

However, I have entered the pre-shared key on the server then entered the key on the client and poof nothing happens! The connection times out and says that the server is not responding to the connection attempt.

What am I doing wrong? Thanks for your time.

Post #: 1

Featured Links*

RE: L2TP/IPsec pre-shared key error - 18.Oct.2004 11:48:00 PM

AbqBill

Posts: 478
Joined: 3.Jun.2003
From: Albuquerque NM USA
Status: offline

Hi Mark,

Are you initiating the connection from behind a NAT device? If so, have you applied the appropriate NAT-T update to the client?

Bill

(in reply to mrupright)

Post #: 2

RE: L2TP/IPsec pre-shared key error - 19.Oct.2004 1:21:00 AM

mrupright

Posts: 68
Joined: 18.Oct.2004
Status: offline

Hi Bill,

Thanks for the prompt reply, no I don't think so, does ISA 2004 set itself up with nat by default? Here is what my test network looks like:

WinXpPro-------ISA2004-----Hub----RADIUS--Win2kAD

Thanks for your help

(in reply to mrupright)

Post #: 3

RE: L2TP/IPsec pre-shared key error - 19.Oct.2004 12:47:00 PM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Mark,

That looks like the internal network. But where is the VPN client?

Thanks!
Tom

(in reply to mrupright)

Post #: 4

RE: L2TP/IPsec pre-shared key error - 19.Oct.2004 3:28:00 PM

mrupright

Posts: 68
Joined: 18.Oct.2004
Status: offline

Ah yes, WinXPpro is the vpn client which plugs into a hub and then eth1 of ISA plugs into the same hub. Eth0 of ISA plugs into a hub on the inside network which radius and Win2kAD belong.

HTH

Thanks for your help!

(in reply to mrupright)

Post #: 5

RE: L2TP/IPsec pre-shared key error - 19.Oct.2004 5:31:00 PM

AbqBill

Posts: 478
Joined: 3.Jun.2003
From: Albuquerque NM USA
Status: offline

Hi Mark,

Here's what Tom is asking: From which network(s) (from the ISA Server's perspective) are the VPN client connections being initiated from?

Bill

(in reply to mrupright)

Post #: 6

RE: L2TP/IPsec pre-shared key error - 19.Oct.2004 10:00:00 PM

mrupright

Posts: 68
Joined: 18.Oct.2004
Status: offline

Thanks for your help, I'll try my best to describe my test network. WinXPpro is attached to a "simulated internet" meaning I have it connected to a hub, ISA's outside interface is connected to the same hub. ISA's inside interface is connected to a different hub in which the domain controller also connects. (I removed the radius server) So the client is initiating the connection to the outside ISA interface.

I can connect to the inside network from WinXPpro and access terminal services on the DC using pptp. However when I try to connect using L2TP it does not work. It times out and says that the remote server is not responding. Switch back to pptp and I am connected in seconds. I have been trying to get this working all day and I am at my wits end!

Thank you so much for your help!

WinXPpro--hub---ISA---hub---DC

(in reply to mrupright)

Post #: 7

RE: L2TP/IPsec pre-shared key error - 20.Oct.2004 6:43:00 AM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Mark,

Where did you enter the pre-shared key on the ISA firewall machine?

Thanks!
Tom

(in reply to mrupright)

Post #: 8

RE: L2TP/IPsec pre-shared key error - 20.Oct.2004 3:32:00 PM

mrupright

Posts: 68
Joined: 18.Oct.2004
Status: offline

Hi Tom,

I entered the pre-shared key under the vpn properties page on the authentication tab. I put a check in the box where it says "Allow Custom IPsec policy for L2TP connections." and entered my pre-shared key in the text box. I then entered the same pre-shared key on the client end. I even tried certificates and still no luck connecting via L2TP.

I am using MS 120 day trial of ISA2004, but that shouldn't make a difference right? All the feature's should be enabled?

Thanks for your help Tom!

(in reply to mrupright)

Post #: 9

RE: L2TP/IPsec pre-shared key error - 21.Oct.2004 2:49:00 AM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Mark,

That sounds right to me. Are you sure the same key is being used on both ends? Try using 123 or something simple before getting fancy [Smile]

HTH,
Tom

(in reply to mrupright)

Post #: 10

RE: L2TP/IPsec pre-shared key error - 21.Oct.2004 7:51:00 AM

mrupright

Posts: 68
Joined: 18.Oct.2004
Status: offline

Tom,

Thanks again for helping me, believe it or not, 123 is the pre-shared key I am using [Smile]

Mark

(in reply to mrupright)

Post #: 11

RE: L2TP/IPsec pre-shared key error - 21.Oct.2004 2:48:00 PM

ClintD

Posts: 1848
Joined: 26.Jan.2001
From: Keller, TX
Status: offline

Can you install Network Monitor on the ISA Server and see if it is even responding to the UDP 500 request from the client?

If so, then we can enable Oakley logging on the client in the registry.

HKLM\System\CurrentControlSet\Services\PolicyAgent\Oakley -> REG_DWORD value named EnableLogging with a value of 1.

You might need to create the Oakley key/folder.

Once this has been added, reboot the client and attempt to connect. Once it fails, check in the c:\windows\debug directory for the oakley.log file. Post the contents of the log file up here and we'll see what's going on.

(in reply to mrupright)

Post #: 12

RE: L2TP/IPsec pre-shared key error - 21.Oct.2004 6:14:00 PM

mrupright

Posts: 68
Joined: 18.Oct.2004
Status: offline

Hi Clint,

Thanks for your help, I used Sniffer and it is indeed responding to udp 500, here are the contents of the oakley log:

10-21: 11:06:29:382:424 Initialization OK
10-21: 11:07:33:44:760 QM PolicyName: L2TP Require Max Encryption Quick Mode Policy dwFlags 0
10-21: 11:07:33:44:760 QMOffer[0] LifetimeKBytes 250000 LifetimeSec 3600
10-21: 11:07:33:44:760 QMOffer[0] dwFlags 0 dwPFSGroup 0
10-21: 11:07:33:44:760 Algo[0] Operation: ESP Algo: Triple DES CBC HMAC: MD5
10-21: 11:07:33:44:760 QMOffer[1] LifetimeKBytes 250000 LifetimeSec 3600
10-21: 11:07:33:44:760 QMOffer[1] dwFlags 0 dwPFSGroup 0
10-21: 11:07:33:44:760 Algo[0] Operation: ESP Algo: Triple DES CBC HMAC: MD5
10-21: 11:07:33:44:760 QMOffer[2] LifetimeKBytes 250000 LifetimeSec 3600
10-21: 11:07:33:44:760 QMOffer[2] dwFlags 0 dwPFSGroup 0
10-21: 11:07:33:44:760 Algo[0] Operation: AH Algo: SHA
10-21: 11:07:33:54:760 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: 0
10-21: 11:07:33:54:760 QMOffer[3] LifetimeKBytes 250000 LifetimeSec 3600
10-21: 11:07:33:54:760 QMOffer[3] dwFlags 0 dwPFSGroup 0
10-21: 11:07:33:54:760 Algo[0] Operation: AH Algo: MD5
10-21: 11:07:33:54:760 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: 0
10-21: 11:07:33:54:760 QMOffer[4] LifetimeKBytes 250000 LifetimeSec 3600
10-21: 11:07:33:54:760 QMOffer[4] dwFlags 0 dwPFSGroup 0
10-21: 11:07:33:54:760 Algo[0] Operation: AH Algo: SHA
10-21: 11:07:33:54:760 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: SHA
10-21: 11:07:33:54:760 QMOffer[5] LifetimeKBytes 250000 LifetimeSec 3600
10-21: 11:07:33:54:760 QMOffer[5] dwFlags 0 dwPFSGroup 0
10-21: 11:07:33:54:760 Algo[0] Operation: AH Algo: MD5
10-21: 11:07:33:54:760 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: MD5
10-21: 11:07:33:54:760 Internal Acquire: op=00000001 src=192.168.20.5.1701 dst=192.168.20.100.1701 proto = 17, SrcMask=255.255.255.255, DstMask=255.255.255.255, Tunnel 0, TunnelEndpt=0.0.0.0 Inbound TunnelEndpt=0.0.0.0, InitiateEvent=00000714, IKE SrcPort=500 IKE DstPort=500
10-21: 11:07:33:54:1b8 Filter to match: Src 192.168.20.100 Dst 192.168.20.5
10-21: 11:07:33:54:1b8 MM PolicyName: L2TP Main Mode Policy
10-21: 11:07:33:54:1b8 MMPolicy dwFlags 8 SoftSAExpireTime 28800
10-21: 11:07:33:54:1b8 MMOffer[0] LifetimeSec 28800 QMLimit 0 DHGroup 268435457
10-21: 11:07:33:54:1b8 MMOffer[0] Encrypt: Triple DES CBC Hash: SHA
10-21: 11:07:33:54:1b8 MMOffer[1] LifetimeSec 28800 QMLimit 0 DHGroup 2
10-21: 11:07:33:54:1b8 MMOffer[1] Encrypt: Triple DES CBC Hash: SHA
10-21: 11:07:33:54:1b8 MMOffer[2] LifetimeSec 28800 QMLimit 0 DHGroup 2
10-21: 11:07:33:54:1b8 MMOffer[2] Encrypt: Triple DES CBC Hash: MD5
10-21: 11:07:33:54:1b8 MMOffer[3] LifetimeSec 28800 QMLimit 0 DHGroup 1
10-21: 11:07:33:54:1b8 MMOffer[3] Encrypt: DES CBC Hash: SHA
10-21: 11:07:33:64:1b8 MMOffer[4] LifetimeSec 28800 QMLimit 0 DHGroup 1
10-21: 11:07:33:64:1b8 MMOffer[4] Encrypt: DES CBC Hash: MD5
10-21: 11:07:33:64:1b8 Auth[0]:RSA Sig C=US, CN=Root CA AuthFlags 0
10-21: 11:07:33:64:1b8 QM PolicyName: L2TP Require Max Encryption Quick Mode Policy dwFlags 0
10-21: 11:07:33:64:1b8 QMOffer[0] LifetimeKBytes 250000 LifetimeSec 3600
10-21: 11:07:33:64:1b8 QMOffer[0] dwFlags 0 dwPFSGroup 0
10-21: 11:07:33:64:1b8 Algo[0] Operation: ESP Algo: Triple DES CBC HMAC: MD5
10-21: 11:07:33:64:1b8 QMOffer[1] LifetimeKBytes 250000 LifetimeSec 3600
10-21: 11:07:33:64:1b8 QMOffer[1] dwFlags 0 dwPFSGroup 0
10-21: 11:07:33:64:1b8 Algo[0] Operation: ESP Algo: Triple DES CBC HMAC: MD5
10-21: 11:07:33:64:1b8 QMOffer[2] LifetimeKBytes 250000 LifetimeSec 3600
10-21: 11:07:33:64:1b8 QMOffer[2] dwFlags 0 dwPFSGroup 0
10-21: 11:07:33:64:1b8 Algo[0] Operation: AH Algo: SHA
10-21: 11:07:33:64:1b8 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: 0
10-21: 11:07:33:64:1b8 QMOffer[3] LifetimeKBytes 250000 LifetimeSec 3600
10-21: 11:07:33:64:1b8 QMOffer[3] dwFlags 0 dwPFSGroup 0
10-21: 11:07:33:64:1b8 Algo[0] Operation: AH Algo: MD5
10-21: 11:07:33:64:1b8 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: 0
10-21: 11:07:33:64:1b8 QMOffer[4] LifetimeKBytes 250000 LifetimeSec 3600
10-21: 11:07:33:64:1b8 QMOffer[4] dwFlags 0 dwPFSGroup 0
10-21: 11:07:33:64:1b8 Algo[0] Operation: AH Algo: SHA
10-21: 11:07:33:64:1b8 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: SHA
10-21: 11:07:33:64:1b8 QMOffer[5] LifetimeKBytes 250000 LifetimeSec 3600
10-21: 11:07:33:64:1b8 QMOffer[5] dwFlags 0 dwPFSGroup 0
10-21: 11:07:33:64:1b8 Algo[0] Operation: AH Algo: MD5
10-21: 11:07:33:64:1b8 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: MD5
10-21: 11:07:33:64:1b8 Starting Negotiation: src = 192.168.20.5.0500, dst = 192.168.20.100.0500, proto = 17, context = 00000000, ProxySrc = 192.168.20.5.1701, ProxyDst = 192.168.20.100.1701 SrcMask = 0.0.0.0 DstMask = 0.0.0.0
10-21: 11:07:33:64:1b8 constructing ISAKMP Header
10-21: 11:07:33:64:1b8 constructing SA (ISAKMP)
10-21: 11:07:33:64:1b8 Constructing Vendor MS NT5 ISAKMPOAKLEY
10-21: 11:07:33:74:1b8 Constructing Vendor FRAGMENTATION
10-21: 11:07:33:74:1b8 Constructing Vendor draft-ietf-ipsec-nat-t-ike-02
10-21: 11:07:33:74:1b8 Constructing Vendor Vid-Initial-Contact
10-21: 11:07:33:74:1b8
10-21: 11:07:33:74:1b8 Sending: SA = 0x013A8860 to 192.168.20.100:Type 2.500
10-21: 11:07:33:74:1b8 ISAKMP Header: (V1.0), len = 312
10-21: 11:07:33:74:1b8 I-COOKIE f96a4d2ecc7a9071
10-21: 11:07:33:74:1b8 R-COOKIE 0000000000000000
10-21: 11:07:33:74:1b8 exchange: Oakley Main Mode
10-21: 11:07:33:74:1b8 flags: 0
10-21: 11:07:33:74:1b8 next payload: SA
10-21: 11:07:33:74:1b8 message ID: 00000000
10-21: 11:07:33:74:1b8 Ports S:f401 D:f401
10-21: 11:07:33:74:1b8 Activating InitiateEvent 00000714
10-21: 11:07:33:214:1b8
10-21: 11:07:33:214:1b8 Receive: (get) SA = 0x013a8860 from 192.168.20.100.500
10-21: 11:07:33:214:1b8 ISAKMP Header: (V1.0), len = 148
10-21: 11:07:33:214:1b8 I-COOKIE f96a4d2ecc7a9071
10-21: 11:07:33:214:1b8 R-COOKIE 14b2c30ab6638f86
10-21: 11:07:33:214:1b8 exchange: Oakley Main Mode
10-21: 11:07:33:214:1b8 flags: 0
10-21: 11:07:33:214:1b8 next payload: SA
10-21: 11:07:33:214:1b8 message ID: 00000000
10-21: 11:07:33:214:1b8 processing payload SA
10-21: 11:07:33:214:1b8 Received Phase 1 Transform 1
10-21: 11:07:33:214:1b8 Encryption Alg Triple DES CBC(5)
10-21: 11:07:33:214:1b8 Hash Alg SHA(2)
10-21: 11:07:33:214:1b8 Oakley Group 2
10-21: 11:07:33:214:1b8 Auth Method RSA Signature with Certificates(3)
10-21: 11:07:33:214:1b8 Life type in Seconds
10-21: 11:07:33:214:1b8 Life duration of 28800
10-21: 11:07:33:214:1b8 Phase 1 SA accepted: transform=1
10-21: 11:07:33:214:1b8 SA - Oakley proposal accepted
10-21: 11:07:33:214:1b8 processing payload VENDOR ID
10-21: 11:07:33:214:1b8 Received VendorId MS NT5 ISAKMPOAKLEY
10-21: 11:07:33:214:1b8 processing payload VENDOR ID
10-21: 11:07:33:214:1b8 Received VendorId FRAGMENTATION
10-21: 11:07:33:214:1b8 processing payload VENDOR ID
10-21: 11:07:33:214:1b8 Received VendorId draft-ietf-ipsec-nat-t-ike-02
10-21: 11:07:33:214:1b8 ClearFragList
10-21: 11:07:33:214:1b8 constructing ISAKMP Header
10-21: 11:07:33:324:1b8 constructing KE
10-21: 11:07:33:324:1b8 constructing NONCE (ISAKMP)
10-21: 11:07:33:324:1b8 Constructing NatDisc
10-21: 11:07:33:324:1b8
10-21: 11:07:33:324:1b8 Sending: SA = 0x013A8860 to 192.168.20.100:Type 2.500
10-21: 11:07:33:324:1b8 ISAKMP Header: (V1.0), len = 232
10-21: 11:07:33:324:1b8 I-COOKIE f96a4d2ecc7a9071
10-21: 11:07:33:324:1b8 R-COOKIE 14b2c30ab6638f86
10-21: 11:07:33:324:1b8 exchange: Oakley Main Mode
10-21: 11:07:33:324:1b8 flags: 0
10-21: 11:07:33:324:1b8 next payload: KE
10-21: 11:07:33:324:1b8 message ID: 00000000
10-21: 11:07:33:324:1b8 Ports S:f401 D:f401
10-21: 11:07:33:425:1b8
10-21: 11:07:33:425:1b8 Receive: (get) SA = 0x013a8860 from 192.168.20.100.500
10-21: 11:07:33:425:1b8 ISAKMP Header: (V1.0), len = 270
10-21: 11:07:33:425:1b8 I-COOKIE f96a4d2ecc7a9071
10-21: 11:07:33:425:1b8 R-COOKIE 14b2c30ab6638f86
10-21: 11:07:33:425:1b8 exchange: Oakley Main Mode
10-21: 11:07:33:425:1b8 flags: 0
10-21: 11:07:33:425:1b8 next payload: KE
10-21: 11:07:33:425:1b8 message ID: 00000000
10-21: 11:07:33:425:1b8 processing payload KE
10-21: 11:07:33:465:1b8 processing payload NONCE
10-21: 11:07:33:465:1b8 processing payload CRP
10-21: 11:07:33:465:1b8 C=US, CN=Root CA
10-21: 11:07:33:465:1b8 processing payload NATDISC
10-21: 11:07:33:465:1b8 Processing NatHash
10-21: 11:07:33:465:1b8 Nat hash 870beb37c8cd619194abb6e439ff338e
10-21: 11:07:33:465:1b8 bc44b980
10-21: 11:07:33:465:1b8 SA StateMask2 e
10-21: 11:07:33:465:1b8 processing payload NATDISC
10-21: 11:07:33:465:1b8 Processing NatHash
10-21: 11:07:33:465:1b8 Nat hash 963f68d0dadb2b18bc03e74a0fc3f2d9
10-21: 11:07:33:465:1b8 ef64abf0
10-21: 11:07:33:465:1b8 SA StateMask2 8e
10-21: 11:07:33:465:1b8 ClearFragList
10-21: 11:07:33:465:1b8 constructing ISAKMP Header
10-21: 11:07:33:465:1b8 constructing ID
10-21: 11:07:33:465:1b8 Looking for IPSec only cert
10-21: 11:07:33:465:1b8 failed to get chain 80092004
10-21: 11:07:33:465:1b8 Looking for any cert
10-21: 11:07:33:545:1b8 Cert Trustes. 0 100
10-21: 11:07:33:545:1b8 Cert SHA Thumbprint 9d367a530ed81050aafb272052b315aa
10-21: 11:07:33:545:1b8 844c727c
10-21: 11:07:33:735:1b8 Cert SHA Thumbprint 9d367a530ed81050aafb272052b315aa
10-21: 11:07:33:735:1b8 844c727c
10-21: 11:07:33:735:1b8 SubjectName: CN=client.example.com
10-21: 11:07:33:735:1b8 Cert Serialnumber 040000000000f8f83661
10-21: 11:07:33:735:1b8 Cert SHA Thumbprint 9d367a530ed81050aafb272052b315aa
10-21: 11:07:33:735:1b8 844c727c
10-21: 11:07:33:735:1b8 SubjectName: C=US, CN=Root CA
10-21: 11:07:33:735:1b8 Cert Serialnumber ac8708ff668f5b439f0c3402aa133f13
10-21: 11:07:33:735:1b8
10-21: 11:07:33:735:1b8 Cert SHA Thumbprint a885587a080ea4051252a02625d30f4c
10-21: 11:07:33:735:1b8 56cd1659
10-21: 11:07:33:735:1b8 Not storing My cert chain in SA.
10-21: 11:07:33:735:1b8 MM ID Type 9
10-21: 11:07:33:735:1b8 MM ID 301d311b301906035504031312636c69
10-21: 11:07:33:735:1b8 656e742e6578616d706c652e636f6d
10-21: 11:07:33:735:1b8 constructing CERT
10-21: 11:07:33:735:1b8 Construct SIG
10-21: 11:07:33:755:1b8 Constructing Cert Request
10-21: 11:07:33:755:1b8 C=US, CN=Root CA
10-21: 11:07:33:755:1b8
10-21: 11:07:33:755:1b8 Sending: SA = 0x013A8860 to 192.168.20.100:Type 2.500
10-21: 11:07:33:755:1b8 ISAKMP Header: (V1.0), len = 1380
10-21: 11:07:33:755:1b8 I-COOKIE f96a4d2ecc7a9071
10-21: 11:07:33:755:1b8 R-COOKIE 14b2c30ab6638f86
10-21: 11:07:33:755:1b8 exchange: Oakley Main Mode
10-21: 11:07:33:755:1b8 flags: 1 ( encrypted )
10-21: 11:07:33:755:1b8 next payload: ID
10-21: 11:07:33:755:1b8 message ID: 00000000
10-21: 11:07:33:755:1b8 Ports S:f401 D:f401
10-21: 11:07:33:925:1b8
10-21: 11:07:33:925:1b8 Receive: (get) SA = 0x013a8860 from 192.168.20.100.500
10-21: 11:07:33:925:1b8 ISAKMP Header: (V1.0), len = 1332
10-21: 11:07:33:925:1b8 I-COOKIE f96a4d2ecc7a9071
10-21: 11:07:33:925:1b8 R-COOKIE 14b2c30ab6638f86
10-21: 11:07:33:925:1b8 exchange: Oakley Main Mode
10-21: 11:07:33:925:1b8 flags: 1 ( encrypted )
10-21: 11:07:33:925:1b8 next payload: ID
10-21: 11:07:33:925:1b8 message ID: 00000000
10-21: 11:07:33:925:1b8 processing payload ID
10-21: 11:07:33:925:1b8 processing payload CERT
10-21: 11:07:33:925:1b8 processing payload SIG
10-21: 11:07:33:925:1b8 Verifying CertStore
10-21: 11:07:33:925:1b8 SubjectName: CN=isa.example.com
10-21: 11:07:33:925:1b8 Cert Serialnumber 0300000000001f4d0361
10-21: 11:07:33:925:1b8 Cert SHA Thumbprint f385854e08f2f58a48a997166af6ae26
10-21: 11:07:33:925:1b8 85e5fb50
10-21: 11:07:33:925:1b8 Cert Trustes. 0 100
10-21: 11:07:33:925:1b8 SubjectName: CN=isa.example.com
10-21: 11:07:33:925:1b8 Cert Serialnumber 0300000000001f4d0361
10-21: 11:07:33:925:1b8 Cert SHA Thumbprint f385854e08f2f58a48a997166af6ae26
10-21: 11:07:33:925:1b8 85e5fb50
10-21: 11:07:33:925:1b8 SubjectName: C=US, CN=Root CA
10-21: 11:07:33:925:1b8 Cert Serialnumber ac8708ff668f5b439f0c3402aa133f13
10-21: 11:07:33:925:1b8
10-21: 11:07:33:925:1b8 Cert SHA Thumbprint a885587a080ea4051252a02625d30f4c
10-21: 11:07:33:925:1b8 56cd1659
10-21: 11:07:33:925:1b8 Not storing Peer's cert chain in SA.
10-21: 11:07:33:925:1b8 Cert SHA Thumbprint f385854e08f2f58a48a997166af6ae26
10-21: 11:07:33:925:1b8 85e5fb50
10-21: 11:07:33:935:1b8 Signature validated
10-21: 11:07:33:935:1b8 ClearFragList
10-21: 11:07:33:935:1b8 MM established. SA: 013A8860
10-21: 11:07:33:945:1b8 QM PolicyName: L2TP Require Max Encryption Quick Mode Policy dwFlags 0
10-21: 11:07:33:945:1b8 QMOffer[0] LifetimeKBytes 250000 LifetimeSec 3600
10-21: 11:07:33:945:1b8 QMOffer[0] dwFlags 0 dwPFSGroup 0
10-21: 11:07:33:945:1b8 Algo[0] Operation: ESP Algo: Triple DES CBC HMAC: MD5
10-21: 11:07:33:945:1b8 QMOffer[1] LifetimeKBytes 250000 LifetimeSec 3600
10-21: 11:07:33:945:1b8 QMOffer[1] dwFlags 0 dwPFSGroup 0
10-21: 11:07:33:945:1b8 Algo[0] Operation: ESP Algo: Triple DES CBC HMAC: MD5
10-21: 11:07:33:945:1b8 QMOffer[2] LifetimeKBytes 250000 LifetimeSec 3600
10-21: 11:07:33:945:1b8 QMOffer[2] dwFlags 0 dwPFSGroup 0
10-21: 11:07:33:945:1b8 Algo[0] Operation: AH Algo: SHA
10-21: 11:07:33:945:1b8 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: 0
10-21: 11:07:33:945:1b8 QMOffer[3] LifetimeKBytes 250000 LifetimeSec 3600
10-21: 11:07:33:945:1b8 QMOffer[3] dwFlags 0 dwPFSGroup 0
10-21: 11:07:33:945:1b8 Algo[0] Operation: AH Algo: MD5
10-21: 11:07:33:945:1b8 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: 0
10-21: 11:07:33:945:1b8 QMOffer[4] LifetimeKBytes 250000 LifetimeSec 3600
10-21: 11:07:33:945:1b8 QMOffer[4] dwFlags 0 dwPFSGroup 0
10-21: 11:07:33:945:1b8 Algo[0] Operation: AH Algo: SHA
10-21: 11:07:33:945:1b8 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: SHA
10-21: 11:07:33:945:1b8 QMOffer[5] LifetimeKBytes 250000 LifetimeSec 3600
10-21: 11:07:33:945:1b8 QMOffer[5] dwFlags 0 dwPFSGroup 0
10-21: 11:07:33:945:1b8 Algo[0] Operation: AH Algo: MD5
10-21: 11:07:33:945:1b8 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: MD5
10-21: 11:07:33:945:1b8 GetSpi: src = 192.168.20.100.1701, dst = 192.168.20.5.1701, proto = 17, context = 00000000, srcMask = 255.255.255.255, destMask = 255.255.255.255, TunnelFilter 0
10-21: 11:07:33:945:1b8 Setting SPI 1916933615
10-21: 11:07:33:945:1b8 constructing ISAKMP Header
10-21: 11:07:33:945:1b8 constructing HASH (null)
10-21: 11:07:33:945:1b8 constructing SA (IPSEC)
10-21: 11:07:33:945:1b8 constructing NONCE (IPSEC)
10-21: 11:07:33:945:1b8 constructing ID (proxy)
10-21: 11:07:33:955:1b8 constructing ID (proxy)
10-21: 11:07:33:955:1b8 constructing HASH (QM)
10-21: 11:07:33:955:1b8
10-21: 11:07:33:955:1b8 Sending: SA = 0x013A8860 to 192.168.20.100:Type 2.500
10-21: 11:07:33:955:1b8 ISAKMP Header: (V1.0), len = 612
10-21: 11:07:33:955:1b8 I-COOKIE f96a4d2ecc7a9071
10-21: 11:07:33:955:1b8 R-COOKIE 14b2c30ab6638f86
10-21: 11:07:33:955:1b8 exchange: Oakley Quick Mode
10-21: 11:07:33:955:1b8 flags: 1 ( encrypted )
10-21: 11:07:33:955:1b8 next payload: HASH
10-21: 11:07:33:955:1b8 message ID: a38f7ec1
10-21: 11:07:33:955:1b8 Ports S:f401 D:f401
10-21: 11:07:33:965:1b8
10-21: 11:07:33:965:1b8 Receive: (get) SA = 0x013a8860 from 192.168.20.100.500
10-21: 11:07:33:965:1b8 ISAKMP Header: (V1.0), len = 164
10-21: 11:07:33:965:1b8 I-COOKIE f96a4d2ecc7a9071
10-21: 11:07:33:965:1b8 R-COOKIE 14b2c30ab6638f86
10-21: 11:07:33:965:1b8 exchange: Oakley Quick Mode
10-21: 11:07:33:965:1b8 flags: 3 ( encrypted commit )
10-21: 11:07:33:965:1b8 next payload: HASH
10-21: 11:07:33:965:1b8 message ID: a38f7ec1
10-21: 11:07:33:965:1b8 processing HASH (QM)
10-21: 11:07:33:965:1b8 ClearFragList
10-21: 11:07:33:965:1b8 processing payload NONCE
10-21: 11:07:33:965:1b8 processing payload ID
10-21: 11:07:33:965:1b8 processing payload ID
10-21: 11:07:33:965:1b8 processing payload SA
10-21: 11:07:33:965:1b8 Negotiated Proxy ID: Src 192.168.20.5.1701 Dst 192.168.20.100.1701
10-21: 11:07:33:965:1b8 Checking Proposal 1: Proto= ESP(3), num trans=1 Next=0
10-21: 11:07:33:965:1b8 Checking Transform # 1: ID=Triple DES CBC(3)
10-21: 11:07:33:965:1b8 SA life type in seconds
10-21: 11:07:33:965:1b8 SA life duration 00000e10
10-21: 11:07:33:965:1b8 SA life type in kilobytes
10-21: 11:07:33:965:1b8 SA life duration 0003d090
10-21: 11:07:33:965:1b8 tunnel mode is Transport Mode(2)
10-21: 11:07:33:965:1b8 HMAC algorithm is MD5(1)
10-21: 11:07:33:965:1b8 Phase 2 SA accepted: proposal=1 transform=1
10-21: 11:07:33:965:1b8 constructing ISAKMP Header
10-21: 11:07:33:965:1b8 constructing HASH (QM)
10-21: 11:07:33:965:1b8 Adding QMs: src = 192.168.20.5.1701, dst = 192.168.20.100.1701, proto = 17, context = 00000006, my tunnel = 0.0.0.0, peer tunnel = 0.0.0.0, SrcMask = 0.0.0.0, DestMask = 0.0.0.0 Lifetime = 3600 LifetimeKBytes 250000 dwFlags 0 Direction 2 EncapType 1
10-21: 11:07:33:965:1b8 Algo[0] Operation: ESP Algo: Triple DES CBC HMAC: MD5
10-21: 11:07:33:965:1b8 Algo[0] MySpi: 1916933615 PeerSpi: 292021666
10-21: 11:07:33:965:1b8 Encap Ports Src 500 Dst 500
10-21: 11:07:33:965:1b8 Skipping Outbound SA add
10-21: 11:07:33:965:1b8
10-21: 11:07:33:965:1b8 Sending: SA = 0x013A8860 to 192.168.20.100:Type 2.500
10-21: 11:07:33:965:1b8 ISAKMP Header: (V1.0), len = 52
10-21: 11:07:33:965:1b8 I-COOKIE f96a4d2ecc7a9071
10-21: 11:07:33:965:1b8 R-COOKIE 14b2c30ab6638f86
10-21: 11:07:33:965:1b8 exchange: Oakley Quick Mode
10-21: 11:07:33:965:1b8 flags: 3 ( encrypted commit )
10-21: 11:07:33:965:1b8 next payload: HASH
10-21: 11:07:33:965:1b8 message ID: a38f7ec1
10-21: 11:07:33:965:1b8 Ports S:f401 D:f401
10-21: 11:07:33:975:1b8
10-21: 11:07:33:975:1b8 Receive: (get) SA = 0x013a8860 from 192.168.20.100.500
10-21: 11:07:33:975:1b8 ISAKMP Header: (V1.0), len = 84
10-21: 11:07:33:975:1b8 I-COOKIE f96a4d2ecc7a9071
10-21: 11:07:33:975:1b8 R-COOKIE 14b2c30ab6638f86
10-21: 11:07:33:975:1b8 exchange: Oakley Quick Mode
10-21: 11:07:33:975:1b8 flags: 3 ( encrypted commit )
10-21: 11:07:33:975:1b8 next payload: HASH
10-21: 11:07:33:975:1b8 message ID: a38f7ec1
10-21: 11:07:33:975:1b8 processing HASH (Notify/Delete)
10-21: 11:07:33:975:1b8 ClearFragList
10-21: 11:07:33:975:1b8 processing payload NOTIFY
10-21: 11:07:33:975:1b8 Adding QMs: src = 192.168.20.5.1701, dst = 192.168.20.100.1701, proto = 17, context = 00000006, my tunnel = 0.0.0.0, peer tunnel = 0.0.0.0, SrcMask = 0.0.0.0, DestMask = 0.0.0.0 Lifetime = 3600 LifetimeKBytes 250000 dwFlags 0 Direction 3 EncapType 1
10-21: 11:07:33:975:1b8 Algo[0] Operation: ESP Algo: Triple DES CBC HMAC: MD5
10-21: 11:07:33:975:1b8 Algo[0] MySpi: 1916933615 PeerSpi: 292021666
10-21: 11:07:33:975:1b8 Encap Ports Src 500 Dst 500
10-21: 11:07:33:975:1b8 Skipping Inbound SA add
10-21: 11:07:33:985:1b8 isadb_set_status sa:013A8860 centry:00130460 status 0
10-21: 11:07:33:985:1b8 isadb_set_status InitiateEvent 00000714: Setting Status 0
10-21: 11:07:33:985:1b8 Clearing centry 00130460 InitiateEvent 00000714
10-21: 11:07:33:985:1b8 CE Dead. sa:013A8860 ce:00130460 status:0
10-21: 11:07:33:985:760 CloseNegHandle 00000714
10-21: 11:07:33:985:760 SE cookie f96a4d2ecc7a9071
10-21: 11:08:09:36:1b8 QM Deleted. Notify from driver: Src 192.168.20.5 Dest 192.168.20.100 InSPI 1916933615 OutSpi 292021666 Tunnel 0 TunnelFilter 0
10-21: 11:08:09:36:1b8 constructing ISAKMP Header
10-21: 11:08:09:36:1b8 constructing HASH (null)
10-21: 11:08:09:36:1b8 constructing NONCE (ND)
10-21: 11:08:09:36:1b8 Construct QM Delete Spi 1916933615
10-21: 11:08:09:36:1b8 constructing HASH (Notify/Delete)
10-21: 11:08:09:36:1b8
10-21: 11:08:09:36:1b8 Sending: SA = 0x013A8860 to 192.168.20.100:Type 3.500
10-21: 11:08:09:36:1b8 ISAKMP Header: (V1.0), len = 92
10-21: 11:08:09:36:1b8 I-COOKIE f96a4d2ecc7a9071
10-21: 11:08:09:36:1b8 R-COOKIE 14b2c30ab6638f86
10-21: 11:08:09:36:1b8 exchange: ISAKMP Informational Exchange
10-21: 11:08:09:36:1b8 flags: 1 ( encrypted )
10-21: 11:08:09:36:1b8 next payload: HASH
10-21: 11:08:09:36:1b8 message ID: 54204d2f
10-21: 11:08:09:36:1b8 Ports S:f401 D:f401
10-21: 11:08:09:36:1b8 PrivatePeerAddr 0
10-21: 11:08:09:36:1b8
10-21: 11:08:09:36:1b8 Receive: (get) SA = 0x013a8860 from 192.168.20.100.500
10-21: 11:08:09:36:1b8 ISAKMP Header: (V1.0), len = 92
10-21: 11:08:09:36:1b8 I-COOKIE f96a4d2ecc7a9071
10-21: 11:08:09:36:1b8 R-COOKIE 14b2c30ab6638f86
10-21: 11:08:09:36:1b8 exchange: ISAKMP Informational Exchange
10-21: 11:08:09:36:1b8 flags: 1 ( encrypted )
10-21: 11:08:09:36:1b8 next payload: HASH
10-21: 11:08:09:36:1b8 message ID: 54204d2f
10-21: 11:08:09:36:1b8 processing HASH (Notify/Delete)
10-21: 11:08:09:36:760 isadb_schedule_kill_oldPolicy_sas: aa17bc27-085d-4384-9896383d85de88c7 4
10-21: 11:08:09:36:764 isadb_schedule_kill_oldPolicy_sas: 112cd740-a621-4077-95eff718fc5e341c 3
10-21: 11:08:09:46:234 isadb_schedule_kill_oldPolicy_sas: bb3364bf-507d-4cb9-8414c028eb7199f2 2
10-21: 11:08:09:46:1b8 entered kill_old_policy_sas 4
10-21: 11:08:09:46:1b8 SA Dead. sa:013A8860 status:3619
10-21: 11:08:09:46:1b8 isadb_set_status sa:013A8860 centry:00000000 status 3619
10-21: 11:08:09:46:1b8 constructing ISAKMP Header
10-21: 11:08:09:46:1b8 constructing HASH (null)
10-21: 11:08:09:46:1b8 constructing NONCE (ND)
10-21: 11:08:09:46:1b8 constructing DELETE. MM 013A8860
10-21: 11:08:09:46:1b8 constructing HASH (Notify/Delete)
10-21: 11:08:09:46:1b8
10-21: 11:08:09:46:1b8 Sending: SA = 0x013A8860 to 192.168.20.100:Type 3.500
10-21: 11:08:09:46:1b8 ISAKMP Header: (V1.0), len = 108
10-21: 11:08:09:46:1b8 I-COOKIE f96a4d2ecc7a9071
10-21: 11:08:09:46:1b8 R-COOKIE 14b2c30ab6638f86
10-21: 11:08:09:46:1b8 exchange: ISAKMP Informational Exchange
10-21: 11:08:09:46:1b8 flags: 1 ( encrypted )
10-21: 11:08:09:46:1b8 next payload: HASH
10-21: 11:08:09:46:1b8 message ID: 527b0de3
10-21: 11:08:09:46:1b8 Ports S:f401 D:f401
10-21: 11:08:09:46:1b8 entered kill_old_policy_sas 3
10-21: 11:08:09:46:760 isadb_schedule_kill_oldPolicy_sas: 847f26c4-606a-480f-88de1e18896ae481 1
10-21: 11:08:09:66:ac
10-21: 11:08:09:66:ac Receive: (get) SA = 0x013a8860 from 192.168.20.100.500
10-21: 11:08:09:66:ac ISAKMP Header: (V1.0), len = 108
10-21: 11:08:09:66:ac I-COOKIE f96a4d2ecc7a9071
10-21: 11:08:09:66:ac R-COOKIE 14b2c30ab6638f86
10-21: 11:08:09:66:ac exchange: ISAKMP Informational Exchange
10-21: 11:08:09:66:ac flags: 1 ( encrypted )
10-21: 11:08:09:66:ac next payload: HASH
10-21: 11:08:09:66:ac message ID: 527b0de3
10-21: 11:08:09:66:ac processing HASH (Notify/Delete)
10-21: 11:08:09:66:ac entered kill_old_policy_sas 2
10-21: 11:08:09:76:ac entered kill_old_policy_sas 1
10-21: 11:08:44:457:ac ClearFragList

Thanks

Mark

(in reply to mrupright)

Post #: 13

RE: L2TP/IPsec pre-shared key error - 21.Oct.2004 9:50:00 PM

ClintD

Posts: 1848
Joined: 26.Jan.2001
From: Keller, TX
Status: offline

Well, this is not using a pre-shared key (we're using certs in the log you posted), but IPSec looks fine here - you see from the lines below that IPSec adds all 3 required Security Associations (1 from main Mode and 2 from Quick Mode) - use the time stamp at the beginning of each line to cross-reference the log you posted.

Main Mode SA
10-21: 11:07:33:935:1b8 MM established. SA: 013A8860

Incoming Quick Mode SA
10-21: 11:07:33:965:1b8 Adding QMs: src = 192.168.20.5.1701, dst = 192.168.20.100.1701, proto = 17, context = 00000006, my tunnel = 0.0.0.0, peer tunnel = 0.0.0.0, SrcMask = 0.0.0.0, DestMask = 0.0.0.0 Lifetime = 3600 LifetimeKBytes 250000 dwFlags 0 Direction 2 EncapType 1

Outgoing Quick Mode SA
10-21: 11:07:33:975:1b8 Adding QMs: src = 192.168.20.5.1701, dst = 192.168.20.100.1701, proto = 17, context = 00000006, my tunnel = 0.0.0.0, peer tunnel = 0.0.0.0, SrcMask = 0.0.0.0, DestMask = 0.0.0.0 Lifetime = 3600 LifetimeKBytes 250000 dwFlags 0 Direction 3 EncapType 1

In the capture you took, do you only see UDP 500 (IKE/ISAKMP) traffic, or does it ever change to ESP (Protocol 50)?

How far does the connection attempt progress? Does it ever change to "Verifying user name and password" or "Registering your computer on hte network"?

The 2 most critical lines are here...
10-21: 11:07:33:985:760 SE cookie f96a4d2ecc7a9071
10-21: 11:08:09:36:1b8 QM Deleted. Notify from driver: Src 192.168.20.5 Dest 192.168.20.100 InSPI 1916933615 OutSpi 292021666 Tunnel 0 TunnelFilter 0

We can see that the IPSec Security Associations are established from 11:07:33 until 11:08:09, or 36 seconds, so something else is awry.

[ October 21, 2004, 09:52 PM: Message edited by: ClintD ]

(in reply to mrupright)

Post #: 14

RE: L2TP/IPsec pre-shared key error - 21.Oct.2004 10:26:00 PM

mrupright

Posts: 68
Joined: 18.Oct.2004
Status: offline

Hi Clint,

Yes, I got frustrated with the pre-shared key, so I tried certificates. No luck.... [Frown]

The only traffic I ever captured with sniffer besides arp was IKE/ISAKMP it never changed to anything else. When I connect all I see is "Connecting to 192.168.20.100" and then after almost exactly thrity-eight seconds it fails with a error 678.

Thanks for your help!

Mark

(in reply to mrupright)

Post #: 15

RE: L2TP/IPsec pre-shared key error - 22.Oct.2004 1:25:00 AM

ClintD

Posts: 1848
Joined: 26.Jan.2001
From: Keller, TX
Status: offline

Hrmmmm - that's weird. OK - can you enable logging on the server and post the log from it?

Also, on the client, can you load the IPSec Monitor MMC snap-in and see if there is a Security Association listed under Main Mode and/or Quick Mode for those 30-odd seconds?

(in reply to mrupright)

Post #: 16

RE: L2TP/IPsec pre-shared key error - 22.Oct.2004 6:18:00 AM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Mark,

What user authentication method are you using?

Is the ISA firewall a member of the domain?

Is user mapping enabled?

Is this Win2k or Win2003?

thanks!
Tom

(in reply to mrupright)

Post #: 17

RE: L2TP/IPsec pre-shared key error - 22.Oct.2004 4:36:00 PM

mrupright

Posts: 68
Joined: 18.Oct.2004
Status: offline

Hi Tom,

I am using ms-chap2 and the ISA server is a member of a Windows 2000 domain. Yes, user mapping is enabled.

Thanks Tom

Hi Clint,

The IPsec monitor on the client showed a security association under main mode for the listed time. Here it is:

Me My ID Peer Peer ID Authentication Encryption Integrity Diffie-Hellman
192.168.20.5 192.168.20.5 192.168.20.100 192.168.20.100 Preshared Key 3DES SHA1 Medium (2)

Here is the oakley log from the server:

10-22: 09:12:57:421:468 Initialization OK
10-22: 09:11:12:552:f0 isadb_schedule_kill_oldPolicy_sas: 9b2ec153-9f49-4168-8e6522165880db37 3
10-22: 09:11:12:572:1c0 entered kill_old_policy_sas 3
10-22: 09:11:53:988:1c0
10-22: 09:11:53:998:1c0 Receive: (get) SA = 0x00000000 from 192.168.20.5.500
10-22: 09:11:53:998:1c0 ISAKMP Header: (V1.0), len = 312
10-22: 09:11:53:998:1c0 I-COOKIE 5d649cef313556a0
10-22: 09:11:53:998:1c0 R-COOKIE 0000000000000000
10-22: 09:11:53:998:1c0 exchange: Oakley Main Mode
10-22: 09:11:53:998:1c0 flags: 0
10-22: 09:11:53:998:1c0 next payload: SA
10-22: 09:11:53:998:1c0 message ID: 00000000
10-22: 09:11:53:998:1c0 Filter to match: Src 192.168.20.5 Dst 192.168.20.100
10-22: 09:11:54:8:1c0 MM PolicyName: L2TP Main Mode Policy
10-22: 09:11:54:8:1c0 MMPolicy dwFlags 0 SoftSAExpireTime 28800
10-22: 09:11:54:8:1c0 MMOffer[0] LifetimeSec 28800 QMLimit 0 DHGroup 2
10-22: 09:11:54:8:1c0 MMOffer[0] Encrypt: Triple DES CBC Hash: SHA
10-22: 09:11:54:8:1c0 MMOffer[1] LifetimeSec 28800 QMLimit 0 DHGroup 2
10-22: 09:11:54:8:1c0 MMOffer[1] Encrypt: Triple DES CBC Hash: MD5
10-22: 09:11:54:8:1c0 MMOffer[2] LifetimeSec 28800 QMLimit 0 DHGroup 1
10-22: 09:11:54:8:1c0 MMOffer[2] Encrypt: DES CBC Hash: SHA
10-22: 09:11:54:8:1c0 MMOffer[3] LifetimeSec 28800 QMLimit 0 DHGroup 1
10-22: 09:11:54:8:1c0 MMOffer[3] Encrypt: DES CBC Hash: MD5
10-22: 09:11:54:8:1c0 Auth[0]:RSA Sig C=US, CN=Root CA AuthFlags 0
10-22: 09:11:54:8:1c0 Auth[1]:PresharedKey KeyLen 6
10-22: 09:11:54:8:1c0 Responding with new SA 168ec38
10-22: 09:11:54:8:1c0 processing payload SA
10-22: 09:11:54:8:1c0 Received Phase 1 Transform 1
10-22: 09:11:54:8:1c0 Encryption Alg Triple DES CBC(5)
10-22: 09:11:54:8:1c0 Hash Alg SHA(2)
10-22: 09:11:54:8:1c0 Oakley Group 14
10-22: 09:11:54:8:1c0 Auth Method Preshared Key(1)
10-22: 09:11:54:8:1c0 Life type in Seconds
10-22: 09:11:54:8:1c0 Life duration of 28800
10-22: 09:11:54:8:1c0 Received Phase 1 Transform 2
10-22: 09:11:54:8:1c0 Encryption Alg Triple DES CBC(5)
10-22: 09:11:54:8:1c0 Hash Alg SHA(2)
10-22: 09:11:54:8:1c0 Oakley Group 2
10-22: 09:11:54:8:1c0 Auth Method Preshared Key(1)
10-22: 09:11:54:8:1c0 Life type in Seconds
10-22: 09:11:54:8:1c0 Life duration of 28800
10-22: 09:11:54:8:1c0 Received Phase 1 Transform 3
10-22: 09:11:54:8:1c0 Encryption Alg Triple DES CBC(5)
10-22: 09:11:54:8:1c0 Hash Alg MD5(1)
10-22: 09:11:54:8:1c0 Oakley Group 2
10-22: 09:11:54:8:1c0 Auth Method Preshared Key(1)
10-22: 09:11:54:8:1c0 Life type in Seconds
10-22: 09:11:54:8:1c0 Life duration of 28800
10-22: 09:11:54:8:1c0 Received Phase 1 Transform 4
10-22: 09:11:54:8:1c0 Encryption Alg DES CBC(1)
10-22: 09:11:54:8:1c0 Hash Alg SHA(2)
10-22: 09:11:54:8:1c0 Oakley Group 1
10-22: 09:11:54:8:1c0 Auth Method Preshared Key(1)
10-22: 09:11:54:8:1c0 Life type in Seconds
10-22: 09:11:54:8:1c0 Life duration of 28800
10-22: 09:11:54:8:1c0 Received Phase 1 Transform 5
10-22: 09:11:54:8:1c0 Encryption Alg DES CBC(1)
10-22: 09:11:54:8:1c0 Hash Alg MD5(1)
10-22: 09:11:54:8:1c0 Oakley Group 1
10-22: 09:11:54:8:1c0 Auth Method Preshared Key(1)
10-22: 09:11:54:8:1c0 Life type in Seconds
10-22: 09:11:54:8:1c0 Life duration of 28800
10-22: 09:11:54:8:1c0 Phase 1 SA accepted: transform=2
10-22: 09:11:54:8:1c0 SA - Oakley proposal accepted
10-22: 09:11:54:8:1c0 processing payload VENDOR ID
10-22: 09:11:54:18:1c0 Received VendorId MS NT5 ISAKMPOAKLEY
10-22: 09:11:54:18:1c0 processing payload VENDOR ID
10-22: 09:11:54:18:1c0 Received VendorId FRAGMENTATION
10-22: 09:11:54:18:1c0 processing payload VENDOR ID
10-22: 09:11:54:18:1c0 Received VendorId draft-ietf-ipsec-nat-t-ike-02
10-22: 09:11:54:18:1c0 processing payload VENDOR ID
10-22: 09:11:54:18:1c0 Received VendorId Vid-Initial-Contact
10-22: 09:11:54:18:1c0 ClearFragList
10-22: 09:11:54:18:1c0 constructing ISAKMP Header
10-22: 09:11:54:18:1c0 constructing SA (ISAKMP)
10-22: 09:11:54:18:1c0 Constructing Vendor MS NT5 ISAKMPOAKLEY
10-22: 09:11:54:18:1c0 Constructing Vendor FRAGMENTATION
10-22: 09:11:54:18:1c0 Constructing Vendor draft-ietf-ipsec-nat-t-ike-02
10-22: 09:11:54:28:1c0
10-22: 09:11:54:28:1c0 Sending: SA = 0x0168EC38 to 192.168.20.5:Type 2.500
10-22: 09:11:54:28:1c0 ISAKMP Header: (V1.0), len = 148
10-22: 09:11:54:28:1c0 I-COOKIE 5d649cef313556a0
10-22: 09:11:54:28:1c0 R-COOKIE 5f9c7d118dd56579
10-22: 09:11:54:28:1c0 exchange: Oakley Main Mode
10-22: 09:11:54:28:1c0 flags: 0
10-22: 09:11:54:28:1c0 next payload: SA
10-22: 09:11:54:28:1c0 message ID: 00000000
10-22: 09:11:54:28:1c0 Ports S:f401 D:f401
10-22: 09:11:54:149:1c0
10-22: 09:11:54:149:1c0 Receive: (get) SA = 0x0168ec38 from 192.168.20.5.500
10-22: 09:11:54:149:1c0 ISAKMP Header: (V1.0), len = 232
10-22: 09:11:54:149:1c0 I-COOKIE 5d649cef313556a0
10-22: 09:11:54:149:1c0 R-COOKIE 5f9c7d118dd56579
10-22: 09:11:54:149:1c0 exchange: Oakley Main Mode
10-22: 09:11:54:149:1c0 flags: 0
10-22: 09:11:54:149:1c0 next payload: KE
10-22: 09:11:54:149:1c0 message ID: 00000000
10-22: 09:11:54:149:1c0 processing payload KE
10-22: 09:11:54:219:1c0 processing payload NONCE
10-22: 09:11:54:219:1c0 processing payload NATDISC
10-22: 09:11:54:219:1c0 Processing NatHash
10-22: 09:11:54:219:1c0 Nat hash e63cd18df578570dcf242f33af155995
10-22: 09:11:54:219:1c0 d936ec1a
10-22: 09:11:54:219:1c0 SA StateMask2 e
10-22: 09:11:54:219:1c0 processing payload NATDISC
10-22: 09:11:54:219:1c0 Processing NatHash
10-22: 09:11:54:219:1c0 Nat hash 4390e3b3a4966870f43164233dd85ee0
10-22: 09:11:54:219:1c0 5fbe3315
10-22: 09:11:54:219:1c0 SA StateMask2 8e
10-22: 09:11:54:219:1c0 ClearFragList
10-22: 09:11:54:219:1c0 constructing ISAKMP Header
10-22: 09:11:54:219:1c0 constructing KE
10-22: 09:11:54:219:1c0 constructing NONCE (ISAKMP)
10-22: 09:11:54:219:1c0 Constructing NatDisc
10-22: 09:11:54:219:1c0
10-22: 09:11:54:219:1c0 Sending: SA = 0x0168EC38 to 192.168.20.5:Type 2.500
10-22: 09:11:54:219:1c0 ISAKMP Header: (V1.0), len = 232
10-22: 09:11:54:219:1c0 I-COOKIE 5d649cef313556a0
10-22: 09:11:54:219:1c0 R-COOKIE 5f9c7d118dd56579
10-22: 09:11:54:219:1c0 exchange: Oakley Main Mode
10-22: 09:11:54:219:1c0 flags: 0
10-22: 09:11:54:219:1c0 next payload: KE
10-22: 09:11:54:219:1c0 message ID: 00000000
10-22: 09:11:54:219:1c0 Ports S:f401 D:f401
10-22: 09:11:54:259:1c0
10-22: 09:11:54:259:1c0 Receive: (get) SA = 0x0168ec38 from 192.168.20.5.500
10-22: 09:11:54:259:1c0 ISAKMP Header: (V1.0), len = 68
10-22: 09:11:54:259:1c0 I-COOKIE 5d649cef313556a0
10-22: 09:11:54:259:1c0 R-COOKIE 5f9c7d118dd56579
10-22: 09:11:54:259:1c0 exchange: Oakley Main Mode
10-22: 09:11:54:259:1c0 flags: 1 ( encrypted )
10-22: 09:11:54:259:1c0 next payload: ID
10-22: 09:11:54:259:1c0 message ID: 00000000
10-22: 09:11:54:259:1c0 processing payload ID
10-22: 09:11:54:259:1c0 processing payload HASH
10-22: 09:11:54:259:1c0 AUTH: Phase I authentication accepted
10-22: 09:11:54:259:1c0 ClearFragList
10-22: 09:11:54:259:1c0 constructing ISAKMP Header
10-22: 09:11:54:259:1c0 constructing ID
10-22: 09:11:54:259:1c0 MM ID Type 1
10-22: 09:11:54:259:1c0 MM ID c0a81464
10-22: 09:11:54:259:1c0 constructing HASH
10-22: 09:11:54:259:1c0 MM established. SA: 0168EC38
10-22: 09:11:54:279:1c0
10-22: 09:11:54:279:1c0 Sending: SA = 0x0168EC38 to 192.168.20.5:Type 2.500
10-22: 09:11:54:279:1c0 ISAKMP Header: (V1.0), len = 68
10-22: 09:11:54:279:1c0 I-COOKIE 5d649cef313556a0
10-22: 09:11:54:279:1c0 R-COOKIE 5f9c7d118dd56579
10-22: 09:11:54:279:1c0 exchange: Oakley Main Mode
10-22: 09:11:54:279:1c0 flags: 1 ( encrypted )
10-22: 09:11:54:279:1c0 next payload: ID
10-22: 09:11:54:279:1c0 message ID: 00000000
10-22: 09:11:54:279:1c0 Ports S:f401 D:f401
10-22: 09:11:54:279:1c0
10-22: 09:11:54:279:1c0 Receive: (get) SA = 0x0168ec38 from 192.168.20.5.500
10-22: 09:11:54:279:1c0 ISAKMP Header: (V1.0), len = 1116
10-22: 09:11:54:279:1c0 I-COOKIE 5d649cef313556a0
10-22: 09:11:54:279:1c0 R-COOKIE 5f9c7d118dd56579
10-22: 09:11:54:279:1c0 exchange: Oakley Quick Mode
10-22: 09:11:54:279:1c0 flags: 1 ( encrypted )
10-22: 09:11:54:279:1c0 next payload: HASH
10-22: 09:11:54:279:1c0 message ID: 2f37f75f
10-22: 09:11:54:279:1c0 processing HASH (QM)
10-22: 09:11:54:279:1c0 ClearFragList
10-22: 09:11:54:279:1c0 processing payload NONCE
10-22: 09:11:54:279:1c0 processing payload ID
10-22: 09:11:54:279:1c0 processing payload ID
10-22: 09:11:54:279:1c0 processing payload SA
10-22: 09:11:54:279:1c0 Negotiated Proxy ID: Src 192.168.20.5.1701 Dst 192.168.20.100.1701
10-22: 09:11:54:279:1c0 Checking Proposal 1: Proto= ESP(3), num trans=2 Next=2
10-22: 09:11:54:279:1c0 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:11:54:279:1c0 SA life type in seconds
10-22: 09:11:54:279:1c0 SA life duration 00000e10
10-22: 09:11:54:279:1c0 SA life type in kilobytes
10-22: 09:11:54:279:1c0 SA life duration 0003d090
10-22: 09:11:54:279:1c0 tunnel mode is Transport Mode(2)
10-22: 09:11:54:279:1c0 HMAC algorithm is MD5(1)
10-22: 09:11:54:279:1c0 Checking Transform # 2: ID=Triple DES CBC(3)
10-22: 09:11:54:279:1c0 SA life type in seconds
10-22: 09:11:54:279:1c0 SA life duration 00000e10
10-22: 09:11:54:279:1c0 SA life type in kilobytes
10-22: 09:11:54:279:1c0 SA life duration 0003d090
10-22: 09:11:54:279:1c0 tunnel mode is Transport Mode(2)
10-22: 09:11:54:279:1c0 HMAC algorithm is SHA(2)
10-22: 09:11:54:279:1c0 Checking Proposal 2: Proto= AH(2), num trans=1 Next=2
10-22: 09:11:54:279:1c0 Checking Transform # 1: ID=SHA(3)
10-22: 09:11:54:279:1c0 SA life type in seconds
10-22: 09:11:54:279:1c0 SA life duration 00000e10
10-22: 09:11:54:279:1c0 SA life type in kilobytes
10-22: 09:11:54:279:1c0 SA life duration 0003d090
10-22: 09:11:54:279:1c0 tunnel mode is Transport Mode(2)
10-22: 09:11:54:279:1c0 HMAC algorithm is SHA(2)
10-22: 09:11:54:279:1c0 Checking Proposal 2: Proto= ESP(3), num trans=1 Next=2
10-22: 09:11:54:279:1c0 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:11:54:279:1c0 SA life type in seconds
10-22: 09:11:54:279:1c0 SA life duration 00000e10
10-22: 09:11:54:279:1c0 SA life type in kilobytes
10-22: 09:11:54:279:1c0 SA life duration 0003d090
10-22: 09:11:54:279:1c0 tunnel mode is Transport Mode(2)
10-22: 09:11:54:279:1c0 Checking Proposal 3: Proto= AH(2), num trans=1 Next=2
10-22: 09:11:54:279:1c0 Checking Transform # 1: ID=MD5(2)
10-22: 09:11:54:279:1c0 SA life type in seconds
10-22: 09:11:54:279:1c0 SA life duration 00000e10
10-22: 09:11:54:279:1c0 SA life type in kilobytes
10-22: 09:11:54:279:1c0 SA life duration 0003d090
10-22: 09:11:54:279:1c0 tunnel mode is Transport Mode(2)
10-22: 09:11:54:279:1c0 HMAC algorithm is MD5(1)
10-22: 09:11:54:279:1c0 Checking Proposal 3: Proto= ESP(3), num trans=1 Next=2
10-22: 09:11:54:279:1c0 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:11:54:279:1c0 SA life type in seconds
10-22: 09:11:54:279:1c0 SA life duration 00000e10
10-22: 09:11:54:279:1c0 SA life type in kilobytes
10-22: 09:11:54:279:1c0 SA life duration 0003d090
10-22: 09:11:54:279:1c0 tunnel mode is Transport Mode(2)
10-22: 09:11:54:279:1c0 Checking Proposal 4: Proto= AH(2), num trans=1 Next=2
10-22: 09:11:54:279:1c0 Checking Transform # 1: ID=SHA(3)
10-22: 09:11:54:279:1c0 SA life type in seconds
10-22: 09:11:54:279:1c0 SA life duration 00000e10
10-22: 09:11:54:279:1c0 SA life type in kilobytes
10-22: 09:11:54:279:1c0 SA life duration 0003d090
10-22: 09:11:54:279:1c0 tunnel mode is Transport Mode(2)
10-22: 09:11:54:279:1c0 HMAC algorithm is SHA(2)
10-22: 09:11:54:279:1c0 Checking Proposal 4: Proto= ESP(3), num trans=1 Next=2
10-22: 09:11:54:279:1c0 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:11:54:279:1c0 SA life type in seconds
10-22: 09:11:54:279:1c0 SA life duration 00000e10
10-22: 09:11:54:279:1c0 SA life type in kilobytes
10-22: 09:11:54:279:1c0 SA life duration 0003d090
10-22: 09:11:54:279:1c0 tunnel mode is Transport Mode(2)
10-22: 09:11:54:279:1c0 HMAC algorithm is SHA(2)
10-22: 09:11:54:279:1c0 Checking Proposal 5: Proto= AH(2), num trans=1 Next=2
10-22: 09:11:54:279:1c0 Checking Transform # 1: ID=MD5(2)
10-22: 09:11:54:279:1c0 SA life type in seconds
10-22: 09:11:54:279:1c0 SA life duration 00000e10
10-22: 09:11:54:279:1c0 SA life type in kilobytes
10-22: 09:11:54:279:1c0 SA life duration 0003d090
10-22: 09:11:54:279:1c0 tunnel mode is Transport Mode(2)
10-22: 09:11:54:279:1c0 HMAC algorithm is MD5(1)
10-22: 09:11:54:279:1c0 Checking Proposal 5: Proto= ESP(3), num trans=1 Next=2
10-22: 09:11:54:279:1c0 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:11:54:279:1c0 SA life type in seconds
10-22: 09:11:54:279:1c0 SA life duration 00000e10
10-22: 09:11:54:279:1c0 SA life type in kilobytes
10-22: 09:11:54:279:1c0 SA life duration 0003d090
10-22: 09:11:54:279:1c0 tunnel mode is Transport Mode(2)
10-22: 09:11:54:279:1c0 HMAC algorithm is MD5(1)
10-22: 09:11:54:279:1c0 Checking Proposal 6: Proto= ESP(3), num trans=2 Next=2
10-22: 09:11:54:279:1c0 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:11:54:279:1c0 SA life type in seconds
10-22: 09:11:54:279:1c0 SA life duration 00000e10
10-22: 09:11:54:279:1c0 SA life type in kilobytes
10-22: 09:11:54:279:1c0 SA life duration 0003d090
10-22: 09:11:54:279:1c0 tunnel mode is Transport Mode(2)
10-22: 09:11:54:279:1c0 HMAC algorithm is MD5(1)
10-22: 09:11:54:279:1c0 Checking Transform # 2: ID=DES CBC(2)
10-22: 09:11:54:279:1c0 SA life type in seconds
10-22: 09:11:54:279:1c0 SA life duration 00000e10
10-22: 09:11:54:279:1c0 SA life type in kilobytes
10-22: 09:11:54:279:1c0 SA life duration 0003d090
10-22: 09:11:54:279:1c0 tunnel mode is Transport Mode(2)
10-22: 09:11:54:279:1c0 HMAC algorithm is SHA(2)
10-22: 09:11:54:279:1c0 Checking Proposal 7: Proto= AH(2), num trans=1 Next=2
10-22: 09:11:54:279:1c0 Checking Transform # 1: ID=SHA(3)
10-22: 09:11:54:279:1c0 SA life type in seconds
10-22: 09:11:54:279:1c0 SA life duration 00000e10
10-22: 09:11:54:279:1c0 SA life type in kilobytes
10-22: 09:11:54:279:1c0 SA life duration 0003d090
10-22: 09:11:54:279:1c0 tunnel mode is Transport Mode(2)
10-22: 09:11:54:279:1c0 HMAC algorithm is SHA(2)
10-22: 09:11:54:279:1c0 Checking Proposal 7: Proto= ESP(3), num trans=1 Next=2
10-22: 09:11:54:289:1c0 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:11:54:289:1c0 SA life type in seconds
10-22: 09:11:54:289:1c0 SA life duration 00000e10
10-22: 09:11:54:289:1c0 SA life type in kilobytes
10-22: 09:11:54:289:1c0 SA life duration 0003d090
10-22: 09:11:54:289:1c0 tunnel mode is Transport Mode(2)
10-22: 09:11:54:289:1c0 Checking Proposal 8: Proto= AH(2), num trans=1 Next=2
10-22: 09:11:54:289:1c0 Checking Transform # 1: ID=MD5(2)
10-22: 09:11:54:289:1c0 SA life type in seconds
10-22: 09:11:54:289:1c0 SA life duration 00000e10
10-22: 09:11:54:289:1c0 SA life type in kilobytes
10-22: 09:11:54:289:1c0 SA life duration 0003d090
10-22: 09:11:54:289:1c0 tunnel mode is Transport Mode(2)
10-22: 09:11:54:289:1c0 HMAC algorithm is MD5(1)
10-22: 09:11:54:289:1c0 Checking Proposal 8: Proto= ESP(3), num trans=1 Next=2
10-22: 09:11:54:289:1c0 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:11:54:289:1c0 SA life type in seconds
10-22: 09:11:54:289:1c0 SA life duration 00000e10
10-22: 09:11:54:289:1c0 SA life type in kilobytes
10-22: 09:11:54:289:1c0 SA life duration 0003d090
10-22: 09:11:54:289:1c0 tunnel mode is Transport Mode(2)
10-22: 09:11:54:289:1c0 Checking Proposal 9: Proto= AH(2), num trans=1 Next=2
10-22: 09:11:54:289:1c0 Checking Transform # 1: ID=SHA(3)
10-22: 09:11:54:289:1c0 SA life type in seconds
10-22: 09:11:54:289:1c0 SA life duration 00000e10
10-22: 09:11:54:289:1c0 SA life type in kilobytes
10-22: 09:11:54:289:1c0 SA life duration 0003d090
10-22: 09:11:54:289:1c0 tunnel mode is Transport Mode(2)
10-22: 09:11:54:289:1c0 HMAC algorithm is SHA(2)
10-22: 09:11:54:289:1c0 Checking Proposal 9: Proto= ESP(3), num trans=1 Next=2
10-22: 09:11:54:289:1c0 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:11:54:289:1c0 SA life type in seconds
10-22: 09:11:54:289:1c0 SA life duration 00000e10
10-22: 09:11:54:289:1c0 SA life type in kilobytes
10-22: 09:11:54:289:1c0 SA life duration 0003d090
10-22: 09:11:54:289:1c0 tunnel mode is Transport Mode(2)
10-22: 09:11:54:289:1c0 HMAC algorithm is SHA(2)
10-22: 09:11:54:289:1c0 Checking Proposal 10: Proto= AH(2), num trans=1 Next=2
10-22: 09:11:54:289:1c0 Checking Transform # 1: ID=MD5(2)
10-22: 09:11:54:289:1c0 SA life type in seconds
10-22: 09:11:54:289:1c0 SA life duration 00000e10
10-22: 09:11:54:289:1c0 SA life type in kilobytes
10-22: 09:11:54:289:1c0 SA life duration 0003d090
10-22: 09:11:54:289:1c0 tunnel mode is Transport Mode(2)
10-22: 09:11:54:289:1c0 HMAC algorithm is MD5(1)
10-22: 09:11:54:289:1c0 Checking Proposal 10: Proto= ESP(3), num trans=1 Next=0
10-22: 09:11:54:289:1c0 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:11:54:289:1c0 SA life type in seconds
10-22: 09:11:54:289:1c0 SA life duration 00000e10
10-22: 09:11:54:289:1c0 SA life type in kilobytes
10-22: 09:11:54:289:1c0 SA life duration 0003d090
10-22: 09:11:54:289:1c0 tunnel mode is Transport Mode(2)
10-22: 09:11:54:289:1c0 HMAC algorithm is MD5(1)
10-22: 09:11:54:289:1c0 Finding Responder Policy for SRC=192.168.20.5.1701 DST=192.168.20.100.1701, SRCMask=255.255.255.255, DSTMask=255.255.255.255, Prot=17 InTunnelEndpt 0 OutTunnelEndpt 0
10-22: 09:11:54:289:1c0 QM PolicyName: L2TP Optional Encryption Quick Mode Policy dwFlags 0
10-22: 09:11:54:289:1c0 QMOffer[0] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:11:54:289:1c0 QMOffer[0] dwFlags 0 dwPFSGroup 0
10-22: 09:11:54:289:1c0 Algo[0] Operation: ESP Algo: Triple DES CBC HMAC: MD5
10-22: 09:11:54:289:1c0 QMOffer[1] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:11:54:289:1c0 QMOffer[1] dwFlags 0 dwPFSGroup 0
10-22: 09:11:54:289:1c0 Algo[0] Operation: ESP Algo: Triple DES CBC HMAC: SHA
10-22: 09:11:54:289:1c0 QMOffer[2] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:11:54:289:1c0 QMOffer[2] dwFlags 0 dwPFSGroup 0
10-22: 09:11:54:289:1c0 Algo[0] Operation: AH Algo: SHA
10-22: 09:11:54:289:1c0 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: 0
10-22: 09:11:54:289:1c0 QMOffer[3] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:11:54:289:1c0 QMOffer[3] dwFlags 0 dwPFSGroup 0
10-22: 09:11:54:289:1c0 Algo[0] Operation: AH Algo: MD5
10-22: 09:11:54:289:1c0 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: 0
10-22: 09:11:54:289:1c0 QMOffer[4] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:11:54:289:1c0 QMOffer[4] dwFlags 0 dwPFSGroup 0
10-22: 09:11:54:289:1c0 Algo[0] Operation: AH Algo: SHA
10-22: 09:11:54:289:1c0 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: SHA
10-22: 09:11:54:289:1c0 QMOffer[5] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:11:54:289:1c0 QMOffer[5] dwFlags 0 dwPFSGroup 0
10-22: 09:11:54:289:1c0 Algo[0] Operation: AH Algo: MD5
10-22: 09:11:54:289:1c0 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: MD5
10-22: 09:11:54:289:1c0 QMOffer[6] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:11:54:289:1c0 QMOffer[6] dwFlags 0 dwPFSGroup 0
10-22: 09:11:54:289:1c0 Algo[0] Operation: ESP Algo: DES CBC HMAC: MD5
10-22: 09:11:54:289:1c0 QMOffer[7] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:11:54:289:1c0 QMOffer[7] dwFlags 0 dwPFSGroup 0
10-22: 09:11:54:289:1c0 Algo[0] Operation: ESP Algo: DES CBC HMAC: SHA
10-22: 09:11:54:289:1c0 QMOffer[8] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:11:54:289:1c0 QMOffer[8] dwFlags 0 dwPFSGroup 0
10-22: 09:11:54:289:1c0 Algo[0] Operation: AH Algo: SHA
10-22: 09:11:54:289:1c0 Algo[1] Operation: ESP Algo: DES CBC HMAC: 0
10-22: 09:11:54:289:1c0 QMOffer[9] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:11:54:289:1c0 QMOffer[9] dwFlags 0 dwPFSGroup 0
10-22: 09:11:54:289:1c0 Algo[0] Operation: AH Algo: MD5
10-22: 09:11:54:289:1c0 Algo[1] Operation: ESP Algo: DES CBC HMAC: 0
10-22: 09:11:54:289:1c0 QMOffer[10] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:11:54:289:1c0 QMOffer[10] dwFlags 0 dwPFSGroup 0
10-22: 09:11:54:289:1c0 Algo[0] Operation: AH Algo: SHA
10-22: 09:11:54:289:1c0 Algo[1] Operation: ESP Algo: DES CBC HMAC: SHA
10-22: 09:11:54:289:1c0 QMOffer[11] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:11:54:289:1c0 QMOffer[11] dwFlags 0 dwPFSGroup 0
10-22: 09:11:54:289:1c0 Algo[0] Operation: AH Algo: MD5
10-22: 09:11:54:289:1c0 Algo[1] Operation: ESP Algo: DES CBC HMAC: MD5
10-22: 09:11:54:289:1c0 QMOffer[12] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:11:54:289:1c0 QMOffer[12] dwFlags 0 dwPFSGroup 0
10-22: 09:11:54:289:1c0 Algo[0] Operation: ESP Algo: NULL DES HMAC: SHA
10-22: 09:11:54:289:1c0 QMOffer[13] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:11:54:289:1c0 QMOffer[13] dwFlags 0 dwPFSGroup 0
10-22: 09:11:54:289:1c0 Algo[0] Operation: ESP Algo: NULL DES HMAC: MD5
10-22: 09:11:54:289:1c0 QMOffer[14] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:11:54:289:1c0 QMOffer[14] dwFlags 0 dwPFSGroup 0
10-22: 09:11:54:289:1c0 Algo[0] Operation: AH Algo: SHA
10-22: 09:11:54:289:1c0 QMOffer[15] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:11:54:289:1c0 QMOffer[15] dwFlags 0 dwPFSGroup 0
10-22: 09:11:54:289:1c0 Algo[0] Operation: AH Algo: MD5
10-22: 09:11:54:289:1c0 Phase 2 SA accepted: proposal=1 transform=1
10-22: 09:11:54:289:1c0 GetSpi: src = 192.168.20.5.1701, dst = 192.168.20.100.1701, proto = 17, context = 00000000, srcMask = 255.255.255.255, destMask = 255.255.255.255, TunnelFilter 0
10-22: 09:11:54:289:1c0 Setting SPI 2636352893
10-22: 09:11:54:289:1c0 constructing ISAKMP Header
10-22: 09:11:54:289:1c0 constructing HASH (null)
10-22: 09:11:54:289:1c0 constructing SA (IPSEC)
10-22: 09:11:54:289:1c0 constructing NONCE (IPSEC)
10-22: 09:11:54:289:1c0 constructing ID (proxy)
10-22: 09:11:54:289:1c0 constructing ID (proxy)
10-22: 09:11:54:289:1c0 constructing HASH (QM)
10-22: 09:11:54:289:1c0
10-22: 09:11:54:289:1c0 Sending: SA = 0x0168EC38 to 192.168.20.5:Type 2.500
10-22: 09:11:54:289:1c0 ISAKMP Header: (V1.0), len = 164
10-22: 09:11:54:289:1c0 I-COOKIE 5d649cef313556a0
10-22: 09:11:54:289:1c0 R-COOKIE 5f9c7d118dd56579
10-22: 09:11:54:289:1c0 exchange: Oakley Quick Mode
10-22: 09:11:54:289:1c0 flags: 3 ( encrypted commit )
10-22: 09:11:54:289:1c0 next payload: HASH
10-22: 09:11:54:289:1c0 message ID: 2f37f75f
10-22: 09:11:54:289:1c0 Ports S:f401 D:f401
10-22: 09:11:54:289:1c0
10-22: 09:11:54:289:1c0 Receive: (get) SA = 0x0168ec38 from 192.168.20.5.500
10-22: 09:11:54:289:1c0 ISAKMP Header: (V1.0), len = 52
10-22: 09:11:54:289:1c0 I-COOKIE 5d649cef313556a0
10-22: 09:11:54:289:1c0 R-COOKIE 5f9c7d118dd56579
10-22: 09:11:54:289:1c0 exchange: Oakley Quick Mode
10-22: 09:11:54:289:1c0 flags: 3 ( encrypted commit )
10-22: 09:11:54:289:1c0 next payload: HASH
10-22: 09:11:54:289:1c0 message ID: 2f37f75f
10-22: 09:11:54:289:1c0 processing HASH (QM)
10-22: 09:11:54:289:1c0 ClearFragList
10-22: 09:11:54:289:1c0 Adding QMs: src = 192.168.20.100.1701, dst = 192.168.20.5.1701, proto = 17, context = 00000006, my tunnel = 0.0.0.0, peer tunnel = 0.0.0.0, SrcMask = 0.0.0.0, DestMask = 0.0.0.0 Lifetime = 3600 LifetimeKBytes 250000 dwFlags 0 Direction 1 EncapType 1
10-22: 09:11:54:289:1c0 Algo[0] Operation: ESP Algo: Triple DES CBC HMAC: MD5
10-22: 09:11:54:289:1c0 Algo[0] MySpi: 2636352893 PeerSpi: 93957871
10-22: 09:11:54:289:1c0 Encap Ports Src 500 Dst 500
10-22: 09:11:54:289:1c0 isadb_set_status sa:0168EC38 centry:016BB3C0 status 0
10-22: 09:11:54:299:1c0 Constructing Commit Notify
10-22: 09:11:54:299:1c0 constructing ISAKMP Header
10-22: 09:11:54:299:1c0 constructing HASH (null)
10-22: 09:11:54:299:1c0 constructing NOTIFY 16384
10-22: 09:11:54:299:1c0 constructing HASH (QM)
10-22: 09:11:54:299:1c0
10-22: 09:11:54:299:1c0 Sending: SA = 0x0168EC38 to 192.168.20.5:Type 4.500
10-22: 09:11:54:299:1c0 ISAKMP Header: (V1.0), len = 84
10-22: 09:11:54:299:1c0 I-COOKIE 5d649cef313556a0
10-22: 09:11:54:299:1c0 R-COOKIE 5f9c7d118dd56579
10-22: 09:11:54:299:1c0 exchange: Oakley Quick Mode
10-22: 09:11:54:299:1c0 flags: 3 ( encrypted commit )
10-22: 09:11:54:299:1c0 next payload: HASH
10-22: 09:11:54:299:1c0 message ID: 2f37f75f
10-22: 09:11:54:299:1c0 Ports S:f401 D:f401
10-22: 09:11:57:244:1c0
10-22: 09:11:57:244:1c0 Receive: (get) SA = 0x0168ec38 from 192.168.20.5.500
10-22: 09:11:57:244:1c0 ISAKMP Header: (V1.0), len = 92
10-22: 09:11:57:244:1c0 I-COOKIE 5d649cef313556a0
10-22: 09:11:57:244:1c0 R-COOKIE 5f9c7d118dd56579
10-22: 09:11:57:244:1c0 exchange: ISAKMP Informational Exchange
10-22: 09:11:57:244:1c0 flags: 1 ( encrypted )
10-22: 09:11:57:244:1c0 next payload: HASH
10-22: 09:11:57:244:1c0 message ID: 10630c20
10-22: 09:11:57:244:1c0 processing HASH (Notify/Delete)
10-22: 09:11:57:244:1c0 processing payload NONCE
10-22: 09:11:57:244:1c0 processing payload DELETE
10-22: 09:11:57:244:1c0 Expiring SPI 2636352893 src 514a8c0 dst 6414a8c0
10-22: 09:11:57:244:1c0 Received reliable Notify. Messid 10630c20
10-22: 09:11:57:244:1c0 constructing ISAKMP Header
10-22: 09:11:57:244:1c0 constructing HASH (null)
10-22: 09:11:57:244:1c0 constructing NONCE (ND)
10-22: 09:11:57:244:1c0 constructing HASH (Notify/Delete)
10-22: 09:11:57:244:1c0
10-22: 09:11:57:244:1c0 Sending: SA = 0x0168EC38 to 192.168.20.5:Type 1.500
10-22: 09:11:57:244:1c0 ISAKMP Header: (V1.0), len = 92
10-22: 09:11:57:244:1c0 I-COOKIE 5d649cef313556a0
10-22: 09:11:57:244:1c0 R-COOKIE 5f9c7d118dd56579
10-22: 09:11:57:244:1c0 exchange: ISAKMP Informational Exchange
10-22: 09:11:57:244:1c0 flags: 1 ( encrypted )
10-22: 09:11:57:244:1c0 next payload: HASH
10-22: 09:11:57:244:1c0 message ID: 10630c20
10-22: 09:11:57:244:1c0 Ports S:f401 D:f401
10-22: 09:11:57:244:1c0 QM Deleted. Notify from driver: Src 192.168.20.100 Dest 192.168.20.5 InSPI 2636352893 OutSpi 93957871 Tunnel 0 TunnelFilter 0
10-22: 09:11:57:244:1c0 PrivatePeerAddr 0
10-22: 09:11:57:244:84
10-22: 09:11:57:244:84 Receive: (get) SA = 0x0168ec38 from 192.168.20.5.500
10-22: 09:11:57:244:84 ISAKMP Header: (V1.0), len = 108
10-22: 09:11:57:244:84 I-COOKIE 5d649cef313556a0
10-22: 09:11:57:244:84 R-COOKIE 5f9c7d118dd56579
10-22: 09:11:57:244:84 exchange: ISAKMP Informational Exchange
10-22: 09:11:57:244:84 flags: 1 ( encrypted )
10-22: 09:11:57:244:84 next payload: HASH
10-22: 09:11:57:244:84 message ID: 31f79d89
10-22: 09:11:57:244:84 processing HASH (Notify/Delete)
10-22: 09:11:57:244:84 processing payload NONCE
10-22: 09:11:57:244:84 processing payload DELETE
10-22: 09:11:57:244:84 SA Dead. sa:0168EC38 status:35ef
10-22: 09:11:57:254:84 isadb_set_status sa:0168EC38 centry:00000000 status 35ef
10-22: 09:11:57:254:84 Received reliable Notify. Messid 31f79d89
10-22: 09:11:57:254:84 constructing ISAKMP Header
10-22: 09:11:57:264:84 constructing HASH (null)
10-22: 09:11:57:264:84 constructing NONCE (ND)
10-22: 09:11:57:264:84 constructing HASH (Notify/Delete)
10-22: 09:11:57:264:84
10-22: 09:11:57:264:84 Sending: SA = 0x0168EC38 to 192.168.20.5:Type 1.500
10-22: 09:11:57:264:84 ISAKMP Header: (V1.0), len = 108
10-22: 09:11:57:264:84 I-COOKIE 5d649cef313556a0
10-22: 09:11:57:264:84 R-COOKIE 5f9c7d118dd56579
10-22: 09:11:57:264:84 exchange: ISAKMP Informational Exchange
10-22: 09:11:57:264:84 flags: 1 ( encrypted )
10-22: 09:11:57:264:84 next payload: HASH
10-22: 09:11:57:264:84 message ID: 31f79d89
10-22: 09:11:57:264:84 Ports S:f401 D:f401
10-22: 09:12:42:175:84 ClearFragList
10-22: 09:15:48:884:928
10-22: 09:15:48:914:928 Receive: (get) SA = 0x00000000 from 192.168.20.5.500
10-22: 09:15:48:914:928 ISAKMP Header: (V1.0), len = 312
10-22: 09:15:48:914:928 I-COOKIE 278751fe38b55406
10-22: 09:15:48:914:928 R-COOKIE 0000000000000000
10-22: 09:15:48:914:928 exchange: Oakley Main Mode
10-22: 09:15:48:914:928 flags: 0
10-22: 09:15:48:914:928 next payload: SA
10-22: 09:15:48:914:928 message ID: 00000000
10-22: 09:15:48:914:928 Filter to match: Src 192.168.20.5 Dst 192.168.20.100
10-22: 09:15:48:924:928 MM PolicyName: L2TP Main Mode Policy
10-22: 09:15:48:924:928 MMPolicy dwFlags 0 SoftSAExpireTime 28800
10-22: 09:15:48:924:928 MMOffer[0] LifetimeSec 28800 QMLimit 0 DHGroup 2
10-22: 09:15:48:934:928 MMOffer[0] Encrypt: Triple DES CBC Hash: SHA
10-22: 09:15:48:934:928 MMOffer[1] LifetimeSec 28800 QMLimit 0 DHGroup 2
10-22: 09:15:48:934:928 MMOffer[1] Encrypt: Triple DES CBC Hash: MD5
10-22: 09:15:48:934:928 MMOffer[2] LifetimeSec 28800 QMLimit 0 DHGroup 1
10-22: 09:15:48:934:928 MMOffer[2] Encrypt: DES CBC Hash: SHA
10-22: 09:15:48:934:928 MMOffer[3] LifetimeSec 28800 QMLimit 0 DHGroup 1
10-22: 09:15:48:934:928 MMOffer[3] Encrypt: DES CBC Hash: MD5
10-22: 09:15:48:934:928 Auth[0]:RSA Sig C=US, CN=Root CA AuthFlags 0
10-22: 09:15:48:934:928 Auth[1]:PresharedKey KeyLen 6
10-22: 09:15:48:934:928 Responding with new SA 168ec38
10-22: 09:15:48:934:928 processing payload SA
10-22: 09:15:48:934:928 Received Phase 1 Transform 1
10-22: 09:15:48:934:928 Encryption Alg Triple DES CBC(5)
10-22: 09:15:48:934:928 Hash Alg SHA(2)
10-22: 09:15:48:934:928 Oakley Group 14
10-22: 09:15:48:934:928 Auth Method Preshared Key(1)
10-22: 09:15:48:934:928 Life type in Seconds
10-22: 09:15:48:934:928 Life duration of 28800
10-22: 09:15:48:934:928 Received Phase 1 Transform 2
10-22: 09:15:48:934:928 Encryption Alg Triple DES CBC(5)
10-22: 09:15:48:934:928 Hash Alg SHA(2)
10-22: 09:15:48:934:928 Oakley Group 2
10-22: 09:15:48:934:928 Auth Method Preshared Key(1)
10-22: 09:15:48:934:928 Life type in Seconds
10-22: 09:15:48:934:928 Life duration of 28800
10-22: 09:15:48:934:928 Received Phase 1 Transform 3
10-22: 09:15:48:934:928 Encryption Alg Triple DES CBC(5)
10-22: 09:15:48:934:928 Hash Alg MD5(1)
10-22: 09:15:48:934:928 Oakley Group 2
10-22: 09:15:48:934:928 Auth Method Preshared Key(1)
10-22: 09:15:48:934:928 Life type in Seconds
10-22: 09:15:48:934:928 Life duration of 28800
10-22: 09:15:48:934:928 Received Phase 1 Transform 4
10-22: 09:15:48:934:928 Encryption Alg DES CBC(1)
10-22: 09:15:48:934:928 Hash Alg SHA(2)
10-22: 09:15:48:934:928 Oakley Group 1
10-22: 09:15:48:934:928 Auth Method Preshared Key(1)
10-22: 09:15:48:934:928 Life type in Seconds
10-22: 09:15:48:934:928 Life duration of 28800
10-22: 09:15:48:934:928 Received Phase 1 Transform 5
10-22: 09:15:48:934:928 Encryption Alg DES CBC(1)
10-22: 09:15:48:934:928 Hash Alg MD5(1)
10-22: 09:15:48:934:928 Oakley Group 1
10-22: 09:15:48:934:928 Auth Method Preshared Key(1)
10-22: 09:15:48:934:928 Life type in Seconds
10-22: 09:15:48:934:928 Life duration of 28800
10-22: 09:15:48:934:928 Phase 1 SA accepted: transform=2
10-22: 09:15:48:934:928 SA - Oakley proposal accepted
10-22: 09:15:48:934:928 processing payload VENDOR ID
10-22: 09:15:48:934:928 Received VendorId MS NT5 ISAKMPOAKLEY
10-22: 09:15:48:934:928 processing payload VENDOR ID
10-22: 09:15:48:934:928 Received VendorId FRAGMENTATION
10-22: 09:15:48:934:928 processing payload VENDOR ID
10-22: 09:15:48:934:928 Received VendorId draft-ietf-ipsec-nat-t-ike-02
10-22: 09:15:48:934:928 processing payload VENDOR ID
10-22: 09:15:48:934:928 Received VendorId Vid-Initial-Contact
10-22: 09:15:48:934:928 ClearFragList
10-22: 09:15:48:934:928 constructing ISAKMP Header
10-22: 09:15:48:934:928 constructing SA (ISAKMP)
10-22: 09:15:48:934:928 Constructing Vendor MS NT5 ISAKMPOAKLEY
10-22: 09:15:48:934:928 Constructing Vendor FRAGMENTATION
10-22: 09:15:48:934:928 Constructing Vendor draft-ietf-ipsec-nat-t-ike-02
10-22: 09:15:48:934:928
10-22: 09:15:48:934:928 Sending: SA = 0x0168EC38 to 192.168.20.5:Type 2.500
10-22: 09:15:48:934:928 ISAKMP Header: (V1.0), len = 148
10-22: 09:15:48:934:928 I-COOKIE 278751fe38b55406
10-22: 09:15:48:934:928 R-COOKIE ad41c6d78d1824e6
10-22: 09:15:48:934:928 exchange: Oakley Main Mode
10-22: 09:15:48:934:928 flags: 0
10-22: 09:15:48:934:928 next payload: SA
10-22: 09:15:48:934:928 message ID: 00000000
10-22: 09:15:48:934:928 Ports S:f401 D:f401
10-22: 09:15:49:64:928
10-22: 09:15:49:64:928 Receive: (get) SA = 0x0168ec38 from 192.168.20.5.500
10-22: 09:15:49:64:928 ISAKMP Header: (V1.0), len = 232
10-22: 09:15:49:64:928 I-COOKIE 278751fe38b55406
10-22: 09:15:49:64:928 R-COOKIE ad41c6d78d1824e6
10-22: 09:15:49:64:928 exchange: Oakley Main Mode
10-22: 09:15:49:64:928 flags: 0
10-22: 09:15:49:64:928 next payload: KE
10-22: 09:15:49:64:928 message ID: 00000000
10-22: 09:15:49:64:928 processing payload KE
10-22: 09:15:49:134:928 processing payload NONCE
10-22: 09:15:49:134:928 processing payload NATDISC
10-22: 09:15:49:134:928 Processing NatHash
10-22: 09:15:49:134:928 Nat hash e5cceefe086d0572cfe1be2a16e784bc
10-22: 09:15:49:134:928 cdc92c58
10-22: 09:15:49:134:928 SA StateMask2 e
10-22: 09:15:49:134:928 processing payload NATDISC
10-22: 09:15:49:134:928 Processing NatHash
10-22: 09:15:49:134:928 Nat hash 3baf5bc05a3da72e4237a610770151a5
10-22: 09:15:49:134:928 da0ec014
10-22: 09:15:49:134:928 SA StateMask2 8e
10-22: 09:15:49:134:928 ClearFragList
10-22: 09:15:49:134:928 constructing ISAKMP Header
10-22: 09:15:49:134:928 constructing KE
10-22: 09:15:49:134:928 constructing NONCE (ISAKMP)
10-22: 09:15:49:134:928 Constructing NatDisc
10-22: 09:15:49:134:928
10-22: 09:15:49:134:928 Sending: SA = 0x0168EC38 to 192.168.20.5:Type 2.500
10-22: 09:15:49:134:928 ISAKMP Header: (V1.0), len = 232
10-22: 09:15:49:134:928 I-COOKIE 278751fe38b55406
10-22: 09:15:49:134:928 R-COOKIE ad41c6d78d1824e6
10-22: 09:15:49:134:928 exchange: Oakley Main Mode
10-22: 09:15:49:134:928 flags: 0
10-22: 09:15:49:134:928 next payload: KE
10-22: 09:15:49:134:928 message ID: 00000000
10-22: 09:15:49:134:928 Ports S:f401 D:f401
10-22: 09:15:49:174:928
10-22: 09:15:49:174:928 Receive: (get) SA = 0x0168ec38 from 192.168.20.5.500
10-22: 09:15:49:174:928 ISAKMP Header: (V1.0), len = 68
10-22: 09:15:49:174:928 I-COOKIE 278751fe38b55406
10-22: 09:15:49:174:928 R-COOKIE ad41c6d78d1824e6
10-22: 09:15:49:174:928 exchange: Oakley Main Mode
10-22: 09:15:49:174:928 flags: 1 ( encrypted )
10-22: 09:15:49:174:928 next payload: ID
10-22: 09:15:49:174:928 message ID: 00000000
10-22: 09:15:49:174:928 processing payload ID
10-22: 09:15:49:174:928 processing payload HASH
10-22: 09:15:49:174:928 AUTH: Phase I authentication accepted
10-22: 09:15:49:174:928 ClearFragList
10-22: 09:15:49:174:928 constructing ISAKMP Header
10-22: 09:15:49:174:928 constructing ID
10-22: 09:15:49:174:928 MM ID Type 1
10-22: 09:15:49:174:928 MM ID c0a81464
10-22: 09:15:49:174:928 constructing HASH
10-22: 09:15:49:174:928 MM established. SA: 0168EC38
10-22: 09:15:49:174:928
10-22: 09:15:49:174:928 Sending: SA = 0x0168EC38 to 192.168.20.5:Type 2.500
10-22: 09:15:49:174:928 ISAKMP Header: (V1.0), len = 68
10-22: 09:15:49:174:928 I-COOKIE 278751fe38b55406
10-22: 09:15:49:174:928 R-COOKIE ad41c6d78d1824e6
10-22: 09:15:49:174:928 exchange: Oakley Main Mode
10-22: 09:15:49:174:928 flags: 1 ( encrypted )
10-22: 09:15:49:174:928 next payload: ID
10-22: 09:15:49:174:928 message ID: 00000000
10-22: 09:15:49:174:928 Ports S:f401 D:f401
10-22: 09:15:49:184:928
10-22: 09:15:49:184:928 Receive: (get) SA = 0x0168ec38 from 192.168.20.5.500
10-22: 09:15:49:184:928 ISAKMP Header: (V1.0), len = 1116
10-22: 09:15:49:184:928 I-COOKIE 278751fe38b55406
10-22: 09:15:49:184:928 R-COOKIE ad41c6d78d1824e6
10-22: 09:15:49:184:928 exchange: Oakley Quick Mode
10-22: 09:15:49:184:928 flags: 1 ( encrypted )
10-22: 09:15:49:184:928 next payload: HASH
10-22: 09:15:49:184:928 message ID: 09024485
10-22: 09:15:49:184:928 processing HASH (QM)
10-22: 09:15:49:184:928 ClearFragList
10-22: 09:15:49:184:928 processing payload NONCE
10-22: 09:15:49:184:928 processing payload ID
10-22: 09:15:49:184:928 processing payload ID
10-22: 09:15:49:184:928 processing payload SA
10-22: 09:15:49:184:928 Negotiated Proxy ID: Src 192.168.20.5.1701 Dst 192.168.20.100.1701
10-22: 09:15:49:184:928 Checking Proposal 1: Proto= ESP(3), num trans=2 Next=2
10-22: 09:15:49:184:928 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:15:49:184:928 SA life type in seconds
10-22: 09:15:49:184:928 SA life duration 00000e10
10-22: 09:15:49:184:928 SA life type in kilobytes
10-22: 09:15:49:184:928 SA life duration 0003d090
10-22: 09:15:49:184:928 tunnel mode is Transport Mode(2)
10-22: 09:15:49:184:928 HMAC algorithm is MD5(1)
10-22: 09:15:49:184:928 Checking Transform # 2: ID=Triple DES CBC(3)
10-22: 09:15:49:184:928 SA life type in seconds
10-22: 09:15:49:184:928 SA life duration 00000e10
10-22: 09:15:49:184:928 SA life type in kilobytes
10-22: 09:15:49:184:928 SA life duration 0003d090
10-22: 09:15:49:184:928 tunnel mode is Transport Mode(2)
10-22: 09:15:49:184:928 HMAC algorithm is SHA(2)
10-22: 09:15:49:184:928 Checking Proposal 2: Proto= AH(2), num trans=1 Next=2
10-22: 09:15:49:184:928 Checking Transform # 1: ID=SHA(3)
10-22: 09:15:49:184:928 SA life type in seconds
10-22: 09:15:49:184:928 SA life duration 00000e10
10-22: 09:15:49:184:928 SA life type in kilobytes
10-22: 09:15:49:184:928 SA life duration 0003d090
10-22: 09:15:49:184:928 tunnel mode is Transport Mode(2)
10-22: 09:15:49:184:928 HMAC algorithm is SHA(2)
10-22: 09:15:49:184:928 Checking Proposal 2: Proto= ESP(3), num trans=1 Next=2
10-22: 09:15:49:184:928 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:15:49:184:928 SA life type in seconds
10-22: 09:15:49:184:928 SA life duration 00000e10
10-22: 09:15:49:184:928 SA life type in kilobytes
10-22: 09:15:49:184:928 SA life duration 0003d090
10-22: 09:15:49:184:928 tunnel mode is Transport Mode(2)
10-22: 09:15:49:184:928 Checking Proposal 3: Proto= AH(2), num trans=1 Next=2
10-22: 09:15:49:184:928 Checking Transform # 1: ID=MD5(2)
10-22: 09:15:49:184:928 SA life type in seconds
10-22: 09:15:49:184:928 SA life duration 00000e10
10-22: 09:15:49:184:928 SA life type in kilobytes
10-22: 09:15:49:184:928 SA life duration 0003d090
10-22: 09:15:49:184:928 tunnel mode is Transport Mode(2)
10-22: 09:15:49:184:928 HMAC algorithm is MD5(1)
10-22: 09:15:49:184:928 Checking Proposal 3: Proto= ESP(3), num trans=1 Next=2
10-22: 09:15:49:184:928 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:15:49:184:928 SA life type in seconds
10-22: 09:15:49:184:928 SA life duration 00000e10
10-22: 09:15:49:184:928 SA life type in kilobytes
10-22: 09:15:49:184:928 SA life duration 0003d090
10-22: 09:15:49:184:928 tunnel mode is Transport Mode(2)
10-22: 09:15:49:184:928 Checking Proposal 4: Proto= AH(2), num trans=1 Next=2
10-22: 09:15:49:184:928 Checking Transform # 1: ID=SHA(3)
10-22: 09:15:49:184:928 SA life type in seconds
10-22: 09:15:49:184:928 SA life duration 00000e10
10-22: 09:15:49:184:928 SA life type in kilobytes
10-22: 09:15:49:184:928 SA life duration 0003d090
10-22: 09:15:49:184:928 tunnel mode is Transport Mode(2)
10-22: 09:15:49:184:928 HMAC algorithm is SHA(2)
10-22: 09:15:49:184:928 Checking Proposal 4: Proto= ESP(3), num trans=1 Next=2
10-22: 09:15:49:184:928 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:15:49:184:928 SA life type in seconds
10-22: 09:15:49:184:928 SA life duration 00000e10
10-22: 09:15:49:184:928 SA life type in kilobytes
10-22: 09:15:49:184:928 SA life duration 0003d090
10-22: 09:15:49:184:928 tunnel mode is Transport Mode(2)
10-22: 09:15:49:184:928 HMAC algorithm is SHA(2)
10-22: 09:15:49:184:928 Checking Proposal 5: Proto= AH(2), num trans=1 Next=2
10-22: 09:15:49:184:928 Checking Transform # 1: ID=MD5(2)
10-22: 09:15:49:184:928 SA life type in seconds
10-22: 09:15:49:184:928 SA life duration 00000e10
10-22: 09:15:49:184:928 SA life type in kilobytes
10-22: 09:15:49:184:928 SA life duration 0003d090
10-22: 09:15:49:184:928 tunnel mode is Transport Mode(2)
10-22: 09:15:49:184:928 HMAC algorithm is MD5(1)
10-22: 09:15:49:184:928 Checking Proposal 5: Proto= ESP(3), num trans=1 Next=2
10-22: 09:15:49:184:928 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:15:49:184:928 SA life type in seconds
10-22: 09:15:49:184:928 SA life duration 00000e10
10-22: 09:15:49:184:928 SA life type in kilobytes
10-22: 09:15:49:184:928 SA life duration 0003d090
10-22: 09:15:49:184:928 tunnel mode is Transport Mode(2)
10-22: 09:15:49:184:928 HMAC algorithm is MD5(1)
10-22: 09:15:49:184:928 Checking Proposal 6: Proto= ESP(3), num trans=2 Next=2
10-22: 09:15:49:184:928 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:15:49:184:928 SA life type in seconds
10-22: 09:15:49:184:928 SA life duration 00000e10
10-22: 09:15:49:184:928 SA life type in kilobytes
10-22: 09:15:49:184:928 SA life duration 0003d090
10-22: 09:15:49:184:928 tunnel mode is Transport Mode(2)
10-22: 09:15:49:184:928 HMAC algorithm is MD5(1)
10-22: 09:15:49:184:928 Checking Transform # 2: ID=DES CBC(2)
10-22: 09:15:49:184:928 SA life type in seconds
10-22: 09:15:49:184:928 SA life duration 00000e10
10-22: 09:15:49:184:928 SA life type in kilobytes
10-22: 09:15:49:184:928 SA life duration 0003d090
10-22: 09:15:49:184:928 tunnel mode is Transport Mode(2)
10-22: 09:15:49:184:928 HMAC algorithm is SHA(2)
10-22: 09:15:49:184:928 Checking Proposal 7: Proto= AH(2), num trans=1 Next=2
10-22: 09:15:49:184:928 Checking Transform # 1: ID=SHA(3)
10-22: 09:15:49:184:928 SA life type in seconds
10-22: 09:15:49:184:928 SA life duration 00000e10
10-22: 09:15:49:184:928 SA life type in kilobytes
10-22: 09:15:49:184:928 SA life duration 0003d090
10-22: 09:15:49:184:928 tunnel mode is Transport Mode(2)
10-22: 09:15:49:184:928 HMAC algorithm is SHA(2)
10-22: 09:15:49:184:928 Checking Proposal 7: Proto= ESP(3), num trans=1 Next=2
10-22: 09:15:49:184:928 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:15:49:184:928 SA life type in seconds
10-22: 09:15:49:184:928 SA life duration 00000e10
10-22: 09:15:49:184:928 SA life type in kilobytes
10-22: 09:15:49:184:928 SA life duration 0003d090
10-22: 09:15:49:184:928 tunnel mode is Transport Mode(2)
10-22: 09:15:49:184:928 Checking Proposal 8: Proto= AH(2), num trans=1 Next=2
10-22: 09:15:49:184:928 Checking Transform # 1: ID=MD5(2)
10-22: 09:15:49:184:928 SA life type in seconds
10-22: 09:15:49:184:928 SA life duration 00000e10
10-22: 09:15:49:184:928 SA life type in kilobytes
10-22: 09:15:49:184:928 SA life duration 0003d090
10-22: 09:15:49:184:928 tunnel mode is Transport Mode(2)
10-22: 09:15:49:184:928 HMAC algorithm is MD5(1)
10-22: 09:15:49:184:928 Checking Proposal 8: Proto= ESP(3), num trans=1 Next=2
10-22: 09:15:49:184:928 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:15:49:184:928 SA life type in seconds
10-22: 09:15:49:184:928 SA life duration 00000e10
10-22: 09:15:49:184:928 SA life type in kilobytes
10-22: 09:15:49:184:928 SA life duration 0003d090
10-22: 09:15:49:184:928 tunnel mode is Transport Mode(2)
10-22: 09:15:49:184:928 Checking Proposal 9: Proto= AH(2), num trans=1 Next=2
10-22: 09:15:49:184:928 Checking Transform # 1: ID=SHA(3)
10-22: 09:15:49:184:928 SA life type in seconds
10-22: 09:15:49:184:928 SA life duration 00000e10
10-22: 09:15:49:184:928 SA life type in kilobytes
10-22: 09:15:49:184:928 SA life duration 0003d090
10-22: 09:15:49:184:928 tunnel mode is Transport Mode(2)
10-22: 09:15:49:184:928 HMAC algorithm is SHA(2)
10-22: 09:15:49:184:928 Checking Proposal 9: Proto= ESP(3), num trans=1 Next=2
10-22: 09:15:49:184:928 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:15:49:184:928 SA life type in seconds
10-22: 09:15:49:184:928 SA life duration 00000e10
10-22: 09:15:49:184:928 SA life type in kilobytes
10-22: 09:15:49:184:928 SA life duration 0003d090
10-22: 09:15:49:184:928 tunnel mode is Transport Mode(2)
10-22: 09:15:49:184:928 HMAC algorithm is SHA(2)
10-22: 09:15:49:184:928 Checking Proposal 10: Proto= AH(2), num trans=1 Next=2
10-22: 09:15:49:204:928 Checking Transform # 1: ID=MD5(2)
10-22: 09:15:49:204:928 SA life type in seconds
10-22: 09:15:49:204:928 SA life duration 00000e10
10-22: 09:15:49:204:928 SA life type in kilobytes
10-22: 09:15:49:204:928 SA life duration 0003d090
10-22: 09:15:49:204:928 tunnel mode is Transport Mode(2)
10-22: 09:15:49:204:928 HMAC algorithm is MD5(1)
10-22: 09:15:49:204:928 Checking Proposal 10: Proto= ESP(3), num trans=1 Next=0
10-22: 09:15:49:204:928 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:15:49:204:928 SA life type in seconds
10-22: 09:15:49:204:928 SA life duration 00000e10
10-22: 09:15:49:204:928 SA life type in kilobytes
10-22: 09:15:49:204:928 SA life duration 0003d090
10-22: 09:15:49:204:928 tunnel mode is Transport Mode(2)
10-22: 09:15:49:204:928 HMAC algorithm is MD5(1)
10-22: 09:15:49:204:928 Finding Responder Policy for SRC=192.168.20.5.1701 DST=192.168.20.100.1701, SRCMask=255.255.255.255, DSTMask=255.255.255.255, Prot=17 InTunnelEndpt 0 OutTunnelEndpt 0
10-22: 09:15:49:204:928 QM PolicyName: L2TP Optional Encryption Quick Mode Policy dwFlags 0
10-22: 09:15:49:204:928 QMOffer[0] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:15:49:204:928 QMOffer[0] dwFlags 0 dwPFSGroup 0
10-22: 09:15:49:204:928 Algo[0] Operation: ESP Algo: Triple DES CBC HMAC: MD5
10-22: 09:15:49:204:928 QMOffer[1] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:15:49:204:928 QMOffer[1] dwFlags 0 dwPFSGroup 0
10-22: 09:15:49:204:928 Algo[0] Operation: ESP Algo: Triple DES CBC HMAC: SHA
10-22: 09:15:49:204:928 QMOffer[2] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:15:49:204:928 QMOffer[2] dwFlags 0 dwPFSGroup 0
10-22: 09:15:49:204:928 Algo[0] Operation: AH Algo: SHA
10-22: 09:15:49:204:928 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: 0
10-22: 09:15:49:204:928 QMOffer[3] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:15:49:204:928 QMOffer[3] dwFlags 0 dwPFSGroup 0
10-22: 09:15:49:204:928 Algo[0] Operation: AH Algo: MD5
10-22: 09:15:49:204:928 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: 0
10-22: 09:15:49:204:928 QMOffer[4] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:15:49:204:928 QMOffer[4] dwFlags 0 dwPFSGroup 0
10-22: 09:15:49:204:928 Algo[0] Operation: AH Algo: SHA
10-22: 09:15:49:204:928 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: SHA
10-22: 09:15:49:204:928 QMOffer[5] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:15:49:204:928 QMOffer[5] dwFlags 0 dwPFSGroup 0
10-22: 09:15:49:204:928 Algo[0] Operation: AH Algo: MD5
10-22: 09:15:49:204:928 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: MD5
10-22: 09:15:49:204:928 QMOffer[6] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:15:49:204:928 QMOffer[6] dwFlags 0 dwPFSGroup 0
10-22: 09:15:49:204:928 Algo[0] Operation: ESP Algo: DES CBC HMAC: MD5
10-22: 09:15:49:204:928 QMOffer[7] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:15:49:204:928 QMOffer[7] dwFlags 0 dwPFSGroup 0
10-22: 09:15:49:204:928 Algo[0] Operation: ESP Algo: DES CBC HMAC: SHA
10-22: 09:15:49:204:928 QMOffer[8] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:15:49:204:928 QMOffer[8] dwFlags 0 dwPFSGroup 0
10-22: 09:15:49:204:928 Algo[0] Operation: AH Algo: SHA
10-22: 09:15:49:204:928 Algo[1] Operation: ESP Algo: DES CBC HMAC: 0
10-22: 09:15:49:204:928 QMOffer[9] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:15:49:204:928 QMOffer[9] dwFlags 0 dwPFSGroup 0
10-22: 09:15:49:204:928 Algo[0] Operation: AH Algo: MD5
10-22: 09:15:49:204:928 Algo[1] Operation: ESP Algo: DES CBC HMAC: 0
10-22: 09:15:49:204:928 QMOffer[10] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:15:49:204:928 QMOffer[10] dwFlags 0 dwPFSGroup 0
10-22: 09:15:49:204:928 Algo[0] Operation: AH Algo: SHA
10-22: 09:15:49:204:928 Algo[1] Operation: ESP Algo: DES CBC HMAC: SHA
10-22: 09:15:49:204:928 QMOffer[11] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:15:49:204:928 QMOffer[11] dwFlags 0 dwPFSGroup 0
10-22: 09:15:49:204:928 Algo[0] Operation: AH Algo: MD5
10-22: 09:15:49:204:928 Algo[1] Operation: ESP Algo: DES CBC HMAC: MD5
10-22: 09:15:49:204:928 QMOffer[12] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:15:49:204:928 QMOffer[12] dwFlags 0 dwPFSGroup 0
10-22: 09:15:49:204:928 Algo[0] Operation: ESP Algo: NULL DES HMAC: SHA
10-22: 09:15:49:204:928 QMOffer[13] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:15:49:204:928 QMOffer[13] dwFlags 0 dwPFSGroup 0
10-22: 09:15:49:204:928 Algo[0] Operation: ESP Algo: NULL DES HMAC: MD5
10-22: 09:15:49:204:928 QMOffer[14] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:15:49:204:928 QMOffer[14] dwFlags 0 dwPFSGroup 0
10-22: 09:15:49:204:928 Algo[0] Operation: AH Algo: SHA
10-22: 09:15:49:204:928 QMOffer[15] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:15:49:204:928 QMOffer[15] dwFlags 0 dwPFSGroup 0
10-22: 09:15:49:204:928 Algo[0] Operation: AH Algo: MD5
10-22: 09:15:49:204:928 Phase 2 SA accepted: proposal=1 transform=1
10-22: 09:15:49:204:928 GetSpi: src = 192.168.20.5.1701, dst = 192.168.20.100.1701, proto = 17, context = 00000000, srcMask = 255.255.255.255, destMask = 255.255.255.255, TunnelFilter 0
10-22: 09:15:49:214:928 Setting SPI 2053270415
10-22: 09:15:49:214:928 constructing ISAKMP Header
10-22: 09:15:49:214:928 constructing HASH (null)
10-22: 09:15:49:214:928 constructing SA (IPSEC)
10-22: 09:15:49:214:928 constructing NONCE (IPSEC)
10-22: 09:15:49:214:928 constructing ID (proxy)
10-22: 09:15:49:214:928 constructing ID (proxy)
10-22: 09:15:49:214:928 constructing HASH (QM)
10-22: 09:15:49:214:928
10-22: 09:15:49:214:928 Sending: SA = 0x0168EC38 to 192.168.20.5:Type 2.500
10-22: 09:15:49:214:928 ISAKMP Header: (V1.0), len = 164
10-22: 09:15:49:214:928 I-COOKIE 278751fe38b55406
10-22: 09:15:49:214:928 R-COOKIE ad41c6d78d1824e6
10-22: 09:15:49:214:928 exchange: Oakley Quick Mode
10-22: 09:15:49:214:928 flags: 3 ( encrypted commit )
10-22: 09:15:49:214:928 next payload: HASH
10-22: 09:15:49:214:928 message ID: 09024485
10-22: 09:15:49:214:928 Ports S:f401 D:f401
10-22: 09:15:49:214:928
10-22: 09:15:49:214:928 Receive: (get) SA = 0x0168ec38 from 192.168.20.5.500
10-22: 09:15:49:214:928 ISAKMP Header: (V1.0), len = 52
10-22: 09:15:49:214:928 I-COOKIE 278751fe38b55406
10-22: 09:15:49:214:928 R-COOKIE ad41c6d78d1824e6
10-22: 09:15:49:214:928 exchange: Oakley Quick Mode
10-22: 09:15:49:214:928 flags: 3 ( encrypted commit )
10-22: 09:15:49:214:928 next payload: HASH
10-22: 09:15:49:214:928 message ID: 09024485
10-22: 09:15:49:214:928 processing HASH (QM)
10-22: 09:15:49:214:928 ClearFragList
10-22: 09:15:49:214:928 Adding QMs: src = 192.168.20.100.1701, dst = 192.168.20.5.1701, proto = 17, context = 00000007, my tunnel = 0.0.0.0, peer tunnel = 0.0.0.0, SrcMask = 0.0.0.0, DestMask = 0.0.0.0 Lifetime = 3600 LifetimeKBytes 250000 dwFlags 0 Direction 1 EncapType 1
10-22: 09:15:49:214:928 Algo[0] Operation: ESP Algo: Triple DES CBC HMAC: MD5
10-22: 09:15:49:214:928 Algo[0] MySpi: 2053270415 PeerSpi: 2719489645
10-22: 09:15:49:214:928 Encap Ports Src 500 Dst 500
10-22: 09:15:49:214:928 isadb_set_status sa:0168EC38 centry:016BA658 status 0
10-22: 09:15:49:214:928 Constructing Commit Notify
10-22: 09:15:49:214:928 constructing ISAKMP Header
10-22: 09:15:49:214:928 constructing HASH (null)
10-22: 09:15:49:214:928 constructing NOTIFY 16384
10-22: 09:15:49:214:928 constructing HASH (QM)
10-22: 09:15:49:214:928
10-22: 09:15:49:214:928 Sending: SA = 0x0168EC38 to 192.168.20.5:Type 4.500
10-22: 09:15:49:214:928 ISAKMP Header: (V1.0), len = 84
10-22: 09:15:49:214:928 I-COOKIE 278751fe38b55406
10-22: 09:15:49:214:928 R-COOKIE ad41c6d78d1824e6
10-22: 09:15:49:214:928 exchange: Oakley Quick Mode
10-22: 09:15:49:214:928 flags: 3 ( encrypted commit )
10-22: 09:15:49:214:928 next payload: HASH
10-22: 09:15:49:214:928 message ID: 09024485
10-22: 09:15:49:214:928 Ports S:f401 D:f401
10-22: 09:16:24:259:938
10-22: 09:16:24:259:938 Receive: (get) SA = 0x0168ec38 from 192.168.20.5.500
10-22: 09:16:24:259:938 ISAKMP Header: (V1.0), len = 92
10-22: 09:16:24:259:938 I-COOKIE 278751fe38b55406
10-22: 09:16:24:259:938 R-COOKIE ad41c6d78d1824e6
10-22: 09:16:24:259:938 exchange: ISAKMP Informational Exchange
10-22: 09:16:24:259:938 flags: 1 ( encrypted )
10-22: 09:16:24:259:938 next payload: HASH
10-22: 09:16:24:259:938 message ID: e1e84e01
10-22: 09:16:24:259:938 processing HASH (Notify/Delete)
10-22: 09:16:24:259:938 processing payload NONCE
10-22: 09:16:24:259:938 processing payload DELETE
10-22: 09:16:24:259:938 Expiring SPI 2053270415 src 514a8c0 dst 6414a8c0
10-22: 09:16:24:259:938 Received reliable Notify. Messid e1e84e01
10-22: 09:16:24:259:938 constructing ISAKMP Header
10-22: 09:16:24:259:938 constructing HASH (null)
10-22: 09:16:24:259:938 constructing NONCE (ND)
10-22: 09:16:24:259:938 constructing HASH (Notify/Delete)
10-22: 09:16:24:259:938
10-22: 09:16:24:259:938 Sending: SA = 0x0168EC38 to 192.168.20.5:Type 1.500
10-22: 09:16:24:259:938 ISAKMP Header: (V1.0), len = 92
10-22: 09:16:24:259:938 I-COOKIE 278751fe38b55406
10-22: 09:16:24:259:938 R-COOKIE ad41c6d78d1824e6
10-22: 09:16:24:259:938 exchange: ISAKMP Informational Exchange
10-22: 09:16:24:259:938 flags: 1 ( encrypted )
10-22: 09:16:24:259:938 next payload: HASH
10-22: 09:16:24:259:938 message ID: e1e84e01
10-22: 09:16:24:259:938 Ports S:f401 D:f401
10-22: 09:16:24:269:938
10-22: 09:16:24:269:938 Receive: (get) SA = 0x0168ec38 from 192.168.20.5.500
10-22: 09:16:24:269:938 ISAKMP Header: (V1.0), len = 108
10-22: 09:16:24:269:938 I-COOKIE 278751fe38b55406
10-22: 09:16:24:269:938 R-COOKIE ad41c6d78d1824e6
10-22: 09:16:24:269:938 exchange: ISAKMP Informational Exchange
10-22: 09:16:24:269:938 flags: 1 ( encrypted )
10-22: 09:16:24:269:938 next payload: HASH
10-22: 09:16:24:269:938 message ID: 00853ac0
10-22: 09:16:24:269:938 processing HASH (Notify/Delete)
10-22: 09:16:24:269:938 processing payload NONCE
10-22: 09:16:24:269:938 processing payload DELETE
10-22: 09:16:24:269:938 SA Dead. sa:0168EC38 status:35ef
10-22: 09:16:24:269:938 isadb_set_status sa:0168EC38 centry:00000000 status 35ef
10-22: 09:16:24:269:938 Received reliable Notify. Messid 853ac0
10-22: 09:16:24:269:938 constructing ISAKMP Header
10-22: 09:16:24:269:938 constructing HASH (null)
10-22: 09:16:24:269:938 constructing NONCE (ND)
10-22: 09:16:24:269:938 constructing HASH (Notify/Delete)
10-22: 09:16:24:269:938
10-22: 09:16:24:269:938 Sending: SA = 0x0168EC38 to 192.168.20.5:Type 1.500
10-22: 09:16:24:269:938 ISAKMP Header: (V1.0), len = 108
10-22: 09:16:24:269:938 I-COOKIE 278751fe38b55406
10-22: 09:16:24:269:938 R-COOKIE ad41c6d78d1824e6
10-22: 09:16:24:269:938 exchange: ISAKMP Informational Exchange
10-22: 09:16:24:269:938 flags: 1 ( encrypted )
10-22: 09:16:24:269:938 next payload: HASH
10-22: 09:16:24:269:938 message ID: 00853ac0
10-22: 09:16:24:269:938 Ports S:f401 D:f401
10-22: 09:16:24:269:938 QM Deleted. Notify from driver: Src 192.168.20.100 Dest 192.168.20.5 InSPI 2053270415 OutSpi 2719489645 Tunnel 0 TunnelFilter 0
10-22: 09:16:24:269:938 PrivatePeerAddr 0
10-22: 09:16:27:263:938 ClearFragList
10-22: 09:17:34:968:948
10-22: 09:17:34:968:948 Receive: (get) SA = 0x00000000 from 192.168.20.5.500
10-22: 09:17:34:968:948 ISAKMP Header: (V1.0), len = 312
10-22: 09:17:34:968:948 I-COOKIE 4b2bf901251bd40d
10-22: 09:17:34:968:948 R-COOKIE 0000000000000000
10-22: 09:17:34:968:948 exchange: Oakley Main Mode
10-22: 09:17:34:968:948 flags: 0
10-22: 09:17:34:968:948 next payload: SA
10-22: 09:17:34:968:948 message ID: 00000000
10-22: 09:17:34:968:948 Filter to match: Src 192.168.20.5 Dst 192.168.20.100
10-22: 09:17:34:968:948 MM PolicyName: L2TP Main Mode Policy
10-22: 09:17:34:968:948 MMPolicy dwFlags 0 SoftSAExpireTime 28800
10-22: 09:17:34:968:948 MMOffer[0] LifetimeSec 28800 QMLimit 0 DHGroup 2
10-22: 09:17:34:968:948 MMOffer[0] Encrypt: Triple DES CBC Hash: SHA
10-22: 09:17:34:968:948 MMOffer[1] LifetimeSec 28800 QMLimit 0 DHGroup 2
10-22: 09:17:34:968:948 MMOffer[1] Encrypt: Triple DES CBC Hash: MD5
10-22: 09:17:34:968:948 MMOffer[2] LifetimeSec 28800 QMLimit 0 DHGroup 1
10-22: 09:17:34:968:948 MMOffer[2] Encrypt: DES CBC Hash: SHA
10-22: 09:17:34:968:948 MMOffer[3] LifetimeSec 28800 QMLimit 0 DHGroup 1
10-22: 09:17:34:968:948 MMOffer[3] Encrypt: DES CBC Hash: MD5
10-22: 09:17:34:968:948 Auth[0]:RSA Sig C=US, CN=Root CA AuthFlags 0
10-22: 09:17:34:968:948 Auth[1]:PresharedKey KeyLen 6
10-22: 09:17:34:968:948 Responding with new SA 168ec38
10-22: 09:17:34:968:948 processing payload SA
10-22: 09:17:34:968:948 Received Phase 1 Transform 1
10-22: 09:17:34:968:948 Encryption Alg Triple DES CBC(5)
10-22: 09:17:34:968:948 Hash Alg SHA(2)
10-22: 09:17:34:968:948 Oakley Group 14
10-22: 09:17:34:968:948 Auth Method Preshared Key(1)
10-22: 09:17:34:968:948 Life type in Seconds
10-22: 09:17:34:968:948 Life duration of 28800
10-22: 09:17:34:968:948 Received Phase 1 Transform 2
10-22: 09:17:34:968:948 Encryption Alg Triple DES CBC(5)
10-22: 09:17:34:968:948 Hash Alg SHA(2)
10-22: 09:17:34:968:948 Oakley Group 2
10-22: 09:17:34:968:948 Auth Method Preshared Key(1)
10-22: 09:17:34:968:948 Life type in Seconds
10-22: 09:17:34:968:948 Life duration of 28800
10-22: 09:17:34:968:948 Received Phase 1 Transform 3
10-22: 09:17:34:968:948 Encryption Alg Triple DES CBC(5)
10-22: 09:17:34:968:948 Hash Alg MD5(1)
10-22: 09:17:34:968:948 Oakley Group 2
10-22: 09:17:34:968:948 Auth Method Preshared Key(1)
10-22: 09:17:34:968:948 Life type in Seconds
10-22: 09:17:34:968:948 Life duration of 28800
10-22: 09:17:34:968:948 Received Phase 1 Transform 4
10-22: 09:17:34:968:948 Encryption Alg DES CBC(1)
10-22: 09:17:34:968:948 Hash Alg SHA(2)
10-22: 09:17:34:968:948 Oakley Group 1
10-22: 09:17:34:968:948 Auth Method Preshared Key(1)
10-22: 09:17:34:968:948 Life type in Seconds
10-22: 09:17:34:968:948 Life duration of 28800
10-22: 09:17:34:968:948 Received Phase 1 Transform 5
10-22: 09:17:34:968:948 Encryption Alg DES CBC(1)
10-22: 09:17:34:968:948 Hash Alg MD5(1)
10-22: 09:17:34:968:948 Oakley Group 1
10-22: 09:17:34:968:948 Auth Method Preshared Key(1)
10-22: 09:17:34:968:948 Life type in Seconds
10-22: 09:17:34:968:948 Life duration of 28800
10-22: 09:17:34:968:948 Phase 1 SA accepted: transform=2
10-22: 09:17:34:968:948 SA - Oakley proposal accepted
10-22: 09:17:34:968:948 processing payload VENDOR ID
10-22: 09:17:34:968:948 Received VendorId MS NT5 ISAKMPOAKLEY
10-22: 09:17:34:968:948 processing payload VENDOR ID
10-22: 09:17:34:968:948 Received VendorId FRAGMENTATION
10-22: 09:17:34:968:948 processing payload VENDOR ID
10-22: 09:17:34:968:948 Received VendorId draft-ietf-ipsec-nat-t-ike-02
10-22: 09:17:34:968:948 processing payload VENDOR ID
10-22: 09:17:34:968:948 Received VendorId Vid-Initial-Contact
10-22: 09:17:34:968:948 ClearFragList
10-22: 09:17:34:968:948 constructing ISAKMP Header
10-22: 09:17:34:968:948 constructing SA (ISAKMP)
10-22: 09:17:34:968:948 Constructing Vendor MS NT5 ISAKMPOAKLEY
10-22: 09:17:34:968:948 Constructing Vendor FRAGMENTATION
10-22: 09:17:34:968:948 Constructing Vendor draft-ietf-ipsec-nat-t-ike-02
10-22: 09:17:34:968:948
10-22: 09:17:34:968:948 Sending: SA = 0x0168EC38 to 192.168.20.5:Type 2.500
10-22: 09:17:34:968:948 ISAKMP Header: (V1.0), len = 148
10-22: 09:17:34:968:948 I-COOKIE 4b2bf901251bd40d
10-22: 09:17:34:968:948 R-COOKIE fd5586ba26ba3d0c
10-22: 09:17:34:968:948 exchange: Oakley Main Mode
10-22: 09:17:34:968:948 flags: 0
10-22: 09:17:34:968:948 next payload: SA
10-22: 09:17:34:968:948 message ID: 00000000
10-22: 09:17:34:968:948 Ports S:f401 D:f401
10-22: 09:17:35:88:948
10-22: 09:17:35:88:948 Receive: (get) SA = 0x0168ec38 from 192.168.20.5.500
10-22: 09:17:35:88:948 ISAKMP Header: (V1.0), len = 232
10-22: 09:17:35:88:948 I-COOKIE 4b2bf901251bd40d
10-22: 09:17:35:88:948 R-COOKIE fd5586ba26ba3d0c
10-22: 09:17:35:88:948 exchange: Oakley Main Mode
10-22: 09:17:35:88:948 flags: 0
10-22: 09:17:35:88:948 next payload: KE
10-22: 09:17:35:88:948 message ID: 00000000
10-22: 09:17:35:88:948 processing payload KE
10-22: 09:17:35:149:948 processing payload NONCE
10-22: 09:17:35:149:948 processing payload NATDISC
10-22: 09:17:35:149:948 Processing NatHash
10-22: 09:17:35:149:948 Nat hash 3dea2c3e27a0573d2747f799fb8b8c80
10-22: 09:17:35:149:948 3dbcf568
10-22: 09:17:35:149:948 SA StateMask2 e
10-22: 09:17:35:149:948 processing payload NATDISC
10-22: 09:17:35:149:948 Processing NatHash
10-22: 09:17:35:149:948 Nat hash 0d3a0fa97812035825fc5f607ba50e1e
10-22: 09:17:35:149:948 71095166
10-22: 09:17:35:149:948 SA StateMask2 8e
10-22: 09:17:35:149:948 ClearFragList
10-22: 09:17:35:149:948 constructing ISAKMP Header
10-22: 09:17:35:149:948 constructing KE
10-22: 09:17:35:149:948 constructing NONCE (ISAKMP)
10-22: 09:17:35:149:948 Constructing NatDisc
10-22: 09:17:35:149:948
10-22: 09:17:35:149:948 Sending: SA = 0x0168EC38 to 192.168.20.5:Type 2.500
10-22: 09:17:35:149:948 ISAKMP Header: (V1.0), len = 232
10-22: 09:17:35:159:948 I-COOKIE 4b2bf901251bd40d
10-22: 09:17:35:159:948 R-COOKIE fd5586ba26ba3d0c
10-22: 09:17:35:159:948 exchange: Oakley Main Mode
10-22: 09:17:35:159:948 flags: 0
10-22: 09:17:35:159:948 next payload: KE
10-22: 09:17:35:159:948 message ID: 00000000
10-22: 09:17:35:159:948 Ports S:f401 D:f401
10-22: 09:17:35:199:948
10-22: 09:17:35:199:948 Receive: (get) SA = 0x0168ec38 from 192.168.20.5.500
10-22: 09:17:35:199:948 ISAKMP Header: (V1.0), len = 68
10-22: 09:17:35:199:948 I-COOKIE 4b2bf901251bd40d
10-22: 09:17:35:199:948 R-COOKIE fd5586ba26ba3d0c
10-22: 09:17:35:199:948 exchange: Oakley Main Mode
10-22: 09:17:35:199:948 flags: 1 ( encrypted )
10-22: 09:17:35:199:948 next payload: ID
10-22: 09:17:35:199:948 message ID: 00000000
10-22: 09:17:35:199:948 processing payload ID
10-22: 09:17:35:199:948 processing payload HASH
10-22: 09:17:35:199:948 AUTH: Phase I authentication accepted
10-22: 09:17:35:199:948 ClearFragList
10-22: 09:17:35:199:948 constructing ISAKMP Header
10-22: 09:17:35:199:948 constructing ID
10-22: 09:17:35:199:948 MM ID Type 1
10-22: 09:17:35:199:948 MM ID c0a81464
10-22: 09:17:35:199:948 constructing HASH
10-22: 09:17:35:199:948 MM established. SA: 0168EC38
10-22: 09:17:35:199:948
10-22: 09:17:35:199:948 Sending: SA = 0x0168EC38 to 192.168.20.5:Type 2.500
10-22: 09:17:35:199:948 ISAKMP Header: (V1.0), len = 68
10-22: 09:17:35:199:948 I-COOKIE 4b2bf901251bd40d
10-22: 09:17:35:199:948 R-COOKIE fd5586ba26ba3d0c
10-22: 09:17:35:199:948 exchange: Oakley Main Mode
10-22: 09:17:35:199:948 flags: 1 ( encrypted )
10-22: 09:17:35:199:948 next payload: ID
10-22: 09:17:35:199:948 message ID: 00000000
10-22: 09:17:35:199:948 Ports S:f401 D:f401
10-22: 09:17:35:199:948
10-22: 09:17:35:199:948 Receive: (get) SA = 0x0168ec38 from 192.168.20.5.500
10-22: 09:17:35:199:948 ISAKMP Header: (V1.0), len = 1116
10-22: 09:17:35:199:948 I-COOKIE 4b2bf901251bd40d
10-22: 09:17:35:199:948 R-COOKIE fd5586ba26ba3d0c
10-22: 09:17:35:199:948 exchange: Oakley Quick Mode
10-22: 09:17:35:199:948 flags: 1 ( encrypted )
10-22: 09:17:35:199:948 next payload: HASH
10-22: 09:17:35:199:948 message ID: 2637bee2
10-22: 09:17:35:199:948 processing HASH (QM)
10-22: 09:17:35:199:948 ClearFragList
10-22: 09:17:35:199:948 processing payload NONCE
10-22: 09:17:35:199:948 processing payload ID
10-22: 09:17:35:199:948 processing payload ID
10-22: 09:17:35:199:948 processing payload SA
10-22: 09:17:35:199:948 Negotiated Proxy ID: Src 192.168.20.5.1701 Dst 192.168.20.100.1701
10-22: 09:17:35:199:948 Checking Proposal 1: Proto= ESP(3), num trans=2 Next=2
10-22: 09:17:35:199:948 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:17:35:199:948 SA life type in seconds
10-22: 09:17:35:199:948 SA life duration 00000e10
10-22: 09:17:35:199:948 SA life type in kilobytes
10-22: 09:17:35:199:948 SA life duration 0003d090
10-22: 09:17:35:199:948 tunnel mode is Transport Mode(2)
10-22: 09:17:35:199:948 HMAC algorithm is MD5(1)
10-22: 09:17:35:199:948 Checking Transform # 2: ID=Triple DES CBC(3)
10-22: 09:17:35:199:948 SA life type in seconds
10-22: 09:17:35:199:948 SA life duration 00000e10
10-22: 09:17:35:199:948 SA life type in kilobytes
10-22: 09:17:35:199:948 SA life duration 0003d090
10-22: 09:17:35:199:948 tunnel mode is Transport Mode(2)
10-22: 09:17:35:199:948 HMAC algorithm is SHA(2)
10-22: 09:17:35:199:948 Checking Proposal 2: Proto= AH(2), num trans=1 Next=2
10-22: 09:17:35:199:948 Checking Transform # 1: ID=SHA(3)
10-22: 09:17:35:199:948 SA life type in seconds
10-22: 09:17:35:199:948 SA life duration 00000e10
10-22: 09:17:35:199:948 SA life type in kilobytes
10-22: 09:17:35:199:948 SA life duration 0003d090
10-22: 09:17:35:199:948 tunnel mode is Transport Mode(2)
10-22: 09:17:35:199:948 HMAC algorithm is SHA(2)
10-22: 09:17:35:199:948 Checking Proposal 2: Proto= ESP(3), num trans=1 Next=2
10-22: 09:17:35:199:948 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:17:35:199:948 SA life type in seconds
10-22: 09:17:35:199:948 SA life duration 00000e10
10-22: 09:17:35:199:948 SA life type in kilobytes
10-22: 09:17:35:199:948 SA life duration 0003d090
10-22: 09:17:35:199:948 tunnel mode is Transport Mode(2)
10-22: 09:17:35:199:948 Checking Proposal 3: Proto= AH(2), num trans=1 Next=2
10-22: 09:17:35:199:948 Checking Transform # 1: ID=MD5(2)
10-22: 09:17:35:199:948 SA life type in seconds
10-22: 09:17:35:199:948 SA life duration 00000e10
10-22: 09:17:35:199:948 SA life type in kilobytes
10-22: 09:17:35:199:948 SA life duration 0003d090
10-22: 09:17:35:199:948 tunnel mode is Transport Mode(2)
10-22: 09:17:35:199:948 HMAC algorithm is MD5(1)
10-22: 09:17:35:199:948 Checking Proposal 3: Proto= ESP(3), num trans=1 Next=2
10-22: 09:17:35:199:948 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:17:35:199:948 SA life type in seconds
10-22: 09:17:35:199:948 SA life duration 00000e10
10-22: 09:17:35:199:948 SA life type in kilobytes
10-22: 09:17:35:199:948 SA life duration 0003d090
10-22: 09:17:35:199:948 tunnel mode is Transport Mode(2)
10-22: 09:17:35:199:948 Checking Proposal 4: Proto= AH(2), num trans=1 Next=2
10-22: 09:17:35:199:948 Checking Transform # 1: ID=SHA(3)
10-22: 09:17:35:199:948 SA life type in seconds
10-22: 09:17:35:199:948 SA life duration 00000e10
10-22: 09:17:35:199:948 SA life type in kilobytes
10-22: 09:17:35:199:948 SA life duration 0003d090
10-22: 09:17:35:199:948 tunnel mode is Transport Mode(2)
10-22: 09:17:35:199:948 HMAC algorithm is SHA(2)
10-22: 09:17:35:199:948 Checking Proposal 4: Proto= ESP(3), num trans=1 Next=2
10-22: 09:17:35:199:948 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:17:35:199:948 SA life type in seconds
10-22: 09:17:35:199:948 SA life duration 00000e10
10-22: 09:17:35:199:948 SA life type in kilobytes
10-22: 09:17:35:199:948 SA life duration 0003d090
10-22: 09:17:35:199:948 tunnel mode is Transport Mode(2)
10-22: 09:17:35:199:948 HMAC algorithm is SHA(2)
10-22: 09:17:35:199:948 Checking Proposal 5: Proto= AH(2), num trans=1 Next=2
10-22: 09:17:35:199:948 Checking Transform # 1: ID=MD5(2)
10-22: 09:17:35:199:948 SA life type in seconds
10-22: 09:17:35:199:948 SA life duration 00000e10
10-22: 09:17:35:199:948 SA life type in kilobytes
10-22: 09:17:35:199:948 SA life duration 0003d090
10-22: 09:17:35:199:948 tunnel mode is Transport Mode(2)
10-22: 09:17:35:199:948 HMAC algorithm is MD5(1)
10-22: 09:17:35:199:948 Checking Proposal 5: Proto= ESP(3), num trans=1 Next=2
10-22: 09:17:35:199:948 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:17:35:199:948 SA life type in seconds
10-22: 09:17:35:199:948 SA life duration 00000e10
10-22: 09:17:35:199:948 SA life type in kilobytes
10-22: 09:17:35:199:948 SA life duration 0003d090
10-22: 09:17:35:209:948 tunnel mode is Transport Mode(2)
10-22: 09:17:35:209:948 HMAC algorithm is MD5(1)
10-22: 09:17:35:209:948 Checking Proposal 6: Proto= ESP(3), num trans=2 Next=2
10-22: 09:17:35:209:948 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:17:35:209:948 SA life type in seconds
10-22: 09:17:35:209:948 SA life duration 00000e10
10-22: 09:17:35:209:948 SA life type in kilobytes
10-22: 09:17:35:209:948 SA life duration 0003d090
10-22: 09:17:35:209:948 tunnel mode is Transport Mode(2)
10-22: 09:17:35:209:948 HMAC algorithm is MD5(1)
10-22: 09:17:35:209:948 Checking Transform # 2: ID=DES CBC(2)
10-22: 09:17:35:209:948 SA life type in seconds
10-22: 09:17:35:209:948 SA life duration 00000e10
10-22: 09:17:35:209:948 SA life type in kilobytes
10-22: 09:17:35:209:948 SA life duration 0003d090
10-22: 09:17:35:209:948 tunnel mode is Transport Mode(2)
10-22: 09:17:35:209:948 HMAC algorithm is SHA(2)
10-22: 09:17:35:209:948 Checking Proposal 7: Proto= AH(2), num trans=1 Next=2
10-22: 09:17:35:209:948 Checking Transform # 1: ID=SHA(3)
10-22: 09:17:35:209:948 SA life type in seconds
10-22: 09:17:35:209:948 SA life duration 00000e10
10-22: 09:17:35:209:948 SA life type in kilobytes
10-22: 09:17:35:209:948 SA life duration 0003d090
10-22: 09:17:35:209:948 tunnel mode is Transport Mode(2)
10-22: 09:17:35:209:948 HMAC algorithm is SHA(2)
10-22: 09:17:35:209:948 Checking Proposal 7: Proto= ESP(3), num trans=1 Next=2
10-22: 09:17:35:209:948 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:17:35:209:948 SA life type in seconds
10-22: 09:17:35:209:948 SA life duration 00000e10
10-22: 09:17:35:209:948 SA life type in kilobytes
10-22: 09:17:35:209:948 SA life duration 0003d090
10-22: 09:17:35:209:948 tunnel mode is Transport Mode(2)
10-22: 09:17:35:209:948 Checking Proposal 8: Proto= AH(2), num trans=1 Next=2
10-22: 09:17:35:209:948 Checking Transform # 1: ID=MD5(2)
10-22: 09:17:35:209:948 SA life type in seconds
10-22: 09:17:35:209:948 SA life duration 00000e10
10-22: 09:17:35:209:948 SA life type in kilobytes
10-22: 09:17:35:209:948 SA life duration 0003d090
10-22: 09:17:35:209:948 tunnel mode is Transport Mode(2)
10-22: 09:17:35:209:948 HMAC algorithm is MD5(1)
10-22: 09:17:35:209:948 Checking Proposal 8: Proto= ESP(3), num trans=1 Next=2
10-22: 09:17:35:209:948 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:17:35:209:948 SA life type in seconds
10-22: 09:17:35:209:948 SA life duration 00000e10
10-22: 09:17:35:209:948 SA life type in kilobytes
10-22: 09:17:35:209:948 SA life duration 0003d090
10-22: 09:17:35:209:948 tunnel mode is Transport Mode(2)
10-22: 09:17:35:209:948 Checking Proposal 9: Proto= AH(2), num trans=1 Next=2
10-22: 09:17:35:209:948 Checking Transform # 1: ID=SHA(3)
10-22: 09:17:35:209:948 SA life type in seconds
10-22: 09:17:35:209:948 SA life duration 00000e10
10-22: 09:17:35:209:948 SA life type in kilobytes
10-22: 09:17:35:209:948 SA life duration 0003d090
10-22: 09:17:35:209:948 tunnel mode is Transport Mode(2)
10-22: 09:17:35:209:948 HMAC algorithm is SHA(2)
10-22: 09:17:35:209:948 Checking Proposal 9: Proto= ESP(3), num trans=1 Next=2
10-22: 09:17:35:209:948 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:17:35:209:948 SA life type in seconds
10-22: 09:17:35:209:948 SA life duration 00000e10
10-22: 09:17:35:209:948 SA life type in kilobytes
10-22: 09:17:35:209:948 SA life duration 0003d090
10-22: 09:17:35:209:948 tunnel mode is Transport Mode(2)
10-22: 09:17:35:209:948 HMAC algorithm is SHA(2)
10-22: 09:17:35:209:948 Checking Proposal 10: Proto= AH(2), num trans=1 Next=2
10-22: 09:17:35:209:948 Checking Transform # 1: ID=MD5(2)
10-22: 09:17:35:209:948 SA life type in seconds
10-22: 09:17:35:209:948 SA life duration 00000e10
10-22: 09:17:35:209:948 SA life type in kilobytes
10-22: 09:17:35:209:948 SA life duration 0003d090
10-22: 09:17:35:209:948 tunnel mode is Transport Mode(2)
10-22: 09:17:35:209:948 HMAC algorithm is MD5(1)
10-22: 09:17:35:209:948 Checking Proposal 10: Proto= ESP(3), num trans=1 Next=0
10-22: 09:17:35:209:948 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:17:35:209:948 SA life type in seconds
10-22: 09:17:35:209:948 SA life duration 00000e10
10-22: 09:17:35:209:948 SA life type in kilobytes
10-22: 09:17:35:209:948 SA life duration 0003d090
10-22: 09:17:35:209:948 tunnel mode is Transport Mode(2)
10-22: 09:17:35:209:948 HMAC algorithm is MD5(1)
10-22: 09:17:35:209:948 Finding Responder Policy for SRC=192.168.20.5.1701 DST=192.168.20.100.1701, SRCMask=255.255.255.255, DSTMask=255.255.255.255, Prot=17 InTunnelEndpt 0 OutTunnelEndpt 0
10-22: 09:17:35:209:948 QM PolicyName: L2TP Optional Encryption Quick Mode Policy dwFlags 0
10-22: 09:17:35:209:948 QMOffer[0] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:17:35:209:948 QMOffer[0] dwFlags 0 dwPFSGroup 0
10-22: 09:17:35:209:948 Algo[0] Operation: ESP Algo: Triple DES CBC HMAC: MD5
10-22: 09:17:35:209:948 QMOffer[1] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:17:35:209:948 QMOffer[1] dwFlags 0 dwPFSGroup 0
10-22: 09:17:35:209:948 Algo[0] Operation: ESP Algo: Triple DES CBC HMAC: SHA
10-22: 09:17:35:209:948 QMOffer[2] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:17:35:209:948 QMOffer[2] dwFlags 0 dwPFSGroup 0
10-22: 09:17:35:209:948 Algo[0] Operation: AH Algo: SHA
10-22: 09:17:35:209:948 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: 0
10-22: 09:17:35:209:948 QMOffer[3] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:17:35:209:948 QMOffer[3] dwFlags 0 dwPFSGroup 0
10-22: 09:17:35:209:948 Algo[0] Operation: AH Algo: MD5
10-22: 09:17:35:209:948 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: 0
10-22: 09:17:35:209:948 QMOffer[4] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:17:35:209:948 QMOffer[4] dwFlags 0 dwPFSGroup 0
10-22: 09:17:35:209:948 Algo[0] Operation: AH Algo: SHA
10-22: 09:17:35:209:948 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: SHA
10-22: 09:17:35:209:948 QMOffer[5] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:17:35:209:948 QMOffer[5] dwFlags 0 dwPFSGroup 0
10-22: 09:17:35:209:948 Algo[0] Operation: AH Algo: MD5
10-22: 09:17:35:209:948 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: MD5
10-22: 09:17:35:209:948 QMOffer[6] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:17:35:209:948 QMOffer[6] dwFlags 0 dwPFSGroup 0
10-22: 09:17:35:209:948 Algo[0] Operation: ESP Algo: DES CBC HMAC: MD5
10-22: 09:17:35:209:948 QMOffer[7] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:17:35:209:948 QMOffer[7] dwFlags 0 dwPFSGroup 0
10-22: 09:17:35:209:948 Algo[0] Operation: ESP Algo: DES CBC HMAC: SHA
10-22: 09:17:35:209:948 QMOffer[8] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:17:35:209:948 QMOffer[8] dwFlags 0 dwPFSGroup 0
10-22: 09:17:35:209:948 Algo[0] Operation: AH Algo: SHA
10-22: 09:17:35:209:948 Algo[1] Operation: ESP Algo: DES CBC HMAC: 0
10-22: 09:17:35:209:948 QMOffer[9] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:17:35:209:948 QMOffer[9] dwFlags 0 dwPFSGroup 0
10-22: 09:17:35:209:948 Algo[0] Operation: AH Algo: MD5
10-22: 09:17:35:209:948 Algo[1] Operation: ESP Algo: DES CBC HMAC: 0
10-22: 09:17:35:209:948 QMOffer[10] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:17:35:209:948 QMOffer[10] dwFlags 0 dwPFSGroup 0
10-22: 09:17:35:209:948 Algo[0] Operation: AH Algo: SHA
10-22: 09:17:35:209:948 Algo[1] Operation: ESP Algo: DES CBC HMAC: SHA
10-22: 09:17:35:209:948 QMOffer[11] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:17:35:209:948 QMOffer[11] dwFlags 0 dwPFSGroup 0
10-22: 09:17:35:209:948 Algo[0] Operation: AH Algo: MD5
10-22: 09:17:35:209:948 Algo[1] Operation: ESP Algo: DES CBC HMAC: MD5
10-22: 09:17:35:209:948 QMOffer[12] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:17:35:209:948 QMOffer[12] dwFlags 0 dwPFSGroup 0
10-22: 09:17:35:209:948 Algo[0] Operation: ESP Algo: NULL DES HMAC: SHA
10-22: 09:17:35:209:948 QMOffer[13] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:17:35:209:948 QMOffer[13] dwFlags 0 dwPFSGroup 0
10-22: 09:17:35:209:948 Algo[0] Operation: ESP Algo: NULL DES HMAC: MD5
10-22: 09:17:35:209:948 QMOffer[14] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:17:35:209:948 QMOffer[14] dwFlags 0 dwPFSGroup 0
10-22: 09:17:35:209:948 Algo[0] Operation: AH Algo: SHA
10-22: 09:17:35:209:948 QMOffer[15] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:17:35:209:948 QMOffer[15] dwFlags 0 dwPFSGroup 0
10-22: 09:17:35:209:948 Algo[0] Operation: AH Algo: MD5
10-22: 09:17:35:209:948 Phase 2 SA accepted: proposal=1 transform=1
10-22: 09:17:35:209:948 GetSpi: src = 192.168.20.5.1701, dst = 192.168.20.100.1701, proto = 17, context = 00000000, srcMask = 255.255.255.255, destMask = 255.255.255.255, TunnelFilter 0
10-22: 09:17:35:209:948 Setting SPI 4231918650
10-22: 09:17:35:209:948 constructing ISAKMP Header
10-22: 09:17:35:209:948 constructing HASH (null)
10-22: 09:17:35:209:948 constructing SA (IPSEC)
10-22: 09:17:35:209:948 constructing NONCE (IPSEC)
10-22: 09:17:35:209:948 constructing ID (proxy)
10-22: 09:17:35:209:948 constructing ID (proxy)
10-22: 09:17:35:209:948 constructing HASH (QM)
10-22: 09:17:35:209:948
10-22: 09:17:35:209:948 Sending: SA = 0x0168EC38 to 192.168.20.5:Type 2.500
10-22: 09:17:35:209:948 ISAKMP Header: (V1.0), len = 164
10-22: 09:17:35:209:948 I-COOKIE 4b2bf901251bd40d
10-22: 09:17:35:209:948 R-COOKIE fd5586ba26ba3d0c
10-22: 09:17:35:209:948 exchange: Oakley Quick Mode
10-22: 09:17:35:209:948 flags: 3 ( encrypted commit )
10-22: 09:17:35:209:948 next payload: HASH
10-22: 09:17:35:209:948 message ID: 2637bee2
10-22: 09:17:35:209:948 Ports S:f401 D:f401
10-22: 09:17:35:209:948
10-22: 09:17:35:209:948 Receive: (get) SA = 0x0168ec38 from 192.168.20.5.500
10-22: 09:17:35:209:948 ISAKMP Header: (V1.0), len = 52
10-22: 09:17:35:209:948 I-COOKIE 4b2bf901251bd40d
10-22: 09:17:35:209:948 R-COOKIE fd5586ba26ba3d0c
10-22: 09:17:35:209:948 exchange: Oakley Quick Mode
10-22: 09:17:35:209:948 flags: 3 ( encrypted commit )
10-22: 09:17:35:209:948 next payload: HASH
10-22: 09:17:35:209:948 message ID: 2637bee2
10-22: 09:17:35:209:948 processing HASH (QM)
10-22: 09:17:35:209:948 ClearFragList
10-22: 09:17:35:209:948 Adding QMs: src = 192.168.20.100.1701, dst = 192.168.20.5.1701, proto = 17, context = 00000008, my tunnel = 0.0.0.0, peer tunnel = 0.0.0.0, SrcMask = 0.0.0.0, DestMask = 0.0.0.0 Lifetime = 3600 LifetimeKBytes 250000 dwFlags 0 Direction 1 EncapType 1
10-22: 09:17:35:209:948 Algo[0] Operation: ESP Algo: Triple DES CBC HMAC: MD5
10-22: 09:17:35:209:948 Algo[0] MySpi: 4231918650 PeerSpi: 2005942236
10-22: 09:17:35:209:948 Encap Ports Src 500 Dst 500
10-22: 09:17:35:209:948 isadb_set_status sa:0168EC38 centry:016BA658 status 0
10-22: 09:17:35:209:948 Constructing Commit Notify
10-22: 09:17:35:209:948 constructing ISAKMP Header
10-22: 09:17:35:209:948 constructing HASH (null)
10-22: 09:17:35:209:948 constructing NOTIFY 16384
10-22: 09:17:35:209:948 constructing HASH (QM)
10-22: 09:17:35:219:948
10-22: 09:17:35:219:948 Sending: SA = 0x0168EC38 to 192.168.20.5:Type 4.500
10-22: 09:17:35:219:948 ISAKMP Header: (V1.0), len = 84
10-22: 09:17:35:219:948 I-COOKIE 4b2bf901251bd40d
10-22: 09:17:35:219:948 R-COOKIE fd5586ba26ba3d0c
10-22: 09:17:35:219:948 exchange: Oakley Quick Mode
10-22: 09:17:35:219:948 flags: 3 ( encrypted commit )
10-22: 09:17:35:219:948 next payload: HASH
10-22: 09:17:35:219:948 message ID: 2637bee2
10-22: 09:17:35:219:948 Ports S:f401 D:f401
10-22: 09:18:10:263:948
10-22: 09:18:10:263:948 Receive: (get) SA = 0x0168ec38 from 192.168.20.5.500
10-22: 09:18:10:263:948 ISAKMP Header: (V1.0), len = 92
10-22: 09:18:10:263:948 I-COOKIE 4b2bf901251bd40d
10-22: 09:18:10:263:948 R-COOKIE fd5586ba26ba3d0c
10-22: 09:18:10:263:948 exchange: ISAKMP Informational Exchange
10-22: 09:18:10:263:948 flags: 1 ( encrypted )
10-22: 09:18:10:263:948 next payload: HASH
10-22: 09:18:10:263:948 message ID: a54cff1d
10-22: 09:18:10:263:948 processing HASH (Notify/Delete)
10-22: 09:18:10:263:948 processing payload NONCE
10-22: 09:18:10:263:948 processing payload DELETE
10-22: 09:18:10:263:948 Expiring SPI 4231918650 src 514a8c0 dst 6414a8c0
10-22: 09:18:10:263:948 Received reliable Notify. Messid a54cff1d
10-22: 09:18:10:263:948 constructing ISAKMP Header
10-22: 09:18:10:263:948 constructing HASH (null)
10-22: 09:18:10:263:948 constructing NONCE (ND)
10-22: 09:18:10:263:948 constructing HASH (Notify/Delete)
10-22: 09:18:10:263:948
10-22: 09:18:10:263:948 Sending: SA = 0x0168EC38 to 192.168.20.5:Type 1.500
10-22: 09:18:10:263:948 ISAKMP Header: (V1.0), len = 92
10-22: 09:18:10:263:948 I-COOKIE 4b2bf901251bd40d
10-22: 09:18:10:263:948 R-COOKIE fd5586ba26ba3d0c
10-22: 09:18:10:263:948 exchange: ISAKMP Informational Exchange
10-22: 09:18:10:263:948 flags: 1 ( encrypted )
10-22: 09:18:10:263:948 next payload: HASH
10-22: 09:18:10:263:948 message ID: a54cff1d
10-22: 09:18:10:263:948 Ports S:f401 D:f401
10-22: 09:18:10:263:948 QM Deleted. Notify from driver: Src 192.168.20.100 Dest 192.168.20.5 InSPI 4231918650 OutSpi 2005942236 Tunnel 0 TunnelFilter 0
10-22: 09:18:10:263:948 PrivatePeerAddr 0
10-22: 09:18:10:273:964
10-22: 09:18:10:273:964 Receive: (get) SA = 0x0168ec38 from 192.168.20.5.500
10-22: 09:18:10:273:964 ISAKMP Header: (V1.0), len = 108
10-22: 09:18:10:273:964 I-COOKIE 4b2bf901251bd40d
10-22: 09:18:10:273:964 R-COOKIE fd5586ba26ba3d0c
10-22: 09:18:10:273:964 exchange: ISAKMP Informational Exchange
10-22: 09:18:10:273:964 flags: 1 ( encrypted )
10-22: 09:18:10:273:964 next payload: HASH
10-22: 09:18:10:273:964 message ID: ccbb325d
10-22: 09:18:10:273:964 processing HASH (Notify/Delete)
10-22: 09:18:10:273:964 processing payload NONCE
10-22: 09:18:10:273:964 processing payload DELETE
10-22: 09:18:10:273:964 SA Dead. sa:0168EC38 status:35ef
10-22: 09:18:10:273:964 isadb_set_status sa:0168EC38 centry:00000000 status 35ef
10-22: 09:18:10:273:964 Received reliable Notify. Messid ccbb325d
10-22: 09:18:10:273:964 constructing ISAKMP Header
10-22: 09:18:10:273:964 constructing HASH (null)
10-22: 09:18:10:273:964 constructing NONCE (ND)
10-22: 09:18:10:273:964 constructing HASH (Notify/Delete)
10-22: 09:18:10:273:964
10-22: 09:18:10:273:964 Sending: SA = 0x0168EC38 to 192.168.20.5:Type 1.500
10-22: 09:18:10:273:964 ISAKMP Header: (V1.0), len = 108
10-22: 09:18:10:273:964 I-COOKIE 4b2bf901251bd40d
10-22: 09:18:10:273:964 R-COOKIE fd5586ba26ba3d0c
10-22: 09:18:10:273:964 exchange: ISAKMP Informational Exchange
10-22: 09:18:10:273:964 flags: 1 ( encrypted )
10-22: 09:18:10:273:964 next payload: HASH
10-22: 09:18:10:273:964 message ID: ccbb325d
10-22: 09:18:10:273:964 Ports S:f401 D:f401
10-22: 09:18:16:663:964
10-22: 09:18:16:663:964 Receive: (get) SA = 0x00000000 from 192.168.20.5.500
10-22: 09:18:16:663:964 ISAKMP Header: (V1.0), len = 292
10-22: 09:18:16:663:964 I-COOKIE 6101a3f4206b5d37
10-22: 09:18:16:663:964 R-COOKIE 0000000000000000
10-22: 09:18:16:663:964 exchange: Oakley Main Mode
10-22: 09:18:16:663:964 flags: 0
10-22: 09:18:16:663:964 next payload: SA
10-22: 09:18:16:663:964 message ID: 00000000
10-22: 09:18:16:663:964 Filter to match: Src 192.168.20.5 Dst 192.168.20.100
10-22: 09:18:16:663:964 MM PolicyName: L2TP Main Mode Policy
10-22: 09:18:16:663:964 MMPolicy dwFlags 0 SoftSAExpireTime 28800
10-22: 09:18:16:663:964 MMOffer[0] LifetimeSec 28800 QMLimit 0 DHGroup 2
10-22: 09:18:16:663:964 MMOffer[0] Encrypt: Triple DES CBC Hash: SHA
10-22: 09:18:16:663:964 MMOffer[1] LifetimeSec 28800 QMLimit 0 DHGroup 2
10-22: 09:18:16:663:964 MMOffer[1] Encrypt: Triple DES CBC Hash: MD5
10-22: 09:18:16:663:964 MMOffer[2] LifetimeSec 28800 QMLimit 0 DHGroup 1
10-22: 09:18:16:663:964 MMOffer[2] Encrypt: DES CBC Hash: SHA
10-22: 09:18:16:663:964 MMOffer[3] LifetimeSec 28800 QMLimit 0 DHGroup 1
10-22: 09:18:16:663:964 MMOffer[3] Encrypt: DES CBC Hash: MD5
10-22: 09:18:16:663:964 Auth[0]:RSA Sig C=US, CN=Root CA AuthFlags 0
10-22: 09:18:16:663:964 Auth[1]:PresharedKey KeyLen 6
10-22: 09:18:16:673:964 Responding with new SA 168efa0
10-22: 09:18:16:673:964 processing payload SA
10-22: 09:18:16:673:964 Received Phase 1 Transform 1
10-22: 09:18:16:673:964 Encryption Alg Triple DES CBC(5)
10-22: 09:18:16:673:964 Hash Alg SHA(2)
10-22: 09:18:16:673:964 Oakley Group 14
10-22: 09:18:16:673:964 Auth Method Preshared Key(1)
10-22: 09:18:16:673:964 Life type in Seconds
10-22: 09:18:16:673:964 Life duration of 28800
10-22: 09:18:16:673:964 Received Phase 1 Transform 2
10-22: 09:18:16:673:964 Encryption Alg Triple DES CBC(5)
10-22: 09:18:16:673:964 Hash Alg SHA(2)
10-22: 09:18:16:673:964 Oakley Group 2
10-22: 09:18:16:673:964 Auth Method Preshared Key(1)
10-22: 09:18:16:673:964 Life type in Seconds
10-22: 09:18:16:673:964 Life duration of 28800
10-22: 09:18:16:673:964 Received Phase 1 Transform 3
10-22: 09:18:16:673:964 Encryption Alg Triple DES CBC(5)
10-22: 09:18:16:673:964 Hash Alg MD5(1)
10-22: 09:18:16:673:964 Oakley Group 2
10-22: 09:18:16:673:964 Auth Method Preshared Key(1)
10-22: 09:18:16:673:964 Life type in Seconds
10-22: 09:18:16:673:964 Life duration of 28800
10-22: 09:18:16:673:964 Received Phase 1 Transform 4
10-22: 09:18:16:673:964 Encryption Alg DES CBC(1)
10-22: 09:18:16:673:964 Hash Alg SHA(2)
10-22: 09:18:16:673:964 Oakley Group 1
10-22: 09:18:16:673:964 Auth Method Preshared Key(1)
10-22: 09:18:16:673:964 Life type in Seconds
10-22: 09:18:16:673:964 Life duration of 28800
10-22: 09:18:16:673:964 Received Phase 1 Transform 5
10-22: 09:18:16:673:964 Encryption Alg DES CBC(1)
10-22: 09:18:16:673:964 Hash Alg MD5(1)
10-22: 09:18:16:673:964 Oakley Group 1
10-22: 09:18:16:673:964 Auth Method Preshared Key(1)
10-22: 09:18:16:673:964 Life type in Seconds
10-22: 09:18:16:673:964 Life duration of 28800
10-22: 09:18:16:673:964 Phase 1 SA accepted: transform=2
10-22: 09:18:16:673:964 SA - Oakley proposal accepted
10-22: 09:18:16:673:964 processing payload VENDOR ID
10-22: 09:18:16:673:964 Received VendorId MS NT5 ISAKMPOAKLEY
10-22: 09:18:16:673:964 processing payload VENDOR ID
10-22: 09:18:16:673:964 Received VendorId FRAGMENTATION
10-22: 09:18:16:673:964 processing payload VENDOR ID
10-22: 09:18:16:673:964 Received VendorId draft-ietf-ipsec-nat-t-ike-02
10-22: 09:18:16:673:964 ClearFragList
10-22: 09:18:16:673:964 constructing ISAKMP Header
10-22: 09:18:16:673:964 constructing SA (ISAKMP)
10-22: 09:18:16:673:964 Constructing Vendor MS NT5 ISAKMPOAKLEY
10-22: 09:18:16:673:964 Constructing Vendor FRAGMENTATION
10-22: 09:18:16:673:964 Constructing Vendor draft-ietf-ipsec-nat-t-ike-02
10-22: 09:18:16:673:964
10-22: 09:18:16:673:964 Sending: SA = 0x0168EFA0 to 192.168.20.5:Type 2.500
10-22: 09:18:16:673:964 ISAKMP Header: (V1.0), len = 148
10-22: 09:18:16:673:964 I-COOKIE 6101a3f4206b5d37
10-22: 09:18:16:673:964 R-COOKIE fb812fe19f4e5c37
10-22: 09:18:16:673:964 exchange: Oakley Main Mode
10-22: 09:18:16:673:964 flags: 0
10-22: 09:18:16:673:964 next payload: SA
10-22: 09:18:16:673:964 message ID: 00000000
10-22: 09:18:16:673:964 Ports S:f401 D:f401
10-22: 09:18:16:803:964
10-22: 09:18:16:803:964 Receive: (get) SA = 0x0168efa0 from 192.168.20.5.500
10-22: 09:18:16:803:964 ISAKMP Header: (V1.0), len = 232
10-22: 09:18:16:803:964 I-COOKIE 6101a3f4206b5d37
10-22: 09:18:16:803:964 R-COOKIE fb812fe19f4e5c37
10-22: 09:18:16:803:964 exchange: Oakley Main Mode
10-22: 09:18:16:803:964 flags: 0
10-22: 09:18:16:803:964 next payload: KE
10-22: 09:18:16:803:964 message ID: 00000000
10-22: 09:18:16:803:964 processing payload KE
10-22: 09:18:16:863:964 processing payload NONCE
10-22: 09:18:16:863:964 processing payload NATDISC
10-22: 09:18:16:863:964 Processing NatHash
10-22: 09:18:16:863:964 Nat hash 1554638b9486971cc267ba7667760d79
10-22: 09:18:16:863:964 7099e589
10-22: 09:18:16:863:964 SA StateMask2 e
10-22: 09:18:16:863:964 processing payload NATDISC
10-22: 09:18:16:863:964 Processing NatHash
10-22: 09:18:16:863:964 Nat hash 9f07f915e121d14f2dc5c77ec079dc23
10-22: 09:18:16:863:964 d92da56b
10-22: 09:18:16:863:964 SA StateMask2 8e
10-22: 09:18:16:863:964 ClearFragList
10-22: 09:18:16:863:964 constructing ISAKMP Header
10-22: 09:18:16:863:964 constructing KE
10-22: 09:18:16:863:964 constructing NONCE (ISAKMP)
10-22: 09:18:16:863:964 Constructing NatDisc
10-22: 09:18:16:863:964
10-22: 09:18:16:863:964 Sending: SA = 0x0168EFA0 to 192.168.20.5:Type 2.500
10-22: 09:18:16:863:964 ISAKMP Header: (V1.0), len = 232
10-22: 09:18:16:863:964 I-COOKIE 6101a3f4206b5d37
10-22: 09:18:16:873:964 R-COOKIE fb812fe19f4e5c37
10-22: 09:18:16:873:964 exchange: Oakley Main Mode
10-22: 09:18:16:873:964 flags: 0
10-22: 09:18:16:873:964 next payload: KE
10-22: 09:18:16:873:964 message ID: 00000000
10-22: 09:18:16:873:964 Ports S:f401 D:f401
10-22: 09:18:16:913:964
10-22: 09:18:16:913:964 Receive: (get) SA = 0x0168efa0 from 192.168.20.5.500
10-22: 09:18:16:913:964 ISAKMP Header: (V1.0), len = 68
10-22: 09:18:16:913:964 I-COOKIE 6101a3f4206b5d37
10-22: 09:18:16:913:964 R-COOKIE fb812fe19f4e5c37
10-22: 09:18:16:913:964 exchange: Oakley Main Mode
10-22: 09:18:16:913:964 flags: 1 ( encrypted )
10-22: 09:18:16:913:964 next payload: ID
10-22: 09:18:16:913:964 message ID: 00000000
10-22: 09:18:16:913:964 processing payload ID
10-22: 09:18:16:913:964 processing payload HASH
10-22: 09:18:16:913:964 AUTH: Phase I authentication accepted
10-22: 09:18:16:913:964 ClearFragList
10-22: 09:18:16:913:964 constructing ISAKMP Header
10-22: 09:18:16:913:964 constructing ID
10-22: 09:18:16:913:964 MM ID Type 1
10-22: 09:18:16:913:964 MM ID c0a81464
10-22: 09:18:16:913:964 constructing HASH
10-22: 09:18:16:913:964 MM established. SA: 0168EFA0
10-22: 09:18:16:913:964
10-22: 09:18:16:913:964 Sending: SA = 0x0168EFA0 to 192.168.20.5:Type 2.500
10-22: 09:18:16:913:964 ISAKMP Header: (V1.0), len = 68
10-22: 09:18:16:913:964 I-COOKIE 6101a3f4206b5d37
10-22: 09:18:16:913:964 R-COOKIE fb812fe19f4e5c37
10-22: 09:18:16:913:964 exchange: Oakley Main Mode
10-22: 09:18:16:913:964 flags: 1 ( encrypted )
10-22: 09:18:16:913:964 next payload: ID
10-22: 09:18:16:913:964 message ID: 00000000
10-22: 09:18:16:913:964 Ports S:f401 D:f401
10-22: 09:18:16:913:964
10-22: 09:18:16:913:964 Receive: (get) SA = 0x0168efa0 from 192.168.20.5.500
10-22: 09:18:16:913:964 ISAKMP Header: (V1.0), len = 1116
10-22: 09:18:16:913:964 I-COOKIE 6101a3f4206b5d37
10-22: 09:18:16:913:964 R-COOKIE fb812fe19f4e5c37
10-22: 09:18:16:913:964 exchange: Oakley Quick Mode
10-22: 09:18:16:913:964 flags: 1 ( encrypted )
10-22: 09:18:16:913:964 next payload: HASH
10-22: 09:18:16:913:964 message ID: aaaae47f
10-22: 09:18:16:913:964 processing HASH (QM)
10-22: 09:18:16:913:964 ClearFragList
10-22: 09:18:16:913:964 processing payload NONCE
10-22: 09:18:16:913:964 processing payload ID
10-22: 09:18:16:913:964 processing payload ID
10-22: 09:18:16:913:964 processing payload SA
10-22: 09:18:16:913:964 Negotiated Proxy ID: Src 192.168.20.5.1701 Dst 192.168.20.100.1701
10-22: 09:18:16:913:964 Checking Proposal 1: Proto= ESP(3), num trans=2 Next=2
10-22: 09:18:16:913:964 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:18:16:913:964 SA life type in seconds
10-22: 09:18:16:913:964 SA life duration 00000e10
10-22: 09:18:16:913:964 SA life type in kilobytes
10-22: 09:18:16:913:964 SA life duration 0003d090
10-22: 09:18:16:913:964 tunnel mode is Transport Mode(2)
10-22: 09:18:16:913:964 HMAC algorithm is MD5(1)
10-22: 09:18:16:913:964 Checking Transform # 2: ID=Triple DES CBC(3)
10-22: 09:18:16:913:964 SA life type in seconds
10-22: 09:18:16:913:964 SA life duration 00000e10
10-22: 09:18:16:913:964 SA life type in kilobytes
10-22: 09:18:16:913:964 SA life duration 0003d090
10-22: 09:18:16:913:964 tunnel mode is Transport Mode(2)
10-22: 09:18:16:913:964 HMAC algorithm is SHA(2)
10-22: 09:18:16:913:964 Checking Proposal 2: Proto= AH(2), num trans=1 Next=2
10-22: 09:18:16:913:964 Checking Transform # 1: ID=SHA(3)
10-22: 09:18:16:913:964 SA life type in seconds
10-22: 09:18:16:913:964 SA life duration 00000e10
10-22: 09:18:16:913:964 SA life type in kilobytes
10-22: 09:18:16:913:964 SA life duration 0003d090
10-22: 09:18:16:913:964 tunnel mode is Transport Mode(2)
10-22: 09:18:16:913:964 HMAC algorithm is SHA(2)
10-22: 09:18:16:913:964 Checking Proposal 2: Proto= ESP(3), num trans=1 Next=2
10-22: 09:18:16:913:964 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:18:16:913:964 SA life type in seconds
10-22: 09:18:16:913:964 SA life duration 00000e10
10-22: 09:18:16:913:964 SA life type in kilobytes
10-22: 09:18:16:913:964 SA life duration 0003d090
10-22: 09:18:16:913:964 tunnel mode is Transport Mode(2)
10-22: 09:18:16:913:964 Checking Proposal 3: Proto= AH(2), num trans=1 Next=2
10-22: 09:18:16:913:964 Checking Transform # 1: ID=MD5(2)
10-22: 09:18:16:913:964 SA life type in seconds
10-22: 09:18:16:913:964 SA life duration 00000e10
10-22: 09:18:16:913:964 SA life type in kilobytes
10-22: 09:18:16:913:964 SA life duration 0003d090
10-22: 09:18:16:913:964 tunnel mode is Transport Mode(2)
10-22: 09:18:16:913:964 HMAC algorithm is MD5(1)
10-22: 09:18:16:913:964 Checking Proposal 3: Proto= ESP(3), num trans=1 Next=2
10-22: 09:18:16:913:964 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:18:16:913:964 SA life type in seconds
10-22: 09:18:16:913:964 SA life duration 00000e10
10-22: 09:18:16:913:964 SA life type in kilobytes
10-22: 09:18:16:913:964 SA life duration 0003d090
10-22: 09:18:16:913:964 tunnel mode is Transport Mode(2)
10-22: 09:18:16:913:964 Checking Proposal 4: Proto= AH(2), num trans=1 Next=2
10-22: 09:18:16:913:964 Checking Transform # 1: ID=SHA(3)
10-22: 09:18:16:913:964 SA life type in seconds
10-22: 09:18:16:913:964 SA life duration 00000e10
10-22: 09:18:16:913:964 SA life type in kilobytes
10-22: 09:18:16:913:964 SA life duration 0003d090
10-22: 09:18:16:913:964 tunnel mode is Transport Mode(2)
10-22: 09:18:16:913:964 HMAC algorithm is SHA(2)
10-22: 09:18:16:913:964 Checking Proposal 4: Proto= ESP(3), num trans=1 Next=2
10-22: 09:18:16:913:964 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:18:16:913:964 SA life type in seconds
10-22: 09:18:16:913:964 SA life duration 00000e10
10-22: 09:18:16:913:964 SA life type in kilobytes
10-22: 09:18:16:913:964 SA life duration 0003d090
10-22: 09:18:16:913:964 tunnel mode is Transport Mode(2)
10-22: 09:18:16:913:964 HMAC algorithm is SHA(2)
10-22: 09:18:16:913:964 Checking Proposal 5: Proto= AH(2), num trans=1 Next=2
10-22: 09:18:16:923:964 Checking Transform # 1: ID=MD5(2)
10-22: 09:18:16:923:964 SA life type in seconds
10-22: 09:18:16:923:964 SA life duration 00000e10
10-22: 09:18:16:923:964 SA life type in kilobytes
10-22: 09:18:16:923:964 SA life duration 0003d090
10-22: 09:18:16:923:964 tunnel mode is Transport Mode(2)
10-22: 09:18:16:923:964 HMAC algorithm is MD5(1)
10-22: 09:18:16:923:964 Checking Proposal 5: Proto= ESP(3), num trans=1 Next=2
10-22: 09:18:16:923:964 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:18:16:923:964 SA life type in seconds
10-22: 09:18:16:923:964 SA life duration 00000e10
10-22: 09:18:16:923:964 SA life type in kilobytes
10-22: 09:18:16:923:964 SA life duration 0003d090
10-22: 09:18:16:923:964 tunnel mode is Transport Mode(2)
10-22: 09:18:16:923:964 HMAC algorithm is MD5(1)
10-22: 09:18:16:923:964 Checking Proposal 6: Proto= ESP(3), num trans=2 Next=2
10-22: 09:18:16:923:964 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:18:16:923:964 SA life type in seconds
10-22: 09:18:16:923:964 SA life duration 00000e10
10-22: 09:18:16:923:964 SA life type in kilobytes
10-22: 09:18:16:923:964 SA life duration 0003d090
10-22: 09:18:16:923:964 tunnel mode is Transport Mode(2)
10-22: 09:18:16:923:964 HMAC algorithm is MD5(1)
10-22: 09:18:16:923:964 Checking Transform # 2: ID=DES CBC(2)
10-22: 09:18:16:923:964 SA life type in seconds
10-22: 09:18:16:923:964 SA life duration 00000e10
10-22: 09:18:16:923:964 SA life type in kilobytes
10-22: 09:18:16:923:964 SA life duration 0003d090
10-22: 09:18:16:923:964 tunnel mode is Transport Mode(2)
10-22: 09:18:16:923:964 HMAC algorithm is SHA(2)
10-22: 09:18:16:923:964 Checking Proposal 7: Proto= AH(2), num trans=1 Next=2
10-22: 09:18:16:923:964 Checking Transform # 1: ID=SHA(3)
10-22: 09:18:16:923:964 SA life type in seconds
10-22: 09:18:16:923:964 SA life duration 00000e10
10-22: 09:18:16:923:964 SA life type in kilobytes
10-22: 09:18:16:923:964 SA life duration 0003d090
10-22: 09:18:16:923:964 tunnel mode is Transport Mode(2)
10-22: 09:18:16:923:964 HMAC algorithm is SHA(2)
10-22: 09:18:16:923:964 Checking Proposal 7: Proto= ESP(3), num trans=1 Next=2
10-22: 09:18:16:923:964 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:18:16:923:964 SA life type in seconds
10-22: 09:18:16:923:964 SA life duration 00000e10
10-22: 09:18:16:923:964 SA life type in kilobytes
10-22: 09:18:16:923:964 SA life duration 0003d090
10-22: 09:18:16:923:964 tunnel mode is Transport Mode(2)
10-22: 09:18:16:923:964 Checking Proposal 8: Proto= AH(2), num trans=1 Next=2
10-22: 09:18:16:923:964 Checking Transform # 1: ID=MD5(2)
10-22: 09:18:16:923:964 SA life type in seconds
10-22: 09:18:16:923:964 SA life duration 00000e10
10-22: 09:18:16:923:964 SA life type in kilobytes
10-22: 09:18:16:923:964 SA life duration 0003d090
10-22: 09:18:16:923:964 tunnel mode is Transport Mode(2)
10-22: 09:18:16:923:964 HMAC algorithm is MD5(1)
10-22: 09:18:16:923:964 Checking Proposal 8: Proto= ESP(3), num trans=1 Next=2
10-22: 09:18:16:923:964 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:18:16:923:964 SA life type in seconds
10-22: 09:18:16:923:964 SA life duration 00000e10
10-22: 09:18:16:923:964 SA life type in kilobytes
10-22: 09:18:16:923:964 SA life duration 0003d090
10-22: 09:18:16:923:964 tunnel mode is Transport Mode(2)
10-22: 09:18:16:923:964 Checking Proposal 9: Proto= AH(2), num trans=1 Next=2
10-22: 09:18:16:923:964 Checking Transform # 1: ID=SHA(3)
10-22: 09:18:16:923:964 SA life type in seconds
10-22: 09:18:16:923:964 SA life duration 00000e10
10-22: 09:18:16:923:964 SA life type in kilobytes
10-22: 09:18:16:923:964 SA life duration 0003d090
10-22: 09:18:16:923:964 tunnel mode is Transport Mode(2)
10-22: 09:18:16:923:964 HMAC algorithm is SHA(2)
10-22: 09:18:16:923:964 Checking Proposal 9: Proto= ESP(3), num trans=1 Next=2
10-22: 09:18:16:923:964 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:18:16:923:964 SA life type in seconds
10-22: 09:18:16:923:964 SA life duration 00000e10
10-22: 09:18:16:923:964 SA life type in kilobytes
10-22: 09:18:16:923:964 SA life duration 0003d090
10-22: 09:18:16:923:964 tunnel mode is Transport Mode(2)
10-22: 09:18:16:923:964 HMAC algorithm is SHA(2)
10-22: 09:18:16:923:964 Checking Proposal 10: Proto= AH(2), num trans=1 Next=2
10-22: 09:18:16:923:964 Checking Transform # 1: ID=MD5(2)
10-22: 09:18:16:923:964 SA life type in seconds
10-22: 09:18:16:923:964 SA life duration 00000e10
10-22: 09:18:16:923:964 SA life type in kilobytes
10-22: 09:18:16:923:964 SA life duration 0003d090
10-22: 09:18:16:923:964 tunnel mode is Transport Mode(2)
10-22: 09:18:16:923:964 HMAC algorithm is MD5(1)
10-22: 09:18:16:923:964 Checking Proposal 10: Proto= ESP(3), num trans=1 Next=0
10-22: 09:18:16:923:964 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:18:16:923:964 SA life type in seconds
10-22: 09:18:16:923:964 SA life duration 00000e10
10-22: 09:18:16:923:964 SA life type in kilobytes
10-22: 09:18:16:923:964 SA life duration 0003d090
10-22: 09:18:16:923:964 tunnel mode is Transport Mode(2)
10-22: 09:18:16:923:964 HMAC algorithm is MD5(1)
10-22: 09:18:16:923:964 Finding Responder Policy for SRC=192.168.20.5.1701 DST=192.168.20.100.1701, SRCMask=255.255.255.255, DSTMask=255.255.255.255, Prot=17 InTunnelEndpt 0 OutTunnelEndpt 0
10-22: 09:18:16:923:964 QM PolicyName: L2TP Optional Encryption Quick Mode Policy dwFlags 0
10-22: 09:18:16:923:964 QMOffer[0] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:18:16:923:964 QMOffer[0] dwFlags 0 dwPFSGroup 0
10-22: 09:18:16:923:964 Algo[0] Operation: ESP Algo: Triple DES CBC HMAC: MD5
10-22: 09:18:16:923:964 QMOffer[1] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:18:16:923:964 QMOffer[1] dwFlags 0 dwPFSGroup 0
10-22: 09:18:16:923:964 Algo[0] Operation: ESP Algo: Triple DES CBC HMAC: SHA
10-22: 09:18:16:923:964 QMOffer[2] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:18:16:923:964 QMOffer[2] dwFlags 0 dwPFSGroup 0
10-22: 09:18:16:923:964 Algo[0] Operation: AH Algo: SHA
10-22: 09:18:16:923:964 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: 0
10-22: 09:18:16:923:964 QMOffer[3] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:18:16:923:964 QMOffer[3] dwFlags 0 dwPFSGroup 0
10-22: 09:18:16:923:964 Algo[0] Operation: AH Algo: MD5
10-22: 09:18:16:923:964 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: 0
10-22: 09:18:16:923:964 QMOffer[4] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:18:16:923:964 QMOffer[4] dwFlags 0 dwPFSGroup 0
10-22: 09:18:16:923:964 Algo[0] Operation: AH Algo: SHA
10-22: 09:18:16:923:964 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: SHA
10-22: 09:18:16:923:964 QMOffer[5] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:18:16:923:964 QMOffer[5] dwFlags 0 dwPFSGroup 0
10-22: 09:18:16:923:964 Algo[0] Operation: AH Algo: MD5
10-22: 09:18:16:923:964 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: MD5
10-22: 09:18:16:923:964 QMOffer[6] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:18:16:923:964 QMOffer[6] dwFlags 0 dwPFSGroup 0
10-22: 09:18:16:923:964 Algo[0] Operation: ESP Algo: DES CBC HMAC: MD5
10-22: 09:18:16:923:964 QMOffer[7] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:18:16:923:964 QMOffer[7] dwFlags 0 dwPFSGroup 0
10-22: 09:18:16:923:964 Algo[0] Operation: ESP Algo: DES CBC HMAC: SHA
10-22: 09:18:16:923:964 QMOffer[8] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:18:16:923:964 QMOffer[8] dwFlags 0 dwPFSGroup 0
10-22: 09:18:16:923:964 Algo[0] Operation: AH Algo: SHA
10-22: 09:18:16:923:964 Algo[1] Operation: ESP Algo: DES CBC HMAC: 0
10-22: 09:18:16:923:964 QMOffer[9] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:18:16:923:964 QMOffer[9] dwFlags 0 dwPFSGroup 0
10-22: 09:18:16:923:964 Algo[0] Operation: AH Algo: MD5
10-22: 09:18:16:923:964 Algo[1] Operation: ESP Algo: DES CBC HMAC: 0
10-22: 09:18:16:923:964 QMOffer[10] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:18:16:923:964 QMOffer[10] dwFlags 0 dwPFSGroup 0
10-22: 09:18:16:923:964 Algo[0] Operation: AH Algo: SHA
10-22: 09:18:16:923:964 Algo[1] Operation: ESP Algo: DES CBC HMAC: SHA
10-22: 09:18:16:923:964 QMOffer[11] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:18:16:923:964 QMOffer[11] dwFlags 0 dwPFSGroup 0
10-22: 09:18:16:923:964 Algo[0] Operation: AH Algo: MD5
10-22: 09:18:16:923:964 Algo[1] Operation: ESP Algo: DES CBC HMAC: MD5
10-22: 09:18:16:923:964 QMOffer[12] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:18:16:923:964 QMOffer[12] dwFlags 0 dwPFSGroup 0
10-22: 09:18:16:923:964 Algo[0] Operation: ESP Algo: NULL DES HMAC: SHA
10-22: 09:18:16:923:964 QMOffer[13] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:18:16:923:964 QMOffer[13] dwFlags 0 dwPFSGroup 0
10-22: 09:18:16:923:964 Algo[0] Operation: ESP Algo: NULL DES HMAC: MD5
10-22: 09:18:16:923:964 QMOffer[14] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:18:16:923:964 QMOffer[14] dwFlags 0 dwPFSGroup 0
10-22: 09:18:16:923:964 Algo[0] Operation: AH Algo: SHA
10-22: 09:18:16:923:964 QMOffer[15] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:18:16:923:964 QMOffer[15] dwFlags 0 dwPFSGroup 0
10-22: 09:18:16:923:964 Algo[0] Operation: AH Algo: MD5
10-22: 09:18:16:923:964 Phase 2 SA accepted: proposal=1 transform=1
10-22: 09:18:16:923:964 GetSpi: src = 192.168.20.5.1701, dst = 192.168.20.100.1701, proto = 17, context = 00000000, srcMask = 255.255.255.255, destMask = 255.255.255.255, TunnelFilter 0
10-22: 09:18:16:923:964 Setting SPI 831218238
10-22: 09:18:16:923:964 constructing ISAKMP Header
10-22: 09:18:16:923:964 constructing HASH (null)
10-22: 09:18:16:923:964 constructing SA (IPSEC)
10-22: 09:18:16:923:964 constructing NONCE (IPSEC)
10-22: 09:18:16:923:964 constructing ID (proxy)
10-22: 09:18:16:923:964 constructing ID (proxy)
10-22: 09:18:16:923:964 constructing HASH (QM)
10-22: 09:18:16:923:964
10-22: 09:18:16:923:964 Sending: SA = 0x0168EFA0 to 192.168.20.5:Type 2.500
10-22: 09:18:16:923:964 ISAKMP Header: (V1.0), len = 164
10-22: 09:18:16:923:964 I-COOKIE 6101a3f4206b5d37
10-22: 09:18:16:923:964 R-COOKIE fb812fe19f4e5c37
10-22: 09:18:16:923:964 exchange: Oakley Quick Mode
10-22: 09:18:16:923:964 flags: 3 ( encrypted commit )
10-22: 09:18:16:923:964 next payload: HASH
10-22: 09:18:16:923:964 message ID: aaaae47f
10-22: 09:18:16:923:964 Ports S:f401 D:f401
10-22: 09:18:16:923:964
10-22: 09:18:16:923:964 Receive: (get) SA = 0x0168efa0 from 192.168.20.5.500
10-22: 09:18:16:923:964 ISAKMP Header: (V1.0), len = 52
10-22: 09:18:16:923:964 I-COOKIE 6101a3f4206b5d37
10-22: 09:18:16:923:964 R-COOKIE fb812fe19f4e5c37
10-22: 09:18:16:923:964 exchange: Oakley Quick Mode
10-22: 09:18:16:923:964 flags: 3 ( encrypted commit )
10-22: 09:18:16:923:964 next payload: HASH
10-22: 09:18:16:923:964 message ID: aaaae47f
10-22: 09:18:16:923:964 processing HASH (QM)
10-22: 09:18:16:923:964 ClearFragList
10-22: 09:18:16:923:964 Adding QMs: src = 192.168.20.100.1701, dst = 192.168.20.5.1701, proto = 17, context = 00000009, my tunnel = 0.0.0.0, peer tunnel = 0.0.0.0, SrcMask = 0.0.0.0, DestMask = 0.0.0.0 Lifetime = 3600 LifetimeKBytes 250000 dwFlags 0 Direction 1 EncapType 1
10-22: 09:18:16:923:964 Algo[0] Operation: ESP Algo: Triple DES CBC HMAC: MD5
10-22: 09:18:16:923:964 Algo[0] MySpi: 831218238 PeerSpi: 1091328518
10-22: 09:18:16:923:964 Encap Ports Src 500 Dst 500
10-22: 09:18:16:933:964 isadb_set_status sa:0168EFA0 centry:016BC260 status 0
10-22: 09:18:16:933:964 Constructing Commit Notify
10-22: 09:18:16:933:964 constructing ISAKMP Header
10-22: 09:18:16:933:964 constructing HASH (null)
10-22: 09:18:16:933:964 constructing NOTIFY 16384
10-22: 09:18:16:933:964 constructing HASH (QM)
10-22: 09:18:16:933:964
10-22: 09:18:16:933:964 Sending: SA = 0x0168EFA0 to 192.168.20.5:Type 4.500
10-22: 09:18:16:933:964 ISAKMP Header: (V1.0), len = 84
10-22: 09:18:16:933:964 I-COOKIE 6101a3f4206b5d37
10-22: 09:18:16:933:964 R-COOKIE fb812fe19f4e5c37
10-22: 09:18:16:933:964 exchange: Oakley Quick Mode
10-22: 09:18:16:933:964 flags: 3 ( encrypted commit )
10-22: 09:18:16:933:964 next payload: HASH
10-22: 09:18:16:933:964 message ID: aaaae47f
10-22: 09:18:16:933:964 Ports S:f401 D:f401
10-22: 09:18:42:292:964 ClearFragList
10-22: 09:18:51:977:968
10-22: 09:18:51:977:968 Receive: (get) SA = 0x0168efa0 from 192.168.20.5.500
10-22: 09:18:51:977:968 ISAKMP Header: (V1.0), len = 92
10-22: 09:18:51:977:968 I-COOKIE 6101a3f4206b5d37
10-22: 09:18:51:977:968 R-COOKIE fb812fe19f4e5c37
10-22: 09:18:51:977:968 exchange: ISAKMP Informational Exchange
10-22: 09:18:51:977:968 flags: 1 ( encrypted )
10-22: 09:18:51:977:968 next payload: HASH
10-22: 09:18:51:977:968 message ID: a7326273
10-22: 09:18:51:977:968 processing HASH (Notify/Delete)
10-22: 09:18:51:977:968 processing payload NONCE
10-22: 09:18:51:977:968 processing payload DELETE
10-22: 09:18:51:977:968 Expiring SPI 831218238 src 514a8c0 dst 6414a8c0
10-22: 09:18:51:977:968 Received reliable Notify. Messid a7326273
10-22: 09:18:51:977:968 constructing ISAKMP Header
10-22: 09:18:51:977:968 constructing HASH (null)
10-22: 09:18:51:977:968 constructing NONCE (ND)
10-22: 09:18:51:977:968 constructing HASH (Notify/Delete)
10-22: 09:18:51:977:968
10-22: 09:18:51:977:968 Sending: SA = 0x0168EFA0 to 192.168.20.5:Type 1.500
10-22: 09:18:51:977:968 ISAKMP Header: (V1.0), len = 92
10-22: 09:18:51:977:968 I-COOKIE 6101a3f4206b5d37
10-22: 09:18:51:977:968 R-COOKIE fb812fe19f4e5c37
10-22: 09:18:51:977:968 exchange: ISAKMP Informational Exchange
10-22: 09:18:51:977:968 flags: 1 ( encrypted )
10-22: 09:18:51:977:968 next payload: HASH
10-22: 09:18:51:977:968 message ID: a7326273
10-22: 09:18:51:977:968 Ports S:f401 D:f401
10-22: 09:18:51:977:968 QM Deleted. Notify from driver: Src 192.168.20.100 Dest 192.168.20.5 InSPI 831218238 OutSpi 1091328518 Tunnel 0 TunnelFilter 0
10-22: 09:18:51:977:968 PrivatePeerAddr 0
10-22: 09:18:52:88:968
10-22: 09:18:52:88:968 Receive: (get) SA = 0x0168efa0 from 192.168.20.5.500
10-22: 09:18:52:88:968 ISAKMP Header: (V1.0), len = 108
10-22: 09:18:52:88:968 I-COOKIE 6101a3f4206b5d37
10-22: 09:18:52:88:968 R-COOKIE fb812fe19f4e5c37
10-22: 09:18:52:88:968 exchange: ISAKMP Informational Exchange
10-22: 09:18:52:88:968 flags: 1 ( encrypted )
10-22: 09:18:52:88:968 next payload: HASH
10-22: 09:18:52:88:968 message ID: cda88349
10-22: 09:18:52:88:968 processing HASH (Notify/Delete)
10-22: 09:18:52:88:968 processing payload NONCE
10-22: 09:18:52:88:968 processing payload DELETE
10-22: 09:18:52:88:968 SA Dead. sa:0168EFA0 status:35ef
10-22: 09:18:52:88:968 isadb_set_status sa:0168EFA0 centry:00000000 status 35ef
10-22: 09:18:52:88:968 Received reliable Notify. Messid cda88349
10-22: 09:18:52:88:968 constructing ISAKMP Header
10-22: 09:18:52:88:968 constructing HASH (null)
10-22: 09:18:52:88:968 constructing NONCE (ND)
10-22: 09:18:52:88:968 constructing HASH (Notify/Delete)
10-22: 09:18:52:88:968
10-22: 09:18:52:88:968 Sending: SA = 0x0168EFA0 to 192.168.20.5:Type 1.500
10-22: 09:18:52:88:968 ISAKMP Header: (V1.0), len = 108
10-22: 09:18:52:88:968 I-COOKIE 6101a3f4206b5d37
10-22: 09:18:52:88:968 R-COOKIE fb812fe19f4e5c37
10-22: 09:18:52:88:968 exchange: ISAKMP Informational Exchange
10-22: 09:18:52:88:968 flags: 1 ( encrypted )
10-22: 09:18:52:88:968 next payload: HASH
10-22: 09:18:52:88:968 message ID: cda88349
10-22: 09:18:52:88:968 Ports S:f401 D:f401
10-22: 09:19:27:302:968 ClearFragList
10-22: 09:19:45:350:970
10-22: 09:19:45:350:970 Receive: (get) SA = 0x00000000 from 192.168.20.5.500
10-22: 09:19:45:350:970 ISAKMP Header: (V1.0), len = 312
10-22: 09:19:45:350:970 I-COOKIE d69744ae065d7cdf
10-22: 09:19:45:350:970 R-COOKIE 0000000000000000
10-22: 09:19:45:350:970 exchange: Oakley Main Mode
10-22: 09:19:45:350:970 flags: 0
10-22: 09:19:45:350:970 next payload: SA
10-22: 09:19:45:350:970 message ID: 00000000
10-22: 09:19:45:350:970 Filter to match: Src 192.168.20.5 Dst 192.168.20.100
10-22: 09:19:45:350:970 MM PolicyName: L2TP Main Mode Policy
10-22: 09:19:45:350:970 MMPolicy dwFlags 0 SoftSAExpireTime 28800
10-22: 09:19:45:350:970 MMOffer[0] LifetimeSec 28800 QMLimit 0 DHGroup 2
10-22: 09:19:45:350:970 MMOffer[0] Encrypt: Triple DES CBC Hash: SHA
10-22: 09:19:45:350:970 MMOffer[1] LifetimeSec 28800 QMLimit 0 DHGroup 2
10-22: 09:19:45:350:970 MMOffer[1] Encrypt: Triple DES CBC Hash: MD5
10-22: 09:19:45:350:970 MMOffer[2] LifetimeSec 28800 QMLimit 0 DHGroup 1
10-22: 09:19:45:350:970 MMOffer[2] Encrypt: DES CBC Hash: SHA
10-22: 09:19:45:350:970 MMOffer[3] LifetimeSec 28800 QMLimit 0 DHGroup 1
10-22: 09:19:45:350:970 MMOffer[3] Encrypt: DES CBC Hash: MD5
10-22: 09:19:45:350:970 Auth[0]:RSA Sig C=US, CN=Root CA AuthFlags 0
10-22: 09:19:45:350:970 Auth[1]:PresharedKey KeyLen 6
10-22: 09:19:45:350:970 Responding with new SA 168efa0
10-22: 09:19:45:350:970 processing payload SA
10-22: 09:19:45:350:970 Received Phase 1 Transform 1
10-22: 09:19:45:350:970 Encryption Alg Triple DES CBC(5)
10-22: 09:19:45:350:970 Hash Alg SHA(2)
10-22: 09:19:45:350:970 Oakley Group 14
10-22: 09:19:45:350:970 Auth Method Preshared Key(1)
10-22: 09:19:45:350:970 Life type in Seconds
10-22: 09:19:45:350:970 Life duration of 28800
10-22: 09:19:45:350:970 Received Phase 1 Transform 2
10-22: 09:19:45:350:970 Encryption Alg Triple DES CBC(5)
10-22: 09:19:45:350:970 Hash Alg SHA(2)
10-22: 09:19:45:350:970 Oakley Group 2
10-22: 09:19:45:350:970 Auth Method Preshared Key(1)
10-22: 09:19:45:350:970 Life type in Seconds
10-22: 09:19:45:350:970 Life duration of 28800
10-22: 09:19:45:350:970 Received Phase 1 Transform 3
10-22: 09:19:45:350:970 Encryption Alg Triple DES CBC(5)
10-22: 09:19:45:350:970 Hash Alg MD5(1)
10-22: 09:19:45:350:970 Oakley Group 2
10-22: 09:19:45:350:970 Auth Method Preshared Key(1)
10-22: 09:19:45:350:970 Life type in Seconds
10-22: 09:19:45:350:970 Life duration of 28800
10-22: 09:19:45:350:970 Received Phase 1 Transform 4
10-22: 09:19:45:350:970 Encryption Alg DES CBC(1)
10-22: 09:19:45:350:970 Hash Alg SHA(2)
10-22: 09:19:45:350:970 Oakley Group 1
10-22: 09:19:45:350:970 Auth Method Preshared Key(1)
10-22: 09:19:45:350:970 Life type in Seconds
10-22: 09:19:45:350:970 Life duration of 28800
10-22: 09:19:45:350:970 Received Phase 1 Transform 5
10-22: 09:19:45:350:970 Encryption Alg DES CBC(1)
10-22: 09:19:45:350:970 Hash Alg MD5(1)
10-22: 09:19:45:350:970 Oakley Group 1
10-22: 09:19:45:350:970 Auth Method Preshared Key(1)
10-22: 09:19:45:350:970 Life type in Seconds
10-22: 09:19:45:350:970 Life duration of 28800
10-22: 09:19:45:350:970 Phase 1 SA accepted: transform=2
10-22: 09:19:45:350:970 SA - Oakley proposal accepted
10-22: 09:19:45:350:970 processing payload VENDOR ID
10-22: 09:19:45:350:970 Received VendorId MS NT5 ISAKMPOAKLEY
10-22: 09:19:45:350:970 processing payload VENDOR ID
10-22: 09:19:45:350:970 Received VendorId FRAGMENTATION
10-22: 09:19:45:350:970 processing payload VENDOR ID
10-22: 09:19:45:350:970 Received VendorId draft-ietf-ipsec-nat-t-ike-02
10-22: 09:19:45:350:970 processing payload VENDOR ID
10-22: 09:19:45:350:970 Received VendorId Vid-Initial-Contact
10-22: 09:19:45:350:970 ClearFragList
10-22: 09:19:45:350:970 constructing ISAKMP Header
10-22: 09:19:45:350:970 constructing SA (ISAKMP)
10-22: 09:19:45:350:970 Constructing Vendor MS NT5 ISAKMPOAKLEY
10-22: 09:19:45:350:970 Constructing Vendor FRAGMENTATION
10-22: 09:19:45:350:970 Constructing Vendor draft-ietf-ipsec-nat-t-ike-02
10-22: 09:19:45:350:970
10-22: 09:19:45:350:970 Sending: SA = 0x0168EFA0 to 192.168.20.5:Type 2.500
10-22: 09:19:45:350:970 ISAKMP Header: (V1.0), len = 148
10-22: 09:19:45:350:970 I-COOKIE d69744ae065d7cdf
10-22: 09:19:45:350:970 R-COOKIE d2c11fedb1219c1a
10-22: 09:19:45:350:970 exchange: Oakley Main Mode
10-22: 09:19:45:350:970 flags: 0
10-22: 09:19:45:350:970 next payload: SA
10-22: 09:19:45:350:970 message ID: 00000000
10-22: 09:19:45:350:970 Ports S:f401 D:f401
10-22: 09:19:45:470:970
10-22: 09:19:45:470:970 Receive: (get) SA = 0x0168efa0 from 192.168.20.5.500
10-22: 09:19:45:470:970 ISAKMP Header: (V1.0), len = 232
10-22: 09:19:45:470:970 I-COOKIE d69744ae065d7cdf
10-22: 09:19:45:470:970 R-COOKIE d2c11fedb1219c1a
10-22: 09:19:45:470:970 exchange: Oakley Main Mode
10-22: 09:19:45:470:970 flags: 0
10-22: 09:19:45:470:970 next payload: KE
10-22: 09:19:45:470:970 message ID: 00000000
10-22: 09:19:45:470:970 processing payload KE
10-22: 09:19:45:530:970 processing payload NONCE
10-22: 09:19:45:530:970 processing payload NATDISC
10-22: 09:19:45:530:970 Processing NatHash
10-22: 09:19:45:530:970 Nat hash 9c04f422e500a91ec1ad637e65a1e2b3
10-22: 09:19:45:530:970 4b8fd76a
10-22: 09:19:45:530:970 SA StateMask2 e
10-22: 09:19:45:530:970 processing payload NATDISC
10-22: 09:19:45:530:970 Processing NatHash
10-22: 09:19:45:530:970 Nat hash 5cf07bce0d832577d42e9d6b6ae47033
10-22: 09:19:45:530:970 69569dbb
10-22: 09:19:45:530:970 SA StateMask2 8e
10-22: 09:19:45:530:970 ClearFragList
10-22: 09:19:45:530:970 constructing ISAKMP Header
10-22: 09:19:45:530:970 constructing KE
10-22: 09:19:45:530:970 constructing NONCE (ISAKMP)
10-22: 09:19:45:530:970 Constructing NatDisc
10-22: 09:19:45:530:970
10-22: 09:19:45:530:970 Sending: SA = 0x0168EFA0 to 192.168.20.5:Type 2.500
10-22: 09:19:45:530:970 ISAKMP Header: (V1.0), len = 232
10-22: 09:19:45:530:970 I-COOKIE d69744ae065d7cdf
10-22: 09:19:45:530:970 R-COOKIE d2c11fedb1219c1a
10-22: 09:19:45:540:970 exchange: Oakley Main Mode
10-22: 09:19:45:540:970 flags: 0
10-22: 09:19:45:540:970 next payload: KE
10-22: 09:19:45:540:970 message ID: 00000000
10-22: 09:19:45:540:970 Ports S:f401 D:f401
10-22: 09:19:45:570:970
10-22: 09:19:45:570:970 Receive: (get) SA = 0x0168efa0 from 192.168.20.5.500
10-22: 09:19:45:570:970 ISAKMP Header: (V1.0), len = 68
10-22: 09:19:45:570:970 I-COOKIE d69744ae065d7cdf
10-22: 09:19:45:570:970 R-COOKIE d2c11fedb1219c1a
10-22: 09:19:45:570:970 exchange: Oakley Main Mode
10-22: 09:19:45:570:970 flags: 1 ( encrypted )
10-22: 09:19:45:570:970 next payload: ID
10-22: 09:19:45:570:970 message ID: 00000000
10-22: 09:19:45:570:970 processing payload ID
10-22: 09:19:45:570:970 processing payload HASH
10-22: 09:19:45:570:970 AUTH: Phase I authentication accepted
10-22: 09:19:45:570:970 ClearFragList
10-22: 09:19:45:570:970 constructing ISAKMP Header
10-22: 09:19:45:570:970 constructing ID
10-22: 09:19:45:580:970 MM ID Type 1
10-22: 09:19:45:580:970 MM ID c0a81464
10-22: 09:19:45:580:970 constructing HASH
10-22: 09:19:45:580:970 MM established. SA: 0168EFA0
10-22: 09:19:45:580:970
10-22: 09:19:45:580:970 Sending: SA = 0x0168EFA0 to 192.168.20.5:Type 2.500
10-22: 09:19:45:580:970 ISAKMP Header: (V1.0), len = 68
10-22: 09:19:45:580:970 I-COOKIE d69744ae065d7cdf
10-22: 09:19:45:580:970 R-COOKIE d2c11fedb1219c1a
10-22: 09:19:45:580:970 exchange: Oakley Main Mode
10-22: 09:19:45:580:970 flags: 1 ( encrypted )
10-22: 09:19:45:580:970 next payload: ID
10-22: 09:19:45:580:970 message ID: 00000000
10-22: 09:19:45:580:970 Ports S:f401 D:f401
10-22: 09:19:45:580:970
10-22: 09:19:45:580:970 Receive: (get) SA = 0x0168efa0 from 192.168.20.5.500
10-22: 09:19:45:580:970 ISAKMP Header: (V1.0), len = 1116
10-22: 09:19:45:580:970 I-COOKIE d69744ae065d7cdf
10-22: 09:19:45:580:970 R-COOKIE d2c11fedb1219c1a
10-22: 09:19:45:580:970 exchange: Oakley Quick Mode
10-22: 09:19:45:580:970 flags: 1 ( encrypted )
10-22: 09:19:45:580:970 next payload: HASH
10-22: 09:19:45:580:970 message ID: f39fc884
10-22: 09:19:45:580:970 processing HASH (QM)
10-22: 09:19:45:580:970 ClearFragList
10-22: 09:19:45:580:970 processing payload NONCE
10-22: 09:19:45:580:970 processing payload ID
10-22: 09:19:45:580:970 processing payload ID
10-22: 09:19:45:580:970 processing payload SA
10-22: 09:19:45:580:970 Negotiated Proxy ID: Src 192.168.20.5.1701 Dst 192.168.20.100.1701
10-22: 09:19:45:580:970 Checking Proposal 1: Proto= ESP(3), num trans=2 Next=2
10-22: 09:19:45:580:970 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:19:45:580:970 SA life type in seconds
10-22: 09:19:45:580:970 SA life duration 00000e10
10-22: 09:19:45:580:970 SA life type in kilobytes
10-22: 09:19:45:580:970 SA life duration 0003d090
10-22: 09:19:45:580:970 tunnel mode is Transport Mode(2)
10-22: 09:19:45:580:970 HMAC algorithm is MD5(1)
10-22: 09:19:45:580:970 Checking Transform # 2: ID=Triple DES CBC(3)
10-22: 09:19:45:580:970 SA life type in seconds
10-22: 09:19:45:580:970 SA life duration 00000e10
10-22: 09:19:45:580:970 SA life type in kilobytes
10-22: 09:19:45:580:970 SA life duration 0003d090
10-22: 09:19:45:580:970 tunnel mode is Transport Mode(2)
10-22: 09:19:45:580:970 HMAC algorithm is SHA(2)
10-22: 09:19:45:580:970 Checking Proposal 2: Proto= AH(2), num trans=1 Next=2
10-22: 09:19:45:580:970 Checking Transform # 1: ID=SHA(3)
10-22: 09:19:45:580:970 SA life type in seconds
10-22: 09:19:45:580:970 SA life duration 00000e10
10-22: 09:19:45:580:970 SA life type in kilobytes
10-22: 09:19:45:580:970 SA life duration 0003d090
10-22: 09:19:45:580:970 tunnel mode is Transport Mode(2)
10-22: 09:19:45:580:970 HMAC algorithm is SHA(2)
10-22: 09:19:45:580:970 Checking Proposal 2: Proto= ESP(3), num trans=1 Next=2
10-22: 09:19:45:580:970 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:19:45:580:970 SA life type in seconds
10-22: 09:19:45:580:970 SA life duration 00000e10
10-22: 09:19:45:580:970 SA life type in kilobytes
10-22: 09:19:45:580:970 SA life duration 0003d090
10-22: 09:19:45:580:970 tunnel mode is Transport Mode(2)
10-22: 09:19:45:580:970 Checking Proposal 3: Proto= AH(2), num trans=1 Next=2
10-22: 09:19:45:580:970 Checking Transform # 1: ID=MD5(2)
10-22: 09:19:45:580:970 SA life type in seconds
10-22: 09:19:45:580:970 SA life duration 00000e10
10-22: 09:19:45:580:970 SA life type in kilobytes
10-22: 09:19:45:580:970 SA life duration 0003d090
10-22: 09:19:45:580:970 tunnel mode is Transport Mode(2)
10-22: 09:19:45:580:970 HMAC algorithm is MD5(1)
10-22: 09:19:45:580:970 Checking Proposal 3: Proto= ESP(3), num trans=1 Next=2
10-22: 09:19:45:580:970 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:19:45:580:970 SA life type in seconds
10-22: 09:19:45:580:970 SA life duration 00000e10
10-22: 09:19:45:580:970 SA life type in kilobytes
10-22: 09:19:45:580:970 SA life duration 0003d090
10-22: 09:19:45:580:970 tunnel mode is Transport Mode(2)
10-22: 09:19:45:580:970 Checking Proposal 4: Proto= AH(2), num trans=1 Next=2
10-22: 09:19:45:580:970 Checking Transform # 1: ID=SHA(3)
10-22: 09:19:45:580:970 SA life type in seconds
10-22: 09:19:45:580:970 SA life duration 00000e10
10-22: 09:19:45:580:970 SA life type in kilobytes
10-22: 09:19:45:580:970 SA life duration 0003d090
10-22: 09:19:45:580:970 tunnel mode is Transport Mode(2)
10-22: 09:19:45:580:970 HMAC algorithm is SHA(2)
10-22: 09:19:45:580:970 Checking Proposal 4: Proto= ESP(3), num trans=1 Next=2
10-22: 09:19:45:580:970 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:19:45:580:970 SA life type in seconds
10-22: 09:19:45:580:970 SA life duration 00000e10
10-22: 09:19:45:580:970 SA life type in kilobytes
10-22: 09:19:45:580:970 SA life duration 0003d090
10-22: 09:19:45:580:970 tunnel mode is Transport Mode(2)
10-22: 09:19:45:580:970 HMAC algorithm is SHA(2)
10-22: 09:19:45:580:970 Checking Proposal 5: Proto= AH(2), num trans=1 Next=2
10-22: 09:19:45:580:970 Checking Transform # 1: ID=MD5(2)
10-22: 09:19:45:580:970 SA life type in seconds
10-22: 09:19:45:580:970 SA life duration 00000e10
10-22: 09:19:45:580:970 SA life type in kilobytes
10-22: 09:19:45:580:970 SA life duration 0003d090
10-22: 09:19:45:580:970 tunnel mode is Transport Mode(2)
10-22: 09:19:45:580:970 HMAC algorithm is MD5(1)
10-22: 09:19:45:580:970 Checking Proposal 5: Proto= ESP(3), num trans=1 Next=2
10-22: 09:19:45:580:970 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:19:45:580:970 SA life type in seconds
10-22: 09:19:45:580:970 SA life duration 00000e10
10-22: 09:19:45:580:970 SA life type in kilobytes
10-22: 09:19:45:580:970 SA life duration 0003d090
10-22: 09:19:45:580:970 tunnel mode is Transport Mode(2)
10-22: 09:19:45:580:970 HMAC algorithm is MD5(1)
10-22: 09:19:45:580:970 Checking Proposal 6: Proto= ESP(3), num trans=2 Next=2
10-22: 09:19:45:580:970 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:19:45:580:970 SA life type in seconds
10-22: 09:19:45:580:970 SA life duration 00000e10
10-22: 09:19:45:580:970 SA life type in kilobytes
10-22: 09:19:45:580:970 SA life duration 0003d090
10-22: 09:19:45:580:970 tunnel mode is Transport Mode(2)
10-22: 09:19:45:580:970 HMAC algorithm is MD5(1)
10-22: 09:19:45:580:970 Checking Transform # 2: ID=DES CBC(2)
10-22: 09:19:45:580:970 SA life type in seconds
10-22: 09:19:45:580:970 SA life duration 00000e10
10-22: 09:19:45:580:970 SA life type in kilobytes
10-22: 09:19:45:580:970 SA life duration 0003d090
10-22: 09:19:45:580:970 tunnel mode is Transport Mode(2)
10-22: 09:19:45:580:970 HMAC algorithm is SHA(2)
10-22: 09:19:45:580:970 Checking Proposal 7: Proto= AH(2), num trans=1 Next=2
10-22: 09:19:45:580:970 Checking Transform # 1: ID=SHA(3)
10-22: 09:19:45:580:970 SA life type in seconds
10-22: 09:19:45:580:970 SA life duration 00000e10
10-22: 09:19:45:580:970 SA life type in kilobytes
10-22: 09:19:45:580:970 SA life duration 0003d090
10-22: 09:19:45:580:970 tunnel mode is Transport Mode(2)
10-22: 09:19:45:580:970 HMAC algorithm is SHA(2)
10-22: 09:19:45:580:970 Checking Proposal 7: Proto= ESP(3), num trans=1 Next=2
10-22: 09:19:45:580:970 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:19:45:580:970 SA life type in seconds
10-22: 09:19:45:580:970 SA life duration 00000e10
10-22: 09:19:45:580:970 SA life type in kilobytes
10-22: 09:19:45:580:970 SA life duration 0003d090
10-22: 09:19:45:580:970 tunnel mode is Transport Mode(2)
10-22: 09:19:45:580:970 Checking Proposal 8: Proto= AH(2), num trans=1 Next=2
10-22: 09:19:45:580:970 Checking Transform # 1: ID=MD5(2)
10-22: 09:19:45:580:970 SA life type in seconds
10-22: 09:19:45:580:970 SA life duration 00000e10
10-22: 09:19:45:580:970 SA life type in kilobytes
10-22: 09:19:45:580:970 SA life duration 0003d090
10-22: 09:19:45:580:970 tunnel mode is Transport Mode(2)
10-22: 09:19:45:580:970 HMAC algorithm is MD5(1)
10-22: 09:19:45:580:970 Checking Proposal 8: Proto= ESP(3), num trans=1 Next=2
10-22: 09:19:45:580:970 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:19:45:580:970 SA life type in seconds
10-22: 09:19:45:580:970 SA life duration 00000e10
10-22: 09:19:45:580:970 SA life type in kilobytes
10-22: 09:19:45:580:970 SA life duration 0003d090
10-22: 09:19:45:580:970 tunnel mode is Transport Mode(2)
10-22: 09:19:45:580:970 Checking Proposal 9: Proto= AH(2), num trans=1 Next=2
10-22: 09:19:45:580:970 Checking Transform # 1: ID=SHA(3)
10-22: 09:19:45:580:970 SA life type in seconds
10-22: 09:19:45:580:970 SA life duration 00000e10
10-22: 09:19:45:580:970 SA life type in kilobytes
10-22: 09:19:45:580:970 SA life duration 0003d090
10-22: 09:19:45:580:970 tunnel mode is Transport Mode(2)
10-22: 09:19:45:580:970 HMAC algorithm is SHA(2)
10-22: 09:19:45:580:970 Checking Proposal 9: Proto= ESP(3), num trans=1 Next=2
10-22: 09:19:45:580:970 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:19:45:580:970 SA life type in seconds
10-22: 09:19:45:580:970 SA life duration 00000e10
10-22: 09:19:45:580:970 SA life type in kilobytes
10-22: 09:19:45:590:970 SA life duration 0003d090
10-22: 09:19:45:590:970 tunnel mode is Transport Mode(2)
10-22: 09:19:45:590:970 HMAC algorithm is SHA(2)
10-22: 09:19:45:590:970 Checking Proposal 10: Proto= AH(2), num trans=1 Next=2
10-22: 09:19:45:590:970 Checking Transform # 1: ID=MD5(2)
10-22: 09:19:45:590:970 SA life type in seconds
10-22: 09:19:45:590:970 SA life duration 00000e10
10-22: 09:19:45:590:970 SA life type in kilobytes
10-22: 09:19:45:590:970 SA life duration 0003d090
10-22: 09:19:45:590:970 tunnel mode is Transport Mode(2)
10-22: 09:19:45:590:970 HMAC algorithm is MD5(1)
10-22: 09:19:45:590:970 Checking Proposal 10: Proto= ESP(3), num trans=1 Next=0
10-22: 09:19:45:590:970 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:19:45:590:970 SA life type in seconds
10-22: 09:19:45:590:970 SA life duration 00000e10
10-22: 09:19:45:590:970 SA life type in kilobytes
10-22: 09:19:45:590:970 SA life duration 0003d090
10-22: 09:19:45:590:970 tunnel mode is Transport Mode(2)
10-22: 09:19:45:590:970 HMAC algorithm is MD5(1)
10-22: 09:19:45:590:970 Finding Responder Policy for SRC=192.168.20.5.1701 DST=192.168.20.100.1701, SRCMask=255.255.255.255, DSTMask=255.255.255.255, Prot=17 InTunnelEndpt 0 OutTunnelEndpt 0
10-22: 09:19:45:590:970 QM PolicyName: L2TP Optional Encryption Quick Mode Policy dwFlags 0
10-22: 09:19:45:590:970 QMOffer[0] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:19:45:590:970 QMOffer[0] dwFlags 0 dwPFSGroup 0
10-22: 09:19:45:590:970 Algo[0] Operation: ESP Algo: Triple DES CBC HMAC: MD5
10-22: 09:19:45:590:970 QMOffer[1] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:19:45:590:970 QMOffer[1] dwFlags 0 dwPFSGroup 0
10-22: 09:19:45:590:970 Algo[0] Operation: ESP Algo: Triple DES CBC HMAC: SHA
10-22: 09:19:45:590:970 QMOffer[2] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:19:45:590:970 QMOffer[2] dwFlags 0 dwPFSGroup 0
10-22: 09:19:45:590:970 Algo[0] Operation: AH Algo: SHA
10-22: 09:19:45:590:970 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: 0
10-22: 09:19:45:590:970 QMOffer[3] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:19:45:590:970 QMOffer[3] dwFlags 0 dwPFSGroup 0
10-22: 09:19:45:590:970 Algo[0] Operation: AH Algo: MD5
10-22: 09:19:45:590:970 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: 0
10-22: 09:19:45:590:970 QMOffer[4] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:19:45:590:970 QMOffer[4] dwFlags 0 dwPFSGroup 0
10-22: 09:19:45:590:970 Algo[0] Operation: AH Algo: SHA
10-22: 09:19:45:600:970 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: SHA
10-22: 09:19:45:600:970 QMOffer[5] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:19:45:600:970 QMOffer[5] dwFlags 0 dwPFSGroup 0
10-22: 09:19:45:600:970 Algo[0] Operation: AH Algo: MD5
10-22: 09:19:45:600:970 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: MD5
10-22: 09:19:45:600:970 QMOffer[6] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:19:45:600:970 QMOffer[6] dwFlags 0 dwPFSGroup 0
10-22: 09:19:45:600:970 Algo[0] Operation: ESP Algo: DES CBC HMAC: MD5
10-22: 09:19:45:600:970 QMOffer[7] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:19:45:600:970 QMOffer[7] dwFlags 0 dwPFSGroup 0
10-22: 09:19:45:600:970 Algo[0] Operation: ESP Algo: DES CBC HMAC: SHA
10-22: 09:19:45:600:970 QMOffer[8] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:19:45:600:970 QMOffer[8] dwFlags 0 dwPFSGroup 0
10-22: 09:19:45:600:970 Algo[0] Operation: AH Algo: SHA
10-22: 09:19:45:600:970 Algo[1] Operation: ESP Algo: DES CBC HMAC: 0
10-22: 09:19:45:600:970 QMOffer[9] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:19:45:600:970 QMOffer[9] dwFlags 0 dwPFSGroup 0
10-22: 09:19:45:600:970 Algo[0] Operation: AH Algo: MD5
10-22: 09:19:45:600:970 Algo[1] Operation: ESP Algo: DES CBC HMAC: 0
10-22: 09:19:45:600:970 QMOffer[10] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:19:45:600:970 QMOffer[10] dwFlags 0 dwPFSGroup 0
10-22: 09:19:45:600:970 Algo[0] Operation: AH Algo: SHA
10-22: 09:19:45:600:970 Algo[1] Operation: ESP Algo: DES CBC HMAC: SHA
10-22: 09:19:45:610:970 QMOffer[11] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:19:45:610:970 QMOffer[11] dwFlags 0 dwPFSGroup 0
10-22: 09:19:45:610:970 Algo[0] Operation: AH Algo: MD5
10-22: 09:19:45:610:970 Algo[1] Operation: ESP Algo: DES CBC HMAC: MD5
10-22: 09:19:45:610:970 QMOffer[12] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:19:45:610:970 QMOffer[12] dwFlags 0 dwPFSGroup 0
10-22: 09:19:45:610:970 Algo[0] Operation: ESP Algo: NULL DES HMAC: SHA
10-22: 09:19:45:610:970 QMOffer[13] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:19:45:610:970 QMOffer[13] dwFlags 0 dwPFSGroup 0
10-22: 09:19:45:610:970 Algo[0] Operation: ESP Algo: NULL DES HMAC: MD5
10-22: 09:19:45:610:970 QMOffer[14] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:19:45:610:970 QMOffer[14] dwFlags 0 dwPFSGroup 0
10-22: 09:19:45:610:970 Algo[0] Operation: AH Algo: SHA
10-22: 09:19:45:610:970 QMOffer[15] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:19:45:610:970 QMOffer[15] dwFlags 0 dwPFSGroup 0
10-22: 09:19:45:610:970 Algo[0] Operation: AH Algo: MD5
10-22: 09:19:45:610:970 Phase 2 SA accepted: proposal=1 transform=1
10-22: 09:19:45:610:970 GetSpi: src = 192.168.20.5.1701, dst = 192.168.20.100.1701, proto = 17, context = 00000000, srcMask = 255.255.255.255, destMask = 255.255.255.255, TunnelFilter 0
10-22: 09:19:45:610:970 Setting SPI 711740807
10-22: 09:19:45:610:970 constructing ISAKMP Header
10-22: 09:19:45:610:970 constructing HASH (null)
10-22: 09:19:45:610:970 constructing SA (IPSEC)
10-22: 09:19:45:610:970 constructing NONCE (IPSEC)
10-22: 09:19:45:610:970 constructing ID (proxy)
10-22: 09:19:45:610:970 constructing ID (proxy)
10-22: 09:19:45:610:970 constructing HASH (QM)
10-22: 09:19:45:610:970
10-22: 09:19:45:610:970 Sending: SA = 0x0168EFA0 to 192.168.20.5:Type 2.500
10-22: 09:19:45:610:970 ISAKMP Header: (V1.0), len = 164
10-22: 09:19:45:610:970 I-COOKIE d69744ae065d7cdf
10-22: 09:19:45:610:970 R-COOKIE d2c11fedb1219c1a
10-22: 09:19:45:610:970 exchange: Oakley Quick Mode
10-22: 09:19:45:610:970 flags: 3 ( encrypted commit )
10-22: 09:19:45:610:970 next payload: HASH
10-22: 09:19:45:610:970 message ID: f39fc884
10-22: 09:19:45:610:970 Ports S:f401 D:f401
10-22: 09:19:45:610:970
10-22: 09:19:45:610:970 Receive: (get) SA = 0x0168efa0 from 192.168.20.5.500
10-22: 09:19:45:610:970 ISAKMP Header: (V1.0), len = 52
10-22: 09:19:45:610:970 I-COOKIE d69744ae065d7cdf
10-22: 09:19:45:610:970 R-COOKIE d2c11fedb1219c1a
10-22: 09:19:45:610:970 exchange: Oakley Quick Mode
10-22: 09:19:45:610:970 flags: 3 ( encrypted commit )
10-22: 09:19:45:610:970 next payload: HASH
10-22: 09:19:45:610:970 message ID: f39fc884
10-22: 09:19:45:610:970 processing HASH (QM)
10-22: 09:19:45:610:970 ClearFragList
10-22: 09:19:45:610:970 Adding QMs: src = 192.168.20.100.1701, dst = 192.168.20.5.1701, proto = 17, context = 0000000A, my tunnel = 0.0.0.0, peer tunnel = 0.0.0.0, SrcMask = 0.0.0.0, DestMask = 0.0.0.0 Lifetime = 3600 LifetimeKBytes 250000 dwFlags 0 Direction 1 EncapType 1
10-22: 09:19:45:610:970 Algo[0] Operation: ESP Algo: Triple DES CBC HMAC: MD5
10-22: 09:19:45:610:970 Algo[0] MySpi: 711740807 PeerSpi: 1336656840
10-22: 09:19:45:610:970 Encap Ports Src 500 Dst 500
10-22: 09:19:45:610:970 isadb_set_status sa:0168EFA0 centry:016BC260 status 0
10-22: 09:19:45:610:970 Constructing Commit Notify
10-22: 09:19:45:610:970 constructing ISAKMP Header
10-22: 09:19:45:610:970 constructing HASH (null)
10-22: 09:19:45:610:970 constructing NOTIFY 16384
10-22: 09:19:45:610:970 constructing HASH (QM)
10-22: 09:19:45:610:970
10-22: 09:19:45:610:970 Sending: SA = 0x0168EFA0 to 192.168.20.5:Type 4.500
10-22: 09:19:45:610:970 ISAKMP Header: (V1.0), len = 84
10-22: 09:19:45:610:970 I-COOKIE d69744ae065d7cdf
10-22: 09:19:45:610:970 R-COOKIE d2c11fedb1219c1a
10-22: 09:19:45:610:970 exchange: Oakley Quick Mode
10-22: 09:19:45:610:970 flags: 3 ( encrypted commit )
10-22: 09:19:45:610:970 next payload: HASH
10-22: 09:19:45:610:970 message ID: f39fc884
10-22: 09:19:45:610:970 Ports S:f401 D:f401
10-22: 09:20:20:655:97c
10-22: 09:20:20:655:97c Receive: (get) SA = 0x0168efa0 from 192.168.20.5.500
10-22: 09:20:20:655:97c ISAKMP Header: (V1.0), len = 92
10-22: 09:20:20:655:97c I-COOKIE d69744ae065d7cdf
10-22: 09:20:20:655:97c R-COOKIE d2c11fedb1219c1a
10-22: 09:20:20:655:97c exchange: ISAKMP Informational Exchange
10-22: 09:20:20:655:97c flags: 1 ( encrypted )
10-22: 09:20:20:655:97c next payload: HASH
10-22: 09:20:20:655:97c message ID: f8ed19b1
10-22: 09:20:20:655:97c processing HASH (Notify/Delete)
10-22: 09:20:20:655:97c processing payload NONCE
10-22: 09:20:20:655:97c processing payload DELETE
10-22: 09:20:20:655:97c Expiring SPI 711740807 src 514a8c0 dst 6414a8c0
10-22: 09:20:20:655:97c Received reliable Notify. Messid f8ed19b1
10-22: 09:20:20:655:97c constructing ISAKMP Header
10-22: 09:20:20:655:97c constructing HASH (null)
10-22: 09:20:20:655:97c constructing NONCE (ND)
10-22: 09:20:20:655:97c constructing HASH (Notify/Delete)
10-22: 09:20:20:655:97c
10-22: 09:20:20:655:97c Sending: SA = 0x0168EFA0 to 192.168.20.5:Type 1.500
10-22: 09:20:20:655:97c ISAKMP Header: (V1.0), len = 92
10-22: 09:20:20:655:97c I-COOKIE d69744ae065d7cdf
10-22: 09:20:20:655:97c R-COOKIE d2c11fedb1219c1a
10-22: 09:20:20:655:97c exchange: ISAKMP Informational Exchange
10-22: 09:20:20:655:97c flags: 1 ( encrypted )
10-22: 09:20:20:655:97c next payload: HASH
10-22: 09:20:20:655:97c message ID: f8ed19b1
10-22: 09:20:20:655:97c Ports S:f401 D:f401
10-22: 09:20:20:655:97c QM Deleted. Notify from driver: Src 192.168.20.100 Dest 192.168.20.5 InSPI 711740807 OutSpi 1336656840 Tunnel 0 TunnelFilter 0
10-22: 09:20:20:655:97c PrivatePeerAddr 0
10-22: 09:20:20:775:97c
10-22: 09:20:20:775:97c Receive: (get) SA = 0x0168efa0 from 192.168.20.5.500
10-22: 09:20:20:775:97c ISAKMP Header: (V1.0), len = 108
10-22: 09:20:20:775:97c I-COOKIE d69744ae065d7cdf
10-22: 09:20:20:775:97c R-COOKIE d2c11fedb1219c1a
10-22: 09:20:20:775:97c exchange: ISAKMP Informational Exchange
10-22: 09:20:20:775:97c flags: 1 ( encrypted )
10-22: 09:20:20:775:97c next payload: HASH
10-22: 09:20:20:775:97c message ID: 071361b4
10-22: 09:20:20:775:97c processing HASH (Notify/Delete)
10-22: 09:20:20:775:97c processing payload NONCE
10-22: 09:20:20:775:97c processing payload DELETE
10-22: 09:20:20:775:97c SA Dead. sa:0168EFA0 status:35ef
10-22: 09:20:20:775:97c isadb_set_status sa:0168EFA0 centry:00000000 status 35ef
10-22: 09:20:20:775:97c Received reliable Notify. Messid 71361b4
10-22: 09:20:20:775:97c constructing ISAKMP Header
10-22: 09:20:20:775:97c constructing HASH (null)
10-22: 09:20:20:775:97c constructing NONCE (ND)
10-22: 09:20:20:775:97c constructing HASH (Notify/Delete)
10-22: 09:20:20:775:97c
10-22: 09:20:20:775:97c Sending: SA = 0x0168EFA0 to 192.168.20.5:Type 1.500
10-22: 09:20:20:775:97c ISAKMP Header: (V1.0), len = 108
10-22: 09:20:20:775:97c I-COOKIE d69744ae065d7cdf
10-22: 09:20:20:775:97c R-COOKIE d2c11fedb1219c1a
10-22: 09:20:20:775:97c exchange: ISAKMP Informational Exchange
10-22: 09:20:20:775:97c flags: 1 ( encrypted )
10-22: 09:20:20:775:97c next payload: HASH
10-22: 09:20:20:775:97c message ID: 071361b4
10-22: 09:20:20:775:97c Ports S:f401 D:f401
10-22: 09:20:57:321:980 ClearFragList
10-22: 09:21:28:820:980
10-22: 09:21:28:820:980 Receive: (get) SA = 0x00000000 from 192.168.20.5.500
10-22: 09:21:28:820:980 ISAKMP Header: (V1.0), len = 312
10-22: 09:21:28:820:980 I-COOKIE 49281b0366af2cc9
10-22: 09:21:28:820:980 R-COOKIE 0000000000000000
10-22: 09:21:28:820:980 exchange: Oakley Main Mode
10-22: 09:21:28:820:980 flags: 0
10-22: 09:21:28:820:980 next payload: SA
10-22: 09:21:28:820:980 message ID: 00000000
10-22: 09:21:28:820:980 Filter to match: Src 192.168.20.5 Dst 192.168.20.100
10-22: 09:21:28:820:980 MM PolicyName: L2TP Main Mode Policy
10-22: 09:21:28:820:980 MMPolicy dwFlags 0 SoftSAExpireTime 28800
10-22: 09:21:28:820:980 MMOffer[0] LifetimeSec 28800 QMLimit 0 DHGroup 2
10-22: 09:21:28:820:980 MMOffer[0] Encrypt: Triple DES CBC Hash: SHA
10-22: 09:21:28:820:980 MMOffer[1] LifetimeSec 28800 QMLimit 0 DHGroup 2
10-22: 09:21:28:820:980 MMOffer[1] Encrypt: Triple DES CBC Hash: MD5
10-22: 09:21:28:820:980 MMOffer[2] LifetimeSec 28800 QMLimit 0 DHGroup 1
10-22: 09:21:28:820:980 MMOffer[2] Encrypt: DES CBC Hash: SHA
10-22: 09:21:28:820:980 MMOffer[3] LifetimeSec 28800 QMLimit 0 DHGroup 1
10-22: 09:21:28:820:980 MMOffer[3] Encrypt: DES CBC Hash: MD5
10-22: 09:21:28:820:980 Auth[0]:RSA Sig C=US, CN=Root CA AuthFlags 0
10-22: 09:21:28:820:980 Auth[1]:PresharedKey KeyLen 6
10-22: 09:21:28:820:980 Responding with new SA 168efa0
10-22: 09:21:28:820:980 processing payload SA
10-22: 09:21:28:820:980 Received Phase 1 Transform 1
10-22: 09:21:28:820:980 Encryption Alg Triple DES CBC(5)
10-22: 09:21:28:820:980 Hash Alg SHA(2)
10-22: 09:21:28:820:980 Oakley Group 14
10-22: 09:21:28:820:980 Auth Method Preshared Key(1)
10-22: 09:21:28:820:980 Life type in Seconds
10-22: 09:21:28:820:980 Life duration of 28800
10-22: 09:21:28:820:980 Received Phase 1 Transform 2
10-22: 09:21:28:820:980 Encryption Alg Triple DES CBC(5)
10-22: 09:21:28:820:980 Hash Alg SHA(2)
10-22: 09:21:28:820:980 Oakley Group 2
10-22: 09:21:28:820:980 Auth Method Preshared Key(1)
10-22: 09:21:28:820:980 Life type in Seconds
10-22: 09:21:28:820:980 Life duration of 28800
10-22: 09:21:28:820:980 Received Phase 1 Transform 3
10-22: 09:21:28:820:980 Encryption Alg Triple DES CBC(5)
10-22: 09:21:28:820:980 Hash Alg MD5(1)
10-22: 09:21:28:820:980 Oakley Group 2
10-22: 09:21:28:820:980 Auth Method Preshared Key(1)
10-22: 09:21:28:820:980 Life type in Seconds
10-22: 09:21:28:820:980 Life duration of 28800
10-22: 09:21:28:830:980 Received Phase 1 Transform 4
10-22: 09:21:28:830:980 Encryption Alg DES CBC(1)
10-22: 09:21:28:830:980 Hash Alg SHA(2)
10-22: 09:21:28:830:980 Oakley Group 1
10-22: 09:21:28:830:980 Auth Method Preshared Key(1)
10-22: 09:21:28:830:980 Life type in Seconds
10-22: 09:21:28:830:980 Life duration of 28800
10-22: 09:21:28:830:980 Received Phase 1 Transform 5
10-22: 09:21:28:830:980 Encryption Alg DES CBC(1)
10-22: 09:21:28:830:980 Hash Alg MD5(1)
10-22: 09:21:28:830:980 Oakley Group 1
10-22: 09:21:28:830:980 Auth Method Preshared Key(1)
10-22: 09:21:28:830:980 Life type in Seconds
10-22: 09:21:28:830:980 Life duration of 28800
10-22: 09:21:28:830:980 Phase 1 SA accepted: transform=2
10-22: 09:21:28:830:980 SA - Oakley proposal accepted
10-22: 09:21:28:830:980 processing payload VENDOR ID
10-22: 09:21:28:830:980 Received VendorId MS NT5 ISAKMPOAKLEY
10-22: 09:21:28:830:980 processing payload VENDOR ID
10-22: 09:21:28:830:980 Received VendorId FRAGMENTATION
10-22: 09:21:28:830:980 processing payload VENDOR ID
10-22: 09:21:28:830:980 Received VendorId draft-ietf-ipsec-nat-t-ike-02
10-22: 09:21:28:830:980 processing payload VENDOR ID
10-22: 09:21:28:830:980 Received VendorId Vid-Initial-Contact
10-22: 09:21:28:830:980 ClearFragList
10-22: 09:21:28:830:980 constructing ISAKMP Header
10-22: 09:21:28:830:980 constructing SA (ISAKMP)
10-22: 09:21:28:830:980 Constructing Vendor MS NT5 ISAKMPOAKLEY
10-22: 09:21:28:830:980 Constructing Vendor FRAGMENTATION
10-22: 09:21:28:830:980 Constructing Vendor draft-ietf-ipsec-nat-t-ike-02
10-22: 09:21:28:830:980
10-22: 09:21:28:830:980 Sending: SA = 0x0168EFA0 to 192.168.20.5:Type 2.500
10-22: 09:21:28:830:980 ISAKMP Header: (V1.0), len = 148
10-22: 09:21:28:830:980 I-COOKIE 49281b0366af2cc9
10-22: 09:21:28:830:980 R-COOKIE 01d81744376fbb4b
10-22: 09:21:28:830:980 exchange: Oakley Main Mode
10-22: 09:21:28:830:980 flags: 0
10-22: 09:21:28:830:980 next payload: SA
10-22: 09:21:28:830:980 message ID: 00000000
10-22: 09:21:28:830:980 Ports S:f401 D:f401
10-22: 09:21:28:940:980
10-22: 09:21:28:940:980 Receive: (get) SA = 0x0168efa0 from 192.168.20.5.500
10-22: 09:21:28:940:980 ISAKMP Header: (V1.0), len = 232
10-22: 09:21:28:940:980 I-COOKIE 49281b0366af2cc9
10-22: 09:21:28:940:980 R-COOKIE 01d81744376fbb4b
10-22: 09:21:28:940:980 exchange: Oakley Main Mode
10-22: 09:21:28:940:980 flags: 0
10-22: 09:21:28:940:980 next payload: KE
10-22: 09:21:28:940:980 message ID: 00000000
10-22: 09:21:28:940:980 processing payload KE
10-22: 09:21:29:10:980 processing payload NONCE
10-22: 09:21:29:10:980 processing payload NATDISC
10-22: 09:21:29:10:980 Processing NatHash
10-22: 09:21:29:10:980 Nat hash e20f6681fc6c5f37a28d6db205c2fea0
10-22: 09:21:29:10:980 3f549031
10-22: 09:21:29:10:980 SA StateMask2 e
10-22: 09:21:29:10:980 processing payload NATDISC
10-22: 09:21:29:10:980 Processing NatHash
10-22: 09:21:29:10:980 Nat hash 4099f4a8d3e42a448697e82a4d85e0e4
10-22: 09:21:29:10:980 bd060003
10-22: 09:21:29:10:980 SA StateMask2 8e
10-22: 09:21:29:10:980 ClearFragList
10-22: 09:21:29:10:980 constructing ISAKMP Header
10-22: 09:21:29:10:980 constructing KE
10-22: 09:21:29:10:980 constructing NONCE (ISAKMP)
10-22: 09:21:29:10:980 Constructing NatDisc
10-22: 09:21:29:10:980
10-22: 09:21:29:10:980 Sending: SA = 0x0168EFA0 to 192.168.20.5:Type 2.500
10-22: 09:21:29:10:980 ISAKMP Header: (V1.0), len = 232
10-22: 09:21:29:10:980 I-COOKIE 49281b0366af2cc9
10-22: 09:21:29:10:980 R-COOKIE 01d81744376fbb4b
10-22: 09:21:29:10:980 exchange: Oakley Main Mode
10-22: 09:21:29:10:980 flags: 0
10-22: 09:21:29:10:980 next payload: KE
10-22: 09:21:29:10:980 message ID: 00000000
10-22: 09:21:29:10:980 Ports S:f401 D:f401
10-22: 09:21:29:51:980
10-22: 09:21:29:51:980 Receive: (get) SA = 0x0168efa0 from 192.168.20.5.500
10-22: 09:21:29:51:980 ISAKMP Header: (V1.0), len = 68
10-22: 09:21:29:51:980 I-COOKIE 49281b0366af2cc9
10-22: 09:21:29:51:980 R-COOKIE 01d81744376fbb4b
10-22: 09:21:29:51:980 exchange: Oakley Main Mode
10-22: 09:21:29:51:980 flags: 1 ( encrypted )
10-22: 09:21:29:51:980 next payload: ID
10-22: 09:21:29:51:980 message ID: 00000000
10-22: 09:21:29:51:980 processing payload ID
10-22: 09:21:29:51:980 processing payload HASH
10-22: 09:21:29:51:980 AUTH: Phase I authentication accepted
10-22: 09:21:29:51:980 ClearFragList
10-22: 09:21:29:51:980 constructing ISAKMP Header
10-22: 09:21:29:51:980 constructing ID
10-22: 09:21:29:51:980 MM ID Type 1
10-22: 09:21:29:51:980 MM ID c0a81464
10-22: 09:21:29:51:980 constructing HASH
10-22: 09:21:29:51:980 MM established. SA: 0168EFA0
10-22: 09:21:29:51:980
10-22: 09:21:29:51:980 Sending: SA = 0x0168EFA0 to 192.168.20.5:Type 2.500
10-22: 09:21:29:51:980 ISAKMP Header: (V1.0), len = 68
10-22: 09:21:29:51:980 I-COOKIE 49281b0366af2cc9
10-22: 09:21:29:51:980 R-COOKIE 01d81744376fbb4b
10-22: 09:21:29:51:980 exchange: Oakley Main Mode
10-22: 09:21:29:51:980 flags: 1 ( encrypted )
10-22: 09:21:29:51:980 next payload: ID
10-22: 09:21:29:51:980 message ID: 00000000
10-22: 09:21:29:51:980 Ports S:f401 D:f401
10-22: 09:21:29:51:980
10-22: 09:21:29:51:980 Receive: (get) SA = 0x0168efa0 from 192.168.20.5.500
10-22: 09:21:29:51:980 ISAKMP Header: (V1.0), len = 1116
10-22: 09:21:29:51:980 I-COOKIE 49281b0366af2cc9
10-22: 09:21:29:51:980 R-COOKIE 01d81744376fbb4b
10-22: 09:21:29:51:980 exchange: Oakley Quick Mode
10-22: 09:21:29:51:980 flags: 1 ( encrypted )
10-22: 09:21:29:51:980 next payload: HASH
10-22: 09:21:29:51:980 message ID: ebad7c0c
10-22: 09:21:29:51:980 processing HASH (QM)
10-22: 09:21:29:51:980 ClearFragList
10-22: 09:21:29:51:980 processing payload NONCE
10-22: 09:21:29:51:980 processing payload ID
10-22: 09:21:29:51:980 processing payload ID
10-22: 09:21:29:51:980 processing payload SA
10-22: 09:21:29:51:980 Negotiated Proxy ID: Src 192.168.20.5.1701 Dst 192.168.20.100.1701
10-22: 09:21:29:51:980 Checking Proposal 1: Proto= ESP(3), num trans=2 Next=2
10-22: 09:21:29:51:980 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:21:29:51:980 SA life type in seconds
10-22: 09:21:29:51:980 SA life duration 00000e10
10-22: 09:21:29:51:980 SA life type in kilobytes
10-22: 09:21:29:51:980 SA life duration 0003d090
10-22: 09:21:29:51:980 tunnel mode is Transport Mode(2)
10-22: 09:21:29:51:980 HMAC algorithm is MD5(1)
10-22: 09:21:29:51:980 Checking Transform # 2: ID=Triple DES CBC(3)
10-22: 09:21:29:51:980 SA life type in seconds
10-22: 09:21:29:51:980 SA life duration 00000e10
10-22: 09:21:29:51:980 SA life type in kilobytes
10-22: 09:21:29:51:980 SA life duration 0003d090
10-22: 09:21:29:51:980 tunnel mode is Transport Mode(2)
10-22: 09:21:29:51:980 HMAC algorithm is SHA(2)
10-22: 09:21:29:51:980 Checking Proposal 2: Proto= AH(2), num trans=1 Next=2
10-22: 09:21:29:51:980 Checking Transform # 1: ID=SHA(3)
10-22: 09:21:29:51:980 SA life type in seconds
10-22: 09:21:29:51:980 SA life duration 00000e10
10-22: 09:21:29:51:980 SA life type in kilobytes
10-22: 09:21:29:51:980 SA life duration 0003d090
10-22: 09:21:29:51:980 tunnel mode is Transport Mode(2)
10-22: 09:21:29:51:980 HMAC algorithm is SHA(2)
10-22: 09:21:29:51:980 Checking Proposal 2: Proto= ESP(3), num trans=1 Next=2
10-22: 09:21:29:51:980 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:21:29:51:980 SA life type in seconds
10-22: 09:21:29:51:980 SA life duration 00000e10
10-22: 09:21:29:51:980 SA life type in kilobytes
10-22: 09:21:29:51:980 SA life duration 0003d090
10-22: 09:21:29:51:980 tunnel mode is Transport Mode(2)
10-22: 09:21:29:51:980 Checking Proposal 3: Proto= AH(2), num trans=1 Next=2
10-22: 09:21:29:51:980 Checking Transform # 1: ID=MD5(2)
10-22: 09:21:29:51:980 SA life type in seconds
10-22: 09:21:29:51:980 SA life duration 00000e10
10-22: 09:21:29:51:980 SA life type in kilobytes
10-22: 09:21:29:51:980 SA life duration 0003d090
10-22: 09:21:29:51:980 tunnel mode is Transport Mode(2)
10-22: 09:21:29:51:980 HMAC algorithm is MD5(1)
10-22: 09:21:29:51:980 Checking Proposal 3: Proto= ESP(3), num trans=1 Next=2
10-22: 09:21:29:51:980 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:21:29:51:980 SA life type in seconds
10-22: 09:21:29:51:980 SA life duration 00000e10
10-22: 09:21:29:51:980 SA life type in kilobytes
10-22: 09:21:29:51:980 SA life duration 0003d090
10-22: 09:21:29:51:980 tunnel mode is Transport Mode(2)
10-22: 09:21:29:51:980 Checking Proposal 4: Proto= AH(2), num trans=1 Next=2
10-22: 09:21:29:51:980 Checking Transform # 1: ID=SHA(3)
10-22: 09:21:29:51:980 SA life type in seconds
10-22: 09:21:29:51:980 SA life duration 00000e10
10-22: 09:21:29:51:980 SA life type in kilobytes
10-22: 09:21:29:51:980 SA life duration 0003d090
10-22: 09:21:29:51:980 tunnel mode is Transport Mode(2)
10-22: 09:21:29:51:980 HMAC algorithm is SHA(2)
10-22: 09:21:29:51:980 Checking Proposal 4: Proto= ESP(3), num trans=1 Next=2
10-22: 09:21:29:51:980 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:21:29:51:980 SA life type in seconds
10-22: 09:21:29:51:980 SA life duration 00000e10
10-22: 09:21:29:51:980 SA life type in kilobytes
10-22: 09:21:29:51:980 SA life duration 0003d090
10-22: 09:21:29:51:980 tunnel mode is Transport Mode(2)
10-22: 09:21:29:51:980 HMAC algorithm is SHA(2)
10-22: 09:21:29:51:980 Checking Proposal 5: Proto= AH(2), num trans=1 Next=2
10-22: 09:21:29:51:980 Checking Transform # 1: ID=MD5(2)
10-22: 09:21:29:51:980 SA life type in seconds
10-22: 09:21:29:51:980 SA life duration 00000e10
10-22: 09:21:29:51:980 SA life type in kilobytes
10-22: 09:21:29:51:980 SA life duration 0003d090
10-22: 09:21:29:51:980 tunnel mode is Transport Mode(2)
10-22: 09:21:29:51:980 HMAC algorithm is MD5(1)
10-22: 09:21:29:51:980 Checking Proposal 5: Proto= ESP(3), num trans=1 Next=2
10-22: 09:21:29:61:980 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:21:29:61:980 SA life type in seconds
10-22: 09:21:29:61:980 SA life duration 00000e10
10-22: 09:21:29:61:980 SA life type in kilobytes
10-22: 09:21:29:61:980 SA life duration 0003d090
10-22: 09:21:29:61:980 tunnel mode is Transport Mode(2)
10-22: 09:21:29:61:980 HMAC algorithm is MD5(1)
10-22: 09:21:29:61:980 Checking Proposal 6: Proto= ESP(3), num trans=2 Next=2
10-22: 09:21:29:61:980 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:21:29:61:980 SA life type in seconds
10-22: 09:21:29:61:980 SA life duration 00000e10
10-22: 09:21:29:61:980 SA life type in kilobytes
10-22: 09:21:29:61:980 SA life duration 0003d090
10-22: 09:21:29:61:980 tunnel mode is Transport Mode(2)
10-22: 09:21:29:61:980 HMAC algorithm is MD5(1)
10-22: 09:21:29:61:980 Checking Transform # 2: ID=DES CBC(2)
10-22: 09:21:29:61:980 SA life type in seconds
10-22: 09:21:29:61:980 SA life duration 00000e10
10-22: 09:21:29:61:980 SA life type in kilobytes
10-22: 09:21:29:61:980 SA life duration 0003d090
10-22: 09:21:29:61:980 tunnel mode is Transport Mode(2)
10-22: 09:21:29:61:980 HMAC algorithm is SHA(2)
10-22: 09:21:29:61:980 Checking Proposal 7: Proto= AH(2), num trans=1 Next=2
10-22: 09:21:29:61:980 Checking Transform # 1: ID=SHA(3)
10-22: 09:21:29:61:980 SA life type in seconds
10-22: 09:21:29:61:980 SA life duration 00000e10
10-22: 09:21:29:61:980 SA life type in kilobytes
10-22: 09:21:29:61:980 SA life duration 0003d090
10-22: 09:21:29:61:980 tunnel mode is Transport Mode(2)
10-22: 09:21:29:61:980 HMAC algorithm is SHA(2)
10-22: 09:21:29:61:980 Checking Proposal 7: Proto= ESP(3), num trans=1 Next=2
10-22: 09:21:29:61:980 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:21:29:61:980 SA life type in seconds
10-22: 09:21:29:61:980 SA life duration 00000e10
10-22: 09:21:29:61:980 SA life type in kilobytes
10-22: 09:21:29:61:980 SA life duration 0003d090
10-22: 09:21:29:61:980 tunnel mode is Transport Mode(2)
10-22: 09:21:29:61:980 Checking Proposal 8: Proto= AH(2), num trans=1 Next=2
10-22: 09:21:29:61:980 Checking Transform # 1: ID=MD5(2)
10-22: 09:21:29:61:980 SA life type in seconds
10-22: 09:21:29:61:980 SA life duration 00000e10
10-22: 09:21:29:61:980 SA life type in kilobytes
10-22: 09:21:29:61:980 SA life duration 0003d090
10-22: 09:21:29:61:980 tunnel mode is Transport Mode(2)
10-22: 09:21:29:61:980 HMAC algorithm is MD5(1)
10-22: 09:21:29:61:980 Checking Proposal 8: Proto= ESP(3), num trans=1 Next=2
10-22: 09:21:29:61:980 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:21:29:61:980 SA life type in seconds
10-22: 09:21:29:61:980 SA life duration 00000e10
10-22: 09:21:29:61:980 SA life type in kilobytes
10-22: 09:21:29:61:980 SA life duration 0003d090
10-22: 09:21:29:61:980 tunnel mode is Transport Mode(2)
10-22: 09:21:29:61:980 Checking Proposal 9: Proto= AH(2), num trans=1 Next=2
10-22: 09:21:29:61:980 Checking Transform # 1: ID=SHA(3)
10-22: 09:21:29:61:980 SA life type in seconds
10-22: 09:21:29:61:980 SA life duration 00000e10
10-22: 09:21:29:61:980 SA life type in kilobytes
10-22: 09:21:29:61:980 SA life duration 0003d090
10-22: 09:21:29:61:980 tunnel mode is Transport Mode(2)
10-22: 09:21:29:61:980 HMAC algorithm is SHA(2)
10-22: 09:21:29:61:980 Checking Proposal 9: Proto= ESP(3), num trans=1 Next=2
10-22: 09:21:29:61:980 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:21:29:61:980 SA life type in seconds
10-22: 09:21:29:61:980 SA life duration 00000e10
10-22: 09:21:29:61:980 SA life type in kilobytes
10-22: 09:21:29:61:980 SA life duration 0003d090
10-22: 09:21:29:61:980 tunnel mode is Transport Mode(2)
10-22: 09:21:29:61:980 HMAC algorithm is SHA(2)
10-22: 09:21:29:61:980 Checking Proposal 10: Proto= AH(2), num trans=1 Next=2
10-22: 09:21:29:61:980 Checking Transform # 1: ID=MD5(2)
10-22: 09:21:29:61:980 SA life type in seconds
10-22: 09:21:29:61:980 SA life duration 00000e10
10-22: 09:21:29:61:980 SA life type in kilobytes
10-22: 09:21:29:61:980 SA life duration 0003d090
10-22: 09:21:29:61:980 tunnel mode is Transport Mode(2)
10-22: 09:21:29:61:980 HMAC algorithm is MD5(1)
10-22: 09:21:29:61:980 Checking Proposal 10: Proto= ESP(3), num trans=1 Next=0
10-22: 09:21:29:61:980 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:21:29:61:980 SA life type in seconds
10-22: 09:21:29:61:980 SA life duration 00000e10
10-22: 09:21:29:61:980 SA life type in kilobytes
10-22: 09:21:29:61:980 SA life duration 0003d090
10-22: 09:21:29:61:980 tunnel mode is Transport Mode(2)
10-22: 09:21:29:61:980 HMAC algorithm is MD5(1)
10-22: 09:21:29:61:980 Finding Responder Policy for SRC=192.168.20.5.1701 DST=192.168.20.100.1701, SRCMask=255.255.255.255, DSTMask=255.255.255.255, Prot=17 InTunnelEndpt 0 OutTunnelEndpt 0
10-22: 09:21:29:61:980 QM PolicyName: L2TP Optional Encryption Quick Mode Policy dwFlags 0
10-22: 09:21:29:61:980 QMOffer[0] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:21:29:61:980 QMOffer[0] dwFlags 0 dwPFSGroup 0
10-22: 09:21:29:61:980 Algo[0] Operation: ESP Algo: Triple DES CBC HMAC: MD5
10-22: 09:21:29:61:980 QMOffer[1] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:21:29:61:980 QMOffer[1] dwFlags 0 dwPFSGroup 0
10-22: 09:21:29:61:980 Algo[0] Operation: ESP Algo: Triple DES CBC HMAC: SHA
10-22: 09:21:29:61:980 QMOffer[2] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:21:29:61:980 QMOffer[2] dwFlags 0 dwPFSGroup 0
10-22: 09:21:29:61:980 Algo[0] Operation: AH Algo: SHA
10-22: 09:21:29:61:980 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: 0
10-22: 09:21:29:61:980 QMOffer[3] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:21:29:61:980 QMOffer[3] dwFlags 0 dwPFSGroup 0
10-22: 09:21:29:61:980 Algo[0] Operation: AH Algo: MD5
10-22: 09:21:29:61:980 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: 0
10-22: 09:21:29:61:980 QMOffer[4] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:21:29:61:980 QMOffer[4] dwFlags 0 dwPFSGroup 0
10-22: 09:21:29:61:980 Algo[0] Operation: AH Algo: SHA
10-22: 09:21:29:61:980 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: SHA
10-22: 09:21:29:61:980 QMOffer[5] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:21:29:61:980 QMOffer[5] dwFlags 0 dwPFSGroup 0
10-22: 09:21:29:61:980 Algo[0] Operation: AH Algo: MD5
10-22: 09:21:29:61:980 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: MD5
10-22: 09:21:29:61:980 QMOffer[6] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:21:29:61:980 QMOffer[6] dwFlags 0 dwPFSGroup 0
10-22: 09:21:29:61:980 Algo[0] Operation: ESP Algo: DES CBC HMAC: MD5
10-22: 09:21:29:61:980 QMOffer[7] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:21:29:61:980 QMOffer[7] dwFlags 0 dwPFSGroup 0
10-22: 09:21:29:61:980 Algo[0] Operation: ESP Algo: DES CBC HMAC: SHA
10-22: 09:21:29:61:980 QMOffer[8] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:21:29:61:980 QMOffer[8] dwFlags 0 dwPFSGroup 0
10-22: 09:21:29:61:980 Algo[0] Operation: AH Algo: SHA
10-22: 09:21:29:61:980 Algo[1] Operation: ESP Algo: DES CBC HMAC: 0
10-22: 09:21:29:61:980 QMOffer[9] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:21:29:61:980 QMOffer[9] dwFlags 0 dwPFSGroup 0
10-22: 09:21:29:61:980 Algo[0] Operation: AH Algo: MD5
10-22: 09:21:29:61:980 Algo[1] Operation: ESP Algo: DES CBC HMAC: 0
10-22: 09:21:29:61:980 QMOffer[10] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:21:29:61:980 QMOffer[10] dwFlags 0 dwPFSGroup 0
10-22: 09:21:29:61:980 Algo[0] Operation: AH Algo: SHA
10-22: 09:21:29:61:980 Algo[1] Operation: ESP Algo: DES CBC HMAC: SHA
10-22: 09:21:29:61:980 QMOffer[11] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:21:29:61:980 QMOffer[11] dwFlags 0 dwPFSGroup 0
10-22: 09:21:29:61:980 Algo[0] Operation: AH Algo: MD5
10-22: 09:21:29:61:980 Algo[1] Operation: ESP Algo: DES CBC HMAC: MD5
10-22: 09:21:29:61:980 QMOffer[12] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:21:29:61:980 QMOffer[12] dwFlags 0 dwPFSGroup 0
10-22: 09:21:29:61:980 Algo[0] Operation: ESP Algo: NULL DES HMAC: SHA
10-22: 09:21:29:61:980 QMOffer[13] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:21:29:61:980 QMOffer[13] dwFlags 0 dwPFSGroup 0
10-22: 09:21:29:61:980 Algo[0] Operation: ESP Algo: NULL DES HMAC: MD5
10-22: 09:21:29:61:980 QMOffer[14] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:21:29:61:980 QMOffer[14] dwFlags 0 dwPFSGroup 0
10-22: 09:21:29:61:980 Algo[0] Operation: AH Algo: SHA
10-22: 09:21:29:61:980 QMOffer[15] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:21:29:61:980 QMOffer[15] dwFlags 0 dwPFSGroup 0
10-22: 09:21:29:61:980 Algo[0] Operation: AH Algo: MD5
10-22: 09:21:29:61:980 Phase 2 SA accepted: proposal=1 transform=1
10-22: 09:21:29:61:980 GetSpi: src = 192.168.20.5.1701, dst = 192.168.20.100.1701, proto = 17, context = 00000000, srcMask = 255.255.255.255, destMask = 255.255.255.255, TunnelFilter 0
10-22: 09:21:29:61:980 Setting SPI 1751836953
10-22: 09:21:29:61:980 constructing ISAKMP Header
10-22: 09:21:29:61:980 constructing HASH (null)
10-22: 09:21:29:61:980 constructing SA (IPSEC)
10-22: 09:21:29:61:980 constructing NONCE (IPSEC)
10-22: 09:21:29:61:980 constructing ID (proxy)
10-22: 09:21:29:61:980 constructing ID (proxy)
10-22: 09:21:29:61:980 constructing HASH (QM)
10-22: 09:21:29:61:980
10-22: 09:21:29:61:980 Sending: SA = 0x0168EFA0 to 192.168.20.5:Type 2.500
10-22: 09:21:29:61:980 ISAKMP Header: (V1.0), len = 164
10-22: 09:21:29:61:980 I-COOKIE 49281b0366af2cc9
10-22: 09:21:29:61:980 R-COOKIE 01d81744376fbb4b
10-22: 09:21:29:61:980 exchange: Oakley Quick Mode
10-22: 09:21:29:61:980 flags: 3 ( encrypted commit )
10-22: 09:21:29:61:980 next payload: HASH
10-22: 09:21:29:61:980 message ID: ebad7c0c
10-22: 09:21:29:61:980 Ports S:f401 D:f401
10-22: 09:21:29:61:980
10-22: 09:21:29:61:980 Receive: (get) SA = 0x0168efa0 from 192.168.20.5.500
10-22: 09:21:29:61:980 ISAKMP Header: (V1.0), len = 52
10-22: 09:21:29:61:980 I-COOKIE 49281b0366af2cc9
10-22: 09:21:29:61:980 R-COOKIE 01d81744376fbb4b
10-22: 09:21:29:61:980 exchange: Oakley Quick Mode
10-22: 09:21:29:61:980 flags: 3 ( encrypted commit )
10-22: 09:21:29:61:980 next payload: HASH
10-22: 09:21:29:61:980 message ID: ebad7c0c
10-22: 09:21:29:61:980 processing HASH (QM)
10-22: 09:21:29:61:980 ClearFragList
10-22: 09:21:29:61:980 Adding QMs: src = 192.168.20.100.1701, dst = 192.168.20.5.1701, proto = 17, context = 0000000B, my tunnel = 0.0.0.0, peer tunnel = 0.0.0.0, SrcMask = 0.0.0.0, DestMask = 0.0.0.0 Lifetime = 3600 LifetimeKBytes 250000 dwFlags 0 Direction 1 EncapType 1
10-22: 09:21:29:61:980 Algo[0] Operation: ESP Algo: Triple DES CBC HMAC: MD5
10-22: 09:21:29:61:980 Algo[0] MySpi: 1751836953 PeerSpi: 1090529650
10-22: 09:21:29:61:980 Encap Ports Src 500 Dst 500
10-22: 09:21:29:61:980 isadb_set_status sa:0168EFA0 centry:016BC260 status 0
10-22: 09:21:29:61:980 Constructing Commit Notify
10-22: 09:21:29:61:980 constructing ISAKMP Header
10-22: 09:21:29:61:980 constructing HASH (null)
10-22: 09:21:29:61:980 constructing NOTIFY 16384
10-22: 09:21:29:61:980 constructing HASH (QM)
10-22: 09:21:29:61:980
10-22: 09:21:29:61:980 Sending: SA = 0x0168EFA0 to 192.168.20.5:Type 4.500
10-22: 09:21:29:61:980 ISAKMP Header: (V1.0), len = 84
10-22: 09:21:29:61:980 I-COOKIE 49281b0366af2cc9
10-22: 09:21:29:61:980 R-COOKIE 01d81744376fbb4b
10-22: 09:21:29:61:980 exchange: Oakley Quick Mode
10-22: 09:21:29:61:980 flags: 3 ( encrypted commit )
10-22: 09:21:29:61:980 next payload: HASH
10-22: 09:21:29:71:980 message ID: ebad7c0c
10-22: 09:21:29:71:980 Ports S:f401 D:f401
10-22: 09:21:58:35:98c
10-22: 09:21:58:35:98c Receive: (get) SA = 0x0168efa0 from 192.168.20.5.500
10-22: 09:21:58:35:98c ISAKMP Header: (V1.0), len = 92
10-22: 09:21:58:35:98c I-COOKIE 49281b0366af2cc9
10-22: 09:21:58:35:98c R-COOKIE 01d81744376fbb4b
10-22: 09:21:58:35:98c exchange: ISAKMP Informational Exchange
10-22: 09:21:58:35:98c flags: 1 ( encrypted )
10-22: 09:21:58:35:98c next payload: HASH
10-22: 09:21:58:35:98c message ID: 5c5e5c4a
10-22: 09:21:58:35:98c processing HASH (Notify/Delete)
10-22: 09:21:58:35:98c processing payload NONCE
10-22: 09:21:58:35:98c processing payload DELETE
10-22: 09:21:58:35:98c Expiring SPI 1751836953 src 514a8c0 dst 6414a8c0
10-22: 09:21:58:35:98c Received reliable Notify. Messid 5c5e5c4a
10-22: 09:21:58:35:98c constructing ISAKMP Header
10-22: 09:21:58:35:98c constructing HASH (null)
10-22: 09:21:58:35:98c constructing NONCE (ND)
10-22: 09:21:58:35:98c constructing HASH (Notify/Delete)
10-22: 09:21:58:35:98c
10-22: 09:21:58:35:98c Sending: SA = 0x0168EFA0 to 192.168.20.5:Type 1.500
10-22: 09:21:58:35:98c ISAKMP Header: (V1.0), len = 92
10-22: 09:21:58:35:98c I-COOKIE 49281b0366af2cc9
10-22: 09:21:58:35:98c R-COOKIE 01d81744376fbb4b
10-22: 09:21:58:35:98c exchange: ISAKMP Informational Exchange
10-22: 09:21:58:35:98c flags: 1 ( encrypted )
10-22: 09:21:58:35:98c next payload: HASH
10-22: 09:21:58:35:98c message ID: 5c5e5c4a
10-22: 09:21:58:35:98c Ports S:f401 D:f401
10-22: 09:21:58:35:98c QM Deleted. Notify from driver: Src 192.168.20.100 Dest 192.168.20.5 InSPI 1751836953 OutSpi 1090529650 Tunnel 0 TunnelFilter 0
10-22: 09:21:58:35:98c PrivatePeerAddr 0
10-22: 09:21:58:45:98c
10-22: 09:21:58:45:98c Receive: (get) SA = 0x0168efa0 from 192.168.20.5.500
10-22: 09:21:58:45:98c ISAKMP Header: (V1.0), len = 108
10-22: 09:21:58:45:98c I-COOKIE 49281b0366af2cc9
10-22: 09:21:58:45:98c R-COOKIE 01d81744376fbb4b
10-22: 09:21:58:45:98c exchange: ISAKMP Informational Exchange
10-22: 09:21:58:45:98c flags: 1 ( encrypted )
10-22: 09:21:58:45:98c next payload: HASH
10-22: 09:21:58:45:98c message ID: 59565ab0
10-22: 09:21:58:45:98c processing HASH (Notify/Delete)
10-22: 09:21:58:45:98c processing payload NONCE
10-22: 09:21:58:45:98c processing payload DELETE
10-22: 09:21:58:45:98c SA Dead. sa:0168EFA0 status:35ef
10-22: 09:21:58:45:98c isadb_set_status sa:0168EFA0 centry:00000000 status 35ef
10-22: 09:21:58:45:98c Received reliable Notify. Messid 59565ab0
10-22: 09:21:58:45:98c constructing ISAKMP Header
10-22: 09:21:58:45:98c constructing HASH (null)
10-22: 09:21:58:45:98c constructing NONCE (ND)
10-22: 09:21:58:45:98c constructing HASH (Notify/Delete)
10-22: 09:21:58:45:98c
10-22: 09:21:58:45:98c Sending: SA = 0x0168EFA0 to 192.168.20.5:Type 1.500
10-22: 09:21:58:45:98c ISAKMP Header: (V1.0), len = 108
10-22: 09:21:58:45:98c I-COOKIE 49281b0366af2cc9
10-22: 09:21:58:45:98c R-COOKIE 01d81744376fbb4b
10-22: 09:21:58:45:98c exchange: ISAKMP Informational Exchange
10-22: 09:21:58:45:98c flags: 1 ( encrypted )
10-22: 09:21:58:45:98c next payload: HASH
10-22: 09:21:58:45:98c message ID: 59565ab0
10-22: 09:21:58:45:98c Ports S:f401 D:f401
10-22: 09:22:27:341:990 ClearFragList
10-22: 09:22:40:631:990
10-22: 09:22:40:631:990 Receive: (get) SA = 0x00000000 from 192.168.20.5.500
10-22: 09:22:40:631:990 ISAKMP Header: (V1.0), len = 312
10-22: 09:22:40:631:990 I-COOKIE 9f56f94db2d1954a
10-22: 09:22:40:631:990 R-COOKIE 0000000000000000
10-22: 09:22:40:631:990 exchange: Oakley Main Mode
10-22: 09:22:40:631:990 flags: 0
10-22: 09:22:40:631:990 next payload: SA
10-22: 09:22:40:631:990 message ID: 00000000
10-22: 09:22:40:631:990 Filter to match: Src 192.168.20.5 Dst 192.168.20.100
10-22: 09:22:40:631:990 MM PolicyName: L2TP Main Mode Policy
10-22: 09:22:40:631:990 MMPolicy dwFlags 0 SoftSAExpireTime 28800
10-22: 09:22:40:631:990 MMOffer[0] LifetimeSec 28800 QMLimit 0 DHGroup 2
10-22: 09:22:40:631:990 MMOffer[0] Encrypt: Triple DES CBC Hash: SHA
10-22: 09:22:40:631:990 MMOffer[1] LifetimeSec 28800 QMLimit 0 DHGroup 2
10-22: 09:22:40:631:990 MMOffer[1] Encrypt: Triple DES CBC Hash: MD5
10-22: 09:22:40:631:990 MMOffer[2] LifetimeSec 28800 QMLimit 0 DHGroup 1
10-22: 09:22:40:631:990 MMOffer[2] Encrypt: DES CBC Hash: SHA
10-22: 09:22:40:631:990 MMOffer[3] LifetimeSec 28800 QMLimit 0 DHGroup 1
10-22: 09:22:40:631:990 MMOffer[3] Encrypt: DES CBC Hash: MD5
10-22: 09:22:40:631:990 Auth[0]:RSA Sig C=US, CN=Root CA AuthFlags 0
10-22: 09:22:40:631:990 Auth[1]:PresharedKey KeyLen 6
10-22: 09:22:40:631:990 Responding with new SA 168efa0
10-22: 09:22:40:631:990 processing payload SA
10-22: 09:22:40:631:990 Received Phase 1 Transform 1
10-22: 09:22:40:631:990 Encryption Alg Triple DES CBC(5)
10-22: 09:22:40:631:990 Hash Alg SHA(2)
10-22: 09:22:40:631:990 Oakley Group 14
10-22: 09:22:40:631:990 Auth Method Preshared Key(1)
10-22: 09:22:40:631:990 Life type in Seconds
10-22: 09:22:40:631:990 Life duration of 28800
10-22: 09:22:40:631:990 Received Phase 1 Transform 2
10-22: 09:22:40:631:990 Encryption Alg Triple DES CBC(5)
10-22: 09:22:40:631:990 Hash Alg SHA(2)
10-22: 09:22:40:631:990 Oakley Group 2
10-22: 09:22:40:631:990 Auth Method Preshared Key(1)
10-22: 09:22:40:631:990 Life type in Seconds
10-22: 09:22:40:631:990 Life duration of 28800
10-22: 09:22:40:631:990 Received Phase 1 Transform 3
10-22: 09:22:40:631:990 Encryption Alg Triple DES CBC(5)
10-22: 09:22:40:631:990 Hash Alg MD5(1)
10-22: 09:22:40:631:990 Oakley Group 2
10-22: 09:22:40:631:990 Auth Method Preshared Key(1)
10-22: 09:22:40:631:990 Life type in Seconds
10-22: 09:22:40:631:990 Life duration of 28800
10-22: 09:22:40:631:990 Received Phase 1 Transform 4
10-22: 09:22:40:631:990 Encryption Alg DES CBC(1)
10-22: 09:22:40:631:990 Hash Alg SHA(2)
10-22: 09:22:40:631:990 Oakley Group 1
10-22: 09:22:40:631:990 Auth Method Preshared Key(1)
10-22: 09:22:40:631:990 Life type in Seconds
10-22: 09:22:40:631:990 Life duration of 28800
10-22: 09:22:40:631:990 Received Phase 1 Transform 5
10-22: 09:22:40:631:990 Encryption Alg DES CBC(1)
10-22: 09:22:40:631:990 Hash Alg MD5(1)
10-22: 09:22:40:631:990 Oakley Group 1
10-22: 09:22:40:631:990 Auth Method Preshared Key(1)
10-22: 09:22:40:631:990 Life type in Seconds
10-22: 09:22:40:631:990 Life duration of 28800
10-22: 09:22:40:631:990 Phase 1 SA accepted: transform=2
10-22: 09:22:40:631:990 SA - Oakley proposal accepted
10-22: 09:22:40:631:990 processing payload VENDOR ID
10-22: 09:22:40:631:990 Received VendorId MS NT5 ISAKMPOAKLEY
10-22: 09:22:40:631:990 processing payload VENDOR ID
10-22: 09:22:40:631:990 Received VendorId FRAGMENTATION
10-22: 09:22:40:631:990 processing payload VENDOR ID
10-22: 09:22:40:631:990 Received VendorId draft-ietf-ipsec-nat-t-ike-02
10-22: 09:22:40:631:990 processing payload VENDOR ID
10-22: 09:22:40:631:990 Received VendorId Vid-Initial-Contact
10-22: 09:22:40:631:990 ClearFragList
10-22: 09:22:40:631:990 constructing ISAKMP Header
10-22: 09:22:40:631:990 constructing SA (ISAKMP)
10-22: 09:22:40:631:990 Constructing Vendor MS NT5 ISAKMPOAKLEY
10-22: 09:22:40:631:990 Constructing Vendor FRAGMENTATION
10-22: 09:22:40:631:990 Constructing Vendor draft-ietf-ipsec-nat-t-ike-02
10-22: 09:22:40:631:990
10-22: 09:22:40:631:990 Sending: SA = 0x0168EFA0 to 192.168.20.5:Type 2.500
10-22: 09:22:40:631:990 ISAKMP Header: (V1.0), len = 148
10-22: 09:22:40:631:990 I-COOKIE 9f56f94db2d1954a
10-22: 09:22:40:631:990 R-COOKIE ccf230a46d3ad82e
10-22: 09:22:40:631:990 exchange: Oakley Main Mode
10-22: 09:22:40:631:990 flags: 0
10-22: 09:22:40:631:990 next payload: SA
10-22: 09:22:40:631:990 message ID: 00000000
10-22: 09:22:40:631:990 Ports S:f401 D:f401
10-22: 09:22:40:752:990
10-22: 09:22:40:752:990 Receive: (get) SA = 0x0168efa0 from 192.168.20.5.500
10-22: 09:22:40:752:990 ISAKMP Header: (V1.0), len = 232
10-22: 09:22:40:752:990 I-COOKIE 9f56f94db2d1954a
10-22: 09:22:40:752:990 R-COOKIE ccf230a46d3ad82e
10-22: 09:22:40:752:990 exchange: Oakley Main Mode
10-22: 09:22:40:752:990 flags: 0
10-22: 09:22:40:752:990 next payload: KE
10-22: 09:22:40:752:990 message ID: 00000000
10-22: 09:22:40:752:990 processing payload KE
10-22: 09:22:40:812:990 processing payload NONCE
10-22: 09:22:40:812:990 processing payload NATDISC
10-22: 09:22:40:812:990 Processing NatHash
10-22: 09:22:40:812:990 Nat hash b62728cfb0f5cb58814478b44f30c0e0
10-22: 09:22:40:812:990 da581318
10-22: 09:22:40:812:990 SA StateMask2 e
10-22: 09:22:40:812:990 processing payload NATDISC
10-22: 09:22:40:812:990 Processing NatHash
10-22: 09:22:40:812:990 Nat hash 221273bd78d007994f570ea6effc71e2
10-22: 09:22:40:812:990 6e51ae20
10-22: 09:22:40:812:990 SA StateMask2 8e
10-22: 09:22:40:812:990 ClearFragList
10-22: 09:22:40:822:990 constructing ISAKMP Header
10-22: 09:22:40:822:990 constructing KE
10-22: 09:22:40:822:990 constructing NONCE (ISAKMP)
10-22: 09:22:40:822:990 Constructing NatDisc
10-22: 09:22:40:822:990
10-22: 09:22:40:822:990 Sending: SA = 0x0168EFA0 to 192.168.20.5:Type 2.500
10-22: 09:22:40:822:990 ISAKMP Header: (V1.0), len = 232
10-22: 09:22:40:822:990 I-COOKIE 9f56f94db2d1954a
10-22: 09:22:40:822:990 R-COOKIE ccf230a46d3ad82e
10-22: 09:22:40:822:990 exchange: Oakley Main Mode
10-22: 09:22:40:822:990 flags: 0
10-22: 09:22:40:822:990 next payload: KE
10-22: 09:22:40:822:990 message ID: 00000000
10-22: 09:22:40:822:990 Ports S:f401 D:f401
10-22: 09:22:40:852:990
10-22: 09:22:40:852:990 Receive: (get) SA = 0x0168efa0 from 192.168.20.5.500
10-22: 09:22:40:852:990 ISAKMP Header: (V1.0), len = 68
10-22: 09:22:40:852:990 I-COOKIE 9f56f94db2d1954a
10-22: 09:22:40:852:990 R-COOKIE ccf230a46d3ad82e
10-22: 09:22:40:852:990 exchange: Oakley Main Mode
10-22: 09:22:40:852:990 flags: 1 ( encrypted )
10-22: 09:22:40:852:990 next payload: ID
10-22: 09:22:40:852:990 message ID: 00000000
10-22: 09:22:40:862:990 processing payload ID
10-22: 09:22:40:862:990 processing payload HASH
10-22: 09:22:40:862:990 AUTH: Phase I authentication accepted
10-22: 09:22:40:862:990 ClearFragList
10-22: 09:22:40:862:990 constructing ISAKMP Header
10-22: 09:22:40:862:990 constructing ID
10-22: 09:22:40:862:990 MM ID Type 1
10-22: 09:22:40:862:990 MM ID c0a81464
10-22: 09:22:40:862:990 constructing HASH
10-22: 09:22:40:862:990 MM established. SA: 0168EFA0
10-22: 09:22:40:862:990
10-22: 09:22:40:862:990 Sending: SA = 0x0168EFA0 to 192.168.20.5:Type 2.500
10-22: 09:22:40:862:990 ISAKMP Header: (V1.0), len = 68
10-22: 09:22:40:862:990 I-COOKIE 9f56f94db2d1954a
10-22: 09:22:40:862:990 R-COOKIE ccf230a46d3ad82e
10-22: 09:22:40:862:990 exchange: Oakley Main Mode
10-22: 09:22:40:862:990 flags: 1 ( encrypted )
10-22: 09:22:40:862:990 next payload: ID
10-22: 09:22:40:862:990 message ID: 00000000
10-22: 09:22:40:862:990 Ports S:f401 D:f401
10-22: 09:22:40:862:990
10-22: 09:22:40:862:990 Receive: (get) SA = 0x0168efa0 from 192.168.20.5.500
10-22: 09:22:40:862:990 ISAKMP Header: (V1.0), len = 1116
10-22: 09:22:40:862:990 I-COOKIE 9f56f94db2d1954a
10-22: 09:22:40:862:990 R-COOKIE ccf230a46d3ad82e
10-22: 09:22:40:862:990 exchange: Oakley Quick Mode
10-22: 09:22:40:862:990 flags: 1 ( encrypted )
10-22: 09:22:40:862:990 next payload: HASH
10-22: 09:22:40:862:990 message ID: 9eca5c95
10-22: 09:22:40:862:990 processing HASH (QM)
10-22: 09:22:40:862:990 ClearFragList
10-22: 09:22:40:862:990 processing payload NONCE
10-22: 09:22:40:862:990 processing payload ID
10-22: 09:22:40:862:990 processing payload ID
10-22: 09:22:40:862:990 processing payload SA
10-22: 09:22:40:862:990 Negotiated Proxy ID: Src 192.168.20.5.1701 Dst 192.168.20.100.1701
10-22: 09:22:40:862:990 Checking Proposal 1: Proto= ESP(3), num trans=2 Next=2
10-22: 09:22:40:862:990 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:22:40:862:990 SA life type in seconds
10-22: 09:22:40:862:990 SA life duration 00000e10
10-22: 09:22:40:862:990 SA life type in kilobytes
10-22: 09:22:40:862:990 SA life duration 0003d090
10-22: 09:22:40:862:990 tunnel mode is Transport Mode(2)
10-22: 09:22:40:862:990 HMAC algorithm is MD5(1)
10-22: 09:22:40:862:990 Checking Transform # 2: ID=Triple DES CBC(3)
10-22: 09:22:40:862:990 SA life type in seconds
10-22: 09:22:40:862:990 SA life duration 00000e10
10-22: 09:22:40:862:990 SA life type in kilobytes
10-22: 09:22:40:862:990 SA life duration 0003d090
10-22: 09:22:40:862:990 tunnel mode is Transport Mode(2)
10-22: 09:22:40:862:990 HMAC algorithm is SHA(2)
10-22: 09:22:40:862:990 Checking Proposal 2: Proto= AH(2), num trans=1 Next=2
10-22: 09:22:40:862:990 Checking Transform # 1: ID=SHA(3)
10-22: 09:22:40:862:990 SA life type in seconds
10-22: 09:22:40:862:990 SA life duration 00000e10
10-22: 09:22:40:862:990 SA life type in kilobytes
10-22: 09:22:40:862:990 SA life duration 0003d090
10-22: 09:22:40:862:990 tunnel mode is Transport Mode(2)
10-22: 09:22:40:862:990 HMAC algorithm is SHA(2)
10-22: 09:22:40:862:990 Checking Proposal 2: Proto= ESP(3), num trans=1 Next=2
10-22: 09:22:40:862:990 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:22:40:862:990 SA life type in seconds
10-22: 09:22:40:862:990 SA life duration 00000e10
10-22: 09:22:40:862:990 SA life type in kilobytes
10-22: 09:22:40:862:990 SA life duration 0003d090
10-22: 09:22:40:862:990 tunnel mode is Transport Mode(2)
10-22: 09:22:40:862:990 Checking Proposal 3: Proto= AH(2), num trans=1 Next=2
10-22: 09:22:40:862:990 Checking Transform # 1: ID=MD5(2)
10-22: 09:22:40:862:990 SA life type in seconds
10-22: 09:22:40:862:990 SA life duration 00000e10
10-22: 09:22:40:862:990 SA life type in kilobytes
10-22: 09:22:40:862:990 SA life duration 0003d090
10-22: 09:22:40:862:990 tunnel mode is Transport Mode(2)
10-22: 09:22:40:862:990 HMAC algorithm is MD5(1)
10-22: 09:22:40:862:990 Checking Proposal 3: Proto= ESP(3), num trans=1 Next=2
10-22: 09:22:40:862:990 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:22:40:862:990 SA life type in seconds
10-22: 09:22:40:862:990 SA life duration 00000e10
10-22: 09:22:40:862:990 SA life type in kilobytes
10-22: 09:22:40:862:990 SA life duration 0003d090
10-22: 09:22:40:862:990 tunnel mode is Transport Mode(2)
10-22: 09:22:40:862:990 Checking Proposal 4: Proto= AH(2), num trans=1 Next=2
10-22: 09:22:40:862:990 Checking Transform # 1: ID=SHA(3)
10-22: 09:22:40:862:990 SA life type in seconds
10-22: 09:22:40:862:990 SA life duration 00000e10
10-22: 09:22:40:862:990 SA life type in kilobytes
10-22: 09:22:40:862:990 SA life duration 0003d090
10-22: 09:22:40:862:990 tunnel mode is Transport Mode(2)
10-22: 09:22:40:862:990 HMAC algorithm is SHA(2)
10-22: 09:22:40:862:990 Checking Proposal 4: Proto= ESP(3), num trans=1 Next=2
10-22: 09:22:40:862:990 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:22:40:862:990 SA life type in seconds
10-22: 09:22:40:862:990 SA life duration 00000e10
10-22: 09:22:40:862:990 SA life type in kilobytes
10-22: 09:22:40:862:990 SA life duration 0003d090
10-22: 09:22:40:862:990 tunnel mode is Transport Mode(2)
10-22: 09:22:40:862:990 HMAC algorithm is SHA(2)
10-22: 09:22:40:862:990 Checking Proposal 5: Proto= AH(2), num trans=1 Next=2
10-22: 09:22:40:862:990 Checking Transform # 1: ID=MD5(2)
10-22: 09:22:40:862:990 SA life type in seconds
10-22: 09:22:40:862:990 SA life duration 00000e10
10-22: 09:22:40:862:990 SA life type in kilobytes
10-22: 09:22:40:862:990 SA life duration 0003d090
10-22: 09:22:40:862:990 tunnel mode is Transport Mode(2)
10-22: 09:22:40:862:990 HMAC algorithm is MD5(1)
10-22: 09:22:40:862:990 Checking Proposal 5: Proto= ESP(3), num trans=1 Next=2
10-22: 09:22:40:862:990 Checking Transform # 1: ID=Triple DES CBC(3)
10-22: 09:22:40:862:990 SA life type in seconds
10-22: 09:22:40:862:990 SA life duration 00000e10
10-22: 09:22:40:862:990 SA life type in kilobytes
10-22: 09:22:40:862:990 SA life duration 0003d090
10-22: 09:22:40:862:990 tunnel mode is Transport Mode(2)
10-22: 09:22:40:862:990 HMAC algorithm is MD5(1)
10-22: 09:22:40:862:990 Checking Proposal 6: Proto= ESP(3), num trans=2 Next=2
10-22: 09:22:40:862:990 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:22:40:862:990 SA life type in seconds
10-22: 09:22:40:862:990 SA life duration 00000e10
10-22: 09:22:40:862:990 SA life type in kilobytes
10-22: 09:22:40:862:990 SA life duration 0003d090
10-22: 09:22:40:862:990 tunnel mode is Transport Mode(2)
10-22: 09:22:40:862:990 HMAC algorithm is MD5(1)
10-22: 09:22:40:862:990 Checking Transform # 2: ID=DES CBC(2)
10-22: 09:22:40:862:990 SA life type in seconds
10-22: 09:22:40:862:990 SA life duration 00000e10
10-22: 09:22:40:862:990 SA life type in kilobytes
10-22: 09:22:40:862:990 SA life duration 0003d090
10-22: 09:22:40:862:990 tunnel mode is Transport Mode(2)
10-22: 09:22:40:862:990 HMAC algorithm is SHA(2)
10-22: 09:22:40:862:990 Checking Proposal 7: Proto= AH(2), num trans=1 Next=2
10-22: 09:22:40:862:990 Checking Transform # 1: ID=SHA(3)
10-22: 09:22:40:862:990 SA life type in seconds
10-22: 09:22:40:862:990 SA life duration 00000e10
10-22: 09:22:40:862:990 SA life type in kilobytes
10-22: 09:22:40:862:990 SA life duration 0003d090
10-22: 09:22:40:862:990 tunnel mode is Transport Mode(2)
10-22: 09:22:40:862:990 HMAC algorithm is SHA(2)
10-22: 09:22:40:862:990 Checking Proposal 7: Proto= ESP(3), num trans=1 Next=2
10-22: 09:22:40:862:990 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:22:40:862:990 SA life type in seconds
10-22: 09:22:40:862:990 SA life duration 00000e10
10-22: 09:22:40:862:990 SA life type in kilobytes
10-22: 09:22:40:862:990 SA life duration 0003d090
10-22: 09:22:40:862:990 tunnel mode is Transport Mode(2)
10-22: 09:22:40:862:990 Checking Proposal 8: Proto= AH(2), num trans=1 Next=2
10-22: 09:22:40:862:990 Checking Transform # 1: ID=MD5(2)
10-22: 09:22:40:862:990 SA life type in seconds
10-22: 09:22:40:862:990 SA life duration 00000e10
10-22: 09:22:40:862:990 SA life type in kilobytes
10-22: 09:22:40:862:990 SA life duration 0003d090
10-22: 09:22:40:862:990 tunnel mode is Transport Mode(2)
10-22: 09:22:40:862:990 HMAC algorithm is MD5(1)
10-22: 09:22:40:862:990 Checking Proposal 8: Proto= ESP(3), num trans=1 Next=2
10-22: 09:22:40:862:990 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:22:40:862:990 SA life type in seconds
10-22: 09:22:40:862:990 SA life duration 00000e10
10-22: 09:22:40:862:990 SA life type in kilobytes
10-22: 09:22:40:862:990 SA life duration 0003d090
10-22: 09:22:40:862:990 tunnel mode is Transport Mode(2)
10-22: 09:22:40:862:990 Checking Proposal 9: Proto= AH(2), num trans=1 Next=2
10-22: 09:22:40:862:990 Checking Transform # 1: ID=SHA(3)
10-22: 09:22:40:862:990 SA life type in seconds
10-22: 09:22:40:872:990 SA life duration 00000e10
10-22: 09:22:40:872:990 SA life type in kilobytes
10-22: 09:22:40:872:990 SA life duration 0003d090
10-22: 09:22:40:872:990 tunnel mode is Transport Mode(2)
10-22: 09:22:40:872:990 HMAC algorithm is SHA(2)
10-22: 09:22:40:872:990 Checking Proposal 9: Proto= ESP(3), num trans=1 Next=2
10-22: 09:22:40:872:990 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:22:40:872:990 SA life type in seconds
10-22: 09:22:40:872:990 SA life duration 00000e10
10-22: 09:22:40:872:990 SA life type in kilobytes
10-22: 09:22:40:872:990 SA life duration 0003d090
10-22: 09:22:40:872:990 tunnel mode is Transport Mode(2)
10-22: 09:22:40:872:990 HMAC algorithm is SHA(2)
10-22: 09:22:40:872:990 Checking Proposal 10: Proto= AH(2), num trans=1 Next=2
10-22: 09:22:40:872:990 Checking Transform # 1: ID=MD5(2)
10-22: 09:22:40:872:990 SA life type in seconds
10-22: 09:22:40:872:990 SA life duration 00000e10
10-22: 09:22:40:872:990 SA life type in kilobytes
10-22: 09:22:40:872:990 SA life duration 0003d090
10-22: 09:22:40:872:990 tunnel mode is Transport Mode(2)
10-22: 09:22:40:872:990 HMAC algorithm is MD5(1)
10-22: 09:22:40:872:990 Checking Proposal 10: Proto= ESP(3), num trans=1 Next=0
10-22: 09:22:40:872:990 Checking Transform # 1: ID=DES CBC(2)
10-22: 09:22:40:872:990 SA life type in seconds
10-22: 09:22:40:872:990 SA life duration 00000e10
10-22: 09:22:40:872:990 SA life type in kilobytes
10-22: 09:22:40:872:990 SA life duration 0003d090
10-22: 09:22:40:872:990 tunnel mode is Transport Mode(2)
10-22: 09:22:40:872:990 HMAC algorithm is MD5(1)
10-22: 09:22:40:872:990 Finding Responder Policy for SRC=192.168.20.5.1701 DST=192.168.20.100.1701, SRCMask=255.255.255.255, DSTMask=255.255.255.255, Prot=17 InTunnelEndpt 0 OutTunnelEndpt 0
10-22: 09:22:40:872:990 QM PolicyName: L2TP Optional Encryption Quick Mode Policy dwFlags 0
10-22: 09:22:40:872:990 QMOffer[0] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:22:40:872:990 QMOffer[0] dwFlags 0 dwPFSGroup 0
10-22: 09:22:40:872:990 Algo[0] Operation: ESP Algo: Triple DES CBC HMAC: MD5
10-22: 09:22:40:872:990 QMOffer[1] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:22:40:872:990 QMOffer[1] dwFlags 0 dwPFSGroup 0
10-22: 09:22:40:872:990 Algo[0] Operation: ESP Algo: Triple DES CBC HMAC: SHA
10-22: 09:22:40:872:990 QMOffer[2] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:22:40:872:990 QMOffer[2] dwFlags 0 dwPFSGroup 0
10-22: 09:22:40:872:990 Algo[0] Operation: AH Algo: SHA
10-22: 09:22:40:872:990 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: 0
10-22: 09:22:40:872:990 QMOffer[3] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:22:40:872:990 QMOffer[3] dwFlags 0 dwPFSGroup 0
10-22: 09:22:40:872:990 Algo[0] Operation: AH Algo: MD5
10-22: 09:22:40:872:990 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: 0
10-22: 09:22:40:872:990 QMOffer[4] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:22:40:872:990 QMOffer[4] dwFlags 0 dwPFSGroup 0
10-22: 09:22:40:872:990 Algo[0] Operation: AH Algo: SHA
10-22: 09:22:40:872:990 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: SHA
10-22: 09:22:40:872:990 QMOffer[5] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:22:40:872:990 QMOffer[5] dwFlags 0 dwPFSGroup 0
10-22: 09:22:40:872:990 Algo[0] Operation: AH Algo: MD5
10-22: 09:22:40:872:990 Algo[1] Operation: ESP Algo: Triple DES CBC HMAC: MD5
10-22: 09:22:40:872:990 QMOffer[6] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:22:40:872:990 QMOffer[6] dwFlags 0 dwPFSGroup 0
10-22: 09:22:40:872:990 Algo[0] Operation: ESP Algo: DES CBC HMAC: MD5
10-22: 09:22:40:872:990 QMOffer[7] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:22:40:872:990 QMOffer[7] dwFlags 0 dwPFSGroup 0
10-22: 09:22:40:872:990 Algo[0] Operation: ESP Algo: DES CBC HMAC: SHA
10-22: 09:22:40:872:990 QMOffer[8] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:22:40:872:990 QMOffer[8] dwFlags 0 dwPFSGroup 0
10-22: 09:22:40:872:990 Algo[0] Operation: AH Algo: SHA
10-22: 09:22:40:872:990 Algo[1] Operation: ESP Algo: DES CBC HMAC: 0
10-22: 09:22:40:872:990 QMOffer[9] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:22:40:872:990 QMOffer[9] dwFlags 0 dwPFSGroup 0
10-22: 09:22:40:872:990 Algo[0] Operation: AH Algo: MD5
10-22: 09:22:40:872:990 Algo[1] Operation: ESP Algo: DES CBC HMAC: 0
10-22: 09:22:40:872:990 QMOffer[10] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:22:40:872:990 QMOffer[10] dwFlags 0 dwPFSGroup 0
10-22: 09:22:40:872:990 Algo[0] Operation: AH Algo: SHA
10-22: 09:22:40:872:990 Algo[1] Operation: ESP Algo: DES CBC HMAC: SHA
10-22: 09:22:40:872:990 QMOffer[11] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:22:40:872:990 QMOffer[11] dwFlags 0 dwPFSGroup 0
10-22: 09:22:40:872:990 Algo[0] Operation: AH Algo: MD5
10-22: 09:22:40:872:990 Algo[1] Operation: ESP Algo: DES CBC HMAC: MD5
10-22: 09:22:40:872:990 QMOffer[12] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:22:40:872:990 QMOffer[12] dwFlags 0 dwPFSGroup 0
10-22: 09:22:40:872:990 Algo[0] Operation: ESP Algo: NULL DES HMAC: SHA
10-22: 09:22:40:872:990 QMOffer[13] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:22:40:872:990 QMOffer[13] dwFlags 0 dwPFSGroup 0
10-22: 09:22:40:872:990 Algo[0] Operation: ESP Algo: NULL DES HMAC: MD5
10-22: 09:22:40:872:990 QMOffer[14] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:22:40:872:990 QMOffer[14] dwFlags 0 dwPFSGroup 0
10-22: 09:22:40:872:990 Algo[0] Operation: AH Algo: SHA
10-22: 09:22:40:872:990 QMOffer[15] LifetimeKBytes 250000 LifetimeSec 3600
10-22: 09:22:40:872:990 QMOffer[15] dwFlags 0 dwPFSGroup 0
10-22: 09:22:40:872:990 Algo[0] Operation: AH Algo: MD5
10-22: 09:22:40:872:990 Phase 2 SA accepted: proposal=1 transform=1
10-22: 09:22:40:872:990 GetSpi: src = 192.168.20.5.1701, dst = 192.168.20.100.1701, proto = 17, context = 00000000, srcMask = 255.255.255.255, destMask = 255.255.255.255, TunnelFilter 0
10-22: 09:22:40:872:990 Setting SPI 2681695164
10-22: 09:22:40:872:990 constructing ISAKMP Header
10-22: 09:22:40:872:990 constructing HASH (null)
10-22: 09:22:40:872:990 constructing SA (IPSEC)
10-22: 09:22:40:872:990 constructing NONCE (IPSEC)
10-22: 09:22:40:872:990 constructing ID (proxy)
10-22: 09:22:40:872:990 constructing ID (proxy)
10-22: 09:22:40:872:990 constructing HASH (QM)
10-22: 09:22:40:872:990
10-22: 09:22:40:872:990 Sending: SA = 0x0168EFA0 to 192.168.20.5:Type 2.500
10-22: 09:22:40:872:990 ISAKMP Header: (V1.0), len = 164
10-22: 09:22:40:872:990 I-COOKIE 9f56f94db2d1954a
10-22: 09:22:40:872:990 R-COOKIE ccf230a46d3ad82e
10-22: 09:22:40:872:990 exchange: Oakley Quick Mode
10-22: 09:22:40:872:990 flags: 3 ( encrypted commit )
10-22: 09:22:40:872:990 next payload: HASH
10-22: 09:22:40:872:990 message ID: 9eca5c95
10-22: 09:22:40:872:990 Ports S:f401 D:f401
10-22: 09:22:40:872:990
10-22: 09:22:40:872:990 Receive: (get) SA = 0x0168efa0 from 192.168.20.5.500
10-22: 09:22:40:872:990 ISAKMP Header: (V1.0), len = 52
10-22: 09:22:40:872:990 I-COOKIE 9f56f94db2d1954a
10-22: 09:22:40:872:990 R-COOKIE ccf230a46d3ad82e
10-22: 09:22:40:872:990 exchange: Oakley Quick Mode
10-22: 09:22:40:872:990 flags: 3 ( encrypted commit )
10-22: 09:22:40:872:990 next payload: HASH
10-22: 09:22:40:872:990 message ID: 9eca5c95
10-22: 09:22:40:872:990 processing HASH (QM)
10-22: 09:22:40:872:990 ClearFragList
10-22: 09:22:40:872:990 Adding QMs: src = 192.168.20.100.1701, dst = 192.168.20.5.1701, proto = 17, context = 0000000C, my tunnel = 0.0.0.0, peer tunnel = 0.0.0.0, SrcMask = 0.0.0.0, DestMask = 0.0.0.0 Lifetime = 3600 LifetimeKBytes 250000 dwFlags 0 Direction 1 EncapType 1
10-22: 09:22:40:872:990 Algo[0] Operation: ESP Algo: Triple DES CBC HMAC: MD5
10-22: 09:22:40:872:990 Algo[0] MySpi: 2681695164 PeerSpi: 347573091
10-22: 09:22:40:872:990 Encap Ports Src 500 Dst 500
10-22: 09:22:40:872:990 isadb_set_status sa:0168EFA0 centry:016BC260 status 0
10-22: 09:22:40:872:990 Constructing Commit Notify
10-22: 09:22:40:872:990 constructing ISAKMP Header
10-22: 09:22:40:872:990 constructing HASH (null)
10-22: 09:22:40:872:990 constructing NOTIFY 16384
10-22: 09:22:40:872:990 constructing HASH (QM)
10-22: 09:22:40:872:990
10-22: 09:22:40:872:990 Sending: SA = 0x0168EFA0 to 192.168.20.5:Type 4.500
10-22: 09:22:40:872:990 ISAKMP Header: (V1.0), len = 84
10-22: 09:22:40:872:990 I-COOKIE 9f56f94db2d1954a
10-22: 09:22:40:872:990 R-COOKIE ccf230a46d3ad82e
10-22: 09:22:40:872:990 exchange: Oakley Quick Mode
10-22: 09:22:40:872:990 flags: 3 ( encrypted commit )
10-22: 09:22:40:872:990 next payload: HASH
10-22: 09:22:40:872:990 message ID: 9eca5c95
10-22: 09:22:40:872:990 Ports S:f401 D:f401
10-22: 09:23:15:926:9ac
10-22: 09:23:15:926:9ac Receive: (get) SA = 0x0168efa0 from 192.168.20.5.500
10-22: 09:23:15:926:9ac ISAKMP Header: (V1.0), len = 92
10-22: 09:23:15:926:9ac I-COOKIE 9f56f94db2d1954a
10-22: 09:23:15:926:9ac R-COOKIE ccf230a46d3ad82e
10-22: 09:23:15:926:9ac exchange: ISAKMP Informational Exchange
10-22: 09:23:15:926:9ac flags: 1 ( encrypted )
10-22: 09:23:15:926:9ac next payload: HASH
10-22: 09:23:15:926:9ac message ID: 37378cf3
10-22: 09:23:15:926:9ac processing HASH (Notify/Delete)
10-22: 09:23:15:926:9ac processing payload NONCE
10-22: 09:23:15:926:9ac processing payload DELETE
10-22: 09:23:15:926:9ac Expiring SPI 2681695164 src 514a8c0 dst 6414a8c0
10-22: 09:23:15:926:9ac Received reliable Notify. Messid 37378cf3
10-22: 09:23:15:926:9ac constructing ISAKMP Header
10-22: 09:23:15:926:9ac constructing HASH (null)
10-22: 09:23:15:926:9ac constructing NONCE (ND)
10-22: 09:23:15:926:9ac constructing HASH (Notify/Delete)
10-22: 09:23:15:926:9ac
10-22: 09:23:15:926:9ac Sending: SA = 0x0168EFA0 to 192.168.20.5:Type 1.500
10-22: 09:23:15:926:9ac ISAKMP Header: (V1.0), len = 92
10-22: 09:23:15:926:9ac I-COOKIE 9f56f94db2d1954a
10-22: 09:23:15:926:9ac R-COOKIE ccf230a46d3ad82e
10-22: 09:23:15:926:9ac exchange: ISAKMP Informational Exchange
10-22: 09:23:15:926:9ac flags: 1 ( encrypted )
10-22: 09:23:15:926:9ac next payload: HASH
10-22: 09:23:15:926:9ac message ID: 37378cf3
10-22: 09:23:15:926:9ac Ports S:f401 D:f401
10-22: 09:23:15:926:9ac QM Deleted. Notify from driver: Src 192.168.20.100 Dest 192.168.20.5 InSPI 2681695164 OutSpi 347573091 Tunnel 0 TunnelFilter 0
10-22: 09:23:15:926:9ac PrivatePeerAddr 0
10-22: 09:23:15:926:9ac
10-22: 09:23:15:926:9ac Receive: (get) SA = 0x0168efa0 from 192.168.20.5.500
10-22: 09:23:15:926:9ac ISAKMP Header: (V1.0), len = 108
10-22: 09:23:15:926:9ac I-COOKIE 9f56f94db2d1954a
10-22: 09:23:15:926:9ac R-COOKIE ccf230a46d3ad82e
10-22: 09:23:15:926:9ac exchange: ISAKMP Informational Exchange
10-22: 09:23:15:926:9ac flags: 1 ( encrypted )
10-22: 09:23:15:926:9ac next payload: HASH
10-22: 09:23:15:926:9ac message ID: 540877e7
10-22: 09:23:15:926:9ac processing HASH (Notify/Delete)
10-22: 09:23:15:936:9ac processing payload NONCE
10-22: 09:23:15:936:9ac processing payload DELETE
10-22: 09:23:15:936:9ac SA Dead. sa:0168EFA0 status:35ef
10-22: 09:23:15:936:9ac isadb_set_status sa:0168EFA0 centry:00000000 status 35ef
10-22: 09:23:15:936:9ac Received reliable Notify. Messid 540877e7
10-22: 09:23:15:936:9ac constructing ISAKMP Header
10-22: 09:23:15:936:9ac constructing HASH (null)
10-22: 09:23:15:936:9ac constructing NONCE (ND)
10-22: 09:23:15:936:9ac constructing HASH (Notify/Delete)
10-22: 09:23:15:936:9ac
10-22: 09:23:15:936:9ac Sending: SA = 0x0168EFA0 to 192.168.20.5:Type 1.500
10-22: 09:23:15:936:9ac ISAKMP Header: (V1.0), len = 108
10-22: 09:23:15:936:9ac I-COOKIE 9f56f94db2d1954a
10-22: 09:23:15:936:9ac R-COOKIE ccf230a46d3ad82e
10-22: 09:23:15:936:9ac exchange: ISAKMP Informational Exchange
10-22: 09:23:15:936:9ac flags: 1 ( encrypted )
10-22: 09:23:15:936:9ac next payload: HASH
10-22: 09:23:15:936:9ac message ID: 540877e7
10-22: 09:23:15:936:9ac Ports S:f401 D:f401
10-22: 09:23:57:360:9cc ClearFragList

As always thanks to the both of you for your help!

(in reply to mrupright)

Post #: 18

RE: L2TP/IPsec pre-shared key error - 22.Oct.2004 8:32:00 PM

ClintD

Posts: 1848
Joined: 26.Jan.2001
From: Keller, TX
Status: offline

Guh - the server looks exactly the same - the Main Mode and Quick Mode SAs get established with no problem and the 35 seconds later, the server receives a notification from the client to delete the associations.

Based on this, I believe the problem is client side - is there anything installed on that WinXP client preventing communications across the VPN? Firewall software? ISA Server Firewall Client?

Is the WinXP client a fresh install or have you been testing with it for some time? Is it possible to try a different client?

(in reply to mrupright)

Post #: 19

RE: L2TP/IPsec pre-shared key error - 25.Oct.2004 6:42:00 PM

mrupright

Posts: 68
Joined: 18.Oct.2004
Status: offline

Okay this is starting to get really frustrating, I tried a different client (WinXP SP2) system that I know works fine and it did not connect "Error 789". I have even built and tried a new server and still no luck. What are the minimum specs for ISA 2004 and what nics are recommended. I am going to try replacing my hub with a switch (encase "something" is amiss at this point I am up for anything). It is frustrating when PPTP works like a champ and L2TP does nothing! [Mad]