Howdy. I’m still struggling with firinng up 2 vpn tunnels (2 mikrotiks → draytek vigor v2860).
Everything seems to work fine on my test enviroment, where I can put both MT’s with public static IP addresses on WAN interface ports. But whenever I try to place a 3rd party router in front of MT (in this case MT has no longer public ISP WAN IP just some local one like 192.168.xx.xx recieved from additional routers LAN side)
Obviously I’ve tried setting up DMZ feature on router pointing Mikrotik but doesn’t solve the issue.
Trouble is I see some communication attempts on MT ipsec logs but it usually fails with phase2 errors like:
09:33:27 ipsec,error 83.9.xxx.xxx failed to pre-process ph2 packet
...
...
09:33:30 ipsec,error 83.9.xxx.xxx peer sent packet for dead phase2
83.9.xxx.xxx is Draytek’s WAN IP.
192.168.73.37 - MT’s WAN IP (with additonal router attached)
192.168.73.1 - additional router IP
I’m using 3DES MD5 encryption protocols as suggested on Draytek’s manuals for Mikrotik VPN tunnels. As said before - tunnels gets established quite fast and stable with MT set directly with public WAN IP (tested on DSL modem). Almost forgot. Draytek is set in Dial-Out tunnel mode, since both MT have/will have static IP. Draytek obtains dynamic public IP once in a while. Also Draytek has no other device above - it’s connected to phone line directly (vDSL modem built in). It has also secondary WAN with static IP but slow speed. Using other secondary WAN changes nothing.
.
Some bigger chunk of ipsec logs:
# dec/ 5/2017 9:33:42 by RouterOS 6.40.5
# software id = XRH8-AGWH
#
09:33:27 ipsec,debug transform #12 len=32
09:33:27 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
09:33:27 ipsec,debug type=Life Duration, flag=0x8000, lorv=28800
09:33:27 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=3DES-CBC
09:33:27 ipsec,debug encryption(3des)
09:33:27 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=4
09:33:27 ipsec,debug hash(sha2_256)
09:33:27 ipsec,debug type=Authentication Method, flag=0x8000, lorv=pre-shared key
09:33:27 ipsec,debug type=Group Description, flag=0x8000, lorv=1536-bit MODP group
09:33:27 ipsec,debug dh(modp1536)
09:33:27 ipsec,debug transform #13 len=36
09:33:27 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
09:33:27 ipsec,debug type=Life Duration, flag=0x8000, lorv=28800
09:33:27 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=AES-CBC
09:33:27 ipsec,debug encryption(aes)
09:33:27 ipsec,debug type=Key Length, flag=0x8000, lorv=256
09:33:27 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=4
09:33:27 ipsec,debug hash(sha2_256)
09:33:27 ipsec,debug type=Authentication Method, flag=0x8000, lorv=pre-shared key
09:33:27 ipsec,debug type=Group Description, flag=0x8000, lorv=1024-bit MODP group
09:33:27 ipsec,debug dh(modp1024)
09:33:27 ipsec,debug transform #14 len=36
09:33:27 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
09:33:27 ipsec,debug type=Life Duration, flag=0x8000, lorv=28800
09:33:27 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=AES-CBC
09:33:27 ipsec,debug encryption(aes)
09:33:27 ipsec,debug type=Key Length, flag=0x8000, lorv=256
09:33:27 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=4
09:33:27 ipsec,debug hash(sha2_256)
09:33:27 ipsec,debug type=Authentication Method, flag=0x8000, lorv=pre-shared key
09:33:27 ipsec,debug type=Group Description, flag=0x8000, lorv=1536-bit MODP group
09:33:27 ipsec,debug dh(modp1536)
09:33:27 ipsec,debug transform #15 len=36
09:33:27 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
09:33:27 ipsec,debug type=Life Duration, flag=0x8000, lorv=28800
09:33:27 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=AES-CBC
09:33:27 ipsec,debug encryption(aes)
09:33:27 ipsec,debug type=Key Length, flag=0x8000, lorv=256
09:33:27 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=4
09:33:27 ipsec,debug hash(sha2_256)
09:33:27 ipsec,debug type=Authentication Method, flag=0x8000, lorv=pre-shared key
09:33:27 ipsec,debug type=Group Description, flag=0x8000, lorv=2048-bit MODP group
09:33:27 ipsec,debug dh(modp2048)
09:33:27 ipsec,debug pair 0:
09:33:27 ipsec,debug 0x4904b8: next=(nil) tnext=0x48a568
09:33:27 ipsec,debug 0x48a568: next=(nil) tnext=0x48fee0
09:33:27 ipsec,debug 0x48fee0: next=(nil) tnext=0x4900c8
09:33:27 ipsec,debug 0x4900c8: next=(nil) tnext=0x48b9b0
09:33:27 ipsec,debug 0x48b9b0: next=(nil) tnext=0x487ed0
09:33:27 ipsec,debug 0x487ed0: next=(nil) tnext=0x48cd20
09:33:27 ipsec,debug 0x48cd20: next=(nil) tnext=0x4904e0
09:33:27 ipsec,debug 0x4904e0: next=(nil) tnext=0x48e478
09:33:27 ipsec,debug 0x48e478: next=(nil) tnext=0x48dcc8
09:33:27 ipsec,debug 0x48dcc8: next=(nil) tnext=0x48fa08
09:33:27 ipsec,debug 0x48fa08: next=(nil) tnext=0x48ccc0
09:33:27 ipsec,debug 0x48ccc0: next=(nil) tnext=0x4886c0
09:33:27 ipsec,debug 0x4886c0: next=(nil) tnext=0x489168
09:33:27 ipsec,debug 0x489168: next=(nil) tnext=0x48f800
09:33:27 ipsec,debug 0x48f800: next=(nil) tnext=0x4901f0
09:33:27 ipsec,debug 0x4901f0: next=(nil) tnext=(nil)
09:33:27 ipsec,debug proposal #0: 16 transform
09:33:27 ipsec,debug prop#=0, prot-id=ISAKMP, spi-size=0, #trns=16
09:33:27 ipsec,debug trns#=0, trns-id=IKE
09:33:27 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
09:33:27 ipsec,debug type=Life Duration, flag=0x8000, lorv=28800
09:33:27 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=DES-CBC
09:33:27 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=MD5
09:33:27 ipsec,debug type=Authentication Method, flag=0x8000, lorv=pre-shared key
09:33:27 ipsec,debug type=Group Description, flag=0x8000, lorv=768-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:DES-CBC
09:33:27 ipsec,debug (encklen = 256:0)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 2048-bit MODP group:768-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:DES-CBC
09:33:27 ipsec,debug (encklen = 256:0)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 1024-bit MODP group:768-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:DES-CBC
09:33:27 ipsec,debug (encklen = 192:0)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 2048-bit MODP group:768-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:DES-CBC
09:33:27 ipsec,debug (encklen = 192:0)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 1024-bit MODP group:768-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:DES-CBC
09:33:27 ipsec,debug (encklen = 128:0)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 2048-bit MODP group:768-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:DES-CBC
09:33:27 ipsec,debug (encklen = 128:0)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 1024-bit MODP group:768-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = 3DES-CBC:DES-CBC
09:33:27 ipsec,debug (encklen = 0:0)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 2048-bit MODP group:768-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = 3DES-CBC:DES-CBC
09:33:27 ipsec,debug (encklen = 0:0)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 1024-bit MODP group:768-bit MODP group
09:33:27 ipsec,debug prop#=0, prot-id=ISAKMP, spi-size=0, #trns=16
09:33:27 ipsec,debug trns#=1, trns-id=IKE
09:33:27 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
09:33:27 ipsec,debug type=Life Duration, flag=0x8000, lorv=28800
09:33:27 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=DES-CBC
09:33:27 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=SHA
09:33:27 ipsec,debug type=Authentication Method, flag=0x8000, lorv=pre-shared key
09:33:27 ipsec,debug type=Group Description, flag=0x8000, lorv=768-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:DES-CBC
09:33:27 ipsec,debug (encklen = 256:0)
09:33:27 ipsec,debug hashtype = SHA:SHA
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 2048-bit MODP group:768-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:DES-CBC
09:33:27 ipsec,debug (encklen = 256:0)
09:33:27 ipsec,debug hashtype = SHA:SHA
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 1024-bit MODP group:768-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:DES-CBC
09:33:27 ipsec,debug (encklen = 192:0)
09:33:27 ipsec,debug hashtype = SHA:SHA
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 2048-bit MODP group:768-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:DES-CBC
09:33:27 ipsec,debug (encklen = 192:0)
09:33:27 ipsec,debug hashtype = SHA:SHA
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 1024-bit MODP group:768-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:DES-CBC
09:33:27 ipsec,debug (encklen = 128:0)
09:33:27 ipsec,debug hashtype = SHA:SHA
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 2048-bit MODP group:768-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:DES-CBC
09:33:27 ipsec,debug (encklen = 128:0)
09:33:27 ipsec,debug hashtype = SHA:SHA
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 1024-bit MODP group:768-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = 3DES-CBC:DES-CBC
09:33:27 ipsec,debug (encklen = 0:0)
09:33:27 ipsec,debug hashtype = SHA:SHA
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 2048-bit MODP group:768-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = 3DES-CBC:DES-CBC
09:33:27 ipsec,debug (encklen = 0:0)
09:33:27 ipsec,debug hashtype = SHA:SHA
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 1024-bit MODP group:768-bit MODP group
09:33:27 ipsec,debug prop#=0, prot-id=ISAKMP, spi-size=0, #trns=16
09:33:27 ipsec,debug trns#=2, trns-id=IKE
09:33:27 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
09:33:27 ipsec,debug type=Life Duration, flag=0x8000, lorv=28800
09:33:27 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=3DES-CBC
09:33:27 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=MD5
09:33:27 ipsec,debug type=Authentication Method, flag=0x8000, lorv=pre-shared key
09:33:27 ipsec,debug type=Group Description, flag=0x8000, lorv=768-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:3DES-CBC
09:33:27 ipsec,debug (encklen = 256:0)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 2048-bit MODP group:768-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:3DES-CBC
09:33:27 ipsec,debug (encklen = 256:0)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 1024-bit MODP group:768-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:3DES-CBC
09:33:27 ipsec,debug (encklen = 192:0)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 2048-bit MODP group:768-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:3DES-CBC
09:33:27 ipsec,debug (encklen = 192:0)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 1024-bit MODP group:768-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:3DES-CBC
09:33:27 ipsec,debug (encklen = 128:0)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 2048-bit MODP group:768-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:3DES-CBC
09:33:27 ipsec,debug (encklen = 128:0)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 1024-bit MODP group:768-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = 3DES-CBC:3DES-CBC
09:33:27 ipsec,debug (encklen = 0:0)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 2048-bit MODP group:768-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = 3DES-CBC:3DES-CBC
09:33:27 ipsec,debug (encklen = 0:0)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 1024-bit MODP group:768-bit MODP group
09:33:27 ipsec,debug prop#=0, prot-id=ISAKMP, spi-size=0, #trns=16
09:33:27 ipsec,debug trns#=3, trns-id=IKE
09:33:27 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
09:33:27 ipsec,debug type=Life Duration, flag=0x8000, lorv=28800
09:33:27 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=3DES-CBC
09:33:27 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=MD5
09:33:27 ipsec,debug type=Authentication Method, flag=0x8000, lorv=pre-shared key
09:33:27 ipsec,debug type=Group Description, flag=0x8000, lorv=1536-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:3DES-CBC
09:33:27 ipsec,debug (encklen = 256:0)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 2048-bit MODP group:1536-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:3DES-CBC
09:33:27 ipsec,debug (encklen = 256:0)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 1024-bit MODP group:1536-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:3DES-CBC
09:33:27 ipsec,debug (encklen = 192:0)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 2048-bit MODP group:1536-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:3DES-CBC
09:33:27 ipsec,debug (encklen = 192:0)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 1024-bit MODP group:1536-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:3DES-CBC
09:33:27 ipsec,debug (encklen = 128:0)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 2048-bit MODP group:1536-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:3DES-CBC
09:33:27 ipsec,debug (encklen = 128:0)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 1024-bit MODP group:1536-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = 3DES-CBC:3DES-CBC
09:33:27 ipsec,debug (encklen = 0:0)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 2048-bit MODP group:1536-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = 3DES-CBC:3DES-CBC
09:33:27 ipsec,debug (encklen = 0:0)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 1024-bit MODP group:1536-bit MODP group
09:33:27 ipsec,debug prop#=0, prot-id=ISAKMP, spi-size=0, #trns=16
09:33:27 ipsec,debug trns#=4, trns-id=IKE
09:33:27 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
09:33:27 ipsec,debug type=Life Duration, flag=0x8000, lorv=28800
09:33:27 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=3DES-CBC
09:33:27 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=SHA
09:33:27 ipsec,debug type=Authentication Method, flag=0x8000, lorv=pre-shared key
09:33:27 ipsec,debug type=Group Description, flag=0x8000, lorv=1536-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:3DES-CBC
09:33:27 ipsec,debug (encklen = 256:0)
09:33:27 ipsec,debug hashtype = SHA:SHA
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 2048-bit MODP group:1536-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:3DES-CBC
09:33:27 ipsec,debug (encklen = 256:0)
09:33:27 ipsec,debug hashtype = SHA:SHA
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 1024-bit MODP group:1536-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:3DES-CBC
09:33:27 ipsec,debug (encklen = 192:0)
09:33:27 ipsec,debug hashtype = SHA:SHA
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 2048-bit MODP group:1536-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:3DES-CBC
09:33:27 ipsec,debug (encklen = 192:0)
09:33:27 ipsec,debug hashtype = SHA:SHA
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 1024-bit MODP group:1536-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:3DES-CBC
09:33:27 ipsec,debug (encklen = 128:0)
09:33:27 ipsec,debug hashtype = SHA:SHA
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 2048-bit MODP group:1536-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:3DES-CBC
09:33:27 ipsec,debug (encklen = 128:0)
09:33:27 ipsec,debug hashtype = SHA:SHA
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 1024-bit MODP group:1536-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = 3DES-CBC:3DES-CBC
09:33:27 ipsec,debug (encklen = 0:0)
09:33:27 ipsec,debug hashtype = SHA:SHA
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 2048-bit MODP group:1536-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = 3DES-CBC:3DES-CBC
09:33:27 ipsec,debug (encklen = 0:0)
09:33:27 ipsec,debug hashtype = SHA:SHA
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 1024-bit MODP group:1536-bit MODP group
09:33:27 ipsec,debug prop#=0, prot-id=ISAKMP, spi-size=0, #trns=16
09:33:27 ipsec,debug trns#=5, trns-id=IKE
09:33:27 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
09:33:27 ipsec,debug type=Life Duration, flag=0x8000, lorv=28800
09:33:27 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=3DES-CBC
09:33:27 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=MD5
09:33:27 ipsec,debug type=Authentication Method, flag=0x8000, lorv=pre-shared key
09:33:27 ipsec,debug type=Group Description, flag=0x8000, lorv=1024-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:3DES-CBC
09:33:27 ipsec,debug (encklen = 256:0)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 2048-bit MODP group:1024-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:3DES-CBC
09:33:27 ipsec,debug (encklen = 256:0)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 1024-bit MODP group:1024-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:3DES-CBC
09:33:27 ipsec,debug (encklen = 192:0)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 2048-bit MODP group:1024-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:3DES-CBC
09:33:27 ipsec,debug (encklen = 192:0)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 1024-bit MODP group:1024-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:3DES-CBC
09:33:27 ipsec,debug (encklen = 128:0)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 2048-bit MODP group:1024-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:3DES-CBC
09:33:27 ipsec,debug (encklen = 128:0)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 1024-bit MODP group:1024-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = 3DES-CBC:3DES-CBC
09:33:27 ipsec,debug (encklen = 0:0)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 2048-bit MODP group:1024-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = 3DES-CBC:3DES-CBC
09:33:27 ipsec,debug (encklen = 0:0)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 1024-bit MODP group:1024-bit MODP group
09:33:27 ipsec,debug prop#=0, prot-id=ISAKMP, spi-size=0, #trns=16
09:33:27 ipsec,debug trns#=6, trns-id=IKE
09:33:27 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
09:33:27 ipsec,debug type=Life Duration, flag=0x8000, lorv=28800
09:33:27 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=AES-CBC
09:33:27 ipsec,debug type=Key Length, flag=0x8000, lorv=128
09:33:27 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=MD5
09:33:27 ipsec,debug type=Authentication Method, flag=0x8000, lorv=pre-shared key
09:33:27 ipsec,debug type=Group Description, flag=0x8000, lorv=1024-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:AES-CBC
09:33:27 ipsec,debug (encklen = 256:128)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 2048-bit MODP group:1024-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:AES-CBC
09:33:27 ipsec,debug (encklen = 256:128)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 1024-bit MODP group:1024-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:AES-CBC
09:33:27 ipsec,debug (encklen = 192:128)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 2048-bit MODP group:1024-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:AES-CBC
09:33:27 ipsec,debug (encklen = 192:128)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 1024-bit MODP group:1024-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:AES-CBC
09:33:27 ipsec,debug (encklen = 128:128)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 2048-bit MODP group:1024-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:AES-CBC
09:33:27 ipsec,debug (encklen = 128:128)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 1024-bit MODP group:1024-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = 3DES-CBC:AES-CBC
09:33:27 ipsec,debug (encklen = 0:128)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 2048-bit MODP group:1024-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = 3DES-CBC:AES-CBC
09:33:27 ipsec,debug (encklen = 0:128)
09:33:27 ipsec,debug hashtype = SHA:MD5
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 1024-bit MODP group:1024-bit MODP group
09:33:27 ipsec,debug prop#=0, prot-id=ISAKMP, spi-size=0, #trns=16
09:33:27 ipsec,debug trns#=7, trns-id=IKE
09:33:27 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
09:33:27 ipsec,debug type=Life Duration, flag=0x8000, lorv=28800
09:33:27 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=AES-CBC
09:33:27 ipsec,debug type=Key Length, flag=0x8000, lorv=256
09:33:27 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=SHA
09:33:27 ipsec,debug type=Authentication Method, flag=0x8000, lorv=pre-shared key
09:33:27 ipsec,debug type=Group Description, flag=0x8000, lorv=1024-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:AES-CBC
09:33:27 ipsec,debug (encklen = 256:256)
09:33:27 ipsec,debug hashtype = SHA:SHA
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 2048-bit MODP group:1024-bit MODP group
09:33:27 ipsec,debug Compared: Local:Peer
09:33:27 ipsec,debug (lifetime = 86400:28800)
09:33:27 ipsec,debug (lifebyte = 0:0)
09:33:27 ipsec,debug enctype = AES-CBC:AES-CBC
09:33:27 ipsec,debug (encklen = 256:256)
09:33:27 ipsec,debug hashtype = SHA:SHA
09:33:27 ipsec,debug authmethod = pre-shared key:pre-shared key
09:33:27 ipsec,debug dh_group = 1024-bit MODP group:1024-bit MODP group
09:33:27 ipsec,debug an acceptable proposal found.
09:33:27 ipsec,debug dh(modp1024)
09:33:27 ipsec,debug agreed on pre-shared key auth.
09:33:27 ipsec,debug ===
09:33:27 ipsec,debug new cookie:
09:33:27 ipsec,debug b6e9f19504ee76f4
09:33:27 ipsec,debug add payload of len 52, next type 13
09:33:27 ipsec,debug add payload of len 16, next type 13
09:33:27 ipsec,debug add payload of len 16, next type 0
09:33:27 ipsec,debug 124 bytes from 192.168.73.37[500] to 83.9.xxx.xxx[500]
09:33:27 ipsec,debug 1 times of 124 bytes message will be sent to 83.9.xxx.xxx[500]
09:33:27 ipsec,debug,packet aec869d8 67ab7196 b6e9f195 04ee76f4 01100200 00000000 0000007c 0d000038
09:33:27 ipsec,debug,packet 00000001 00000001 0000002c 00010001 00000024 07010000 800b0001 800c7080
09:33:27 ipsec,debug,packet 80010007 800e0100 80020002 80030001 80040002 0d000014 4a131c81 07035845
09:33:27 ipsec,debug,packet 5c5728f2 0e95452f 00000014 afcad713 68a1f1c9 6b8696fc 77570100
09:33:27 ipsec sent phase1 packet 192.168.73.37[500]<=>83.9.xxx.xxx[500] aec869d867ab7196:b6e9f19504ee76f4
09:33:27 ipsec,debug ===== received 228 bytes from 83.9.xxx.xxx[500] to 192.168.73.37[500]
09:33:27 ipsec,debug,packet aec869d8 67ab7196 b6e9f195 04ee76f4 04100200 00000000 000000e4 0a000084
09:33:27 ipsec,debug,packet 8345938d baadf3e5 441a6fe6 58382596 47a7019e 64944a34 7f6f33aa b7d50b8d
09:33:27 ipsec,debug,packet 82346e2d 045ef9a7 66aba78b 7fc29f88 541afd39 9831dd4c 7f3badc0 f6c516a5
09:33:27 ipsec,debug,packet 4ef582df 360107a4 274f5abd 9395465e 68969b1f e3173ea5 52d35c0d 617b2142
09:33:27 ipsec,debug,packet 39b1e4e1 f949550c da2f0846 e3938a42 be8d275a 1a0708f8 d4647227 ee8f1614
09:33:27 ipsec,debug,packet 14000014 3f620971 f764c56b d71ec92d df202d37 14000018 017b4f2d d7c4630f
09:33:27 ipsec,debug,packet a7059a33 0725e76e ad42cced 00000018 1256f5fd e07bb10f 631090db f5d25558
09:33:27 ipsec,debug,packet bd2772d3
09:33:27 ipsec,debug begin.
09:33:27 ipsec,debug seen nptype=4(ke) len=132
09:33:27 ipsec,debug seen nptype=10(nonce) len=20
09:33:27 ipsec,debug seen nptype=20(nat-d) len=24
09:33:27 ipsec,debug seen nptype=20(nat-d) len=24
09:33:27 ipsec,debug succeed.
09:33:27 ipsec 192.168.73.37 Hashing 192.168.73.37[500] with algo #2
09:33:27 ipsec,debug hash(sha1)
09:33:27 ipsec NAT-D payload #0 doesn't match
09:33:27 ipsec 83.9.xxx.xxx Hashing 83.9.xxx.xxx[500] with algo #2
09:33:27 ipsec,debug hash(sha1)
09:33:27 ipsec NAT-D payload #1 verified
09:33:27 ipsec NAT detected: ME
09:33:27 ipsec,debug ===
09:33:27 ipsec,debug dh(modp1024)
09:33:27 ipsec,debug compute DH's private.
09:33:27 ipsec,debug 4b2a9b10 2ff00ca9 28b18552 69b95cb5 4953dd44 3095c707 ec585227 028c3317
09:33:27 ipsec,debug fd211414 dd5bfcd5 7f1f7fe2 7b7d97ff fcdf3f6b 600b8d0b b45d7d96 d35b9cb2
09:33:27 ipsec,debug 0027c772 2ce4e0be ddad1de5 05227ee2 33e560a3 c50f7abe 5b0a986f c3d06833
09:33:27 ipsec,debug 5aa58c4a c8ff6c80 07f8c935 e0814be0 d86366e4 a8543d88 d43db494 bfe4b861
09:33:27 ipsec,debug compute DH's public.
09:33:27 ipsec,debug fc2b6a9b 5c73dac3 7433badb e343c345 c4b290ca c37b48a1 6ec8f4ce af1121c9
09:33:27 ipsec,debug f6151a2c 1fd9b69c 2e88bae5 9fad6934 bcfff199 2035f90f c4ddcb33 6c7b4f03
09:33:27 ipsec,debug 8191a065 0beadde4 73e6b1e2 c74aef51 a5252d5b 4cb9f1aa b3633893 efad9e95
09:33:27 ipsec,debug f980882a a7d9f0ce fb991097 4ce7178e 0842728e 2a2c64f5 e06f6e96 8ff4a9ea
09:33:27 ipsec 83.9.xxx.xxx Hashing 83.9.xxx.xxx[500] with algo #2
09:33:27 ipsec,debug hash(sha1)
09:33:27 ipsec 192.168.73.37 Hashing 192.168.73.37[500] with algo #2
09:33:27 ipsec,debug hash(sha1)
09:33:27 ipsec Adding remote and local NAT-D payloads.
09:33:27 ipsec,debug add payload of len 128, next type 10
09:33:27 ipsec,debug add payload of len 24, next type 20
09:33:27 ipsec,debug add payload of len 20, next type 20
09:33:27 ipsec,debug add payload of len 20, next type 0
09:33:27 ipsec,debug 236 bytes from 192.168.73.37[500] to 83.9.xxx.xxx[500]
09:33:27 ipsec,debug 1 times of 236 bytes message will be sent to 83.9.xxx.xxx[500]
09:33:27 ipsec,debug,packet aec869d8 67ab7196 b6e9f195 04ee76f4 04100200 00000000 000000ec 0a000084
09:33:27 ipsec,debug,packet fc2b6a9b 5c73dac3 7433badb e343c345 c4b290ca c37b48a1 6ec8f4ce af1121c9
09:33:27 ipsec,debug,packet f6151a2c 1fd9b69c 2e88bae5 9fad6934 bcfff199 2035f90f c4ddcb33 6c7b4f03
09:33:27 ipsec,debug,packet 8191a065 0beadde4 73e6b1e2 c74aef51 a5252d5b 4cb9f1aa b3633893 efad9e95
09:33:27 ipsec,debug,packet f980882a a7d9f0ce fb991097 4ce7178e 0842728e 2a2c64f5 e06f6e96 8ff4a9ea
09:33:27 ipsec,debug,packet 1400001c b6f796ae 1b02efed 66660f94 974cf70c 01062887 a0e7a0b4 14000018
09:33:27 ipsec,debug,packet 1256f5fd e07bb10f 631090db f5d25558 bd2772d3 00000018 f94e0843 c11b233f
09:33:27 ipsec,debug,packet 82c43898 797336fb e8608043
09:33:27 ipsec sent phase1 packet 192.168.73.37[500]<=>83.9.xxx.xxx[500] aec869d867ab7196:b6e9f19504ee76f4
09:33:27 ipsec,debug dh(modp1024)
09:33:27 ipsec,debug compute DH's shared.
09:33:27 ipsec,debug
09:33:27 ipsec,debug 59803008 001e7363 461d0184 cb9e7f90 7c71012f f5668457 c64e9d9f 6525869f
09:33:27 ipsec,debug 7e8e6fac 768882ee 05eefa77 a5dcf2f2 127efcf3 e931c1b1 904ad5ec dbdba7c9
09:33:27 ipsec,debug ce645993 f6c43624 eaa986bc 13bd0419 905e2209 17767c52 11d3b7c0 67ac690e
09:33:27 ipsec,debug 023bd842 ddd30871 91c8b436 d42f68a4 28839fbf 35a82aec f9cea545 ff3c5d3f
09:33:27 ipsec,debug nonce 1:
09:33:27 ipsec,debug 3f620971 f764c56b d71ec92d df202d37
09:33:27 ipsec,debug nonce 2:
09:33:27 ipsec,debug b6f796ae 1b02efed 66660f94 974cf70c 01062887 a0e7a0b4
09:33:27 ipsec,debug hmac(hmac_sha1)
09:33:27 ipsec,debug SKEYID computed:
09:33:27 ipsec,debug 8909c196 33116738 17a963c0 035b04d2 7ff3f974
09:33:27 ipsec,debug hmac(hmac_sha1)
09:33:27 ipsec,debug SKEYID_d computed:
09:33:27 ipsec,debug e9fca1ca c0aec1cd 9a3aa578 7c46f883 a16ac1f1
09:33:27 ipsec,debug hmac(hmac_sha1)
09:33:27 ipsec,debug SKEYID_a computed:
09:33:27 ipsec,debug e23de8cc e42f8667 3efcda2e 7871b3fd b157ed33
09:33:27 ipsec,debug hmac(hmac_sha1)
09:33:27 ipsec,debug SKEYID_e computed:
09:33:27 ipsec,debug e539384e aaccf422 45b4ca0a d31726ae 3d64584e
09:33:27 ipsec,debug encryption(aes)
09:33:27 ipsec,debug hash(sha1)
09:33:27 ipsec,debug len(SKEYID_e) < len(Ka) (20 < 32), generating long key (Ka = K1 | K2 | ...)
09:33:27 ipsec,debug hmac(hmac_sha1)
09:33:27 ipsec,debug compute intermediate encryption key K1
09:33:27 ipsec,debug 00
09:33:27 ipsec,debug 4d82452d b052f126 7b812355 068b703d c67456f2
09:33:27 ipsec,debug hmac(hmac_sha1)
09:33:27 ipsec,debug compute intermediate encryption key K2
09:33:27 ipsec,debug 4d82452d b052f126 7b812355 068b703d c67456f2
09:33:27 ipsec,debug b0fc709d 317e78d8 092ac593 2a963cac 6f0adb73
09:33:27 ipsec,debug final encryption key computed:
09:33:27 ipsec,debug 4d82452d b052f126 7b812355 068b703d c67456f2 b0fc709d 317e78d8 092ac593
09:33:27 ipsec,debug hash(sha1)
09:33:27 ipsec,debug encryption(aes)
09:33:27 ipsec,debug IV computed:
09:33:27 ipsec,debug 63d3cde1 7b4332de ad3ed0d8 618c1320
09:33:27 ipsec,debug ===== received 92 bytes from 83.9.xxx.xxx[4500] to 192.168.73.37[4500]
09:33:27 ipsec,debug,packet aec869d8 67ab7196 b6e9f195 04ee76f4 05100201 00000000 0000005c bbadc9bd
09:33:27 ipsec,debug,packet 8981e114 bdc1a4dc e21172f2 054c4673 60263125 38ecf07e 4a26f126 63d1b4db
09:33:27 ipsec,debug,packet 9f0979e1 3fbfc6fb 14647fb1 6aaaedbf 2e327a4f c326f87c ed88158d
09:33:27 ipsec NAT-T: ports changed to: 83.9.xxx.xxx[4500]<=>192.168.73.37[4500]
09:33:27 ipsec KA list add: 192.168.73.37[4500]->83.9.xxx.xxx[4500]
09:33:27 ipsec,debug encryption(aes)
09:33:27 ipsec,debug IV was saved for next processing:
09:33:27 ipsec,debug 6aaaedbf 2e327a4f c326f87c ed88158d
09:33:27 ipsec,debug encryption(aes)
09:33:27 ipsec,debug with key:
09:33:27 ipsec,debug 4d82452d b052f126 7b812355 068b703d c67456f2 b0fc709d 317e78d8 092ac593
09:33:27 ipsec,debug decrypted payload by IV:
09:33:27 ipsec,debug 63d3cde1 7b4332de ad3ed0d8 618c1320
09:33:27 ipsec,debug decrypted payload, but not trimed.
09:33:27 ipsec,debug 0800000c 01000000 5309f665 0b000018 379834a0 a532c2d7 f55ac0e3 2d232d9f
09:33:27 ipsec,debug 2737d38d 0000001c 00000001 01106002 aec869d8 67ab7196 b6e9f195 04ee76f4
09:33:27 ipsec,debug padding len=245
09:33:27 ipsec,debug skip to trim padding.
09:33:27 ipsec,debug decrypted.
09:33:27 ipsec,debug aec869d8 67ab7196 b6e9f195 04ee76f4 05100201 00000000 0000005c 0800000c
09:33:27 ipsec,debug 01000000 5309f665 0b000018 379834a0 a532c2d7 f55ac0e3 2d232d9f 2737d38d
09:33:27 ipsec,debug 0000001c 00000001 01106002 aec869d8 67ab7196 b6e9f195 04ee76f4
09:33:27 ipsec,debug begin.
09:33:27 ipsec,debug seen nptype=5(id) len=12
09:33:27 ipsec,debug seen nptype=8(hash) len=24
09:33:27 ipsec,debug seen nptype=11(notify) len=28
09:33:27 ipsec,debug succeed.
09:33:27 ipsec,debug 83.9.xxx.xxx Notify Message received
09:33:27 ipsec 83.9.xxx.xxx ignore INITIAL-CONTACT notification, because it is only accepted after phase1.
09:33:27 ipsec,debug HASH received:
09:33:27 ipsec,debug 379834a0 a532c2d7 f55ac0e3 2d232d9f 2737d38d
09:33:27 ipsec,debug HASH with:
09:33:27 ipsec,debug 8345938d baadf3e5 441a6fe6 58382596 47a7019e 64944a34 7f6f33aa b7d50b8d
09:33:27 ipsec,debug 82346e2d 045ef9a7 66aba78b 7fc29f88 541afd39 9831dd4c 7f3badc0 f6c516a5
09:33:27 ipsec,debug 4ef582df 360107a4 274f5abd 9395465e 68969b1f e3173ea5 52d35c0d 617b2142
09:33:27 ipsec,debug 39b1e4e1 f949550c da2f0846 e3938a42 be8d275a 1a0708f8 d4647227 ee8f1614
09:33:27 ipsec,debug fc2b6a9b 5c73dac3 7433badb e343c345 c4b290ca c37b48a1 6ec8f4ce af1121c9
09:33:27 ipsec,debug f6151a2c 1fd9b69c 2e88bae5 9fad6934 bcfff199 2035f90f c4ddcb33 6c7b4f03
09:33:27 ipsec,debug 8191a065 0beadde4 73e6b1e2 c74aef51 a5252d5b 4cb9f1aa b3633893 efad9e95
09:33:27 ipsec,debug f980882a a7d9f0ce fb991097 4ce7178e 0842728e 2a2c64f5 e06f6e96 8ff4a9ea
09:33:27 ipsec,debug aec869d8 67ab7196 b6e9f195 04ee76f4 00000001 00000001 00000228 00010010
09:33:27 ipsec,debug 03000020 00010000 800b0001 800c7080 80010001 80020001 80030001 80040001
09:33:27 ipsec,debug 03000020 01010000 800b0001 800c7080 80010001 80020002 80030001 80040001
09:33:27 ipsec,debug 03000020 02010000 800b0001 800c7080 80010005 80020001 80030001 80040001
09:33:27 ipsec,debug 03000020 03010000 800b0001 800c7080 80010005 80020001 80030001 80040005
09:33:27 ipsec,debug 03000020 04010000 800b0001 800c7080 80010005 80020002 80030001 80040005
09:33:27 ipsec,debug 03000020 05010000 800b0001 800c7080 80010005 80020001 80030001 80040002
09:33:27 ipsec,debug 03000024 06010000 800b0001 800c7080 80010007 800e0080 80020001 80030001
09:33:27 ipsec,debug 80040002 03000024 07010000 800b0001 800c7080 80010007 800e0100 80020002
09:33:27 ipsec,debug 80030001 80040002 03000024 08010000 800b0001 800c7080 80010007 800e0080
09:33:27 ipsec,debug 80020001 80030001 80040005 03000024 09010000 800b0001 800c7080 80010007
09:33:27 ipsec,debug 800e0100 80020002 80030001 80040005 03000024 0a010000 800b0001 800c7080
09:33:27 ipsec,debug 80010007 800e0100 80020002 80030001 8004000e 03000020 0b010000 800b0001
09:33:27 ipsec,debug 800c7080 80010001 80020004 80030001 80040001 03000020 0c010000 800b0001
09:33:27 ipsec,debug 800c7080 80010005 80020004 80030001 80040005 03000024 0d010000 800b0001
09:33:27 ipsec,debug 800c7080 80010007 800e0100 80020004 80030001 80040002 03000024 0e010000
09:33:27 ipsec,debug 800b0001 800c7080 80010007 800e0100 80020004 80030001 80040005 00000024
09:33:27 ipsec,debug 0f010000 800b0001 800c7080 80010007 800e0100 80020004 80030001 8004000e
09:33:27 ipsec,debug 01000000 5309f665
09:33:27 ipsec,debug hmac(hmac_sha1)
09:33:27 ipsec,debug HASH computed:
09:33:27 ipsec,debug 379834a0 a532c2d7 f55ac0e3 2d232d9f 2737d38d
09:33:27 ipsec,debug HASH for PSK validated.
09:33:27 ipsec,debug 83.9.xxx.xxx peer's ID
09:33:27 ipsec,debug 01000000 5309f665
09:33:27 ipsec,debug ===
09:33:27 ipsec,debug use ID type of IPv4_address
09:33:27 ipsec,debug generate HASH_R
09:33:27 ipsec,debug HASH with:
09:33:27 ipsec,debug fc2b6a9b 5c73dac3 7433badb e343c345 c4b290ca c37b48a1 6ec8f4ce af1121c9
09:33:27 ipsec,debug f6151a2c 1fd9b69c 2e88bae5 9fad6934 bcfff199 2035f90f c4ddcb33 6c7b4f03
09:33:27 ipsec,debug 8191a065 0beadde4 73e6b1e2 c74aef51 a5252d5b 4cb9f1aa b3633893 efad9e95
09:33:27 ipsec,debug f980882a a7d9f0ce fb991097 4ce7178e 0842728e 2a2c64f5 e06f6e96 8ff4a9ea
09:33:27 ipsec,debug 8345938d baadf3e5 441a6fe6 58382596 47a7019e 64944a34 7f6f33aa b7d50b8d
09:33:27 ipsec,debug 82346e2d 045ef9a7 66aba78b 7fc29f88 541afd39 9831dd4c 7f3badc0 f6c516a5
09:33:27 ipsec,debug 4ef582df 360107a4 274f5abd 9395465e 68969b1f e3173ea5 52d35c0d 617b2142
09:33:27 ipsec,debug 39b1e4e1 f949550c da2f0846 e3938a42 be8d275a 1a0708f8 d4647227 ee8f1614
09:33:27 ipsec,debug b6e9f195 04ee76f4 aec869d8 67ab7196 00000001 00000001 00000228 00010010
09:33:27 ipsec,debug 03000020 00010000 800b0001 800c7080 80010001 80020001 80030001 80040001
09:33:27 ipsec,debug 03000020 01010000 800b0001 800c7080 80010001 80020002 80030001 80040001
09:33:27 ipsec,debug 03000020 02010000 800b0001 800c7080 80010005 80020001 80030001 80040001
09:33:27 ipsec,debug 03000020 03010000 800b0001 800c7080 80010005 80020001 80030001 80040005
09:33:27 ipsec,debug 03000020 04010000 800b0001 800c7080 80010005 80020002 80030001 80040005
09:33:27 ipsec,debug 03000020 05010000 800b0001 800c7080 80010005 80020001 80030001 80040002
09:33:27 ipsec,debug 03000024 06010000 800b0001 800c7080 80010007 800e0080 80020001 80030001
09:33:27 ipsec,debug 80040002 03000024 07010000 800b0001 800c7080 80010007 800e0100 80020002
09:33:27 ipsec,debug 80030001 80040002 03000024 08010000 800b0001 800c7080 80010007 800e0080
09:33:27 ipsec,debug 80020001 80030001 80040005 03000024 09010000 800b0001 800c7080 80010007
09:33:27 ipsec,debug 800e0100 80020002 80030001 80040005 03000024 0a010000 800b0001 800c7080
09:33:27 ipsec,debug 80010007 800e0100 80020002 80030001 8004000e 03000020 0b010000 800b0001
09:33:27 ipsec,debug 800c7080 80010001 80020004 80030001 80040001 03000020 0c010000 800b0001
09:33:27 ipsec,debug 800c7080 80010005 80020004 80030001 80040005 03000024 0d010000 800b0001
09:33:27 ipsec,debug 800c7080 80010007 800e0100 80020004 80030001 80040002 03000024 0e010000
09:33:27 ipsec,debug 800b0001 800c7080 80010007 800e0100 80020004 80030001 80040005 00000024
09:33:27 ipsec,debug 0f010000 800b0001 800c7080 80010007 800e0100 80020004 80030001 8004000e
09:33:27 ipsec,debug 011101f4 c0a84925
09:33:27 ipsec,debug hmac(hmac_sha1)
09:33:27 ipsec,debug HASH computed:
09:33:27 ipsec,debug b958dc43 df3de70a 17861d84 ad48b365 f8df5a12
09:33:27 ipsec,debug add payload of len 8, next type 8
09:33:27 ipsec,debug add payload of len 20, next type 0
09:33:27 ipsec,debug begin encryption.
09:33:27 ipsec,debug encryption(aes)
09:33:27 ipsec,debug pad length = 12
09:33:27 ipsec,debug 0800000c 011101f4 c0a84925 00000018 b958dc43 df3de70a 17861d84 ad48b365
09:33:27 ipsec,debug f8df5a12 c46b8f8c f58943ba 9b85e70b
09:33:27 ipsec,debug encryption(aes)
09:33:27 ipsec,debug with key:
09:33:27 ipsec,debug 4d82452d b052f126 7b812355 068b703d c67456f2 b0fc709d 317e78d8 092ac593
09:33:27 ipsec,debug encrypted payload by IV:
09:33:27 ipsec,debug 6aaaedbf 2e327a4f c326f87c ed88158d
09:33:27 ipsec,debug save IV for next:
09:33:27 ipsec,debug 037d5d82 14c91146 0d688bc1 e4a7da6d
09:33:27 ipsec,debug encrypted.
09:33:27 ipsec,debug 76 bytes from 192.168.73.37[4500] to 83.9.xxx.xxx[4500]
09:33:27 ipsec,debug 1 times of 80 bytes message will be sent to 83.9.xxx.xxx[4500]
09:33:27 ipsec,debug,packet aec869d8 67ab7196 b6e9f195 04ee76f4 05100201 00000000 0000004c e5dd82bd
09:33:27 ipsec,debug,packet 5d3e0d87 d48526b1 b2535f54 e393d017 b2db2d51 53957e13 d3d8d409 037d5d82
09:33:27 ipsec,debug,packet 14c91146 0d688bc1 e4a7da6d
09:33:27 ipsec,info ISAKMP-SA established 192.168.73.37[4500]-83.9.xxx.xxx[4500] spi:aec869d867ab7196:b6e9f19504ee76f4
09:33:27 ipsec,debug ===
09:33:27 ipsec,debug ===== received 156 bytes from 83.9.xxx.xxx[4500] to 192.168.73.37[4500]
09:33:27 ipsec,debug,packet aec869d8 67ab7196 b6e9f195 04ee76f4 08102001 830ec21e 0000009c d5bba949
09:33:27 ipsec,debug,packet 929a23e7 59f0dd11 6bd5b966 4b169f4f 69f69645 dc4cfd3d f33d820b 41f9a23f
09:33:27 ipsec,debug,packet bd9a546e a773af7b 21e63424 9f6ebf27 94e32392 efab0958 e97abe2d 30f368d0
09:33:27 ipsec,debug,packet c02b69ae 72924eb4 3ce18cba cc31bf28 2dbdaafe 51112a50 74c0d367 b1580160
09:33:27 ipsec,debug,packet 9e775b69 efb4bcef f84fcba7 5494a836 8df4532c a7c84e11 368e2b52
09:33:27 ipsec,debug compute IV for phase2
09:33:27 ipsec,debug phase1 last IV:
09:33:27 ipsec,debug 037d5d82 14c91146 0d688bc1 e4a7da6d 830ec21e
09:33:27 ipsec,debug hash(sha1)
09:33:27 ipsec,debug encryption(aes)
09:33:27 ipsec,debug phase2 IV computed:
09:33:27 ipsec,debug 00a9fbeb 06fa24b4 57379c5a 60844315
09:33:27 ipsec,debug ===
09:33:27 ipsec respond new phase 2 negotiation: 192.168.73.37[4500]<=>83.9.xxx.xxx[4500]
09:33:27 ipsec,debug encryption(aes)
09:33:27 ipsec,debug IV was saved for next processing:
09:33:27 ipsec,debug 5494a836 8df4532c a7c84e11 368e2b52
09:33:27 ipsec,debug encryption(aes)
09:33:27 ipsec,debug with key:
09:33:27 ipsec,debug 4d82452d b052f126 7b812355 068b703d c67456f2 b0fc709d 317e78d8 092ac593
09:33:27 ipsec,debug decrypted payload by IV:
09:33:27 ipsec,debug 00a9fbeb 06fa24b4 57379c5a 60844315
09:33:27 ipsec,debug decrypted payload, but not trimed.
09:33:27 ipsec,debug 01000018 f323b871 7a412496 60644ba7 ccdeb78d f414accf 0a000030 00000001
09:33:27 ipsec,debug 00000001 00000024 00030401 2d347dad 00000018 00030000 80040003 80010001
09:33:27 ipsec,debug 80020e10 80050001 05000014 cc2dd9d8 d7cbe1d6 93c1a1cc b73fa90a 05000010
09:33:27 ipsec,debug 04000000 c0a80100 ffffff00 00000010 04000000 c0a80200 ffffff00 00000000
09:33:27 ipsec,debug padding len=1
09:33:27 ipsec,debug skip to trim padding.
09:33:27 ipsec,debug decrypted.
09:33:27 ipsec,debug aec869d8 67ab7196 b6e9f195 04ee76f4 08102001 830ec21e 0000009c 01000018
09:33:27 ipsec,debug f323b871 7a412496 60644ba7 ccdeb78d f414accf 0a000030 00000001 00000001
09:33:27 ipsec,debug 00000024 00030401 2d347dad 00000018 00030000 80040003 80010001 80020e10
09:33:27 ipsec,debug 80050001 05000014 cc2dd9d8 d7cbe1d6 93c1a1cc b73fa90a 05000010 04000000
09:33:27 ipsec,debug c0a80100 ffffff00 00000010 04000000 c0a80200 ffffff00 00000000
09:33:27 ipsec,debug begin.
09:33:27 ipsec,debug seen nptype=8(hash) len=24
09:33:27 ipsec,debug seen nptype=1(sa) len=48
09:33:27 ipsec,debug seen nptype=10(nonce) len=20
09:33:27 ipsec,debug seen nptype=5(id) len=16
09:33:27 ipsec,debug seen nptype=5(id) len=16
09:33:27 ipsec,debug succeed.
09:33:27 ipsec,debug received IDci2:
09:33:27 ipsec,debug 04000000 c0a80100 ffffff00
09:33:27 ipsec,debug received IDcr2:
09:33:27 ipsec,debug 04000000 c0a80200 ffffff00
09:33:27 ipsec,debug HASH(1) validate:
09:33:27 ipsec,debug f323b871 7a412496 60644ba7 ccdeb78d f414accf
09:33:27 ipsec,debug HASH with:
09:33:27 ipsec,debug 830ec21e 0a000030 00000001 00000001 00000024 00030401 2d347dad 00000018
09:33:27 ipsec,debug 00030000 80040003 80010001 80020e10 80050001 05000014 cc2dd9d8 d7cbe1d6
09:33:27 ipsec,debug 93c1a1cc b73fa90a 05000010 04000000 c0a80100 ffffff00 00000010 04000000
09:33:27 ipsec,debug c0a80200 ffffff00
09:33:27 ipsec,debug hmac(hmac_sha1)
09:33:27 ipsec,debug HASH computed:
09:33:27 ipsec,debug f323b871 7a412496 60644ba7 ccdeb78d f414accf
09:33:27 ipsec,debug total SA len=44
09:33:27 ipsec,debug 00000001 00000001 00000024 00030401 2d347dad 00000018 00030000 80040003
09:33:27 ipsec,debug 80010001 80020e10 80050001
09:33:27 ipsec,debug begin.
09:33:27 ipsec,debug seen nptype=2(prop) len=36
09:33:27 ipsec,debug succeed.
09:33:27 ipsec,debug proposal #0 len=36
09:33:27 ipsec,debug begin.
09:33:27 ipsec,debug seen nptype=3(trns) len=24
09:33:27 ipsec,debug succeed.
09:33:27 ipsec,debug transform #0 len=24
09:33:27 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=UDP-Tunnel
09:33:27 ipsec,debug UDP encapsulation requested
09:33:27 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
09:33:27 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=3600
09:33:27 ipsec,debug life duration was in TLV.
09:33:27 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-md5
09:33:27 ipsec,debug pair 0:
09:33:27 ipsec,debug 0x48e6f0: next=(nil) tnext=(nil)
09:33:27 ipsec,debug proposal #0: 1 transform
09:33:27 ipsec,debug got the local address from ID payload 192.168.2.0[0] prefixlen=24 ul_proto=255
09:33:27 ipsec,debug got the peer address from ID payload 192.168.1.0[0] prefixlen=24 ul_proto=255
09:33:27 ipsec searching for policy for selector: 192.168.2.0/24 <=> 192.168.1.0/24
09:33:27 ipsec exact policy with different sa- addresses exists:
09:33:27 ipsec 192.168.2.0/24 <=> 192.168.1.0/24
09:33:27 ipsec failed to get proposal for responder.
09:33:27 ipsec,error 83.9.xxx.xxx failed to pre-process ph2 packet.
09:33:27 ipsec,debug compute IV for phase2
09:33:27 ipsec,debug phase1 last IV:
09:33:27 ipsec,debug 037d5d82 14c91146 0d688bc1 e4a7da6d 8c24eb75
09:33:27 ipsec,debug hash(sha1)
09:33:27 ipsec,debug encryption(aes)
09:33:27 ipsec,debug phase2 IV computed:
09:33:27 ipsec,debug a4ddbf0f c2f4b3da 018b8d19 0ffb3372
09:33:27 ipsec,debug HASH with:
09:33:27 ipsec,debug 8c24eb75 0000000c 00000001 0100000e
09:33:27 ipsec,debug hmac(hmac_sha1)
09:33:27 ipsec,debug HASH computed:
09:33:27 ipsec,debug bea56aa4 6fdea942 0e575de0 321c6659 175aef3a
09:33:27 ipsec,debug begin encryption.
09:33:27 ipsec,debug encryption(aes)
09:33:27 ipsec,debug pad length = 12
09:33:27 ipsec,debug 0b000018 bea56aa4 6fdea942 0e575de0 321c6659 175aef3a 0000000c 00000001
09:33:27 ipsec,debug 0100000e 2173ea40 68c318ac 56ec200b
09:33:27 ipsec,debug encryption(aes)
09:33:27 ipsec,debug with key:
09:33:27 ipsec,debug 4d82452d b052f126 7b812355 068b703d c67456f2 b0fc709d 317e78d8 092ac593
09:33:27 ipsec,debug encrypted payload by IV:
09:33:27 ipsec,debug a4ddbf0f c2f4b3da 018b8d19 0ffb3372
09:33:27 ipsec,debug save IV for next:
09:33:27 ipsec,debug b193b133 749c8971 32d0fbc0 9d1cad0a
09:33:27 ipsec,debug encrypted.
09:33:27 ipsec,debug 76 bytes from 192.168.73.37[4500] to 83.9.xxx.xxx[4500]
09:33:27 ipsec,debug 1 times of 80 bytes message will be sent to 83.9.xxx.xxx[4500]
09:33:27 ipsec,debug,packet aec869d8 67ab7196 b6e9f195 04ee76f4 08100501 8c24eb75 0000004c 7283c5f8
09:33:27 ipsec,debug,packet 1b3946bc 17533fcf 4c6d89c7 4c697279 06eec69a 5399642e 56429ea3 b193b133
09:33:27 ipsec,debug,packet 749c8971 32d0fbc0 9d1cad0a
09:33:27 ipsec,debug sendto Information notify.
09:33:30 ipsec,debug ===== received 156 bytes from 83.9.xxx.xxx[4500] to 192.168.73.37[4500]
09:33:30 ipsec,debug,packet aec869d8 67ab7196 b6e9f195 04ee76f4 08102001 830ec21e 0000009c d5bba949
09:33:30 ipsec,debug,packet 929a23e7 59f0dd11 6bd5b966 4b169f4f 69f69645 dc4cfd3d f33d820b 41f9a23f
09:33:30 ipsec,debug,packet bd9a546e a773af7b 21e63424 9f6ebf27 94e32392 efab0958 e97abe2d 30f368d0
09:33:30 ipsec,debug,packet c02b69ae 72924eb4 3ce18cba cc31bf28 2dbdaafe 51112a50 74c0d367 b1580160
09:33:30 ipsec,debug,packet 9e775b69 efb4bcef f84fcba7 5494a836 8df4532c a7c84e11 368e2b52
09:33:30 ipsec,error 83.9.xxx.xxx peer sent packet for dead phase2
09:33:36 ipsec,debug ===== received 156 bytes from 83.9.xxx.xxx[4500] to 192.168.73.37[4500]
09:33:36 ipsec,debug,packet aec869d8 67ab7196 b6e9f195 04ee76f4 08102001 830ec21e 0000009c d5bba949
09:33:36 ipsec,debug,packet 929a23e7 59f0dd11 6bd5b966 4b169f4f 69f69645 dc4cfd3d f33d820b 41f9a23f
09:33:36 ipsec,debug,packet bd9a546e a773af7b 21e63424 9f6ebf27 94e32392 efab0958 e97abe2d 30f368d0
09:33:36 ipsec,debug,packet c02b69ae 72924eb4 3ce18cba cc31bf28 2dbdaafe 51112a50 74c0d367 b1580160
09:33:36 ipsec,debug,packet 9e775b69 efb4bcef f84fcba7 5494a836 8df4532c a7c84e11 368e2b52
09:33:36 ipsec,error 83.9.xxx.xxx peer sent packet for dead phase2
09:33:39 ipsec,debug ===== received 92 bytes from 83.9.xxx.xxx[4500] to 192.168.73.37[4500]
09:33:39 ipsec,debug,packet aec869d8 67ab7196 b6e9f195 04ee76f4 08100501 9c908ca6 0000005c 593e7d36
09:33:39 ipsec,debug,packet 8dfa9c14 65d3f218 98a520ee 2e711a0a 822cf188 78fd5713 4e8294a3 cead127a
09:33:39 ipsec,debug,packet 76d6d786 b9b24d98 55fb3a6f 7bdd7c3e d27ee017 99da54ab 42c51faa
09:33:39 ipsec,debug receive Information.
09:33:39 ipsec,debug compute IV for phase2
09:33:39 ipsec,debug phase1 last IV:
09:33:39 ipsec,debug 037d5d82 14c91146 0d688bc1 e4a7da6d 9c908ca6
09:33:39 ipsec,debug hash(sha1)
09:33:39 ipsec,debug encryption(aes)
09:33:39 ipsec,debug phase2 IV computed:
09:33:39 ipsec,debug c7a183e5 4e694620 3e3e71ff 45f30eab
09:33:39 ipsec,debug encryption(aes)
09:33:39 ipsec,debug IV was saved for next processing:
09:33:39 ipsec,debug 7bdd7c3e d27ee017 99da54ab 42c51faa
09:33:39 ipsec,debug encryption(aes)
09:33:39 ipsec,debug with key:
09:33:39 ipsec,debug 4d82452d b052f126 7b812355 068b703d c67456f2 b0fc709d 317e78d8 092ac593
09:33:39 ipsec,debug decrypted payload by IV:
09:33:39 ipsec,debug c7a183e5 4e694620 3e3e71ff 45f30eab
09:33:39 ipsec,debug decrypted payload, but not trimed.
09:33:39 ipsec,debug 0c000018 5367e37c 134ece3d 8f0e5914 5e04caa7 3595271a 0000001c 00000001
09:33:39 ipsec,debug 01100001 aec869d8 67ab7196 b6e9f195 04ee76f4 00000000 00000000 00000000
09:33:39 ipsec,debug padding len=1
09:33:39 ipsec,debug skip to trim padding.
09:33:39 ipsec,debug decrypted.
09:33:39 ipsec,debug aec869d8 67ab7196 b6e9f195 04ee76f4 08100501 9c908ca6 0000005c 0c000018
09:33:39 ipsec,debug 5367e37c 134ece3d 8f0e5914 5e04caa7 3595271a 0000001c 00000001 01100001
09:33:39 ipsec,debug aec869d8 67ab7196 b6e9f195 04ee76f4 00000000 00000000 00000000
09:33:39 ipsec,debug HASH with:
09:33:39 ipsec,debug 9c908ca6 0000001c 00000001 01100001 aec869d8 67ab7196 b6e9f195 04ee76f4
09:33:39 ipsec,debug hmac(hmac_sha1)
09:33:39 ipsec,debug HASH computed:
09:33:39 ipsec,debug 5367e37c 134ece3d 8f0e5914 5e04caa7 3595271a
09:33:39 ipsec,debug hash validated.
09:33:39 ipsec,debug begin.
09:33:39 ipsec,debug seen nptype=8(hash) len=24
09:33:39 ipsec,debug seen nptype=12(delete) len=28
09:33:39 ipsec,debug succeed.
09:33:39 ipsec,debug 83.9.xxx.xxx delete payload for protocol ISAKMP
09:33:39 ipsec,info purging ISAKMP-SA 192.168.73.37[4500]<=>83.9.xxx.xxx[4500] spi=aec869d867ab7196:b6e9f19504ee76f4.
09:33:39 ipsec purged ISAKMP-SA 192.168.73.37[4500]<=>83.9.xxx.xxx[4500] spi=aec869d867ab7196:b6e9f19504ee76f4.
09:33:39 ipsec,debug purged SAs.
09:33:39 ipsec,info ISAKMP-SA deleted 192.168.73.37[4500]-83.9.xxx.xxx[4500] spi:aec869d867ab7196:b6e9f19504ee76f4 rekey:1
09:33:39 ipsec KA remove: 192.168.73.37[4500]->83.9.xxx.xxx[4500]
09:33:39 ipsec,debug KA tree dump: 192.168.73.37[4500]->83.9.xxx.xxx[4500] (in_use=1)
09:33:39 ipsec,debug KA removing this one...
09:33:39 ipsec,debug an undead schedule has been deleted.
Now I’ve read that MTs have issues using L2TP IPsec behind NAT, but isn’t there any workaround for that?