[Swan] Intermittent connection lose

Xinwei Hong xhong at skytap.com
Thu Sep 27 22:59:14 UTC 2018 

Hi,

I have a VPN which would fail every 8 hours or so, at the time of phase 1
IKE expiration. Here is the config file:
config setup
        protostack=netkey
        plutodebug=none
        listen=xxx.xxx.xxx.20
conn conn_vpn-1200910-tunnel
        authby=secret
        left=xxx.xxx.xxx.20
        right=yyy.yyy.yyy.100
        ike=aes128-sha1;modp1536
        phase2alg=aes128-sha1
        ikelifetime=28800s
        salifetime=3600s
        pfs=no
conn conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0
        also=conn_vpn-1200910-tunnel
        leftsubnet=172.19.0.0/20
        rightsubnet=0.0.0.0/0
        type=tunnel
        auto=start
conn vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0
        also=conn_vpn-1200910-tunnel
        leftsubnet=172.19.0.0/20
        rightsubnet=vnet:%v4:0.0.0.0/0
        type=tunnel
        auto=start
I'm including logs from an incident happened at Sept 27th 1:20pm - 1:26pm
UTC (13:20 UTC). Not sure it this is related to the fact that we have
rightsubnet=vnet:%v4:0.0.0.0/0. This is used to serve the case that remote
end requests subsetsto subnet 0.0.0.0/0 (i.e. not an exact match). Please
let me know if you see any abnormal.

Thanks,
Xinwei

logs:
----------------

2018-09-27T13:13:56.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2501]
yyy.yyy.yyy.100 #78569: deleting state (STATE_QUICK_R2)
2018-09-27T13:13:56.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2501]
yyy.yyy.yyy.100 #78569: ESP traffic information: in=0B out=0B
2018-09-27T13:14:28.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2495]
yyy.yyy.yyy.100 #78585: STATE_QUICK_I2: sent QI2, IPsec SA established
tunnel mode {ESP=>0x0be8ccd8 <0x041f728d xfrm=AES_128-HMAC_SHA1 NATOA=none
NATD=none DPD=passive}
2018-09-27T13:14:28.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2495]
yyy.yyy.yyy.100 #78585: transition from state STATE_QUICK_I1 to state
STATE_QUICK_I2
2018-09-27T13:14:28.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2495]
yyy.yyy.yyy.100 #78585: initiating Quick Mode
PSK+ENCRYPT+TUNNEL+IKEV1_ALLOW+IKEV2_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO
to replace #78572 {using isakmp#78508 msgid:6251d8e7
proposal=AES(12)_128-SHA1(2) pfsgroup=no-pfs}
2018-09-27T13:15:57.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2497]
yyy.yyy.yyy.100 #78586: initiating Quick Mode
PSK+ENCRYPT+TUNNEL+IKEV1_ALLOW+IKEV2_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO
to replace #78575 {using isakmp#78508 msgid:c0d4641e
proposal=AES(12)_128-SHA1(2) pfsgroup=no-pfs}
2018-09-27T13:15:57.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2497]
yyy.yyy.yyy.100 #78586: transition from state STATE_QUICK_I1 to state
STATE_QUICK_I2
2018-09-27T13:15:57.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2497]
yyy.yyy.yyy.100 #78586: STATE_QUICK_I2: sent QI2, IPsec SA established
tunnel mode {ESP=>0xdaf3457d <0xe6be7501 xfrm=AES_128-HMAC_SHA1 NATOA=none
NATD=none DPD=passive}
2018-09-27T13:16:16.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2496]
yyy.yyy.yyy.100 #78587: initiating Quick Mode
PSK+ENCRYPT+TUNNEL+IKEV1_ALLOW+IKEV2_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO
to replace #78574 {using isakmp#78508 msgid:273cbaa8
proposal=AES(12)_128-SHA1(2) pfsgroup=no-pfs}
2018-09-27T13:16:16.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2496]
yyy.yyy.yyy.100 #78587: transition from state STATE_QUICK_I1 to state
STATE_QUICK_I2
2018-09-27T13:16:16.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2496]
yyy.yyy.yyy.100 #78587: STATE_QUICK_I2: sent QI2, IPsec SA established
tunnel mode {ESP=>0x6acd9118 <0x5959613b xfrm=AES_128-HMAC_SHA1 NATOA=none
NATD=none DPD=passive}
2018-09-27T13:19:06.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2494]
yyy.yyy.yyy.100 #78570: ESP traffic information: in=0B out=0B
2018-09-27T13:19:06.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2494]
yyy.yyy.yyy.100 #78570: deleting state (STATE_QUICK_I2)
2018-09-27T13:20:24.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78571:
ESP traffic information: in=0B out=0B
2018-09-27T13:20:24.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78571:
deleting state (STATE_QUICK_I2)
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: did not find old IKE state to mark for suppressing
delete
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"
#78576: deleting state (STATE_QUICK_R2)
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"
#78578: ESP traffic information: in=0B out=0B
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"
#78581: ESP traffic information: in=0B out=0B
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"
#78587: ESP traffic information: in=0B out=0B
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: did not find old IKE state to mark for suppressing
delete
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: deleting connection
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2499]
yyy.yyy.yyy.100 instance with peer yyy.yyy.yyy.100 {isakmp=#0/ipsec=#78579}
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: deleting connection
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2497]
yyy.yyy.yyy.100 instance with peer yyy.yyy.yyy.100 {isakmp=#0/ipsec=#78586}
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: did not find old IKE state to mark for suppressing
delete
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: deleting connection
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2495]
yyy.yyy.yyy.100 instance with peer yyy.yyy.yyy.100 {isakmp=#0/ipsec=#78585}
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: transition from state STATE_MAIN_I3 to state
STATE_MAIN_I4
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: STATE_MAIN_I4: ISAKMP SA established
{auth=PRESHARED_KEY cipher=aes_128 integ=sha group=MODP1536}
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: deleting connection
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2502]
yyy.yyy.yyy.100 instance with peer yyy.yyy.yyy.100 {isakmp=#0/ipsec=#78576}
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"
#78580: ESP traffic information: in=0B out=0B
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: transition from state STATE_MAIN_I2 to state
STATE_MAIN_I3
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: STATE_MAIN_I3: sent MI3, expecting MR3
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: deleting connection
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2496]
yyy.yyy.yyy.100 instance with peer yyy.yyy.yyy.100 {isakmp=#0/ipsec=#78587}
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"
#78586: deleting state (STATE_QUICK_I2)
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: did not find old IKE state to mark for suppressing
delete
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"
#78575: ESP traffic information: in=0B out=0B
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"
#78583: deleting state (STATE_QUICK_I2)
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"
#78585: deleting state (STATE_QUICK_I2)
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: STATE_MAIN_I2: sent MI2, expecting MR2
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: Main mode peer ID is ID_IPV4_ADDR: 'yyy.yyy.yyy.100'
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"
#78577: deleting state (STATE_QUICK_I2)
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: did not find old IKE state to mark for suppressing
delete
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"
#78572: deleting state (STATE_QUICK_I2)
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"
#78574: deleting state (STATE_QUICK_I2)
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: deleting connection
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2494]
yyy.yyy.yyy.100 instance with peer yyy.yyy.yyy.100 {isakmp=#0/ipsec=#78581}
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: did not find old IKE state to mark for suppressing
delete
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"
#78580: deleting state (STATE_QUICK_R2)
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"
#78583: ESP traffic information: in=0B out=0B
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"
#78581: deleting state (STATE_QUICK_I2)
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: initiating Main Mode to replace #78508
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"
#78579: deleting state (STATE_QUICK_I2)
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"
#78574: ESP traffic information: in=0B out=0B
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"
#78579: ESP traffic information: in=0B out=0B
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: did not find old IKE state to mark for suppressing
delete
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"
#78585: ESP traffic information: in=0B out=0B
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: deleting connection
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2503]
yyy.yyy.yyy.100 instance with peer yyy.yyy.yyy.100 {isakmp=#0/ipsec=#78580}
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"
#78578: deleting state (STATE_QUICK_I2)
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: did not find old IKE state to mark for suppressing
delete
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: deleting connection
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2498]
yyy.yyy.yyy.100 instance with peer yyy.yyy.yyy.100 {isakmp=#0/ipsec=#78577}
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"
#78577: ESP traffic information: in=0B out=0B
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"
#78575: deleting state (STATE_QUICK_I2)
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: did not find old IKE state to mark for suppressing
delete
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"
#78576: ESP traffic information: in=0B out=0B
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"
#78586: ESP traffic information: in=0B out=0B
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: deleting connection
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2500]
yyy.yyy.yyy.100 instance with peer yyy.yyy.yyy.100 {isakmp=#0/ipsec=#78578}
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: transition from state STATE_MAIN_I1 to state
STATE_MAIN_I2
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"
#78587: deleting state (STATE_QUICK_I2)
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"
#78572: ESP traffic information: in=0B out=0B
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: did not find old IKE state to mark for suppressing
delete
2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: deleting connection
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2501]
yyy.yyy.yyy.100 instance with peer yyy.yyy.yyy.100 {isakmp=#0/ipsec=#78583}
2018-09-27T13:20:52.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: discarding duplicate packet; already STATE_MAIN_I4
2018-09-27T13:20:54.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: discarding duplicate packet; already STATE_MAIN_I4
2018-09-27T13:20:56.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: discarding duplicate packet; already STATE_MAIN_I4
2018-09-27T13:20:58.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: discarding duplicate packet; already STATE_MAIN_I4
2018-09-27T13:21:00.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: discarding duplicate packet; already STATE_MAIN_I4
2018-09-27T13:21:02.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: discarding duplicate packet; already STATE_MAIN_I4
2018-09-27T13:21:06.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: discarding duplicate packet; already STATE_MAIN_I4
2018-09-27T13:21:10.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: discarding duplicate packet; already STATE_MAIN_I4
2018-09-27T13:21:14.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: discarding duplicate packet; already STATE_MAIN_I4
2018-09-27T13:21:18.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: discarding duplicate packet; already STATE_MAIN_I4
2018-09-27T13:21:22.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78588: discarding duplicate packet; already STATE_MAIN_I4
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78591:
STATE_QUICK_R2: IPsec SA established tunnel mode {ESP=>0x1f2173f1
<0xbd994c4c xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive}
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2506]
yyy.yyy.yyy.100 #78593: STATE_QUICK_R2: IPsec SA established tunnel mode
{ESP=>0xa87a306c <0xe73175bd xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none
DPD=passive}
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2505]
yyy.yyy.yyy.100 #78592: discarding duplicate packet; already STATE_QUICK_R2
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2504]
yyy.yyy.yyy.100 #78590: STATE_QUICK_R1: sent QR1, inbound IPsec SA
installed, expecting QI2 tunnel mode {ESP=>0x243eba5f <0x1972fcda
xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive}
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2505]
yyy.yyy.yyy.100 #78592:   them: yyy.yyy.yyy.100<yyy.yyy.yyy.100>===
10.6.0.0/16
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2504]
yyy.yyy.yyy.100 #78590: responding to Quick Mode proposal {msgid:ac8afca3}
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2504]
yyy.yyy.yyy.100 #78590: discarding duplicate packet; already STATE_QUICK_R2
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78591:
discarding duplicate packet; already STATE_QUICK_R2
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2504]
yyy.yyy.yyy.100 #78590:     us: 172.19.0.0/20===xxx.xxx.xxx.20
<xxx.xxx.xxx.20>
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78508: deleting state (STATE_MAIN_R3)
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78589: transition from state STATE_MAIN_R2 to state
STATE_MAIN_R3
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2506]
yyy.yyy.yyy.100 #78593: STATE_QUICK_R1: sent QR1, inbound IPsec SA
installed, expecting QI2 tunnel mode {ESP=>0xa87a306c <0xe73175bd
xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive}
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2504]
yyy.yyy.yyy.100 #78590: discarding duplicate packet; already STATE_QUICK_R2
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2504]
yyy.yyy.yyy.100 #78590: transition from state STATE_QUICK_R0 to state
STATE_QUICK_R1
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78589: the peer proposed: 172.19.0.0/20:0/0 ->
192.168.44.0/22:0/0
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78589: transition from state STATE_MAIN_R1 to state
STATE_MAIN_R2
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78591:
 us: 172.19.0.0/20===xxx.xxx.xxx.20<xxx.xxx.xxx.20>
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78591:
transition from state STATE_QUICK_R0 to state STATE_QUICK_R1
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78591:
STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2 tunnel
mode {ESP=>0x1f2173f1 <0xbd994c4c xfrm=AES_128-HMAC_SHA1 NATOA=none
NATD=none DPD=passive}
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78589: STATE_MAIN_R1: sent MR1, expecting MI2
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2505]
yyy.yyy.yyy.100 #78592: STATE_QUICK_R1: sent QR1, inbound IPsec SA
installed, expecting QI2 tunnel mode {ESP=>0x8d1c260e <0x51c7ff57
xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive}
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78589: the peer proposed: 172.19.0.0/20:0/0 ->
0.0.0.0/0:0/0
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2506]
yyy.yyy.yyy.100 #78593:   them: yyy.yyy.yyy.100<yyy.yyy.yyy.100>===
192.168.44.0/22
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2506]
yyy.yyy.yyy.100 #78593:     us: 172.19.0.0/20===xxx.xxx.xxx.20
<xxx.xxx.xxx.20>
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78589: responding to Main Mode from unknown peer
yyy.yyy.yyy.100
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78589: transition from state STATE_MAIN_R0 to state
STATE_MAIN_R1
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
packet from yyy.yyy.yyy.100:500: ignoring unknown Vendor ID payload
[f4ed19e0c114eb516faaac0ee37daf2807b4381f000000010000138d5bacda40...]
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78589: STATE_MAIN_R2: sent MR2, expecting MI3
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78591:
keeping refhim=0 during rekey
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78591:
transition from state STATE_QUICK_R1 to state STATE_QUICK_R2
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78589: the peer proposed: 172.19.0.0/20:0/0 ->
10.6.0.0/16:0/0
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2506]
yyy.yyy.yyy.100 #78593: discarding duplicate packet; already STATE_QUICK_R2
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2506]
yyy.yyy.yyy.100 #78593: responding to Quick Mode proposal {msgid:d98457de}
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2506]
yyy.yyy.yyy.100 #78593: transition from state STATE_QUICK_R0 to state
STATE_QUICK_R1
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78591:
 them: yyy.yyy.yyy.100<yyy.yyy.yyy.100>===0.0.0.0/0
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2505]
yyy.yyy.yyy.100 #78592:     us: 172.19.0.0/20===xxx.xxx.xxx.20
<xxx.xxx.xxx.20>
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2505]
yyy.yyy.yyy.100 #78592: responding to Quick Mode proposal {msgid:264c16e9}
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2505]
yyy.yyy.yyy.100 #78592: transition from state STATE_QUICK_R1 to state
STATE_QUICK_R2
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2505]
yyy.yyy.yyy.100 #78592: STATE_QUICK_R2: IPsec SA established tunnel mode
{ESP=>0x8d1c260e <0x51c7ff57 xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none
DPD=passive}
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2504]
yyy.yyy.yyy.100 #78590: STATE_QUICK_R2: IPsec SA established tunnel mode
{ESP=>0x243eba5f <0x1972fcda xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none
DPD=passive}
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2506]
yyy.yyy.yyy.100 #78593: transition from state STATE_QUICK_R1 to state
STATE_QUICK_R2
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2504]
yyy.yyy.yyy.100 #78590: transition from state STATE_QUICK_R1 to state
STATE_QUICK_R2
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2505]
yyy.yyy.yyy.100 #78592: transition from state STATE_QUICK_R0 to state
STATE_QUICK_R1
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78589: the peer proposed: 172.19.0.0/20:0/0 ->
192.168.0.0/17:0/0
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2505]
yyy.yyy.yyy.100 #78592: discarding duplicate packet; already STATE_QUICK_R2
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78591:
discarding duplicate packet; already STATE_QUICK_R2
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78589: Main mode peer ID is ID_IPV4_ADDR: 'yyy.yyy.yyy.100'
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78589: STATE_MAIN_R3: sent MR3, ISAKMP SA established
{auth=PRESHARED_KEY cipher=aes_128 integ=sha group=MODP1536}
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78591:
responding to Quick Mode proposal {msgid:f4c8601b}
2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2504]
yyy.yyy.yyy.100 #78590:   them: yyy.yyy.yyy.100<yyy.yyy.yyy.100>===
192.168.0.0/17
2018-09-27T13:25:21.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2506]
yyy.yyy.yyy.100 #78593: discarding duplicate packet; already STATE_QUICK_R2
2018-09-27T13:25:22.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2507]
yyy.yyy.yyy.100 #78594: transition from state STATE_QUICK_R0 to state
STATE_QUICK_R1
2018-09-27T13:25:22.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2507]
yyy.yyy.yyy.100 #78594: transition from state STATE_QUICK_R1 to state
STATE_QUICK_R2
2018-09-27T13:25:22.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2507]
yyy.yyy.yyy.100 #78594:     us: 172.19.0.0/20===xxx.xxx.xxx.20
<xxx.xxx.xxx.20>
2018-09-27T13:25:22.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2507]
yyy.yyy.yyy.100 #78594:   them: yyy.yyy.yyy.100<yyy.yyy.yyy.100>===
192.168.199.0/24
2018-09-27T13:25:22.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2507]
yyy.yyy.yyy.100 #78594: STATE_QUICK_R2: IPsec SA established tunnel mode
{ESP=>0xd2f1f1c1 <0x97efc89a xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none
DPD=passive}
2018-09-27T13:25:22.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2507]
yyy.yyy.yyy.100 #78594: discarding duplicate packet; already STATE_QUICK_R2
2018-09-27T13:25:22.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2507]
yyy.yyy.yyy.100 #78594: responding to Quick Mode proposal {msgid:dffd069d}
2018-09-27T13:25:22.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2507]
yyy.yyy.yyy.100 #78594: STATE_QUICK_R1: sent QR1, inbound IPsec SA
installed, expecting QI2 tunnel mode {ESP=>0xd2f1f1c1 <0x97efc89a
xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive}
2018-09-27T13:25:22.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78589: the peer proposed: 172.19.0.0/20:0/0 ->
192.168.199.0/24:0/0
2018-09-27T13:25:22.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2507]
yyy.yyy.yyy.100 #78594: discarding duplicate packet; already STATE_QUICK_R2
2018-09-27T13:25:25.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2508]
yyy.yyy.yyy.100 #78595: transition from state STATE_QUICK_R1 to state
STATE_QUICK_R2
2018-09-27T13:25:25.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2508]
yyy.yyy.yyy.100 #78595: STATE_QUICK_R2: IPsec SA established tunnel mode
{ESP=>0xb6606a5a <0xac894363 xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none
DPD=passive}
2018-09-27T13:25:25.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2508]
yyy.yyy.yyy.100 #78595: transition from state STATE_QUICK_R0 to state
STATE_QUICK_R1
2018-09-27T13:25:25.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78589: the peer proposed: 172.19.0.0/20:0/0 ->
192.168.96.0/19:0/0
2018-09-27T13:25:25.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2508]
yyy.yyy.yyy.100 #78595:   them: yyy.yyy.yyy.100<yyy.yyy.yyy.100>===
192.168.96.0/19
2018-09-27T13:25:25.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2508]
yyy.yyy.yyy.100 #78595: STATE_QUICK_R1: sent QR1, inbound IPsec SA
installed, expecting QI2 tunnel mode {ESP=>0xb6606a5a <0xac894363
xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive}
2018-09-27T13:25:25.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2508]
yyy.yyy.yyy.100 #78595:     us: 172.19.0.0/20===xxx.xxx.xxx.20
<xxx.xxx.xxx.20>
2018-09-27T13:25:25.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2508]
yyy.yyy.yyy.100 #78595: responding to Quick Mode proposal {msgid:f52d52ac}
2018-09-27T13:25:26.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2508]
yyy.yyy.yyy.100 #78595: discarding duplicate packet; already STATE_QUICK_R2
2018-09-27T13:25:26.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2508]
yyy.yyy.yyy.100 #78595: discarding duplicate packet; already STATE_QUICK_R2
2018-09-27T13:25:55.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2509]
yyy.yyy.yyy.100 #78596: transition from state STATE_QUICK_R0 to state
STATE_QUICK_R1
2018-09-27T13:25:55.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2509]
yyy.yyy.yyy.100 #78596: discarding duplicate packet; already STATE_QUICK_R2
2018-09-27T13:25:55.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2509]
yyy.yyy.yyy.100 #78596: STATE_QUICK_R2: IPsec SA established tunnel mode
{ESP=>0x6e8659a9 <0x9607fcf4 xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none
DPD=passive}
2018-09-27T13:25:55.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2509]
yyy.yyy.yyy.100 #78596:   them: yyy.yyy.yyy.100<yyy.yyy.yyy.100>===
192.168.128.0/18
2018-09-27T13:25:55.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78589: the peer proposed: 172.19.0.0/20:0/0 ->
192.168.128.0/18:0/0
2018-09-27T13:25:55.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2509]
yyy.yyy.yyy.100 #78596:     us: 172.19.0.0/20===xxx.xxx.xxx.20
<xxx.xxx.xxx.20>
2018-09-27T13:25:55.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2509]
yyy.yyy.yyy.100 #78596: STATE_QUICK_R1: sent QR1, inbound IPsec SA
installed, expecting QI2 tunnel mode {ESP=>0x6e8659a9 <0x9607fcf4
xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive}
2018-09-27T13:25:55.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2509]
yyy.yyy.yyy.100 #78596: responding to Quick Mode proposal {msgid:2fb25a7b}
2018-09-27T13:25:55.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2509]
yyy.yyy.yyy.100 #78596: transition from state STATE_QUICK_R1 to state
STATE_QUICK_R2
2018-09-27T13:25:56.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2509]
yyy.yyy.yyy.100 #78596: discarding duplicate packet; already STATE_QUICK_R2
2018-09-27T13:26:18.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78573: ESP traffic information: in=0B out=0B
2018-09-27T13:26:18.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78573: deleting state (STATE_QUICK_I2)
2018-09-27T13:26:54.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78597:     us: 172.19.0.0/20===xxx.xxx.xxx.20
<xxx.xxx.xxx.20>
2018-09-27T13:26:54.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78597: discarding duplicate packet; already STATE_QUICK_R2
2018-09-27T13:26:54.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78597: STATE_QUICK_R2: IPsec SA established tunnel mode
{ESP=>0x0ea77ddd <0xab1f88f4 xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none
DPD=passive}
2018-09-27T13:26:54.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78597: STATE_QUICK_R1: sent QR1, inbound IPsec SA
installed, expecting QI2 tunnel mode {ESP=>0x0ea77ddd <0xab1f88f4
xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive}
2018-09-27T13:26:54.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78597: responding to Quick Mode proposal {msgid:658f95c0}
2018-09-27T13:26:54.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78597: transition from state STATE_QUICK_R0 to state
STATE_QUICK_R1
2018-09-27T13:26:54.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78597: discarding duplicate packet; already STATE_QUICK_R2
2018-09-27T13:26:54.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78597: keeping refhim=0 during rekey
2018-09-27T13:26:54.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78597: transition from state STATE_QUICK_R1 to state
STATE_QUICK_R2
2018-09-27T13:26:54.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78589: the peer proposed: 172.19.0.0/20:0/0 ->
172.31.0.0/16:0/0
2018-09-27T13:26:54.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78597:   them: yyy.yyy.yyy.100<yyy.yyy.yyy.100>===
172.31.0.0/16
2018-09-27T13:27:45.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2510]
yyy.yyy.yyy.100 #78598: transition from state STATE_QUICK_R0 to state
STATE_QUICK_R1
2018-09-27T13:27:45.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2510]
yyy.yyy.yyy.100 #78598: transition from state STATE_QUICK_R1 to state
STATE_QUICK_R2
2018-09-27T13:27:45.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2510]
yyy.yyy.yyy.100 #78598: STATE_QUICK_R1: sent QR1, inbound IPsec SA
installed, expecting QI2 tunnel mode {ESP=>0xcdcd6086 <0x45ac0bc5
xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive}
2018-09-27T13:27:45.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2510]
yyy.yyy.yyy.100 #78598: discarding duplicate packet; already STATE_QUICK_R2
2018-09-27T13:27:45.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2510]
yyy.yyy.yyy.100 #78598: STATE_QUICK_R2: IPsec SA established tunnel mode
{ESP=>0xcdcd6086 <0x45ac0bc5 xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none
DPD=passive}
2018-09-27T13:27:45.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2510]
yyy.yyy.yyy.100 #78598: discarding duplicate packet; already STATE_QUICK_R2
2018-09-27T13:27:45.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2510]
yyy.yyy.yyy.100 #78598: responding to Quick Mode proposal {msgid:d84fc63d}
2018-09-27T13:27:45.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78589: the peer proposed: 172.19.0.0/20:0/0 ->
192.168.195.0/24:0/0
2018-09-27T13:27:45.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2510]
yyy.yyy.yyy.100 #78598:     us: 172.19.0.0/20===xxx.xxx.xxx.20
<xxx.xxx.xxx.20>
2018-09-27T13:27:45.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2510]
yyy.yyy.yyy.100 #78598:   them: yyy.yyy.yyy.100<yyy.yyy.yyy.100>===
192.168.195.0/24
2018-09-27T13:28:26.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2511]
yyy.yyy.yyy.100 #78599:   them: yyy.yyy.yyy.100<yyy.yyy.yyy.100>===
192.168.4.0/24
2018-09-27T13:28:26.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2511]
yyy.yyy.yyy.100 #78599: discarding duplicate packet; already STATE_QUICK_R2
2018-09-27T13:28:26.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2511]
yyy.yyy.yyy.100 #78599: discarding duplicate packet; already STATE_QUICK_R2
2018-09-27T13:28:26.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2511]
yyy.yyy.yyy.100 #78599:     us: 172.19.0.0/20===xxx.xxx.xxx.20
<xxx.xxx.xxx.20>
2018-09-27T13:28:26.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2511]
yyy.yyy.yyy.100 #78599: transition from state STATE_QUICK_R0 to state
STATE_QUICK_R1
2018-09-27T13:28:26.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2511]
yyy.yyy.yyy.100 #78599: STATE_QUICK_R2: IPsec SA established tunnel mode
{ESP=>0xeab5d10d <0x8534c885 xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none
DPD=passive}
2018-09-27T13:28:26.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78589: the peer proposed: 172.19.0.0/20:0/0 ->
192.168.4.0/24:0/0
2018-09-27T13:28:26.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2511]
yyy.yyy.yyy.100 #78599: STATE_QUICK_R1: sent QR1, inbound IPsec SA
installed, expecting QI2 tunnel mode {ESP=>0xeab5d10d <0x8534c885
xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive}
2018-09-27T13:28:26.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2511]
yyy.yyy.yyy.100 #78599: responding to Quick Mode proposal {msgid:4d291c84}
2018-09-27T13:28:26.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2511]
yyy.yyy.yyy.100 #78599: transition from state STATE_QUICK_R1 to state
STATE_QUICK_R2
2018-09-27T13:31:00.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2512]
yyy.yyy.yyy.100 #78600: STATE_QUICK_R1: sent QR1, inbound IPsec SA
installed, expecting QI2 tunnel mode {ESP=>0xe7817cd0 <0xda032f20
xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive}
2018-09-27T13:31:00.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468]
yyy.yyy.yyy.100 #78589: the peer proposed: 172.19.0.0/20:0/0 ->
192.168.90.0/23:0/0
2018-09-27T13:31:00.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2512]
yyy.yyy.yyy.100 #78600: responding to Quick Mode proposal {msgid:25e8f20a}
2018-09-27T13:31:00.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2512]
yyy.yyy.yyy.100 #78600:     us: 172.19.0.0/20===xxx.xxx.xxx.20
<xxx.xxx.xxx.20>
2018-09-27T13:31:00.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2512]
yyy.yyy.yyy.100 #78600:   them: yyy.yyy.yyy.100<yyy.yyy.yyy.100>===
192.168.90.0/23
2018-09-27T13:31:00.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2512]
yyy.yyy.yyy.100 #78600: transition from state STATE_QUICK_R0 to state
STATE_QUICK_R1
2018-09-27T13:31:01.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2512]
yyy.yyy.yyy.100 #78600: transition from state STATE_QUICK_R1 to state
STATE_QUICK_R2
2018-09-27T13:31:01.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2512]
yyy.yyy.yyy.100 #78600: STATE_QUICK_R2: IPsec SA established tunnel mode
{ESP=>0xe7817cd0 <0xda032f20 xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none
DPD=passive}
2018-09-27T13:31:01.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2512]
yyy.yyy.yyy.100 #78600: discarding duplicate packet; already STATE_QUICK_R2
2018-09-27T13:31:01.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910:
"vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2512]
yyy.yyy.yyy.100 #78600: discarding duplicate packet; already STATE_QUICK_R2
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.libreswan.org/pipermail/swan/attachments/20180927/5e5c23d5/attachment-0001.html>

More information about the Swan mailing list