Hi there!
I have an L2TP/IPSEC VPN server on a public IP.
I can connect to in from any of my devices as expected.
My working windows setup:
I wish to connect one of my mikrotik devices as a client to the same server. However sounds simple I’m not able to get this working.
Screenshots from my non-working mikrotik setup:
Any help is appreciated and
Many thanks in advance!
The most likely reason is incompatibility of Phase 1 or Phase 2 proposals or a typo in the password or IPsec secret (as you’ve made a typo in the username when creating the account, maybe you’ve done it also in these items).
So:
If you find nothing, export the complete configuration, follow the hint in my automatic signature below on how to anonymize the output without losing the information about relationships between addresses and networks and post both the configuration and the log file here, each among its own pair of [code] and [/code] tags.
Hi!
Id did double checked my usr/psw/secret by copy-paste them to both my windows system and my MikroTik router.
My Windows PC is connecting without any problems like before, my MikroTik isn’t. My credintial should be OK.
I did check the log and I did that before my prior post but I can’t find anything usable, at least not for me.
Please find below my log:
# jan/27/2021 18: 7: 0 by RouterOS 6.48
# software id = L809-98LV
#
18:07:10 l2tp,ppp,info l2tp-out1: initializing...
18:07:11 l2tp,ppp,info l2tp-out1: connecting...
18:07:13 ipsec,info initiate new phase 1 (Identity Protection): my.public.ip[500]<=>my.remote.server.ip[500]
18:07:15 ipsec,info ISAKMP-SA established my.public.ip[4500]-my.remote.server.ip[4500] spi:10f280d3a82abc8c:585d22c655646825
18:07:37 l2tp,ppp,info l2tp-out1: terminating... - session closed
18:07:37 l2tp,ppp,info l2tp-out1: disconnected
18:07:37 l2tp,ppp,info l2tp-out1: initializing...
18:07:37 l2tp,ppp,info l2tp-out1: connecting...
18:07:37 l2tp,ppp,info l2tp-out1: terminating... - old tunnel is not closed yet
18:07:37 l2tp,ppp,info l2tp-out1: disconnected
18:07:37 l2tp,ppp,info l2tp-out1: initializing...
18:07:37 l2tp,ppp,info l2tp-out1: connecting...
18:08:01 l2tp,ppp,info l2tp-out1: terminating... - session closed
18:08:01 l2tp,ppp,info l2tp-out1: disconnected
18:08:02 l2tp,ppp,info l2tp-out1: initializing...
18:08:02 l2tp,ppp,info l2tp-out1: connecting...
18:08:26 l2tp,ppp,info l2tp-out1: terminating... - session closed
18:08:26 l2tp,ppp,info l2tp-out1: disconnected
18:08:27 ipsec,info ISAKMP-SA deleted my.public.ip[4500]-my.remote.server.ip[4500] spi:10f280d3a82abc8c:585d22c655646825 rekey:1
18:08:27 l2tp,ppp,info l2tp-out1: initializing...
18:08:27 l2tp,ppp,info l2tp-out1: connecting...
18:08:28 ipsec,info initiate new phase 1 (Identity Protection): my.public.ip[500]<=>my.remote.server.ip[500]
18:08:29 ipsec,info ISAKMP-SA established my.public.ip[4500]-my.remote.server.ip[4500] spi:a271ae350bde2b79:1b2847e72497107c
18:08:51 l2tp,ppp,info l2tp-out1: terminating... - session closed
18:08:51 l2tp,ppp,info l2tp-out1: disconnected
18:08:52 ipsec,info ISAKMP-SA deleted my.public.ip[4500]-my.remote.server.ip[4500] spi:a271ae350bde2b79:1b2847e72497107c rekey:1
18:08:54 l2tp,ppp,info l2tp-out1: initializing...
18:08:54 l2tp,ppp,info l2tp-out1: connecting...
18:08:54 ipsec,info initiate new phase 1 (Identity Protection): my.public.ip[500]<=>my.remote.server.ip[500]
18:08:55 ipsec,info ISAKMP-SA established my.public.ip[4500]-my.remote.server.ip[4500] spi:cadf5671d677bd8c:f308515d8b07389d
and my config:
# jan/27/2021 18:17:16 by RouterOS 6.48
# software id = L809-98LV
#
# model = RB941-2nD
# serial number = D1190B0A5670
/interface bridge
add admin-mac=C4:AD:34:F3:8B:65 auto-mac=no comment=defconf name=bridge
/interface wireless
set [ find default-name=wlan1 ] antenna-gain=0 band=2ghz-b/g/n channel-width=20/40mhz-XX country=no_country_set disabled=no distance=indoors frequency=auto frequency-mode=\
manual-txpower installation=outdoor mode=ap-bridge ssid=MikroTik-F38B69 station-roaming=enabled wireless-protocol=802.11
/interface pptp-client
add add-default-route=yes connect-to=my.remote.server.ip name=pptp-out1 user=pptpuser
/interface vlan
add disabled=yes interface=ether2 name=vlan5 vlan-id=5
/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
add name=VPN
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk eap-methods="" mode=dynamic-keys supplicant-identity=MikroTik
/ip ipsec profile
set [ find default=yes ] enc-algorithm=aes-256,aes-128,3des
add dh-group=modp2048 enc-algorithm=aes-128 hash-algorithm=sha256 name=pfsense
/ip ipsec peer
add address=192.168.5.96/32 disabled=yes exchange-mode=ike2 name=peer1 profile=pfsense
/ip ipsec proposal
set [ find default=yes ] auth-algorithms=sha256,sha1 enc-algorithms=aes-256-cbc,aes-256-gcm,aes-192-cbc,aes-192-gcm,aes-128-cbc,aes-128-gcm,3des pfs-group=modp2048
add auth-algorithms=sha256 disabled=yes enc-algorithms=aes-256-gcm,aes-192-ctr,aes-192-gcm,aes-128-gcm name=proposal1_pfsense pfs-group=modp2048
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
add name="cam test pool 114" ranges=192.168.114.10-192.168.114.200
add name="pool1 unifi test" ranges=192.168.115.100-192.168.115.200
add name="l2tp pool" ranges=192.168.114.50-192.168.114.55
/ip dhcp-server
add address-pool=default-dhcp interface=bridge name=defconf
add address-pool="cam test pool 114" disabled=no interface=bridge name=server1_camtest
# DHCP server can not run on slave interface!
add address-pool="pool1 unifi test" disabled=no interface=ether2 name="server unifi test"
/ppp profile
set *0 change-tcp-mss=default
add local-address=192.168.114.1 name=PPTP_teszt remote-address="cam test pool 114"
set *FFFFFFFE change-tcp-mss=default local-address=192.168.114.1 remote-address="cam test pool 114" use-encryption=default
/interface l2tp-client
add allow=mschap2 connect-to=my.remote.server.ip disabled=no mrru=1600 name=l2tp-out1 profile=default use-ipsec=yes user=l2tpmikortik
/user group
set full policy=local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,password,web,sniff,sensitive,api,romon,dude,tikapp
/interface bridge port
add bridge=bridge comment=defconf interface=ether2
add bridge=bridge comment=defconf interface=ether3
add bridge=bridge comment=defconf interface=ether4
add bridge=bridge comment=defconf interface=pwr-line1
add bridge=bridge comment=defconf interface=wlan1
/ip neighbor discovery-settings
set discover-interface-list=LAN
/interface l2tp-server server
set allow-fast-path=yes enabled=yes use-ipsec=required
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1 list=WAN
/interface pptp-server server
set authentication=mschap2 enabled=yes
/ip address
add address=192.168.88.1/24 comment=defconf interface=bridge network=192.168.88.0
add address=172.16.30.1/24 interface=bridge network=172.16.30.0
add address=172.16.10.1/24 disabled=yes interface=bridge network=172.16.10.0
add address=172.16.100.1/24 interface=bridge network=172.16.100.0
add address=172.16.40.1/24 interface=bridge network=172.16.40.0
add address=192.168.114.1/24 interface=bridge network=192.168.114.0
add address=172.16.21.1/24 interface=bridge network=172.16.21.0
/ip dhcp-client
add comment=defconf disabled=no interface=ether1
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
add address=192.168.114.0/24 gateway=192.168.114.1
add address=192.168.115.0/24 gateway=192.168.115.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router.lan
/ip firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
# pptp-out1 not ready
add action=accept chain=input in-interface=pptp-out1 protocol=tcp
add action=accept chain=input dst-port=500 protocol=udp
add action=accept chain=input dst-port=1701 protocol=udp
add action=accept chain=input dst-port=4500 protocol=udp
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid disabled=yes
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=drop chain=input comment="defconf: drop all not coming from LAN" disabled=yes in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid disabled=yes
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new disabled=yes in-interface-list=WAN
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN
# pptp-out1 not ready
add action=masquerade chain=srcnat out-interface=pptp-out1
add action=dst-nat chain=dstnat disabled=yes dst-port=8088 protocol=tcp to-addresses=172.16.100.60 to-ports=80
add action=dst-nat chain=dstnat disabled=yes dst-port=7442 protocol=tcp to-addresses=192.168.114.199 to-ports=0-65535
add action=dst-nat chain=dstnat disabled=yes dst-port=7550 protocol=tcp to-addresses=192.168.114.199 to-ports=0-65535
add action=dst-nat chain=dstnat disabled=yes dst-port=7442 protocol=udp to-addresses=192.168.114.199 to-ports=0-65535
add action=dst-nat chain=dstnat disabled=yes dst-port=7550 protocol=udp to-addresses=192.168.114.199 to-ports=0-65535
add action=dst-nat chain=dstnat disabled=yes dst-port=7444 protocol=tcp to-addresses=192.168.114.199 to-ports=0-65535
add action=dst-nat chain=dstnat disabled=yes dst-port=7444 protocol=udp to-addresses=192.168.114.199 to-ports=0-65535
add action=accept chain=srcnat disabled=yes dst-address=192.168.115.200 src-address=192.168.115.1
/ip ipsec identity
add peer=peer1
/ip ipsec policy
add disabled=yes dst-address=192.168.115.0/24 sa-dst-address=192.168.114.199 sa-src-address=192.168.114.1 src-address=192.168.114.0/24 tunnel=yes
add disabled=yes dst-address=192.168.6.0/24 peer=peer1,l2tp-in-server sa-dst-address=192.168.5.96 sa-src-address=my.public.ip src-address=192.168.114.0/24 tunnel=yes
/ip route
add distance=1 dst-address=172.16.0.0/24 gateway=pptp-out1
add disabled=yes distance=1 dst-address=172.16.0.50/32 gateway=pptp-out1
add distance=1 dst-address=172.16.10.0/24 gateway=pptp-out1
add disabled=yes distance=1 dst-address=172.16.10.100/32 gateway=pptp-out1
add disabled=yes distance=1 dst-address=172.16.10.101/32 gateway=pptp-out1
add disabled=yes distance=1 dst-address=172.16.10.110/32 gateway=pptp-out1
add distance=1 dst-address=172.16.16.16/32 gateway=pptp-out1
add disabled=yes distance=1 dst-address=172.16.20.1/32 gateway=pptp-out1
add distance=1 dst-address=192.168.1.1/32 gateway=ether3
add distance=1 dst-address=192.168.10.50/32 gateway=pptp-out1
add distance=1 dst-address=192.168.10.197/32 gateway=pptp-out1
/ppp secret
add name=teszt profile=PPTP_teszt
/system clock
set time-zone-name=Europe/Budapest
/system logging
add topics=l2tp,ipsec,!packet
/system ntp client
set enabled=yes primary-ntp=193.224.45.107
/tool mac-server
set allowed-interface-list=LAN
/tool mac-server mac-winbox
set allowed-interface-list=LAN
Many thanks!
The logging configuration works different than you assume.
/system logging
add topics=l2tp,ipsec,!packet
is not the same like
/system logging
add topics=l2tp
add topics=ipsec,!packet
A log row must match all topics specified on the configuration row in order to be written to the chosen destination (action). Since no log row is generated marked with both l2tp and ipsec at the same time, the interesting log rows have not been written.
Oh, thanks for the info!
I re-run the test and I guess there is a problem in P2 negotiation.
If it is the case I will need some help on how to set it up. To be honest I’m confused on how to set up P1 and P2 in MikroTik, I couldn’t really find it where to do that.
# jan/28/2021 12:23:14 by RouterOS 6.48
# software id = L809-98LV
#
12:23:25 l2tp,ppp,info l2tp-out1: initializing...
12:23:25 l2tp,ppp,info l2tp-out1: connecting...
12:23:27 l2tp,debug tunnel 2995 entering state: wait-ctl-reply
12:23:27 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
12:23:27 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
12:23:27 l2tp,debug,packet (M) Message-Type=SCCRQ
12:23:27 l2tp,debug,packet (M) Protocol-Version=0x01:00
12:23:27 l2tp,debug,packet (M) Framing-Capabilities=0x1
12:23:27 l2tp,debug,packet (M) Bearer-Capabilities=0x0
12:23:27 l2tp,debug,packet Firmware-Revision=0x1
12:23:27 l2tp,debug,packet (M) Host-Name="MikroTik"
12:23:27 l2tp,debug,packet Vendor-Name="MikroTik"
12:23:27 l2tp,debug,packet (M) Assigned-Tunnel-ID=2995
12:23:27 l2tp,debug,packet (M) Receive-Window-Size=4
12:23:27 ipsec acquire for policy: my.public.ip:1701 <=> my.remote.server.ip:1701 ip-proto:17
12:23:27 ipsec peer is IKEv1
12:23:27 ipsec,debug (proto_id=ESP spisize=4 spi=00000000 spi_p=00000000 encmode=Transport reqid=0:0)
12:23:27 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-sha256)
12:23:27 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-sha1)
12:23:27 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=256 authtype=254)
12:23:27 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=288 authtype=254)
12:23:27 ipsec,debug (trns_id=AES-CBC encklen=192 authtype=hmac-sha256)
12:23:27 ipsec,debug (trns_id=AES-CBC encklen=192 authtype=hmac-sha1)
12:23:27 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=192 authtype=254)
12:23:27 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=224 authtype=254)
12:23:27 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-sha256)
12:23:27 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-sha1)
12:23:27 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=128 authtype=254)
12:23:27 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=160 authtype=254)
12:23:27 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-sha256)
12:23:27 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-sha1)
12:23:27 ipsec IPsec-SA request for my.remote.server.ip queued due to no phase1 found.
12:23:27 ipsec,debug ===
12:23:27 ipsec,info initiate new phase 1 (Identity Protection): my.public.ip[500]<=>my.remote.server.ip[500]
12:23:28 ipsec,debug new cookie:
12:23:28 ipsec,debug 4c67a717d30b0c56
12:23:28 ipsec,debug add payload of len 248, next type 13
12:23:28 ipsec,debug add payload of len 16, next type 13
12:23:28 ipsec,debug add payload of len 16, next type 13
12:23:28 ipsec,debug add payload of len 16, next type 13
12:23:28 ipsec,debug add payload of len 16, next type 13
12:23:28 ipsec,debug add payload of len 16, next type 13
12:23:28 ipsec,debug add payload of len 16, next type 13
12:23:28 ipsec,debug add payload of len 16, next type 13
12:23:28 ipsec,debug add payload of len 16, next type 13
12:23:28 ipsec,debug add payload of len 16, next type 13
12:23:28 ipsec,debug add payload of len 16, next type 13
12:23:28 ipsec,debug add payload of len 16, next type 13
12:23:28 ipsec,debug add payload of len 16, next type 13
12:23:28 ipsec,debug add payload of len 16, next type 0
12:23:28 ipsec,debug 540 bytes from my.public.ip[500] to my.remote.server.ip[500]
12:23:28 ipsec,debug 1 times of 540 bytes message will be sent to my.remote.server.ip[500]
12:23:28 ipsec sent phase1 packet my.public.ip[500]<=>my.remote.server.ip[500] 4c67a717d30b0c56:0000000000000000
12:23:28 ipsec,debug ===== received 156 bytes from my.remote.server.ip[500] to my.public.ip[500]
12:23:28 ipsec,debug begin.
12:23:28 ipsec,debug seen nptype=1(sa) len=56
12:23:28 ipsec,debug seen nptype=13(vid) len=12
12:23:28 ipsec,debug seen nptype=13(vid) len=20
12:23:28 ipsec,debug seen nptype=13(vid) len=20
12:23:28 ipsec,debug seen nptype=13(vid) len=20
12:23:28 ipsec,debug succeed.
12:23:28 ipsec received Vendor ID: draft-ietf-ipsra-isakmp-xauth-06.txt
12:23:28 ipsec received Vendor ID: DPD
12:23:28 ipsec,debug remote supports DPD
12:23:28 ipsec received Vendor ID: CISCO-UNITY
12:23:28 ipsec received Vendor ID: RFC 3947
12:23:28 ipsec my.remote.server.ip Selected NAT-T version: RFC 3947
12:23:28 ipsec,debug total SA len=52
12:23:28 ipsec,debug 00000001 00000001 0000002c 01010001 00000024 01010000 80010005 80020002
12:23:28 ipsec,debug 8004000e 80030001 800b0001 000c0004 00015180
12:23:28 ipsec,debug begin.
12:23:28 ipsec,debug seen nptype=2(prop) len=44
12:23:28 ipsec,debug succeed.
12:23:28 ipsec,debug proposal #1 len=44
12:23:28 ipsec,debug begin.
12:23:28 ipsec,debug seen nptype=3(trns) len=36
12:23:28 ipsec,debug succeed.
12:23:28 ipsec,debug transform #1 len=36
12:23:28 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=3DES-CBC
12:23:28 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=SHA
12:23:28 ipsec,debug hash(sha1)
12:23:28 ipsec,debug type=Group Description, flag=0x8000, lorv=2048-bit MODP group
12:23:28 ipsec,debug dh(modp2048)
12:23:28 ipsec,debug type=Authentication Method, flag=0x8000, lorv=pre-shared key
12:23:28 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
12:23:28 ipsec,debug type=Life Duration, flag=0x0000, lorv=4
12:23:28 ipsec,debug pair 1:
12:23:28 ipsec,debug 0x4aae40: next=(nil) tnext=(nil)
12:23:28 ipsec,debug proposal #1: 1 transform
12:23:28 ipsec,debug -checking with pre-shared key auth-
12:23:28 ipsec,debug prop#=1, prot-id=ISAKMP, spi-size=0, #trns=1
12:23:28 ipsec,debug trns#=1, trns-id=IKE
12:23:28 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=3DES-CBC
12:23:28 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=SHA
12:23:28 ipsec,debug type=Group Description, flag=0x8000, lorv=2048-bit MODP group
12:23:28 ipsec,debug type=Authentication Method, flag=0x8000, lorv=pre-shared key
12:23:28 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
12:23:28 ipsec,debug type=Life Duration, flag=0x0000, lorv=4
12:23:28 ipsec,debug -compare proposal #1: Local:Peer
12:23:28 ipsec,debug (lifetime = 86400:86400)
12:23:28 ipsec,debug (lifebyte = 0:0)
12:23:28 ipsec,debug enctype = AES-CBC:3DES-CBC
12:23:28 ipsec,debug (encklen = 256:0)
12:23:28 ipsec,debug hashtype = SHA:SHA
12:23:28 ipsec,debug authmethod = pre-shared key:pre-shared key
12:23:28 ipsec,debug dh_group = 2048-bit MODP group:2048-bit MODP group
12:23:28 ipsec,debug -compare proposal #2: Local:Peer
12:23:28 ipsec,debug (lifetime = 86400:86400)
12:23:28 ipsec,debug (lifebyte = 0:0)
12:23:28 ipsec,debug enctype = AES-CBC:3DES-CBC
12:23:28 ipsec,debug (encklen = 256:0)
12:23:28 ipsec,debug hashtype = SHA:SHA
12:23:28 ipsec,debug authmethod = pre-shared key:pre-shared key
12:23:28 ipsec,debug dh_group = 1024-bit MODP group:2048-bit MODP group
12:23:28 ipsec,debug -compare proposal #3: Local:Peer
12:23:28 ipsec,debug (lifetime = 86400:86400)
12:23:28 ipsec,debug (lifebyte = 0:0)
12:23:28 ipsec,debug enctype = AES-CBC:3DES-CBC
12:23:28 ipsec,debug (encklen = 128:0)
12:23:28 ipsec,debug hashtype = SHA:SHA
12:23:28 ipsec,debug authmethod = pre-shared key:pre-shared key
12:23:28 ipsec,debug dh_group = 2048-bit MODP group:2048-bit MODP group
12:23:28 ipsec,debug -compare proposal #4: Local:Peer
12:23:28 ipsec,debug (lifetime = 86400:86400)
12:23:28 ipsec,debug (lifebyte = 0:0)
12:23:28 ipsec,debug enctype = AES-CBC:3DES-CBC
12:23:28 ipsec,debug (encklen = 128:0)
12:23:28 ipsec,debug hashtype = SHA:SHA
12:23:28 ipsec,debug authmethod = pre-shared key:pre-shared key
12:23:28 ipsec,debug dh_group = 1024-bit MODP group:2048-bit MODP group
12:23:28 ipsec,debug -compare proposal #5: Local:Peer
12:23:28 ipsec,debug (lifetime = 86400:86400)
12:23:28 ipsec,debug (lifebyte = 0:0)
12:23:28 ipsec,debug enctype = 3DES-CBC:3DES-CBC
12:23:28 ipsec,debug (encklen = 0:0)
12:23:28 ipsec,debug hashtype = SHA:SHA
12:23:28 ipsec,debug authmethod = pre-shared key:pre-shared key
12:23:28 ipsec,debug dh_group = 2048-bit MODP group:2048-bit MODP group
12:23:28 ipsec,debug -an acceptable proposal found-
12:23:28 ipsec,debug dh(modp2048)
12:23:28 ipsec,debug -agreed on pre-shared key auth-
12:23:28 ipsec,debug ===
12:23:28 ipsec,debug dh(modp2048)
12:23:28 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
12:23:28 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
12:23:28 l2tp,debug,packet (M) Message-Type=SCCRQ
12:23:28 l2tp,debug,packet (M) Protocol-Version=0x01:00
12:23:28 l2tp,debug,packet (M) Framing-Capabilities=0x1
12:23:28 l2tp,debug,packet (M) Bearer-Capabilities=0x0
12:23:28 l2tp,debug,packet Firmware-Revision=0x1
12:23:28 l2tp,debug,packet (M) Host-Name="MikroTik"
12:23:28 l2tp,debug,packet Vendor-Name="MikroTik"
12:23:28 l2tp,debug,packet (M) Assigned-Tunnel-ID=2995
12:23:28 l2tp,debug,packet (M) Receive-Window-Size=4
12:23:29 ipsec,debug my.remote.server.ip Hashing my.remote.server.ip[500] with algo #2
12:23:29 ipsec,debug hash(sha1)
12:23:29 ipsec,debug my.public.ip Hashing my.public.ip[500] with algo #2
12:23:29 ipsec,debug hash(sha1)
12:23:29 ipsec Adding remote and local NAT-D payloads.
12:23:29 ipsec,debug add payload of len 256, next type 10
12:23:29 ipsec,debug add payload of len 24, next type 20
12:23:29 ipsec,debug add payload of len 20, next type 20
12:23:29 ipsec,debug add payload of len 20, next type 0
12:23:29 ipsec,debug 364 bytes from my.public.ip[500] to my.remote.server.ip[500]
12:23:29 ipsec,debug 1 times of 364 bytes message will be sent to my.remote.server.ip[500]
12:23:29 ipsec sent phase1 packet my.public.ip[500]<=>my.remote.server.ip[500] 4c67a717d30b0c56:cbb7133856a57afe
12:23:29 ipsec,debug ===== received 372 bytes from my.remote.server.ip[500] to my.public.ip[500]
12:23:29 ipsec,debug begin.
12:23:29 ipsec,debug seen nptype=4(ke) len=260
12:23:29 ipsec,debug seen nptype=10(nonce) len=36
12:23:29 ipsec,debug seen nptype=20(nat-d) len=24
12:23:29 ipsec,debug seen nptype=20(nat-d) len=24
12:23:29 ipsec,debug succeed.
12:23:29 ipsec,debug my.public.ip Hashing my.public.ip[500] with algo #2
12:23:29 ipsec,debug hash(sha1)
12:23:29 ipsec,debug NAT-D payload #0 doesn't match
12:23:29 ipsec,debug my.remote.server.ip Hashing my.remote.server.ip[500] with algo #2
12:23:29 ipsec,debug hash(sha1)
12:23:29 ipsec,debug NAT-D payload #1 verified
12:23:29 ipsec NAT detected: ME
12:23:29 ipsec KA list add: my.public.ip[4500]->my.remote.server.ip[4500]
12:23:29 ipsec,debug ===
12:23:29 ipsec,debug dh(modp2048)
12:23:29 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
12:23:29 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
12:23:29 l2tp,debug,packet (M) Message-Type=SCCRQ
12:23:29 l2tp,debug,packet (M) Protocol-Version=0x01:00
12:23:29 l2tp,debug,packet (M) Framing-Capabilities=0x1
12:23:29 l2tp,debug,packet (M) Bearer-Capabilities=0x0
12:23:29 l2tp,debug,packet Firmware-Revision=0x1
12:23:29 l2tp,debug,packet (M) Host-Name="MikroTik"
12:23:29 l2tp,debug,packet Vendor-Name="MikroTik"
12:23:29 l2tp,debug,packet (M) Assigned-Tunnel-ID=2995
12:23:29 l2tp,debug,packet (M) Receive-Window-Size=4
12:23:29 ipsec,debug nonce 1:
12:23:29 ipsec,debug 9b9e8873 66b817a3 e897c0dd 087a1f0c 4e856db4 e311563e
12:23:29 ipsec,debug nonce 2:
12:23:29 ipsec,debug 15d2e77d b9d32c43 8d283f0d aae4f437 41a0a112 95b50d74 45cbb3a7 2ff59c71
12:23:29 ipsec,debug SKEYID computed:
12:23:29 ipsec,debug d8860ee2 47c8f7fe 043e6fc2 7b07826e c1ad59ef
12:23:29 ipsec,debug SKEYID_d computed:
12:23:29 ipsec,debug 8c8a572b 63ed7970 8904ecc2 49dd4139 d5132d7d
12:23:29 ipsec,debug SKEYID_a computed:
12:23:29 ipsec,debug e529dadb e45d5df5 8520f7e2 efa67804 aa645782
12:23:29 ipsec,debug SKEYID_e computed:
12:23:29 ipsec,debug bbe5a7a3 ac79d36d 72b690b7 dd357007 479a2bc4
12:23:29 ipsec,debug hash(sha1)
12:23:29 ipsec,debug len(SKEYID_e) < len(Ka) (20 < 24), generating long key (Ka = K1 | K2 | ...)
12:23:29 ipsec,debug compute intermediate encryption key K1
12:23:29 ipsec,debug 00
12:23:29 ipsec,debug d02702de 8c7dab41 ca8c997f 8ac7456b a33ba86f
12:23:29 ipsec,debug compute intermediate encryption key K2
12:23:29 ipsec,debug d02702de 8c7dab41 ca8c997f 8ac7456b a33ba86f
12:23:29 ipsec,debug fdd937ff 78f1fc9c d9187995 b19112c0 4a7a2c4e
12:23:29 ipsec,debug final encryption key computed:
12:23:29 ipsec,debug d02702de 8c7dab41 ca8c997f 8ac7456b a33ba86f fdd937ff
12:23:29 ipsec,debug hash(sha1)
12:23:29 ipsec,debug IV computed:
12:23:29 ipsec,debug 8a464728 aec5a5f6
12:23:29 ipsec,debug use ID type of IPv4_address
12:23:29 ipsec,debug add payload of len 8, next type 8
12:23:29 ipsec,debug add payload of len 20, next type 0
12:23:29 ipsec,debug 68 bytes from my.public.ip[4500] to my.remote.server.ip[4500]
12:23:29 ipsec,debug 1 times of 72 bytes message will be sent to my.remote.server.ip[4500]
12:23:29 ipsec sent phase1 packet my.public.ip[4500]<=>my.remote.server.ip[4500] 4c67a717d30b0c56:cbb7133856a57afe
12:23:29 ipsec,debug ===== received 68 bytes from my.remote.server.ip[4500] to my.public.ip[4500]
12:23:29 ipsec,debug begin.
12:23:29 ipsec,debug seen nptype=5(id) len=12
12:23:29 ipsec,debug seen nptype=8(hash) len=24
12:23:29 ipsec,debug succeed.
12:23:29 ipsec,debug HASH received:
12:23:29 ipsec,debug db1f224a e660dd5d 26004b2d f969f837 56ccf4e3
12:23:29 ipsec,debug HASH for PSK validated.
12:23:29 ipsec,debug my.remote.server.ip peer's ID:
12:23:29 ipsec,debug 01000000 25dc8412
12:23:29 ipsec,debug ===
12:23:29 ipsec,info ISAKMP-SA established my.public.ip[4500]-my.remote.server.ip[4500] spi:4c67a717d30b0c56:cbb7133856a57afe
12:23:29 ipsec,debug ===
12:23:30 ipsec,debug ===
12:23:30 ipsec,debug begin QUICK mode.
12:23:30 ipsec initiate new phase 2 negotiation: my.public.ip[4500]<=>my.remote.server.ip[4500]
12:23:30 ipsec,debug hash(sha1)
12:23:30 ipsec,debug call pfkey_send_getspi 3758
12:23:30 ipsec,debug pfkey GETSPI sent: ESP/Transport my.remote.server.ip[4500]->my.public.ip[4500]
12:23:30 ipsec,debug pfkey getspi sent.
12:23:30 ipsec NAT detected -> UDP encapsulation (ENC_MODE 2->4).
12:23:30 ipsec,debug dh(modp2048)
12:23:30 ipsec,debug dh(modp2048)
12:23:30 ipsec,debug dh(modp2048)
12:23:30 ipsec,debug dh(modp2048)
12:23:30 ipsec,debug dh(modp2048)
12:23:30 ipsec,debug dh(modp2048)
12:23:30 ipsec,debug dh(modp2048)
12:23:30 ipsec,debug dh(modp2048)
12:23:30 ipsec,debug dh(modp2048)
12:23:30 ipsec,debug dh(modp2048)
12:23:30 ipsec,debug dh(modp2048)
12:23:30 ipsec,debug dh(modp2048)
12:23:30 ipsec,debug dh(modp2048)
12:23:30 ipsec,debug dh(modp2048)
12:23:30 ipsec,debug dh(modp2048)
12:23:30 ipsec,debug dh(modp2048)
12:23:30 ipsec,debug dh(modp2048)
12:23:30 ipsec,debug dh(modp2048)
12:23:30 ipsec,debug dh(modp2048)
12:23:30 ipsec,debug dh(modp2048)
12:23:30 ipsec,debug dh(modp2048)
12:23:30 ipsec,debug dh(modp2048)
12:23:30 ipsec,debug dh(modp2048)
12:23:30 ipsec,debug dh(modp2048)
12:23:30 ipsec,debug dh(modp2048)
12:23:30 ipsec,debug dh(modp2048)
12:23:30 ipsec,debug dh(modp2048)
12:23:30 ipsec,debug dh(modp2048)
12:23:30 ipsec,debug dh(modp2048)
12:23:30 ipsec,debug use local ID type IPv4_address
12:23:30 ipsec,debug use remote ID type IPv4_address
12:23:30 ipsec,debug IDci:
12:23:30 ipsec,debug 011106a5 c0a80553
12:23:30 ipsec,debug IDcr:
12:23:30 ipsec,debug 011106a5 25dc8412
12:23:30 ipsec,debug NAT-OAi:
12:23:30 ipsec,debug 01000000 c0a80553
12:23:30 ipsec,debug NAT-OAr:
12:23:30 ipsec,debug 01000000 25dc8412
12:23:30 ipsec,debug add payload of len 436, next type 10
12:23:30 ipsec,debug add payload of len 24, next type 4
12:23:30 ipsec,debug add payload of len 256, next type 5
12:23:30 ipsec,debug add payload of len 8, next type 5
12:23:30 ipsec,debug add payload of len 8, next type 21
12:23:30 ipsec,debug add payload of len 8, next type 21
12:23:30 ipsec,debug add payload of len 8, next type 0
12:23:30 ipsec,debug add payload of len 20, next type 1
12:23:30 ipsec,debug 836 bytes from my.public.ip[4500] to my.remote.server.ip[4500]
12:23:30 ipsec,debug 1 times of 840 bytes message will be sent to my.remote.server.ip[4500]
12:23:30 ipsec sent phase2 packet my.public.ip[4500]<=>my.remote.server.ip[4500] 4c67a717d30b0c56:cbb7133856a57afe:c0872f68
12:23:30 ipsec,debug ===== received 76 bytes from my.remote.server.ip[4500] to my.public.ip[4500]
12:23:30 ipsec,debug receive Information.
12:23:30 ipsec,debug hash(sha1)
12:23:30 ipsec,debug hash validated.
12:23:30 ipsec,debug begin.
12:23:30 ipsec,debug seen nptype=8(hash) len=24
12:23:30 ipsec,debug seen nptype=11(notify) len=16
12:23:30 ipsec,debug succeed.
12:23:30 ipsec,debug my.remote.server.ip notify: NO-PROPOSAL-CHOSEN
12:23:30 ipsec my.remote.server.ip fatal NO-PROPOSAL-CHOSEN notify messsage, phase1 should be deleted.
12:23:30 ipsec,debug my.remote.server.ip notification message 14:NO-PROPOSAL-CHOSEN, doi=1 proto_id=3 spi=00000000(size=4).
12:23:31 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
12:23:31 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
12:23:31 l2tp,debug,packet (M) Message-Type=SCCRQ
12:23:31 l2tp,debug,packet (M) Protocol-Version=0x01:00
12:23:31 l2tp,debug,packet (M) Framing-Capabilities=0x1
12:23:31 l2tp,debug,packet (M) Bearer-Capabilities=0x0
12:23:31 l2tp,debug,packet Firmware-Revision=0x1
12:23:31 l2tp,debug,packet (M) Host-Name="MikroTik"
12:23:31 l2tp,debug,packet Vendor-Name="MikroTik"
12:23:31 l2tp,debug,packet (M) Assigned-Tunnel-ID=2995
12:23:31 l2tp,debug,packet (M) Receive-Window-Size=4
12:23:35 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
12:23:35 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
12:23:35 l2tp,debug,packet (M) Message-Type=SCCRQ
12:23:35 l2tp,debug,packet (M) Protocol-Version=0x01:00
12:23:35 l2tp,debug,packet (M) Framing-Capabilities=0x1
12:23:35 l2tp,debug,packet (M) Bearer-Capabilities=0x0
12:23:35 l2tp,debug,packet Firmware-Revision=0x1
12:23:35 l2tp,debug,packet (M) Host-Name="MikroTik"
12:23:35 l2tp,debug,packet Vendor-Name="MikroTik"
12:23:35 l2tp,debug,packet (M) Assigned-Tunnel-ID=2995
12:23:35 l2tp,debug,packet (M) Receive-Window-Size=4
12:23:41 ipsec,debug 836 bytes from my.public.ip[4500] to my.remote.server.ip[4500]
12:23:41 ipsec,debug 1 times of 840 bytes message will be sent to my.remote.server.ip[4500]
12:23:41 ipsec resent phase2 packet my.public.ip[4500]<=>my.remote.server.ip[4500] 4c67a717d30b0c56:cbb7133856a57afe:c0872f68
12:23:43 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
12:23:43 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
12:23:43 l2tp,debug,packet (M) Message-Type=SCCRQ
12:23:43 l2tp,debug,packet (M) Protocol-Version=0x01:00
12:23:43 l2tp,debug,packet (M) Framing-Capabilities=0x1
12:23:43 l2tp,debug,packet (M) Bearer-Capabilities=0x0
12:23:43 l2tp,debug,packet Firmware-Revision=0x1
12:23:43 l2tp,debug,packet (M) Host-Name="MikroTik"
12:23:43 l2tp,debug,packet Vendor-Name="MikroTik"
12:23:43 l2tp,debug,packet (M) Assigned-Tunnel-ID=2995
12:23:43 l2tp,debug,packet (M) Receive-Window-Size=4
12:23:47 ipsec,debug KA: my.public.ip[4500]->my.remote.server.ip[4500]
12:23:47 ipsec,debug 1 times of 1 bytes message will be sent to my.remote.server.ip[4500]
12:23:51 ipsec,debug 836 bytes from my.public.ip[4500] to my.remote.server.ip[4500]
12:23:51 ipsec,debug 1 times of 840 bytes message will be sent to my.remote.server.ip[4500]
12:23:51 ipsec resent phase2 packet my.public.ip[4500]<=>my.remote.server.ip[4500] 4c67a717d30b0c56:cbb7133856a57afe:c0872f68
12:23:51 l2tp,debug tunnel 2995 received no replies, disconnecting
12:23:51 l2tp,debug tunnel 2995 entering state: dead
12:23:51 l2tp,debug session 1 entering state: dead
12:23:51 l2tp,ppp,debug l2tp-out1: CCP close
12:23:51 l2tp,ppp,debug l2tp-out1: BCP close
12:23:51 l2tp,ppp,debug l2tp-out1: IPCP close
12:23:51 l2tp,ppp,debug l2tp-out1: IPV6CP close
12:23:51 l2tp,ppp,debug l2tp-out1: MPLSCP close
12:23:51 l2tp,ppp,info l2tp-out1: terminating... - session closed
12:23:51 l2tp,ppp,debug l2tp-out1: LCP lowerdown
12:23:51 l2tp,ppp,debug l2tp-out1: LCP down event in initial state
12:23:51 l2tp,ppp,info l2tp-out1: disconnected
12:23:51 l2tp,ppp,info l2tp-out1: initializing...
12:23:51 l2tp,ppp,info l2tp-out1: connecting...
12:23:51 l2tp,ppp,debug l2tp-out1: CCP close
12:23:51 l2tp,ppp,debug l2tp-out1: BCP close
12:23:51 l2tp,ppp,debug l2tp-out1: IPCP close
12:23:51 l2tp,ppp,debug l2tp-out1: IPV6CP close
12:23:51 l2tp,ppp,debug l2tp-out1: MPLSCP close
12:23:51 l2tp,ppp,info l2tp-out1: terminating... - old tunnel is not closed yet
12:23:51 l2tp,ppp,debug l2tp-out1: LCP lowerdown
12:23:51 l2tp,ppp,debug l2tp-out1: LCP down event in initial state
12:23:51 l2tp,ppp,info l2tp-out1: disconnected
12:23:51 l2tp,ppp,info l2tp-out1: initializing...
12:23:51 l2tp,ppp,info l2tp-out1: connecting...
12:23:51 l2tp,debug tunnel 2996 entering state: wait-ctl-reply
12:23:51 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
12:23:51 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
12:23:51 l2tp,debug,packet (M) Message-Type=SCCRQ
12:23:51 l2tp,debug,packet (M) Protocol-Version=0x01:00
12:23:51 l2tp,debug,packet (M) Framing-Capabilities=0x1
12:23:51 l2tp,debug,packet (M) Bearer-Capabilities=0x0
12:23:51 l2tp,debug,packet Firmware-Revision=0x1
12:23:51 l2tp,debug,packet (M) Host-Name="MikroTik"
12:23:51 l2tp,debug,packet Vendor-Name="MikroTik"
12:23:51 l2tp,debug,packet (M) Assigned-Tunnel-ID=2996
12:23:51 l2tp,debug,packet (M) Receive-Window-Size=4
12:23:52 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
12:23:52 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
12:23:52 l2tp,debug,packet (M) Message-Type=SCCRQ
12:23:52 l2tp,debug,packet (M) Protocol-Version=0x01:00
12:23:52 l2tp,debug,packet (M) Framing-Capabilities=0x1
12:23:52 l2tp,debug,packet (M) Bearer-Capabilities=0x0
12:23:52 l2tp,debug,packet Firmware-Revision=0x1
12:23:52 l2tp,debug,packet (M) Host-Name="MikroTik"
12:23:52 l2tp,debug,packet Vendor-Name="MikroTik"
12:23:52 l2tp,debug,packet (M) Assigned-Tunnel-ID=2996
12:23:52 l2tp,debug,packet (M) Receive-Window-Size=4
12:23:53 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
12:23:53 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
12:23:53 l2tp,debug,packet (M) Message-Type=SCCRQ
12:23:53 l2tp,debug,packet (M) Protocol-Version=0x01:00
12:23:53 l2tp,debug,packet (M) Framing-Capabilities=0x1
12:23:53 l2tp,debug,packet (M) Bearer-Capabilities=0x0
12:23:53 l2tp,debug,packet Firmware-Revision=0x1
12:23:53 l2tp,debug,packet (M) Host-Name="MikroTik"
12:23:53 l2tp,debug,packet Vendor-Name="MikroTik"
12:23:53 l2tp,debug,packet (M) Assigned-Tunnel-ID=2996
12:23:53 l2tp,debug,packet (M) Receive-Window-Size=4
12:23:55 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
12:23:55 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
12:23:55 l2tp,debug,packet (M) Message-Type=SCCRQ
12:23:55 l2tp,debug,packet (M) Protocol-Version=0x01:00
12:23:55 l2tp,debug,packet (M) Framing-Capabilities=0x1
12:23:55 l2tp,debug,packet (M) Bearer-Capabilities=0x0
12:23:55 l2tp,debug,packet Firmware-Revision=0x1
12:23:55 l2tp,debug,packet (M) Host-Name="MikroTik"
12:23:55 l2tp,debug,packet Vendor-Name="MikroTik"
12:23:55 l2tp,debug,packet (M) Assigned-Tunnel-ID=2996
12:23:55 l2tp,debug,packet (M) Receive-Window-Size=4
12:23:59 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
12:23:59 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
12:23:59 l2tp,debug,packet (M) Message-Type=SCCRQ
12:23:59 l2tp,debug,packet (M) Protocol-Version=0x01:00
12:23:59 l2tp,debug,packet (M) Framing-Capabilities=0x1
12:23:59 l2tp,debug,packet (M) Bearer-Capabilities=0x0
12:23:59 l2tp,debug,packet Firmware-Revision=0x1
12:23:59 l2tp,debug,packet (M) Host-Name="MikroTik"
12:23:59 l2tp,debug,packet Vendor-Name="MikroTik"
12:23:59 l2tp,debug,packet (M) Assigned-Tunnel-ID=2996
12:23:59 l2tp,debug,packet (M) Receive-Window-Size=4
12:23:59 ipsec acquire for policy: my.public.ip:1701 <=> my.remote.server.ip:1701 ip-proto:17
12:23:59 ipsec ignore the acquire because negotiating ph2 found
12:24:00 ipsec my.remote.server.ip give up to get IPsec-SA due to time up to wait.
12:24:00 ipsec IPsec-SA expired: ESP/Transport my.remote.server.ip[500]->my.public.ip[500] spi=0x6faeb43
12:24:07 ipsec,debug KA: my.public.ip[4500]->my.remote.server.ip[4500]
12:24:07 ipsec,debug 1 times of 1 bytes message will be sent to my.remote.server.ip[4500]
12:24:07 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
12:24:07 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
12:24:07 l2tp,debug,packet (M) Message-Type=SCCRQ
12:24:07 l2tp,debug,packet (M) Protocol-Version=0x01:00
12:24:07 l2tp,debug,packet (M) Framing-Capabilities=0x1
12:24:07 l2tp,debug,packet (M) Bearer-Capabilities=0x0
12:24:07 l2tp,debug,packet Firmware-Revision=0x1
12:24:07 l2tp,debug,packet (M) Host-Name="MikroTik"
12:24:07 l2tp,debug,packet Vendor-Name="MikroTik"
12:24:07 l2tp,debug,packet (M) Assigned-Tunnel-ID=2996
12:24:07 l2tp,debug,packet (M) Receive-Window-Size=4
12:24:15 l2tp,debug tunnel 2996 received no replies, disconnecting
12:24:15 l2tp,debug tunnel 2996 entering state: dead
12:24:15 l2tp,debug session 1 entering state: dead
12:24:15 l2tp,ppp,debug l2tp-out1: CCP close
12:24:15 l2tp,ppp,debug l2tp-out1: BCP close
12:24:15 l2tp,ppp,debug l2tp-out1: IPCP close
12:24:15 l2tp,ppp,debug l2tp-out1: IPV6CP close
12:24:15 l2tp,ppp,debug l2tp-out1: MPLSCP close
12:24:15 l2tp,ppp,info l2tp-out1: terminating... - session closed
12:24:15 l2tp,ppp,debug l2tp-out1: LCP lowerdown
12:24:15 l2tp,ppp,debug l2tp-out1: LCP down event in initial state
12:24:15 l2tp,ppp,info l2tp-out1: disconnected
12:24:16 l2tp,ppp,info l2tp-out1: initializing...
12:24:16 l2tp,ppp,info l2tp-out1: connecting...
12:24:16 l2tp,debug tunnel 2997 entering state: wait-ctl-reply
12:24:16 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
12:24:16 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
12:24:16 l2tp,debug,packet (M) Message-Type=SCCRQ
12:24:16 l2tp,debug,packet (M) Protocol-Version=0x01:00
12:24:16 l2tp,debug,packet (M) Framing-Capabilities=0x1
12:24:16 l2tp,debug,packet (M) Bearer-Capabilities=0x0
12:24:16 l2tp,debug,packet Firmware-Revision=0x1
12:24:16 l2tp,debug,packet (M) Host-Name="MikroTik"
12:24:16 l2tp,debug,packet Vendor-Name="MikroTik"
12:24:16 l2tp,debug,packet (M) Assigned-Tunnel-ID=2997
12:24:16 l2tp,debug,packet (M) Receive-Window-Size=4
12:24:17 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
12:24:17 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
12:24:17 l2tp,debug,packet (M) Message-Type=SCCRQ
12:24:17 l2tp,debug,packet (M) Protocol-Version=0x01:00
12:24:17 l2tp,debug,packet (M) Framing-Capabilities=0x1
12:24:17 l2tp,debug,packet (M) Bearer-Capabilities=0x0
12:24:17 l2tp,debug,packet Firmware-Revision=0x1
12:24:17 l2tp,debug,packet (M) Host-Name="MikroTik"
12:24:17 l2tp,debug,packet Vendor-Name="MikroTik"
12:24:17 l2tp,debug,packet (M) Assigned-Tunnel-ID=2997
12:24:17 l2tp,debug,packet (M) Receive-Window-Size=4
12:24:18 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
12:24:18 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
12:24:18 l2tp,debug,packet (M) Message-Type=SCCRQ
12:24:18 l2tp,debug,packet (M) Protocol-Version=0x01:00
12:24:18 l2tp,debug,packet (M) Framing-Capabilities=0x1
12:24:18 l2tp,debug,packet (M) Bearer-Capabilities=0x0
12:24:18 l2tp,debug,packet Firmware-Revision=0x1
12:24:18 l2tp,debug,packet (M) Host-Name="MikroTik"
12:24:18 l2tp,debug,packet Vendor-Name="MikroTik"
12:24:18 l2tp,debug,packet (M) Assigned-Tunnel-ID=2997
12:24:18 l2tp,debug,packet (M) Receive-Window-Size=4
12:24:20 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
12:24:20 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
12:24:20 l2tp,debug,packet (M) Message-Type=SCCRQ
12:24:20 l2tp,debug,packet (M) Protocol-Version=0x01:00
12:24:20 l2tp,debug,packet (M) Framing-Capabilities=0x1
12:24:20 l2tp,debug,packet (M) Bearer-Capabilities=0x0
12:24:20 l2tp,debug,packet Firmware-Revision=0x1
12:24:20 l2tp,debug,packet (M) Host-Name="MikroTik"
12:24:20 l2tp,debug,packet Vendor-Name="MikroTik"
12:24:20 l2tp,debug,packet (M) Assigned-Tunnel-ID=2997
12:24:20 l2tp,debug,packet (M) Receive-Window-Size=4
12:24:24 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
12:24:24 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
12:24:24 l2tp,debug,packet (M) Message-Type=SCCRQ
12:24:24 l2tp,debug,packet (M) Protocol-Version=0x01:00
12:24:24 l2tp,debug,packet (M) Framing-Capabilities=0x1
12:24:24 l2tp,debug,packet (M) Bearer-Capabilities=0x0
12:24:24 l2tp,debug,packet Firmware-Revision=0x1
12:24:24 l2tp,debug,packet (M) Host-Name="MikroTik"
12:24:24 l2tp,debug,packet Vendor-Name="MikroTik"
12:24:24 l2tp,debug,packet (M) Assigned-Tunnel-ID=2997
12:24:24 l2tp,debug,packet (M) Receive-Window-Size=4
12:24:27 ipsec,debug KA: my.public.ip[4500]->my.remote.server.ip[4500]
12:24:27 ipsec,debug 1 times of 1 bytes message will be sent to my.remote.server.ip[4500]
12:24:30 l2tp,ppp,debug l2tp-out1: CCP close
12:24:30 l2tp,ppp,debug l2tp-out1: BCP close
12:24:30 l2tp,ppp,debug l2tp-out1: IPCP close
12:24:30 l2tp,ppp,debug l2tp-out1: IPV6CP close
12:24:30 l2tp,ppp,debug l2tp-out1: MPLSCP close
12:24:30 l2tp,ppp,info l2tp-out1: terminating...
12:24:30 l2tp,debug session 1 entering state: stopping
12:24:30 l2tp,ppp,debug l2tp-out1: LCP lowerdown
12:24:30 l2tp,ppp,debug l2tp-out1: LCP down event in initial state
12:24:30 l2tp,ppp,info l2tp-out1: disabled
12:24:31 ipsec,debug Removing PH1...
12:24:31 ipsec,debug hash(sha1)
12:24:31 ipsec,debug 84 bytes from my.public.ip[4500] to my.remote.server.ip[4500]
12:24:31 ipsec,debug 1 times of 88 bytes message will be sent to my.remote.server.ip[4500]
12:24:31 ipsec,debug sendto Information delete.
12:24:31 ipsec,info ISAKMP-SA deleted my.public.ip[4500]-my.remote.server.ip[4500] spi:4c67a717d30b0c56:cbb7133856a57afe rekey:1
12:24:32 ipsec KA remove: my.public.ip[4500]->my.remote.server.ip[4500]
12:24:32 ipsec,debug KA tree dump: my.public.ip[4500]->my.remote.server.ip[4500] (in_use=1)
12:24:32 ipsec,debug KA removing this one...
12:24:32 ipsec,debug ===== received 92 bytes from my.remote.server.ip[4500] to my.public.ip[4500]
12:24:32 ipsec my.remote.server.ip unknown Informational exchange received.
12:24:32 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
12:24:32 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
12:24:32 l2tp,debug,packet (M) Message-Type=SCCRQ
12:24:32 l2tp,debug,packet (M) Protocol-Version=0x01:00
12:24:32 l2tp,debug,packet (M) Framing-Capabilities=0x1
12:24:32 l2tp,debug,packet (M) Bearer-Capabilities=0x0
12:24:32 l2tp,debug,packet Firmware-Revision=0x1
12:24:32 l2tp,debug,packet (M) Host-Name="MikroTik"
12:24:32 l2tp,debug,packet Vendor-Name="MikroTik"
12:24:32 l2tp,debug,packet (M) Assigned-Tunnel-ID=2997
12:24:32 l2tp,debug,packet (M) Receive-Window-Size=4
That sounds surprising given that you’ve managed to configure Phase 1 and Phase 2 for the connection to pfsense.
In short - Phase 1 proposal parameters are on /ip ipsec profile rows, Phase 2 parameters are on /ip ipsec proposal rows.
When you let RouterOS generate the IPsec initiator configuration dynamically by specifying use-ipsec=yes on the /interface l2tp-client row, it uses profile default; to generate the policy for the L2TP transport packets, policy group default is used, and the default template in policy group default refers to proposal default.
It seems to me as if some rows in the log were still missing, as there is just a single line dh(modp2048) per each transform (enc + auth pair), but it may be a RouterOS issue that it doesn’t log the details (in the worst case, it would be a bug that it doesn’t generate the proposal properly - you never know with 6.48).
Knowing that the embedded client of Windows doesn’t support pfs for phase 2 by default, and not knowing what the “server” expects, I’d set pfs to none in the default /ip ipsec proposal row and try again. You may also try to add md5 to the hash-algorithm list of the default proposal, but if that does the trick, the resulting security is not too high and the server configuration should be modified.
If neither helps, a downgrade to long-term RouterOS release (6.46.8 as of now) might help.
That sounds surprising given that you’ve managed to configure Phase 1 and Phase 2 for the connection to pfsense.
Well I did that by using the default proposals from MikroTik and entered it in PfSense and it worked 
In short - Phase 1 proposal parameters are on > /ip ipsec profile > rows, Phase 2 parameters are on > /ip ipsec proposal > rows.
When you let RouterOS generate the IPsec initiator configuration dynamically by specifying > use-ipsec=yes > on the > /interface l2tp-client > row, it uses profile > default> ; to generate the policy for the L2TP transport packets, policy group > default > is used, and the default template in policy group > default > refers to proposal > default> .
Yep, thanks for this!
My confusion was caused exactly because of this “RouterOS generate the IPsec initiator configuration dynamically”
I didn’t know that hence I was not able to use anything other than the defaults. Good to know that and I will play with that later once we get the L2TP IPSEC running. For now I will leave it on default.
I added md5 and changed pfs to none but nothing helped.
i downgraded to the latest LTE.
Here is the new log:
# jan/28/2021 15:15:41 by RouterOS 6.48
# software id = L809-98LV
#
15:15:44 l2tp,ppp,info l2tp-out1: initializing...
15:15:44 l2tp,ppp,info l2tp-out1: connecting...
15:15:44 l2tp,debug tunnel 24 entering state: wait-ctl-reply
15:15:44 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:15:44 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
15:15:44 l2tp,debug,packet (M) Message-Type=SCCRQ
15:15:44 l2tp,debug,packet (M) Protocol-Version=0x01:00
15:15:44 l2tp,debug,packet (M) Framing-Capabilities=0x1
15:15:44 l2tp,debug,packet (M) Bearer-Capabilities=0x0
15:15:44 l2tp,debug,packet Firmware-Revision=0x1
15:15:44 l2tp,debug,packet (M) Host-Name="MikroTik"
15:15:44 l2tp,debug,packet Vendor-Name="MikroTik"
15:15:44 l2tp,debug,packet (M) Assigned-Tunnel-ID=24
15:15:44 l2tp,debug,packet (M) Receive-Window-Size=4
15:15:44 ipsec acquire for policy: my.public.ip:1701 <=> my.remote.server.ip:1701 ip-proto:17
15:15:44 ipsec peer is IKEv1
15:15:44 ipsec,debug (proto_id=ESP spisize=4 spi=00000000 spi_p=00000000 encmode=Transport reqid=0:0)
15:15:44 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-sha256)
15:15:44 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-sha1)
15:15:44 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-md5)
15:15:44 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=256 authtype=254)
15:15:44 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=288 authtype=254)
15:15:44 ipsec,debug (trns_id=AES-CBC encklen=192 authtype=hmac-sha256)
15:15:44 ipsec,debug (trns_id=AES-CBC encklen=192 authtype=hmac-sha1)
15:15:44 ipsec,debug (trns_id=AES-CBC encklen=192 authtype=hmac-md5)
15:15:44 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=192 authtype=254)
15:15:44 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=224 authtype=254)
15:15:44 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-sha256)
15:15:44 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-sha1)
15:15:44 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-md5)
15:15:44 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=128 authtype=254)
15:15:44 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=160 authtype=254)
15:15:44 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-sha256)
15:15:44 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-sha1)
15:15:44 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-md5)
15:15:44 ipsec IPsec-SA request for my.remote.server.ip queued due to no phase1 found.
15:15:44 ipsec,debug ===
15:15:44 ipsec,info initiate new phase 1 (Identity Protection): my.public.ip[500]<=>my.remote.server.ip[500]
15:15:44 ipsec,debug new cookie:
15:15:44 ipsec,debug a2742e09a5994f29
15:15:44 ipsec,debug add payload of len 248, next type 13
15:15:44 ipsec,debug add payload of len 16, next type 13
15:15:44 ipsec,debug add payload of len 16, next type 13
15:15:44 ipsec,debug add payload of len 16, next type 13
15:15:44 ipsec,debug add payload of len 16, next type 13
15:15:44 ipsec,debug add payload of len 16, next type 13
15:15:44 ipsec,debug add payload of len 16, next type 13
15:15:44 ipsec,debug add payload of len 16, next type 13
15:15:44 ipsec,debug add payload of len 16, next type 13
15:15:44 ipsec,debug add payload of len 16, next type 13
15:15:44 ipsec,debug add payload of len 16, next type 13
15:15:44 ipsec,debug add payload of len 16, next type 13
15:15:44 ipsec,debug add payload of len 16, next type 13
15:15:44 ipsec,debug add payload of len 16, next type 0
15:15:44 ipsec,debug 540 bytes from my.public.ip[500] to my.remote.server.ip[500]
15:15:44 ipsec,debug 1 times of 540 bytes message will be sent to my.remote.server.ip[500]
15:15:44 ipsec sent phase1 packet my.public.ip[500]<=>my.remote.server.ip[500] a2742e09a5994f29:0000000000000000
15:15:44 ipsec,debug ===== received 156 bytes from my.remote.server.ip[500] to my.public.ip[500]
15:15:44 ipsec,debug begin.
15:15:44 ipsec,debug seen nptype=1(sa) len=56
15:15:44 ipsec,debug seen nptype=13(vid) len=12
15:15:44 ipsec,debug seen nptype=13(vid) len=20
15:15:44 ipsec,debug seen nptype=13(vid) len=20
15:15:44 ipsec,debug seen nptype=13(vid) len=20
15:15:44 ipsec,debug succeed.
15:15:44 ipsec received Vendor ID: draft-ietf-ipsra-isakmp-xauth-06.txt
15:15:44 ipsec received Vendor ID: DPD
15:15:44 ipsec,debug remote supports DPD
15:15:44 ipsec received Vendor ID: CISCO-UNITY
15:15:44 ipsec received Vendor ID: RFC 3947
15:15:44 ipsec my.remote.server.ip Selected NAT-T version: RFC 3947
15:15:44 ipsec,debug total SA len=52
15:15:44 ipsec,debug 00000001 00000001 0000002c 01010001 00000024 01010000 80010005 80020002
15:15:44 ipsec,debug 8004000e 80030001 800b0001 000c0004 00015180
15:15:44 ipsec,debug begin.
15:15:44 ipsec,debug seen nptype=2(prop) len=44
15:15:44 ipsec,debug succeed.
15:15:44 ipsec,debug proposal #1 len=44
15:15:44 ipsec,debug begin.
15:15:44 ipsec,debug seen nptype=3(trns) len=36
15:15:44 ipsec,debug succeed.
15:15:44 ipsec,debug transform #1 len=36
15:15:44 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=3DES-CBC
15:15:44 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=SHA
15:15:44 ipsec,debug hash(sha1)
15:15:44 ipsec,debug type=Group Description, flag=0x8000, lorv=2048-bit MODP group
15:15:44 ipsec,debug dh(modp2048)
15:15:44 ipsec,debug type=Authentication Method, flag=0x8000, lorv=pre-shared key
15:15:44 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
15:15:44 ipsec,debug type=Life Duration, flag=0x0000, lorv=4
15:15:44 ipsec,debug pair 1:
15:15:44 ipsec,debug 0x4a32a0: next=(nil) tnext=(nil)
15:15:44 ipsec,debug proposal #1: 1 transform
15:15:44 ipsec,debug -checking with pre-shared key auth-
15:15:44 ipsec,debug prop#=1, prot-id=ISAKMP, spi-size=0, #trns=1
15:15:44 ipsec,debug trns#=1, trns-id=IKE
15:15:44 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=3DES-CBC
15:15:44 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=SHA
15:15:44 ipsec,debug type=Group Description, flag=0x8000, lorv=2048-bit MODP group
15:15:44 ipsec,debug type=Authentication Method, flag=0x8000, lorv=pre-shared key
15:15:44 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
15:15:44 ipsec,debug type=Life Duration, flag=0x0000, lorv=4
15:15:44 ipsec,debug -compare proposal #1: Local:Peer
15:15:44 ipsec,debug (lifetime = 86400:86400)
15:15:44 ipsec,debug (lifebyte = 0:0)
15:15:44 ipsec,debug enctype = AES-CBC:3DES-CBC
15:15:44 ipsec,debug (encklen = 256:0)
15:15:44 ipsec,debug hashtype = SHA:SHA
15:15:44 ipsec,debug authmethod = pre-shared key:pre-shared key
15:15:44 ipsec,debug dh_group = 2048-bit MODP group:2048-bit MODP group
15:15:44 ipsec,debug -compare proposal #2: Local:Peer
15:15:44 ipsec,debug (lifetime = 86400:86400)
15:15:44 ipsec,debug (lifebyte = 0:0)
15:15:44 ipsec,debug enctype = AES-CBC:3DES-CBC
15:15:44 ipsec,debug (encklen = 256:0)
15:15:44 ipsec,debug hashtype = SHA:SHA
15:15:44 ipsec,debug authmethod = pre-shared key:pre-shared key
15:15:44 ipsec,debug dh_group = 1024-bit MODP group:2048-bit MODP group
15:15:44 ipsec,debug -compare proposal #3: Local:Peer
15:15:44 ipsec,debug (lifetime = 86400:86400)
15:15:44 ipsec,debug (lifebyte = 0:0)
15:15:44 ipsec,debug enctype = AES-CBC:3DES-CBC
15:15:44 ipsec,debug (encklen = 128:0)
15:15:44 ipsec,debug hashtype = SHA:SHA
15:15:44 ipsec,debug authmethod = pre-shared key:pre-shared key
15:15:44 ipsec,debug dh_group = 2048-bit MODP group:2048-bit MODP group
15:15:44 ipsec,debug -compare proposal #4: Local:Peer
15:15:44 ipsec,debug (lifetime = 86400:86400)
15:15:44 ipsec,debug (lifebyte = 0:0)
15:15:44 ipsec,debug enctype = AES-CBC:3DES-CBC
15:15:44 ipsec,debug (encklen = 128:0)
15:15:44 ipsec,debug hashtype = SHA:SHA
15:15:44 ipsec,debug authmethod = pre-shared key:pre-shared key
15:15:44 ipsec,debug dh_group = 1024-bit MODP group:2048-bit MODP group
15:15:44 ipsec,debug -compare proposal #5: Local:Peer
15:15:44 ipsec,debug (lifetime = 86400:86400)
15:15:44 ipsec,debug (lifebyte = 0:0)
15:15:44 ipsec,debug enctype = 3DES-CBC:3DES-CBC
15:15:44 ipsec,debug (encklen = 0:0)
15:15:44 ipsec,debug hashtype = SHA:SHA
15:15:44 ipsec,debug authmethod = pre-shared key:pre-shared key
15:15:44 ipsec,debug dh_group = 2048-bit MODP group:2048-bit MODP group
15:15:44 ipsec,debug -an acceptable proposal found-
15:15:44 ipsec,debug dh(modp2048)
15:15:44 ipsec,debug -agreed on pre-shared key auth-
15:15:44 ipsec,debug ===
15:15:44 ipsec,debug dh(modp2048)
15:15:44 ipsec,debug my.remote.server.ip Hashing my.remote.server.ip[500] with algo #2
15:15:44 ipsec,debug hash(sha1)
15:15:44 ipsec,debug my.public.ip Hashing my.public.ip[500] with algo #2
15:15:44 ipsec,debug hash(sha1)
15:15:44 ipsec Adding remote and local NAT-D payloads.
15:15:44 ipsec,debug add payload of len 256, next type 10
15:15:44 ipsec,debug add payload of len 24, next type 20
15:15:44 ipsec,debug add payload of len 20, next type 20
15:15:44 ipsec,debug add payload of len 20, next type 0
15:15:44 ipsec,debug 364 bytes from my.public.ip[500] to my.remote.server.ip[500]
15:15:44 ipsec,debug 1 times of 364 bytes message will be sent to my.remote.server.ip[500]
15:15:44 ipsec sent phase1 packet my.public.ip[500]<=>my.remote.server.ip[500] a2742e09a5994f29:f22c62a0a921b029
15:15:44 ipsec,debug ===== received 372 bytes from my.remote.server.ip[500] to my.public.ip[500]
15:15:44 ipsec,debug begin.
15:15:44 ipsec,debug seen nptype=4(ke) len=260
15:15:44 ipsec,debug seen nptype=10(nonce) len=36
15:15:44 ipsec,debug seen nptype=20(nat-d) len=24
15:15:44 ipsec,debug seen nptype=20(nat-d) len=24
15:15:44 ipsec,debug succeed.
15:15:44 ipsec,debug my.public.ip Hashing my.public.ip[500] with algo #2
15:15:44 ipsec,debug hash(sha1)
15:15:44 ipsec,debug NAT-D payload #0 doesn't match
15:15:44 ipsec,debug my.remote.server.ip Hashing my.remote.server.ip[500] with algo #2
15:15:44 ipsec,debug hash(sha1)
15:15:44 ipsec,debug NAT-D payload #1 verified
15:15:44 ipsec NAT detected: ME
15:15:44 ipsec KA list add: my.public.ip[4500]->my.remote.server.ip[4500]
15:15:44 ipsec,debug ===
15:15:44 ipsec,debug dh(modp2048)
15:15:45 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:15:45 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
15:15:45 l2tp,debug,packet (M) Message-Type=SCCRQ
15:15:45 l2tp,debug,packet (M) Protocol-Version=0x01:00
15:15:45 l2tp,debug,packet (M) Framing-Capabilities=0x1
15:15:45 l2tp,debug,packet (M) Bearer-Capabilities=0x0
15:15:45 l2tp,debug,packet Firmware-Revision=0x1
15:15:45 l2tp,debug,packet (M) Host-Name="MikroTik"
15:15:45 l2tp,debug,packet Vendor-Name="MikroTik"
15:15:45 l2tp,debug,packet (M) Assigned-Tunnel-ID=24
15:15:45 l2tp,debug,packet (M) Receive-Window-Size=4
15:15:45 ipsec,debug nonce 1:
15:15:45 ipsec,debug c06da14b 7d2a818a 28b5ac36 656e82a8 3d290012 a483e786
15:15:45 ipsec,debug nonce 2:
15:15:45 ipsec,debug 9b607b04 ecab1994 74db38dd dc6307fb 93d7dc96 c2c10bd3 01cccce8 740924fb
15:15:45 ipsec,debug SKEYID computed:
15:15:45 ipsec,debug b9bf1241 96aa7ad9 17c2bb46 152d7cce 6d80f827
15:15:45 ipsec,debug SKEYID_d computed:
15:15:45 ipsec,debug 2ec62565 bc35a766 65c436e7 d6b22e8e 9b5ce90a
15:15:45 ipsec,debug SKEYID_a computed:
15:15:45 ipsec,debug d2574646 2203c506 72bebabc 054101e0 b1a0d6c5
15:15:45 ipsec,debug SKEYID_e computed:
15:15:45 ipsec,debug 4e18de25 7f111760 fdc4665a 5d0d45ed 9acfa196
15:15:45 ipsec,debug hash(sha1)
15:15:45 ipsec,debug len(SKEYID_e) < len(Ka) (20 < 24), generating long key (Ka = K1 | K2 | ...)
15:15:45 ipsec,debug compute intermediate encryption key K1
15:15:45 ipsec,debug 00
15:15:45 ipsec,debug 604c3a4a 101c053d 0c36cd86 51342b1b 01c3998c
15:15:45 ipsec,debug compute intermediate encryption key K2
15:15:45 ipsec,debug 604c3a4a 101c053d 0c36cd86 51342b1b 01c3998c
15:15:45 ipsec,debug c5fdc119 24aa9668 0a2e1234 4b95db39 9f0ea9f2
15:15:45 ipsec,debug final encryption key computed:
15:15:45 ipsec,debug 604c3a4a 101c053d 0c36cd86 51342b1b 01c3998c c5fdc119
15:15:45 ipsec,debug hash(sha1)
15:15:45 ipsec,debug IV computed:
15:15:45 ipsec,debug 868130ea e26dd60d
15:15:45 ipsec,debug use ID type of IPv4_address
15:15:45 ipsec,debug add payload of len 8, next type 8
15:15:45 ipsec,debug add payload of len 20, next type 0
15:15:45 ipsec,debug 68 bytes from my.public.ip[4500] to my.remote.server.ip[4500]
15:15:45 ipsec,debug 1 times of 72 bytes message will be sent to my.remote.server.ip[4500]
15:15:45 ipsec sent phase1 packet my.public.ip[4500]<=>my.remote.server.ip[4500] a2742e09a5994f29:f22c62a0a921b029
15:15:45 ipsec,debug ===== received 68 bytes from my.remote.server.ip[4500] to my.public.ip[4500]
15:15:45 ipsec,debug begin.
15:15:45 ipsec,debug seen nptype=5(id) len=12
15:15:45 ipsec,debug seen nptype=8(hash) len=24
15:15:45 ipsec,debug succeed.
15:15:45 ipsec,debug HASH received:
15:15:45 ipsec,debug 036d86af fb746b81 36b0dbdf cd052ec1 929f401e
15:15:45 ipsec,debug HASH for PSK validated.
15:15:45 ipsec,debug my.remote.server.ip peer's ID:
15:15:45 ipsec,debug 01000000 25dc8412
15:15:45 ipsec,debug ===
15:15:45 ipsec,info ISAKMP-SA established my.public.ip[4500]-my.remote.server.ip[4500] spi:a2742e09a5994f29:f22c62a0a921b029
15:15:45 ipsec,debug ===
15:15:46 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:15:46 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
15:15:46 l2tp,debug,packet (M) Message-Type=SCCRQ
15:15:46 l2tp,debug,packet (M) Protocol-Version=0x01:00
15:15:46 l2tp,debug,packet (M) Framing-Capabilities=0x1
15:15:46 l2tp,debug,packet (M) Bearer-Capabilities=0x0
15:15:46 l2tp,debug,packet Firmware-Revision=0x1
15:15:46 l2tp,debug,packet (M) Host-Name="MikroTik"
15:15:46 l2tp,debug,packet Vendor-Name="MikroTik"
15:15:46 l2tp,debug,packet (M) Assigned-Tunnel-ID=24
15:15:46 l2tp,debug,packet (M) Receive-Window-Size=4
15:15:46 ipsec,debug ===
15:15:46 ipsec,debug begin QUICK mode.
15:15:46 ipsec initiate new phase 2 negotiation: my.public.ip[4500]<=>my.remote.server.ip[4500]
15:15:46 ipsec,debug hash(sha1)
15:15:46 ipsec,debug call pfkey_send_getspi 23
15:15:46 ipsec,debug pfkey GETSPI sent: ESP/Transport my.remote.server.ip[4500]->my.public.ip[4500]
15:15:46 ipsec,debug pfkey getspi sent.
15:15:46 ipsec NAT detected -> UDP encapsulation (ENC_MODE 2->4).
15:15:46 ipsec,debug use local ID type IPv4_address
15:15:46 ipsec,debug use remote ID type IPv4_address
15:15:46 ipsec,debug IDci:
15:15:46 ipsec,debug 011106a5 c0a80553
15:15:46 ipsec,debug IDcr:
15:15:46 ipsec,debug 011106a5 25dc8412
15:15:46 ipsec,debug NAT-OAi:
15:15:46 ipsec,debug 01000000 c0a80553
15:15:46 ipsec,debug NAT-OAr:
15:15:46 ipsec,debug 01000000 25dc8412
15:15:46 ipsec,debug add payload of len 488, next type 10
15:15:46 ipsec,debug add payload of len 24, next type 5
15:15:46 ipsec,debug add payload of len 8, next type 5
15:15:46 ipsec,debug add payload of len 8, next type 21
15:15:46 ipsec,debug add payload of len 8, next type 21
15:15:46 ipsec,debug add payload of len 8, next type 0
15:15:46 ipsec,debug add payload of len 20, next type 1
15:15:46 ipsec,debug 628 bytes from my.public.ip[4500] to my.remote.server.ip[4500]
15:15:46 ipsec,debug 1 times of 632 bytes message will be sent to my.remote.server.ip[4500]
15:15:46 ipsec sent phase2 packet my.public.ip[4500]<=>my.remote.server.ip[4500] a2742e09a5994f29:f22c62a0a921b029:87a1b72e
15:15:46 ipsec,debug ===== received 188 bytes from my.remote.server.ip[4500] to my.public.ip[4500]
15:15:46 ipsec,debug begin.
15:15:46 ipsec,debug seen nptype=8(hash) len=24
15:15:46 ipsec,debug seen nptype=1(sa) len=48
15:15:46 ipsec,debug seen nptype=10(nonce) len=36
15:15:46 ipsec,debug seen nptype=5(id) len=12
15:15:46 ipsec,debug seen nptype=5(id) len=12
15:15:46 ipsec,debug seen nptype=21(nat-oa) len=12
15:15:46 ipsec,debug seen nptype=21(nat-oa) len=12
15:15:46 ipsec,debug succeed.
15:15:46 ipsec,debug IDci matches NAT-OAi.
15:15:46 ipsec,debug IDcr matches proposal.
15:15:46 ipsec,debug HASH allocated:hbuf->l=184 actual:tlen=156
15:15:46 ipsec,debug HASH(2) received:
15:15:46 ipsec,debug 4bcb4edf f8359ae3 03a966e9 18919f68 ecc6857c
15:15:46 ipsec,debug total SA len=488
15:15:46 ipsec,debug 00000001 00000001 000001e0 01030412 0a23104d 0300001c 010c0000 80010001
15:15:46 ipsec,debug 80020708 80040004 80060100 80050005 0300001c 020c0000 80010001 80020708
15:15:46 ipsec,debug 80040004 80060100 80050002 0300001c 030c0000 80010001 80020708 80040004
15:15:46 ipsec,debug 80060100 80050001 03000018 04140000 80010001 80020708 80040004 80060100
15:15:46 ipsec,debug 03000018 05140000 80010001 80020708 80040004 80060120 0300001c 060c0000
15:15:46 ipsec,debug 80010001 80020708 80040004 800600c0 80050005 0300001c 070c0000 80010001
15:15:46 ipsec,debug 80020708 80040004 800600c0 80050002 0300001c 080c0000 80010001 80020708
15:15:46 ipsec,debug 80040004 800600c0 80050001 03000018 09140000 80010001 80020708 80040004
15:15:46 ipsec,debug 800600c0 03000018 0a140000 80010001 80020708 80040004 800600e0 0300001c
15:15:46 ipsec,debug 0b0c0000 80010001 80020708 80040004 80060080 80050005 0300001c 0c0c0000
15:15:46 ipsec,debug 80010001 80020708 80040004 80060080 80050002 0300001c 0d0c0000 80010001
15:15:46 ipsec,debug 80020708 80040004 80060080 80050001 03000018 0e140000 80010001 80020708
15:15:46 ipsec,debug 80040004 80060080 03000018 0f140000 80010001 80020708 80040004 800600a0
15:15:46 ipsec,debug 03000018 10030000 80010001 80020708 80040004 80050005 03000018 11030000
15:15:46 ipsec,debug 80010001 80020708 80040004 80050002 00000018 12030000 80010001 80020708
15:15:46 ipsec,debug 80040004 80050001
15:15:46 ipsec,debug begin.
15:15:46 ipsec,debug seen nptype=2(prop) len=480
15:15:46 ipsec,debug succeed.
15:15:46 ipsec,debug proposal #1 len=480
15:15:46 ipsec,debug begin.
15:15:46 ipsec,debug seen nptype=3(trns) len=28
15:15:46 ipsec,debug seen nptype=3(trns) len=28
15:15:46 ipsec,debug seen nptype=3(trns) len=28
15:15:46 ipsec,debug seen nptype=3(trns) len=24
15:15:46 ipsec,debug seen nptype=3(trns) len=24
15:15:46 ipsec,debug seen nptype=3(trns) len=28
15:15:46 ipsec,debug seen nptype=3(trns) len=28
15:15:46 ipsec,debug seen nptype=3(trns) len=28
15:15:46 ipsec,debug seen nptype=3(trns) len=24
15:15:46 ipsec,debug seen nptype=3(trns) len=24
15:15:46 ipsec,debug seen nptype=3(trns) len=28
15:15:46 ipsec,debug seen nptype=3(trns) len=28
15:15:46 ipsec,debug seen nptype=3(trns) len=28
15:15:46 ipsec,debug seen nptype=3(trns) len=24
15:15:46 ipsec,debug seen nptype=3(trns) len=24
15:15:46 ipsec,debug seen nptype=3(trns) len=24
15:15:46 ipsec,debug seen nptype=3(trns) len=24
15:15:46 ipsec,debug seen nptype=3(trns) len=24
15:15:46 ipsec,debug succeed.
15:15:46 ipsec,debug transform #1 len=28
15:15:46 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:15:46 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:15:46 ipsec,debug life duration was in TLV.
15:15:46 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:15:46 ipsec,debug UDP encapsulation requested
15:15:46 ipsec,debug type=Key Length, flag=0x8000, lorv=256
15:15:46 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha256
15:15:46 ipsec,debug transform #2 len=28
15:15:46 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:15:46 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:15:46 ipsec,debug life duration was in TLV.
15:15:46 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:15:46 ipsec,debug UDP encapsulation requested
15:15:46 ipsec,debug type=Key Length, flag=0x8000, lorv=256
15:15:46 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
15:15:46 ipsec,debug transform #3 len=28
15:15:46 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:15:46 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:15:46 ipsec,debug life duration was in TLV.
15:15:46 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:15:46 ipsec,debug UDP encapsulation requested
15:15:46 ipsec,debug type=Key Length, flag=0x8000, lorv=256
15:15:46 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-md5
15:15:46 ipsec,debug transform #4 len=24
15:15:46 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:15:46 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:15:46 ipsec,debug life duration was in TLV.
15:15:46 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:15:46 ipsec,debug UDP encapsulation requested
15:15:46 ipsec,debug type=Key Length, flag=0x8000, lorv=256
15:15:46 ipsec,debug transform #5 len=24
15:15:46 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:15:46 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:15:46 ipsec,debug life duration was in TLV.
15:15:46 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:15:46 ipsec,debug UDP encapsulation requested
15:15:46 ipsec,debug type=Key Length, flag=0x8000, lorv=288
15:15:46 ipsec,debug transform #6 len=28
15:15:46 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:15:46 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:15:46 ipsec,debug life duration was in TLV.
15:15:46 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:15:46 ipsec,debug UDP encapsulation requested
15:15:46 ipsec,debug type=Key Length, flag=0x8000, lorv=192
15:15:46 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha256
15:15:46 ipsec,debug transform #7 len=28
15:15:46 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:15:46 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:15:46 ipsec,debug life duration was in TLV.
15:15:46 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:15:46 ipsec,debug UDP encapsulation requested
15:15:46 ipsec,debug type=Key Length, flag=0x8000, lorv=192
15:15:46 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
15:15:46 ipsec,debug transform #8 len=28
15:15:46 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:15:46 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:15:46 ipsec,debug life duration was in TLV.
15:15:46 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:15:46 ipsec,debug UDP encapsulation requested
15:15:46 ipsec,debug type=Key Length, flag=0x8000, lorv=192
15:15:46 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-md5
15:15:46 ipsec,debug transform #9 len=24
15:15:46 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:15:46 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:15:46 ipsec,debug life duration was in TLV.
15:15:46 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:15:46 ipsec,debug UDP encapsulation requested
15:15:46 ipsec,debug type=Key Length, flag=0x8000, lorv=192
15:15:46 ipsec,debug transform #10 len=24
15:15:46 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:15:46 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:15:46 ipsec,debug life duration was in TLV.
15:15:46 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:15:46 ipsec,debug UDP encapsulation requested
15:15:46 ipsec,debug type=Key Length, flag=0x8000, lorv=224
15:15:46 ipsec,debug transform #11 len=28
15:15:46 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:15:46 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:15:46 ipsec,debug life duration was in TLV.
15:15:46 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:15:46 ipsec,debug UDP encapsulation requested
15:15:46 ipsec,debug type=Key Length, flag=0x8000, lorv=128
15:15:46 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha256
15:15:46 ipsec,debug transform #12 len=28
15:15:46 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:15:46 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:15:46 ipsec,debug life duration was in TLV.
15:15:46 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:15:46 ipsec,debug UDP encapsulation requested
15:15:46 ipsec,debug type=Key Length, flag=0x8000, lorv=128
15:15:46 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
15:15:46 ipsec,debug transform #13 len=28
15:15:46 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:15:46 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:15:46 ipsec,debug life duration was in TLV.
15:15:46 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:15:46 ipsec,debug UDP encapsulation requested
15:15:46 ipsec,debug type=Key Length, flag=0x8000, lorv=128
15:15:46 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-md5
15:15:46 ipsec,debug transform #14 len=24
15:15:46 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:15:46 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:15:46 ipsec,debug life duration was in TLV.
15:15:46 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:15:46 ipsec,debug UDP encapsulation requested
15:15:46 ipsec,debug type=Key Length, flag=0x8000, lorv=128
15:15:46 ipsec,debug transform #15 len=24
15:15:46 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:15:46 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:15:46 ipsec,debug life duration was in TLV.
15:15:46 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:15:46 ipsec,debug UDP encapsulation requested
15:15:46 ipsec,debug type=Key Length, flag=0x8000, lorv=160
15:15:46 ipsec,debug transform #16 len=24
15:15:46 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:15:46 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:15:46 ipsec,debug life duration was in TLV.
15:15:46 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:15:46 ipsec,debug UDP encapsulation requested
15:15:46 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha256
15:15:46 ipsec,debug transform #17 len=24
15:15:46 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:15:46 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:15:46 ipsec,debug life duration was in TLV.
15:15:46 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:15:46 ipsec,debug UDP encapsulation requested
15:15:46 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
15:15:46 ipsec,debug transform #18 len=24
15:15:46 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:15:46 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:15:46 ipsec,debug life duration was in TLV.
15:15:46 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:15:46 ipsec,debug UDP encapsulation requested
15:15:46 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-md5
15:15:46 ipsec,debug pair 1:
15:15:46 ipsec,debug 0x4a90d8: next=(nil) tnext=0x4a7200
15:15:46 ipsec,debug 0x4a7200: next=(nil) tnext=0x4a7218
15:15:46 ipsec,debug 0x4a7218: next=(nil) tnext=0x4a7230
15:15:46 ipsec,debug 0x4a7230: next=(nil) tnext=0x4a7248
15:15:46 ipsec,debug 0x4a7248: next=(nil) tnext=0x4ab188
15:15:46 ipsec,debug 0x4ab188: next=(nil) tnext=0x4ab1a0
15:15:46 ipsec,debug 0x4ab1a0: next=(nil) tnext=0x4ab1b8
15:15:46 ipsec,debug 0x4ab1b8: next=(nil) tnext=0x4ab1d0
15:15:46 ipsec,debug 0x4ab1d0: next=(nil) tnext=0x4aaa20
15:15:46 ipsec,debug 0x4aaa20: next=(nil) tnext=0x4aaa38
15:15:46 ipsec,debug 0x4aaa38: next=(nil) tnext=0x4aaa50
15:15:46 ipsec,debug 0x4aaa50: next=(nil) tnext=0x4aaa68
15:15:46 ipsec,debug 0x4aaa68: next=(nil) tnext=0x4aaa80
15:15:46 ipsec,debug 0x4aaa80: next=(nil) tnext=0x4a74f8
15:15:46 ipsec,debug 0x4a74f8: next=(nil) tnext=0x4a7510
15:15:46 ipsec,debug 0x4a7510: next=(nil) tnext=0x4a7528
15:15:46 ipsec,debug 0x4a7528: next=(nil) tnext=0x4a7540
15:15:46 ipsec,debug 0x4a7540: next=(nil) tnext=(nil)
15:15:46 ipsec,debug proposal #1: 18 transform
15:15:46 ipsec,debug total SA len=44
15:15:46 ipsec,debug 00000001 00000001 00000024 01030401 cc559c66 00000018 01030000 80050002
15:15:46 ipsec,debug 80040004 80010001 80020708
15:15:46 ipsec,debug begin.
15:15:46 ipsec,debug seen nptype=2(prop) len=36
15:15:46 ipsec,debug succeed.
15:15:46 ipsec,debug proposal #1 len=36
15:15:46 ipsec,debug begin.
15:15:46 ipsec,debug seen nptype=3(trns) len=24
15:15:46 ipsec,debug succeed.
15:15:46 ipsec,debug transform #1 len=24
15:15:46 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
15:15:46 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:15:46 ipsec,debug UDP encapsulation requested
15:15:46 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:15:46 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:15:46 ipsec,debug life duration was in TLV.
15:15:46 ipsec,debug pair 1:
15:15:46 ipsec,debug 0x4a93e8: next=(nil) tnext=(nil)
15:15:46 ipsec,debug proposal #1: 1 transform
15:15:46 ipsec transform number has been modified.
15:15:46 ipsec attribute has been modified.
15:15:46 ipsec,debug begin compare proposals.
15:15:46 ipsec,debug pair[1]: 0x4a93e8
15:15:46 ipsec,debug 0x4a93e8: next=(nil) tnext=(nil)
15:15:46 ipsec,debug prop#=1 prot-id=ESP spi-size=4 #trns=1 trns#=1 trns-id=3DES
15:15:46 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
15:15:46 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:15:46 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:15:46 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:15:46 ipsec,debug peer's single bundle:
15:15:46 ipsec,debug (proto_id=ESP spisize=4 spi=cc559c66 spi_p=00000000 encmode=UDP-Transport reqid=0:0)
15:15:46 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-sha1)
15:15:46 ipsec,debug my single bundle:
15:15:46 ipsec,debug (proto_id=ESP spisize=4 spi=0a23104d spi_p=00000000 encmode=UDP-Transport reqid=0:0)
15:15:46 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-sha256)
15:15:46 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-sha1)
15:15:46 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-md5)
15:15:46 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=256 authtype=254)
15:15:46 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=288 authtype=254)
15:15:46 ipsec,debug (trns_id=AES-CBC encklen=192 authtype=hmac-sha256)
15:15:46 ipsec,debug (trns_id=AES-CBC encklen=192 authtype=hmac-sha1)
15:15:46 ipsec,debug (trns_id=AES-CBC encklen=192 authtype=hmac-md5)
15:15:46 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=192 authtype=254)
15:15:46 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=224 authtype=254)
15:15:46 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-sha256)
15:15:46 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-sha1)
15:15:46 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-md5)
15:15:46 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=128 authtype=254)
15:15:46 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=160 authtype=254)
15:15:46 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-sha256)
15:15:46 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-sha1)
15:15:46 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-md5)
15:15:46 ipsec Adjusting my encmode UDP-Transport->Transport
15:15:46 ipsec Adjusting peer's encmode UDP-Transport(4)->Transport(2)
15:15:46 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:15:46 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:15:46 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:15:46 ipsec trns_id mismatched: my:AES-GCM-ICV16 peer:3DES
15:15:46 ipsec trns_id mismatched: my:AES-GCM-ICV16 peer:3DES
15:15:46 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:15:46 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:15:46 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:15:46 ipsec trns_id mismatched: my:AES-GCM-ICV16 peer:3DES
15:15:46 ipsec trns_id mismatched: my:AES-GCM-ICV16 peer:3DES
15:15:46 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:15:46 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:15:46 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:15:46 ipsec trns_id mismatched: my:AES-GCM-ICV16 peer:3DES
15:15:46 ipsec trns_id mismatched: my:AES-GCM-ICV16 peer:3DES
15:15:46 ipsec authtype mismatched: my:hmac-sha256 peer:hmac-sha1
15:15:46 ipsec,debug matched
15:15:46 ipsec,debug ===
15:15:46 ipsec,debug HASH(3) generate
15:15:46 ipsec,debug add payload of len 20, next type 0
15:15:46 ipsec,debug 60 bytes from my.public.ip[4500] to my.remote.server.ip[4500]
15:15:46 ipsec,debug 1 times of 64 bytes message will be sent to my.remote.server.ip[4500]
15:15:46 ipsec,debug encryption(3des)
15:15:46 ipsec,debug hmac(sha1)
15:15:46 ipsec,debug encklen=192 authklen=160
15:15:46 ipsec,debug generating 640 bits of key (dupkeymat=4)
15:15:46 ipsec,debug generating K1...K4 for KEYMAT.
15:15:46 ipsec,debug 018d8f55 93970ab2 26feb13a 2e0d74de 84e0e913 6f3b8063 985c2cc3 d2f6e23e
15:15:46 ipsec,debug 9cdc24bc dd026fae b7b8b555 91b6509d 3bf81968 aa00e6ec f788328f bb213582
15:15:46 ipsec,debug 5924395b 222ed320 f32d3235 13cbd3e7
15:15:46 ipsec,debug encryption(3des)
15:15:46 ipsec,debug hmac(sha1)
15:15:46 ipsec,debug encklen=192 authklen=160
15:15:46 ipsec,debug generating 640 bits of key (dupkeymat=4)
15:15:46 ipsec,debug generating K1...K4 for KEYMAT.
15:15:46 ipsec,debug 29ebc2e1 112d41bd 7464e70b 4aa75c8e 833a23b5 38b4f143 cdfb199d da1dbed0
15:15:46 ipsec,debug 70b6b408 0c5f5cbe 7ae1dd40 b0d88d50 5afe1a61 5149819d 173d4a82 2881bb65
15:15:46 ipsec,debug 05cd246a 1f42221e c7ffd2bb ebc0e87d
15:15:46 ipsec,debug KEYMAT computed.
15:15:46 ipsec,debug call pk_sendupdate
15:15:46 ipsec,debug encryption(3des)
15:15:46 ipsec,debug hmac(sha1)
15:15:46 ipsec,debug call pfkey_send_update_nat
15:15:46 ipsec IPsec-SA established: ESP/Transport my.remote.server.ip[4500]->my.public.ip[4500] spi=0xa23104d
15:15:46 ipsec,debug pfkey update sent.
15:15:46 ipsec,debug encryption(3des)
15:15:46 ipsec,debug hmac(sha1)
15:15:46 ipsec,debug call pfkey_send_add_nat
15:15:46 ipsec IPsec-SA established: ESP/Transport my.public.ip[4500]->my.remote.server.ip[4500] spi=0xcc559c66
15:15:46 ipsec,debug pfkey add sent.
15:15:48 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:15:48 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
15:15:48 l2tp,debug,packet (M) Message-Type=SCCRQ
15:15:48 l2tp,debug,packet (M) Protocol-Version=0x01:00
15:15:48 l2tp,debug,packet (M) Framing-Capabilities=0x1
15:15:48 l2tp,debug,packet (M) Bearer-Capabilities=0x0
15:15:48 l2tp,debug,packet Firmware-Revision=0x1
15:15:48 l2tp,debug,packet (M) Host-Name="MikroTik"
15:15:48 l2tp,debug,packet Vendor-Name="MikroTik"
15:15:48 l2tp,debug,packet (M) Assigned-Tunnel-ID=24
15:15:48 l2tp,debug,packet (M) Receive-Window-Size=4
15:15:48 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
15:15:48 l2tp,debug,packet tunnel-id=24, session-id=0, ns=0, nr=1
15:15:48 l2tp,debug,packet (M) Message-Type=SCCRP
15:15:48 l2tp,debug,packet (M) Protocol-Version=0x01:00
15:15:48 l2tp,debug,packet (M) Framing-Capabilities=0x3
15:15:48 l2tp,debug,packet (M) Bearer-Capabilities=0x0
15:15:48 l2tp,debug,packet Firmware-Revision=0x690
15:15:48 l2tp,debug,packet (M) Host-Name="localhost"
15:15:48 l2tp,debug,packet Vendor-Name="xelerance.com"
15:15:48 l2tp,debug,packet (M) Assigned-Tunnel-ID=64893
15:15:48 l2tp,debug,packet (M) Receive-Window-Size=4
15:15:48 l2tp,debug tunnel 24 entering state: established
15:15:48 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:15:48 l2tp,debug,packet tunnel-id=64893, session-id=0, ns=1, nr=1
15:15:48 l2tp,debug,packet (M) Message-Type=SCCCN
15:15:48 l2tp,debug session 1 entering state: wait-reply
15:15:48 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:15:48 l2tp,debug,packet tunnel-id=24, session-id=0, ns=1, nr=2
15:15:48 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:15:48 l2tp,debug,packet tunnel-id=64893, session-id=0, ns=2, nr=1
15:15:48 l2tp,debug,packet (M) Message-Type=ICRQ
15:15:48 l2tp,debug,packet (M) Assigned-Session-ID=1
15:15:48 l2tp,debug,packet (M) Call-Serial-Number=13
15:15:48 l2tp,debug,packet (M) Bearer-Type=0x0
15:15:48 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
15:15:48 l2tp,debug,packet tunnel-id=24, session-id=1, ns=1, nr=3
15:15:48 l2tp,debug,packet (M) Message-Type=ICRP
15:15:48 l2tp,debug,packet (M) Assigned-Session-ID=9946
15:15:48 l2tp,debug session 1 entering state: established
15:15:48 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:15:48 l2tp,debug,packet tunnel-id=64893, session-id=9946, ns=3, nr=2
15:15:48 l2tp,debug,packet (M) Message-Type=ICCN
15:15:48 l2tp,debug,packet (M) Framing-Type=0x1
15:15:48 l2tp,debug,packet (M) Tx-Connect-Speed-BPS=100000000
15:15:48 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:15:48 l2tp,debug,packet tunnel-id=24, session-id=0, ns=2, nr=3
15:15:48 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:15:48 l2tp,debug,packet tunnel-id=24, session-id=1, ns=2, nr=4
15:15:48 l2tp,ppp,debug l2tp-out1: LCP lowerup
15:15:48 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfReq id=0x1d
15:15:48 l2tp,ppp,debug,packet <mru 1450>
15:15:48 l2tp,ppp,debug,packet <magic 0x156d811a>
15:15:48 l2tp,ppp,debug,packet <mrru 1600>
15:15:48 l2tp,ppp,debug l2tp-out1: LCP open
15:15:48 l2tp,ppp,debug l2tp-out1: PPP received non-LCP packet (0x6970) when LCP not open
15:15:48 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfReq id=0x1
15:15:48 l2tp,ppp,debug,packet <mru 1410>
15:15:48 l2tp,ppp,debug,packet <asyncmap 0x0>
15:15:48 l2tp,ppp,debug,packet <magic 0xd8c09f7e>
15:15:48 l2tp,ppp,debug,packet <pcomp>
15:15:48 l2tp,ppp,debug,packet <accomp>
15:15:48 l2tp,ppp,debug,packet <auth chap>
15:15:48 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfRej id=0x1
15:15:48 l2tp,ppp,debug,packet <asyncmap 0x0>
15:15:48 l2tp,ppp,debug,packet <pcomp>
15:15:48 l2tp,ppp,debug,packet <accomp>
15:15:48 l2tp,ppp,debug,packet <auth chap>
15:15:48 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfRej id=0x1d
15:15:48 l2tp,ppp,debug,packet <mrru 1600>
15:15:48 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfReq id=0x1e
15:15:48 l2tp,ppp,debug,packet <mru 1450>
15:15:48 l2tp,ppp,debug,packet <magic 0x156d811a>
15:15:48 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfReq id=0x2
15:15:48 l2tp,ppp,debug,packet <mru 1410>
15:15:48 l2tp,ppp,debug,packet <magic 0xd8c09f7e>
15:15:48 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfAck id=0x2
15:15:48 l2tp,ppp,debug,packet <mru 1410>
15:15:48 l2tp,ppp,debug,packet <magic 0xd8c09f7e>
15:15:48 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfAck id=0x1e
15:15:48 l2tp,ppp,debug,packet <mru 1450>
15:15:48 l2tp,ppp,debug,packet <magic 0x156d811a>
15:15:48 l2tp,ppp,debug l2tp-out1: LCP opened
15:15:48 l2tp,ppp,info l2tp-out1: authenticated
15:15:48 l2tp,ppp,debug l2tp-out1: IPCP lowerup
15:15:48 l2tp,ppp,debug l2tp-out1: IPCP open
15:15:48 l2tp,ppp,debug,packet l2tp-out1: sent IPCP ConfReq id=0xd
15:15:48 l2tp,ppp,debug,packet <addr 0.0.0.0>
15:15:48 l2tp,ppp,debug l2tp-out1: IPV6CP open
15:15:48 l2tp,ppp,debug l2tp-out1: MPLSCP lowerup
15:15:48 l2tp,ppp,debug l2tp-out1: MPLSCP open
15:15:48 l2tp,ppp,debug,packet l2tp-out1: sent MPLSCP ConfReq id=0xd
15:15:48 l2tp,ppp,debug l2tp-out1: BCP open
15:15:48 l2tp,ppp,debug l2tp-out1: CCP lowerup
15:15:48 l2tp,ppp,debug l2tp-out1: CCP open
15:15:48 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP TermReq id=0x3
15:15:48 l2tp,ppp,debug,packet peer refused to authenticate
15:15:48 l2tp,ppp,debug l2tp-out1: LCP closed
15:15:48 l2tp,ppp,debug l2tp-out1: CCP lowerdown
15:15:48 l2tp,ppp,debug l2tp-out1: BCP lowerdown
15:15:48 l2tp,ppp,debug l2tp-out1: BCP down event in starting state
15:15:48 l2tp,ppp,debug l2tp-out1: IPCP lowerdown
15:15:48 l2tp,ppp,debug l2tp-out1: IPV6CP lowerdown
15:15:48 l2tp,ppp,debug l2tp-out1: IPV6CP down event in starting state
15:15:48 l2tp,ppp,debug l2tp-out1: MPLSCP lowerdown
15:15:48 l2tp,ppp,debug,packet l2tp-out1: sent LCP TermAck id=0x3
15:15:48 l2tp,ppp,debug l2tp-out1: LCP lowerdown
15:15:48 l2tp,ppp,debug l2tp-out1: CCP close
15:15:48 l2tp,ppp,debug l2tp-out1: BCP close
15:15:48 l2tp,ppp,debug l2tp-out1: IPCP close
15:15:48 l2tp,ppp,debug l2tp-out1: IPV6CP close
15:15:48 l2tp,ppp,debug l2tp-out1: MPLSCP close
15:15:48 l2tp,ppp,info l2tp-out1: terminating...
15:15:48 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:15:48 l2tp,debug,packet tunnel-id=64893, session-id=9946, ns=4, nr=2
15:15:48 l2tp,debug,packet (M) Message-Type=CDN
15:15:48 l2tp,debug,packet (M) Result-Code=1
15:15:48 l2tp,debug,packet (M) Assigned-Session-ID=1
15:15:48 l2tp,debug session 1 entering state: stopping
15:15:48 l2tp,ppp,debug l2tp-out1: LCP lowerdown
15:15:48 l2tp,ppp,debug l2tp-out1: LCP down event in starting state
15:15:48 l2tp,ppp,info l2tp-out1: disconnected
15:15:48 l2tp,ppp,info l2tp-out1: initializing...
15:15:48 l2tp,ppp,info l2tp-out1: connecting...
15:15:48 l2tp,debug session 2 entering state: wait-reply
15:15:48 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:15:48 l2tp,debug,packet tunnel-id=24, session-id=1, ns=2, nr=5
15:15:48 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:15:48 l2tp,debug,packet tunnel-id=64893, session-id=0, ns=5, nr=2
15:15:48 l2tp,debug,packet (M) Message-Type=ICRQ
15:15:48 l2tp,debug,packet (M) Assigned-Session-ID=2
15:15:48 l2tp,debug,packet (M) Call-Serial-Number=14
15:15:48 l2tp,debug,packet (M) Bearer-Type=0x0
15:15:48 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
15:15:48 l2tp,debug,packet tunnel-id=24, session-id=1, ns=2, nr=5
15:15:48 l2tp,debug,packet (M) Message-Type=CDN
15:15:48 l2tp,debug,packet (M) Result-Code=2
15:15:48 l2tp,debug,packet Error-Code=2
15:15:48 l2tp,debug,packet Error-Message="Result Code: expected at least 10, got 8"
15:15:48 l2tp,debug,packet (M) Assigned-Session-ID=9946
15:15:48 l2tp,debug,packet sent control message (ack) to my.remote.server.ip:1701 from my.public.ip:1701
15:15:48 l2tp,debug,packet tunnel-id=64893, session-id=0, ns=6, nr=3
15:15:48 l2tp,debug session 1 entering state: stopping
15:15:48 l2tp,debug session 1 entering state: dead
15:15:48 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
15:15:48 l2tp,debug,packet tunnel-id=24, session-id=2, ns=3, nr=6
15:15:48 l2tp,debug,packet (M) Message-Type=ICRP
15:15:48 l2tp,debug,packet (M) Assigned-Session-ID=54259
15:15:48 l2tp,debug session 2 entering state: established
15:15:48 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:15:48 l2tp,debug,packet tunnel-id=64893, session-id=54259, ns=6, nr=4
15:15:48 l2tp,debug,packet (M) Message-Type=ICCN
15:15:48 l2tp,debug,packet (M) Framing-Type=0x1
15:15:48 l2tp,debug,packet (M) Tx-Connect-Speed-BPS=100000000
15:15:48 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:15:48 l2tp,debug,packet tunnel-id=24, session-id=0, ns=4, nr=6
15:15:48 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:15:48 l2tp,debug,packet tunnel-id=24, session-id=2, ns=4, nr=7
15:15:48 l2tp,ppp,debug l2tp-out1: LCP lowerup
15:15:48 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfReq id=0x1f
15:15:48 l2tp,ppp,debug,packet <mru 1450>
15:15:48 l2tp,ppp,debug,packet <magic 0x247a89d7>
15:15:48 l2tp,ppp,debug,packet <mrru 1600>
15:15:48 l2tp,ppp,debug l2tp-out1: LCP open
15:15:48 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfRej id=0x1f
15:15:48 l2tp,ppp,debug,packet <mrru 1600>
15:15:48 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfReq id=0x20
15:15:48 l2tp,ppp,debug,packet <mru 1450>
15:15:48 l2tp,ppp,debug,packet <magic 0x247a89d7>
15:15:48 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfAck id=0x20
15:15:48 l2tp,ppp,debug,packet <mru 1450>
15:15:48 l2tp,ppp,debug,packet <magic 0x247a89d7>
15:15:49 l2tp,ppp,debug l2tp-out1: LCP timer
15:15:49 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfReq id=0x21
15:15:49 l2tp,ppp,debug,packet <mru 1450>
15:15:49 l2tp,ppp,debug,packet <magic 0x247a89d7>
15:15:49 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfAck id=0x21
15:15:49 l2tp,ppp,debug,packet <mru 1450>
15:15:49 l2tp,ppp,debug,packet <magic 0x247a89d7>
15:15:50 l2tp,ppp,debug l2tp-out1: LCP timer
15:15:50 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfReq id=0x22
15:15:50 l2tp,ppp,debug,packet <mru 1450>
15:15:50 l2tp,ppp,debug,packet <magic 0x247a89d7>
15:15:50 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfAck id=0x22
15:15:50 l2tp,ppp,debug,packet <mru 1450>
15:15:50 l2tp,ppp,debug,packet <magic 0x247a89d7>
15:15:51 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfReq id=0x1
15:15:51 l2tp,ppp,debug,packet <mru 1410>
15:15:51 l2tp,ppp,debug,packet <asyncmap 0x0>
15:15:51 l2tp,ppp,debug,packet <magic 0xe9907ba3>
15:15:51 l2tp,ppp,debug,packet <pcomp>
15:15:51 l2tp,ppp,debug,packet <accomp>
15:15:51 l2tp,ppp,debug,packet <auth chap>
15:15:51 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfRej id=0x1
15:15:51 l2tp,ppp,debug,packet <asyncmap 0x0>
15:15:51 l2tp,ppp,debug,packet <pcomp>
15:15:51 l2tp,ppp,debug,packet <accomp>
15:15:51 l2tp,ppp,debug,packet <auth chap>
15:15:51 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfReq id=0x2
15:15:51 l2tp,ppp,debug,packet <mru 1410>
15:15:51 l2tp,ppp,debug,packet <magic 0xe9907ba3>
15:15:51 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfAck id=0x2
15:15:51 l2tp,ppp,debug,packet <mru 1410>
15:15:51 l2tp,ppp,debug,packet <magic 0xe9907ba3>
15:15:51 l2tp,ppp,debug l2tp-out1: LCP opened
15:15:51 l2tp,ppp,info l2tp-out1: authenticated
15:15:51 l2tp,ppp,debug l2tp-out1: IPCP lowerup
15:15:51 l2tp,ppp,debug l2tp-out1: IPCP open
15:15:51 l2tp,ppp,debug,packet l2tp-out1: sent IPCP ConfReq id=0xe
15:15:51 l2tp,ppp,debug,packet <addr 0.0.0.0>
15:15:51 l2tp,ppp,debug l2tp-out1: IPV6CP open
15:15:51 l2tp,ppp,debug l2tp-out1: MPLSCP lowerup
15:15:51 l2tp,ppp,debug l2tp-out1: MPLSCP open
15:15:51 l2tp,ppp,debug,packet l2tp-out1: sent MPLSCP ConfReq id=0xe
15:15:51 l2tp,ppp,debug l2tp-out1: BCP open
15:15:51 l2tp,ppp,debug l2tp-out1: CCP lowerup
15:15:51 l2tp,ppp,debug l2tp-out1: CCP open
15:15:51 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP TermReq id=0x3
15:15:51 l2tp,ppp,debug,packet peer refused to authenticate
15:15:51 l2tp,ppp,debug l2tp-out1: LCP closed
15:15:51 l2tp,ppp,debug l2tp-out1: CCP lowerdown
15:15:51 l2tp,ppp,debug l2tp-out1: BCP lowerdown
15:15:51 l2tp,ppp,debug l2tp-out1: BCP down event in starting state
15:15:51 l2tp,ppp,debug l2tp-out1: IPCP lowerdown
15:15:51 l2tp,ppp,debug l2tp-out1: IPV6CP lowerdown
15:15:51 l2tp,ppp,debug l2tp-out1: IPV6CP down event in starting state
15:15:51 l2tp,ppp,debug l2tp-out1: MPLSCP lowerdown
15:15:51 l2tp,ppp,debug,packet l2tp-out1: sent LCP TermAck id=0x3
15:15:51 l2tp,ppp,debug l2tp-out1: LCP lowerdown
15:15:51 l2tp,ppp,debug l2tp-out1: CCP close
15:15:51 l2tp,ppp,debug l2tp-out1: BCP close
15:15:51 l2tp,ppp,debug l2tp-out1: IPCP close
15:15:51 l2tp,ppp,debug l2tp-out1: IPV6CP close
15:15:51 l2tp,ppp,debug l2tp-out1: MPLSCP close
15:15:51 l2tp,ppp,info l2tp-out1: terminating...
15:15:51 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:15:51 l2tp,debug,packet tunnel-id=64893, session-id=54259, ns=7, nr=4
15:15:51 l2tp,debug,packet (M) Message-Type=CDN
15:15:51 l2tp,debug,packet (M) Result-Code=1
15:15:51 l2tp,debug,packet (M) Assigned-Session-ID=2
15:15:51 l2tp,debug session 2 entering state: stopping
15:15:51 l2tp,ppp,debug l2tp-out1: LCP lowerdown
15:15:51 l2tp,ppp,debug l2tp-out1: LCP down event in starting state
15:15:51 l2tp,ppp,info l2tp-out1: disconnected
15:15:51 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
15:15:51 l2tp,debug,packet tunnel-id=24, session-id=2, ns=4, nr=7
15:15:51 l2tp,debug,packet (M) Message-Type=CDN
15:15:51 l2tp,debug,packet (M) Result-Code=1
15:15:51 l2tp,debug,packet Error-Code=0
15:15:51 l2tp,debug,packet (M) Assigned-Session-ID=54259
15:15:51 l2tp,debug,packet sent control message (ack) to my.remote.server.ip:1701 from my.public.ip:1701
15:15:51 l2tp,debug,packet tunnel-id=64893, session-id=0, ns=8, nr=5
15:15:51 l2tp,debug session 2 entering state: stopping
15:15:51 l2tp,debug session 2 entering state: dead
15:15:51 l2tp,debug tunnel 24 entering state: stopping
15:15:51 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:15:51 l2tp,debug,packet tunnel-id=24, session-id=2, ns=5, nr=8
15:15:51 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:15:51 l2tp,debug,packet tunnel-id=64893, session-id=0, ns=8, nr=5
15:15:51 l2tp,debug,packet (M) Message-Type=StopCCN
15:15:51 l2tp,debug,packet (M) Result-Code=1
15:15:51 l2tp,debug,packet (M) Assigned-Tunnel-ID=24
15:15:51 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:15:51 l2tp,debug,packet tunnel-id=24, session-id=0, ns=5, nr=9
15:15:51 l2tp,debug tunnel 24 entering state: dead
15:15:51 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
15:15:51 l2tp,debug,packet tunnel-id=24, session-id=0, ns=5, nr=9
15:15:51 l2tp,debug,packet (M) Message-Type=StopCCN
15:15:51 l2tp,debug,packet (M) Assigned-Tunnel-ID=64893
15:15:51 l2tp,debug,packet (M) Result-Code=2
15:15:51 l2tp,debug,packet Error-Code=2
15:15:51 l2tp,debug,packet Error-Message="Result Code: expected at least 10, got 8"
15:15:51 l2tp,debug,packet sent control message (ack) to my.remote.server.ip:1701 from my.public.ip:1701
15:15:51 l2tp,debug,packet tunnel-id=64893, session-id=0, ns=9, nr=6
15:15:51 l2tp,ppp,info l2tp-out1: initializing...
15:15:51 l2tp,ppp,info l2tp-out1: connecting...
15:15:51 l2tp,debug tunnel 25 entering state: wait-ctl-reply
15:15:51 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:15:51 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
15:15:51 l2tp,debug,packet (M) Message-Type=SCCRQ
15:15:51 l2tp,debug,packet (M) Protocol-Version=0x01:00
15:15:51 l2tp,debug,packet (M) Framing-Capabilities=0x1
15:15:51 l2tp,debug,packet (M) Bearer-Capabilities=0x0
15:15:51 l2tp,debug,packet Firmware-Revision=0x1
15:15:51 l2tp,debug,packet (M) Host-Name="MikroTik"
15:15:51 l2tp,debug,packet Vendor-Name="MikroTik"
15:15:51 l2tp,debug,packet (M) Assigned-Tunnel-ID=25
15:15:51 l2tp,debug,packet (M) Receive-Window-Size=4
15:15:51 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
15:15:51 l2tp,debug,packet tunnel-id=25, session-id=0, ns=0, nr=1
15:15:51 l2tp,debug,packet (M) Message-Type=SCCRP
15:15:51 l2tp,debug,packet (M) Protocol-Version=0x01:00
15:15:51 l2tp,debug,packet (M) Framing-Capabilities=0x3
15:15:51 l2tp,debug,packet (M) Bearer-Capabilities=0x0
15:15:51 l2tp,debug,packet Firmware-Revision=0x690
15:15:51 l2tp,debug,packet (M) Host-Name="localhost"
15:15:51 l2tp,debug,packet Vendor-Name="xelerance.com"
15:15:51 l2tp,debug,packet (M) Assigned-Tunnel-ID=36377
15:15:51 l2tp,debug,packet (M) Receive-Window-Size=4
15:15:51 l2tp,debug tunnel 25 entering state: established
15:15:51 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:15:51 l2tp,debug,packet tunnel-id=36377, session-id=0, ns=1, nr=1
15:15:51 l2tp,debug,packet (M) Message-Type=SCCCN
15:15:51 l2tp,debug session 1 entering state: wait-reply
15:15:51 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:15:51 l2tp,debug,packet tunnel-id=25, session-id=0, ns=1, nr=2
15:15:51 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:15:51 l2tp,debug,packet tunnel-id=36377, session-id=0, ns=2, nr=1
15:15:51 l2tp,debug,packet (M) Message-Type=ICRQ
15:15:51 l2tp,debug,packet (M) Assigned-Session-ID=1
15:15:51 l2tp,debug,packet (M) Call-Serial-Number=15
15:15:51 l2tp,debug,packet (M) Bearer-Type=0x0
15:15:51 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
15:15:51 l2tp,debug,packet tunnel-id=25, session-id=1, ns=1, nr=3
15:15:51 l2tp,debug,packet (M) Message-Type=ICRP
15:15:51 l2tp,debug,packet (M) Assigned-Session-ID=50406
15:15:51 l2tp,debug session 1 entering state: established
15:15:51 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:15:51 l2tp,debug,packet tunnel-id=36377, session-id=50406, ns=3, nr=2
15:15:51 l2tp,debug,packet (M) Message-Type=ICCN
15:15:51 l2tp,debug,packet (M) Framing-Type=0x1
15:15:51 l2tp,debug,packet (M) Tx-Connect-Speed-BPS=100000000
15:15:51 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:15:51 l2tp,debug,packet tunnel-id=25, session-id=0, ns=2, nr=3
15:15:51 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:15:51 l2tp,debug,packet tunnel-id=25, session-id=1, ns=2, nr=4
15:15:51 l2tp,ppp,debug l2tp-out1: LCP lowerup
15:15:51 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfReq id=0x23
15:15:51 l2tp,ppp,debug,packet <mru 1450>
15:15:51 l2tp,ppp,debug,packet <magic 0x1b584480>
15:15:51 l2tp,ppp,debug,packet <mrru 1600>
15:15:51 l2tp,ppp,debug l2tp-out1: LCP open
15:15:51 l2tp,ppp,debug l2tp-out1: PPP received non-LCP packet (0x6970) when LCP not open
15:15:51 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfReq id=0x1
15:15:51 l2tp,ppp,debug,packet <mru 1410>
15:15:51 l2tp,ppp,debug,packet <asyncmap 0x0>
15:15:51 l2tp,ppp,debug,packet <magic 0x92f8b240>
15:15:51 l2tp,ppp,debug,packet <pcomp>
15:15:51 l2tp,ppp,debug,packet <accomp>
15:15:51 l2tp,ppp,debug,packet <auth chap>
15:15:51 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfRej id=0x1
15:15:51 l2tp,ppp,debug,packet <asyncmap 0x0>
15:15:51 l2tp,ppp,debug,packet <pcomp>
15:15:51 l2tp,ppp,debug,packet <accomp>
15:15:51 l2tp,ppp,debug,packet <auth chap>
15:15:51 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfRej id=0x23
15:15:51 l2tp,ppp,debug,packet <mrru 1600>
15:15:51 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfReq id=0x24
15:15:51 l2tp,ppp,debug,packet <mru 1450>
15:15:51 l2tp,ppp,debug,packet <magic 0x1b584480>
15:15:51 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfReq id=0x2
15:15:51 l2tp,ppp,debug,packet <mru 1410>
15:15:51 l2tp,ppp,debug,packet <magic 0x92f8b240>
15:15:51 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfAck id=0x2
15:15:51 l2tp,ppp,debug,packet <mru 1410>
15:15:51 l2tp,ppp,debug,packet <magic 0x92f8b240>
15:15:51 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfAck id=0x24
15:15:51 l2tp,ppp,debug,packet <mru 1450>
15:15:51 l2tp,ppp,debug,packet <magic 0x1b584480>
15:15:51 l2tp,ppp,debug l2tp-out1: LCP opened
15:15:51 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP TermReq id=0x3
15:15:51 l2tp,ppp,debug,packet peer refused to authenticate
15:15:51 l2tp,ppp,debug l2tp-out1: LCP closed
15:15:51 l2tp,ppp,debug l2tp-out1: CCP lowerdown
15:15:51 l2tp,ppp,debug l2tp-out1: CCP down event in initial state
15:15:51 l2tp,ppp,debug l2tp-out1: BCP lowerdown
15:15:51 l2tp,ppp,debug l2tp-out1: BCP down event in initial state
15:15:51 l2tp,ppp,debug l2tp-out1: IPCP lowerdown
15:15:51 l2tp,ppp,debug l2tp-out1: IPCP down event in initial state
15:15:51 l2tp,ppp,debug l2tp-out1: IPV6CP lowerdown
15:15:51 l2tp,ppp,debug l2tp-out1: IPV6CP down event in initial state
15:15:51 l2tp,ppp,debug l2tp-out1: MPLSCP lowerdown
15:15:51 l2tp,ppp,debug l2tp-out1: MPLSCP down event in initial state
15:15:51 l2tp,ppp,debug,packet l2tp-out1: sent LCP TermAck id=0x3
15:15:51 l2tp,ppp,debug l2tp-out1: LCP lowerdown
15:15:51 l2tp,ppp,debug l2tp-out1: CCP close
15:15:51 l2tp,ppp,debug l2tp-out1: BCP close
15:15:51 l2tp,ppp,debug l2tp-out1: IPCP close
15:15:51 l2tp,ppp,debug l2tp-out1: IPV6CP close
15:15:51 l2tp,ppp,debug l2tp-out1: MPLSCP close
15:15:51 l2tp,ppp,info l2tp-out1: terminating...
15:15:51 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:15:51 l2tp,debug,packet tunnel-id=36377, session-id=50406, ns=4, nr=2
15:15:51 l2tp,debug,packet (M) Message-Type=CDN
15:15:51 l2tp,debug,packet (M) Result-Code=1
15:15:51 l2tp,debug,packet (M) Assigned-Session-ID=1
15:15:51 l2tp,debug session 1 entering state: stopping
15:15:51 l2tp,ppp,debug l2tp-out1: LCP lowerdown
15:15:51 l2tp,ppp,debug l2tp-out1: LCP down event in starting state
15:15:51 l2tp,ppp,info l2tp-out1: disconnected
15:15:52 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:15:52 l2tp,debug,packet tunnel-id=25, session-id=1, ns=2, nr=5
15:15:52 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
15:15:52 l2tp,debug,packet tunnel-id=25, session-id=1, ns=2, nr=5
15:15:52 l2tp,debug,packet (M) Message-Type=CDN
15:15:52 l2tp,debug,packet (M) Result-Code=2
15:15:52 l2tp,debug,packet Error-Code=2
15:15:52 l2tp,debug,packet Error-Message="Result Code: expected at least 10, got 8"
15:15:52 l2tp,debug,packet (M) Assigned-Session-ID=50406
15:15:52 l2tp,debug,packet sent control message (ack) to my.remote.server.ip:1701 from my.public.ip:1701
15:15:52 l2tp,debug,packet tunnel-id=36377, session-id=0, ns=5, nr=3
15:15:52 l2tp,debug session 1 entering state: stopping
15:15:52 l2tp,debug session 1 entering state: dead
15:15:52 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:15:52 l2tp,debug,packet tunnel-id=36377, session-id=0, ns=5, nr=3
15:15:52 l2tp,debug,packet (M) Message-Type=StopCCN
15:15:52 l2tp,debug,packet (M) Result-Code=1
15:15:52 l2tp,debug,packet (M) Assigned-Tunnel-ID=25
15:15:52 l2tp,debug tunnel 25 entering state: stopping
15:15:52 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:15:52 l2tp,debug,packet tunnel-id=25, session-id=0, ns=3, nr=6
15:15:52 l2tp,debug tunnel 25 entering state: dead
15:15:52 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
15:15:52 l2tp,debug,packet tunnel-id=25, session-id=0, ns=3, nr=6
15:15:52 l2tp,debug,packet (M) Message-Type=StopCCN
15:15:52 l2tp,debug,packet (M) Assigned-Tunnel-ID=36377
15:15:52 l2tp,debug,packet (M) Result-Code=2
15:15:52 l2tp,debug,packet Error-Code=2
15:15:52 l2tp,debug,packet Error-Message="Result Code: expected at least 10, got 8"
15:15:52 l2tp,debug,packet sent control message (ack) to my.remote.server.ip:1701 from my.public.ip:1701
15:15:52 l2tp,debug,packet tunnel-id=36377, session-id=0, ns=6, nr=4
15:15:52 l2tp,ppp,info l2tp-out1: initializing...
15:15:52 l2tp,ppp,info l2tp-out1: connecting...
15:15:52 l2tp,debug tunnel 26 entering state: wait-ctl-reply
15:15:52 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:15:52 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
15:15:52 l2tp,debug,packet (M) Message-Type=SCCRQ
15:15:52 l2tp,debug,packet (M) Protocol-Version=0x01:00
15:15:52 l2tp,debug,packet (M) Framing-Capabilities=0x1
15:15:52 l2tp,debug,packet (M) Bearer-Capabilities=0x0
15:15:52 l2tp,debug,packet Firmware-Revision=0x1
15:15:52 l2tp,debug,packet (M) Host-Name="MikroTik"
15:15:52 l2tp,debug,packet Vendor-Name="MikroTik"
15:15:52 l2tp,debug,packet (M) Assigned-Tunnel-ID=26
15:15:52 l2tp,debug,packet (M) Receive-Window-Size=4
15:15:52 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
15:15:52 l2tp,debug,packet tunnel-id=26, session-id=0, ns=0, nr=1
15:15:52 l2tp,debug,packet (M) Message-Type=SCCRP
15:15:52 l2tp,debug,packet (M) Protocol-Version=0x01:00
15:15:52 l2tp,debug,packet (M) Framing-Capabilities=0x3
15:15:52 l2tp,debug,packet (M) Bearer-Capabilities=0x0
15:15:52 l2tp,debug,packet Firmware-Revision=0x690
15:15:52 l2tp,debug,packet (M) Host-Name="localhost"
15:15:52 l2tp,debug,packet Vendor-Name="xelerance.com"
15:15:52 l2tp,debug,packet (M) Assigned-Tunnel-ID=51612
15:15:52 l2tp,debug,packet (M) Receive-Window-Size=4
15:15:52 l2tp,debug tunnel 26 entering state: established
15:15:52 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:15:52 l2tp,debug,packet tunnel-id=51612, session-id=0, ns=1, nr=1
15:15:52 l2tp,debug,packet (M) Message-Type=SCCCN
15:15:52 l2tp,debug session 1 entering state: wait-reply
15:15:52 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:15:52 l2tp,debug,packet tunnel-id=26, session-id=0, ns=1, nr=2
15:15:52 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:15:52 l2tp,debug,packet tunnel-id=51612, session-id=0, ns=2, nr=1
15:15:52 l2tp,debug,packet (M) Message-Type=ICRQ
15:15:52 l2tp,debug,packet (M) Assigned-Session-ID=1
15:15:52 l2tp,debug,packet (M) Call-Serial-Number=16
15:15:52 l2tp,debug,packet (M) Bearer-Type=0x0
15:15:52 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
15:15:52 l2tp,debug,packet tunnel-id=26, session-id=1, ns=1, nr=3
15:15:52 l2tp,debug,packet (M) Message-Type=ICRP
15:15:52 l2tp,debug,packet (M) Assigned-Session-ID=37359
15:15:52 l2tp,debug session 1 entering state: established
15:15:52 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:15:52 l2tp,debug,packet tunnel-id=51612, session-id=37359, ns=3, nr=2
15:15:52 l2tp,debug,packet (M) Message-Type=ICCN
15:15:52 l2tp,debug,packet (M) Framing-Type=0x1
15:15:52 l2tp,debug,packet (M) Tx-Connect-Speed-BPS=100000000
15:15:52 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:15:52 l2tp,debug,packet tunnel-id=26, session-id=0, ns=2, nr=3
15:15:52 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:15:52 l2tp,debug,packet tunnel-id=26, session-id=1, ns=2, nr=4
15:15:52 l2tp,ppp,debug l2tp-out1: LCP lowerup
15:15:52 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfReq id=0x25
15:15:52 l2tp,ppp,debug,packet <mru 1450>
15:15:52 l2tp,ppp,debug,packet <magic 0x76f83c5d>
15:15:52 l2tp,ppp,debug,packet <mrru 1600>
15:15:52 l2tp,ppp,debug l2tp-out1: LCP open
15:15:52 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfRej id=0x25
15:15:52 l2tp,ppp,debug,packet <mrru 1600>
15:15:52 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfReq id=0x26
15:15:52 l2tp,ppp,debug,packet <mru 1450>
15:15:52 l2tp,ppp,debug,packet <magic 0x76f83c5d>
15:15:52 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfAck id=0x26
15:15:52 l2tp,ppp,debug,packet <mru 1450>
15:15:52 l2tp,ppp,debug,packet <magic 0x76f83c5d>
15:15:53 l2tp,ppp,debug l2tp-out1: LCP timer
15:15:53 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfReq id=0x27
15:15:53 l2tp,ppp,debug,packet <mru 1450>
15:15:53 l2tp,ppp,debug,packet <magic 0x76f83c5d>
15:15:53 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfAck id=0x27
15:15:53 l2tp,ppp,debug,packet <mru 1450>
15:15:53 l2tp,ppp,debug,packet <magic 0x76f83c5d>
15:15:55 ipsec,debug KA: my.public.ip[4500]->my.remote.server.ip[4500]
15:15:55 ipsec,debug 1 times of 1 bytes message will be sent to my.remote.server.ip[4500]
15:15:55 l2tp,ppp,debug l2tp-out1: LCP timer
15:15:55 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfReq id=0x28
15:15:55 l2tp,ppp,debug,packet <mru 1450>
15:15:55 l2tp,ppp,debug,packet <magic 0x76f83c5d>
15:15:55 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfAck id=0x28
15:15:55 l2tp,ppp,debug,packet <mru 1450>
15:15:55 l2tp,ppp,debug,packet <magic 0x76f83c5d>
15:15:55 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfReq id=0x1
15:15:55 l2tp,ppp,debug,packet <mru 1410>
15:15:55 l2tp,ppp,debug,packet <asyncmap 0x0>
15:15:55 l2tp,ppp,debug,packet <magic 0xddf73916>
15:15:55 l2tp,ppp,debug,packet <pcomp>
15:15:55 l2tp,ppp,debug,packet <accomp>
15:15:55 l2tp,ppp,debug,packet <auth chap>
15:15:55 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfRej id=0x1
15:15:55 l2tp,ppp,debug,packet <asyncmap 0x0>
15:15:55 l2tp,ppp,debug,packet <pcomp>
15:15:55 l2tp,ppp,debug,packet <accomp>
15:15:55 l2tp,ppp,debug,packet <auth chap>
15:15:55 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfReq id=0x2
15:15:55 l2tp,ppp,debug,packet <mru 1410>
15:15:55 l2tp,ppp,debug,packet <magic 0xddf73916>
15:15:55 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfAck id=0x2
15:15:55 l2tp,ppp,debug,packet <mru 1410>
15:15:55 l2tp,ppp,debug,packet <magic 0xddf73916>
15:15:55 l2tp,ppp,debug l2tp-out1: LCP opened
15:15:55 l2tp,ppp,info l2tp-out1: authenticated
15:15:55 l2tp,ppp,debug l2tp-out1: IPCP lowerup
15:15:55 l2tp,ppp,debug l2tp-out1: IPCP open
15:15:55 l2tp,ppp,debug,packet l2tp-out1: sent IPCP ConfReq id=0xf
15:15:55 l2tp,ppp,debug,packet <addr 0.0.0.0>
15:15:55 l2tp,ppp,debug l2tp-out1: IPV6CP open
15:15:55 l2tp,ppp,debug l2tp-out1: MPLSCP lowerup
15:15:55 l2tp,ppp,debug l2tp-out1: MPLSCP open
15:15:55 l2tp,ppp,debug,packet l2tp-out1: sent MPLSCP ConfReq id=0xf
15:15:55 l2tp,ppp,debug l2tp-out1: BCP open
15:15:55 l2tp,ppp,debug l2tp-out1: CCP lowerup
15:15:55 l2tp,ppp,debug l2tp-out1: CCP open
15:15:55 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP TermReq id=0x3
15:15:55 l2tp,ppp,debug,packet peer refused to authenticate
15:15:55 l2tp,ppp,debug l2tp-out1: LCP closed
15:15:55 l2tp,ppp,debug l2tp-out1: CCP lowerdown
15:15:55 l2tp,ppp,debug l2tp-out1: BCP lowerdown
15:15:55 l2tp,ppp,debug l2tp-out1: BCP down event in starting state
15:15:55 l2tp,ppp,debug l2tp-out1: IPCP lowerdown
15:15:55 l2tp,ppp,debug l2tp-out1: IPV6CP lowerdown
15:15:55 l2tp,ppp,debug l2tp-out1: IPV6CP down event in starting state
15:15:55 l2tp,ppp,debug l2tp-out1: MPLSCP lowerdown
15:15:55 l2tp,ppp,debug,packet l2tp-out1: sent LCP TermAck id=0x3
15:15:55 l2tp,ppp,debug l2tp-out1: LCP lowerdown
15:15:55 l2tp,ppp,debug l2tp-out1: CCP close
15:15:55 l2tp,ppp,debug l2tp-out1: BCP close
15:15:55 l2tp,ppp,debug l2tp-out1: IPCP close
15:15:55 l2tp,ppp,debug l2tp-out1: IPV6CP close
15:15:55 l2tp,ppp,debug l2tp-out1: MPLSCP close
15:15:55 l2tp,ppp,info l2tp-out1: terminating...
15:15:55 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:15:55 l2tp,debug,packet tunnel-id=51612, session-id=37359, ns=4, nr=2
15:15:55 l2tp,debug,packet (M) Message-Type=CDN
15:15:55 l2tp,debug,packet (M) Result-Code=1
15:15:55 l2tp,debug,packet (M) Assigned-Session-ID=1
15:15:55 l2tp,debug session 1 entering state: stopping
15:15:55 l2tp,ppp,debug l2tp-out1: LCP lowerdown
15:15:55 l2tp,ppp,debug l2tp-out1: LCP down event in starting state
15:15:55 l2tp,ppp,info l2tp-out1: disconnected
15:15:55 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:15:55 l2tp,debug,packet tunnel-id=26, session-id=1, ns=2, nr=5
15:15:55 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
15:15:55 l2tp,debug,packet tunnel-id=26, session-id=1, ns=2, nr=5
15:15:55 l2tp,debug,packet (M) Message-Type=CDN
15:15:55 l2tp,debug,packet (M) Result-Code=2
15:15:55 l2tp,debug,packet Error-Code=2
15:15:55 l2tp,debug,packet Error-Message="Result Code: expected at least 10, got 8"
15:15:55 l2tp,debug,packet (M) Assigned-Session-ID=37359
15:15:55 l2tp,debug,packet sent control message (ack) to my.remote.server.ip:1701 from my.public.ip:1701
15:15:55 l2tp,debug,packet tunnel-id=51612, session-id=0, ns=5, nr=3
15:15:55 l2tp,debug session 1 entering state: stopping
15:15:55 l2tp,debug session 1 entering state: dead
15:15:55 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:15:55 l2tp,debug,packet tunnel-id=51612, session-id=0, ns=5, nr=3
15:15:55 l2tp,debug,packet (M) Message-Type=StopCCN
15:15:55 l2tp,debug,packet (M) Result-Code=1
15:15:55 l2tp,debug,packet (M) Assigned-Tunnel-ID=26
15:15:55 l2tp,debug tunnel 26 entering state: stopping
15:15:55 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:15:55 l2tp,debug,packet tunnel-id=26, session-id=0, ns=3, nr=6
15:15:55 l2tp,debug tunnel 26 entering state: dead
15:15:55 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
15:15:55 l2tp,debug,packet tunnel-id=26, session-id=0, ns=3, nr=6
15:15:55 l2tp,debug,packet (M) Message-Type=StopCCN
15:15:55 l2tp,debug,packet (M) Assigned-Tunnel-ID=51612
15:15:55 l2tp,debug,packet (M) Result-Code=2
15:15:55 l2tp,debug,packet Error-Code=2
15:15:55 l2tp,debug,packet Error-Message="Result Code: expected at least 10, got 8"
15:15:55 l2tp,debug,packet sent control message (ack) to my.remote.server.ip:1701 from my.public.ip:1701
15:15:55 l2tp,debug,packet tunnel-id=51612, session-id=0, ns=6, nr=4
15:15:56 ipsec,debug Deleting a Ph2...
15:15:57 ipsec,debug hash(sha1)
15:15:57 ipsec,debug 76 bytes from my.public.ip[4500] to my.remote.server.ip[4500]
15:15:57 ipsec,debug 1 times of 80 bytes message will be sent to my.remote.server.ip[4500]
15:15:57 ipsec,debug sendto Information delete.
15:15:57 ipsec purged IPsec-SA proto_id=ESP spi=0xcc559c66
15:15:57 ipsec purged IPsec-SA proto_id=ESP spi=0xa23104d
15:15:57 ipsec,debug Removing PH1...
15:15:57 ipsec,debug hash(sha1)
15:15:57 ipsec,debug 84 bytes from my.public.ip[4500] to my.remote.server.ip[4500]
15:15:57 ipsec,debug 1 times of 88 bytes message will be sent to my.remote.server.ip[4500]
15:15:57 ipsec,debug sendto Information delete.
15:15:57 ipsec,info ISAKMP-SA deleted my.public.ip[4500]-my.remote.server.ip[4500] spi:a2742e09a5994f29:f22c62a0a921b029 rekey:1
15:15:57 ipsec KA remove: my.public.ip[4500]->my.remote.server.ip[4500]
15:15:57 ipsec,debug KA tree dump: my.public.ip[4500]->my.remote.server.ip[4500] (in_use=1)
15:15:57 ipsec,debug KA removing this one...
15:15:57 l2tp,ppp,info l2tp-out1: initializing...
15:15:57 ipsec acquire for policy: my.public.ip:1701 <=> my.remote.server.ip:1701 ip-proto:17
15:15:57 ipsec peer is IKEv1
15:15:57 ipsec,debug (proto_id=ESP spisize=4 spi=00000000 spi_p=00000000 encmode=Transport reqid=0:0)
15:15:57 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-sha256)
15:15:57 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-sha1)
15:15:57 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-md5)
15:15:57 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=256 authtype=254)
15:15:57 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=288 authtype=254)
15:15:57 ipsec,debug (trns_id=AES-CBC encklen=192 authtype=hmac-sha256)
15:15:57 ipsec,debug (trns_id=AES-CBC encklen=192 authtype=hmac-sha1)
15:15:57 ipsec,debug (trns_id=AES-CBC encklen=192 authtype=hmac-md5)
15:15:57 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=192 authtype=254)
15:15:57 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=224 authtype=254)
15:15:57 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-sha256)
15:15:57 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-sha1)
15:15:57 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-md5)
15:15:57 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=128 authtype=254)
15:15:57 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=160 authtype=254)
15:15:57 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-sha256)
15:15:57 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-sha1)
15:15:57 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-md5)
15:15:57 ipsec IPsec-SA request for my.remote.server.ip queued due to no phase1 found.
15:15:57 ipsec,debug ===
15:15:57 ipsec,info initiate new phase 1 (Identity Protection): my.public.ip[500]<=>my.remote.server.ip[500]
15:15:57 ipsec,debug new cookie:
15:15:57 ipsec,debug a836487389a6de99
15:15:57 ipsec,debug add payload of len 248, next type 13
15:15:57 ipsec,debug add payload of len 16, next type 13
15:15:57 ipsec,debug add payload of len 16, next type 13
15:15:57 ipsec,debug add payload of len 16, next type 13
15:15:57 ipsec,debug add payload of len 16, next type 13
15:15:57 ipsec,debug add payload of len 16, next type 13
15:15:57 ipsec,debug add payload of len 16, next type 13
15:15:57 ipsec,debug add payload of len 16, next type 13
15:15:57 ipsec,debug add payload of len 16, next type 13
15:15:57 ipsec,debug add payload of len 16, next type 13
15:15:57 ipsec,debug add payload of len 16, next type 13
15:15:57 ipsec,debug add payload of len 16, next type 13
15:15:57 ipsec,debug add payload of len 16, next type 13
15:15:57 ipsec,debug add payload of len 16, next type 0
15:15:57 ipsec,debug 540 bytes from my.public.ip[500] to my.remote.server.ip[500]
15:15:57 ipsec,debug 1 times of 540 bytes message will be sent to my.remote.server.ip[500]
15:15:57 l2tp,ppp,info l2tp-out1: connecting...
15:15:57 l2tp,debug tunnel 27 entering state: wait-ctl-reply
15:15:57 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:15:57 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
15:15:57 l2tp,debug,packet (M) Message-Type=SCCRQ
15:15:57 l2tp,debug,packet (M) Protocol-Version=0x01:00
15:15:57 l2tp,debug,packet (M) Framing-Capabilities=0x1
15:15:57 l2tp,debug,packet (M) Bearer-Capabilities=0x0
15:15:57 l2tp,debug,packet Firmware-Revision=0x1
15:15:57 l2tp,debug,packet (M) Host-Name="MikroTik"
15:15:57 l2tp,debug,packet Vendor-Name="MikroTik"
15:15:57 l2tp,debug,packet (M) Assigned-Tunnel-ID=27
15:15:57 l2tp,debug,packet (M) Receive-Window-Size=4
15:15:57 ipsec sent phase1 packet my.public.ip[500]<=>my.remote.server.ip[500] a836487389a6de99:0000000000000000
15:15:57 ipsec,debug ===== received 156 bytes from my.remote.server.ip[500] to my.public.ip[500]
15:15:57 ipsec,debug begin.
15:15:57 ipsec,debug seen nptype=1(sa) len=56
15:15:57 ipsec,debug seen nptype=13(vid) len=12
15:15:57 ipsec,debug seen nptype=13(vid) len=20
15:15:57 ipsec,debug seen nptype=13(vid) len=20
15:15:57 ipsec,debug seen nptype=13(vid) len=20
15:15:57 ipsec,debug succeed.
15:15:57 ipsec received Vendor ID: draft-ietf-ipsra-isakmp-xauth-06.txt
15:15:57 ipsec received Vendor ID: DPD
15:15:57 ipsec,debug remote supports DPD
15:15:57 ipsec received Vendor ID: CISCO-UNITY
15:15:57 ipsec received Vendor ID: RFC 3947
15:15:57 ipsec my.remote.server.ip Selected NAT-T version: RFC 3947
15:15:57 ipsec,debug total SA len=52
15:15:57 ipsec,debug 00000001 00000001 0000002c 01010001 00000024 01010000 80010005 80020002
15:15:57 ipsec,debug 8004000e 80030001 800b0001 000c0004 00015180
15:15:57 ipsec,debug begin.
15:15:57 ipsec,debug seen nptype=2(prop) len=44
15:15:57 ipsec,debug succeed.
15:15:57 ipsec,debug proposal #1 len=44
15:15:57 ipsec,debug begin.
15:15:57 ipsec,debug seen nptype=3(trns) len=36
15:15:57 ipsec,debug succeed.
15:15:57 ipsec,debug transform #1 len=36
15:15:57 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=3DES-CBC
15:15:57 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=SHA
15:15:57 ipsec,debug hash(sha1)
15:15:57 ipsec,debug type=Group Description, flag=0x8000, lorv=2048-bit MODP group
15:15:57 ipsec,debug dh(modp2048)
15:15:57 ipsec,debug type=Authentication Method, flag=0x8000, lorv=pre-shared key
15:15:57 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
15:15:57 ipsec,debug type=Life Duration, flag=0x0000, lorv=4
15:15:57 ipsec,debug pair 1:
15:15:57 ipsec,debug 0x4aa928: next=(nil) tnext=(nil)
15:15:57 ipsec,debug proposal #1: 1 transform
15:15:57 ipsec,debug -checking with pre-shared key auth-
15:15:57 ipsec,debug prop#=1, prot-id=ISAKMP, spi-size=0, #trns=1
15:15:57 ipsec,debug trns#=1, trns-id=IKE
15:15:57 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=3DES-CBC
15:15:57 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=SHA
15:15:57 ipsec,debug type=Group Description, flag=0x8000, lorv=2048-bit MODP group
15:15:57 ipsec,debug type=Authentication Method, flag=0x8000, lorv=pre-shared key
15:15:57 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
15:15:57 ipsec,debug type=Life Duration, flag=0x0000, lorv=4
15:15:57 ipsec,debug -compare proposal #1: Local:Peer
15:15:57 ipsec,debug (lifetime = 86400:86400)
15:15:57 ipsec,debug (lifebyte = 0:0)
15:15:57 ipsec,debug enctype = AES-CBC:3DES-CBC
15:15:57 ipsec,debug (encklen = 256:0)
15:15:57 ipsec,debug hashtype = SHA:SHA
15:15:57 ipsec,debug authmethod = pre-shared key:pre-shared key
15:15:57 ipsec,debug dh_group = 2048-bit MODP group:2048-bit MODP group
15:15:57 ipsec,debug -compare proposal #2: Local:Peer
15:15:57 ipsec,debug (lifetime = 86400:86400)
15:15:57 ipsec,debug (lifebyte = 0:0)
15:15:57 ipsec,debug enctype = AES-CBC:3DES-CBC
15:15:57 ipsec,debug (encklen = 256:0)
15:15:57 ipsec,debug hashtype = SHA:SHA
15:15:57 ipsec,debug authmethod = pre-shared key:pre-shared key
15:15:57 ipsec,debug dh_group = 1024-bit MODP group:2048-bit MODP group
15:15:57 ipsec,debug -compare proposal #3: Local:Peer
15:15:57 ipsec,debug (lifetime = 86400:86400)
15:15:57 ipsec,debug (lifebyte = 0:0)
15:15:57 ipsec,debug enctype = AES-CBC:3DES-CBC
15:15:57 ipsec,debug (encklen = 128:0)
15:15:57 ipsec,debug hashtype = SHA:SHA
15:15:57 ipsec,debug authmethod = pre-shared key:pre-shared key
15:15:57 ipsec,debug dh_group = 2048-bit MODP group:2048-bit MODP group
15:15:57 ipsec,debug -compare proposal #4: Local:Peer
15:15:57 ipsec,debug (lifetime = 86400:86400)
15:15:57 ipsec,debug (lifebyte = 0:0)
15:15:57 ipsec,debug enctype = AES-CBC:3DES-CBC
15:15:57 ipsec,debug (encklen = 128:0)
15:15:57 ipsec,debug hashtype = SHA:SHA
15:15:57 ipsec,debug authmethod = pre-shared key:pre-shared key
15:15:57 ipsec,debug dh_group = 1024-bit MODP group:2048-bit MODP group
15:15:57 ipsec,debug -compare proposal #5: Local:Peer
15:15:57 ipsec,debug (lifetime = 86400:86400)
15:15:57 ipsec,debug (lifebyte = 0:0)
15:15:57 ipsec,debug enctype = 3DES-CBC:3DES-CBC
15:15:57 ipsec,debug (encklen = 0:0)
15:15:57 ipsec,debug hashtype = SHA:SHA
15:15:57 ipsec,debug authmethod = pre-shared key:pre-shared key
15:15:57 ipsec,debug dh_group = 2048-bit MODP group:2048-bit MODP group
15:15:57 ipsec,debug -an acceptable proposal found-
15:15:57 ipsec,debug dh(modp2048)
15:15:57 ipsec,debug -agreed on pre-shared key auth-
15:15:57 ipsec,debug ===
15:15:57 ipsec,debug dh(modp2048)
15:15:58 ipsec,debug my.remote.server.ip Hashing my.remote.server.ip[500] with algo #2
15:15:58 ipsec,debug hash(sha1)
15:15:58 ipsec,debug my.public.ip Hashing my.public.ip[500] with algo #2
15:15:58 ipsec,debug hash(sha1)
15:15:58 ipsec Adding remote and local NAT-D payloads.
15:15:58 ipsec,debug add payload of len 256, next type 10
15:15:58 ipsec,debug add payload of len 24, next type 20
15:15:58 ipsec,debug add payload of len 20, next type 20
15:15:58 ipsec,debug add payload of len 20, next type 0
15:15:58 ipsec,debug 364 bytes from my.public.ip[500] to my.remote.server.ip[500]
15:15:58 ipsec,debug 1 times of 364 bytes message will be sent to my.remote.server.ip[500]
15:15:58 ipsec sent phase1 packet my.public.ip[500]<=>my.remote.server.ip[500] a836487389a6de99:a1270796a0e76501
15:15:58 ipsec,debug ===== received 372 bytes from my.remote.server.ip[500] to my.public.ip[500]
15:15:58 ipsec,debug begin.
15:15:58 ipsec,debug seen nptype=4(ke) len=260
15:15:58 ipsec,debug seen nptype=10(nonce) len=36
15:15:58 ipsec,debug seen nptype=20(nat-d) len=24
15:15:58 ipsec,debug seen nptype=20(nat-d) len=24
15:15:58 ipsec,debug succeed.
15:15:58 ipsec,debug my.public.ip Hashing my.public.ip[500] with algo #2
15:15:58 ipsec,debug hash(sha1)
15:15:58 ipsec,debug NAT-D payload #0 doesn't match
15:15:58 ipsec,debug my.remote.server.ip Hashing my.remote.server.ip[500] with algo #2
15:15:58 ipsec,debug hash(sha1)
15:15:58 ipsec,debug NAT-D payload #1 verified
15:15:58 ipsec NAT detected: ME
15:15:58 ipsec KA list add: my.public.ip[4500]->my.remote.server.ip[4500]
15:15:58 ipsec,debug ===
15:15:58 ipsec,debug dh(modp2048)
15:15:58 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:15:58 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
15:15:58 l2tp,debug,packet (M) Message-Type=SCCRQ
15:15:58 l2tp,debug,packet (M) Protocol-Version=0x01:00
15:15:58 l2tp,debug,packet (M) Framing-Capabilities=0x1
15:15:58 l2tp,debug,packet (M) Bearer-Capabilities=0x0
15:15:58 l2tp,debug,packet Firmware-Revision=0x1
15:15:58 l2tp,debug,packet (M) Host-Name="MikroTik"
15:15:58 l2tp,debug,packet Vendor-Name="MikroTik"
15:15:58 l2tp,debug,packet (M) Assigned-Tunnel-ID=27
15:15:58 l2tp,debug,packet (M) Receive-Window-Size=4
15:15:58 ipsec,debug nonce 1:
15:15:58 ipsec,debug 882a99f0 f54aa34a 5fdb059f 707f3474 e1046756 3e8f4bf1
15:15:58 ipsec,debug nonce 2:
15:15:58 ipsec,debug 6a19b897 20b146ed 55e0f3b6 805ebee8 8d4ef2a2 e3b1cf68 80c1e074 a913e1bb
15:15:58 ipsec,debug SKEYID computed:
15:15:58 ipsec,debug 0079b46a 33d13cd7 6520b32f 8cc1b392 ead85b31
15:15:58 ipsec,debug SKEYID_d computed:
15:15:58 ipsec,debug 3fd71b6e 4c838233 e8701d30 577138bd a20ee5de
15:15:58 ipsec,debug SKEYID_a computed:
15:15:58 ipsec,debug 554b86e1 6ba8540e 9a4a901a 4cb34ba3 316a35df
15:15:58 ipsec,debug SKEYID_e computed:
15:15:58 ipsec,debug 1da68fae 1c63c2b7 bad05469 f5e84563 6b0e49c7
15:15:58 ipsec,debug hash(sha1)
15:15:58 ipsec,debug len(SKEYID_e) < len(Ka) (20 < 24), generating long key (Ka = K1 | K2 | ...)
15:15:58 ipsec,debug compute intermediate encryption key K1
15:15:58 ipsec,debug 00
15:15:58 ipsec,debug 55aafe5a 4f22a226 8c963f79 039b3c78 39035301
15:15:58 ipsec,debug compute intermediate encryption key K2
15:15:58 ipsec,debug 55aafe5a 4f22a226 8c963f79 039b3c78 39035301
15:15:58 ipsec,debug 224b446d fd5f4b94 fd0c3b32 4ff9f097 364da32c
15:15:58 ipsec,debug final encryption key computed:
15:15:58 ipsec,debug 55aafe5a 4f22a226 8c963f79 039b3c78 39035301 224b446d
15:15:58 ipsec,debug hash(sha1)
15:15:58 ipsec,debug IV computed:
15:15:58 ipsec,debug 12858796 4a4b1623
15:15:58 ipsec,debug use ID type of IPv4_address
15:15:58 ipsec,debug add payload of len 8, next type 8
15:15:58 ipsec,debug add payload of len 20, next type 0
15:15:58 ipsec,debug 68 bytes from my.public.ip[4500] to my.remote.server.ip[4500]
15:15:58 ipsec,debug 1 times of 72 bytes message will be sent to my.remote.server.ip[4500]
15:15:58 ipsec sent phase1 packet my.public.ip[4500]<=>my.remote.server.ip[4500] a836487389a6de99:a1270796a0e76501
15:15:58 ipsec,debug ===== received 68 bytes from my.remote.server.ip[4500] to my.public.ip[4500]
15:15:58 ipsec,debug begin.
15:15:58 ipsec,debug seen nptype=5(id) len=12
15:15:58 ipsec,debug seen nptype=8(hash) len=24
15:15:58 ipsec,debug succeed.
15:15:58 ipsec,debug HASH received:
15:15:58 ipsec,debug 11421743 6e0e1b7b 27bdbb33 3bf92f96 badfb89b
15:15:58 ipsec,debug HASH for PSK validated.
15:15:58 ipsec,debug my.remote.server.ip peer's ID:
15:15:58 ipsec,debug 01000000 25dc8412
15:15:58 ipsec,debug ===
15:15:58 ipsec,info ISAKMP-SA established my.public.ip[4500]-my.remote.server.ip[4500] spi:a836487389a6de99:a1270796a0e76501
15:15:58 ipsec,debug ===
15:15:59 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:15:59 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
15:15:59 l2tp,debug,packet (M) Message-Type=SCCRQ
15:15:59 l2tp,debug,packet (M) Protocol-Version=0x01:00
15:15:59 l2tp,debug,packet (M) Framing-Capabilities=0x1
15:15:59 l2tp,debug,packet (M) Bearer-Capabilities=0x0
15:15:59 l2tp,debug,packet Firmware-Revision=0x1
15:15:59 l2tp,debug,packet (M) Host-Name="MikroTik"
15:15:59 l2tp,debug,packet Vendor-Name="MikroTik"
15:15:59 l2tp,debug,packet (M) Assigned-Tunnel-ID=27
15:15:59 l2tp,debug,packet (M) Receive-Window-Size=4
15:15:59 ipsec,debug ===
15:15:59 ipsec,debug begin QUICK mode.
15:15:59 ipsec initiate new phase 2 negotiation: my.public.ip[4500]<=>my.remote.server.ip[4500]
15:15:59 ipsec,debug hash(sha1)
15:15:59 ipsec,debug call pfkey_send_getspi 26
15:15:59 ipsec,debug pfkey GETSPI sent: ESP/Transport my.remote.server.ip[4500]->my.public.ip[4500]
15:15:59 ipsec,debug pfkey getspi sent.
15:15:59 ipsec NAT detected -> UDP encapsulation (ENC_MODE 2->4).
15:15:59 ipsec,debug use local ID type IPv4_address
15:15:59 ipsec,debug use remote ID type IPv4_address
15:15:59 ipsec,debug IDci:
15:15:59 ipsec,debug 011106a5 c0a80553
15:15:59 ipsec,debug IDcr:
15:15:59 ipsec,debug 011106a5 25dc8412
15:15:59 ipsec,debug NAT-OAi:
15:15:59 ipsec,debug 01000000 c0a80553
15:15:59 ipsec,debug NAT-OAr:
15:15:59 ipsec,debug 01000000 25dc8412
15:15:59 ipsec,debug add payload of len 488, next type 10
15:15:59 ipsec,debug add payload of len 24, next type 5
15:15:59 ipsec,debug add payload of len 8, next type 5
15:15:59 ipsec,debug add payload of len 8, next type 21
15:15:59 ipsec,debug add payload of len 8, next type 21
15:15:59 ipsec,debug add payload of len 8, next type 0
15:15:59 ipsec,debug add payload of len 20, next type 1
15:15:59 ipsec,debug 628 bytes from my.public.ip[4500] to my.remote.server.ip[4500]
15:15:59 ipsec,debug 1 times of 632 bytes message will be sent to my.remote.server.ip[4500]
15:15:59 ipsec sent phase2 packet my.public.ip[4500]<=>my.remote.server.ip[4500] a836487389a6de99:a1270796a0e76501:b9c4cdb1
15:16:00 ipsec,debug ===== received 188 bytes from my.remote.server.ip[4500] to my.public.ip[4500]
15:16:00 ipsec,debug begin.
15:16:00 ipsec,debug seen nptype=8(hash) len=24
15:16:00 ipsec,debug seen nptype=1(sa) len=48
15:16:00 ipsec,debug seen nptype=10(nonce) len=36
15:16:00 ipsec,debug seen nptype=5(id) len=12
15:16:00 ipsec,debug seen nptype=5(id) len=12
15:16:00 ipsec,debug seen nptype=21(nat-oa) len=12
15:16:00 ipsec,debug seen nptype=21(nat-oa) len=12
15:16:00 ipsec,debug succeed.
15:16:00 ipsec,debug IDci matches NAT-OAi.
15:16:00 ipsec,debug IDcr matches proposal.
15:16:00 ipsec,debug HASH allocated:hbuf->l=184 actual:tlen=156
15:16:00 ipsec,debug HASH(2) received:
15:16:00 ipsec,debug 17f6acd8 58c7fa59 0c524934 27b59622 62dd3a0d
15:16:00 ipsec,debug total SA len=488
15:16:00 ipsec,debug 00000001 00000001 000001e0 01030412 04c1f703 0300001c 010c0000 80010001
15:16:00 ipsec,debug 80020708 80040004 80060100 80050005 0300001c 020c0000 80010001 80020708
15:16:00 ipsec,debug 80040004 80060100 80050002 0300001c 030c0000 80010001 80020708 80040004
15:16:00 ipsec,debug 80060100 80050001 03000018 04140000 80010001 80020708 80040004 80060100
15:16:00 ipsec,debug 03000018 05140000 80010001 80020708 80040004 80060120 0300001c 060c0000
15:16:00 ipsec,debug 80010001 80020708 80040004 800600c0 80050005 0300001c 070c0000 80010001
15:16:00 ipsec,debug 80020708 80040004 800600c0 80050002 0300001c 080c0000 80010001 80020708
15:16:00 ipsec,debug 80040004 800600c0 80050001 03000018 09140000 80010001 80020708 80040004
15:16:00 ipsec,debug 800600c0 03000018 0a140000 80010001 80020708 80040004 800600e0 0300001c
15:16:00 ipsec,debug 0b0c0000 80010001 80020708 80040004 80060080 80050005 0300001c 0c0c0000
15:16:00 ipsec,debug 80010001 80020708 80040004 80060080 80050002 0300001c 0d0c0000 80010001
15:16:00 ipsec,debug 80020708 80040004 80060080 80050001 03000018 0e140000 80010001 80020708
15:16:00 ipsec,debug 80040004 80060080 03000018 0f140000 80010001 80020708 80040004 800600a0
15:16:00 ipsec,debug 03000018 10030000 80010001 80020708 80040004 80050005 03000018 11030000
15:16:00 ipsec,debug 80010001 80020708 80040004 80050002 00000018 12030000 80010001 80020708
15:16:00 ipsec,debug 80040004 80050001
15:16:00 ipsec,debug begin.
15:16:00 ipsec,debug seen nptype=2(prop) len=480
15:16:00 ipsec,debug succeed.
15:16:00 ipsec,debug proposal #1 len=480
15:16:00 ipsec,debug begin.
15:16:00 ipsec,debug seen nptype=3(trns) len=28
15:16:00 ipsec,debug seen nptype=3(trns) len=28
15:16:00 ipsec,debug seen nptype=3(trns) len=28
15:16:00 ipsec,debug seen nptype=3(trns) len=24
15:16:00 ipsec,debug seen nptype=3(trns) len=24
15:16:00 ipsec,debug seen nptype=3(trns) len=28
15:16:00 ipsec,debug seen nptype=3(trns) len=28
15:16:00 ipsec,debug seen nptype=3(trns) len=28
15:16:00 ipsec,debug seen nptype=3(trns) len=24
15:16:00 ipsec,debug seen nptype=3(trns) len=24
15:16:00 ipsec,debug seen nptype=3(trns) len=28
15:16:00 ipsec,debug seen nptype=3(trns) len=28
15:16:00 ipsec,debug seen nptype=3(trns) len=28
15:16:00 ipsec,debug seen nptype=3(trns) len=24
15:16:00 ipsec,debug seen nptype=3(trns) len=24
15:16:00 ipsec,debug seen nptype=3(trns) len=24
15:16:00 ipsec,debug seen nptype=3(trns) len=24
15:16:00 ipsec,debug seen nptype=3(trns) len=24
15:16:00 ipsec,debug succeed.
15:16:00 ipsec,debug transform #1 len=28
15:16:00 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:00 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:00 ipsec,debug life duration was in TLV.
15:16:00 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:00 ipsec,debug UDP encapsulation requested
15:16:00 ipsec,debug type=Key Length, flag=0x8000, lorv=256
15:16:00 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha256
15:16:00 ipsec,debug transform #2 len=28
15:16:00 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:00 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:00 ipsec,debug life duration was in TLV.
15:16:00 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:00 ipsec,debug UDP encapsulation requested
15:16:00 ipsec,debug type=Key Length, flag=0x8000, lorv=256
15:16:00 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
15:16:00 ipsec,debug transform #3 len=28
15:16:00 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:00 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:00 ipsec,debug life duration was in TLV.
15:16:00 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:00 ipsec,debug UDP encapsulation requested
15:16:00 ipsec,debug type=Key Length, flag=0x8000, lorv=256
15:16:00 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-md5
15:16:00 ipsec,debug transform #4 len=24
15:16:00 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:00 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:00 ipsec,debug life duration was in TLV.
15:16:00 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:00 ipsec,debug UDP encapsulation requested
15:16:00 ipsec,debug type=Key Length, flag=0x8000, lorv=256
15:16:00 ipsec,debug transform #5 len=24
15:16:00 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:00 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:00 ipsec,debug life duration was in TLV.
15:16:00 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:00 ipsec,debug UDP encapsulation requested
15:16:00 ipsec,debug type=Key Length, flag=0x8000, lorv=288
15:16:00 ipsec,debug transform #6 len=28
15:16:00 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:00 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:00 ipsec,debug life duration was in TLV.
15:16:00 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:00 ipsec,debug UDP encapsulation requested
15:16:00 ipsec,debug type=Key Length, flag=0x8000, lorv=192
15:16:00 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha256
15:16:00 ipsec,debug transform #7 len=28
15:16:00 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:00 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:00 ipsec,debug life duration was in TLV.
15:16:00 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:00 ipsec,debug UDP encapsulation requested
15:16:00 ipsec,debug type=Key Length, flag=0x8000, lorv=192
15:16:00 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
15:16:00 ipsec,debug transform #8 len=28
15:16:00 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:00 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:00 ipsec,debug life duration was in TLV.
15:16:00 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:00 ipsec,debug UDP encapsulation requested
15:16:00 ipsec,debug type=Key Length, flag=0x8000, lorv=192
15:16:00 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-md5
15:16:00 ipsec,debug transform #9 len=24
15:16:00 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:00 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:00 ipsec,debug life duration was in TLV.
15:16:00 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:00 ipsec,debug UDP encapsulation requested
15:16:00 ipsec,debug type=Key Length, flag=0x8000, lorv=192
15:16:00 ipsec,debug transform #10 len=24
15:16:00 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:00 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:00 ipsec,debug life duration was in TLV.
15:16:00 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:00 ipsec,debug UDP encapsulation requested
15:16:00 ipsec,debug type=Key Length, flag=0x8000, lorv=224
15:16:00 ipsec,debug transform #11 len=28
15:16:00 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:00 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:00 ipsec,debug life duration was in TLV.
15:16:00 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:00 ipsec,debug UDP encapsulation requested
15:16:00 ipsec,debug type=Key Length, flag=0x8000, lorv=128
15:16:00 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha256
15:16:00 ipsec,debug transform #12 len=28
15:16:00 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:00 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:00 ipsec,debug life duration was in TLV.
15:16:00 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:00 ipsec,debug UDP encapsulation requested
15:16:00 ipsec,debug type=Key Length, flag=0x8000, lorv=128
15:16:00 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
15:16:00 ipsec,debug transform #13 len=28
15:16:00 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:00 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:00 ipsec,debug life duration was in TLV.
15:16:00 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:00 ipsec,debug UDP encapsulation requested
15:16:00 ipsec,debug type=Key Length, flag=0x8000, lorv=128
15:16:00 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-md5
15:16:00 ipsec,debug transform #14 len=24
15:16:00 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:00 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:00 ipsec,debug life duration was in TLV.
15:16:00 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:00 ipsec,debug UDP encapsulation requested
15:16:00 ipsec,debug type=Key Length, flag=0x8000, lorv=128
15:16:00 ipsec,debug transform #15 len=24
15:16:00 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:00 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:00 ipsec,debug life duration was in TLV.
15:16:00 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:00 ipsec,debug UDP encapsulation requested
15:16:00 ipsec,debug type=Key Length, flag=0x8000, lorv=160
15:16:00 ipsec,debug transform #16 len=24
15:16:00 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:00 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:00 ipsec,debug life duration was in TLV.
15:16:00 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:00 ipsec,debug UDP encapsulation requested
15:16:00 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha256
15:16:00 ipsec,debug transform #17 len=24
15:16:00 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:00 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:00 ipsec,debug life duration was in TLV.
15:16:00 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:00 ipsec,debug UDP encapsulation requested
15:16:00 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
15:16:00 ipsec,debug transform #18 len=24
15:16:00 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:00 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:00 ipsec,debug life duration was in TLV.
15:16:00 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:00 ipsec,debug UDP encapsulation requested
15:16:00 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-md5
15:16:00 ipsec,debug pair 1:
15:16:00 ipsec,debug 0x4ab108: next=(nil) tnext=0x4a3e40
15:16:00 ipsec,debug 0x4a3e40: next=(nil) tnext=0x4a3e58
15:16:00 ipsec,debug 0x4a3e58: next=(nil) tnext=0x4a3e70
15:16:00 ipsec,debug 0x4a3e70: next=(nil) tnext=0x4a3e88
15:16:00 ipsec,debug 0x4a3e88: next=(nil) tnext=0x4a8dd8
15:16:00 ipsec,debug 0x4a8dd8: next=(nil) tnext=0x4a8df0
15:16:00 ipsec,debug 0x4a8df0: next=(nil) tnext=0x4a8e08
15:16:00 ipsec,debug 0x4a8e08: next=(nil) tnext=0x4a8e20
15:16:00 ipsec,debug 0x4a8e20: next=(nil) tnext=0x4a8e38
15:16:00 ipsec,debug 0x4a8e38: next=(nil) tnext=0x4a8e50
15:16:00 ipsec,debug 0x4a8e50: next=(nil) tnext=0x4a8ea0
15:16:00 ipsec,debug 0x4a8ea0: next=(nil) tnext=0x4a8eb8
15:16:00 ipsec,debug 0x4a8eb8: next=(nil) tnext=0x4a8ed0
15:16:00 ipsec,debug 0x4a8ed0: next=(nil) tnext=0x4a8ee8
15:16:00 ipsec,debug 0x4a8ee8: next=(nil) tnext=0x4a8f00
15:16:00 ipsec,debug 0x4a8f00: next=(nil) tnext=0x4a8f18
15:16:00 ipsec,debug 0x4a8f18: next=(nil) tnext=0x4a8f30
15:16:00 ipsec,debug 0x4a8f30: next=(nil) tnext=(nil)
15:16:00 ipsec,debug proposal #1: 18 transform
15:16:00 ipsec,debug total SA len=44
15:16:00 ipsec,debug 00000001 00000001 00000024 01030401 cba83185 00000018 01030000 80050002
15:16:00 ipsec,debug 80040004 80010001 80020708
15:16:00 ipsec,debug begin.
15:16:00 ipsec,debug seen nptype=2(prop) len=36
15:16:00 ipsec,debug succeed.
15:16:00 ipsec,debug proposal #1 len=36
15:16:00 ipsec,debug begin.
15:16:00 ipsec,debug seen nptype=3(trns) len=24
15:16:00 ipsec,debug succeed.
15:16:00 ipsec,debug transform #1 len=24
15:16:00 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
15:16:00 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:00 ipsec,debug UDP encapsulation requested
15:16:00 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:00 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:00 ipsec,debug life duration was in TLV.
15:16:00 ipsec,debug pair 1:
15:16:00 ipsec,debug 0x4a9598: next=(nil) tnext=(nil)
15:16:00 ipsec,debug proposal #1: 1 transform
15:16:00 ipsec transform number has been modified.
15:16:00 ipsec attribute has been modified.
15:16:00 ipsec,debug begin compare proposals.
15:16:00 ipsec,debug pair[1]: 0x4a9598
15:16:00 ipsec,debug 0x4a9598: next=(nil) tnext=(nil)
15:16:00 ipsec,debug prop#=1 prot-id=ESP spi-size=4 #trns=1 trns#=1 trns-id=3DES
15:16:00 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
15:16:00 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:00 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:00 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:00 ipsec,debug peer's single bundle:
15:16:00 ipsec,debug (proto_id=ESP spisize=4 spi=cba83185 spi_p=00000000 encmode=UDP-Transport reqid=0:0)
15:16:00 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-sha1)
15:16:00 ipsec,debug my single bundle:
15:16:00 ipsec,debug (proto_id=ESP spisize=4 spi=04c1f703 spi_p=00000000 encmode=UDP-Transport reqid=0:0)
15:16:00 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-sha256)
15:16:00 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-sha1)
15:16:00 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-md5)
15:16:00 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=256 authtype=254)
15:16:00 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=288 authtype=254)
15:16:00 ipsec,debug (trns_id=AES-CBC encklen=192 authtype=hmac-sha256)
15:16:00 ipsec,debug (trns_id=AES-CBC encklen=192 authtype=hmac-sha1)
15:16:00 ipsec,debug (trns_id=AES-CBC encklen=192 authtype=hmac-md5)
15:16:00 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=192 authtype=254)
15:16:00 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=224 authtype=254)
15:16:00 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-sha256)
15:16:00 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-sha1)
15:16:00 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-md5)
15:16:00 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=128 authtype=254)
15:16:00 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=160 authtype=254)
15:16:00 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-sha256)
15:16:00 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-sha1)
15:16:00 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-md5)
15:16:00 ipsec Adjusting my encmode UDP-Transport->Transport
15:16:00 ipsec Adjusting peer's encmode UDP-Transport(4)->Transport(2)
15:16:00 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:16:00 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:16:00 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:16:00 ipsec trns_id mismatched: my:AES-GCM-ICV16 peer:3DES
15:16:00 ipsec trns_id mismatched: my:AES-GCM-ICV16 peer:3DES
15:16:00 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:16:00 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:16:00 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:16:00 ipsec trns_id mismatched: my:AES-GCM-ICV16 peer:3DES
15:16:00 ipsec trns_id mismatched: my:AES-GCM-ICV16 peer:3DES
15:16:00 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:16:00 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:16:00 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:16:00 ipsec trns_id mismatched: my:AES-GCM-ICV16 peer:3DES
15:16:00 ipsec trns_id mismatched: my:AES-GCM-ICV16 peer:3DES
15:16:00 ipsec authtype mismatched: my:hmac-sha256 peer:hmac-sha1
15:16:00 ipsec,debug matched
15:16:00 ipsec,debug ===
15:16:00 ipsec,debug HASH(3) generate
15:16:00 ipsec,debug add payload of len 20, next type 0
15:16:00 ipsec,debug 60 bytes from my.public.ip[4500] to my.remote.server.ip[4500]
15:16:00 ipsec,debug 1 times of 64 bytes message will be sent to my.remote.server.ip[4500]
15:16:00 ipsec,debug encryption(3des)
15:16:00 ipsec,debug hmac(sha1)
15:16:00 ipsec,debug encklen=192 authklen=160
15:16:00 ipsec,debug generating 640 bits of key (dupkeymat=4)
15:16:00 ipsec,debug generating K1...K4 for KEYMAT.
15:16:00 ipsec,debug 13523849 1e6629ad d683ee30 16a6bdd7 2457fd89 62289767 6e30d070 56b6aa1e
15:16:00 ipsec,debug 9b78f37e 1e08e05d 6c4e9658 a26d472b af27f2aa f273c0e4 c99e8696 d2ed2d3a
15:16:00 ipsec,debug 88339c8f 1152e5b3 47ab1ac6 d12ed518
15:16:00 ipsec,debug encryption(3des)
15:16:00 ipsec,debug hmac(sha1)
15:16:00 ipsec,debug encklen=192 authklen=160
15:16:00 ipsec,debug generating 640 bits of key (dupkeymat=4)
15:16:00 ipsec,debug generating K1...K4 for KEYMAT.
15:16:00 ipsec,debug ecaf7ffb 7916cac1 8fd1d4bf 6682da0e 0bbcc212 1b06c1ae e0c6597d 60d2834c
15:16:00 ipsec,debug 675b887c b4964bf4 1e092f46 5376831c 2accbce3 f3c46d9a e2c2c5da 85d0d2c6
15:16:00 ipsec,debug 984d16b5 00ad8fe0 778d5b46 3435e1de
15:16:00 ipsec,debug KEYMAT computed.
15:16:00 ipsec,debug call pk_sendupdate
15:16:00 ipsec,debug encryption(3des)
15:16:00 ipsec,debug hmac(sha1)
15:16:00 ipsec,debug call pfkey_send_update_nat
15:16:00 ipsec IPsec-SA established: ESP/Transport my.remote.server.ip[4500]->my.public.ip[4500] spi=0x4c1f703
15:16:00 ipsec,debug pfkey update sent.
15:16:00 ipsec,debug encryption(3des)
15:16:00 ipsec,debug hmac(sha1)
15:16:00 ipsec,debug call pfkey_send_add_nat
15:16:00 ipsec IPsec-SA established: ESP/Transport my.public.ip[4500]->my.remote.server.ip[4500] spi=0xcba83185
15:16:00 ipsec,debug pfkey add sent.
15:16:01 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:16:01 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
15:16:01 l2tp,debug,packet (M) Message-Type=SCCRQ
15:16:01 l2tp,debug,packet (M) Protocol-Version=0x01:00
15:16:01 l2tp,debug,packet (M) Framing-Capabilities=0x1
15:16:01 l2tp,debug,packet (M) Bearer-Capabilities=0x0
15:16:01 l2tp,debug,packet Firmware-Revision=0x1
15:16:01 l2tp,debug,packet (M) Host-Name="MikroTik"
15:16:01 l2tp,debug,packet Vendor-Name="MikroTik"
15:16:01 l2tp,debug,packet (M) Assigned-Tunnel-ID=27
15:16:01 l2tp,debug,packet (M) Receive-Window-Size=4
15:16:01 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
15:16:01 l2tp,debug,packet tunnel-id=27, session-id=0, ns=0, nr=1
15:16:01 l2tp,debug,packet (M) Message-Type=SCCRP
15:16:01 l2tp,debug,packet (M) Protocol-Version=0x01:00
15:16:01 l2tp,debug,packet (M) Framing-Capabilities=0x3
15:16:01 l2tp,debug,packet (M) Bearer-Capabilities=0x0
15:16:01 l2tp,debug,packet Firmware-Revision=0x690
15:16:01 l2tp,debug,packet (M) Host-Name="localhost"
15:16:01 l2tp,debug,packet Vendor-Name="xelerance.com"
15:16:01 l2tp,debug,packet (M) Assigned-Tunnel-ID=35335
15:16:01 l2tp,debug,packet (M) Receive-Window-Size=4
15:16:01 l2tp,debug tunnel 27 entering state: established
15:16:01 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:16:01 l2tp,debug,packet tunnel-id=35335, session-id=0, ns=1, nr=1
15:16:01 l2tp,debug,packet (M) Message-Type=SCCCN
15:16:01 l2tp,debug session 1 entering state: wait-reply
15:16:01 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:16:01 l2tp,debug,packet tunnel-id=27, session-id=0, ns=1, nr=2
15:16:01 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:16:01 l2tp,debug,packet tunnel-id=35335, session-id=0, ns=2, nr=1
15:16:01 l2tp,debug,packet (M) Message-Type=ICRQ
15:16:01 l2tp,debug,packet (M) Assigned-Session-ID=1
15:16:01 l2tp,debug,packet (M) Call-Serial-Number=17
15:16:01 l2tp,debug,packet (M) Bearer-Type=0x0
15:16:01 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
15:16:01 l2tp,debug,packet tunnel-id=27, session-id=1, ns=1, nr=3
15:16:01 l2tp,debug,packet (M) Message-Type=ICRP
15:16:01 l2tp,debug,packet (M) Assigned-Session-ID=50724
15:16:01 l2tp,debug session 1 entering state: established
15:16:01 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:16:01 l2tp,debug,packet tunnel-id=35335, session-id=50724, ns=3, nr=2
15:16:01 l2tp,debug,packet (M) Message-Type=ICCN
15:16:01 l2tp,debug,packet (M) Framing-Type=0x1
15:16:01 l2tp,debug,packet (M) Tx-Connect-Speed-BPS=100000000
15:16:01 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:16:01 l2tp,debug,packet tunnel-id=27, session-id=0, ns=2, nr=3
15:16:01 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:16:01 l2tp,debug,packet tunnel-id=27, session-id=1, ns=2, nr=4
15:16:01 l2tp,ppp,debug l2tp-out1: LCP lowerup
15:16:01 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfReq id=0x29
15:16:01 l2tp,ppp,debug,packet <mru 1450>
15:16:01 l2tp,ppp,debug,packet <magic 0x6a6925ea>
15:16:01 l2tp,ppp,debug,packet <mrru 1600>
15:16:01 l2tp,ppp,debug l2tp-out1: LCP open
15:16:01 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfReq id=0x1
15:16:01 l2tp,ppp,debug,packet <mru 1410>
15:16:01 l2tp,ppp,debug,packet <asyncmap 0x0>
15:16:01 l2tp,ppp,debug,packet <magic 0x96f5ba78>
15:16:01 l2tp,ppp,debug,packet <pcomp>
15:16:01 l2tp,ppp,debug,packet <accomp>
15:16:01 l2tp,ppp,debug,packet <auth chap>
15:16:01 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfRej id=0x1
15:16:01 l2tp,ppp,debug,packet <asyncmap 0x0>
15:16:01 l2tp,ppp,debug,packet <pcomp>
15:16:01 l2tp,ppp,debug,packet <accomp>
15:16:01 l2tp,ppp,debug,packet <auth chap>
15:16:01 l2tp,ppp,debug l2tp-out1: PPP received non-LCP packet (0x6970) when LCP not open
15:16:01 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfRej id=0x29
15:16:01 l2tp,ppp,debug,packet <mrru 1600>
15:16:01 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfReq id=0x2a
15:16:01 l2tp,ppp,debug,packet <mru 1450>
15:16:01 l2tp,ppp,debug,packet <magic 0x6a6925ea>
15:16:01 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfReq id=0x2
15:16:01 l2tp,ppp,debug,packet <mru 1410>
15:16:01 l2tp,ppp,debug,packet <magic 0x96f5ba78>
15:16:01 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfAck id=0x2
15:16:01 l2tp,ppp,debug,packet <mru 1410>
15:16:01 l2tp,ppp,debug,packet <magic 0x96f5ba78>
15:16:01 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfAck id=0x2a
15:16:01 l2tp,ppp,debug,packet <mru 1450>
15:16:01 l2tp,ppp,debug,packet <magic 0x6a6925ea>
15:16:01 l2tp,ppp,debug l2tp-out1: LCP opened
15:16:01 l2tp,ppp,info l2tp-out1: authenticated
15:16:01 l2tp,ppp,debug l2tp-out1: IPCP lowerup
15:16:01 l2tp,ppp,debug l2tp-out1: IPCP open
15:16:01 l2tp,ppp,debug,packet l2tp-out1: sent IPCP ConfReq id=0x10
15:16:01 l2tp,ppp,debug,packet <addr 0.0.0.0>
15:16:01 l2tp,ppp,debug l2tp-out1: IPV6CP open
15:16:01 l2tp,ppp,debug l2tp-out1: MPLSCP lowerup
15:16:01 l2tp,ppp,debug l2tp-out1: MPLSCP open
15:16:01 l2tp,ppp,debug,packet l2tp-out1: sent MPLSCP ConfReq id=0x10
15:16:01 l2tp,ppp,debug l2tp-out1: BCP open
15:16:01 l2tp,ppp,debug l2tp-out1: CCP lowerup
15:16:01 l2tp,ppp,debug l2tp-out1: CCP open
15:16:01 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP TermReq id=0x3
15:16:01 l2tp,ppp,debug,packet peer refused to authenticate
15:16:01 l2tp,ppp,debug l2tp-out1: LCP closed
15:16:01 l2tp,ppp,debug l2tp-out1: CCP lowerdown
15:16:01 l2tp,ppp,debug l2tp-out1: BCP lowerdown
15:16:01 l2tp,ppp,debug l2tp-out1: BCP down event in starting state
15:16:01 l2tp,ppp,debug l2tp-out1: IPCP lowerdown
15:16:01 l2tp,ppp,debug l2tp-out1: IPV6CP lowerdown
15:16:01 l2tp,ppp,debug l2tp-out1: IPV6CP down event in starting state
15:16:01 l2tp,ppp,debug l2tp-out1: MPLSCP lowerdown
15:16:01 l2tp,ppp,debug,packet l2tp-out1: sent LCP TermAck id=0x3
15:16:01 l2tp,ppp,debug l2tp-out1: LCP lowerdown
15:16:01 l2tp,ppp,debug l2tp-out1: CCP close
15:16:01 l2tp,ppp,debug l2tp-out1: BCP close
15:16:01 l2tp,ppp,debug l2tp-out1: IPCP close
15:16:01 l2tp,ppp,debug l2tp-out1: IPV6CP close
15:16:01 l2tp,ppp,debug l2tp-out1: MPLSCP close
15:16:01 l2tp,ppp,info l2tp-out1: terminating...
15:16:01 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:16:01 l2tp,debug,packet tunnel-id=35335, session-id=50724, ns=4, nr=2
15:16:01 l2tp,debug,packet (M) Message-Type=CDN
15:16:01 l2tp,debug,packet (M) Result-Code=1
15:16:01 l2tp,debug,packet (M) Assigned-Session-ID=1
15:16:01 l2tp,debug session 1 entering state: stopping
15:16:01 l2tp,ppp,debug l2tp-out1: LCP lowerdown
15:16:01 l2tp,ppp,debug l2tp-out1: LCP down event in starting state
15:16:01 l2tp,ppp,info l2tp-out1: disconnected
15:16:01 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:16:01 l2tp,debug,packet tunnel-id=27, session-id=1, ns=2, nr=5
15:16:01 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
15:16:01 l2tp,debug,packet tunnel-id=27, session-id=1, ns=2, nr=5
15:16:01 l2tp,debug,packet (M) Message-Type=CDN
15:16:01 l2tp,debug,packet (M) Result-Code=2
15:16:01 l2tp,debug,packet Error-Code=2
15:16:01 l2tp,debug,packet Error-Message="Result Code: expected at least 10, got 8"
15:16:01 l2tp,debug,packet (M) Assigned-Session-ID=50724
15:16:01 l2tp,debug,packet sent control message (ack) to my.remote.server.ip:1701 from my.public.ip:1701
15:16:01 l2tp,debug,packet tunnel-id=35335, session-id=0, ns=5, nr=3
15:16:01 l2tp,debug session 1 entering state: stopping
15:16:01 l2tp,debug session 1 entering state: dead
15:16:01 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:16:01 l2tp,debug,packet tunnel-id=35335, session-id=0, ns=5, nr=3
15:16:01 l2tp,debug,packet (M) Message-Type=StopCCN
15:16:01 l2tp,debug,packet (M) Result-Code=1
15:16:01 l2tp,debug,packet (M) Assigned-Tunnel-ID=27
15:16:01 l2tp,debug tunnel 27 entering state: stopping
15:16:01 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:16:01 l2tp,debug,packet tunnel-id=27, session-id=0, ns=3, nr=6
15:16:01 l2tp,debug tunnel 27 entering state: dead
15:16:01 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
15:16:01 l2tp,debug,packet tunnel-id=27, session-id=0, ns=3, nr=6
15:16:01 l2tp,debug,packet (M) Message-Type=StopCCN
15:16:01 l2tp,debug,packet (M) Assigned-Tunnel-ID=35335
15:16:01 l2tp,debug,packet (M) Result-Code=2
15:16:01 l2tp,debug,packet Error-Code=2
15:16:01 l2tp,debug,packet Error-Message="Result Code: expected at least 10, got 8"
15:16:01 l2tp,debug,packet sent control message (ack) to my.remote.server.ip:1701 from my.public.ip:1701
15:16:01 l2tp,debug,packet tunnel-id=35335, session-id=0, ns=6, nr=4
15:16:02 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
15:16:02 l2tp,debug,packet tunnel-id=23, session-id=0, ns=0, nr=1
15:16:02 l2tp,debug,packet (M) Message-Type=SCCRP
15:16:02 l2tp,debug,packet (M) Protocol-Version=0x01:00
15:16:02 l2tp,debug,packet (M) Framing-Capabilities=0x3
15:16:02 l2tp,debug,packet (M) Bearer-Capabilities=0x0
15:16:02 l2tp,debug,packet Firmware-Revision=0x690
15:16:02 l2tp,debug,packet (M) Host-Name="localhost"
15:16:02 l2tp,debug,packet Vendor-Name="xelerance.com"
15:16:02 l2tp,debug,packet (M) Assigned-Tunnel-ID=1560
15:16:02 l2tp,debug,packet (M) Receive-Window-Size=4
15:16:02 l2tp,debug received SCCRP before SCCRQ, rejecting
15:16:02 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:16:02 l2tp,debug,packet tunnel-id=1560, session-id=0, ns=1, nr=1
15:16:02 l2tp,debug,packet (M) Message-Type=StopCCN
15:16:02 l2tp,debug,packet (M) Result-Code=7
15:16:02 l2tp,debug,packet (M) Assigned-Tunnel-ID=23
15:16:02 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:16:02 l2tp,debug,packet tunnel-id=23, session-id=0, ns=1, nr=2
15:16:02 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
15:16:02 l2tp,debug,packet tunnel-id=23, session-id=0, ns=1, nr=2
15:16:02 l2tp,debug,packet (M) Message-Type=StopCCN
15:16:02 l2tp,debug,packet (M) Assigned-Tunnel-ID=1560
15:16:02 l2tp,debug,packet (M) Result-Code=2
15:16:02 l2tp,debug,packet Error-Code=2
15:16:02 l2tp,debug,packet Error-Message="Result Code: expected at least 10, got 8"
15:16:02 l2tp,debug,packet sent control message (ack) to my.remote.server.ip:1701 from my.public.ip:1701
15:16:02 l2tp,debug,packet tunnel-id=1560, session-id=0, ns=2, nr=2
15:16:02 ipsec,debug Deleting a Ph2...
15:16:02 ipsec,debug hash(sha1)
15:16:02 ipsec,debug 76 bytes from my.public.ip[4500] to my.remote.server.ip[4500]
15:16:02 ipsec,debug 1 times of 80 bytes message will be sent to my.remote.server.ip[4500]
15:16:02 ipsec,debug sendto Information delete.
15:16:02 ipsec purged IPsec-SA proto_id=ESP spi=0xcba83185
15:16:02 ipsec purged IPsec-SA proto_id=ESP spi=0x4c1f703
15:16:02 ipsec,debug Removing PH1...
15:16:02 ipsec,debug hash(sha1)
15:16:02 ipsec,debug 84 bytes from my.public.ip[4500] to my.remote.server.ip[4500]
15:16:02 ipsec,debug 1 times of 88 bytes message will be sent to my.remote.server.ip[4500]
15:16:02 ipsec,debug sendto Information delete.
15:16:02 ipsec,info ISAKMP-SA deleted my.public.ip[4500]-my.remote.server.ip[4500] spi:a836487389a6de99:a1270796a0e76501 rekey:1
15:16:02 ipsec KA remove: my.public.ip[4500]->my.remote.server.ip[4500]
15:16:02 ipsec,debug KA tree dump: my.public.ip[4500]->my.remote.server.ip[4500] (in_use=1)
15:16:02 ipsec,debug KA removing this one...
15:16:04 l2tp,ppp,info l2tp-out1: initializing...
15:16:04 l2tp,ppp,info l2tp-out1: connecting...
15:16:04 l2tp,debug tunnel 28 entering state: wait-ctl-reply
15:16:04 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:16:04 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
15:16:04 l2tp,debug,packet (M) Message-Type=SCCRQ
15:16:04 l2tp,debug,packet (M) Protocol-Version=0x01:00
15:16:04 l2tp,debug,packet (M) Framing-Capabilities=0x1
15:16:04 l2tp,debug,packet (M) Bearer-Capabilities=0x0
15:16:04 l2tp,debug,packet Firmware-Revision=0x1
15:16:04 l2tp,debug,packet (M) Host-Name="MikroTik"
15:16:04 l2tp,debug,packet Vendor-Name="MikroTik"
15:16:04 l2tp,debug,packet (M) Assigned-Tunnel-ID=28
15:16:04 l2tp,debug,packet (M) Receive-Window-Size=4
15:16:04 ipsec acquire for policy: my.public.ip:1701 <=> my.remote.server.ip:1701 ip-proto:17
15:16:04 ipsec peer is IKEv1
15:16:04 ipsec,debug (proto_id=ESP spisize=4 spi=00000000 spi_p=00000000 encmode=Transport reqid=0:0)
15:16:04 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-sha256)
15:16:04 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-sha1)
15:16:04 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-md5)
15:16:04 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=256 authtype=254)
15:16:04 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=288 authtype=254)
15:16:04 ipsec,debug (trns_id=AES-CBC encklen=192 authtype=hmac-sha256)
15:16:04 ipsec,debug (trns_id=AES-CBC encklen=192 authtype=hmac-sha1)
15:16:04 ipsec,debug (trns_id=AES-CBC encklen=192 authtype=hmac-md5)
15:16:04 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=192 authtype=254)
15:16:04 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=224 authtype=254)
15:16:04 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-sha256)
15:16:04 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-sha1)
15:16:04 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-md5)
15:16:04 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=128 authtype=254)
15:16:04 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=160 authtype=254)
15:16:04 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-sha256)
15:16:04 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-sha1)
15:16:04 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-md5)
15:16:04 ipsec IPsec-SA request for my.remote.server.ip queued due to no phase1 found.
15:16:04 ipsec,debug ===
15:16:04 ipsec,info initiate new phase 1 (Identity Protection): my.public.ip[500]<=>my.remote.server.ip[500]
15:16:04 ipsec,debug new cookie:
15:16:04 ipsec,debug 84ce468124cdb23b
15:16:04 ipsec,debug add payload of len 248, next type 13
15:16:04 ipsec,debug add payload of len 16, next type 13
15:16:04 ipsec,debug add payload of len 16, next type 13
15:16:04 ipsec,debug add payload of len 16, next type 13
15:16:04 ipsec,debug add payload of len 16, next type 13
15:16:04 ipsec,debug add payload of len 16, next type 13
15:16:04 ipsec,debug add payload of len 16, next type 13
15:16:04 ipsec,debug add payload of len 16, next type 13
15:16:04 ipsec,debug add payload of len 16, next type 13
15:16:04 ipsec,debug add payload of len 16, next type 13
15:16:04 ipsec,debug add payload of len 16, next type 13
15:16:04 ipsec,debug add payload of len 16, next type 13
15:16:04 ipsec,debug add payload of len 16, next type 13
15:16:04 ipsec,debug add payload of len 16, next type 0
15:16:04 ipsec,debug 540 bytes from my.public.ip[500] to my.remote.server.ip[500]
15:16:04 ipsec,debug 1 times of 540 bytes message will be sent to my.remote.server.ip[500]
15:16:04 ipsec sent phase1 packet my.public.ip[500]<=>my.remote.server.ip[500] 84ce468124cdb23b:0000000000000000
15:16:04 ipsec,debug ===== received 156 bytes from my.remote.server.ip[500] to my.public.ip[500]
15:16:04 ipsec,debug begin.
15:16:04 ipsec,debug seen nptype=1(sa) len=56
15:16:04 ipsec,debug seen nptype=13(vid) len=12
15:16:04 ipsec,debug seen nptype=13(vid) len=20
15:16:04 ipsec,debug seen nptype=13(vid) len=20
15:16:04 ipsec,debug seen nptype=13(vid) len=20
15:16:04 ipsec,debug succeed.
15:16:04 ipsec received Vendor ID: draft-ietf-ipsra-isakmp-xauth-06.txt
15:16:04 ipsec received Vendor ID: DPD
15:16:04 ipsec,debug remote supports DPD
15:16:04 ipsec received Vendor ID: CISCO-UNITY
15:16:04 ipsec received Vendor ID: RFC 3947
15:16:04 ipsec my.remote.server.ip Selected NAT-T version: RFC 3947
15:16:04 ipsec,debug total SA len=52
15:16:04 ipsec,debug 00000001 00000001 0000002c 01010001 00000024 01010000 80010005 80020002
15:16:04 ipsec,debug 8004000e 80030001 800b0001 000c0004 00015180
15:16:04 ipsec,debug begin.
15:16:04 ipsec,debug seen nptype=2(prop) len=44
15:16:04 ipsec,debug succeed.
15:16:04 ipsec,debug proposal #1 len=44
15:16:04 ipsec,debug begin.
15:16:04 ipsec,debug seen nptype=3(trns) len=36
15:16:04 ipsec,debug succeed.
15:16:04 ipsec,debug transform #1 len=36
15:16:04 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=3DES-CBC
15:16:04 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=SHA
15:16:04 ipsec,debug hash(sha1)
15:16:04 ipsec,debug type=Group Description, flag=0x8000, lorv=2048-bit MODP group
15:16:04 ipsec,debug dh(modp2048)
15:16:04 ipsec,debug type=Authentication Method, flag=0x8000, lorv=pre-shared key
15:16:04 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
15:16:04 ipsec,debug type=Life Duration, flag=0x0000, lorv=4
15:16:04 ipsec,debug pair 1:
15:16:04 ipsec,debug 0x4ab1c8: next=(nil) tnext=(nil)
15:16:04 ipsec,debug proposal #1: 1 transform
15:16:04 ipsec,debug -checking with pre-shared key auth-
15:16:04 ipsec,debug prop#=1, prot-id=ISAKMP, spi-size=0, #trns=1
15:16:04 ipsec,debug trns#=1, trns-id=IKE
15:16:04 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=3DES-CBC
15:16:04 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=SHA
15:16:04 ipsec,debug type=Group Description, flag=0x8000, lorv=2048-bit MODP group
15:16:04 ipsec,debug type=Authentication Method, flag=0x8000, lorv=pre-shared key
15:16:04 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
15:16:04 ipsec,debug type=Life Duration, flag=0x0000, lorv=4
15:16:04 ipsec,debug -compare proposal #1: Local:Peer
15:16:04 ipsec,debug (lifetime = 86400:86400)
15:16:04 ipsec,debug (lifebyte = 0:0)
15:16:04 ipsec,debug enctype = AES-CBC:3DES-CBC
15:16:04 ipsec,debug (encklen = 256:0)
15:16:04 ipsec,debug hashtype = SHA:SHA
15:16:04 ipsec,debug authmethod = pre-shared key:pre-shared key
15:16:04 ipsec,debug dh_group = 2048-bit MODP group:2048-bit MODP group
15:16:04 ipsec,debug -compare proposal #2: Local:Peer
15:16:04 ipsec,debug (lifetime = 86400:86400)
15:16:04 ipsec,debug (lifebyte = 0:0)
15:16:04 ipsec,debug enctype = AES-CBC:3DES-CBC
15:16:04 ipsec,debug (encklen = 256:0)
15:16:04 ipsec,debug hashtype = SHA:SHA
15:16:04 ipsec,debug authmethod = pre-shared key:pre-shared key
15:16:04 ipsec,debug dh_group = 1024-bit MODP group:2048-bit MODP group
15:16:04 ipsec,debug -compare proposal #3: Local:Peer
15:16:04 ipsec,debug (lifetime = 86400:86400)
15:16:04 ipsec,debug (lifebyte = 0:0)
15:16:04 ipsec,debug enctype = AES-CBC:3DES-CBC
15:16:04 ipsec,debug (encklen = 128:0)
15:16:04 ipsec,debug hashtype = SHA:SHA
15:16:04 ipsec,debug authmethod = pre-shared key:pre-shared key
15:16:04 ipsec,debug dh_group = 2048-bit MODP group:2048-bit MODP group
15:16:04 ipsec,debug -compare proposal #4: Local:Peer
15:16:04 ipsec,debug (lifetime = 86400:86400)
15:16:04 ipsec,debug (lifebyte = 0:0)
15:16:04 ipsec,debug enctype = AES-CBC:3DES-CBC
15:16:04 ipsec,debug (encklen = 128:0)
15:16:04 ipsec,debug hashtype = SHA:SHA
15:16:04 ipsec,debug authmethod = pre-shared key:pre-shared key
15:16:04 ipsec,debug dh_group = 1024-bit MODP group:2048-bit MODP group
15:16:04 ipsec,debug -compare proposal #5: Local:Peer
15:16:04 ipsec,debug (lifetime = 86400:86400)
15:16:04 ipsec,debug (lifebyte = 0:0)
15:16:04 ipsec,debug enctype = 3DES-CBC:3DES-CBC
15:16:04 ipsec,debug (encklen = 0:0)
15:16:04 ipsec,debug hashtype = SHA:SHA
15:16:04 ipsec,debug authmethod = pre-shared key:pre-shared key
15:16:04 ipsec,debug dh_group = 2048-bit MODP group:2048-bit MODP group
15:16:04 ipsec,debug -an acceptable proposal found-
15:16:04 ipsec,debug dh(modp2048)
15:16:04 ipsec,debug -agreed on pre-shared key auth-
15:16:04 ipsec,debug ===
15:16:04 ipsec,debug dh(modp2048)
15:16:05 ipsec,debug my.remote.server.ip Hashing my.remote.server.ip[500] with algo #2
15:16:05 ipsec,debug hash(sha1)
15:16:05 ipsec,debug my.public.ip Hashing my.public.ip[500] with algo #2
15:16:05 ipsec,debug hash(sha1)
15:16:05 ipsec Adding remote and local NAT-D payloads.
15:16:05 ipsec,debug add payload of len 256, next type 10
15:16:05 ipsec,debug add payload of len 24, next type 20
15:16:05 ipsec,debug add payload of len 20, next type 20
15:16:05 ipsec,debug add payload of len 20, next type 0
15:16:05 ipsec,debug 364 bytes from my.public.ip[500] to my.remote.server.ip[500]
15:16:05 ipsec,debug 1 times of 364 bytes message will be sent to my.remote.server.ip[500]
15:16:05 ipsec sent phase1 packet my.public.ip[500]<=>my.remote.server.ip[500] 84ce468124cdb23b:53d49b19e9370ebb
15:16:05 ipsec,debug ===== received 372 bytes from my.remote.server.ip[500] to my.public.ip[500]
15:16:05 ipsec,debug begin.
15:16:05 ipsec,debug seen nptype=4(ke) len=260
15:16:05 ipsec,debug seen nptype=10(nonce) len=36
15:16:05 ipsec,debug seen nptype=20(nat-d) len=24
15:16:05 ipsec,debug seen nptype=20(nat-d) len=24
15:16:05 ipsec,debug succeed.
15:16:05 ipsec,debug my.public.ip Hashing my.public.ip[500] with algo #2
15:16:05 ipsec,debug hash(sha1)
15:16:05 ipsec,debug NAT-D payload #0 doesn't match
15:16:05 ipsec,debug my.remote.server.ip Hashing my.remote.server.ip[500] with algo #2
15:16:05 ipsec,debug hash(sha1)
15:16:05 ipsec,debug NAT-D payload #1 verified
15:16:05 ipsec NAT detected: ME
15:16:05 ipsec KA list add: my.public.ip[4500]->my.remote.server.ip[4500]
15:16:05 ipsec,debug ===
15:16:05 ipsec,debug dh(modp2048)
15:16:05 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:16:05 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
15:16:05 l2tp,debug,packet (M) Message-Type=SCCRQ
15:16:05 l2tp,debug,packet (M) Protocol-Version=0x01:00
15:16:05 l2tp,debug,packet (M) Framing-Capabilities=0x1
15:16:05 l2tp,debug,packet (M) Bearer-Capabilities=0x0
15:16:05 l2tp,debug,packet Firmware-Revision=0x1
15:16:05 l2tp,debug,packet (M) Host-Name="MikroTik"
15:16:05 l2tp,debug,packet Vendor-Name="MikroTik"
15:16:05 l2tp,debug,packet (M) Assigned-Tunnel-ID=28
15:16:05 l2tp,debug,packet (M) Receive-Window-Size=4
15:16:06 ipsec,debug nonce 1:
15:16:06 ipsec,debug fb6964a2 6cd0979a 02d7c84d 8a4412c4 2dbd0a81 3015cdc5
15:16:06 ipsec,debug nonce 2:
15:16:06 ipsec,debug 24975117 07650080 0208e1ed d16ba014 48ea363d e28cca6a 3b5e4cd1 3e3df3fe
15:16:06 ipsec,debug SKEYID computed:
15:16:06 ipsec,debug 4c455b26 d02cd502 6d60de1a fffbd225 f98e9ab8
15:16:06 ipsec,debug SKEYID_d computed:
15:16:06 ipsec,debug 1cc6f65a eb6b0393 c052f7dd 2d419411 a2a89817
15:16:06 ipsec,debug SKEYID_a computed:
15:16:06 ipsec,debug 408737ae 7a9ce0cb cb731c24 e104dc84 6786c227
15:16:06 ipsec,debug SKEYID_e computed:
15:16:06 ipsec,debug e90aa218 9978f29b 27eb780c 5af5bba8 ffbad45e
15:16:06 ipsec,debug hash(sha1)
15:16:06 ipsec,debug len(SKEYID_e) < len(Ka) (20 < 24), generating long key (Ka = K1 | K2 | ...)
15:16:06 ipsec,debug compute intermediate encryption key K1
15:16:06 ipsec,debug 00
15:16:06 ipsec,debug dad362bc 0b03844a 0c1bb252 52a37a6f f7019139
15:16:06 ipsec,debug compute intermediate encryption key K2
15:16:06 ipsec,debug dad362bc 0b03844a 0c1bb252 52a37a6f f7019139
15:16:06 ipsec,debug 7f9bdc44 a5e2f29b ee28eace d44f6e07 01f9dabb
15:16:06 ipsec,debug final encryption key computed:
15:16:06 ipsec,debug dad362bc 0b03844a 0c1bb252 52a37a6f f7019139 7f9bdc44
15:16:06 ipsec,debug hash(sha1)
15:16:06 ipsec,debug IV computed:
15:16:06 ipsec,debug 39c63d29 1adcbd61
15:16:06 ipsec,debug use ID type of IPv4_address
15:16:06 ipsec,debug add payload of len 8, next type 8
15:16:06 ipsec,debug add payload of len 20, next type 0
15:16:06 ipsec,debug 68 bytes from my.public.ip[4500] to my.remote.server.ip[4500]
15:16:06 ipsec,debug 1 times of 72 bytes message will be sent to my.remote.server.ip[4500]
15:16:06 ipsec sent phase1 packet my.public.ip[4500]<=>my.remote.server.ip[4500] 84ce468124cdb23b:53d49b19e9370ebb
15:16:06 ipsec,debug ===== received 68 bytes from my.remote.server.ip[4500] to my.public.ip[4500]
15:16:06 ipsec,debug begin.
15:16:06 ipsec,debug seen nptype=5(id) len=12
15:16:06 ipsec,debug seen nptype=8(hash) len=24
15:16:06 ipsec,debug succeed.
15:16:06 ipsec,debug HASH received:
15:16:06 ipsec,debug af692c95 0b5e9cd1 233cca9c 17ac7b11 6dcd073e
15:16:06 ipsec,debug HASH for PSK validated.
15:16:06 ipsec,debug my.remote.server.ip peer's ID:
15:16:06 ipsec,debug 01000000 25dc8412
15:16:06 ipsec,debug ===
15:16:06 ipsec,info ISAKMP-SA established my.public.ip[4500]-my.remote.server.ip[4500] spi:84ce468124cdb23b:53d49b19e9370ebb
15:16:06 ipsec,debug ===
15:16:06 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:16:06 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
15:16:06 l2tp,debug,packet (M) Message-Type=SCCRQ
15:16:06 l2tp,debug,packet (M) Protocol-Version=0x01:00
15:16:06 l2tp,debug,packet (M) Framing-Capabilities=0x1
15:16:06 l2tp,debug,packet (M) Bearer-Capabilities=0x0
15:16:06 l2tp,debug,packet Firmware-Revision=0x1
15:16:06 l2tp,debug,packet (M) Host-Name="MikroTik"
15:16:06 l2tp,debug,packet Vendor-Name="MikroTik"
15:16:06 l2tp,debug,packet (M) Assigned-Tunnel-ID=28
15:16:06 l2tp,debug,packet (M) Receive-Window-Size=4
15:16:07 ipsec,debug ===
15:16:07 ipsec,debug begin QUICK mode.
15:16:07 ipsec initiate new phase 2 negotiation: my.public.ip[4500]<=>my.remote.server.ip[4500]
15:16:07 ipsec,debug hash(sha1)
15:16:07 ipsec,debug call pfkey_send_getspi 29
15:16:07 ipsec,debug pfkey GETSPI sent: ESP/Transport my.remote.server.ip[4500]->my.public.ip[4500]
15:16:07 ipsec,debug pfkey getspi sent.
15:16:07 ipsec NAT detected -> UDP encapsulation (ENC_MODE 2->4).
15:16:07 ipsec,debug use local ID type IPv4_address
15:16:07 ipsec,debug use remote ID type IPv4_address
15:16:07 ipsec,debug IDci:
15:16:07 ipsec,debug 011106a5 c0a80553
15:16:07 ipsec,debug IDcr:
15:16:07 ipsec,debug 011106a5 25dc8412
15:16:07 ipsec,debug NAT-OAi:
15:16:07 ipsec,debug 01000000 c0a80553
15:16:07 ipsec,debug NAT-OAr:
15:16:07 ipsec,debug 01000000 25dc8412
15:16:07 ipsec,debug add payload of len 488, next type 10
15:16:07 ipsec,debug add payload of len 24, next type 5
15:16:07 ipsec,debug add payload of len 8, next type 5
15:16:07 ipsec,debug add payload of len 8, next type 21
15:16:07 ipsec,debug add payload of len 8, next type 21
15:16:07 ipsec,debug add payload of len 8, next type 0
15:16:07 ipsec,debug add payload of len 20, next type 1
15:16:07 ipsec,debug 628 bytes from my.public.ip[4500] to my.remote.server.ip[4500]
15:16:07 ipsec,debug 1 times of 632 bytes message will be sent to my.remote.server.ip[4500]
15:16:07 ipsec sent phase2 packet my.public.ip[4500]<=>my.remote.server.ip[4500] 84ce468124cdb23b:53d49b19e9370ebb:e5bf1065
15:16:07 ipsec,debug ===== received 188 bytes from my.remote.server.ip[4500] to my.public.ip[4500]
15:16:07 ipsec,debug begin.
15:16:07 ipsec,debug seen nptype=8(hash) len=24
15:16:07 ipsec,debug seen nptype=1(sa) len=48
15:16:07 ipsec,debug seen nptype=10(nonce) len=36
15:16:07 ipsec,debug seen nptype=5(id) len=12
15:16:07 ipsec,debug seen nptype=5(id) len=12
15:16:07 ipsec,debug seen nptype=21(nat-oa) len=12
15:16:07 ipsec,debug seen nptype=21(nat-oa) len=12
15:16:07 ipsec,debug succeed.
15:16:07 ipsec,debug IDci matches NAT-OAi.
15:16:07 ipsec,debug IDcr matches proposal.
15:16:07 ipsec,debug HASH allocated:hbuf->l=184 actual:tlen=156
15:16:07 ipsec,debug HASH(2) received:
15:16:07 ipsec,debug 54afd92d 52ee66ef e030f4a3 6e0f533b 75da93f3
15:16:07 ipsec,debug total SA len=488
15:16:07 ipsec,debug 00000001 00000001 000001e0 01030412 09ab9de9 0300001c 010c0000 80010001
15:16:07 ipsec,debug 80020708 80040004 80060100 80050005 0300001c 020c0000 80010001 80020708
15:16:07 ipsec,debug 80040004 80060100 80050002 0300001c 030c0000 80010001 80020708 80040004
15:16:07 ipsec,debug 80060100 80050001 03000018 04140000 80010001 80020708 80040004 80060100
15:16:07 ipsec,debug 03000018 05140000 80010001 80020708 80040004 80060120 0300001c 060c0000
15:16:07 ipsec,debug 80010001 80020708 80040004 800600c0 80050005 0300001c 070c0000 80010001
15:16:07 ipsec,debug 80020708 80040004 800600c0 80050002 0300001c 080c0000 80010001 80020708
15:16:07 ipsec,debug 80040004 800600c0 80050001 03000018 09140000 80010001 80020708 80040004
15:16:07 ipsec,debug 800600c0 03000018 0a140000 80010001 80020708 80040004 800600e0 0300001c
15:16:07 ipsec,debug 0b0c0000 80010001 80020708 80040004 80060080 80050005 0300001c 0c0c0000
15:16:07 ipsec,debug 80010001 80020708 80040004 80060080 80050002 0300001c 0d0c0000 80010001
15:16:07 ipsec,debug 80020708 80040004 80060080 80050001 03000018 0e140000 80010001 80020708
15:16:07 ipsec,debug 80040004 80060080 03000018 0f140000 80010001 80020708 80040004 800600a0
15:16:07 ipsec,debug 03000018 10030000 80010001 80020708 80040004 80050005 03000018 11030000
15:16:07 ipsec,debug 80010001 80020708 80040004 80050002 00000018 12030000 80010001 80020708
15:16:07 ipsec,debug 80040004 80050001
15:16:07 ipsec,debug begin.
15:16:07 ipsec,debug seen nptype=2(prop) len=480
15:16:07 ipsec,debug succeed.
15:16:07 ipsec,debug proposal #1 len=480
15:16:07 ipsec,debug begin.
15:16:07 ipsec,debug seen nptype=3(trns) len=28
15:16:07 ipsec,debug seen nptype=3(trns) len=28
15:16:07 ipsec,debug seen nptype=3(trns) len=28
15:16:07 ipsec,debug seen nptype=3(trns) len=24
15:16:07 ipsec,debug seen nptype=3(trns) len=24
15:16:07 ipsec,debug seen nptype=3(trns) len=28
15:16:07 ipsec,debug seen nptype=3(trns) len=28
15:16:07 ipsec,debug seen nptype=3(trns) len=28
15:16:07 ipsec,debug seen nptype=3(trns) len=24
15:16:07 ipsec,debug seen nptype=3(trns) len=24
15:16:07 ipsec,debug seen nptype=3(trns) len=28
15:16:07 ipsec,debug seen nptype=3(trns) len=28
15:16:07 ipsec,debug seen nptype=3(trns) len=28
15:16:07 ipsec,debug seen nptype=3(trns) len=24
15:16:07 ipsec,debug seen nptype=3(trns) len=24
15:16:07 ipsec,debug seen nptype=3(trns) len=24
15:16:07 ipsec,debug seen nptype=3(trns) len=24
15:16:07 ipsec,debug seen nptype=3(trns) len=24
15:16:07 ipsec,debug succeed.
15:16:07 ipsec,debug transform #1 len=28
15:16:07 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:07 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:07 ipsec,debug life duration was in TLV.
15:16:07 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:07 ipsec,debug UDP encapsulation requested
15:16:07 ipsec,debug type=Key Length, flag=0x8000, lorv=256
15:16:07 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha256
15:16:07 ipsec,debug transform #2 len=28
15:16:07 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:07 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:07 ipsec,debug life duration was in TLV.
15:16:07 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:07 ipsec,debug UDP encapsulation requested
15:16:07 ipsec,debug type=Key Length, flag=0x8000, lorv=256
15:16:07 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
15:16:07 ipsec,debug transform #3 len=28
15:16:07 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:07 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:07 ipsec,debug life duration was in TLV.
15:16:07 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:07 ipsec,debug UDP encapsulation requested
15:16:07 ipsec,debug type=Key Length, flag=0x8000, lorv=256
15:16:07 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-md5
15:16:07 ipsec,debug transform #4 len=24
15:16:07 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:07 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:07 ipsec,debug life duration was in TLV.
15:16:07 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:07 ipsec,debug UDP encapsulation requested
15:16:07 ipsec,debug type=Key Length, flag=0x8000, lorv=256
15:16:07 ipsec,debug transform #5 len=24
15:16:07 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:07 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:07 ipsec,debug life duration was in TLV.
15:16:07 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:07 ipsec,debug UDP encapsulation requested
15:16:07 ipsec,debug type=Key Length, flag=0x8000, lorv=288
15:16:07 ipsec,debug transform #6 len=28
15:16:07 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:07 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:07 ipsec,debug life duration was in TLV.
15:16:07 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:07 ipsec,debug UDP encapsulation requested
15:16:07 ipsec,debug type=Key Length, flag=0x8000, lorv=192
15:16:07 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha256
15:16:07 ipsec,debug transform #7 len=28
15:16:07 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:07 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:07 ipsec,debug life duration was in TLV.
15:16:07 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:07 ipsec,debug UDP encapsulation requested
15:16:07 ipsec,debug type=Key Length, flag=0x8000, lorv=192
15:16:07 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
15:16:07 ipsec,debug transform #8 len=28
15:16:07 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:07 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:07 ipsec,debug life duration was in TLV.
15:16:07 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:07 ipsec,debug UDP encapsulation requested
15:16:07 ipsec,debug type=Key Length, flag=0x8000, lorv=192
15:16:07 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-md5
15:16:07 ipsec,debug transform #9 len=24
15:16:07 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:07 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:07 ipsec,debug life duration was in TLV.
15:16:07 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:07 ipsec,debug UDP encapsulation requested
15:16:07 ipsec,debug type=Key Length, flag=0x8000, lorv=192
15:16:07 ipsec,debug transform #10 len=24
15:16:07 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:07 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:07 ipsec,debug life duration was in TLV.
15:16:07 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:07 ipsec,debug UDP encapsulation requested
15:16:07 ipsec,debug type=Key Length, flag=0x8000, lorv=224
15:16:07 ipsec,debug transform #11 len=28
15:16:07 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:07 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:07 ipsec,debug life duration was in TLV.
15:16:07 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:07 ipsec,debug UDP encapsulation requested
15:16:07 ipsec,debug type=Key Length, flag=0x8000, lorv=128
15:16:07 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha256
15:16:07 ipsec,debug transform #12 len=28
15:16:07 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:07 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:07 ipsec,debug life duration was in TLV.
15:16:07 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:07 ipsec,debug UDP encapsulation requested
15:16:07 ipsec,debug type=Key Length, flag=0x8000, lorv=128
15:16:07 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
15:16:07 ipsec,debug transform #13 len=28
15:16:07 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:07 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:07 ipsec,debug life duration was in TLV.
15:16:07 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:07 ipsec,debug UDP encapsulation requested
15:16:07 ipsec,debug type=Key Length, flag=0x8000, lorv=128
15:16:07 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-md5
15:16:07 ipsec,debug transform #14 len=24
15:16:07 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:07 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:07 ipsec,debug life duration was in TLV.
15:16:07 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:07 ipsec,debug UDP encapsulation requested
15:16:07 ipsec,debug type=Key Length, flag=0x8000, lorv=128
15:16:07 ipsec,debug transform #15 len=24
15:16:07 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:07 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:07 ipsec,debug life duration was in TLV.
15:16:07 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:07 ipsec,debug UDP encapsulation requested
15:16:07 ipsec,debug type=Key Length, flag=0x8000, lorv=160
15:16:07 ipsec,debug transform #16 len=24
15:16:07 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:07 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:07 ipsec,debug life duration was in TLV.
15:16:07 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:07 ipsec,debug UDP encapsulation requested
15:16:07 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha256
15:16:07 ipsec,debug transform #17 len=24
15:16:07 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:07 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:07 ipsec,debug life duration was in TLV.
15:16:07 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:07 ipsec,debug UDP encapsulation requested
15:16:07 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
15:16:07 ipsec,debug transform #18 len=24
15:16:07 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:07 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:07 ipsec,debug life duration was in TLV.
15:16:07 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:07 ipsec,debug UDP encapsulation requested
15:16:07 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-md5
15:16:07 ipsec,debug pair 1:
15:16:07 ipsec,debug 0x4aaa70: next=(nil) tnext=0x4ab108
15:16:07 ipsec,debug 0x4ab108: next=(nil) tnext=0x4a6730
15:16:07 ipsec,debug 0x4a6730: next=(nil) tnext=0x4a6748
15:16:07 ipsec,debug 0x4a6748: next=(nil) tnext=0x4a6760
15:16:07 ipsec,debug 0x4a6760: next=(nil) tnext=0x4a6778
15:16:07 ipsec,debug 0x4a6778: next=(nil) tnext=0x4a7b78
15:16:07 ipsec,debug 0x4a7b78: next=(nil) tnext=0x4a7b90
15:16:07 ipsec,debug 0x4a7b90: next=(nil) tnext=0x4a7ba8
15:16:07 ipsec,debug 0x4a7ba8: next=(nil) tnext=0x4a7bc0
15:16:07 ipsec,debug 0x4a7bc0: next=(nil) tnext=0x4a7bd8
15:16:07 ipsec,debug 0x4a7bd8: next=(nil) tnext=0x4a7bf0
15:16:07 ipsec,debug 0x4a7bf0: next=(nil) tnext=0x4a8ea0
15:16:07 ipsec,debug 0x4a8ea0: next=(nil) tnext=0x4a8eb8
15:16:07 ipsec,debug 0x4a8eb8: next=(nil) tnext=0x4a8ed0
15:16:07 ipsec,debug 0x4a8ed0: next=(nil) tnext=0x4a8ee8
15:16:07 ipsec,debug 0x4a8ee8: next=(nil) tnext=0x4a8f00
15:16:07 ipsec,debug 0x4a8f00: next=(nil) tnext=0x4a8f18
15:16:07 ipsec,debug 0x4a8f18: next=(nil) tnext=(nil)
15:16:07 ipsec,debug proposal #1: 18 transform
15:16:07 ipsec,debug total SA len=44
15:16:07 ipsec,debug 00000001 00000001 00000024 01030401 cfaa6359 00000018 01030000 80050002
15:16:07 ipsec,debug 80040004 80010001 80020708
15:16:07 ipsec,debug begin.
15:16:07 ipsec,debug seen nptype=2(prop) len=36
15:16:07 ipsec,debug succeed.
15:16:07 ipsec,debug proposal #1 len=36
15:16:07 ipsec,debug begin.
15:16:07 ipsec,debug seen nptype=3(trns) len=24
15:16:07 ipsec,debug succeed.
15:16:07 ipsec,debug transform #1 len=24
15:16:07 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
15:16:07 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:07 ipsec,debug UDP encapsulation requested
15:16:07 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:07 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:07 ipsec,debug life duration was in TLV.
15:16:07 ipsec,debug pair 1:
15:16:07 ipsec,debug 0x4a8f30: next=(nil) tnext=(nil)
15:16:07 ipsec,debug proposal #1: 1 transform
15:16:07 ipsec transform number has been modified.
15:16:07 ipsec attribute has been modified.
15:16:07 ipsec,debug begin compare proposals.
15:16:07 ipsec,debug pair[1]: 0x4a8f30
15:16:07 ipsec,debug 0x4a8f30: next=(nil) tnext=(nil)
15:16:07 ipsec,debug prop#=1 prot-id=ESP spi-size=4 #trns=1 trns#=1 trns-id=3DES
15:16:07 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
15:16:07 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:07 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:07 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:07 ipsec,debug peer's single bundle:
15:16:07 ipsec,debug (proto_id=ESP spisize=4 spi=cfaa6359 spi_p=00000000 encmode=UDP-Transport reqid=0:0)
15:16:07 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-sha1)
15:16:07 ipsec,debug my single bundle:
15:16:07 ipsec,debug (proto_id=ESP spisize=4 spi=09ab9de9 spi_p=00000000 encmode=UDP-Transport reqid=0:0)
15:16:07 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-sha256)
15:16:07 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-sha1)
15:16:07 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-md5)
15:16:07 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=256 authtype=254)
15:16:07 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=288 authtype=254)
15:16:07 ipsec,debug (trns_id=AES-CBC encklen=192 authtype=hmac-sha256)
15:16:07 ipsec,debug (trns_id=AES-CBC encklen=192 authtype=hmac-sha1)
15:16:07 ipsec,debug (trns_id=AES-CBC encklen=192 authtype=hmac-md5)
15:16:07 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=192 authtype=254)
15:16:07 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=224 authtype=254)
15:16:07 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-sha256)
15:16:07 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-sha1)
15:16:07 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-md5)
15:16:07 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=128 authtype=254)
15:16:07 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=160 authtype=254)
15:16:07 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-sha256)
15:16:07 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-sha1)
15:16:07 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-md5)
15:16:07 ipsec Adjusting my encmode UDP-Transport->Transport
15:16:07 ipsec Adjusting peer's encmode UDP-Transport(4)->Transport(2)
15:16:07 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:16:07 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:16:07 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:16:07 ipsec trns_id mismatched: my:AES-GCM-ICV16 peer:3DES
15:16:07 ipsec trns_id mismatched: my:AES-GCM-ICV16 peer:3DES
15:16:07 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:16:07 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:16:07 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:16:07 ipsec trns_id mismatched: my:AES-GCM-ICV16 peer:3DES
15:16:07 ipsec trns_id mismatched: my:AES-GCM-ICV16 peer:3DES
15:16:07 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:16:07 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:16:07 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:16:07 ipsec trns_id mismatched: my:AES-GCM-ICV16 peer:3DES
15:16:07 ipsec trns_id mismatched: my:AES-GCM-ICV16 peer:3DES
15:16:07 ipsec authtype mismatched: my:hmac-sha256 peer:hmac-sha1
15:16:07 ipsec,debug matched
15:16:07 ipsec,debug ===
15:16:07 ipsec,debug HASH(3) generate
15:16:07 ipsec,debug add payload of len 20, next type 0
15:16:07 ipsec,debug 60 bytes from my.public.ip[4500] to my.remote.server.ip[4500]
15:16:07 ipsec,debug 1 times of 64 bytes message will be sent to my.remote.server.ip[4500]
15:16:07 ipsec,debug encryption(3des)
15:16:07 ipsec,debug hmac(sha1)
15:16:07 ipsec,debug encklen=192 authklen=160
15:16:07 ipsec,debug generating 640 bits of key (dupkeymat=4)
15:16:07 ipsec,debug generating K1...K4 for KEYMAT.
15:16:07 ipsec,debug 78c8531f f8234368 ebfe80b3 313579d0 e8c27da3 ea7ed9f2 99f81e19 6cf61324
15:16:07 ipsec,debug b3d81aae e3cde9c0 3c495d4f a2c1ba3c deb22b03 23b9ed45 ce40a9cb 079972b2
15:16:07 ipsec,debug 48e2c5cb eea0c36e cf38e017 7952becd
15:16:07 ipsec,debug encryption(3des)
15:16:07 ipsec,debug hmac(sha1)
15:16:07 ipsec,debug encklen=192 authklen=160
15:16:07 ipsec,debug generating 640 bits of key (dupkeymat=4)
15:16:07 ipsec,debug generating K1...K4 for KEYMAT.
15:16:07 ipsec,debug 0cd27619 8b4ed061 fd945a49 712b57af c048c274 4d3aa1d2 a21a05d1 582d7d46
15:16:07 ipsec,debug 8b16c83d 8eeff233 bb8cda50 1dbb2e33 d3286fe1 a08e2ad2 c210105b e9e9785a
15:16:07 ipsec,debug 3b805cfb bf4e49ff a50e0b6d 7bb4896f
15:16:07 ipsec,debug KEYMAT computed.
15:16:07 ipsec,debug call pk_sendupdate
15:16:07 ipsec,debug encryption(3des)
15:16:07 ipsec,debug hmac(sha1)
15:16:07 ipsec,debug call pfkey_send_update_nat
15:16:07 ipsec IPsec-SA established: ESP/Transport my.remote.server.ip[4500]->my.public.ip[4500] spi=0x9ab9de9
15:16:07 ipsec,debug pfkey update sent.
15:16:07 ipsec,debug encryption(3des)
15:16:07 ipsec,debug hmac(sha1)
15:16:07 ipsec,debug call pfkey_send_add_nat
15:16:07 ipsec IPsec-SA established: ESP/Transport my.public.ip[4500]->my.remote.server.ip[4500] spi=0xcfaa6359
15:16:07 ipsec,debug pfkey add sent.
15:16:08 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:16:08 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
15:16:08 l2tp,debug,packet (M) Message-Type=SCCRQ
15:16:08 l2tp,debug,packet (M) Protocol-Version=0x01:00
15:16:08 l2tp,debug,packet (M) Framing-Capabilities=0x1
15:16:08 l2tp,debug,packet (M) Bearer-Capabilities=0x0
15:16:08 l2tp,debug,packet Firmware-Revision=0x1
15:16:08 l2tp,debug,packet (M) Host-Name="MikroTik"
15:16:08 l2tp,debug,packet Vendor-Name="MikroTik"
15:16:08 l2tp,debug,packet (M) Assigned-Tunnel-ID=28
15:16:08 l2tp,debug,packet (M) Receive-Window-Size=4
15:16:08 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
15:16:08 l2tp,debug,packet tunnel-id=28, session-id=0, ns=0, nr=1
15:16:08 l2tp,debug,packet (M) Message-Type=SCCRP
15:16:08 l2tp,debug,packet (M) Protocol-Version=0x01:00
15:16:08 l2tp,debug,packet (M) Framing-Capabilities=0x3
15:16:08 l2tp,debug,packet (M) Bearer-Capabilities=0x0
15:16:08 l2tp,debug,packet Firmware-Revision=0x690
15:16:08 l2tp,debug,packet (M) Host-Name="localhost"
15:16:08 l2tp,debug,packet Vendor-Name="xelerance.com"
15:16:08 l2tp,debug,packet (M) Assigned-Tunnel-ID=27378
15:16:08 l2tp,debug,packet (M) Receive-Window-Size=4
15:16:08 l2tp,debug tunnel 28 entering state: established
15:16:08 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:16:08 l2tp,debug,packet tunnel-id=27378, session-id=0, ns=1, nr=1
15:16:08 l2tp,debug,packet (M) Message-Type=SCCCN
15:16:08 l2tp,debug session 1 entering state: wait-reply
15:16:08 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:16:08 l2tp,debug,packet tunnel-id=28, session-id=0, ns=1, nr=2
15:16:08 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:16:08 l2tp,debug,packet tunnel-id=27378, session-id=0, ns=2, nr=1
15:16:08 l2tp,debug,packet (M) Message-Type=ICRQ
15:16:08 l2tp,debug,packet (M) Assigned-Session-ID=1
15:16:08 l2tp,debug,packet (M) Call-Serial-Number=18
15:16:08 l2tp,debug,packet (M) Bearer-Type=0x0
15:16:08 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
15:16:08 l2tp,debug,packet tunnel-id=28, session-id=1, ns=1, nr=3
15:16:08 l2tp,debug,packet (M) Message-Type=ICRP
15:16:08 l2tp,debug,packet (M) Assigned-Session-ID=5517
15:16:08 l2tp,debug session 1 entering state: established
15:16:08 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:16:08 l2tp,debug,packet tunnel-id=27378, session-id=5517, ns=3, nr=2
15:16:08 l2tp,debug,packet (M) Message-Type=ICCN
15:16:08 l2tp,debug,packet (M) Framing-Type=0x1
15:16:08 l2tp,debug,packet (M) Tx-Connect-Speed-BPS=100000000
15:16:08 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:16:08 l2tp,debug,packet tunnel-id=28, session-id=0, ns=2, nr=3
15:16:08 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:16:08 l2tp,debug,packet tunnel-id=28, session-id=1, ns=2, nr=4
15:16:08 l2tp,ppp,debug l2tp-out1: LCP lowerup
15:16:08 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfReq id=0x2b
15:16:08 l2tp,ppp,debug,packet <mru 1450>
15:16:08 l2tp,ppp,debug,packet <magic 0x7eeb09b8>
15:16:08 l2tp,ppp,debug,packet <mrru 1600>
15:16:08 l2tp,ppp,debug l2tp-out1: LCP open
15:16:08 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfReq id=0x1
15:16:08 l2tp,ppp,debug,packet <mru 1410>
15:16:08 l2tp,ppp,debug,packet <asyncmap 0x0>
15:16:08 l2tp,ppp,debug,packet <magic 0xa3113ca3>
15:16:08 l2tp,ppp,debug,packet <pcomp>
15:16:08 l2tp,ppp,debug,packet <accomp>
15:16:08 l2tp,ppp,debug,packet <auth chap>
15:16:08 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfRej id=0x1
15:16:08 l2tp,ppp,debug,packet <asyncmap 0x0>
15:16:08 l2tp,ppp,debug,packet <pcomp>
15:16:08 l2tp,ppp,debug,packet <accomp>
15:16:08 l2tp,ppp,debug,packet <auth chap>
15:16:08 l2tp,ppp,debug l2tp-out1: PPP received non-LCP packet (0x6970) when LCP not open
15:16:08 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfRej id=0x2b
15:16:08 l2tp,ppp,debug,packet <mrru 1600>
15:16:08 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfReq id=0x2c
15:16:08 l2tp,ppp,debug,packet <mru 1450>
15:16:08 l2tp,ppp,debug,packet <magic 0x7eeb09b8>
15:16:08 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfReq id=0x2
15:16:08 l2tp,ppp,debug,packet <mru 1410>
15:16:08 l2tp,ppp,debug,packet <magic 0xa3113ca3>
15:16:08 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfAck id=0x2
15:16:08 l2tp,ppp,debug,packet <mru 1410>
15:16:08 l2tp,ppp,debug,packet <magic 0xa3113ca3>
15:16:08 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfAck id=0x2c
15:16:08 l2tp,ppp,debug,packet <mru 1450>
15:16:08 l2tp,ppp,debug,packet <magic 0x7eeb09b8>
15:16:08 l2tp,ppp,debug l2tp-out1: LCP opened
15:16:08 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP TermReq id=0x3
15:16:08 l2tp,ppp,debug,packet peer refused to authenticate
15:16:08 l2tp,ppp,debug l2tp-out1: LCP closed
15:16:08 l2tp,ppp,debug l2tp-out1: CCP lowerdown
15:16:08 l2tp,ppp,debug l2tp-out1: CCP down event in initial state
15:16:08 l2tp,ppp,debug l2tp-out1: BCP lowerdown
15:16:08 l2tp,ppp,debug l2tp-out1: BCP down event in initial state
15:16:08 l2tp,ppp,debug l2tp-out1: IPCP lowerdown
15:16:08 l2tp,ppp,debug l2tp-out1: IPCP down event in initial state
15:16:08 l2tp,ppp,debug l2tp-out1: IPV6CP lowerdown
15:16:08 l2tp,ppp,debug l2tp-out1: IPV6CP down event in initial state
15:16:08 l2tp,ppp,debug l2tp-out1: MPLSCP lowerdown
15:16:08 l2tp,ppp,debug l2tp-out1: MPLSCP down event in initial state
15:16:08 l2tp,ppp,debug,packet l2tp-out1: sent LCP TermAck id=0x3
15:16:08 l2tp,ppp,debug l2tp-out1: LCP lowerdown
15:16:08 l2tp,ppp,debug l2tp-out1: CCP close
15:16:08 l2tp,ppp,debug l2tp-out1: BCP close
15:16:08 l2tp,ppp,debug l2tp-out1: IPCP close
15:16:08 l2tp,ppp,debug l2tp-out1: IPV6CP close
15:16:08 l2tp,ppp,debug l2tp-out1: MPLSCP close
15:16:08 l2tp,ppp,info l2tp-out1: terminating...
15:16:08 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:16:08 l2tp,debug,packet tunnel-id=27378, session-id=5517, ns=4, nr=2
15:16:08 l2tp,debug,packet (M) Message-Type=CDN
15:16:08 l2tp,debug,packet (M) Result-Code=1
15:16:08 l2tp,debug,packet (M) Assigned-Session-ID=1
15:16:08 l2tp,debug session 1 entering state: stopping
15:16:08 l2tp,ppp,debug l2tp-out1: LCP lowerdown
15:16:08 l2tp,ppp,debug l2tp-out1: LCP down event in starting state
15:16:08 l2tp,ppp,info l2tp-out1: disconnected
15:16:08 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:16:08 l2tp,debug,packet tunnel-id=28, session-id=1, ns=2, nr=5
15:16:08 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
15:16:08 l2tp,debug,packet tunnel-id=28, session-id=1, ns=2, nr=5
15:16:08 l2tp,debug,packet (M) Message-Type=CDN
15:16:08 l2tp,debug,packet (M) Result-Code=2
15:16:08 l2tp,debug,packet Error-Code=2
15:16:08 l2tp,debug,packet Error-Message="Result Code: expected at least 10, got 8"
15:16:08 l2tp,debug,packet (M) Assigned-Session-ID=5517
15:16:08 l2tp,debug,packet sent control message (ack) to my.remote.server.ip:1701 from my.public.ip:1701
15:16:08 l2tp,debug,packet tunnel-id=27378, session-id=0, ns=5, nr=3
15:16:08 l2tp,debug session 1 entering state: stopping
15:16:08 l2tp,debug session 1 entering state: dead
15:16:08 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:16:08 l2tp,debug,packet tunnel-id=27378, session-id=0, ns=5, nr=3
15:16:08 l2tp,debug,packet (M) Message-Type=StopCCN
15:16:08 l2tp,debug,packet (M) Result-Code=1
15:16:08 l2tp,debug,packet (M) Assigned-Tunnel-ID=28
15:16:08 l2tp,debug tunnel 28 entering state: stopping
15:16:08 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:16:08 l2tp,debug,packet tunnel-id=28, session-id=0, ns=3, nr=6
15:16:08 l2tp,debug tunnel 28 entering state: dead
15:16:08 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
15:16:08 l2tp,debug,packet tunnel-id=28, session-id=0, ns=3, nr=6
15:16:08 l2tp,debug,packet (M) Message-Type=StopCCN
15:16:08 l2tp,debug,packet (M) Assigned-Tunnel-ID=27378
15:16:08 l2tp,debug,packet (M) Result-Code=2
15:16:08 l2tp,debug,packet Error-Code=2
15:16:08 l2tp,debug,packet Error-Message="Result Code: expected at least 10, got 8"
15:16:08 l2tp,debug,packet sent control message (ack) to my.remote.server.ip:1701 from my.public.ip:1701
15:16:08 l2tp,debug,packet tunnel-id=27378, session-id=0, ns=6, nr=4
15:16:09 ipsec,debug Deleting a Ph2...
15:16:09 ipsec,debug hash(sha1)
15:16:09 ipsec,debug 76 bytes from my.public.ip[4500] to my.remote.server.ip[4500]
15:16:09 ipsec,debug 1 times of 80 bytes message will be sent to my.remote.server.ip[4500]
15:16:09 ipsec,debug sendto Information delete.
15:16:09 ipsec purged IPsec-SA proto_id=ESP spi=0xcfaa6359
15:16:09 ipsec purged IPsec-SA proto_id=ESP spi=0x9ab9de9
15:16:09 ipsec,debug Removing PH1...
15:16:09 ipsec,debug hash(sha1)
15:16:09 ipsec,debug 84 bytes from my.public.ip[4500] to my.remote.server.ip[4500]
15:16:09 ipsec,debug 1 times of 88 bytes message will be sent to my.remote.server.ip[4500]
15:16:09 ipsec,debug sendto Information delete.
15:16:09 ipsec,info ISAKMP-SA deleted my.public.ip[4500]-my.remote.server.ip[4500] spi:84ce468124cdb23b:53d49b19e9370ebb rekey:1
15:16:09 ipsec KA remove: my.public.ip[4500]->my.remote.server.ip[4500]
15:16:09 ipsec,debug KA tree dump: my.public.ip[4500]->my.remote.server.ip[4500] (in_use=1)
15:16:09 ipsec,debug KA removing this one...
15:16:15 l2tp,ppp,info l2tp-out1: initializing...
15:16:15 l2tp,ppp,info l2tp-out1: connecting...
15:16:15 l2tp,debug tunnel 29 entering state: wait-ctl-reply
15:16:15 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:16:15 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
15:16:15 l2tp,debug,packet (M) Message-Type=SCCRQ
15:16:15 l2tp,debug,packet (M) Protocol-Version=0x01:00
15:16:15 l2tp,debug,packet (M) Framing-Capabilities=0x1
15:16:15 l2tp,debug,packet (M) Bearer-Capabilities=0x0
15:16:15 l2tp,debug,packet Firmware-Revision=0x1
15:16:15 l2tp,debug,packet (M) Host-Name="MikroTik"
15:16:15 l2tp,debug,packet Vendor-Name="MikroTik"
15:16:15 l2tp,debug,packet (M) Assigned-Tunnel-ID=29
15:16:15 l2tp,debug,packet (M) Receive-Window-Size=4
15:16:15 ipsec acquire for policy: my.public.ip:1701 <=> my.remote.server.ip:1701 ip-proto:17
15:16:15 ipsec peer is IKEv1
15:16:15 ipsec,debug (proto_id=ESP spisize=4 spi=00000000 spi_p=00000000 encmode=Transport reqid=0:0)
15:16:15 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-sha256)
15:16:15 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-sha1)
15:16:15 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-md5)
15:16:15 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=256 authtype=254)
15:16:15 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=288 authtype=254)
15:16:15 ipsec,debug (trns_id=AES-CBC encklen=192 authtype=hmac-sha256)
15:16:15 ipsec,debug (trns_id=AES-CBC encklen=192 authtype=hmac-sha1)
15:16:15 ipsec,debug (trns_id=AES-CBC encklen=192 authtype=hmac-md5)
15:16:15 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=192 authtype=254)
15:16:15 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=224 authtype=254)
15:16:15 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-sha256)
15:16:15 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-sha1)
15:16:15 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-md5)
15:16:15 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=128 authtype=254)
15:16:15 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=160 authtype=254)
15:16:15 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-sha256)
15:16:15 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-sha1)
15:16:15 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-md5)
15:16:15 ipsec IPsec-SA request for my.remote.server.ip queued due to no phase1 found.
15:16:15 ipsec,debug ===
15:16:15 ipsec,info initiate new phase 1 (Identity Protection): my.public.ip[500]<=>my.remote.server.ip[500]
15:16:15 ipsec,debug new cookie:
15:16:15 ipsec,debug ea2e67e28263e2ff
15:16:15 ipsec,debug add payload of len 248, next type 13
15:16:15 ipsec,debug add payload of len 16, next type 13
15:16:15 ipsec,debug add payload of len 16, next type 13
15:16:15 ipsec,debug add payload of len 16, next type 13
15:16:15 ipsec,debug add payload of len 16, next type 13
15:16:15 ipsec,debug add payload of len 16, next type 13
15:16:15 ipsec,debug add payload of len 16, next type 13
15:16:15 ipsec,debug add payload of len 16, next type 13
15:16:15 ipsec,debug add payload of len 16, next type 13
15:16:15 ipsec,debug add payload of len 16, next type 13
15:16:15 ipsec,debug add payload of len 16, next type 13
15:16:15 ipsec,debug add payload of len 16, next type 13
15:16:15 ipsec,debug add payload of len 16, next type 13
15:16:15 ipsec,debug add payload of len 16, next type 0
15:16:15 ipsec,debug 540 bytes from my.public.ip[500] to my.remote.server.ip[500]
15:16:15 ipsec,debug 1 times of 540 bytes message will be sent to my.remote.server.ip[500]
15:16:15 ipsec sent phase1 packet my.public.ip[500]<=>my.remote.server.ip[500] ea2e67e28263e2ff:0000000000000000
15:16:15 ipsec,debug ===== received 156 bytes from my.remote.server.ip[500] to my.public.ip[500]
15:16:15 ipsec,debug begin.
15:16:15 ipsec,debug seen nptype=1(sa) len=56
15:16:15 ipsec,debug seen nptype=13(vid) len=12
15:16:15 ipsec,debug seen nptype=13(vid) len=20
15:16:15 ipsec,debug seen nptype=13(vid) len=20
15:16:15 ipsec,debug seen nptype=13(vid) len=20
15:16:15 ipsec,debug succeed.
15:16:15 ipsec received Vendor ID: draft-ietf-ipsra-isakmp-xauth-06.txt
15:16:15 ipsec received Vendor ID: DPD
15:16:15 ipsec,debug remote supports DPD
15:16:15 ipsec received Vendor ID: CISCO-UNITY
15:16:15 ipsec received Vendor ID: RFC 3947
15:16:15 ipsec my.remote.server.ip Selected NAT-T version: RFC 3947
15:16:15 ipsec,debug total SA len=52
15:16:15 ipsec,debug 00000001 00000001 0000002c 01010001 00000024 01010000 80010005 80020002
15:16:15 ipsec,debug 8004000e 80030001 800b0001 000c0004 00015180
15:16:15 ipsec,debug begin.
15:16:15 ipsec,debug seen nptype=2(prop) len=44
15:16:15 ipsec,debug succeed.
15:16:15 ipsec,debug proposal #1 len=44
15:16:15 ipsec,debug begin.
15:16:15 ipsec,debug seen nptype=3(trns) len=36
15:16:15 ipsec,debug succeed.
15:16:15 ipsec,debug transform #1 len=36
15:16:15 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=3DES-CBC
15:16:15 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=SHA
15:16:15 ipsec,debug hash(sha1)
15:16:15 ipsec,debug type=Group Description, flag=0x8000, lorv=2048-bit MODP group
15:16:15 ipsec,debug dh(modp2048)
15:16:15 ipsec,debug type=Authentication Method, flag=0x8000, lorv=pre-shared key
15:16:15 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
15:16:15 ipsec,debug type=Life Duration, flag=0x0000, lorv=4
15:16:15 ipsec,debug pair 1:
15:16:15 ipsec,debug 0x4a9608: next=(nil) tnext=(nil)
15:16:15 ipsec,debug proposal #1: 1 transform
15:16:15 ipsec,debug -checking with pre-shared key auth-
15:16:15 ipsec,debug prop#=1, prot-id=ISAKMP, spi-size=0, #trns=1
15:16:15 ipsec,debug trns#=1, trns-id=IKE
15:16:15 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=3DES-CBC
15:16:15 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=SHA
15:16:15 ipsec,debug type=Group Description, flag=0x8000, lorv=2048-bit MODP group
15:16:15 ipsec,debug type=Authentication Method, flag=0x8000, lorv=pre-shared key
15:16:15 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
15:16:15 ipsec,debug type=Life Duration, flag=0x0000, lorv=4
15:16:15 ipsec,debug -compare proposal #1: Local:Peer
15:16:15 ipsec,debug (lifetime = 86400:86400)
15:16:15 ipsec,debug (lifebyte = 0:0)
15:16:15 ipsec,debug enctype = AES-CBC:3DES-CBC
15:16:15 ipsec,debug (encklen = 256:0)
15:16:15 ipsec,debug hashtype = SHA:SHA
15:16:15 ipsec,debug authmethod = pre-shared key:pre-shared key
15:16:15 ipsec,debug dh_group = 2048-bit MODP group:2048-bit MODP group
15:16:15 ipsec,debug -compare proposal #2: Local:Peer
15:16:15 ipsec,debug (lifetime = 86400:86400)
15:16:15 ipsec,debug (lifebyte = 0:0)
15:16:15 ipsec,debug enctype = AES-CBC:3DES-CBC
15:16:15 ipsec,debug (encklen = 256:0)
15:16:15 ipsec,debug hashtype = SHA:SHA
15:16:15 ipsec,debug authmethod = pre-shared key:pre-shared key
15:16:15 ipsec,debug dh_group = 1024-bit MODP group:2048-bit MODP group
15:16:15 ipsec,debug -compare proposal #3: Local:Peer
15:16:15 ipsec,debug (lifetime = 86400:86400)
15:16:15 ipsec,debug (lifebyte = 0:0)
15:16:15 ipsec,debug enctype = AES-CBC:3DES-CBC
15:16:15 ipsec,debug (encklen = 128:0)
15:16:15 ipsec,debug hashtype = SHA:SHA
15:16:15 ipsec,debug authmethod = pre-shared key:pre-shared key
15:16:15 ipsec,debug dh_group = 2048-bit MODP group:2048-bit MODP group
15:16:15 ipsec,debug -compare proposal #4: Local:Peer
15:16:15 ipsec,debug (lifetime = 86400:86400)
15:16:15 ipsec,debug (lifebyte = 0:0)
15:16:15 ipsec,debug enctype = AES-CBC:3DES-CBC
15:16:15 ipsec,debug (encklen = 128:0)
15:16:15 ipsec,debug hashtype = SHA:SHA
15:16:15 ipsec,debug authmethod = pre-shared key:pre-shared key
15:16:15 ipsec,debug dh_group = 1024-bit MODP group:2048-bit MODP group
15:16:15 ipsec,debug -compare proposal #5: Local:Peer
15:16:15 ipsec,debug (lifetime = 86400:86400)
15:16:15 ipsec,debug (lifebyte = 0:0)
15:16:15 ipsec,debug enctype = 3DES-CBC:3DES-CBC
15:16:15 ipsec,debug (encklen = 0:0)
15:16:15 ipsec,debug hashtype = SHA:SHA
15:16:15 ipsec,debug authmethod = pre-shared key:pre-shared key
15:16:15 ipsec,debug dh_group = 2048-bit MODP group:2048-bit MODP group
15:16:15 ipsec,debug -an acceptable proposal found-
15:16:15 ipsec,debug dh(modp2048)
15:16:15 ipsec,debug -agreed on pre-shared key auth-
15:16:15 ipsec,debug ===
15:16:15 ipsec,debug dh(modp2048)
15:16:16 ipsec,debug my.remote.server.ip Hashing my.remote.server.ip[500] with algo #2
15:16:16 ipsec,debug hash(sha1)
15:16:16 ipsec,debug my.public.ip Hashing my.public.ip[500] with algo #2
15:16:16 ipsec,debug hash(sha1)
15:16:16 ipsec Adding remote and local NAT-D payloads.
15:16:16 ipsec,debug add payload of len 256, next type 10
15:16:16 ipsec,debug add payload of len 24, next type 20
15:16:16 ipsec,debug add payload of len 20, next type 20
15:16:16 ipsec,debug add payload of len 20, next type 0
15:16:16 ipsec,debug 364 bytes from my.public.ip[500] to my.remote.server.ip[500]
15:16:16 ipsec,debug 1 times of 364 bytes message will be sent to my.remote.server.ip[500]
15:16:16 ipsec sent phase1 packet my.public.ip[500]<=>my.remote.server.ip[500] ea2e67e28263e2ff:efb17e26d27d7444
15:16:16 ipsec,debug ===== received 372 bytes from my.remote.server.ip[500] to my.public.ip[500]
15:16:16 ipsec,debug begin.
15:16:16 ipsec,debug seen nptype=4(ke) len=260
15:16:16 ipsec,debug seen nptype=10(nonce) len=36
15:16:16 ipsec,debug seen nptype=20(nat-d) len=24
15:16:16 ipsec,debug seen nptype=20(nat-d) len=24
15:16:16 ipsec,debug succeed.
15:16:16 ipsec,debug my.public.ip Hashing my.public.ip[500] with algo #2
15:16:16 ipsec,debug hash(sha1)
15:16:16 ipsec,debug NAT-D payload #0 doesn't match
15:16:16 ipsec,debug my.remote.server.ip Hashing my.remote.server.ip[500] with algo #2
15:16:16 ipsec,debug hash(sha1)
15:16:16 ipsec,debug NAT-D payload #1 verified
15:16:16 ipsec NAT detected: ME
15:16:16 ipsec KA list add: my.public.ip[4500]->my.remote.server.ip[4500]
15:16:16 ipsec,debug ===
15:16:16 ipsec,debug dh(modp2048)
15:16:16 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:16:16 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
15:16:16 l2tp,debug,packet (M) Message-Type=SCCRQ
15:16:16 l2tp,debug,packet (M) Protocol-Version=0x01:00
15:16:16 l2tp,debug,packet (M) Framing-Capabilities=0x1
15:16:16 l2tp,debug,packet (M) Bearer-Capabilities=0x0
15:16:16 l2tp,debug,packet Firmware-Revision=0x1
15:16:16 l2tp,debug,packet (M) Host-Name="MikroTik"
15:16:16 l2tp,debug,packet Vendor-Name="MikroTik"
15:16:16 l2tp,debug,packet (M) Assigned-Tunnel-ID=29
15:16:16 l2tp,debug,packet (M) Receive-Window-Size=4
15:16:16 ipsec,debug nonce 1:
15:16:16 ipsec,debug 9e239ebb 40b0f971 949fb5a1 a5d56791 757fb34a 0d202e8e
15:16:16 ipsec,debug nonce 2:
15:16:16 ipsec,debug c0f6875d 77b6a3d1 10cc6f7c dcfa0485 d7332d1c 320bfc34 06e56bf8 d1d2f08c
15:16:16 ipsec,debug SKEYID computed:
15:16:16 ipsec,debug ed09545c 17463902 0780e173 f843984c ac006d2d
15:16:16 ipsec,debug SKEYID_d computed:
15:16:16 ipsec,debug 40e865c5 738b3880 068da405 8335e05f 0d8649fc
15:16:16 ipsec,debug SKEYID_a computed:
15:16:16 ipsec,debug 2a825b42 25e411a1 272c6936 7897401c 5936afd0
15:16:16 ipsec,debug SKEYID_e computed:
15:16:16 ipsec,debug ec9278c7 570ade47 e7c4829b d1fc2d56 1472caac
15:16:16 ipsec,debug hash(sha1)
15:16:16 ipsec,debug len(SKEYID_e) < len(Ka) (20 < 24), generating long key (Ka = K1 | K2 | ...)
15:16:16 ipsec,debug compute intermediate encryption key K1
15:16:16 ipsec,debug 00
15:16:16 ipsec,debug 0be4ad62 d78aa52b c4152e50 cf8b4073 18419d2f
15:16:16 ipsec,debug compute intermediate encryption key K2
15:16:16 ipsec,debug 0be4ad62 d78aa52b c4152e50 cf8b4073 18419d2f
15:16:16 ipsec,debug 04e70402 49af5bec e61808f3 95747c27 3683949e
15:16:16 ipsec,debug final encryption key computed:
15:16:16 ipsec,debug 0be4ad62 d78aa52b c4152e50 cf8b4073 18419d2f 04e70402
15:16:16 ipsec,debug hash(sha1)
15:16:16 ipsec,debug IV computed:
15:16:16 ipsec,debug bb43350a 713fced7
15:16:16 ipsec,debug use ID type of IPv4_address
15:16:16 ipsec,debug add payload of len 8, next type 8
15:16:16 ipsec,debug add payload of len 20, next type 0
15:16:16 ipsec,debug 68 bytes from my.public.ip[4500] to my.remote.server.ip[4500]
15:16:16 ipsec,debug 1 times of 72 bytes message will be sent to my.remote.server.ip[4500]
15:16:16 ipsec sent phase1 packet my.public.ip[4500]<=>my.remote.server.ip[4500] ea2e67e28263e2ff:efb17e26d27d7444
15:16:16 ipsec,debug ===== received 68 bytes from my.remote.server.ip[4500] to my.public.ip[4500]
15:16:16 ipsec,debug begin.
15:16:16 ipsec,debug seen nptype=5(id) len=12
15:16:16 ipsec,debug seen nptype=8(hash) len=24
15:16:16 ipsec,debug succeed.
15:16:16 ipsec,debug HASH received:
15:16:16 ipsec,debug d9e306ea 22b35169 f7de2b7d 4c3164f9 654c22b2
15:16:16 ipsec,debug HASH for PSK validated.
15:16:16 ipsec,debug my.remote.server.ip peer's ID:
15:16:16 ipsec,debug 01000000 25dc8412
15:16:16 ipsec,debug ===
15:16:16 ipsec,info ISAKMP-SA established my.public.ip[4500]-my.remote.server.ip[4500] spi:ea2e67e28263e2ff:efb17e26d27d7444
15:16:16 ipsec,debug ===
15:16:17 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:16:17 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
15:16:17 l2tp,debug,packet (M) Message-Type=SCCRQ
15:16:17 l2tp,debug,packet (M) Protocol-Version=0x01:00
15:16:17 l2tp,debug,packet (M) Framing-Capabilities=0x1
15:16:17 l2tp,debug,packet (M) Bearer-Capabilities=0x0
15:16:17 l2tp,debug,packet Firmware-Revision=0x1
15:16:17 l2tp,debug,packet (M) Host-Name="MikroTik"
15:16:17 l2tp,debug,packet Vendor-Name="MikroTik"
15:16:17 l2tp,debug,packet (M) Assigned-Tunnel-ID=29
15:16:17 l2tp,debug,packet (M) Receive-Window-Size=4
15:16:17 ipsec,debug ===
15:16:17 ipsec,debug begin QUICK mode.
15:16:17 ipsec initiate new phase 2 negotiation: my.public.ip[4500]<=>my.remote.server.ip[4500]
15:16:17 ipsec,debug hash(sha1)
15:16:17 ipsec,debug call pfkey_send_getspi 2c
15:16:17 ipsec,debug pfkey GETSPI sent: ESP/Transport my.remote.server.ip[4500]->my.public.ip[4500]
15:16:17 ipsec,debug pfkey getspi sent.
15:16:17 ipsec NAT detected -> UDP encapsulation (ENC_MODE 2->4).
15:16:17 ipsec,debug use local ID type IPv4_address
15:16:17 ipsec,debug use remote ID type IPv4_address
15:16:17 ipsec,debug IDci:
15:16:17 ipsec,debug 011106a5 c0a80553
15:16:17 ipsec,debug IDcr:
15:16:17 ipsec,debug 011106a5 25dc8412
15:16:17 ipsec,debug NAT-OAi:
15:16:17 ipsec,debug 01000000 c0a80553
15:16:17 ipsec,debug NAT-OAr:
15:16:17 ipsec,debug 01000000 25dc8412
15:16:17 ipsec,debug add payload of len 488, next type 10
15:16:17 ipsec,debug add payload of len 24, next type 5
15:16:17 ipsec,debug add payload of len 8, next type 5
15:16:17 ipsec,debug add payload of len 8, next type 21
15:16:17 ipsec,debug add payload of len 8, next type 21
15:16:17 ipsec,debug add payload of len 8, next type 0
15:16:17 ipsec,debug add payload of len 20, next type 1
15:16:17 ipsec,debug 628 bytes from my.public.ip[4500] to my.remote.server.ip[4500]
15:16:17 ipsec,debug 1 times of 632 bytes message will be sent to my.remote.server.ip[4500]
15:16:17 ipsec sent phase2 packet my.public.ip[4500]<=>my.remote.server.ip[4500] ea2e67e28263e2ff:efb17e26d27d7444:815b22cf
15:16:17 ipsec,debug ===== received 188 bytes from my.remote.server.ip[4500] to my.public.ip[4500]
15:16:17 ipsec,debug begin.
15:16:17 ipsec,debug seen nptype=8(hash) len=24
15:16:17 ipsec,debug seen nptype=1(sa) len=48
15:16:17 ipsec,debug seen nptype=10(nonce) len=36
15:16:17 ipsec,debug seen nptype=5(id) len=12
15:16:17 ipsec,debug seen nptype=5(id) len=12
15:16:17 ipsec,debug seen nptype=21(nat-oa) len=12
15:16:17 ipsec,debug seen nptype=21(nat-oa) len=12
15:16:17 ipsec,debug succeed.
15:16:17 ipsec,debug IDci matches NAT-OAi.
15:16:17 ipsec,debug IDcr matches proposal.
15:16:17 ipsec,debug HASH allocated:hbuf->l=184 actual:tlen=156
15:16:17 ipsec,debug HASH(2) received:
15:16:17 ipsec,debug cf244d7c e9c5fed3 e455a884 f1f435c7 6919133e
15:16:17 ipsec,debug total SA len=488
15:16:17 ipsec,debug 00000001 00000001 000001e0 01030412 032449bf 0300001c 010c0000 80010001
15:16:17 ipsec,debug 80020708 80040004 80060100 80050005 0300001c 020c0000 80010001 80020708
15:16:17 ipsec,debug 80040004 80060100 80050002 0300001c 030c0000 80010001 80020708 80040004
15:16:17 ipsec,debug 80060100 80050001 03000018 04140000 80010001 80020708 80040004 80060100
15:16:17 ipsec,debug 03000018 05140000 80010001 80020708 80040004 80060120 0300001c 060c0000
15:16:17 ipsec,debug 80010001 80020708 80040004 800600c0 80050005 0300001c 070c0000 80010001
15:16:17 ipsec,debug 80020708 80040004 800600c0 80050002 0300001c 080c0000 80010001 80020708
15:16:17 ipsec,debug 80040004 800600c0 80050001 03000018 09140000 80010001 80020708 80040004
15:16:17 ipsec,debug 800600c0 03000018 0a140000 80010001 80020708 80040004 800600e0 0300001c
15:16:17 ipsec,debug 0b0c0000 80010001 80020708 80040004 80060080 80050005 0300001c 0c0c0000
15:16:17 ipsec,debug 80010001 80020708 80040004 80060080 80050002 0300001c 0d0c0000 80010001
15:16:17 ipsec,debug 80020708 80040004 80060080 80050001 03000018 0e140000 80010001 80020708
15:16:17 ipsec,debug 80040004 80060080 03000018 0f140000 80010001 80020708 80040004 800600a0
15:16:17 ipsec,debug 03000018 10030000 80010001 80020708 80040004 80050005 03000018 11030000
15:16:17 ipsec,debug 80010001 80020708 80040004 80050002 00000018 12030000 80010001 80020708
15:16:17 ipsec,debug 80040004 80050001
15:16:17 ipsec,debug begin.
15:16:17 ipsec,debug seen nptype=2(prop) len=480
15:16:17 ipsec,debug succeed.
15:16:17 ipsec,debug proposal #1 len=480
15:16:17 ipsec,debug begin.
15:16:17 ipsec,debug seen nptype=3(trns) len=28
15:16:17 ipsec,debug seen nptype=3(trns) len=28
15:16:17 ipsec,debug seen nptype=3(trns) len=28
15:16:17 ipsec,debug seen nptype=3(trns) len=24
15:16:17 ipsec,debug seen nptype=3(trns) len=24
15:16:17 ipsec,debug seen nptype=3(trns) len=28
15:16:17 ipsec,debug seen nptype=3(trns) len=28
15:16:17 ipsec,debug seen nptype=3(trns) len=28
15:16:17 ipsec,debug seen nptype=3(trns) len=24
15:16:17 ipsec,debug seen nptype=3(trns) len=24
15:16:17 ipsec,debug seen nptype=3(trns) len=28
15:16:17 ipsec,debug seen nptype=3(trns) len=28
15:16:17 ipsec,debug seen nptype=3(trns) len=28
15:16:17 ipsec,debug seen nptype=3(trns) len=24
15:16:17 ipsec,debug seen nptype=3(trns) len=24
15:16:17 ipsec,debug seen nptype=3(trns) len=24
15:16:17 ipsec,debug seen nptype=3(trns) len=24
15:16:17 ipsec,debug seen nptype=3(trns) len=24
15:16:17 ipsec,debug succeed.
15:16:17 ipsec,debug transform #1 len=28
15:16:17 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:17 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:17 ipsec,debug life duration was in TLV.
15:16:17 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:17 ipsec,debug UDP encapsulation requested
15:16:17 ipsec,debug type=Key Length, flag=0x8000, lorv=256
15:16:17 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha256
15:16:17 ipsec,debug transform #2 len=28
15:16:17 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:17 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:17 ipsec,debug life duration was in TLV.
15:16:17 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:17 ipsec,debug UDP encapsulation requested
15:16:17 ipsec,debug type=Key Length, flag=0x8000, lorv=256
15:16:17 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
15:16:17 ipsec,debug transform #3 len=28
15:16:17 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:17 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:17 ipsec,debug life duration was in TLV.
15:16:17 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:17 ipsec,debug UDP encapsulation requested
15:16:17 ipsec,debug type=Key Length, flag=0x8000, lorv=256
15:16:17 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-md5
15:16:17 ipsec,debug transform #4 len=24
15:16:17 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:17 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:17 ipsec,debug life duration was in TLV.
15:16:17 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:17 ipsec,debug UDP encapsulation requested
15:16:17 ipsec,debug type=Key Length, flag=0x8000, lorv=256
15:16:17 ipsec,debug transform #5 len=24
15:16:17 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:17 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:17 ipsec,debug life duration was in TLV.
15:16:17 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:17 ipsec,debug UDP encapsulation requested
15:16:17 ipsec,debug type=Key Length, flag=0x8000, lorv=288
15:16:17 ipsec,debug transform #6 len=28
15:16:17 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:17 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:17 ipsec,debug life duration was in TLV.
15:16:17 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:17 ipsec,debug UDP encapsulation requested
15:16:17 ipsec,debug type=Key Length, flag=0x8000, lorv=192
15:16:17 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha256
15:16:17 ipsec,debug transform #7 len=28
15:16:17 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:17 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:17 ipsec,debug life duration was in TLV.
15:16:17 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:17 ipsec,debug UDP encapsulation requested
15:16:17 ipsec,debug type=Key Length, flag=0x8000, lorv=192
15:16:17 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
15:16:17 ipsec,debug transform #8 len=28
15:16:17 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:17 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:17 ipsec,debug life duration was in TLV.
15:16:17 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:17 ipsec,debug UDP encapsulation requested
15:16:17 ipsec,debug type=Key Length, flag=0x8000, lorv=192
15:16:17 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-md5
15:16:17 ipsec,debug transform #9 len=24
15:16:17 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:17 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:17 ipsec,debug life duration was in TLV.
15:16:17 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:17 ipsec,debug UDP encapsulation requested
15:16:17 ipsec,debug type=Key Length, flag=0x8000, lorv=192
15:16:17 ipsec,debug transform #10 len=24
15:16:17 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:17 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:17 ipsec,debug life duration was in TLV.
15:16:17 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:17 ipsec,debug UDP encapsulation requested
15:16:17 ipsec,debug type=Key Length, flag=0x8000, lorv=224
15:16:17 ipsec,debug transform #11 len=28
15:16:17 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:17 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:17 ipsec,debug life duration was in TLV.
15:16:17 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:17 ipsec,debug UDP encapsulation requested
15:16:17 ipsec,debug type=Key Length, flag=0x8000, lorv=128
15:16:17 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha256
15:16:17 ipsec,debug transform #12 len=28
15:16:17 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:17 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:17 ipsec,debug life duration was in TLV.
15:16:17 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:17 ipsec,debug UDP encapsulation requested
15:16:17 ipsec,debug type=Key Length, flag=0x8000, lorv=128
15:16:17 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
15:16:17 ipsec,debug transform #13 len=28
15:16:17 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:17 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:17 ipsec,debug life duration was in TLV.
15:16:17 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:17 ipsec,debug UDP encapsulation requested
15:16:17 ipsec,debug type=Key Length, flag=0x8000, lorv=128
15:16:17 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-md5
15:16:17 ipsec,debug transform #14 len=24
15:16:17 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:17 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:17 ipsec,debug life duration was in TLV.
15:16:17 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:17 ipsec,debug UDP encapsulation requested
15:16:17 ipsec,debug type=Key Length, flag=0x8000, lorv=128
15:16:17 ipsec,debug transform #15 len=24
15:16:17 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:17 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:17 ipsec,debug life duration was in TLV.
15:16:17 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:17 ipsec,debug UDP encapsulation requested
15:16:17 ipsec,debug type=Key Length, flag=0x8000, lorv=160
15:16:17 ipsec,debug transform #16 len=24
15:16:17 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:17 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:17 ipsec,debug life duration was in TLV.
15:16:17 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:17 ipsec,debug UDP encapsulation requested
15:16:17 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha256
15:16:17 ipsec,debug transform #17 len=24
15:16:17 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:17 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:17 ipsec,debug life duration was in TLV.
15:16:17 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:17 ipsec,debug UDP encapsulation requested
15:16:17 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
15:16:17 ipsec,debug transform #18 len=24
15:16:17 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:17 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:17 ipsec,debug life duration was in TLV.
15:16:17 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:17 ipsec,debug UDP encapsulation requested
15:16:17 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-md5
15:16:17 ipsec,debug pair 1:
15:16:17 ipsec,debug 0x4a7bf8: next=(nil) tnext=0x4aa0a8
15:16:17 ipsec,debug 0x4aa0a8: next=(nil) tnext=0x4a92a8
15:16:17 ipsec,debug 0x4a92a8: next=(nil) tnext=0x4a92c0
15:16:17 ipsec,debug 0x4a92c0: next=(nil) tnext=0x4a8e20
15:16:17 ipsec,debug 0x4a8e20: next=(nil) tnext=0x4a8e38
15:16:17 ipsec,debug 0x4a8e38: next=(nil) tnext=0x4a8e50
15:16:17 ipsec,debug 0x4a8e50: next=(nil) tnext=0x4a77c0
15:16:17 ipsec,debug 0x4a77c0: next=(nil) tnext=0x4a77d8
15:16:17 ipsec,debug 0x4a77d8: next=(nil) tnext=0x4a77f0
15:16:17 ipsec,debug 0x4a77f0: next=(nil) tnext=0x4a7808
15:16:17 ipsec,debug 0x4a7808: next=(nil) tnext=0x4a8ea0
15:16:17 ipsec,debug 0x4a8ea0: next=(nil) tnext=0x4a8eb8
15:16:17 ipsec,debug 0x4a8eb8: next=(nil) tnext=0x4a8ed0
15:16:17 ipsec,debug 0x4a8ed0: next=(nil) tnext=0x4a8ee8
15:16:17 ipsec,debug 0x4a8ee8: next=(nil) tnext=0x4ac0d8
15:16:17 ipsec,debug 0x4ac0d8: next=(nil) tnext=0x4ac0f0
15:16:17 ipsec,debug 0x4ac0f0: next=(nil) tnext=0x4ac108
15:16:17 ipsec,debug 0x4ac108: next=(nil) tnext=(nil)
15:16:17 ipsec,debug proposal #1: 18 transform
15:16:17 ipsec,debug total SA len=44
15:16:17 ipsec,debug 00000001 00000001 00000024 01030401 c0f07df5 00000018 01030000 80050002
15:16:17 ipsec,debug 80040004 80010001 80020708
15:16:17 ipsec,debug begin.
15:16:17 ipsec,debug seen nptype=2(prop) len=36
15:16:17 ipsec,debug succeed.
15:16:17 ipsec,debug proposal #1 len=36
15:16:17 ipsec,debug begin.
15:16:17 ipsec,debug seen nptype=3(trns) len=24
15:16:17 ipsec,debug succeed.
15:16:17 ipsec,debug transform #1 len=24
15:16:17 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
15:16:17 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:17 ipsec,debug UDP encapsulation requested
15:16:17 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:17 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:17 ipsec,debug life duration was in TLV.
15:16:17 ipsec,debug pair 1:
15:16:17 ipsec,debug 0x4a85d0: next=(nil) tnext=(nil)
15:16:17 ipsec,debug proposal #1: 1 transform
15:16:17 ipsec transform number has been modified.
15:16:17 ipsec attribute has been modified.
15:16:17 ipsec,debug begin compare proposals.
15:16:17 ipsec,debug pair[1]: 0x4a85d0
15:16:17 ipsec,debug 0x4a85d0: next=(nil) tnext=(nil)
15:16:17 ipsec,debug prop#=1 prot-id=ESP spi-size=4 #trns=1 trns#=1 trns-id=3DES
15:16:17 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
15:16:17 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
15:16:17 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
15:16:17 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
15:16:17 ipsec,debug peer's single bundle:
15:16:17 ipsec,debug (proto_id=ESP spisize=4 spi=c0f07df5 spi_p=00000000 encmode=UDP-Transport reqid=0:0)
15:16:17 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-sha1)
15:16:17 ipsec,debug my single bundle:
15:16:17 ipsec,debug (proto_id=ESP spisize=4 spi=032449bf spi_p=00000000 encmode=UDP-Transport reqid=0:0)
15:16:17 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-sha256)
15:16:17 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-sha1)
15:16:17 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-md5)
15:16:17 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=256 authtype=254)
15:16:17 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=288 authtype=254)
15:16:17 ipsec,debug (trns_id=AES-CBC encklen=192 authtype=hmac-sha256)
15:16:17 ipsec,debug (trns_id=AES-CBC encklen=192 authtype=hmac-sha1)
15:16:17 ipsec,debug (trns_id=AES-CBC encklen=192 authtype=hmac-md5)
15:16:17 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=192 authtype=254)
15:16:17 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=224 authtype=254)
15:16:17 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-sha256)
15:16:17 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-sha1)
15:16:17 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-md5)
15:16:17 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=128 authtype=254)
15:16:17 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=160 authtype=254)
15:16:17 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-sha256)
15:16:17 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-sha1)
15:16:17 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-md5)
15:16:17 ipsec Adjusting my encmode UDP-Transport->Transport
15:16:17 ipsec Adjusting peer's encmode UDP-Transport(4)->Transport(2)
15:16:17 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:16:17 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:16:17 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:16:17 ipsec trns_id mismatched: my:AES-GCM-ICV16 peer:3DES
15:16:17 ipsec trns_id mismatched: my:AES-GCM-ICV16 peer:3DES
15:16:17 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:16:17 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:16:17 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:16:17 ipsec trns_id mismatched: my:AES-GCM-ICV16 peer:3DES
15:16:17 ipsec trns_id mismatched: my:AES-GCM-ICV16 peer:3DES
15:16:17 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:16:17 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:16:17 ipsec trns_id mismatched: my:AES-CBC peer:3DES
15:16:17 ipsec trns_id mismatched: my:AES-GCM-ICV16 peer:3DES
15:16:17 ipsec trns_id mismatched: my:AES-GCM-ICV16 peer:3DES
15:16:17 ipsec authtype mismatched: my:hmac-sha256 peer:hmac-sha1
15:16:17 ipsec,debug matched
15:16:17 ipsec,debug ===
15:16:17 ipsec,debug HASH(3) generate
15:16:17 ipsec,debug add payload of len 20, next type 0
15:16:17 ipsec,debug 60 bytes from my.public.ip[4500] to my.remote.server.ip[4500]
15:16:17 ipsec,debug 1 times of 64 bytes message will be sent to my.remote.server.ip[4500]
15:16:17 ipsec,debug encryption(3des)
15:16:17 ipsec,debug hmac(sha1)
15:16:17 ipsec,debug encklen=192 authklen=160
15:16:17 ipsec,debug generating 640 bits of key (dupkeymat=4)
15:16:17 ipsec,debug generating K1...K4 for KEYMAT.
15:16:17 ipsec,debug ba955a3e 6406a60a acc03644 d688b717 78bc4433 a37b779c 26821b35 7f02b28d
15:16:17 ipsec,debug d6949ec1 45527021 80aadb88 6f2c995a b760e3e8 5998ff85 72bffefa 1f0e4bdb
15:16:17 ipsec,debug 0f90da55 2121655a ffe65a4a a25f7bb7
15:16:17 ipsec,debug encryption(3des)
15:16:17 ipsec,debug hmac(sha1)
15:16:17 ipsec,debug encklen=192 authklen=160
15:16:17 ipsec,debug generating 640 bits of key (dupkeymat=4)
15:16:17 ipsec,debug generating K1...K4 for KEYMAT.
15:16:17 ipsec,debug 9407290d a70b6c3a 2ebbe8e1 63b65c6e 0c56f24b d68ecbd5 2a7b81ae 881ee8f8
15:16:17 ipsec,debug ba0575cc 42d539f4 3f7dd9f2 9dcec0c6 88746737 430eb94a 3c265388 8bf34c27
15:16:17 ipsec,debug 367e3141 688ef691 0bd159df f9d0836e
15:16:17 ipsec,debug KEYMAT computed.
15:16:17 ipsec,debug call pk_sendupdate
15:16:17 ipsec,debug encryption(3des)
15:16:17 ipsec,debug hmac(sha1)
15:16:17 ipsec,debug call pfkey_send_update_nat
15:16:17 ipsec IPsec-SA established: ESP/Transport my.remote.server.ip[4500]->my.public.ip[4500] spi=0x32449bf
15:16:17 ipsec,debug pfkey update sent.
15:16:17 ipsec,debug encryption(3des)
15:16:17 ipsec,debug hmac(sha1)
15:16:17 ipsec,debug call pfkey_send_add_nat
15:16:17 ipsec IPsec-SA established: ESP/Transport my.public.ip[4500]->my.remote.server.ip[4500] spi=0xc0f07df5
15:16:17 ipsec,debug pfkey add sent.
15:16:19 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:16:19 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
15:16:19 l2tp,debug,packet (M) Message-Type=SCCRQ
15:16:19 l2tp,debug,packet (M) Protocol-Version=0x01:00
15:16:19 l2tp,debug,packet (M) Framing-Capabilities=0x1
15:16:19 l2tp,debug,packet (M) Bearer-Capabilities=0x0
15:16:19 l2tp,debug,packet Firmware-Revision=0x1
15:16:19 l2tp,debug,packet (M) Host-Name="MikroTik"
15:16:19 l2tp,debug,packet Vendor-Name="MikroTik"
15:16:19 l2tp,debug,packet (M) Assigned-Tunnel-ID=29
15:16:19 l2tp,debug,packet (M) Receive-Window-Size=4
15:16:19 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
15:16:19 l2tp,debug,packet tunnel-id=29, session-id=0, ns=0, nr=1
15:16:19 l2tp,debug,packet (M) Message-Type=SCCRP
15:16:19 l2tp,debug,packet (M) Protocol-Version=0x01:00
15:16:19 l2tp,debug,packet (M) Framing-Capabilities=0x3
15:16:19 l2tp,debug,packet (M) Bearer-Capabilities=0x0
15:16:19 l2tp,debug,packet Firmware-Revision=0x690
15:16:19 l2tp,debug,packet (M) Host-Name="localhost"
15:16:19 l2tp,debug,packet Vendor-Name="xelerance.com"
15:16:19 l2tp,debug,packet (M) Assigned-Tunnel-ID=62537
15:16:19 l2tp,debug,packet (M) Receive-Window-Size=4
15:16:19 l2tp,debug tunnel 29 entering state: established
15:16:19 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:16:19 l2tp,debug,packet tunnel-id=62537, session-id=0, ns=1, nr=1
15:16:19 l2tp,debug,packet (M) Message-Type=SCCCN
15:16:19 l2tp,debug session 1 entering state: wait-reply
15:16:19 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:16:19 l2tp,debug,packet tunnel-id=29, session-id=0, ns=1, nr=2
15:16:19 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:16:19 l2tp,debug,packet tunnel-id=62537, session-id=0, ns=2, nr=1
15:16:19 l2tp,debug,packet (M) Message-Type=ICRQ
15:16:19 l2tp,debug,packet (M) Assigned-Session-ID=1
15:16:19 l2tp,debug,packet (M) Call-Serial-Number=19
15:16:19 l2tp,debug,packet (M) Bearer-Type=0x0
15:16:19 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
15:16:19 l2tp,debug,packet tunnel-id=29, session-id=1, ns=1, nr=3
15:16:19 l2tp,debug,packet (M) Message-Type=ICRP
15:16:19 l2tp,debug,packet (M) Assigned-Session-ID=38678
15:16:19 l2tp,debug session 1 entering state: established
15:16:19 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:16:19 l2tp,debug,packet tunnel-id=62537, session-id=38678, ns=3, nr=2
15:16:19 l2tp,debug,packet (M) Message-Type=ICCN
15:16:19 l2tp,debug,packet (M) Framing-Type=0x1
15:16:19 l2tp,debug,packet (M) Tx-Connect-Speed-BPS=100000000
15:16:19 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:16:19 l2tp,debug,packet tunnel-id=29, session-id=0, ns=2, nr=3
15:16:19 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:16:19 l2tp,debug,packet tunnel-id=29, session-id=1, ns=2, nr=4
15:16:19 l2tp,ppp,debug l2tp-out1: LCP lowerup
15:16:19 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfReq id=0x2d
15:16:19 l2tp,ppp,debug,packet <mru 1450>
15:16:19 l2tp,ppp,debug,packet <magic 0x4f21db47>
15:16:19 l2tp,ppp,debug,packet <mrru 1600>
15:16:19 l2tp,ppp,debug l2tp-out1: LCP open
15:16:19 l2tp,ppp,debug l2tp-out1: PPP received non-LCP packet (0x6970) when LCP not open
15:16:19 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfReq id=0x1
15:16:19 l2tp,ppp,debug,packet <mru 1410>
15:16:19 l2tp,ppp,debug,packet <asyncmap 0x0>
15:16:19 l2tp,ppp,debug,packet <magic 0x6123cce9>
15:16:19 l2tp,ppp,debug,packet <pcomp>
15:16:19 l2tp,ppp,debug,packet <accomp>
15:16:19 l2tp,ppp,debug,packet <auth chap>
15:16:19 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfRej id=0x1
15:16:19 l2tp,ppp,debug,packet <asyncmap 0x0>
15:16:19 l2tp,ppp,debug,packet <pcomp>
15:16:19 l2tp,ppp,debug,packet <accomp>
15:16:19 l2tp,ppp,debug,packet <auth chap>
15:16:19 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfRej id=0x2d
15:16:19 l2tp,ppp,debug,packet <mrru 1600>
15:16:19 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfReq id=0x2e
15:16:19 l2tp,ppp,debug,packet <mru 1450>
15:16:19 l2tp,ppp,debug,packet <magic 0x4f21db47>
15:16:19 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfReq id=0x2
15:16:19 l2tp,ppp,debug,packet <mru 1410>
15:16:19 l2tp,ppp,debug,packet <magic 0x6123cce9>
15:16:19 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfAck id=0x2
15:16:19 l2tp,ppp,debug,packet <mru 1410>
15:16:19 l2tp,ppp,debug,packet <magic 0x6123cce9>
15:16:19 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfAck id=0x2e
15:16:19 l2tp,ppp,debug,packet <mru 1450>
15:16:19 l2tp,ppp,debug,packet <magic 0x4f21db47>
15:16:19 l2tp,ppp,debug l2tp-out1: LCP opened
15:16:19 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP TermReq id=0x3
15:16:19 l2tp,ppp,debug,packet peer refused to authenticate
15:16:19 l2tp,ppp,debug l2tp-out1: LCP closed
15:16:19 l2tp,ppp,debug l2tp-out1: CCP lowerdown
15:16:19 l2tp,ppp,debug l2tp-out1: CCP down event in initial state
15:16:19 l2tp,ppp,debug l2tp-out1: BCP lowerdown
15:16:19 l2tp,ppp,debug l2tp-out1: BCP down event in initial state
15:16:19 l2tp,ppp,debug l2tp-out1: IPCP lowerdown
15:16:19 l2tp,ppp,debug l2tp-out1: IPCP down event in initial state
15:16:19 l2tp,ppp,debug l2tp-out1: IPV6CP lowerdown
15:16:19 l2tp,ppp,debug l2tp-out1: IPV6CP down event in initial state
15:16:19 l2tp,ppp,debug l2tp-out1: MPLSCP lowerdown
15:16:19 l2tp,ppp,debug l2tp-out1: MPLSCP down event in initial state
15:16:19 l2tp,ppp,debug,packet l2tp-out1: sent LCP TermAck id=0x3
15:16:19 l2tp,ppp,debug l2tp-out1: LCP lowerdown
15:16:19 l2tp,ppp,debug l2tp-out1: CCP close
15:16:19 l2tp,ppp,debug l2tp-out1: BCP close
15:16:19 l2tp,ppp,debug l2tp-out1: IPCP close
15:16:19 l2tp,ppp,debug l2tp-out1: IPV6CP close
15:16:19 l2tp,ppp,debug l2tp-out1: MPLSCP close
15:16:19 l2tp,ppp,info l2tp-out1: terminating...
15:16:19 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:16:19 l2tp,debug,packet tunnel-id=62537, session-id=38678, ns=4, nr=2
15:16:19 l2tp,debug,packet (M) Message-Type=CDN
15:16:19 l2tp,debug,packet (M) Result-Code=1
15:16:19 l2tp,debug,packet (M) Assigned-Session-ID=1
15:16:19 l2tp,debug session 1 entering state: stopping
15:16:19 l2tp,ppp,debug l2tp-out1: LCP lowerdown
15:16:19 l2tp,ppp,debug l2tp-out1: LCP down event in starting state
15:16:19 l2tp,ppp,info l2tp-out1: disconnected
15:16:19 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:16:19 l2tp,debug,packet tunnel-id=29, session-id=1, ns=2, nr=5
15:16:19 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
15:16:19 l2tp,debug,packet tunnel-id=29, session-id=1, ns=2, nr=5
15:16:19 l2tp,debug,packet (M) Message-Type=CDN
15:16:19 l2tp,debug,packet (M) Result-Code=2
15:16:19 l2tp,debug,packet Error-Code=2
15:16:19 l2tp,debug,packet Error-Message="Result Code: expected at least 10, got 8"
15:16:19 l2tp,debug,packet (M) Assigned-Session-ID=38678
15:16:19 l2tp,debug,packet sent control message (ack) to my.remote.server.ip:1701 from my.public.ip:1701
15:16:19 l2tp,debug,packet tunnel-id=62537, session-id=0, ns=5, nr=3
15:16:19 l2tp,debug session 1 entering state: stopping
15:16:19 l2tp,debug session 1 entering state: dead
15:16:19 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
15:16:19 l2tp,debug,packet tunnel-id=62537, session-id=0, ns=5, nr=3
15:16:19 l2tp,debug,packet (M) Message-Type=StopCCN
15:16:19 l2tp,debug,packet (M) Result-Code=1
15:16:19 l2tp,debug,packet (M) Assigned-Tunnel-ID=29
15:16:19 l2tp,debug tunnel 29 entering state: stopping
15:16:19 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
15:16:19 l2tp,debug,packet tunnel-id=29, session-id=0, ns=3, nr=6
15:16:19 l2tp,debug tunnel 29 entering state: dead
15:16:19 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
15:16:19 l2tp,debug,packet tunnel-id=29, session-id=0, ns=3, nr=6
15:16:19 l2tp,debug,packet (M) Message-Type=StopCCN
15:16:19 l2tp,debug,packet (M) Assigned-Tunnel-ID=62537
15:16:19 l2tp,debug,packet (M) Result-Code=2
15:16:19 l2tp,debug,packet Error-Code=2
15:16:19 l2tp,debug,packet Error-Message="Result Code: expected at least 10, got 8"
15:16:19 l2tp,debug,packet sent control message (ack) to my.remote.server.ip:1701 from my.public.ip:1701
15:16:19 l2tp,debug,packet tunnel-id=62537, session-id=0, ns=6, nr=4
15:16:20 ipsec,debug Deleting a Ph2...
15:16:20 ipsec,debug hash(sha1)
15:16:20 ipsec,debug 76 bytes from my.public.ip[4500] to my.remote.server.ip[4500]
15:16:20 ipsec,debug 1 times of 80 bytes message will be sent to my.remote.server.ip[4500]
15:16:20 ipsec,debug sendto Information delete.
15:16:20 ipsec purged IPsec-SA proto_id=ESP spi=0xc0f07df5
15:16:20 ipsec purged IPsec-SA proto_id=ESP spi=0x32449bf
15:16:20 ipsec,debug Removing PH1...
15:16:20 ipsec,debug hash(sha1)
15:16:20 ipsec,debug 84 bytes from my.public.ip[4500] to my.remote.server.ip[4500]
15:16:20 ipsec,debug 1 times of 88 bytes message will be sent to my.remote.server.ip[4500]
15:16:20 ipsec,debug sendto Information delete.
15:16:20 ipsec,info ISAKMP-SA deleted my.public.ip[4500]-my.remote.server.ip[4500] spi:ea2e67e28263e2ff:efb17e26d27d7444 rekey:1
15:16:20 ipsec KA remove: my.public.ip[4500]->my.remote.server.ip[4500]
15:16:20 ipsec,debug KA tree dump: my.public.ip[4500]->my.remote.server.ip[4500] (in_use=1)
15:16:20 ipsec,debug KA removing this one...
It doesn’t seem that the downgrade has succeeded, given that the log header still says 6.48. Have you just uploaded the 6.46.8 to the machine and rebooted it or have you properly used /system package downgrade?
Setting pfs to none in the default proposal actually did help, as your log shows that now Phase 2 succeeds (you don’t get NO_PROPOSAL_CHOSEN any more), but the issue is the L2TP negotiation.
Adding md5 to auth-algorithms list had no effect, as the responder offers just a single transform for Phase 2:
trns_id=3DES encklen=0 authtype=hmac-sha1
3des is… well… outdated. Even Windows 7 support AES128.
The issue in L2TP negotiation is the following:
15:15:48 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP TermReq id=0x3
15:15:48 l2tp,ppp,debug,packet peer refused to authenticate
You’d have to sniff the packets into a file (which is not exactly easy when they are sent using IPsec, but doable using /ip firewall mangle rules aith action=sniff-tzsp) to see what exactly the TermReq from the server says. Try to create your own /ppp profile row as a copy of the default one but with use-mpls=no and tell the /interface l2tp-client to use that profile, but it is just a wild guess based on the fact that the LCP TermReq comes right after the Tik sends MPLSCP ConfReq, but it may be a pure coincidence.
It doesn’t seem that the downgrade has succeeded, given that the log header still says 6.48. Have you just uploaded the 6.46.8 to the machine and rebooted it or have you properly used > /system package downgrade> ?
You are right. It restarted after upgrade and I thought everything is O.K.
I just checked the log:
08:57:35 system,info installed routeros-smips-6.46.8
08:57:35 system,error not enough space for upgrade
08:57:36 system,info router rebooted
I will free up some space and will try it later.
Last night I thicked CHAP and now it is connecting.
# jan/29/2021 9:14:41 by RouterOS 6.48
# software id = L809-98LV
#
09:14:43 l2tp,ppp,info l2tp-out1: initializing...
09:14:43 l2tp,ppp,info l2tp-out1: connecting...
09:14:43 l2tp,debug tunnel 11 entering state: wait-ctl-reply
09:14:43 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
09:14:43 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
09:14:43 l2tp,debug,packet (M) Message-Type=SCCRQ
09:14:43 l2tp,debug,packet (M) Protocol-Version=0x01:00
09:14:43 l2tp,debug,packet (M) Framing-Capabilities=0x1
09:14:43 l2tp,debug,packet (M) Bearer-Capabilities=0x0
09:14:43 l2tp,debug,packet Firmware-Revision=0x1
09:14:43 l2tp,debug,packet (M) Host-Name="MikroTik"
09:14:43 l2tp,debug,packet Vendor-Name="MikroTik"
09:14:43 l2tp,debug,packet (M) Assigned-Tunnel-ID=11
09:14:43 l2tp,debug,packet (M) Receive-Window-Size=4
09:14:43 ipsec acquire for policy: my.public.ip:1701 <=> my.remote.server.ip:1701 ip-proto:17
09:14:43 ipsec peer is IKEv1
09:14:43 ipsec,debug (proto_id=ESP spisize=4 spi=00000000 spi_p=00000000 encmode=Transport reqid=0:0)
09:14:43 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-sha256)
09:14:43 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-sha1)
09:14:43 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-md5)
09:14:43 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=256 authtype=254)
09:14:43 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=288 authtype=254)
09:14:43 ipsec,debug (trns_id=AES-CBC encklen=192 authtype=hmac-sha256)
09:14:43 ipsec,debug (trns_id=AES-CBC encklen=192 authtype=hmac-sha1)
09:14:43 ipsec,debug (trns_id=AES-CBC encklen=192 authtype=hmac-md5)
09:14:43 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=192 authtype=254)
09:14:43 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=224 authtype=254)
09:14:43 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-sha256)
09:14:43 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-sha1)
09:14:43 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-md5)
09:14:43 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=128 authtype=254)
09:14:43 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=160 authtype=254)
09:14:43 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-sha256)
09:14:43 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-sha1)
09:14:43 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-md5)
09:14:43 ipsec IPsec-SA request for my.remote.server.ip queued due to no phase1 found.
09:14:43 ipsec,debug ===
09:14:43 ipsec,info initiate new phase 1 (Identity Protection): my.public.ip[500]<=>my.remote.server.ip[500]
09:14:43 ipsec,debug new cookie:
09:14:43 ipsec,debug de70661ad74c94d9
09:14:43 ipsec,debug add payload of len 248, next type 13
09:14:43 ipsec,debug add payload of len 16, next type 13
09:14:43 ipsec,debug add payload of len 16, next type 13
09:14:43 ipsec,debug add payload of len 16, next type 13
09:14:43 ipsec,debug add payload of len 16, next type 13
09:14:43 ipsec,debug add payload of len 16, next type 13
09:14:43 ipsec,debug add payload of len 16, next type 13
09:14:43 ipsec,debug add payload of len 16, next type 13
09:14:43 ipsec,debug add payload of len 16, next type 13
09:14:43 ipsec,debug add payload of len 16, next type 13
09:14:43 ipsec,debug add payload of len 16, next type 13
09:14:43 ipsec,debug add payload of len 16, next type 13
09:14:43 ipsec,debug add payload of len 16, next type 13
09:14:43 ipsec,debug add payload of len 16, next type 0
09:14:43 ipsec,debug 540 bytes from my.public.ip[500] to my.remote.server.ip[500]
09:14:43 ipsec,debug 1 times of 540 bytes message will be sent to my.remote.server.ip[500]
09:14:43 ipsec sent phase1 packet my.public.ip[500]<=>my.remote.server.ip[500] de70661ad74c94d9:0000000000000000
09:14:43 ipsec,debug ===== received 156 bytes from my.remote.server.ip[500] to my.public.ip[500]
09:14:43 ipsec,debug begin.
09:14:43 ipsec,debug seen nptype=1(sa) len=56
09:14:43 ipsec,debug seen nptype=13(vid) len=12
09:14:43 ipsec,debug seen nptype=13(vid) len=20
09:14:43 ipsec,debug seen nptype=13(vid) len=20
09:14:43 ipsec,debug seen nptype=13(vid) len=20
09:14:43 ipsec,debug succeed.
09:14:43 ipsec received Vendor ID: draft-ietf-ipsra-isakmp-xauth-06.txt
09:14:43 ipsec received Vendor ID: DPD
09:14:43 ipsec,debug remote supports DPD
09:14:43 ipsec received Vendor ID: CISCO-UNITY
09:14:43 ipsec received Vendor ID: RFC 3947
09:14:43 ipsec my.remote.server.ip Selected NAT-T version: RFC 3947
09:14:43 ipsec,debug total SA len=52
09:14:43 ipsec,debug 00000001 00000001 0000002c 01010001 00000024 01010000 80010005 80020002
09:14:43 ipsec,debug 8004000e 80030001 800b0001 000c0004 00015180
09:14:43 ipsec,debug begin.
09:14:43 ipsec,debug seen nptype=2(prop) len=44
09:14:43 ipsec,debug succeed.
09:14:43 ipsec,debug proposal #1 len=44
09:14:43 ipsec,debug begin.
09:14:43 ipsec,debug seen nptype=3(trns) len=36
09:14:43 ipsec,debug succeed.
09:14:43 ipsec,debug transform #1 len=36
09:14:43 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=3DES-CBC
09:14:43 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=SHA
09:14:43 ipsec,debug hash(sha1)
09:14:43 ipsec,debug type=Group Description, flag=0x8000, lorv=2048-bit MODP group
09:14:43 ipsec,debug dh(modp2048)
09:14:43 ipsec,debug type=Authentication Method, flag=0x8000, lorv=pre-shared key
09:14:43 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
09:14:43 ipsec,debug type=Life Duration, flag=0x0000, lorv=4
09:14:43 ipsec,debug pair 1:
09:14:43 ipsec,debug 0x4a8c48: next=(nil) tnext=(nil)
09:14:43 ipsec,debug proposal #1: 1 transform
09:14:43 ipsec,debug -checking with pre-shared key auth-
09:14:43 ipsec,debug prop#=1, prot-id=ISAKMP, spi-size=0, #trns=1
09:14:43 ipsec,debug trns#=1, trns-id=IKE
09:14:43 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=3DES-CBC
09:14:43 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=SHA
09:14:43 ipsec,debug type=Group Description, flag=0x8000, lorv=2048-bit MODP group
09:14:43 ipsec,debug type=Authentication Method, flag=0x8000, lorv=pre-shared key
09:14:43 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
09:14:43 ipsec,debug type=Life Duration, flag=0x0000, lorv=4
09:14:43 ipsec,debug -compare proposal #1: Local:Peer
09:14:43 ipsec,debug (lifetime = 86400:86400)
09:14:43 ipsec,debug (lifebyte = 0:0)
09:14:43 ipsec,debug enctype = AES-CBC:3DES-CBC
09:14:43 ipsec,debug (encklen = 256:0)
09:14:43 ipsec,debug hashtype = SHA:SHA
09:14:43 ipsec,debug authmethod = pre-shared key:pre-shared key
09:14:43 ipsec,debug dh_group = 2048-bit MODP group:2048-bit MODP group
09:14:43 ipsec,debug -compare proposal #2: Local:Peer
09:14:43 ipsec,debug (lifetime = 86400:86400)
09:14:43 ipsec,debug (lifebyte = 0:0)
09:14:43 ipsec,debug enctype = AES-CBC:3DES-CBC
09:14:43 ipsec,debug (encklen = 256:0)
09:14:43 ipsec,debug hashtype = SHA:SHA
09:14:43 ipsec,debug authmethod = pre-shared key:pre-shared key
09:14:43 ipsec,debug dh_group = 1024-bit MODP group:2048-bit MODP group
09:14:43 ipsec,debug -compare proposal #3: Local:Peer
09:14:43 ipsec,debug (lifetime = 86400:86400)
09:14:43 ipsec,debug (lifebyte = 0:0)
09:14:43 ipsec,debug enctype = AES-CBC:3DES-CBC
09:14:43 ipsec,debug (encklen = 128:0)
09:14:43 ipsec,debug hashtype = SHA:SHA
09:14:43 ipsec,debug authmethod = pre-shared key:pre-shared key
09:14:43 ipsec,debug dh_group = 2048-bit MODP group:2048-bit MODP group
09:14:43 ipsec,debug -compare proposal #4: Local:Peer
09:14:43 ipsec,debug (lifetime = 86400:86400)
09:14:43 ipsec,debug (lifebyte = 0:0)
09:14:43 ipsec,debug enctype = AES-CBC:3DES-CBC
09:14:43 ipsec,debug (encklen = 128:0)
09:14:43 ipsec,debug hashtype = SHA:SHA
09:14:43 ipsec,debug authmethod = pre-shared key:pre-shared key
09:14:43 ipsec,debug dh_group = 1024-bit MODP group:2048-bit MODP group
09:14:43 ipsec,debug -compare proposal #5: Local:Peer
09:14:43 ipsec,debug (lifetime = 86400:86400)
09:14:43 ipsec,debug (lifebyte = 0:0)
09:14:43 ipsec,debug enctype = 3DES-CBC:3DES-CBC
09:14:43 ipsec,debug (encklen = 0:0)
09:14:43 ipsec,debug hashtype = SHA:SHA
09:14:43 ipsec,debug authmethod = pre-shared key:pre-shared key
09:14:43 ipsec,debug dh_group = 2048-bit MODP group:2048-bit MODP group
09:14:43 ipsec,debug -an acceptable proposal found-
09:14:43 ipsec,debug dh(modp2048)
09:14:43 ipsec,debug -agreed on pre-shared key auth-
09:14:43 ipsec,debug ===
09:14:43 ipsec,debug dh(modp2048)
09:14:44 ipsec,debug my.remote.server.ip Hashing my.remote.server.ip[500] with algo #2
09:14:44 ipsec,debug hash(sha1)
09:14:44 ipsec,debug my.public.ip Hashing my.public.ip[500] with algo #2
09:14:44 ipsec,debug hash(sha1)
09:14:44 ipsec Adding remote and local NAT-D payloads.
09:14:44 ipsec,debug add payload of len 256, next type 10
09:14:44 ipsec,debug add payload of len 24, next type 20
09:14:44 ipsec,debug add payload of len 20, next type 20
09:14:44 ipsec,debug add payload of len 20, next type 0
09:14:44 ipsec,debug 364 bytes from my.public.ip[500] to my.remote.server.ip[500]
09:14:44 ipsec,debug 1 times of 364 bytes message will be sent to my.remote.server.ip[500]
09:14:44 ipsec sent phase1 packet my.public.ip[500]<=>my.remote.server.ip[500] de70661ad74c94d9:9a281c2aa8e36a2a
09:14:44 ipsec,debug ===== received 372 bytes from my.remote.server.ip[500] to my.public.ip[500]
09:14:44 ipsec,debug begin.
09:14:44 ipsec,debug seen nptype=4(ke) len=260
09:14:44 ipsec,debug seen nptype=10(nonce) len=36
09:14:44 ipsec,debug seen nptype=20(nat-d) len=24
09:14:44 ipsec,debug seen nptype=20(nat-d) len=24
09:14:44 ipsec,debug succeed.
09:14:44 ipsec,debug my.public.ip Hashing my.public.ip[500] with algo #2
09:14:44 ipsec,debug hash(sha1)
09:14:44 ipsec,debug NAT-D payload #0 doesn't match
09:14:44 ipsec,debug my.remote.server.ip Hashing my.remote.server.ip[500] with algo #2
09:14:44 ipsec,debug hash(sha1)
09:14:44 ipsec,debug NAT-D payload #1 verified
09:14:44 ipsec NAT detected: ME
09:14:44 ipsec KA list add: my.public.ip[4500]->my.remote.server.ip[4500]
09:14:44 ipsec,debug ===
09:14:44 ipsec,debug dh(modp2048)
09:14:44 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
09:14:44 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
09:14:44 l2tp,debug,packet (M) Message-Type=SCCRQ
09:14:44 l2tp,debug,packet (M) Protocol-Version=0x01:00
09:14:44 l2tp,debug,packet (M) Framing-Capabilities=0x1
09:14:44 l2tp,debug,packet (M) Bearer-Capabilities=0x0
09:14:44 l2tp,debug,packet Firmware-Revision=0x1
09:14:44 l2tp,debug,packet (M) Host-Name="MikroTik"
09:14:44 l2tp,debug,packet Vendor-Name="MikroTik"
09:14:44 l2tp,debug,packet (M) Assigned-Tunnel-ID=11
09:14:44 l2tp,debug,packet (M) Receive-Window-Size=4
09:14:44 ipsec,debug nonce 1:
09:14:44 ipsec,debug 9d6d297e eab95e14 cefa7a18 3fa1ccbc 131f55ae 8dde02e6
09:14:44 ipsec,debug nonce 2:
09:14:44 ipsec,debug b2ccc579 c0d82e62 dc56fe08 2de436fd 29ce7d41 cac824f1 65d3ec7b b25a450c
09:14:44 ipsec,debug SKEYID computed:
09:14:44 ipsec,debug 9b1e675b 103e2c7c 490b64d0 b76626e7 ce9c8aab
09:14:44 ipsec,debug SKEYID_d computed:
09:14:44 ipsec,debug 31a5338d 1b4662cc 1ddcd4ae 79f5d0d2 50339fda
09:14:44 ipsec,debug SKEYID_a computed:
09:14:44 ipsec,debug d67e9d16 0a7afbf9 30085cad 5c851029 ea0bcf8b
09:14:44 ipsec,debug SKEYID_e computed:
09:14:44 ipsec,debug 28f9476d 7cdcc08f 19f698e3 613663e7 7d5a590d
09:14:44 ipsec,debug hash(sha1)
09:14:44 ipsec,debug len(SKEYID_e) < len(Ka) (20 < 24), generating long key (Ka = K1 | K2 | ...)
09:14:44 ipsec,debug compute intermediate encryption key K1
09:14:44 ipsec,debug 00
09:14:44 ipsec,debug cb024431 78d5087f b1a86b52 6aa99a87 fde04f5b
09:14:44 ipsec,debug compute intermediate encryption key K2
09:14:44 ipsec,debug cb024431 78d5087f b1a86b52 6aa99a87 fde04f5b
09:14:44 ipsec,debug f90c7e61 5081f886 a4255fa4 33a3f58c fb8f009f
09:14:44 ipsec,debug final encryption key computed:
09:14:44 ipsec,debug cb024431 78d5087f b1a86b52 6aa99a87 fde04f5b f90c7e61
09:14:44 ipsec,debug hash(sha1)
09:14:44 ipsec,debug IV computed:
09:14:44 ipsec,debug 1f3dd8d7 9416b7d5
09:14:44 ipsec,debug use ID type of IPv4_address
09:14:44 ipsec,debug add payload of len 8, next type 8
09:14:44 ipsec,debug add payload of len 20, next type 0
09:14:44 ipsec,debug 68 bytes from my.public.ip[4500] to my.remote.server.ip[4500]
09:14:44 ipsec,debug 1 times of 72 bytes message will be sent to my.remote.server.ip[4500]
09:14:44 ipsec sent phase1 packet my.public.ip[4500]<=>my.remote.server.ip[4500] de70661ad74c94d9:9a281c2aa8e36a2a
09:14:44 ipsec,debug ===== received 68 bytes from my.remote.server.ip[4500] to my.public.ip[4500]
09:14:44 ipsec,debug begin.
09:14:44 ipsec,debug seen nptype=5(id) len=12
09:14:44 ipsec,debug seen nptype=8(hash) len=24
09:14:44 ipsec,debug succeed.
09:14:44 ipsec,debug HASH received:
09:14:44 ipsec,debug 428670eb 8c9d9837 d1681245 a85d927a a55fe8d8
09:14:44 ipsec,debug HASH for PSK validated.
09:14:44 ipsec,debug my.remote.server.ip peer's ID:
09:14:44 ipsec,debug 01000000 25dc8412
09:14:44 ipsec,debug ===
09:14:44 ipsec,info ISAKMP-SA established my.public.ip[4500]-my.remote.server.ip[4500] spi:de70661ad74c94d9:9a281c2aa8e36a2a
09:14:44 ipsec,debug ===
09:14:45 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
09:14:45 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
09:14:45 l2tp,debug,packet (M) Message-Type=SCCRQ
09:14:45 l2tp,debug,packet (M) Protocol-Version=0x01:00
09:14:45 l2tp,debug,packet (M) Framing-Capabilities=0x1
09:14:45 l2tp,debug,packet (M) Bearer-Capabilities=0x0
09:14:45 l2tp,debug,packet Firmware-Revision=0x1
09:14:45 l2tp,debug,packet (M) Host-Name="MikroTik"
09:14:45 l2tp,debug,packet Vendor-Name="MikroTik"
09:14:45 l2tp,debug,packet (M) Assigned-Tunnel-ID=11
09:14:45 l2tp,debug,packet (M) Receive-Window-Size=4
09:14:45 ipsec,debug ===
09:14:45 ipsec,debug begin QUICK mode.
09:14:45 ipsec initiate new phase 2 negotiation: my.public.ip[4500]<=>my.remote.server.ip[4500]
09:14:45 ipsec,debug hash(sha1)
09:14:45 ipsec,debug call pfkey_send_getspi 9
09:14:45 ipsec,debug pfkey GETSPI sent: ESP/Transport my.remote.server.ip[4500]->my.public.ip[4500]
09:14:45 ipsec,debug pfkey getspi sent.
09:14:45 ipsec NAT detected -> UDP encapsulation (ENC_MODE 2->4).
09:14:45 ipsec,debug use local ID type IPv4_address
09:14:45 ipsec,debug use remote ID type IPv4_address
09:14:45 ipsec,debug IDci:
09:14:45 ipsec,debug 011106a5 c0a80553
09:14:45 ipsec,debug IDcr:
09:14:45 ipsec,debug 011106a5 25dc8412
09:14:45 ipsec,debug NAT-OAi:
09:14:45 ipsec,debug 01000000 c0a80553
09:14:45 ipsec,debug NAT-OAr:
09:14:45 ipsec,debug 01000000 25dc8412
09:14:45 ipsec,debug add payload of len 488, next type 10
09:14:45 ipsec,debug add payload of len 24, next type 5
09:14:45 ipsec,debug add payload of len 8, next type 5
09:14:45 ipsec,debug add payload of len 8, next type 21
09:14:45 ipsec,debug add payload of len 8, next type 21
09:14:45 ipsec,debug add payload of len 8, next type 0
09:14:45 ipsec,debug add payload of len 20, next type 1
09:14:45 ipsec,debug 628 bytes from my.public.ip[4500] to my.remote.server.ip[4500]
09:14:45 ipsec,debug 1 times of 632 bytes message will be sent to my.remote.server.ip[4500]
09:14:45 ipsec sent phase2 packet my.public.ip[4500]<=>my.remote.server.ip[4500] de70661ad74c94d9:9a281c2aa8e36a2a:b47ef949
09:14:45 ipsec,debug ===== received 188 bytes from my.remote.server.ip[4500] to my.public.ip[4500]
09:14:45 ipsec,debug begin.
09:14:45 ipsec,debug seen nptype=8(hash) len=24
09:14:45 ipsec,debug seen nptype=1(sa) len=48
09:14:45 ipsec,debug seen nptype=10(nonce) len=36
09:14:45 ipsec,debug seen nptype=5(id) len=12
09:14:45 ipsec,debug seen nptype=5(id) len=12
09:14:45 ipsec,debug seen nptype=21(nat-oa) len=12
09:14:45 ipsec,debug seen nptype=21(nat-oa) len=12
09:14:45 ipsec,debug succeed.
09:14:45 ipsec,debug IDci matches NAT-OAi.
09:14:45 ipsec,debug IDcr matches proposal.
09:14:45 ipsec,debug HASH allocated:hbuf->l=184 actual:tlen=156
09:14:45 ipsec,debug HASH(2) received:
09:14:45 ipsec,debug 6da109c7 cc392eea c4898a91 69d618c0 9377cb76
09:14:45 ipsec,debug total SA len=488
09:14:45 ipsec,debug 00000001 00000001 000001e0 01030412 0bdf2e06 0300001c 010c0000 80010001
09:14:45 ipsec,debug 80020708 80040004 80060100 80050005 0300001c 020c0000 80010001 80020708
09:14:45 ipsec,debug 80040004 80060100 80050002 0300001c 030c0000 80010001 80020708 80040004
09:14:45 ipsec,debug 80060100 80050001 03000018 04140000 80010001 80020708 80040004 80060100
09:14:45 ipsec,debug 03000018 05140000 80010001 80020708 80040004 80060120 0300001c 060c0000
09:14:45 ipsec,debug 80010001 80020708 80040004 800600c0 80050005 0300001c 070c0000 80010001
09:14:45 ipsec,debug 80020708 80040004 800600c0 80050002 0300001c 080c0000 80010001 80020708
09:14:45 ipsec,debug 80040004 800600c0 80050001 03000018 09140000 80010001 80020708 80040004
09:14:45 ipsec,debug 800600c0 03000018 0a140000 80010001 80020708 80040004 800600e0 0300001c
09:14:45 ipsec,debug 0b0c0000 80010001 80020708 80040004 80060080 80050005 0300001c 0c0c0000
09:14:45 ipsec,debug 80010001 80020708 80040004 80060080 80050002 0300001c 0d0c0000 80010001
09:14:45 ipsec,debug 80020708 80040004 80060080 80050001 03000018 0e140000 80010001 80020708
09:14:45 ipsec,debug 80040004 80060080 03000018 0f140000 80010001 80020708 80040004 800600a0
09:14:45 ipsec,debug 03000018 10030000 80010001 80020708 80040004 80050005 03000018 11030000
09:14:45 ipsec,debug 80010001 80020708 80040004 80050002 00000018 12030000 80010001 80020708
09:14:45 ipsec,debug 80040004 80050001
09:14:45 ipsec,debug begin.
09:14:45 ipsec,debug seen nptype=2(prop) len=480
09:14:45 ipsec,debug succeed.
09:14:45 ipsec,debug proposal #1 len=480
09:14:45 ipsec,debug begin.
09:14:45 ipsec,debug seen nptype=3(trns) len=28
09:14:45 ipsec,debug seen nptype=3(trns) len=28
09:14:45 ipsec,debug seen nptype=3(trns) len=28
09:14:45 ipsec,debug seen nptype=3(trns) len=24
09:14:45 ipsec,debug seen nptype=3(trns) len=24
09:14:45 ipsec,debug seen nptype=3(trns) len=28
09:14:45 ipsec,debug seen nptype=3(trns) len=28
09:14:45 ipsec,debug seen nptype=3(trns) len=28
09:14:45 ipsec,debug seen nptype=3(trns) len=24
09:14:45 ipsec,debug seen nptype=3(trns) len=24
09:14:45 ipsec,debug seen nptype=3(trns) len=28
09:14:45 ipsec,debug seen nptype=3(trns) len=28
09:14:45 ipsec,debug seen nptype=3(trns) len=28
09:14:45 ipsec,debug seen nptype=3(trns) len=24
09:14:45 ipsec,debug seen nptype=3(trns) len=24
09:14:45 ipsec,debug seen nptype=3(trns) len=24
09:14:45 ipsec,debug seen nptype=3(trns) len=24
09:14:45 ipsec,debug seen nptype=3(trns) len=24
09:14:45 ipsec,debug succeed.
09:14:45 ipsec,debug transform #1 len=28
09:14:45 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
09:14:45 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
09:14:45 ipsec,debug life duration was in TLV.
09:14:45 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
09:14:45 ipsec,debug UDP encapsulation requested
09:14:45 ipsec,debug type=Key Length, flag=0x8000, lorv=256
09:14:45 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha256
09:14:45 ipsec,debug transform #2 len=28
09:14:45 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
09:14:45 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
09:14:45 ipsec,debug life duration was in TLV.
09:14:45 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
09:14:45 ipsec,debug UDP encapsulation requested
09:14:45 ipsec,debug type=Key Length, flag=0x8000, lorv=256
09:14:45 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
09:14:45 ipsec,debug transform #3 len=28
09:14:45 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
09:14:45 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
09:14:45 ipsec,debug life duration was in TLV.
09:14:45 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
09:14:45 ipsec,debug UDP encapsulation requested
09:14:45 ipsec,debug type=Key Length, flag=0x8000, lorv=256
09:14:45 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-md5
09:14:45 ipsec,debug transform #4 len=24
09:14:45 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
09:14:45 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
09:14:45 ipsec,debug life duration was in TLV.
09:14:45 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
09:14:45 ipsec,debug UDP encapsulation requested
09:14:45 ipsec,debug type=Key Length, flag=0x8000, lorv=256
09:14:45 ipsec,debug transform #5 len=24
09:14:45 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
09:14:45 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
09:14:45 ipsec,debug life duration was in TLV.
09:14:45 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
09:14:45 ipsec,debug UDP encapsulation requested
09:14:45 ipsec,debug type=Key Length, flag=0x8000, lorv=288
09:14:45 ipsec,debug transform #6 len=28
09:14:45 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
09:14:45 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
09:14:45 ipsec,debug life duration was in TLV.
09:14:45 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
09:14:45 ipsec,debug UDP encapsulation requested
09:14:45 ipsec,debug type=Key Length, flag=0x8000, lorv=192
09:14:45 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha256
09:14:45 ipsec,debug transform #7 len=28
09:14:45 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
09:14:45 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
09:14:45 ipsec,debug life duration was in TLV.
09:14:45 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
09:14:45 ipsec,debug UDP encapsulation requested
09:14:45 ipsec,debug type=Key Length, flag=0x8000, lorv=192
09:14:45 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
09:14:45 ipsec,debug transform #8 len=28
09:14:45 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
09:14:45 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
09:14:45 ipsec,debug life duration was in TLV.
09:14:45 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
09:14:45 ipsec,debug UDP encapsulation requested
09:14:45 ipsec,debug type=Key Length, flag=0x8000, lorv=192
09:14:45 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-md5
09:14:45 ipsec,debug transform #9 len=24
09:14:45 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
09:14:45 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
09:14:45 ipsec,debug life duration was in TLV.
09:14:45 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
09:14:45 ipsec,debug UDP encapsulation requested
09:14:45 ipsec,debug type=Key Length, flag=0x8000, lorv=192
09:14:45 ipsec,debug transform #10 len=24
09:14:45 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
09:14:45 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
09:14:45 ipsec,debug life duration was in TLV.
09:14:45 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
09:14:45 ipsec,debug UDP encapsulation requested
09:14:45 ipsec,debug type=Key Length, flag=0x8000, lorv=224
09:14:45 ipsec,debug transform #11 len=28
09:14:45 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
09:14:45 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
09:14:45 ipsec,debug life duration was in TLV.
09:14:45 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
09:14:45 ipsec,debug UDP encapsulation requested
09:14:45 ipsec,debug type=Key Length, flag=0x8000, lorv=128
09:14:45 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha256
09:14:45 ipsec,debug transform #12 len=28
09:14:45 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
09:14:45 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
09:14:45 ipsec,debug life duration was in TLV.
09:14:45 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
09:14:45 ipsec,debug UDP encapsulation requested
09:14:45 ipsec,debug type=Key Length, flag=0x8000, lorv=128
09:14:45 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
09:14:45 ipsec,debug transform #13 len=28
09:14:45 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
09:14:45 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
09:14:45 ipsec,debug life duration was in TLV.
09:14:45 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
09:14:45 ipsec,debug UDP encapsulation requested
09:14:45 ipsec,debug type=Key Length, flag=0x8000, lorv=128
09:14:45 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-md5
09:14:45 ipsec,debug transform #14 len=24
09:14:45 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
09:14:45 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
09:14:45 ipsec,debug life duration was in TLV.
09:14:45 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
09:14:45 ipsec,debug UDP encapsulation requested
09:14:45 ipsec,debug type=Key Length, flag=0x8000, lorv=128
09:14:45 ipsec,debug transform #15 len=24
09:14:45 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
09:14:45 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
09:14:45 ipsec,debug life duration was in TLV.
09:14:45 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
09:14:45 ipsec,debug UDP encapsulation requested
09:14:45 ipsec,debug type=Key Length, flag=0x8000, lorv=160
09:14:45 ipsec,debug transform #16 len=24
09:14:45 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
09:14:45 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
09:14:45 ipsec,debug life duration was in TLV.
09:14:45 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
09:14:45 ipsec,debug UDP encapsulation requested
09:14:45 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha256
09:14:45 ipsec,debug transform #17 len=24
09:14:45 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
09:14:45 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
09:14:45 ipsec,debug life duration was in TLV.
09:14:45 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
09:14:45 ipsec,debug UDP encapsulation requested
09:14:45 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
09:14:45 ipsec,debug transform #18 len=24
09:14:45 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
09:14:45 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
09:14:45 ipsec,debug life duration was in TLV.
09:14:45 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
09:14:45 ipsec,debug UDP encapsulation requested
09:14:45 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-md5
09:14:45 ipsec,debug pair 1:
09:14:45 ipsec,debug 0x4a9260: next=(nil) tnext=0x4a9be0
09:14:45 ipsec,debug 0x4a9be0: next=(nil) tnext=0x4a9bf8
09:14:45 ipsec,debug 0x4a9bf8: next=(nil) tnext=0x4a9c10
09:14:45 ipsec,debug 0x4a9c10: next=(nil) tnext=0x4a9c28
09:14:45 ipsec,debug 0x4a9c28: next=(nil) tnext=0x4a9c40
09:14:45 ipsec,debug 0x4a9c40: next=(nil) tnext=0x4a7db0
09:14:45 ipsec,debug 0x4a7db0: next=(nil) tnext=0x4a7dc8
09:14:45 ipsec,debug 0x4a7dc8: next=(nil) tnext=0x4a7de0
09:14:45 ipsec,debug 0x4a7de0: next=(nil) tnext=0x4a7df8
09:14:45 ipsec,debug 0x4a7df8: next=(nil) tnext=0x4a7e10
09:14:45 ipsec,debug 0x4a7e10: next=(nil) tnext=0x4a7e28
09:14:45 ipsec,debug 0x4a7e28: next=(nil) tnext=0x4a7e40
09:14:45 ipsec,debug 0x4a7e40: next=(nil) tnext=0x4a99f8
09:14:45 ipsec,debug 0x4a99f8: next=(nil) tnext=0x4a9a10
09:14:45 ipsec,debug 0x4a9a10: next=(nil) tnext=0x4a9a28
09:14:45 ipsec,debug 0x4a9a28: next=(nil) tnext=0x4a9a40
09:14:45 ipsec,debug 0x4a9a40: next=(nil) tnext=0x4a9a58
09:14:45 ipsec,debug 0x4a9a58: next=(nil) tnext=(nil)
09:14:45 ipsec,debug proposal #1: 18 transform
09:14:45 ipsec,debug total SA len=44
09:14:45 ipsec,debug 00000001 00000001 00000024 01030401 c85985a8 00000018 01030000 80050002
09:14:45 ipsec,debug 80040004 80010001 80020708
09:14:45 ipsec,debug begin.
09:14:45 ipsec,debug seen nptype=2(prop) len=36
09:14:45 ipsec,debug succeed.
09:14:45 ipsec,debug proposal #1 len=36
09:14:45 ipsec,debug begin.
09:14:45 ipsec,debug seen nptype=3(trns) len=24
09:14:45 ipsec,debug succeed.
09:14:45 ipsec,debug transform #1 len=24
09:14:45 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
09:14:45 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
09:14:45 ipsec,debug UDP encapsulation requested
09:14:45 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
09:14:45 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
09:14:45 ipsec,debug life duration was in TLV.
09:14:45 ipsec,debug pair 1:
09:14:45 ipsec,debug 0x4a9ab0: next=(nil) tnext=(nil)
09:14:45 ipsec,debug proposal #1: 1 transform
09:14:45 ipsec transform number has been modified.
09:14:45 ipsec attribute has been modified.
09:14:45 ipsec,debug begin compare proposals.
09:14:45 ipsec,debug pair[1]: 0x4a9ab0
09:14:45 ipsec,debug 0x4a9ab0: next=(nil) tnext=(nil)
09:14:45 ipsec,debug prop#=1 prot-id=ESP spi-size=4 #trns=1 trns#=1 trns-id=3DES
09:14:45 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
09:14:45 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Transport
09:14:45 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
09:14:45 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=1800
09:14:45 ipsec,debug peer's single bundle:
09:14:45 ipsec,debug (proto_id=ESP spisize=4 spi=c85985a8 spi_p=00000000 encmode=UDP-Transport reqid=0:0)
09:14:45 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-sha1)
09:14:45 ipsec,debug my single bundle:
09:14:45 ipsec,debug (proto_id=ESP spisize=4 spi=0bdf2e06 spi_p=00000000 encmode=UDP-Transport reqid=0:0)
09:14:45 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-sha256)
09:14:45 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-sha1)
09:14:45 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-md5)
09:14:45 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=256 authtype=254)
09:14:45 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=288 authtype=254)
09:14:45 ipsec,debug (trns_id=AES-CBC encklen=192 authtype=hmac-sha256)
09:14:45 ipsec,debug (trns_id=AES-CBC encklen=192 authtype=hmac-sha1)
09:14:45 ipsec,debug (trns_id=AES-CBC encklen=192 authtype=hmac-md5)
09:14:45 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=192 authtype=254)
09:14:45 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=224 authtype=254)
09:14:45 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-sha256)
09:14:45 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-sha1)
09:14:45 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-md5)
09:14:45 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=128 authtype=254)
09:14:45 ipsec,debug (trns_id=AES-GCM-ICV16 encklen=160 authtype=254)
09:14:45 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-sha256)
09:14:45 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-sha1)
09:14:45 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-md5)
09:14:45 ipsec Adjusting my encmode UDP-Transport->Transport
09:14:45 ipsec Adjusting peer's encmode UDP-Transport(4)->Transport(2)
09:14:45 ipsec trns_id mismatched: my:AES-CBC peer:3DES
09:14:45 ipsec trns_id mismatched: my:AES-CBC peer:3DES
09:14:45 ipsec trns_id mismatched: my:AES-CBC peer:3DES
09:14:46 ipsec trns_id mismatched: my:AES-GCM-ICV16 peer:3DES
09:14:46 ipsec trns_id mismatched: my:AES-GCM-ICV16 peer:3DES
09:14:46 ipsec trns_id mismatched: my:AES-CBC peer:3DES
09:14:46 ipsec trns_id mismatched: my:AES-CBC peer:3DES
09:14:46 ipsec trns_id mismatched: my:AES-CBC peer:3DES
09:14:46 ipsec trns_id mismatched: my:AES-GCM-ICV16 peer:3DES
09:14:46 ipsec trns_id mismatched: my:AES-GCM-ICV16 peer:3DES
09:14:46 ipsec trns_id mismatched: my:AES-CBC peer:3DES
09:14:46 ipsec trns_id mismatched: my:AES-CBC peer:3DES
09:14:46 ipsec trns_id mismatched: my:AES-CBC peer:3DES
09:14:46 ipsec trns_id mismatched: my:AES-GCM-ICV16 peer:3DES
09:14:46 ipsec trns_id mismatched: my:AES-GCM-ICV16 peer:3DES
09:14:46 ipsec authtype mismatched: my:hmac-sha256 peer:hmac-sha1
09:14:46 ipsec,debug matched
09:14:46 ipsec,debug ===
09:14:46 ipsec,debug HASH(3) generate
09:14:46 ipsec,debug add payload of len 20, next type 0
09:14:46 ipsec,debug 60 bytes from my.public.ip[4500] to my.remote.server.ip[4500]
09:14:46 ipsec,debug 1 times of 64 bytes message will be sent to my.remote.server.ip[4500]
09:14:46 ipsec,debug encryption(3des)
09:14:46 ipsec,debug hmac(sha1)
09:14:46 ipsec,debug encklen=192 authklen=160
09:14:46 ipsec,debug generating 640 bits of key (dupkeymat=4)
09:14:46 ipsec,debug generating K1...K4 for KEYMAT.
09:14:46 ipsec,debug 77706c99 7c97b933 9c6c0420 24b27ba0 a0a46f9a 6d0e9e90 fdad8429 23e3f99d
09:14:46 ipsec,debug 18b11953 aeca68c3 4ffc14b9 8a00d87d fd70e3ee 47902ff7 1f9dce5b f047ee76
09:14:46 ipsec,debug 429905d6 22977afc 7007ca7c 71f56291
09:14:46 ipsec,debug encryption(3des)
09:14:46 ipsec,debug hmac(sha1)
09:14:46 ipsec,debug encklen=192 authklen=160
09:14:46 ipsec,debug generating 640 bits of key (dupkeymat=4)
09:14:46 ipsec,debug generating K1...K4 for KEYMAT.
09:14:46 ipsec,debug 2ec1398c 979aa328 0e8a6a09 681070d2 8216ec43 46e791b6 f10e462b 7bf06dfa
09:14:46 ipsec,debug e7be3a77 4dd4af6e d3a4c3a2 09f61b32 688f7e07 89a20b2a 720bf820 726e46bb
09:14:46 ipsec,debug ec6a7d61 ea7e7607 0fde6986 d0ea77bf
09:14:46 ipsec,debug KEYMAT computed.
09:14:46 ipsec,debug call pk_sendupdate
09:14:46 ipsec,debug encryption(3des)
09:14:46 ipsec,debug hmac(sha1)
09:14:46 ipsec,debug call pfkey_send_update_nat
09:14:46 ipsec IPsec-SA established: ESP/Transport my.remote.server.ip[4500]->my.public.ip[4500] spi=0xbdf2e06
09:14:46 ipsec,debug pfkey update sent.
09:14:46 ipsec,debug encryption(3des)
09:14:46 ipsec,debug hmac(sha1)
09:14:46 ipsec,debug call pfkey_send_add_nat
09:14:46 ipsec IPsec-SA established: ESP/Transport my.public.ip[4500]->my.remote.server.ip[4500] spi=0xc85985a8
09:14:46 ipsec,debug pfkey add sent.
09:14:47 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
09:14:47 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
09:14:47 l2tp,debug,packet (M) Message-Type=SCCRQ
09:14:47 l2tp,debug,packet (M) Protocol-Version=0x01:00
09:14:47 l2tp,debug,packet (M) Framing-Capabilities=0x1
09:14:47 l2tp,debug,packet (M) Bearer-Capabilities=0x0
09:14:47 l2tp,debug,packet Firmware-Revision=0x1
09:14:47 l2tp,debug,packet (M) Host-Name="MikroTik"
09:14:47 l2tp,debug,packet Vendor-Name="MikroTik"
09:14:47 l2tp,debug,packet (M) Assigned-Tunnel-ID=11
09:14:47 l2tp,debug,packet (M) Receive-Window-Size=4
09:14:47 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
09:14:47 l2tp,debug,packet tunnel-id=11, session-id=0, ns=0, nr=1
09:14:47 l2tp,debug,packet (M) Message-Type=SCCRP
09:14:47 l2tp,debug,packet (M) Protocol-Version=0x01:00
09:14:47 l2tp,debug,packet (M) Framing-Capabilities=0x3
09:14:47 l2tp,debug,packet (M) Bearer-Capabilities=0x0
09:14:47 l2tp,debug,packet Firmware-Revision=0x690
09:14:47 l2tp,debug,packet (M) Host-Name="localhost"
09:14:47 l2tp,debug,packet Vendor-Name="xelerance.com"
09:14:47 l2tp,debug,packet (M) Assigned-Tunnel-ID=18275
09:14:47 l2tp,debug,packet (M) Receive-Window-Size=4
09:14:47 l2tp,debug tunnel 11 entering state: established
09:14:47 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
09:14:47 l2tp,debug,packet tunnel-id=18275, session-id=0, ns=1, nr=1
09:14:47 l2tp,debug,packet (M) Message-Type=SCCCN
09:14:47 l2tp,debug session 1 entering state: wait-reply
09:14:47 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
09:14:47 l2tp,debug,packet tunnel-id=11, session-id=0, ns=1, nr=2
09:14:47 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
09:14:47 l2tp,debug,packet tunnel-id=18275, session-id=0, ns=2, nr=1
09:14:47 l2tp,debug,packet (M) Message-Type=ICRQ
09:14:47 l2tp,debug,packet (M) Assigned-Session-ID=1
09:14:47 l2tp,debug,packet (M) Call-Serial-Number=2
09:14:47 l2tp,debug,packet (M) Bearer-Type=0x0
09:14:47 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
09:14:47 l2tp,debug,packet tunnel-id=11, session-id=1, ns=1, nr=3
09:14:47 l2tp,debug,packet (M) Message-Type=ICRP
09:14:47 l2tp,debug,packet (M) Assigned-Session-ID=42410
09:14:47 l2tp,debug session 1 entering state: established
09:14:47 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
09:14:47 l2tp,debug,packet tunnel-id=18275, session-id=42410, ns=3, nr=2
09:14:47 l2tp,debug,packet (M) Message-Type=ICCN
09:14:47 l2tp,debug,packet (M) Framing-Type=0x1
09:14:47 l2tp,debug,packet (M) Tx-Connect-Speed-BPS=100000000
09:14:47 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
09:14:47 l2tp,debug,packet tunnel-id=11, session-id=0, ns=2, nr=3
09:14:47 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
09:14:47 l2tp,debug,packet tunnel-id=11, session-id=1, ns=2, nr=4
09:14:47 l2tp,ppp,debug l2tp-out1: LCP lowerup
09:14:47 l2tp,ppp,debug l2tp-out1: LCP open
09:14:47 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfReq id=0x6
09:14:47 l2tp,ppp,debug,packet <mru 1450>
09:14:47 l2tp,ppp,debug,packet <magic 0x51e1e43>
09:14:47 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfReq id=0x1
09:14:47 l2tp,ppp,debug,packet <mru 1410>
09:14:47 l2tp,ppp,debug,packet <asyncmap 0x0>
09:14:47 l2tp,ppp,debug,packet <magic 0x4380cb9e>
09:14:47 l2tp,ppp,debug,packet <pcomp>
09:14:47 l2tp,ppp,debug,packet <accomp>
09:14:47 l2tp,ppp,debug,packet <auth chap>
09:14:47 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfRej id=0x1
09:14:47 l2tp,ppp,debug,packet <asyncmap 0x0>
09:14:47 l2tp,ppp,debug,packet <pcomp>
09:14:47 l2tp,ppp,debug,packet <accomp>
09:14:47 l2tp,ppp,debug l2tp-out1: PPP received non-LCP packet (0x6970) when LCP not open
09:14:47 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfAck id=0x6
09:14:47 l2tp,ppp,debug,packet <mru 1450>
09:14:47 l2tp,ppp,debug,packet <magic 0x51e1e43>
09:14:47 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ConfReq id=0x2
09:14:47 l2tp,ppp,debug,packet <mru 1410>
09:14:47 l2tp,ppp,debug,packet <magic 0x4380cb9e>
09:14:47 l2tp,ppp,debug,packet <auth chap>
09:14:47 l2tp,ppp,debug,packet l2tp-out1: sent LCP ConfAck id=0x2
09:14:47 l2tp,ppp,debug,packet <mru 1410>
09:14:47 l2tp,ppp,debug,packet <magic 0x4380cb9e>
09:14:47 l2tp,ppp,debug,packet <auth chap>
09:14:47 l2tp,ppp,debug l2tp-out1: LCP opened
09:14:47 l2tp,ppp,debug,packet l2tp-out1: rcvd CHAP Challenge id=0x77
09:14:47 l2tp,ppp,debug,packet <challenge len=20>
09:14:47 l2tp,ppp,debug,packet <name cyberoamserver>
09:14:47 l2tp,ppp,debug,packet l2tp-out1: sent CHAP Response id=0x77
09:14:47 l2tp,ppp,debug,packet <response len=16>
09:14:47 l2tp,ppp,debug,packet <name l2tpmikortik>
09:14:47 l2tp,ppp,debug,packet l2tp-out1: rcvd CHAP Success id=0x77
09:14:47 l2tp,ppp,debug,packet \02
09:14:47 l2tp,ppp,info l2tp-out1: authenticated
09:14:47 l2tp,ppp,debug l2tp-out1: IPCP lowerup
09:14:47 l2tp,ppp,debug l2tp-out1: IPCP open
09:14:47 l2tp,ppp,debug,packet l2tp-out1: sent IPCP ConfReq id=0x3
09:14:47 l2tp,ppp,debug,packet <addr 0.0.0.0>
09:14:47 l2tp,ppp,debug l2tp-out1: IPV6CP open
09:14:47 l2tp,ppp,debug l2tp-out1: MPLSCP lowerup
09:14:47 l2tp,ppp,debug l2tp-out1: MPLSCP open
09:14:47 l2tp,ppp,debug,packet l2tp-out1: sent MPLSCP ConfReq id=0x2
09:14:47 l2tp,ppp,debug l2tp-out1: BCP open
09:14:47 l2tp,ppp,debug l2tp-out1: CCP lowerup
09:14:47 l2tp,ppp,debug l2tp-out1: CCP open
09:14:47 l2tp,ppp,debug,packet l2tp-out1: rcvd LCP ProtRej id=0x3
09:14:47 l2tp,ppp,debug,packet 82 81 01 02 00 04
09:14:47 l2tp,ppp,debug,packet l2tp-out1: rcvd CCP ConfReq id=0x1
09:14:47 l2tp,ppp,debug,packet <deflate 15>
09:14:47 l2tp,ppp,debug,packet <deflate (old) 15>
09:14:47 l2tp,ppp,debug l2tp-out1: received unsupported protocol 0x80fd
09:14:47 l2tp,ppp,debug,packet l2tp-out1: sent LCP ProtRej id=0x7
09:14:47 l2tp,ppp,debug,packet 80 fd 01 01 00 0c 1a 04 78 00 18 04 78 00
09:14:47 l2tp,ppp,debug,packet l2tp-out1: rcvd IPCP ConfReq id=0x1
09:14:47 l2tp,ppp,debug,packet <addr my.remote.server.ip>
09:14:47 l2tp,ppp,debug,packet <comp VJ f 1>
09:14:47 l2tp,ppp,debug,packet l2tp-out1: sent IPCP ConfRej id=0x1
09:14:47 l2tp,ppp,debug,packet <comp VJ f 1>
09:14:47 l2tp,ppp,debug,packet l2tp-out1: rcvd IPCP ConfNak id=0x3
09:14:47 l2tp,ppp,debug,packet <addr 172.16.17.2>
09:14:47 l2tp,ppp,debug,packet l2tp-out1: sent IPCP ConfReq id=0x4
09:14:47 l2tp,ppp,debug,packet <addr 172.16.17.2>
09:14:47 l2tp,ppp,debug,packet l2tp-out1: rcvd IPCP ConfReq id=0x2
09:14:47 l2tp,ppp,debug,packet <addr my.remote.server.ip>
09:14:47 l2tp,ppp,debug,packet l2tp-out1: sent IPCP ConfAck id=0x2
09:14:47 l2tp,ppp,debug,packet <addr my.remote.server.ip>
09:14:47 l2tp,ppp,debug,packet l2tp-out1: rcvd IPCP ConfAck id=0x4
09:14:47 l2tp,ppp,debug,packet <addr 172.16.17.2>
09:14:47 l2tp,ppp,debug l2tp-out1: IPCP opened
09:14:47 l2tp,ppp,info l2tp-out1: connected
09:14:49 ipsec,debug KA: my.public.ip[4500]->my.remote.server.ip[4500]
09:14:49 ipsec,debug 1 times of 1 bytes message will be sent to my.remote.server.ip[4500]
09:14:50 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
09:14:50 l2tp,debug,packet tunnel-id=9, session-id=0, ns=0, nr=1
09:14:50 l2tp,debug,packet (M) Message-Type=SCCRP
09:14:50 l2tp,debug,packet (M) Protocol-Version=0x01:00
09:14:50 l2tp,debug,packet (M) Framing-Capabilities=0x3
09:14:50 l2tp,debug,packet (M) Bearer-Capabilities=0x0
09:14:50 l2tp,debug,packet Firmware-Revision=0x690
09:14:50 l2tp,debug,packet (M) Host-Name="localhost"
09:14:50 l2tp,debug,packet Vendor-Name="xelerance.com"
09:14:50 l2tp,debug,packet (M) Assigned-Tunnel-ID=605
09:14:50 l2tp,debug,packet (M) Receive-Window-Size=4
09:14:50 l2tp,debug received SCCRP before SCCRQ, rejecting
09:14:50 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
09:14:50 l2tp,debug,packet tunnel-id=605, session-id=0, ns=1, nr=1
09:14:50 l2tp,debug,packet (M) Message-Type=StopCCN
09:14:50 l2tp,debug,packet (M) Result-Code=7
09:14:50 l2tp,debug,packet (M) Assigned-Tunnel-ID=9
09:14:50 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
09:14:50 l2tp,debug,packet tunnel-id=9, session-id=0, ns=1, nr=2
09:14:50 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
09:14:50 l2tp,debug,packet tunnel-id=9, session-id=0, ns=1, nr=2
09:14:50 l2tp,debug,packet (M) Message-Type=StopCCN
09:14:50 l2tp,debug,packet (M) Assigned-Tunnel-ID=605
09:14:50 l2tp,debug,packet (M) Result-Code=2
09:14:50 l2tp,debug,packet Error-Code=2
09:14:50 l2tp,debug,packet Error-Message="Result Code: expected at least 10, got 8"
09:14:50 l2tp,debug,packet sent control message (ack) to my.remote.server.ip:1701 from my.public.ip:1701
09:14:50 l2tp,debug,packet tunnel-id=605, session-id=0, ns=2, nr=2
3des is… well… outdated. Even Windows 7 support AES128.
sure, we can change that later on the server side too, but for now it is ok for testing / learning.
Now that the link is working there is still something missing because I can’t reach anything on the server LAN.
(it is working on my windows test client)
I’d assume you actually cannot reach anything on the server LAN from anything on the Mikrotik’s LAN. You should be able to reach it from the Mikrotik itself.
There is a rule in /ip firewall nat:
add action=masquerade chain=srcnat out-interface=pptp-out1
So change the out-interface in that rule to l2tp-out1, or use /ip firewall nat add copy-from=[find out-interface~“pptp-out1”] out-interface=l2tp-out1 to add a new rule if you intend to keep using pptp-out1, and you should be good.
No, I can’t even reach it from the mikrotik termial.
Windows by default use the tunnel as the default gateway once it goes up, unless the server responds a DHCPINFORM message sent through the tunnel with a response carrying a routing table in Option 249.
Mikrotik doesn’t support the above; you can set up add-default-route=yes on the /interface l2tp-client row, but that’s likely not what you want. So you have to add the necessary routes via l2tp-out1 manually.
Like with the src-nat rule, you have several routes with gateway=pptp-out1, but none with gateway=l2tp-out1.
Mikrotik doesn’t support the above; you can set up > add-default-route=yes > on the > /interface l2tp-client > row, but that’s likely not what you want. So you have to add the necessary routes via l2tp-out1 manually.
Like with the src-nat rule, you have several routes with > gateway=pptp-out1> , but none with > gateway=l2tp-out1> .
I tried that before without luck.
For any reason l2tp gateway says unreachable
I found out that I still can ping my devices on my remote LAN but I need to specify the interface.
[admin@MikroTik] > ping 192.168.10.50 interface=l2tp-out1
SEQ HOST SIZE TTL TIME STATUS
0 192.168.10.50 56 63 5ms
1 192.168.10.50 56 63 7ms
sent=2 received=2 packet-loss=0% min-rtt=5ms avg-rtt=6ms max-rtt=7ms
What does /ip route print detail where gateway~“l2tp” show?
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
0 X S dst-address=172.16.10.0/24 gateway=pptp-out1,l2tp-out1 gateway-status=pptp-out1 inactive,l2tp-out1 inactive distance=1
scope=30 target-scope=10
1 S dst-address=172.16.10.101/32 gateway=l2tp-out1 gateway-status=l2tp-out1 unreachable distance=1 scope=30 target-scope=10
…and the l2tp-out1 interface was up (R) at the time you did this print, and ping 172.16.10.101 interface=l2tp-out1 worked? Because when the interface is up, there should be another route as well:
n ADC dst-address=x.x.x.x/32 pref-src=y.y.y.y gateway=l2tp-out1 gateway-status=l2tp-out1 reachable distance=0 scope=10
[/quote]
…and the l2tp-out1 interface was up (R) at the time you did this print, and ping 172.16.10.101 interface=l2tp-out1 worked? Because when the interface is up, there should be another route as well:
n ADC dst-address=x.x.x.x/32 pref-src=y.y.y.y gateway=l2tp-out1 gateway-status=l2tp-out1 reachable distance=0 scope=10
[/quote]
Yes It was. I doublechecked it again.
The log shows a successful establishment of the control connection:
09:14:47 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
...
09:14:47 l2tp,debug,packet (M) Message-Type=SCCRQ
...
09:14:47 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
...
09:14:47 l2tp,debug,packet (M) Message-Type=SCCRP
...
09:14:47 l2tp,debug tunnel 11 entering state: established
09:14:47 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
...
09:14:47 l2tp,debug,packet (M) Message-Type=SCCCN
09:14:47 l2tp,debug session 1 entering state: wait-reply
09:14:47 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
...
09:14:47 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
...
09:14:47 l2tp,debug,packet (M) Message-Type=ICRQ
...
09:14:47 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
...
09:14:47 l2tp,debug,packet (M) Message-Type=ICRP
...
09:14:47 l2tp,debug session 1 entering state: established
Next, the IPCP establishes the IP tunnel. What is worth noting is that the server indicates the address at which it expects incoming L2TP connections also as the address of its end of the tunnel:
09:14:47 l2tp,ppp,debug,packet l2tp-out1: rcvd IPCP ConfReq id=0x2
09:14:47 l2tp,ppp,debug,packet
09:14:47 l2tp,ppp,debug,packet l2tp-out1: sent IPCP ConfAck id=0x2
09:14:47 l2tp,ppp,debug,packet
This causes RouterOS to generate a random 10.x.x.x address as the network one in the /ip address item, but it is normally not the reason why the whole thing breaks:
/interface l2tp-client
add connect-to=192.168.227.47 disabled=no name=l2tp-out1 profile=my-l2tp use-ipsec=yes user=chr-1
23:29:16 l2tp,ppp,debug,packet l2tp-out1: rcvd IPCP ConfReq id=0x1
23:29:16 l2tp,ppp,debug,packet <addr 192.168.227.47>
23:29:16 l2tp,ppp,debug,packet l2tp-out1: sent IPCP ConfAck id=0x1
23:29:16 l2tp,ppp,debug,packet <addr 192.168.227.47>
[me@myTik] > ip address print
Flags: X - disabled, I - invalid, D - dynamic
...
8 D 192.168.224.19/32 10.113.185.224 l2tp-out1
(if the address suggested in ConfReq differs from the connect-to one, it is used as the network value in /ip address verbatim).
3 seconds after the IPCP establishes, the xelerance stack sends a SCCRP which the RouterOS doesn't expect, but it is for a different Tunnel-ID, so it either looks like a hangover from some previous connection attempt, or you may be connecting multiple L2TP/IPsec sessions simultaneously to the same server from behind the same public IP, which combined with use of IPsec transport mode SA causes different kinds of failures, depending on how the responder (server) handles the dynamic creation of IPsec policies. But given that you can ping via the tunnel if you specify interface in ping, it still doesn't seem to explain what you get.
And as that unexpected SCCRP is for a different tunnel-id, it should not affect the previously established tunnel. Whether it really doesn't is a question. So it would be worth trying to disable the l2tp-out1, disconnect any other client of that same server possibly connected to Mikrotik's LAN, and try to enable the l2tp-out1 again after 10 minutes or so with logging on again (no need to log ipsec in that case, l2tp will be enough).
Before doing that - do you have a D item in /ip address with l2tp-out1 as interface when the connection is up? If so, what is the address in the network column?
09:14:47 l2tp,ppp,debug l2tp-out1: IPCP opened
09:14:47 l2tp,ppp,info l2tp-out1: connected
...
09:14:50 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
...
09:14:50 l2tp,debug,packet (M) Message-Type=SCCRP
...
09:14:50 l2tp,debug received SCCRP before SCCRQ, rejecting
09:14:50 l2tp,debug,packet sent control message to my.remote.server.ip:1701 from my.public.ip:1701
...
09:14:50 l2tp,debug,packet (M) Message-Type=StopCCN
...
09:14:50 l2tp,debug,packet rcvd control message (ack) from my.remote.server.ip:1701 to my.public.ip:1701
...
09:14:50 l2tp,debug,packet rcvd control message from my.remote.server.ip:1701 to my.public.ip:1701
...
09:14:50 l2tp,debug,packet (M) Message-Type=StopCCN
...
09:14:50 l2tp,debug,packet (M) Result-Code=2
09:14:50 l2tp,debug,packet Error-Code=2
09:14:50 l2tp,debug,packet Error-Message="Result Code: expected at least 10, got 8"
Before doing that - do you have a > D > item in > /ip address > with > l2tp-out1 > as > interface > when the connection is up? If so, what is the address in the > network > column?
There is no any other L2TP client connected to server.
There is no any other L2TP session nether on the Mikrotik or anywhere else behind my public IP.
Yes, a D item is created, it has the IP 172.16.17.2, this is the IP assigned by the responder. The network address is 10.112.113.88, from where is this comming from?