I’m trying to connect to a MikroTik L2TP/IPSEC server from an Ubuntu Linux 18.04.3 LTS client.
The router has this config:
/ip ipsec proposal
set [ find default=yes ] auth-algorithms=sha512,sha256,sha1 enc-algorithms=aes-256-cbc,aes-128-cbc pfs-group=modp2048
/ip ipsec policy
set 0 dst-address=0.0.0.0/0 src-address=0.0.0.0/0
/ppp profile
add dns-server=192.168.13.254,8.8.8.8 local-address=192.168.13.254 name=ipsec_vpn
/ppp secret
add name=testuser password=testpassword12345 profile=ipsec_vpn remote-address=192.168.13.201 service=l2tp
/interface l2tp-server server
set authentication=mschap2 default-profile=ipsec_vpn enabled=yes ipsec-secret=NotTellingAnyone use-ipsec=required
/interface bridge
add admin-mac=6C:3B:6B:D4:57:55 arp=proxy-arp auto-mac=no comment=defconf name=bridge
Firewall starts with:
/ip firewall filter
add action=accept chain=input port=1701,500,4500 protocol=udp
add action=accept chain=input protocol=ipsec-esp
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
Also contains:
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack (Disabled due to ipsec issues)" connection-state=\
established,related disabled=yes
add action=fasttrack-connection chain=forward comment="Fast Track everything except IPSEC stuff" connection-mark=!ipsec \
connection-state=established,related
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
I have turned on logging like this:
/system logging
add topics=ipsec
add topics=l2tp
/log
print follow
When I try to connect from Ubuntu, then the connection fails. I’m going to paste a lot of debug output below. The router’s public address has been replaced with 1.1.1.1 and the client’s address with 2.2.2.2.
log from ubuntu:
dec 06 11:52:55 my-client-pc NetworkManager[23171]: <info> [1575629575.7598] audit: op="connection-activate" uuid="f06adc21-dd22-4c95-b5ce-376124f31822" name="my.router.com" pid=23751 uid=1000 result="success"
dec 06 11:52:55 my-client-pc NetworkManager[23171]: <info> [1575629575.7678] vpn-connection[0x5653596f20e0,f06adc21-dd22-4c95-b5ce-376124f31822,"my.router.com",0]: Started the VPN service, PID 23759
dec 06 11:52:55 my-client-pc NetworkManager[23171]: <info> [1575629575.7762] vpn-connection[0x5653596f20e0,f06adc21-dd22-4c95-b5ce-376124f31822,"my.router.com",0]: Saw the service appear; activating connection
dec 06 11:52:55 my-client-pc NetworkManager[23171]: <info> [1575629575.7827] vpn-connection[0x5653596f20e0,f06adc21-dd22-4c95-b5ce-376124f31822,"my.router.com",0]: VPN connection: (ConnectInteractive) reply received
dec 06 11:52:55 my-client-pc nm-l2tp-service[23759]: Check port 1701
dec 06 11:52:55 my-client-pc nm-l2tp-service[23759]: Can't bind to port 1701
dec 06 11:52:55 my-client-pc NetworkManager[23171]: Stopping strongSwan IPsec failed: starter is not running
dec 06 11:52:57 my-client-pc NetworkManager[23171]: Starting strongSwan 5.6.2 IPsec [starter]...
dec 06 11:52:57 my-client-pc NetworkManager[23171]: Loading config setup
dec 06 11:52:57 my-client-pc NetworkManager[23171]: Loading conn 'f06adc21-dd22-4c95-b5ce-376124f31822'
dec 06 11:52:57 my-client-pc ipsec_starter[23770]: Starting strongSwan 5.6.2 IPsec [starter]...
dec 06 11:52:57 my-client-pc ipsec_starter[23770]: Loading config setup
dec 06 11:52:57 my-client-pc ipsec_starter[23770]: Loading conn 'f06adc21-dd22-4c95-b5ce-376124f31822'
dec 06 11:52:57 my-client-pc NetworkManager[23171]: found netkey IPsec stack
dec 06 11:52:57 my-client-pc ipsec_starter[23770]: found netkey IPsec stack
dec 06 11:52:57 my-client-pc ipsec_starter[23792]: Attempting to start charon...
dec 06 11:52:57 my-client-pc charon[23793]: 00[DMN] Starting IKE charon daemon (strongSwan 5.6.2, Linux 4.15.0-72-generic, x86_64)
dec 06 11:52:57 my-client-pc charon[23793]: 00[CFG] loading ca certificates from '/etc/ipsec.d/cacerts'
dec 06 11:52:57 my-client-pc charon[23793]: 00[CFG] loading aa certificates from '/etc/ipsec.d/aacerts'
dec 06 11:52:57 my-client-pc charon[23793]: 00[CFG] loading ocsp signer certificates from '/etc/ipsec.d/ocspcerts'
dec 06 11:52:57 my-client-pc charon[23793]: 00[CFG] loading attribute certificates from '/etc/ipsec.d/acerts'
dec 06 11:52:57 my-client-pc charon[23793]: 00[CFG] loading crls from '/etc/ipsec.d/crls'
dec 06 11:52:57 my-client-pc charon[23793]: 00[CFG] loading secrets from '/etc/ipsec.secrets'
dec 06 11:52:57 my-client-pc charon[23793]: 00[CFG] loading secrets from '/etc/ipsec.d/ipsec.nm-l2tp.secrets'
dec 06 11:52:57 my-client-pc charon[23793]: 00[CFG] loaded IKE secret for %any
dec 06 11:52:57 my-client-pc charon[23793]: 00[LIB] loaded plugins: charon aesni aes rc2 sha2 sha1 md4 md5 mgf1 random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey pem openssl fips-prf gmp agent xcbc hmac gcm attr kernel-netlink resolve socket-default connmark stroke updown eap-mschapv2 xauth-generic counters
dec 06 11:52:57 my-client-pc charon[23793]: 00[LIB] dropped capabilities, running as uid 0, gid 0
dec 06 11:52:57 my-client-pc charon[23793]: 00[JOB] spawning 16 worker threads
dec 06 11:52:57 my-client-pc ipsec_starter[23792]: charon (23793) started after 40 ms
dec 06 11:52:57 my-client-pc charon[23793]: 05[CFG] received stroke: add connection 'f06adc21-dd22-4c95-b5ce-376124f31822'
dec 06 11:52:57 my-client-pc charon[23793]: 05[CFG] added configuration 'f06adc21-dd22-4c95-b5ce-376124f31822'
dec 06 11:52:58 my-client-pc charon[23793]: 07[CFG] rereading secrets
dec 06 11:52:58 my-client-pc charon[23793]: 07[CFG] loading secrets from '/etc/ipsec.secrets'
dec 06 11:52:58 my-client-pc charon[23793]: 07[CFG] loading secrets from '/etc/ipsec.d/ipsec.nm-l2tp.secrets'
dec 06 11:52:58 my-client-pc charon[23793]: 07[CFG] loaded IKE secret for %any
dec 06 11:52:58 my-client-pc charon[23793]: 09[CFG] received stroke: initiate 'f06adc21-dd22-4c95-b5ce-376124f31822'
dec 06 11:52:58 my-client-pc charon[23793]: 11[IKE] initiating Main Mode IKE_SA f06adc21-dd22-4c95-b5ce-376124f31822[1] to 1.1.1.1
dec 06 11:52:58 my-client-pc charon[23793]: 11[IKE] initiating Main Mode IKE_SA f06adc21-dd22-4c95-b5ce-376124f31822[1] to 1.1.1.1
dec 06 11:52:58 my-client-pc charon[23793]: 11[ENC] generating ID_PROT request 0 [ SA V V V V V ]
dec 06 11:52:58 my-client-pc charon[23793]: 11[NET] sending packet: from 2.2.2.2[500] to 1.1.1.1[500] (532 bytes)
dec 06 11:52:58 my-client-pc charon[23793]: 12[NET] received packet: from 1.1.1.1[500] to 2.2.2.2[500] (160 bytes)
dec 06 11:52:58 my-client-pc charon[23793]: 12[ENC] parsed ID_PROT response 0 [ SA V V V V ]
dec 06 11:52:58 my-client-pc charon[23793]: 12[IKE] received NAT-T (RFC 3947) vendor ID
dec 06 11:52:58 my-client-pc charon[23793]: 12[IKE] received XAuth vendor ID
dec 06 11:52:58 my-client-pc charon[23793]: 12[IKE] received DPD vendor ID
dec 06 11:52:58 my-client-pc charon[23793]: 12[IKE] received FRAGMENTATION vendor ID
dec 06 11:52:58 my-client-pc charon[23793]: 12[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
dec 06 11:52:58 my-client-pc charon[23793]: 12[NET] sending packet: from 2.2.2.2[500] to 1.1.1.1[500] (244 bytes)
dec 06 11:52:58 my-client-pc charon[23793]: 13[NET] received packet: from 1.1.1.1[500] to 2.2.2.2[500] (236 bytes)
dec 06 11:52:58 my-client-pc charon[23793]: 13[ENC] parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
dec 06 11:52:59 my-client-pc charon[23793]: 13[ENC] generating ID_PROT request 0 [ ID HASH ]
dec 06 11:52:59 my-client-pc charon[23793]: 13[NET] sending packet: from 2.2.2.2[500] to 1.1.1.1[500] (76 bytes)
dec 06 11:52:59 my-client-pc charon[23793]: 14[NET] received packet: from 1.1.1.1[500] to 2.2.2.2[500] (76 bytes)
dec 06 11:52:59 my-client-pc charon[23793]: 14[ENC] parsed ID_PROT response 0 [ ID HASH ]
dec 06 11:52:59 my-client-pc charon[23793]: 14[IKE] IKE_SA f06adc21-dd22-4c95-b5ce-376124f31822[1] established between 2.2.2.2[2.2.2.2]...1.1.1.1[1.1.1.1]
dec 06 11:52:59 my-client-pc charon[23793]: 14[IKE] IKE_SA f06adc21-dd22-4c95-b5ce-376124f31822[1] established between 2.2.2.2[2.2.2.2]...1.1.1.1[1.1.1.1]
dec 06 11:52:59 my-client-pc charon[23793]: 14[IKE] scheduling reauthentication in 9833s
dec 06 11:52:59 my-client-pc charon[23793]: 14[IKE] maximum IKE_SA lifetime 10373s
dec 06 11:52:59 my-client-pc charon[23793]: 14[ENC] generating QUICK_MODE request 4238410051 [ HASH SA No ID ID ]
dec 06 11:52:59 my-client-pc charon[23793]: 14[NET] sending packet: from 2.2.2.2[500] to 1.1.1.1[500] (220 bytes)
dec 06 11:52:59 my-client-pc charon[23793]: 15[NET] received packet: from 1.1.1.1[500] to 2.2.2.2[500] (172 bytes)
dec 06 11:52:59 my-client-pc charon[23793]: 15[ENC] parsed QUICK_MODE response 4238410051 [ HASH SA No ID ID ]
dec 06 11:52:59 my-client-pc charon[23793]: 15[IKE] CHILD_SA f06adc21-dd22-4c95-b5ce-376124f31822{1} established with SPIs cd07acac_i 04c47800_o and TS 2.2.2.2/32 === 1.1.1.1/32[udp/l2f]
dec 06 11:52:59 my-client-pc charon[23793]: 15[IKE] CHILD_SA f06adc21-dd22-4c95-b5ce-376124f31822{1} established with SPIs cd07acac_i 04c47800_o and TS 2.2.2.2/32 === 1.1.1.1/32[udp/l2f]
dec 06 11:52:59 my-client-pc charon[23793]: 15[ENC] generating QUICK_MODE request 4238410051 [ HASH ]
dec 06 11:52:59 my-client-pc NetworkManager[23171]: initiating Main Mode IKE_SA f06adc21-dd22-4c95-b5ce-376124f31822[1] to 1.1.1.1
dec 06 11:52:59 my-client-pc NetworkManager[23171]: generating ID_PROT request 0 [ SA V V V V V ]
dec 06 11:52:59 my-client-pc NetworkManager[23171]: sending packet: from 2.2.2.2[500] to 1.1.1.1[500] (532 bytes)
dec 06 11:52:59 my-client-pc NetworkManager[23171]: received packet: from 1.1.1.1[500] to 2.2.2.2[500] (160 bytes)
dec 06 11:52:59 my-client-pc NetworkManager[23171]: parsed ID_PROT response 0 [ SA V V V V ]
dec 06 11:52:59 my-client-pc NetworkManager[23171]: received NAT-T (RFC 3947) vendor ID
dec 06 11:52:59 my-client-pc NetworkManager[23171]: received XAuth vendor ID
dec 06 11:52:59 my-client-pc NetworkManager[23171]: received DPD vendor ID
dec 06 11:52:59 my-client-pc NetworkManager[23171]: received FRAGMENTATION vendor ID
dec 06 11:52:59 my-client-pc NetworkManager[23171]: generating ID_PROT request 0 [ KE No NAT-D NAT-D ]
dec 06 11:52:59 my-client-pc NetworkManager[23171]: sending packet: from 2.2.2.2[500] to 1.1.1.1[500] (244 bytes)
dec 06 11:52:59 my-client-pc NetworkManager[23171]: received packet: from 1.1.1.1[500] to 2.2.2.2[500] (236 bytes)
dec 06 11:52:59 my-client-pc NetworkManager[23171]: parsed ID_PROT response 0 [ KE No NAT-D NAT-D ]
dec 06 11:52:59 my-client-pc NetworkManager[23171]: generating ID_PROT request 0 [ ID HASH ]
dec 06 11:52:59 my-client-pc NetworkManager[23171]: sending packet: from 2.2.2.2[500] to 1.1.1.1[500] (76 bytes)
dec 06 11:52:59 my-client-pc NetworkManager[23171]: received packet: from 1.1.1.1[500] to 2.2.2.2[500] (76 bytes)
dec 06 11:52:59 my-client-pc NetworkManager[23171]: parsed ID_PROT response 0 [ ID HASH ]
dec 06 11:52:59 my-client-pc NetworkManager[23171]: IKE_SA f06adc21-dd22-4c95-b5ce-376124f31822[1] established between 2.2.2.2[2.2.2.2]...1.1.1.1[1.1.1.1]
dec 06 11:52:59 my-client-pc NetworkManager[23171]: scheduling reauthentication in 9833s
dec 06 11:52:59 my-client-pc NetworkManager[23171]: maximum IKE_SA lifetime 10373s
dec 06 11:52:59 my-client-pc NetworkManager[23171]: generating QUICK_MODE request 4238410051 [ HASH SA No ID ID ]
dec 06 11:52:59 my-client-pc NetworkManager[23171]: sending packet: from 2.2.2.2[500] to 1.1.1.1[500] (220 bytes)
dec 06 11:52:59 my-client-pc NetworkManager[23171]: received packet: from 1.1.1.1[500] to 2.2.2.2[500] (172 bytes)
dec 06 11:52:59 my-client-pc NetworkManager[23171]: parsed QUICK_MODE response 4238410051 [ HASH SA No ID ID ]
dec 06 11:52:59 my-client-pc NetworkManager[23171]: CHILD_SA f06adc21-dd22-4c95-b5ce-376124f31822{1} established with SPIs cd07acac_i 04c47800_o and TS 2.2.2.2/32 === 1.1.1.1/32[udp/l2f]
dec 06 11:52:59 my-client-pc NetworkManager[23171]: connection 'f06adc21-dd22-4c95-b5ce-376124f31822' established successfully
dec 06 11:52:59 my-client-pc charon[23793]: 15[NET] sending packet: from 2.2.2.2[500] to 1.1.1.1[500] (60 bytes)
dec 06 11:52:59 my-client-pc nm-l2tp-service[23759]: xl2tpd started with pid 23828
dec 06 11:52:59 my-client-pc NetworkManager[23171]: xl2tpd[23828]: Not looking for kernel SAref support.
dec 06 11:52:59 my-client-pc NetworkManager[23171]: xl2tpd[23828]: Using l2tp kernel support.
dec 06 11:52:59 my-client-pc NetworkManager[23171]: xl2tpd[23828]: xl2tpd version xl2tpd-1.3.10 started on my-client-pc PID:23828
dec 06 11:52:59 my-client-pc NetworkManager[23171]: xl2tpd[23828]: Written by Mark Spencer, Copyright (C) 1998, Adtran, Inc.
dec 06 11:52:59 my-client-pc NetworkManager[23171]: xl2tpd[23828]: Forked by Scott Balmos and David Stipp, (C) 2001
dec 06 11:52:59 my-client-pc NetworkManager[23171]: xl2tpd[23828]: Inherited by Jeff McAdams, (C) 2002
dec 06 11:52:59 my-client-pc NetworkManager[23171]: xl2tpd[23828]: Forked again by Xelerance (www.xelerance.com) (C) 2006-2016
dec 06 11:52:59 my-client-pc NetworkManager[23171]: xl2tpd[23828]: Listening on IP address 0.0.0.0, port 32983
dec 06 11:52:59 my-client-pc NetworkManager[23171]: xl2tpd[23828]: Connecting to host 1.1.1.1, port 1701
dec 06 11:52:59 my-client-pc NetworkManager[23171]: <info> [1575629579.1350] vpn-connection[0x5653596f20e0,f06adc21-dd22-4c95-b5ce-376124f31822,"my.router.com",0]: VPN plugin: state changed: starting (3)
dec 06 11:53:13 my-client-pc NetworkManager[23171]: xl2tpd[23828]: death_handler: Fatal signal 15 received
dec 06 11:53:13 my-client-pc NetworkManager[23171]: xl2tpd[23828]: Connection 0 closed to 1.1.1.1, port 1701 (Server closing)
dec 06 11:53:13 my-client-pc NetworkManager[23171]: <warn> [1575629593.1376] vpn-connection[0x5653596f20e0,f06adc21-dd22-4c95-b5ce-376124f31822,"my.router.com",0]: VPN plugin: failed: connect-failed (1)
dec 06 11:53:13 my-client-pc NetworkManager[23171]: <warn> [1575629593.1378] vpn-connection[0x5653596f20e0,f06adc21-dd22-4c95-b5ce-376124f31822,"my.router.com",0]: VPN plugin: failed: connect-failed (1)
dec 06 11:53:13 my-client-pc NetworkManager[23171]: <info> [1575629593.1381] vpn-connection[0x5653596f20e0,f06adc21-dd22-4c95-b5ce-376124f31822,"my.router.com",0]: VPN plugin: state changed: stopping (5)
dec 06 11:53:13 my-client-pc NetworkManager[23171]: Stopping strongSwan IPsec...
dec 06 11:53:13 my-client-pc charon[23793]: 00[DMN] signal of type SIGINT received. Shutting down
dec 06 11:53:13 my-client-pc charon[23793]: 00[IKE] closing CHILD_SA f06adc21-dd22-4c95-b5ce-376124f31822{1} with SPIs cd07acac_i (0 bytes) 04c47800_o (536 bytes) and TS 2.2.2.2/32 === 1.1.1.1/32[udp/l2f]
dec 06 11:53:13 my-client-pc charon[23793]: 00[IKE] closing CHILD_SA f06adc21-dd22-4c95-b5ce-376124f31822{1} with SPIs cd07acac_i (0 bytes) 04c47800_o (536 bytes) and TS 2.2.2.2/32 === 1.1.1.1/32[udp/l2f]
dec 06 11:53:13 my-client-pc charon[23793]: 00[IKE] sending DELETE for ESP CHILD_SA with SPI cd07acac
dec 06 11:53:13 my-client-pc charon[23793]: 00[ENC] generating INFORMATIONAL_V1 request 3404208308 [ HASH D ]
dec 06 11:53:13 my-client-pc charon[23793]: 00[NET] sending packet: from 2.2.2.2[500] to 1.1.1.1[500] (76 bytes)
dec 06 11:53:13 my-client-pc charon[23793]: 00[IKE] deleting IKE_SA f06adc21-dd22-4c95-b5ce-376124f31822[1] between 2.2.2.2[2.2.2.2]...1.1.1.1[1.1.1.1]
dec 06 11:53:13 my-client-pc charon[23793]: 00[IKE] deleting IKE_SA f06adc21-dd22-4c95-b5ce-376124f31822[1] between 2.2.2.2[2.2.2.2]...1.1.1.1[1.1.1.1]
dec 06 11:53:13 my-client-pc charon[23793]: 00[IKE] sending DELETE for IKE_SA f06adc21-dd22-4c95-b5ce-376124f31822[1]
dec 06 11:53:13 my-client-pc charon[23793]: 00[ENC] generating INFORMATIONAL_V1 request 2695559414 [ HASH D ]
dec 06 11:53:13 my-client-pc charon[23793]: 00[NET] sending packet: from 2.2.2.2[500] to 1.1.1.1[500] (92 bytes)
dec 06 11:53:13 my-client-pc ipsec_starter[23792]: child 23793 (charon) has quit (exit code 0)
dec 06 11:53:13 my-client-pc ipsec_starter[23792]:
dec 06 11:53:13 my-client-pc ipsec_starter[23792]: charon stopped after 200 ms
dec 06 11:53:13 my-client-pc ipsec_starter[23792]: ipsec starter stopped
dec 06 11:53:13 my-client-pc nm-l2tp-service[23759]: ipsec shut down
dec 06 11:53:13 my-client-pc NetworkManager[23171]: <info> [1575629593.2548] vpn-connection[0x5653596f20e0,f06adc21-dd22-4c95-b5ce-376124f31822,"my.router.com",0]: VPN plugin: state changed: stopped (6)
dec 06 11:53:13 my-client-pc NetworkManager[23171]: <info> [1575629593.2612] vpn-connection[0x5653596f20e0,f06adc21-dd22-4c95-b5ce-376124f31822,"my.router.com",0]: VPN service disappeared
log from mikrotik router - this is not the whole log, but I think it will be enough to find the problem
11:10:54 ipsec 1.1.1.1 Hashing 1.1.1.1[500] with algo #2
11:10:54 ipsec,debug hash(sha1)
11:10:54 ipsec Adding remote and local NAT-D payloads.
11:10:54 ipsec,debug add payload of len 128, next type 10
11:10:54 ipsec,debug add payload of len 24, next type 20
11:10:54 ipsec,debug add payload of len 20, next type 20
11:10:54 ipsec,debug add payload of len 20, next type 0
11:10:54 ipsec,debug 236 bytes from 1.1.1.1[500] to 2.2.2.2[500]
11:10:54 ipsec,debug 1 times of 236 bytes message will be sent to 2.2.2.2[500]
11:10:54 ipsec,debug,packet 57c85702 cb1a712b d95a3aa1 100ec8c7 04100200 00000000 000000ec 0a000084
11:10:54 ipsec,debug,packet e702612c 828e014e a7072973 a718fa0d 483ae0f1 c02294d6 5e197050 b96512a8
11:10:54 ipsec,debug,packet 244a2918 e928a5dc a83d8fcd ec27d623 8477afb4 f2fbc51d 974871c7 fd121bf1
11:10:54 ipsec,debug,packet 33cfe765 e552e1d3 e5e9a71e 30f0a18b db2bea3d e9b9f0f2 9bddd2b6 30f37840
11:10:54 ipsec,debug,packet 6e6925ca 75f35f69 d435264b 981da3a5 415c9a58 4d974800 a269eb1c f6c8744c
11:10:54 ipsec,debug,packet 1400001c a89ff006 50e435e2 90fb6e21 41282121 4ab918c5 d8a6052d 14000018
11:10:54 ipsec,debug,packet c31065b8 cc5a7480 b62618fe f100c451 607deed6 00000018 c08f3f61 1fc1945c
11:10:54 ipsec,debug,packet 812c7287 834ed20a 46f3f890
11:10:54 ipsec sent phase1 packet 1.1.1.1[500]<=>2.2.2.2[500] 57c85702cb1a712b:d95a3aa1100ec8c7
11:10:54 ipsec,debug dh(modp1024)
11:10:54 ipsec,debug,packet compute DH's shared.
11:10:54 ipsec,debug,packet
11:10:54 ipsec,debug,packet 66050d57 55fa5409 d1a35c9a 030db4ca a0f95bf1 fee65413 4d9c1d75 126dddd8
11:10:54 ipsec,debug,packet ea12ead6 7ff27ec5 7cd9f666 37f4500f 11f24902 9bc6534a 9b1b07aa abc984bb
11:10:54 ipsec,debug,packet 0dc4a172 4618b4ba 4503a55a 1bb873ad b3cf4529 d3dcfc7e 34ba8bf9 dfe444bb
11:10:54 ipsec,debug,packet 7f49c879 d80422f3 d2def8a3 556493b5 9a96ead0 4dbd1210 5a1b92cb 68132958
11:10:54 ipsec,debug nonce 1:
11:10:54 ipsec,debug e1812764 56669995 a82b7efb 6d5cfdbf 41e8c5f2 3ffa8c4b 3ee5ddb0 a772a45e
11:10:54 ipsec,debug nonce 2:
11:10:54 ipsec,debug a89ff006 50e435e2 90fb6e21 41282121 4ab918c5 d8a6052d
11:10:54 ipsec,debug,packet hmac(hmac_sha1)
11:10:54 ipsec,debug SKEYID computed:
11:10:54 ipsec,debug 9bf6db9c c6b28762 c766fa19 0c06d229 0e1ae35a
11:10:54 ipsec,debug,packet hmac(hmac_sha1)
11:10:54 ipsec,debug SKEYID_d computed:
11:10:54 ipsec,debug f35bcd04 5f8e7cdd 91287d5d 1558216b 790a96c7
11:10:54 ipsec,debug,packet hmac(hmac_sha1)
11:10:54 ipsec,debug SKEYID_a computed:
11:10:54 ipsec,debug 52105894 19395fc8 7f0e9fbb 13795104 07d64633
11:10:54 ipsec,debug,packet hmac(hmac_sha1)
11:10:54 ipsec,debug SKEYID_e computed:
11:10:54 ipsec,debug e868f4ee 6fe25725 cb1387e5 1d9f2858 def13add
11:10:54 ipsec,debug,packet encryption(aes)
11:10:54 ipsec,debug hash(sha1)
11:10:54 ipsec,debug final encryption key computed:
11:10:54 ipsec,debug e868f4ee 6fe25725 cb1387e5 1d9f2858
11:10:54 ipsec,debug hash(sha1)
11:10:54 ipsec,debug,packet encryption(aes)
11:10:54 ipsec,debug IV computed:
11:10:54 ipsec,debug 68c0f3d3 a9400379 bf23550e 3300fcaf
11:10:54 ipsec,debug ===== received 76 bytes from 2.2.2.2[500] to 1.1.1.1[500]
11:10:54 ipsec,debug,packet 57c85702 cb1a712b d95a3aa1 100ec8c7 05100201 00000000 0000004c adf4b5c1
11:10:54 ipsec,debug,packet fd43387d b8cd792a 4a58784b c17baf0e 9130a53f dec87cdd 66b2ea27 9489902a
11:10:54 ipsec,debug,packet 9e50813b 976b6846 fc7d9b8f
11:10:54 ipsec,debug,packet encryption(aes)
11:10:54 ipsec,debug,packet IV was saved for next processing:
11:10:54 ipsec,debug,packet 9489902a 9e50813b 976b6846 fc7d9b8f
11:10:54 ipsec,debug,packet encryption(aes)
11:10:54 ipsec,debug,packet with key:
11:10:54 ipsec,debug,packet e868f4ee 6fe25725 cb1387e5 1d9f2858
11:10:54 ipsec,debug,packet decrypted payload by IV:
11:10:54 ipsec,debug,packet 68c0f3d3 a9400379 bf23550e 3300fcaf
11:10:54 ipsec,debug,packet decrypted payload, but not trimed.
11:10:54 ipsec,debug,packet 0800000c 01000000 c1e1213a 00000018 428ddd35 7f266d61 ad1cbdec e74693f0
11:10:54 ipsec,debug,packet 2d66bf43 00000000 00000000 00000000
11:10:54 ipsec,debug,packet padding len=1
11:10:54 ipsec,debug,packet skip to trim padding.
11:10:54 ipsec,debug,packet decrypted.
11:10:54 ipsec,debug,packet 57c85702 cb1a712b d95a3aa1 100ec8c7 05100201 00000000 0000004c 0800000c
11:10:54 ipsec,debug,packet 01000000 c1e1213a 00000018 428ddd35 7f266d61 ad1cbdec e74693f0 2d66bf43
11:10:54 ipsec,debug,packet 00000000 00000000 00000000
11:10:54 ipsec,debug begin.
11:10:54 ipsec,debug seen nptype=5(id) len=12
11:10:54 ipsec,debug seen nptype=8(hash) len=24
11:10:54 ipsec,debug succeed.
11:10:54 ipsec,debug HASH received:
11:10:54 ipsec,debug 428ddd35 7f266d61 ad1cbdec e74693f0 2d66bf43
11:10:54 ipsec,debug,packet HASH with:
11:10:54 ipsec,debug,packet 8929612a 62b6cfb9 83e37392 cd4e9bc8 6fe30e3f 4656985f a331c02d 153f1736
11:10:54 ipsec,debug,packet 7b81a205 59af7685 d9c963a6 6890c80c 5a92b177 4671ac64 7c305227 fa2a61c0
11:10:54 ipsec,debug,packet 818bfce1 89ee8e2f daac8ff3 fd1010b2 efb6c8d4 d1211f4b 86537231 6d9df801
11:10:54 ipsec,debug,packet 777f802e 6c1c4e42 d701afbd 4be26d0d ed91fbca a78e1e77 47d1fc5a 9fbb657e
11:10:54 ipsec,debug,packet e702612c 828e014e a7072973 a718fa0d 483ae0f1 c02294d6 5e197050 b96512a8
11:10:54 ipsec,debug,packet 244a2918 e928a5dc a83d8fcd ec27d623 8477afb4 f2fbc51d 974871c7 fd121bf1
11:10:54 ipsec,debug,packet 33cfe765 e552e1d3 e5e9a71e 30f0a18b db2bea3d e9b9f0f2 9bddd2b6 30f37840
11:10:54 ipsec,debug,packet 6e6925ca 75f35f69 d435264b 981da3a5 415c9a58 4d974800 a269eb1c f6c8744c
11:10:54 ipsec,debug,packet 57c85702 cb1a712b d95a3aa1 100ec8c7 00000001 00000001 0000018c 0001000b
11:10:54 ipsec,debug,packet 03000024 01010000 80010007 800e0100 80020004 8004000e 80030001 800b0001
11:10:54 ipsec,debug,packet 800c2a30 03000024 02010000 80010007 800e0100 80020004 80040005 80030001
11:10:54 ipsec,debug,packet 800b0001 800c2a30 03000024 03010000 80010007 800e0100 80020004 80040002
11:10:54 ipsec,debug,packet 80030001 800b0001 800c2a30 03000024 04010000 80010007 800e0100 80020002
11:10:54 ipsec,debug,packet 8004000e 80030001 800b0001 800c2a30 03000024 05010000 80010007 800e0100
11:10:54 ipsec,debug,packet 80020002 80040005 80030001 800b0001 800c2a30 03000024 06010000 80010007
11:10:54 ipsec,debug,packet 800e0100 80020002 80040002 80030001 800b0001 800c2a30 03000024 07010000
11:10:54 ipsec,debug,packet 80010007 800e0100 80020002 80040014 80030001 800b0001 800c2a30 03000024
11:10:54 ipsec,debug,packet 08010000 80010007 800e0080 80020002 80040002 80030001 800b0001 800c2a30
11:10:54 ipsec,debug,packet 03000024 09010000 80010007 800e0080 80020002 80040013 80030001 800b0001
11:10:54 ipsec,debug,packet 800c2a30 03000020 0a010000 80010005 80020002 8004000e 80030001 800b0001
11:10:54 ipsec,debug,packet 800c2a30 00000020 0b010000 80010005 80020002 80040002 80030001 800b0001
11:10:54 ipsec,debug,packet 800c2a30 01000000 c1e1213a
11:10:54 ipsec,debug,packet hmac(hmac_sha1)
11:10:54 ipsec,debug,packet HASH computed:
11:10:54 ipsec,debug,packet 428ddd35 7f266d61 ad1cbdec e74693f0 2d66bf43
11:10:54 ipsec,debug HASH for PSK validated.
11:10:54 ipsec,debug 2.2.2.2 peer's ID
11:10:54 ipsec,debug 01000000 c1e1213a
11:10:54 ipsec,debug ===
11:10:54 ipsec,debug use ID type of IPv4_address
11:10:54 ipsec,debug generate HASH_R
11:10:54 ipsec,debug,packet HASH with:
11:10:54 ipsec,debug,packet e702612c 828e014e a7072973 a718fa0d 483ae0f1 c02294d6 5e197050 b96512a8
11:10:54 ipsec,debug,packet 244a2918 e928a5dc a83d8fcd ec27d623 8477afb4 f2fbc51d 974871c7 fd121bf1
11:10:54 ipsec,debug,packet 33cfe765 e552e1d3 e5e9a71e 30f0a18b db2bea3d e9b9f0f2 9bddd2b6 30f37840
11:10:54 ipsec,debug,packet 6e6925ca 75f35f69 d435264b 981da3a5 415c9a58 4d974800 a269eb1c f6c8744c
11:10:54 ipsec,debug,packet 8929612a 62b6cfb9 83e37392 cd4e9bc8 6fe30e3f 4656985f a331c02d 153f1736
11:10:54 ipsec,debug,packet 7b81a205 59af7685 d9c963a6 6890c80c 5a92b177 4671ac64 7c305227 fa2a61c0
11:10:54 ipsec,debug,packet 818bfce1 89ee8e2f daac8ff3 fd1010b2 efb6c8d4 d1211f4b 86537231 6d9df801
11:10:54 ipsec,debug,packet 777f802e 6c1c4e42 d701afbd 4be26d0d ed91fbca a78e1e77 47d1fc5a 9fbb657e
11:10:54 ipsec,debug,packet d95a3aa1 100ec8c7 57c85702 cb1a712b 00000001 00000001 0000018c 0001000b
11:10:54 ipsec,debug,packet 03000024 01010000 80010007 800e0100 80020004 8004000e 80030001 800b0001
11:10:54 ipsec,debug,packet 800c2a30 03000024 02010000 80010007 800e0100 80020004 80040005 80030001
11:10:54 ipsec,debug,packet 800b0001 800c2a30 03000024 03010000 80010007 800e0100 80020004 80040002
11:10:54 ipsec,debug,packet 80030001 800b0001 800c2a30 03000024 04010000 80010007 800e0100 80020002
11:10:54 ipsec,debug,packet 8004000e 80030001 800b0001 800c2a30 03000024 05010000 80010007 800e0100
11:10:54 ipsec,debug,packet 80020002 80040005 80030001 800b0001 800c2a30 03000024 06010000 80010007
11:10:54 ipsec,debug,packet 800e0100 80020002 80040002 80030001 800b0001 800c2a30 03000024 07010000
11:10:54 ipsec,debug,packet 80010007 800e0100 80020002 80040014 80030001 800b0001 800c2a30 03000024
11:10:54 ipsec,debug,packet 08010000 80010007 800e0080 80020002 80040002 80030001 800b0001 800c2a30
11:10:54 ipsec,debug,packet 03000024 09010000 80010007 800e0080 80020002 80040013 80030001 800b0001
11:10:54 ipsec,debug,packet 800c2a30 03000020 0a010000 80010005 80020002 8004000e 80030001 800b0001
11:10:54 ipsec,debug,packet 800c2a30 00000020 0b010000 80010005 80020002 80040002 80030001 800b0001
11:10:54 ipsec,debug,packet 800c2a30 011101f4 5985ffbc
11:10:54 ipsec,debug,packet hmac(hmac_sha1)
11:10:54 ipsec,debug,packet HASH computed:
11:10:54 ipsec,debug,packet d9f0082b 3dd78985 9432998d 5ceab559 31ecdadc
11:10:54 ipsec,debug add payload of len 8, next type 8
11:10:54 ipsec,debug add payload of len 20, next type 0
11:10:54 ipsec,debug,packet begin encryption.
11:10:54 ipsec,debug,packet encryption(aes)
11:10:54 ipsec,debug,packet pad length = 12
11:10:54 ipsec,debug,packet 0800000c 011101f4 5985ffbc 00000018 d9f0082b 3dd78985 9432998d 5ceab559
11:10:54 ipsec,debug,packet 31ecdadc d3b398c7 cbc7fb95 bfb8970b
11:10:54 ipsec,debug,packet encryption(aes)
11:10:54 ipsec,debug,packet with key:
11:10:54 ipsec,debug,packet e868f4ee 6fe25725 cb1387e5 1d9f2858
11:10:54 ipsec,debug,packet encrypted payload by IV:
11:10:54 ipsec,debug,packet 9489902a 9e50813b 976b6846 fc7d9b8f
11:10:54 ipsec,debug,packet save IV for next:
11:10:54 ipsec,debug,packet a189721f 994f3828 179e5217 d4f143a1
11:10:54 ipsec,debug,packet encrypted.
11:10:54 ipsec,debug 76 bytes from 1.1.1.1[500] to 2.2.2.2[500]
11:10:54 ipsec,debug 1 times of 76 bytes message will be sent to 2.2.2.2[500]
11:10:54 ipsec,debug,packet 57c85702 cb1a712b d95a3aa1 100ec8c7 05100201 00000000 0000004c f626e9a8
11:10:54 ipsec,debug,packet 81dcf0a7 b0f4d4a3 0e9ca2c9 fd3027be 5543fc91 da0fe419 4b297d6e a189721f
11:10:54 ipsec,debug,packet 994f3828 179e5217 d4f143a1
11:10:54 ipsec,info ISAKMP-SA established 1.1.1.1[500]-2.2.2.2[500] spi:57c85702cb1a712b:d95a3aa1100ec8c7
11:10:54 ipsec,debug ===
11:10:54 ipsec,debug ===== received 220 bytes from 2.2.2.2[500] to 1.1.1.1[500]
11:10:54 ipsec,debug,packet 57c85702 cb1a712b d95a3aa1 100ec8c7 08102001 0c17666c 000000dc f2b1629d
11:10:54 ipsec,debug,packet b952904a d5bc7504 2b6ec718 21a95c4d a554dea0 189c2896 204a687c 6dc18e5e
11:10:54 ipsec,debug,packet 0603dc8d 85a3aeb0 c836b92c 74517926 f5742b06 a3a35128 59faae1f ffd1eed1
11:10:54 ipsec,debug,packet 7e8db3d3 b5bc23dc 80015138 1649b833 7ab7b76e ac2d422e 36585a53 50c07864
11:10:54 ipsec,debug,packet eb3d31a0 18e776c1 6fb40467 4cb6f8b8 b638d2cc 3252f620 c77de8cc 6ddcda4d
11:10:54 ipsec,debug,packet 5ca72ec6 c2a4a518 6fe1bbc4 5a90ecba c7df134a 00481406 c784d2d2 de904a9c
11:10:54 ipsec,debug,packet edca53e7 03b41344 fa00c740 6cb69c66 d1479eed 92269366 f13be2a4
11:10:54 ipsec,debug,packet compute IV for phase2
11:10:54 ipsec,debug,packet phase1 last IV:
11:10:54 ipsec,debug,packet a189721f 994f3828 179e5217 d4f143a1 0c17666c
11:10:54 ipsec,debug hash(sha1)
11:10:54 ipsec,debug,packet encryption(aes)
11:10:54 ipsec,debug,packet phase2 IV computed:
11:10:54 ipsec,debug,packet ef8d4607 e1912306 e5ed219f 1b2b45ff
11:10:54 ipsec,debug ===
11:10:54 ipsec respond new phase 2 negotiation: 1.1.1.1[500]<=>2.2.2.2[500]
11:10:54 ipsec,debug,packet encryption(aes)
11:10:54 ipsec,debug,packet IV was saved for next processing:
11:10:54 ipsec,debug,packet 6cb69c66 d1479eed 92269366 f13be2a4
11:10:54 ipsec,debug,packet encryption(aes)
11:10:54 ipsec,debug,packet with key:
11:10:54 ipsec,debug,packet e868f4ee 6fe25725 cb1387e5 1d9f2858
11:10:54 ipsec,debug,packet decrypted payload by IV:
11:10:54 ipsec,debug,packet ef8d4607 e1912306 e5ed219f 1b2b45ff
11:10:54 ipsec,debug,packet decrypted payload, but not trimed.
11:10:54 ipsec,debug,packet 01000018 cdd8459b c9070a41 3a006c20 aac289bd 1a80d099 0a000068 00000001
11:10:54 ipsec,debug,packet 00000001 0000005c 00030403 cdeac0d1 0300001c 010c0000 80060100 80050002
11:10:54 ipsec,debug,packet 80040002 80010001 80020e10 0300001c 020c0000 80060080 80050002 80040002
11:10:54 ipsec,debug,packet 80010001 80020e10 00000018 03030000 80050002 80040002 80010001 80020e10
11:10:54 ipsec,debug,packet 05000024 fff83c8f 715ebdc0 9d9d9277 25bfe8ba 5facfcca 91b5efe7 7bf2bb7a
11:10:54 ipsec,debug,packet f68f11c6 0500000c 01000000 c1e1213a 0000000c 011106a5 5985ffbc 00000000
11:10:54 ipsec,debug,packet padding len=1
11:10:54 ipsec,debug,packet skip to trim padding.
11:10:54 ipsec,debug,packet decrypted.
11:10:54 ipsec,debug,packet 57c85702 cb1a712b d95a3aa1 100ec8c7 08102001 0c17666c 000000dc 01000018
11:10:54 ipsec,debug,packet cdd8459b c9070a41 3a006c20 aac289bd 1a80d099 0a000068 00000001 00000001
11:10:54 ipsec,debug,packet 0000005c 00030403 cdeac0d1 0300001c 010c0000 80060100 80050002 80040002
11:10:54 ipsec,debug,packet 80010001 80020e10 0300001c 020c0000 80060080 80050002 80040002 80010001
11:10:54 ipsec,debug,packet 80020e10 00000018 03030000 80050002 80040002 80010001 80020e10 05000024
11:10:54 ipsec,debug,packet fff83c8f 715ebdc0 9d9d9277 25bfe8ba 5facfcca 91b5efe7 7bf2bb7a f68f11c6
11:10:54 ipsec,debug,packet 0500000c 01000000 c1e1213a 0000000c 011106a5 5985ffbc 00000000
11:10:54 ipsec,debug begin.
11:10:54 ipsec,debug seen nptype=8(hash) len=24
11:10:54 ipsec,debug seen nptype=1(sa) len=104
11:10:54 ipsec,debug seen nptype=10(nonce) len=36
11:10:54 ipsec,debug seen nptype=5(id) len=12
11:10:54 ipsec,debug seen nptype=5(id) len=12
11:10:54 ipsec,debug succeed.
11:10:54 ipsec,debug received IDci2:
11:10:54 ipsec,debug 01000000 c1e1213a
11:10:54 ipsec,debug received IDcr2:
11:10:54 ipsec,debug 011106a5 5985ffbc
11:10:54 ipsec,debug HASH(1) validate:
11:10:54 ipsec,debug cdd8459b c9070a41 3a006c20 aac289bd 1a80d099
11:10:54 ipsec,debug,packet HASH with:
11:10:54 ipsec,debug,packet 0c17666c 0a000068 00000001 00000001 0000005c 00030403 cdeac0d1 0300001c
11:10:54 ipsec,debug,packet 010c0000 80060100 80050002 80040002 80010001 80020e10 0300001c 020c0000
11:10:54 ipsec,debug,packet 80060080 80050002 80040002 80010001 80020e10 00000018 03030000 80050002
11:10:54 ipsec,debug,packet 80040002 80010001 80020e10 05000024 fff83c8f 715ebdc0 9d9d9277 25bfe8ba
11:10:54 ipsec,debug,packet 5facfcca 91b5efe7 7bf2bb7a f68f11c6 0500000c 01000000 c1e1213a 0000000c
11:10:54 ipsec,debug,packet 011106a5 5985ffbc
11:10:54 ipsec,debug,packet hmac(hmac_sha1)
11:10:54 ipsec,debug,packet HASH computed:
11:10:54 ipsec,debug,packet cdd8459b c9070a41 3a006c20 aac289bd 1a80d099
11:10:54 ipsec,debug total SA len=100
11:10:54 ipsec,debug 00000001 00000001 0000005c 00030403 cdeac0d1 0300001c 010c0000 80060100
11:10:54 ipsec,debug 80050002 80040002 80010001 80020e10 0300001c 020c0000 80060080 80050002
11:10:54 ipsec,debug 80040002 80010001 80020e10 00000018 03030000 80050002 80040002 80010001
11:10:54 ipsec,debug 80020e10
11:10:54 ipsec,debug begin.
11:10:54 ipsec,debug seen nptype=2(prop) len=92
11:10:54 ipsec,debug succeed.
11:10:54 ipsec,debug proposal #0 len=92
11:10:54 ipsec,debug begin.
11:10:54 ipsec,debug seen nptype=3(trns) len=28
11:10:54 ipsec,debug seen nptype=3(trns) len=28
11:10:54 ipsec,debug seen nptype=3(trns) len=24
11:10:54 ipsec,debug succeed.
11:10:54 ipsec,debug transform #1 len=28
11:10:54 ipsec,debug type=Key Length, flag=0x8000, lorv=256
11:10:54 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
11:10:54 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=Transport
11:10:54 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
11:10:54 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=3600
11:10:54 ipsec,debug life duration was in TLV.
11:10:54 ipsec,debug transform #2 len=28
11:10:54 ipsec,debug type=Key Length, flag=0x8000, lorv=128
11:10:54 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
11:10:54 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=Transport
11:10:54 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
11:10:54 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=3600
11:10:54 ipsec,debug life duration was in TLV.
11:10:54 ipsec,debug transform #3 len=24
11:10:54 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
11:10:54 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=Transport
11:10:54 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
11:10:54 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=3600
11:10:54 ipsec,debug life duration was in TLV.
11:10:54 ipsec,debug pair 0:
11:10:54 ipsec,debug 0x4a26e8: next=(nil) tnext=0x4a2700
11:10:54 ipsec,debug 0x4a2700: next=(nil) tnext=0x4a5ec8
11:10:54 ipsec,debug 0x4a5ec8: next=(nil) tnext=(nil)
11:10:54 ipsec,debug proposal #0: 3 transform
11:10:54 ipsec,debug got the local address from ID payload 1.1.1.1[1701] prefixlen=32 ul_proto=17
11:10:54 ipsec,debug got the peer address from ID payload 2.2.2.2[0] prefixlen=32 ul_proto=255
11:10:54 ipsec searching for policy for selector: 1.1.1.1:1701 <=> 2.2.2.2
11:10:54 ipsec generating policy
11:10:54 ipsec,debug (proto_id=ESP spisize=4 spi=00000000 spi_p=00000000 encmode=Transport reqid=4:4)
11:10:54 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-sha512)
11:10:54 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-sha256)
11:10:54 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-sha1)
11:10:54 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-sha512)
11:10:54 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-sha256)
11:10:54 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-sha1)
11:10:54 ipsec,debug begin compare proposals.
11:10:54 ipsec,debug pair[0]: 0x4a26e8
11:10:54 ipsec,debug 0x4a26e8: next=(nil) tnext=0x4a2700
11:10:54 ipsec,debug 0x4a2700: next=(nil) tnext=0x4a5ec8
11:10:54 ipsec,debug 0x4a5ec8: next=(nil) tnext=(nil)
11:10:54 ipsec,debug prop#=0 prot-id=ESP spi-size=4 #trns=3 trns#=1 trns-id=AES-CBC
11:10:54 ipsec,debug type=Key Length, flag=0x8000, lorv=256
11:10:54 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
11:10:54 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=Transport
11:10:54 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
11:10:54 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=3600
11:10:54 ipsec,debug prop#=0 prot-id=ESP spi-size=4 #trns=3 trns#=2 trns-id=AES-CBC
11:10:54 ipsec,debug type=Key Length, flag=0x8000, lorv=128
11:10:54 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
11:10:54 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=Transport
11:10:54 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
11:10:54 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=3600
11:10:54 ipsec,debug prop#=0 prot-id=ESP spi-size=4 #trns=3 trns#=3 trns-id=3DES
11:10:54 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
11:10:54 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=Transport
11:10:54 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
11:10:54 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=3600
11:10:54 ipsec,debug peer's single bundle:
11:10:54 ipsec,debug (proto_id=ESP spisize=4 spi=cdeac0d1 spi_p=00000000 encmode=Transport reqid=0:0)
11:10:54 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-sha1)
11:10:54 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-sha1)
11:10:54 ipsec,debug (trns_id=3DES encklen=0 authtype=hmac-sha1)
11:10:54 ipsec,debug my single bundle:
11:10:54 ipsec,debug (proto_id=ESP spisize=4 spi=00000000 spi_p=00000000 encmode=Transport reqid=4:4)
11:10:54 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-sha512)
11:10:54 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-sha256)
11:10:54 ipsec,debug (trns_id=AES-CBC encklen=256 authtype=hmac-sha1)
11:10:54 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-sha512)
11:10:54 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-sha256)
11:10:54 ipsec,debug (trns_id=AES-CBC encklen=128 authtype=hmac-sha1)
11:10:54 ipsec authtype mismatched: my:hmac-sha512 peer:hmac-sha1
11:10:54 ipsec authtype mismatched: my:hmac-sha256 peer:hmac-sha1
11:10:54 ipsec,debug matched
11:10:54 ipsec,debug ===
11:10:54 ipsec,debug call pfkey_send_getspi a
11:10:54 ipsec,debug pfkey GETSPI sent: ESP/Transport 2.2.2.2[500]->1.1.1.1[500]
11:10:54 ipsec,debug pfkey getspi sent.
11:10:54 ipsec,debug total SA len=48
11:10:54 ipsec,debug 00000001 00000001 00000028 00030401 00000000 0000001c 010c0000 80060100
11:10:54 ipsec,debug 80050002 80040002 80010001 80020e10
11:10:54 ipsec,debug begin.
11:10:54 ipsec,debug seen nptype=2(prop) len=40
11:10:54 ipsec,debug succeed.
11:10:54 ipsec,debug proposal #0 len=40
11:10:54 ipsec,debug begin.
11:10:54 ipsec,debug seen nptype=3(trns) len=28
11:10:54 ipsec,debug succeed.
11:10:54 ipsec,debug transform #1 len=28
11:10:54 ipsec,debug type=Key Length, flag=0x8000, lorv=256
11:10:54 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
11:10:54 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=Transport
11:10:54 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
11:10:54 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=3600
11:10:54 ipsec,debug life duration was in TLV.
11:10:54 ipsec,debug pair 0:
11:10:54 ipsec,debug 0x4a6998: next=(nil) tnext=(nil)
11:10:54 ipsec,debug proposal #0: 1 transform
11:10:54 ipsec,debug add payload of len 48, next type 10
11:10:54 ipsec,debug add payload of len 24, next type 5
11:10:54 ipsec,debug add payload of len 8, next type 5
11:10:54 ipsec,debug add payload of len 8, next type 0
11:10:54 ipsec,debug,packet HASH with:
11:10:54 ipsec,debug,packet 0c17666c fff83c8f 715ebdc0 9d9d9277 25bfe8ba 5facfcca 91b5efe7 7bf2bb7a
11:10:54 ipsec,debug,packet f68f11c6 0a000034 00000001 00000001 00000028 00030401 0de54a26 0000001c
11:10:54 ipsec,debug,packet 010c0000 80060100 80050002 80040002 80010001 80020e10 0500001c bbd7394e
11:10:54 ipsec,debug,packet 9a2483a6 6bb8bb27 19b18216 ce548875 faa34a46 0500000c 01000000 c1e1213a
11:10:54 ipsec,debug,packet 0000000c 011106a5 5985ffbc
11:10:54 ipsec,debug,packet hmac(hmac_sha1)
11:10:54 ipsec,debug,packet HASH computed:
11:10:54 ipsec,debug,packet c4083b91 8ecb9021 4eadc001 77e4f7d5 d6117322
11:10:54 ipsec,debug add payload of len 20, next type 1
11:10:54 ipsec,debug,packet begin encryption.
11:10:54 ipsec,debug,packet encryption(aes)
11:10:54 ipsec,debug,packet pad length = 16
11:10:54 ipsec,debug,packet 01000018 c4083b91 8ecb9021 4eadc001 77e4f7d5 d6117322 0a000034 00000001
11:10:54 ipsec,debug,packet 00000001 00000028 00030401 0de54a26 0000001c 010c0000 80060100 80050002
11:10:54 ipsec,debug,packet 80040002 80010001 80020e10 0500001c bbd7394e 9a2483a6 6bb8bb27 19b18216
11:10:54 ipsec,debug,packet ce548875 faa34a46 0500000c 01000000 c1e1213a 0000000c 011106a5 5985ffbc
11:10:54 ipsec,debug,packet e1ceaf80 aefee3cb ada4dda5 d99eb90f
11:10:54 ipsec,debug,packet encryption(aes)
11:10:54 ipsec,debug,packet with key:
11:10:54 ipsec,debug,packet e868f4ee 6fe25725 cb1387e5 1d9f2858
11:10:54 ipsec,debug,packet encrypted payload by IV:
11:10:54 ipsec,debug,packet 6cb69c66 d1479eed 92269366 f13be2a4
11:10:54 ipsec,debug,packet save IV for next:
11:10:54 ipsec,debug,packet 8584d4ed 534519f0 6bc48987 db875674
11:10:54 ipsec,debug,packet encrypted.
11:10:54 ipsec,debug 172 bytes from 1.1.1.1[500] to 2.2.2.2[500]
11:10:54 ipsec,debug 1 times of 172 bytes message will be sent to 2.2.2.2[500]
11:10:54 ipsec,debug,packet 57c85702 cb1a712b d95a3aa1 100ec8c7 08102001 0c17666c 000000ac 561473af
11:10:54 ipsec,debug,packet b49ba7f5 05fed599 eba367d3 ffd815cc 946670ba 4071e3f4 955eb130 0cbd5321
11:10:54 ipsec,debug,packet b8784bf8 0dfac02d 2309b668 54a38ea5 38f33582 538f2b63 0bbce5a2 dfa74546
11:10:54 ipsec,debug,packet 4eb1a2f8 47d403c3 5c85b686 a1662046 6cc1942b 8ff697e7 e81ea757 f8ee015e
11:10:54 ipsec,debug,packet 0ad256d1 613ffe16 b586ca07 4c417c74 69f02506 a0e2db07 21021ec8 8584d4ed
11:10:54 ipsec,debug,packet 534519f0 6bc48987 db875674
11:10:54 ipsec sent phase2 packet 1.1.1.1[500]<=>2.2.2.2[500] 57c85702cb1a712b:d95a3aa1100ec8c7:00000c17
11:10:54 ipsec,debug ===== received 60 bytes from 2.2.2.2[500] to 1.1.1.1[500]
11:10:54 ipsec,debug,packet 57c85702 cb1a712b d95a3aa1 100ec8c7 08102001 0c17666c 0000003c be65af9b
11:10:54 ipsec,debug,packet 18d25883 7387fc61 3a0e845d fa52660f 43fd5629 40e64f4f 88eaaf6b
11:10:54 ipsec,debug,packet encryption(aes)
11:10:54 ipsec,debug,packet IV was saved for next processing:
11:10:54 ipsec,debug,packet fa52660f 43fd5629 40e64f4f 88eaaf6b
11:10:54 ipsec,debug,packet encryption(aes)
11:10:54 ipsec,debug,packet with key:
11:10:54 ipsec,debug,packet e868f4ee 6fe25725 cb1387e5 1d9f2858
11:10:54 ipsec,debug,packet decrypted payload by IV:
11:10:54 ipsec,debug,packet 8584d4ed 534519f0 6bc48987 db875674
11:10:54 ipsec,debug,packet decrypted payload, but not trimed.
11:10:54 ipsec,debug,packet 00000018 8abd6543 6fbfd89a c39474ad 487bdbd4 9d311462 00000000 00000000
11:10:54 ipsec,debug,packet padding len=1
11:10:54 ipsec,debug,packet skip to trim padding.
11:10:54 ipsec,debug,packet decrypted.
11:10:54 ipsec,debug,packet 57c85702 cb1a712b d95a3aa1 100ec8c7 08102001 0c17666c 0000003c 00000018
11:10:54 ipsec,debug,packet 8abd6543 6fbfd89a c39474ad 487bdbd4 9d311462 00000000 00000000
11:10:54 ipsec,debug begin.
11:10:54 ipsec,debug seen nptype=8(hash) len=24
11:10:54 ipsec,debug succeed.
11:10:54 ipsec,debug HASH(3) validate:
11:10:54 ipsec,debug 8abd6543 6fbfd89a c39474ad 487bdbd4 9d311462
11:10:54 ipsec,debug,packet HASH with:
11:10:54 ipsec,debug,packet 000c1766 6cfff83c 8f715ebd c09d9d92 7725bfe8 ba5facfc ca91b5ef e77bf2bb
11:10:54 ipsec,debug,packet 7af68f11 c6bbd739 4e9a2483 a66bb8bb 2719b182 16ce5488 75faa34a 46
11:10:54 ipsec,debug,packet hmac(hmac_sha1)
11:10:54 ipsec,debug,packet HASH computed:
11:10:54 ipsec,debug,packet 8abd6543 6fbfd89a c39474ad 487bdbd4 9d311462
11:10:54 ipsec,debug ===
11:10:54 ipsec,debug,packet KEYMAT compute with
11:10:54 ipsec,debug,packet 030de54a 26fff83c 8f715ebd c09d9d92 7725bfe8 ba5facfc ca91b5ef e77bf2bb
11:10:54 ipsec,debug,packet 7af68f11 c6bbd739 4e9a2483 a66bb8bb 2719b182 16ce5488 75faa34a 46
11:10:54 ipsec,debug,packet hmac(hmac_sha1)
11:10:54 ipsec,debug encryption(aes-cbc)
11:10:54 ipsec,debug hmac(sha1)
11:10:54 ipsec,debug encklen=256 authklen=160
11:10:54 ipsec,debug generating 640 bits of key (dupkeymat=4)
11:10:54 ipsec,debug generating K1...K4 for KEYMAT.
11:10:54 ipsec,debug,packet hmac(hmac_sha1)
11:10:54 ipsec,debug,packet hmac(hmac_sha1)
11:10:54 ipsec,debug,packet hmac(hmac_sha1)
11:10:54 ipsec,debug ab76117f 444496e3 32586bc9 bb780f44 6f5fd852 b8c72a41 4d2000de 9b25acc6
11:10:54 ipsec,debug ce439d9d 45116737 edd36aba 422a3e4f 72c48bfa 8bf1d13d 28055cac d0d229f7
11:10:54 ipsec,debug 61260d87 aa3f7572 8018cc7f bbe3b5ae
11:10:54 ipsec,debug,packet KEYMAT compute with
11:10:54 ipsec,debug,packet 03cdeac0 d1fff83c 8f715ebd c09d9d92 7725bfe8 ba5facfc ca91b5ef e77bf2bb
11:10:54 ipsec,debug,packet 7af68f11 c6bbd739 4e9a2483 a66bb8bb 2719b182 16ce5488 75faa34a 46
11:10:54 ipsec,debug,packet hmac(hmac_sha1)
11:10:54 ipsec,debug encryption(aes-cbc)
11:10:54 ipsec,debug hmac(sha1)
11:10:54 ipsec,debug encklen=256 authklen=160
11:10:54 ipsec,debug generating 640 bits of key (dupkeymat=4)
11:10:54 ipsec,debug generating K1...K4 for KEYMAT.
11:10:54 ipsec,debug,packet hmac(hmac_sha1)
11:10:54 ipsec,debug,packet hmac(hmac_sha1)
11:10:54 ipsec,debug,packet hmac(hmac_sha1)
11:10:54 ipsec,debug 79b31dd8 4dacdbb1 08ea2e1f 2e4aef39 67e71326 99c4e0a0 7380ed65 21dabb29
11:10:54 ipsec,debug fdd4ae56 c262abb4 45e4ff7f b5b38758 a5107136 8109d444 fd1da422 e5b819bb
11:10:54 ipsec,debug 7e00221b 8301286d 4addb5d0 a6c7c0d9
11:10:54 ipsec,debug KEYMAT computed.
11:10:54 ipsec,debug call pk_sendupdate
11:10:54 ipsec,debug encryption(aes-cbc)
11:10:54 ipsec,debug hmac(sha1)
11:10:54 ipsec,debug call pfkey_send_update_nat
11:10:54 ipsec IPsec-SA established: ESP/Transport 2.2.2.2[500]->1.1.1.1[500] spi=0xde54a26
11:10:54 ipsec,debug pfkey update sent.
11:10:54 ipsec,debug encryption(aes-cbc)
11:10:54 ipsec,debug hmac(sha1)
11:10:54 ipsec,debug call pfkey_send_add_nat
11:10:54 ipsec IPsec-SA established: ESP/Transport 1.1.1.1[500]->2.2.2.2[500] spi=0xcdeac0d1
11:10:54 ipsec,debug pfkey add sent.
11:10:54 l2tp,debug,packet rcvd control message from 2.2.2.2:43075 to 1.1.1.1:1701
11:10:54 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
11:10:54 l2tp,debug,packet (M) Message-Type=SCCRQ
11:10:54 l2tp,debug,packet (M) Protocol-Version=0x01:00
11:10:54 l2tp,debug,packet (M) Framing-Capabilities=0x3
11:10:54 l2tp,debug,packet (M) Bearer-Capabilities=0x0
11:10:54 l2tp,debug,packet Firmware-Revision=0x690
11:10:54 l2tp,debug,packet (M) Host-Name="my-client-pc"
11:10:54 l2tp,debug,packet Vendor-Name="xelerance.com"
11:10:54 l2tp,debug,packet (M) Assigned-Tunnel-ID=44759
11:10:54 l2tp,debug,packet (M) Receive-Window-Size=8
11:10:54 l2tp,info first L2TP UDP packet received from 2.2.2.2
11:10:54 l2tp,debug tunnel 33 entering state: wait-ctl-conn
11:10:54 l2tp,debug,packet sent control message to 2.2.2.2:43075 from 1.1.1.1:1701
11:10:54 l2tp,debug,packet tunnel-id=44759, session-id=0, ns=0, nr=1
11:10:54 l2tp,debug,packet (M) Message-Type=SCCRP
11:10:54 l2tp,debug,packet (M) Protocol-Version=0x01:00
11:10:54 l2tp,debug,packet (M) Framing-Capabilities=0x1
11:10:54 l2tp,debug,packet (M) Bearer-Capabilities=0x0
11:10:54 l2tp,debug,packet Firmware-Revision=0x1
11:10:54 l2tp,debug,packet (M) Host-Name="my.router.com"
11:10:54 l2tp,debug,packet Vendor-Name="MikroTik"
11:10:54 l2tp,debug,packet (M) Assigned-Tunnel-ID=33
11:10:54 l2tp,debug,packet (M) Receive-Window-Size=4
11:10:55 l2tp,debug,packet sent control message to 2.2.2.2:43075 from 1.1.1.1:1701
11:10:55 l2tp,debug,packet tunnel-id=44759, session-id=0, ns=0, nr=1
11:10:55 l2tp,debug,packet (M) Message-Type=SCCRP
11:10:55 l2tp,debug,packet (M) Protocol-Version=0x01:00
11:10:55 l2tp,debug,packet (M) Framing-Capabilities=0x1
11:10:55 l2tp,debug,packet (M) Bearer-Capabilities=0x0
11:10:55 l2tp,debug,packet Firmware-Revision=0x1
11:10:55 l2tp,debug,packet (M) Host-Name="my.router.com"
11:10:55 l2tp,debug,packet Vendor-Name="MikroTik"
11:10:55 l2tp,debug,packet (M) Assigned-Tunnel-ID=33
11:10:55 l2tp,debug,packet (M) Receive-Window-Size=4
11:10:55 l2tp,debug,packet rcvd control message from 2.2.2.2:43075 to 1.1.1.1:1701
11:10:55 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
11:10:55 l2tp,debug,packet (M) Message-Type=SCCRQ
11:10:55 l2tp,debug,packet (M) Protocol-Version=0x01:00
11:10:55 l2tp,debug,packet (M) Framing-Capabilities=0x3
11:10:55 l2tp,debug,packet (M) Bearer-Capabilities=0x0
11:10:55 l2tp,debug,packet Firmware-Revision=0x690
11:10:55 l2tp,debug,packet (M) Host-Name="my-client-pc"
11:10:55 l2tp,debug,packet Vendor-Name="xelerance.com"
11:10:55 l2tp,debug,packet (M) Assigned-Tunnel-ID=44759
11:10:55 l2tp,debug,packet (M) Receive-Window-Size=8
11:10:55 l2tp,debug,packet sent control message (ack) to 2.2.2.2:43075 from 1.1.1.1:1701
11:10:55 l2tp,debug,packet tunnel-id=44759, session-id=0, ns=1, nr=1
11:10:56 l2tp,debug,packet sent control message to 2.2.2.2:43075 from 1.1.1.1:1701
11:10:56 l2tp,debug,packet tunnel-id=44759, session-id=0, ns=0, nr=1
11:10:56 l2tp,debug,packet (M) Message-Type=SCCRP
11:10:56 l2tp,debug,packet (M) Protocol-Version=0x01:00
11:10:56 l2tp,debug,packet (M) Framing-Capabilities=0x1
11:10:56 l2tp,debug,packet (M) Bearer-Capabilities=0x0
11:10:56 l2tp,debug,packet Firmware-Revision=0x1
11:10:56 l2tp,debug,packet (M) Host-Name="my.router.com"
11:10:56 l2tp,debug,packet Vendor-Name="MikroTik"
11:10:56 l2tp,debug,packet (M) Assigned-Tunnel-ID=33
11:10:56 l2tp,debug,packet (M) Receive-Window-Size=4
11:10:57 l2tp,debug,packet rcvd control message from 2.2.2.2:43075 to 1.1.1.1:1701
11:10:57 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
11:10:57 l2tp,debug,packet (M) Message-Type=SCCRQ
11:10:57 l2tp,debug,packet (M) Protocol-Version=0x01:00
11:10:57 l2tp,debug,packet (M) Framing-Capabilities=0x3
11:10:57 l2tp,debug,packet (M) Bearer-Capabilities=0x0
11:10:57 l2tp,debug,packet Firmware-Revision=0x690
11:10:57 l2tp,debug,packet (M) Host-Name="my-client-pc"
11:10:57 l2tp,debug,packet Vendor-Name="xelerance.com"
11:10:57 l2tp,debug,packet (M) Assigned-Tunnel-ID=44759
11:10:57 l2tp,debug,packet (M) Receive-Window-Size=8
11:10:57 l2tp,debug,packet sent control message (ack) to 2.2.2.2:43075 from 1.1.1.1:1701
11:10:57 l2tp,debug,packet tunnel-id=44759, session-id=0, ns=1, nr=1
11:10:58 l2tp,debug,packet sent control message to 2.2.2.2:43075 from 1.1.1.1:1701
11:10:58 l2tp,debug,packet tunnel-id=44759, session-id=0, ns=0, nr=1
11:10:58 l2tp,debug,packet (M) Message-Type=SCCRP
11:10:58 l2tp,debug,packet (M) Protocol-Version=0x01:00
11:10:58 l2tp,debug,packet (M) Framing-Capabilities=0x1
11:10:58 l2tp,debug,packet (M) Bearer-Capabilities=0x0
11:10:58 l2tp,debug,packet Firmware-Revision=0x1
11:10:58 l2tp,debug,packet (M) Host-Name="my.router.com"
11:10:58 l2tp,debug,packet Vendor-Name="MikroTik"
11:10:58 l2tp,debug,packet (M) Assigned-Tunnel-ID=33
11:10:58 l2tp,debug,packet (M) Receive-Window-Size=4
11:11:01 l2tp,debug,packet rcvd control message from 2.2.2.2:43075 to 1.1.1.1:1701
11:11:01 l2tp,debug,packet tunnel-id=0, session-id=0, ns=0, nr=0
11:11:01 l2tp,debug,packet (M) Message-Type=SCCRQ
11:11:01 l2tp,debug,packet (M) Protocol-Version=0x01:00
11:11:01 l2tp,debug,packet (M) Framing-Capabilities=0x3
11:11:01 l2tp,debug,packet (M) Bearer-Capabilities=0x0
11:11:01 l2tp,debug,packet Firmware-Revision=0x690
11:11:01 l2tp,debug,packet (M) Host-Name="my-client-pc"
11:11:01 l2tp,debug,packet Vendor-Name="xelerance.com"
11:11:01 l2tp,debug,packet (M) Assigned-Tunnel-ID=44759
11:11:01 l2tp,debug,packet (M) Receive-Window-Size=8
11:11:01 l2tp,debug,packet sent control message (ack) to 2.2.2.2:43075 from 1.1.1.1:1701
11:11:01 l2tp,debug,packet tunnel-id=44759, session-id=0, ns=1, nr=1
11:11:02 l2tp,debug,packet sent control message to 2.2.2.2:43075 from 1.1.1.1:1701
11:11:02 l2tp,debug,packet tunnel-id=44759, session-id=0, ns=0, nr=1
11:11:02 l2tp,debug,packet (M) Message-Type=SCCRP
11:11:02 l2tp,debug,packet (M) Protocol-Version=0x01:00
11:11:02 l2tp,debug,packet (M) Framing-Capabilities=0x1
11:11:02 l2tp,debug,packet (M) Bearer-Capabilities=0x0
11:11:02 l2tp,debug,packet Firmware-Revision=0x1
11:11:02 l2tp,debug,packet (M) Host-Name="my.router.com"
11:11:02 l2tp,debug,packet Vendor-Name="MikroTik"
11:11:02 l2tp,debug,packet (M) Assigned-Tunnel-ID=33
11:11:02 l2tp,debug,packet (M) Receive-Window-Size=4
11:11:08 l2tp,debug,packet rcvd control message from 2.2.2.2:43075 to 1.1.1.1:1701
11:11:08 l2tp,debug,packet tunnel-id=0, session-id=0, ns=1, nr=0
11:11:08 l2tp,debug,packet (M) Message-Type=StopCCN
11:11:08 l2tp,debug,packet (M) Assigned-Tunnel-ID=44759
11:11:08 l2tp,debug,packet (M) Result-Code=1
11:11:08 l2tp,debug,packet Error-Code=0
11:11:08 l2tp,debug,packet Error-Message="Server closing"
11:11:08 l2tp,debug,packet sent control message (ack) to 2.2.2.2:43075 from 1.1.1.1:1701
11:11:08 l2tp,debug,packet tunnel-id=44759, session-id=0, ns=1, nr=2
11:11:08 l2tp,debug tunnel 33 entering state: dead
11:11:08 ipsec,debug ===== received 76 bytes from 2.2.2.2[500] to 1.1.1.1[500]
11:11:08 ipsec,debug,packet 57c85702 cb1a712b d95a3aa1 100ec8c7 08100501 91854f18 0000004c b4a68ac6
11:11:08 ipsec,debug,packet 4e3abbf6 a4dc4469 76f54224 740199aa 35cec347 53a9c45b 3cbd7b4c 92563625
11:11:08 ipsec,debug,packet a32e3172 65c9487f af024f5e
11:11:08 ipsec,debug receive Information.
11:11:08 ipsec,debug,packet compute IV for phase2
11:11:08 ipsec,debug,packet phase1 last IV:
11:11:08 ipsec,debug,packet a189721f 994f3828 179e5217 d4f143a1 91854f18
11:11:08 ipsec,debug hash(sha1)
11:11:08 ipsec,debug,packet encryption(aes)
11:11:08 ipsec,debug,packet phase2 IV computed:
11:11:08 ipsec,debug,packet 112b5806 e3fc0047 e1375fe9 d7e70bd9
11:11:08 ipsec,debug,packet encryption(aes)
11:11:08 ipsec,debug,packet IV was saved for next processing:
11:11:08 ipsec,debug,packet 92563625 a32e3172 65c9487f af024f5e
11:11:08 ipsec,debug,packet encryption(aes)
11:11:08 ipsec,debug,packet with key:
11:11:08 ipsec,debug,packet e868f4ee 6fe25725 cb1387e5 1d9f2858
11:11:08 ipsec,debug,packet decrypted payload by IV:
11:11:08 ipsec,debug,packet 112b5806 e3fc0047 e1375fe9 d7e70bd9
11:11:08 ipsec,debug,packet decrypted payload, but not trimed.
11:11:08 ipsec,debug,packet 0c000018 4105b87d c73e72a6 bd644ea2 77ac0064 f39c1270 00000010 00000001
11:11:08 ipsec,debug,packet 03040001 cdeac0d1 00000000 00000000
11:11:08 ipsec,debug,packet padding len=1
11:11:08 ipsec,debug,packet skip to trim padding.
11:11:08 ipsec,debug,packet decrypted.
11:11:08 ipsec,debug,packet 57c85702 cb1a712b d95a3aa1 100ec8c7 08100501 91854f18 0000004c 0c000018
11:11:08 ipsec,debug,packet 4105b87d c73e72a6 bd644ea2 77ac0064 f39c1270 00000010 00000001 03040001
11:11:08 ipsec,debug,packet cdeac0d1 00000000 00000000
11:11:08 ipsec,debug,packet HASH with:
11:11:08 ipsec,debug,packet 91854f18 00000010 00000001 03040001 cdeac0d1
11:11:08 ipsec,debug,packet hmac(hmac_sha1)
11:11:08 ipsec,debug,packet HASH computed:
11:11:08 ipsec,debug,packet 4105b87d c73e72a6 bd644ea2 77ac0064 f39c1270
11:11:08 ipsec,debug hash validated.
11:11:08 ipsec,debug begin.
11:11:08 ipsec,debug seen nptype=8(hash) len=24
11:11:08 ipsec,debug seen nptype=12(delete) len=16
11:11:08 ipsec,debug succeed.
11:11:08 ipsec,debug 2.2.2.2 delete payload for protocol ESP
11:11:08 ipsec purged IPsec-SA proto_id=ESP spi=0xcdeac0d1
11:11:08 ipsec purged IPsec-SA proto_id=ESP spi=0xde54a26
11:11:08 ipsec removing generated policy
11:11:08 ipsec,debug purged SAs.
11:11:08 ipsec,debug ===== received 92 bytes from 2.2.2.2[500] to 1.1.1.1[500]
11:11:08 ipsec,debug,packet 57c85702 cb1a712b d95a3aa1 100ec8c7 08100501 c55a6073 0000005c 5b0a0a95
11:11:08 ipsec,debug,packet 27f2fe32 e40bef39 356e8d29 f5bedfc4 74086937 ea665ecd 02324ab0 7fdb56ab
11:11:08 ipsec,debug,packet 9394ccd9 b5dd81f1 87f11a6f 2917940c 176bc5f1 2383b20e 4efa2281
11:11:08 ipsec,debug receive Information.
11:11:08 ipsec,debug,packet compute IV for phase2
11:11:08 ipsec,debug,packet phase1 last IV:
11:11:08 ipsec,debug,packet a189721f 994f3828 179e5217 d4f143a1 c55a6073
11:11:08 ipsec,debug hash(sha1)
11:11:08 ipsec,debug,packet encryption(aes)
11:11:08 ipsec,debug,packet phase2 IV computed:
11:11:08 ipsec,debug,packet 9c881fd2 fd4f87b1 761c77b5 56fb071f
11:11:08 ipsec,debug,packet encryption(aes)
11:11:08 ipsec,debug,packet IV was saved for next processing:
11:11:08 ipsec,debug,packet 2917940c 176bc5f1 2383b20e 4efa2281
11:11:08 ipsec,debug,packet encryption(aes)
11:11:08 ipsec,debug,packet with key:
11:11:08 ipsec,debug,packet e868f4ee 6fe25725 cb1387e5 1d9f2858
11:11:08 ipsec,debug,packet decrypted payload by IV:
11:11:08 ipsec,debug,packet 9c881fd2 fd4f87b1 761c77b5 56fb071f
11:11:08 ipsec,debug,packet decrypted payload, but not trimed.
11:11:08 ipsec,debug,packet 0c000018 298e1590 54faa640 aaf54565 7154f0a7 56f40446 0000001c 00000001
11:11:08 ipsec,debug,packet 01100001 57c85702 cb1a712b d95a3aa1 100ec8c7 00000000 00000000 00000000
11:11:08 ipsec,debug,packet padding len=1
11:11:08 ipsec,debug,packet skip to trim padding.
11:11:08 ipsec,debug,packet decrypted.
11:11:08 ipsec,debug,packet 57c85702 cb1a712b d95a3aa1 100ec8c7 08100501 c55a6073 0000005c 0c000018
11:11:08 ipsec,debug,packet 298e1590 54faa640 aaf54565 7154f0a7 56f40446 0000001c 00000001 01100001
11:11:08 ipsec,debug,packet 57c85702 cb1a712b d95a3aa1 100ec8c7 00000000 00000000 00000000
11:11:08 ipsec,debug,packet HASH with:
11:11:08 ipsec,debug,packet c55a6073 0000001c 00000001 01100001 57c85702 cb1a712b d95a3aa1 100ec8c7
11:11:08 ipsec,debug,packet hmac(hmac_sha1)
11:11:08 ipsec,debug,packet HASH computed:
11:11:08 ipsec,debug,packet 298e1590 54faa640 aaf54565 7154f0a7 56f40446
11:11:08 ipsec,debug hash validated.
11:11:08 ipsec,debug begin.
11:11:08 ipsec,debug seen nptype=8(hash) len=24
11:11:08 ipsec,debug seen nptype=12(delete) len=28
11:11:08 ipsec,debug succeed.
11:11:08 ipsec,debug 2.2.2.2 delete payload for protocol ISAKMP
11:11:08 ipsec,info purging ISAKMP-SA 1.1.1.1[500]<=>2.2.2.2[500] spi=57c85702cb1a712b:d95a3aa1100ec8c7.
11:11:08 ipsec purged ISAKMP-SA 1.1.1.1[500]<=>2.2.2.2[500] spi=57c85702cb1a712b:d95a3aa1100ec8c7.
11:11:08 ipsec,debug purged SAs.
11:11:08 ipsec,info ISAKMP-SA deleted 1.1.1.1[500]-2.2.2.2[500] spi:57c85702cb1a712b:d95a3aa1100ec8c7 rekey:1