[Swan] Need Help in Phase 2 Failures
Raees Khan
raeeskhan.ca at gmail.com
Tue Jan 22 15:32:14 UTC 2019
*Good Morning Friends,*
I am currently having an issue with Libreswan IPSec implementation with
Fortinet Firewall. Libreswan with Cisco is working fine for me.
The behavior is weird in case of Fortinet. I have matched all the
parameters on both sides (IKE ALGO + ESP ALGO) all is same including
timers. The ISAKMP/IPSEC SA is established and then it again starts Quick
Mode. Complete logs are given below. The continuous logging activity and
phase 2 failure messages are shown on both devices.
Can you please help. Thank you very much in advance.
Jan 9 12:26:10 R1-1500 pluto[4507]: Starting Pluto (Libreswan Version 3.18
XFRM(netkey) USE_FORK USE_PTHREAD_SETSCHEDPRIO NSS DNSSEC FIPS_CHECK
LIBCAP_NG XAUTH_PAM NETWORKMANAGER CURL(non-NSS) LDAP(non-NSS)) pid:4507
Jan 9 12:26:10 R1-1500 pluto[4507]: core dump dir: /var/run/pluto
Jan 9 12:26:10 R1-1500 pluto[4507]: secrets file: /tmp/ipsec.secrets
Jan 9 12:26:10 R1-1500 pluto[4507]: leak-detective disabled
Jan 9 12:26:10 R1-1500 pluto[4507]: NSS crypto [enabled]
Jan 9 12:26:10 R1-1500 pluto[4507]: XAUTH PAM support [enabled]
Jan 9 12:26:10 R1-1500 pluto[4507]: NAT-Traversal support [enabled]
Jan 9 12:26:10 R1-1500 pluto[4507]: ike_alg_register_enc(): Activating
OAKLEY_TWOFISH_CBC_SSH: Ok
Jan 9 12:26:10 R1-1500 pluto[4507]: ike_alg_register_enc(): Activating
OAKLEY_TWOFISH_CBC: Ok
Jan 9 12:26:10 R1-1500 pluto[4507]: ike_alg_register_enc(): Activating
OAKLEY_SERPENT_CBC: Ok
Jan 9 12:26:10 R1-1500 pluto[4507]: ike_alg_register_enc(): Activating
OAKLEY_AES_CBC: Ok
Jan 9 12:26:10 R1-1500 pluto[4507]: ike_alg_register_enc(): Activating
OAKLEY_AES_CTR: Ok
Jan 9 12:26:10 R1-1500 pluto[4507]: ike_alg_register_enc(): Activating
OAKLEY_AES_GCM_A: Ok
Jan 9 12:26:10 R1-1500 pluto[4507]: ike_alg_register_enc(): Activating
OAKLEY_AES_GCM_B: Ok
Jan 9 12:26:10 R1-1500 pluto[4507]: ike_alg_register_enc(): Activating
OAKLEY_AES_GCM_C: Ok
Jan 9 12:26:10 R1-1500 pluto[4507]: ike_alg_register_hash(): Activating
DISABLED-OAKLEY_AES_XCBC: Ok
Jan 9 12:26:10 R1-1500 pluto[4507]: ike_alg_register_enc(): Activating
OAKLEY_CAMELLIA_CBC: Ok
Jan 9 12:26:10 R1-1500 pluto[4507]: ike_alg_register_enc(): Activating
OAKLEY_CAMELLIA_CTR: Ok
Jan 9 12:26:10 R1-1500 pluto[4507]: ike_alg_register_hash(): Activating
OAKLEY_SHA2_512: Ok
Jan 9 12:26:10 R1-1500 pluto[4507]: ike_alg_register_hash(): Activating
OAKLEY_SHA2_384: Ok
Jan 9 12:26:10 R1-1500 pluto[4507]: ike_alg_register_hash(): Activating
OAKLEY_SHA2_256: Ok
Jan 9 12:26:10 R1-1500 pluto[4507]: no crypto helpers will be started; all
cryptographic operations will be done inline
Jan 9 12:26:10 R1-1500 pluto[4507]: Using Linux XFRM/NETKEY IPsec
interface code on 3.14-2-8360e
Jan 9 12:26:10 R1-1500 pluto[4507]: ike_alg_register_enc(): Activating
aes_ccm_8: Ok
Jan 9 12:26:10 R1-1500 pluto[4507]: ike_alg_register_enc(): Activating
aes_ccm_12: Ok
Jan 9 12:26:10 R1-1500 pluto[4507]: ike_alg_register_enc(): Activating
aes_ccm_16: Ok
Jan 9 12:26:12 R1-1500 pluto[4507]: added connection description "Link1"
Jan 9 12:26:12 R1-1500 pluto[4507]: listening for IKE messages
Jan 9 12:26:12 R1-1500 pluto[4507]: adding interface fe-1-4/fe-1-4
10.102.0.48:500
Jan 9 12:26:12 R1-1500 pluto[4507]: adding interface fe-1-4/fe-1-4
10.102.0.48:4500
Jan 9 12:26:12 R1-1500 pluto[4507]: adding interface
switch.0001/switch.0001 192.168.0.2:500
Jan 9 12:26:12 R1-1500 pluto[4507]: adding interface
switch.0001/switch.0001 192.168.0.2:4500
Jan 9 12:26:12 R1-1500 pluto[4507]: adding interface vrf_gw0/vrf_gw0
169.254.0.1:500
Jan 9 12:26:12 R1-1500 pluto[4507]: adding interface vrf_gw0/vrf_gw0
169.254.0.1:4500
Jan 9 12:26:12 R1-1500 pluto[4507]: adding interface dummy0/dummy0
55.5.5.5:500
Jan 9 12:26:12 R1-1500 pluto[4507]: adding interface dummy0/dummy0
55.5.5.5:4500
Jan 9 12:26:12 R1-1500 pluto[4507]: adding interface fe-cm-1/fe-cm-1
10.1.1.1:500
Jan 9 12:26:12 R1-1500 pluto[4507]: adding interface fe-cm-1/fe-cm-1
10.1.1.1:4500
Jan 9 12:26:12 R1-1500 pluto[4507]: adding interface lo/lo 127.0.0.1:500
Jan 9 12:26:12 R1-1500 pluto[4507]: adding interface lo/lo 127.0.0.1:4500
Jan 9 12:26:12 R1-1500 pluto[4507]: adding interface lo/lo ::1:500
Jan 9 12:26:12 R1-1500 pluto[4507]: | setup callback for interface lo:500
fd 27
Jan 9 12:26:12 R1-1500 pluto[4507]: | setup callback for interface lo:4500
fd 26
Jan 9 12:26:12 R1-1500 pluto[4507]: | setup callback for interface lo:500
fd 25
Jan 9 12:26:12 R1-1500 pluto[4507]: | setup callback for interface
fe-cm-1:4500 fd 24
Jan 9 12:26:12 R1-1500 pluto[4507]: | setup callback for interface
fe-cm-1:500 fd 23
Jan 9 12:26:12 R1-1500 pluto[4507]: | setup callback for interface
dummy0:4500 fd 22
Jan 9 12:26:12 R1-1500 pluto[4507]: | setup callback for interface
dummy0:500 fd 21
Jan 9 12:26:12 R1-1500 pluto[4507]: | setup callback for interface
vrf_gw0:4500 fd 20
Jan 9 12:26:12 R1-1500 pluto[4507]: | setup callback for interface
vrf_gw0:500 fd 19
Jan 9 12:26:12 R1-1500 pluto[4507]: | setup callback for interface
switch.0001:4500 fd 18
Jan 9 12:26:12 R1-1500 pluto[4507]: | setup callback for interface
switch.0001:500 fd 17
Jan 9 12:26:12 R1-1500 pluto[4507]: | setup callback for interface
fe-1-4:4500 fd 16
Jan 9 12:26:12 R1-1500 pluto[4507]: | setup callback for interface
fe-1-4:500 fd 15
Jan 9 12:26:12 R1-1500 pluto[4507]: loading secrets from
"/tmp/ipsec.secrets"
Jan 9 12:26:12 R1-1500 pluto[4507]: "Link1": route-client output:
/usr/lib/quagga/routeset_client add 77.7.7.0/24 dev fe-1-4.
Jan 9 12:26:12 R1-1500 pluto[4507]: "Link1" #1: initiating Main Mode
Jan 9 12:26:12 R1-1500 pluto[4507]: "Link1" #1: ignoring unknown Vendor ID
payload [8299031757a36082c6a621de00050457]
Jan 9 12:26:12 R1-1500 pluto[4507]: "Link1" #1: transition from state
STATE_MAIN_I1 to state STATE_MAIN_I2
Jan 9 12:26:12 R1-1500 pluto[4507]: "Link1" #1: STATE_MAIN_I2: sent MI2,
expecting MR2
Jan 9 12:26:12 R1-1500 pluto[4507]: reapchild failed with errno=10 No
child processes
Jan 9 12:26:12 R1-1500 pluto[4507]: "Link1" #1: transition from state
STATE_MAIN_I2 to state STATE_MAIN_I3
Jan 9 12:26:12 R1-1500 pluto[4507]: "Link1" #1: STATE_MAIN_I3: sent MI3,
expecting MR3
Jan 9 12:26:12 R1-1500 pluto[4507]: "Link1" #1: Main mode peer ID is
ID_IPV4_ADDR: '10.102.100.1'
Jan 9 12:26:12 R1-1500 pluto[4507]: "Link1" #1: transition from state
STATE_MAIN_I3 to state STATE_MAIN_I4
*Jan 9 12:26:12 R1-1500 pluto[4507]: "Link1" #1: STATE_MAIN_I4: ISAKMP SA
established {auth=PRESHARED_KEY cipher=aes_256 integ=sha group=MODP1536}*
Jan 9 12:26:12 R1-1500 pluto[4507]: "Link1" #2: initiating Quick Mode
PSK+ENCRYPT+TUNNEL+PFS+UP+IKEV1_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO
{using isakmp#1 msgid:98bc42c3 proposal=AES(12)_256-SHA1(2)
pfsgroup=OAKLEY_GROUP_MODP1536}
Jan 9 12:26:12 R1-1500 pluto[4507]: "Link1" #1: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:26:12 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:26:12 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:26:12 R1-1500 pluto[4507]: "Link1" #1: received and ignored
informational message
Jan 9 12:26:13 R1-1500 pluto[4507]: "Link1" #1: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:26:13 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:26:13 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:26:13 R1-1500 pluto[4507]: "Link1" #1: received and ignored
informational message
Jan 9 12:26:13 R1-1500 pluto[4507]: "Link1" #1: the peer proposed:
55.5.5.0/24:0/0 -> 77.7.7.0/24:0/0
Jan 9 12:26:13 R1-1500 pluto[4507]: "Link1" #3: responding to Quick Mode
proposal {msgid:bd9652ca}
Jan 9 12:26:13 R1-1500 pluto[4507]: "Link1" #3: us:
55.5.5.0/24===10.102.0.48<10.102.0.48>
Jan 9 12:26:13 R1-1500 pluto[4507]: "Link1" #3: them:
10.102.100.1<10.102.100.1>===77.7.7.0/24
Jan 9 12:26:13 R1-1500 pluto[4507]: "Link1" #3: soft_use_expires_seconds:
28800 soft_byte_limit: 0MB
Jan 9 12:26:13 R1-1500 pluto[4507]: "Link1" #3: soft_use_expires_seconds:
28800 soft_byte_limit: 0MB
Jan 9 12:26:13 R1-1500 pluto[4507]: "Link1" #3: transition from state
STATE_QUICK_R0 to state STATE_QUICK_R1
Jan 9 12:26:13 R1-1500 pluto[4507]: "Link1" #3: STATE_QUICK_R1: sent QR1,
inbound IPsec SA installed, expecting QI2 tunnel mode {ESP=>0xcd6139da
<0x9fb69c35 xfrm=AES_256-HMAC_SHA1 NATOA=none NATD=none DPD=active}
Jan 9 12:26:13 R1-1500 pluto[4507]: "Link1" #3: transition from state
STATE_QUICK_R1 to state STATE_QUICK_R2
*Jan 9 12:26:14 R1-1500 pluto[4507]: "Link1" #3: STATE_QUICK_R2: IPsec SA
established tunnel mode {ESP=>0xcd6139da <0x9fb69c35 xfrm=AES_256-HMAC_SHA1
NATOA=none NATD=none DPD=active}*
Jan 9 12:26:14 R1-1500 pluto[4507]: "Link1" #1: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:26:14 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:26:14 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:26:14 R1-1500 pluto[4507]: "Link1" #1: received and ignored
informational message
Jan 9 12:26:14 R1-1500 pluto[4507]: "Link1" #1: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:26:14 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:26:14 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:26:14 R1-1500 pluto[4507]: "Link1" #1: received and ignored
informational message
Jan 9 12:26:16 R1-1500 pluto[4507]: "Link1" #1: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:26:16 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:26:16 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:26:16 R1-1500 pluto[4507]: "Link1" #1: received and ignored
informational message
Jan 9 12:26:20 R1-1500 pluto[4507]: packet from 10.102.100.1:500: ignoring
unknown Vendor ID payload [8299031757a36082c6a621de00050457]
Jan 9 12:26:20 R1-1500 pluto[4507]: "Link1" #4: responding to Main Mode
Jan 9 12:26:20 R1-1500 pluto[4507]: "Link1" #4: transition from state
STATE_MAIN_R0 to state STATE_MAIN_R1
Jan 9 12:26:20 R1-1500 pluto[4507]: "Link1" #4: STATE_MAIN_R1: sent MR1,
expecting MI2
Jan 9 12:26:20 R1-1500 pluto[4507]: "Link1" #4: transition from state
STATE_MAIN_R1 to state STATE_MAIN_R2
Jan 9 12:26:20 R1-1500 pluto[4507]: "Link1" #4: STATE_MAIN_R2: sent MR2,
expecting MI3
Jan 9 12:26:20 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload IPSEC_INITIAL_CONTACT, msgid=00000000, length=28
Jan 9 12:26:20 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:26:20 R1-1500 pluto[4507]: | 00 00 00 1c 00 00 00 01 01 10 60
02
Jan 9 12:26:20 R1-1500 pluto[4507]: "Link1" #4: Main mode peer ID is
ID_IPV4_ADDR: '10.102.100.1'
Jan 9 12:26:20 R1-1500 pluto[4507]: "Link1" #4: transition from state
STATE_MAIN_R2 to state STATE_MAIN_R3
Jan 9 12:26:20 R1-1500 pluto[4507]: "Link1" #4: STATE_MAIN_R3: sent MR3,
ISAKMP SA established {auth=PRESHARED_KEY cipher=aes_256 integ=sha
group=MODP1536}
Jan 9 12:26:20 R1-1500 pluto[4507]: "Link1" #1: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:26:20 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:26:20 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:26:20 R1-1500 pluto[4507]: "Link1" #1: received and ignored
informational message
Jan 9 12:26:28 R1-1500 pluto[4507]: "Link1" #1: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:26:28 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:26:28 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:26:28 R1-1500 pluto[4507]: "Link1" #1: received and ignored
informational message
Jan 9 12:26:44 R1-1500 pluto[4507]: "Link1" #1: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:26:44 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:26:44 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:26:44 R1-1500 pluto[4507]: "Link1" #1: received and ignored
informational message
Jan 9 12:27:16 R1-1500 pluto[4507]: "Link1" #2: max number of
retransmissions (8) reached STATE_QUICK_I1
Jan 9 12:27:16 R1-1500 pluto[4507]: "Link1" #2: starting keying attempt 2
of an unlimited number
Jan 9 12:27:16 R1-1500 pluto[4507]: "Link1" #5: initiating Quick Mode
PSK+ENCRYPT+TUNNEL+PFS+UP+IKEV1_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO to
replace #2 {using isakmp#4 msgid:5a87d4ef proposal=AES(12)_256-SHA1(2)
pfsgroup=OAKLEY_GROUP_MODP1536}
Jan 9 12:27:17 R1-1500 pluto[4507]: deleting other state #2
(STATE_QUICK_I1) "Link1"
Jan 9 12:27:17 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:27:17 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:27:17 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:27:17 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:27:17 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:27:17 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:27:17 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:27:17 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:27:17 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:27:17 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:27:17 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:27:17 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:27:18 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:27:18 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:27:18 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:27:18 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:27:20 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:27:20 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:27:20 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:27:20 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:27:24 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:27:24 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:27:24 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:27:24 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:27:32 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:27:32 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:27:32 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:27:32 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:27:49 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:27:49 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:27:49 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:27:49 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:28:21 R1-1500 pluto[4507]: "Link1" #5: max number of
retransmissions (8) reached STATE_QUICK_I1
Jan 9 12:28:21 R1-1500 pluto[4507]: "Link1" #5: starting keying attempt 3
of an unlimited number
Jan 9 12:28:21 R1-1500 pluto[4507]: "Link1" #6: initiating Quick Mode
PSK+ENCRYPT+TUNNEL+PFS+UP+IKEV1_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO to
replace #5 {using isakmp#4 msgid:e252a98b proposal=AES(12)_256-SHA1(2)
pfsgroup=OAKLEY_GROUP_MODP1536}
Jan 9 12:28:21 R1-1500 pluto[4507]: deleting other state #5
(STATE_QUICK_I1) "Link1"
Jan 9 12:28:21 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:28:21 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:28:21 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:28:21 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:28:21 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:28:21 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:28:21 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:28:21 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:28:22 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:28:22 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:28:22 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:28:22 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:28:23 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:28:23 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:28:23 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:28:23 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:28:25 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:28:25 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:28:25 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:28:25 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:28:29 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:28:29 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:28:29 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:28:29 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:28:37 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:28:37 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:28:37 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:28:37 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:28:53 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:28:53 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:28:53 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:28:53 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:29:25 R1-1500 pluto[4507]: "Link1" #6: max number of
retransmissions (8) reached STATE_QUICK_I1
Jan 9 12:29:25 R1-1500 pluto[4507]: "Link1" #6: starting keying attempt 4
of an unlimited number
Jan 9 12:29:25 R1-1500 pluto[4507]: "Link1" #7: initiating Quick Mode
PSK+ENCRYPT+TUNNEL+PFS+UP+IKEV1_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO to
replace #6 {using isakmp#4 msgid:f9e872b3 proposal=AES(12)_256-SHA1(2)
pfsgroup=OAKLEY_GROUP_MODP1536}
Jan 9 12:29:25 R1-1500 pluto[4507]: deleting other state #6
(STATE_QUICK_I1) "Link1"
Jan 9 12:29:25 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:29:25 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:29:25 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:29:25 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:29:25 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:29:25 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:29:25 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:29:25 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:29:26 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:29:26 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:29:26 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:29:26 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:29:27 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:29:27 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:29:27 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:29:27 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:29:29 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:29:29 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:29:29 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:29:29 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:29:33 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:29:33 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:29:33 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:29:33 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:29:41 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:29:41 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:29:41 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:29:41 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:29:57 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:29:57 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:29:57 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:29:57 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:30:01 R1-1500 CRON[6168]: pam_unix(cron:session): session opened
for user root by (uid=0)
Jan 9 12:30:01 R1-1500 CRON[6169]: pam_unix(cron:session): session opened
for user root by (uid=0)
Jan 9 12:30:02 R1-1500 CRON[6169]: pam_unix(cron:session): session closed
for user root
Jan 9 12:30:04 R1-1500 CRON[6168]: pam_unix(cron:session): session closed
for user root
Jan 9 12:30:29 R1-1500 pluto[4507]: "Link1" #7: max number of
retransmissions (8) reached STATE_QUICK_I1
Jan 9 12:30:29 R1-1500 pluto[4507]: "Link1" #7: starting keying attempt 5
of an unlimited number
Jan 9 12:30:29 R1-1500 pluto[4507]: "Link1" #8: initiating Quick Mode
PSK+ENCRYPT+TUNNEL+PFS+UP+IKEV1_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO to
replace #7 {using isakmp#4 msgid:e1bdd7e9 proposal=AES(12)_256-SHA1(2)
pfsgroup=OAKLEY_GROUP_MODP1536}
Jan 9 12:30:29 R1-1500 pluto[4507]: deleting other state #7
(STATE_QUICK_I1) "Link1"
Jan 9 12:30:29 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:30:29 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:30:29 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:30:29 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:30:29 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:30:29 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:30:29 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:30:29 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:30:30 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:30:30 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:30:30 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:30:30 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:30:31 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:30:31 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:30:31 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:30:31 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:30:33 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:30:33 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:30:33 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:30:33 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:30:37 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:30:37 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:30:37 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:30:37 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:30:45 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:30:45 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:30:45 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:30:45 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:31:01 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:31:01 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:31:01 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:31:01 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:31:12 R1-1500 pluto[4507]: netlink_sa_expire handle
XFRM_MSG_EXPIRE for connection with reqid 16389
Jan 9 12:31:12 R1-1500 pluto[4507]: "Link1" #9: initiating Quick Mode
PSK+ENCRYPT+TUNNEL+PFS+UP+IKEV1_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO to
replace #3 {using isakmp#4 msgid:5c3403ff proposal=AES(12)_256-SHA1(2)
pfsgroup=OAKLEY_GROUP_MODP1536}
Jan 9 12:31:13 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:31:13 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:31:13 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:31:13 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:31:13 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:31:13 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:31:13 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:31:13 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:31:13 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:31:13 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:31:13 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:31:13 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:31:14 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:31:14 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:31:14 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:31:14 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:31:16 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:31:16 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:31:16 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:31:16 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:31:20 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:31:21 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:31:21 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:31:21 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:31:29 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:31:29 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:31:29 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:31:29 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:31:33 R1-1500 pluto[4507]: "Link1" #8: max number of
retransmissions (8) reached STATE_QUICK_I1
Jan 9 12:31:33 R1-1500 pluto[4507]: "Link1" #8: starting keying attempt 6
of an unlimited number
Jan 9 12:31:33 R1-1500 pluto[4507]: "Link1" #10: initiating Quick Mode
PSK+ENCRYPT+TUNNEL+PFS+UP+IKEV1_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO to
replace #8 {using isakmp#4 msgid:1ee51333 proposal=AES(12)_256-SHA1(2)
pfsgroup=OAKLEY_GROUP_MODP1536}
Jan 9 12:31:33 R1-1500 pluto[4507]: deleting other state #8
(STATE_QUICK_I1) "Link1"
Jan 9 12:31:33 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:31:33 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:31:33 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:31:33 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:31:33 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:31:33 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:31:33 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:31:33 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:31:34 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:31:34 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:31:34 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:31:34 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:31:35 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:31:35 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:31:35 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:31:35 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:31:37 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:31:37 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:31:37 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:31:37 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:31:41 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:31:41 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:31:41 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:31:41 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:31:45 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:31:45 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:31:45 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:31:45 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:31:49 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:31:49 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:31:49 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:31:49 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
Jan 9 12:32:05 R1-1500 pluto[4507]: "Link1" #4: ignoring informational
payload NO_PROPOSAL_CHOSEN, msgid=00000000, length=16
Jan 9 12:32:05 R1-1500 pluto[4507]: | ISAKMP Notification Payload
Jan 9 12:32:05 R1-1500 pluto[4507]: | 00 00 00 10 00 00 00 01 03 04 00
0e
Jan 9 12:32:05 R1-1500 pluto[4507]: "Link1" #4: received and ignored
informational message
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.libreswan.org/pipermail/swan/attachments/20190122/e5250cfd/attachment-0001.html>
More information about the Swan
mailing list