L2TP IPSec + Windows/iPhone issue

pawel100 · April 25, 2018, 10:17am

Log:

[admin@MikroTik] /log> print
12:02:20 ipsec,debug   0x48e900: next=(nil) tnext=0x48f1b0
12:02:20 ipsec,debug    0x48f1b0: next=(nil) tnext=0x48cfc8
12:02:20 ipsec,debug     0x48cfc8: next=(nil) tnext=0x48c3e8
12:02:20 ipsec,debug      0x48c3e8: next=(nil) tnext=0x48bc70
12:02:20 ipsec,debug       0x48bc70: next=(nil) tnext=0x48e878
12:02:20 ipsec,debug        0x48e878: next=(nil) tnext=0x48e940
12:02:20 ipsec,debug         0x48e940: next=(nil) tnext=0x48dfc0
12:02:20 ipsec,debug          0x48dfc0: next=(nil) tnext=0x48bfc8
12:02:20 ipsec,debug           0x48bfc8: next=(nil) tnext=0x48bd30
12:02:20 ipsec,debug            0x48bd30: next=(nil) tnext=0x48bd48
12:02:20 ipsec,debug             0x48bd48: next=(nil) tnext=0x48e8b8
12:02:20 ipsec,debug              0x48e8b8: next=(nil) tnext=0x48e8d0
12:02:20 ipsec,debug               0x48e8d0: next=(nil) tnext=(nil)
12:02:20 ipsec,debug proposal #1: 14 transform
12:02:20 ipsec,debug prop#=1, prot-id=ISAKMP, spi-size=0, #trns=14
12:02:20 ipsec,debug trns#=1, trns-id=IKE
12:02:20 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
12:02:20 ipsec,debug type=Life Duration, flag=0x8000, lorv=3600
12:02:20 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=AES-CBC
12:02:20 ipsec,debug type=Key Length, flag=0x8000, lorv=256
12:02:20 ipsec,debug type=Authentication Method, flag=0x8000, lorv=pre-shared key
12:02:20 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=4
12:02:20 ipsec,debug type=Group Description, flag=0x8000, lorv=2048-bit MODP group
12:02:20 ipsec,debug Compared: Local:Peer
12:02:20 ipsec,debug (lifetime = 86400:3600)
12:02:20 ipsec,debug (lifebyte = 0:0)
12:02:20 ipsec,debug enctype = AES-CBC:AES-CBC
12:02:20 ipsec,debug (encklen = 256:256)
12:02:20 ipsec,debug hashtype = SHA:4
12:02:20 ipsec,debug authmethod = pre-shared key:pre-shared key
12:02:20 ipsec,debug dh_group = 1024-bit MODP group:2048-bit MODP group
12:02:20 ipsec,debug Compared: Local:Peer
12:02:20 ipsec,debug (lifetime = 86400:3600)
12:02:20 ipsec,debug (lifebyte = 0:0)
12:02:20 ipsec,debug enctype = AES-CBC:AES-CBC
12:02:20 ipsec,debug (encklen = 192:256)
12:02:20 ipsec,debug hashtype = SHA:4
12:02:20 ipsec,debug authmethod = pre-shared key:pre-shared key
12:02:20 ipsec,debug dh_group = 1024-bit MODP group:2048-bit MODP group
12:02:20 ipsec,debug Compared: Local:Peer
12:02:20 ipsec,debug (lifetime = 86400:3600)
12:02:20 ipsec,debug (lifebyte = 0:0)
12:02:20 ipsec,debug enctype = AES-CBC:AES-CBC
12:02:20 ipsec,debug (encklen = 128:256)
12:02:20 ipsec,debug hashtype = SHA:4
12:02:20 ipsec,debug authmethod = pre-shared key:pre-shared key
12:02:20 ipsec,debug dh_group = 1024-bit MODP group:2048-bit MODP group
12:02:20 ipsec,debug Compared: Local:Peer
12:02:20 ipsec,debug (lifetime = 86400:3600)
12:02:20 ipsec,debug (lifebyte = 0:0)
12:02:20 ipsec,debug enctype = 3DES-CBC:AES-CBC
12:02:20 ipsec,debug (encklen = 0:256)
12:02:20 ipsec,debug hashtype = SHA:4
12:02:20 ipsec,debug authmethod = pre-shared key:pre-shared key
12:02:20 ipsec,debug dh_group = 1024-bit MODP group:2048-bit MODP group
12:02:20 ipsec,debug prop#=1, prot-id=ISAKMP, spi-size=0, #trns=14
12:02:20 ipsec,debug trns#=2, trns-id=IKE
12:02:20 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
12:02:20 ipsec,debug type=Life Duration, flag=0x8000, lorv=3600
12:02:20 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=AES-CBC
12:02:20 ipsec,debug type=Key Length, flag=0x8000, lorv=256
12:02:20 ipsec,debug type=Authentication Method, flag=0x8000, lorv=pre-shared key
12:02:20 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=SHA
12:02:20 ipsec,debug type=Group Description, flag=0x8000, lorv=2048-bit MODP group
12:02:20 ipsec,debug Compared: Local:Peer
12:02:20 ipsec,debug (lifetime = 86400:3600)
12:02:20 ipsec,debug (lifebyte = 0:0)
12:02:20 ipsec,debug enctype = AES-CBC:AES-CBC
12:02:20 ipsec,debug (encklen = 256:256)
12:02:20 ipsec,debug hashtype = SHA:SHA
12:02:20 ipsec,debug authmethod = pre-shared key:pre-shared key
12:02:20 ipsec,debug dh_group = 1024-bit MODP group:2048-bit MODP group
12:02:20 ipsec,debug Compared: Local:Peer
12:02:20 ipsec,debug (lifetime = 86400:3600)
12:02:20 ipsec,debug (lifebyte = 0:0)
12:02:20 ipsec,debug enctype = AES-CBC:AES-CBC
12:02:20 ipsec,debug (encklen = 192:256)
12:02:20 ipsec,debug hashtype = SHA:SHA
12:02:20 ipsec,debug authmethod = pre-shared key:pre-shared key
12:02:20 ipsec,debug dh_group = 1024-bit MODP group:2048-bit MODP group
12:02:20 ipsec,debug Compared: Local:Peer
12:02:20 ipsec,debug (lifetime = 86400:3600)
12:02:20 ipsec,debug (lifebyte = 0:0)
12:02:20 ipsec,debug enctype = AES-CBC:AES-CBC
12:02:20 ipsec,debug (encklen = 128:256)
12:02:20 ipsec,debug hashtype = SHA:SHA
12:02:20 ipsec,debug authmethod = pre-shared key:pre-shared key
12:02:20 ipsec,debug dh_group = 1024-bit MODP group:2048-bit MODP group
12:02:20 ipsec,debug Compared: Local:Peer
12:02:20 ipsec,debug (lifetime = 86400:3600)
12:02:20 ipsec,debug (lifebyte = 0:0)
12:02:20 ipsec,debug enctype = 3DES-CBC:AES-CBC
12:02:20 ipsec,debug (encklen = 0:256)
12:02:20 ipsec,debug hashtype = SHA:SHA
12:02:20 ipsec,debug authmethod = pre-shared key:pre-shared key
12:02:20 ipsec,debug dh_group = 1024-bit MODP group:2048-bit MODP group
12:02:20 ipsec,debug prop#=1, prot-id=ISAKMP, spi-size=0, #trns=14
12:02:20 ipsec,debug trns#=3, trns-id=IKE
12:02:20 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
12:02:20 ipsec,debug type=Life Duration, flag=0x8000, lorv=3600
12:02:20 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=AES-CBC
12:02:20 ipsec,debug type=Key Length, flag=0x8000, lorv=256
12:02:20 ipsec,debug type=Authentication Method, flag=0x8000, lorv=pre-shared key
12:02:20 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=MD5
12:02:20 ipsec,debug type=Group Description, flag=0x8000, lorv=2048-bit MODP group
12:02:20 ipsec,debug Compared: Local:Peer
12:02:20 ipsec,debug (lifetime = 86400:3600)
12:02:20 ipsec,debug (lifebyte = 0:0)
12:02:20 ipsec,debug enctype = AES-CBC:AES-CBC
12:02:20 ipsec,debug (encklen = 256:256)
12:02:20 ipsec,debug hashtype = SHA:MD5
12:02:20 ipsec,debug authmethod = pre-shared key:pre-shared key
12:02:20 ipsec,debug dh_group = 1024-bit MODP group:2048-bit MODP group
12:02:20 ipsec,debug Compared: Local:Peer
12:02:20 ipsec,debug (lifetime = 86400:3600)
12:02:20 ipsec,debug (lifebyte = 0:0)
12:02:20 ipsec,debug enctype = AES-CBC:AES-CBC
12:02:20 ipsec,debug (encklen = 192:256)
12:02:20 ipsec,debug hashtype = SHA:MD5
12:02:20 ipsec,debug authmethod = pre-shared key:pre-shared key
12:02:20 ipsec,debug dh_group = 1024-bit MODP group:2048-bit MODP group
12:02:20 ipsec,debug Compared: Local:Peer
12:02:20 ipsec,debug (lifetime = 86400:3600)
12:02:20 ipsec,debug (lifebyte = 0:0)
12:02:20 ipsec,debug enctype = AES-CBC:AES-CBC
12:02:20 ipsec,debug (encklen = 128:256)
12:02:20 ipsec,debug hashtype = SHA:MD5
12:02:20 ipsec,debug authmethod = pre-shared key:pre-shared key
12:02:20 ipsec,debug dh_group = 1024-bit MODP group:2048-bit MODP group
12:02:20 ipsec,debug Compared: Local:Peer
12:02:20 ipsec,debug (lifetime = 86400:3600)
12:02:20 ipsec,debug (lifebyte = 0:0)
12:02:20 ipsec,debug enctype = 3DES-CBC:AES-CBC
12:02:20 ipsec,debug (encklen = 0:256)
12:02:20 ipsec,debug hashtype = SHA:MD5
12:02:20 ipsec,debug authmethod = pre-shared key:pre-shared key
12:02:20 ipsec,debug dh_group = 1024-bit MODP group:2048-bit MODP group
12:02:20 ipsec,debug prop#=1, prot-id=ISAKMP, spi-size=0, #trns=14
12:02:20 ipsec,debug trns#=4, trns-id=IKE
12:02:20 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
12:02:20 ipsec,debug type=Life Duration, flag=0x8000, lorv=3600
12:02:20 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=AES-CBC
12:02:20 ipsec,debug type=Key Length, flag=0x8000, lorv=256
12:02:20 ipsec,debug type=Authentication Method, flag=0x8000, lorv=pre-shared key
12:02:20 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=6
12:02:20 ipsec,debug type=Group Description, flag=0x8000, lorv=2048-bit MODP group
12:02:20 ipsec,debug Compared: Local:Peer
12:02:20 ipsec,debug (lifetime = 86400:3600)
12:02:20 ipsec,debug (lifebyte = 0:0)
12:02:20 ipsec,debug enctype = AES-CBC:AES-CBC
12:02:20 ipsec,debug (encklen = 256:256)
12:02:20 ipsec,debug hashtype = SHA:6
12:02:20 ipsec,debug authmethod = pre-shared key:pre-shared key
12:02:20 ipsec,debug dh_group = 1024-bit MODP group:2048-bit MODP group
12:02:20 ipsec,debug Compared: Local:Peer
12:02:20 ipsec,debug (lifetime = 86400:3600)
12:02:20 ipsec,debug (lifebyte = 0:0)
12:02:20 ipsec,debug enctype = AES-CBC:AES-CBC
12:02:20 ipsec,debug (encklen = 192:256)
12:02:20 ipsec,debug hashtype = SHA:6
12:02:20 ipsec,debug authmethod = pre-shared key:pre-shared key
12:02:20 ipsec,debug dh_group = 1024-bit MODP group:2048-bit MODP group
12:02:20 ipsec,debug Compared: Local:Peer
12:02:20 ipsec,debug (lifetime = 86400:3600)
12:02:20 ipsec,debug (lifebyte = 0:0)
12:02:20 ipsec,debug enctype = AES-CBC:AES-CBC
12:02:20 ipsec,debug (encklen = 128:256)
12:02:20 ipsec,debug hashtype = SHA:6
12:02:20 ipsec,debug authmethod = pre-shared key:pre-shared key
12:02:20 ipsec,debug dh_group = 1024-bit MODP group:2048-bit MODP group
12:02:20 ipsec,debug Compared: Local:Peer
12:02:20 ipsec,debug (lifetime = 86400:3600)
12:02:20 ipsec,debug (lifebyte = 0:0)
12:02:20 ipsec,debug enctype = 3DES-CBC:AES-CBC
12:02:20 ipsec,debug (encklen = 0:256)
12:02:20 ipsec,debug hashtype = SHA:6
12:02:20 ipsec,debug authmethod = pre-shared key:pre-shared key
12:02:20 ipsec,debug dh_group = 1024-bit MODP group:2048-bit MODP group
12:02:20 ipsec,debug prop#=1, prot-id=ISAKMP, spi-size=0, #trns=14
12:02:20 ipsec,debug trns#=5, trns-id=IKE
12:02:20 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
12:02:20 ipsec,debug type=Life Duration, flag=0x8000, lorv=3600
12:02:20 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=AES-CBC
12:02:20 ipsec,debug type=Key Length, flag=0x8000, lorv=256
12:02:20 ipsec,debug type=Authentication Method, flag=0x8000, lorv=pre-shared key
12:02:20 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=4
12:02:20 ipsec,debug type=Group Description, flag=0x8000, lorv=1536-bit MODP group
12:02:20 ipsec,debug Compared: Local:Peer
12:02:20 ipsec,debug (lifetime = 86400:3600)
12:02:20 ipsec,debug (lifebyte = 0:0)
12:02:20 ipsec,debug enctype = AES-CBC:AES-CBC
12:02:20 ipsec,debug (encklen = 256:256)
12:02:20 ipsec,debug hashtype = SHA:4
12:02:20 ipsec,debug authmethod = pre-shared key:pre-shared key
12:02:20 ipsec,debug dh_group = 1024-bit MODP group:1536-bit MODP group
12:02:20 ipsec,debug Compared: Local:Peer
12:02:20 ipsec,debug (lifetime = 86400:3600)
12:02:20 ipsec,debug (lifebyte = 0:0)
12:02:20 ipsec,debug enctype = AES-CBC:AES-CBC
12:02:20 ipsec,debug (encklen = 192:256)
12:02:20 ipsec,debug hashtype = SHA:4
12:02:20 ipsec,debug authmethod = pre-shared key:pre-shared key
12:02:20 ipsec,debug dh_group = 1024-bit MODP group:1536-bit MODP group
12:02:20 ipsec,debug Compared: Local:Peer
12:02:20 ipsec,debug (lifetime = 86400:3600)
12:02:20 ipsec,debug (lifebyte = 0:0)
12:02:20 ipsec,debug enctype = AES-CBC:AES-CBC
12:02:20 ipsec,debug (encklen = 128:256)
12:02:20 ipsec,debug hashtype = SHA:4
12:02:20 ipsec,debug authmethod = pre-shared key:pre-shared key
12:02:20 ipsec,debug dh_group = 1024-bit MODP group:1536-bit MODP group
12:02:20 ipsec,debug Compared: Local:Peer
12:02:20 ipsec,debug (lifetime = 86400:3600)
12:02:20 ipsec,debug (lifebyte = 0:0)
12:02:20 ipsec,debug enctype = 3DES-CBC:AES-CBC
12:02:20 ipsec,debug (encklen = 0:256)
12:02:20 ipsec,debug hashtype = SHA:4
12:02:20 ipsec,debug authmethod = pre-shared key:pre-shared key
12:02:20 ipsec,debug dh_group = 1024-bit MODP group:1536-bit MODP group
12:02:20 ipsec,debug prop#=1, prot-id=ISAKMP, spi-size=0, #trns=14
12:02:20 ipsec,debug trns#=6, trns-id=IKE
12:02:20 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
12:02:20 ipsec,debug type=Life Duration, flag=0x8000, lorv=3600
12:02:20 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=AES-CBC
12:02:20 ipsec,debug type=Key Length, flag=0x8000, lorv=256
12:02:20 ipsec,debug type=Authentication Method, flag=0x8000, lorv=pre-shared key
12:02:20 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=SHA
12:02:20 ipsec,debug type=Group Description, flag=0x8000, lorv=1536-bit MODP group
12:02:20 ipsec,debug Compared: Local:Peer
12:02:20 ipsec,debug (lifetime = 86400:3600)
12:02:20 ipsec,debug (lifebyte = 0:0)
12:02:20 ipsec,debug enctype = AES-CBC:AES-CBC
12:02:20 ipsec,debug (encklen = 256:256)
12:02:20 ipsec,debug hashtype = SHA:SHA
12:02:20 ipsec,debug authmethod = pre-shared key:pre-shared key
12:02:20 ipsec,debug dh_group = 1024-bit MODP group:1536-bit MODP group
12:02:20 ipsec,debug Compared: Local:Peer
12:02:20 ipsec,debug (lifetime = 86400:3600)
12:02:20 ipsec,debug (lifebyte = 0:0)
12:02:20 ipsec,debug enctype = AES-CBC:AES-CBC
12:02:20 ipsec,debug (encklen = 192:256)
12:02:20 ipsec,debug hashtype = SHA:SHA
12:02:20 ipsec,debug authmethod = pre-shared key:pre-shared key
12:02:20 ipsec,debug dh_group = 1024-bit MODP group:1536-bit MODP group
12:02:20 ipsec,debug Compared: Local:Peer
12:02:20 ipsec,debug (lifetime = 86400:3600)
12:02:20 ipsec,debug (lifebyte = 0:0)
12:02:20 ipsec,debug enctype = AES-CBC:AES-CBC
12:02:20 ipsec,debug (encklen = 128:256)
12:02:20 ipsec,debug hashtype = SHA:SHA
12:02:20 ipsec,debug authmethod = pre-shared key:pre-shared key
12:02:20 ipsec,debug dh_group = 1024-bit MODP group:1536-bit MODP group
12:02:20 ipsec,debug Compared: Local:Peer
12:02:20 ipsec,debug (lifetime = 86400:3600)
12:02:20 ipsec,debug (lifebyte = 0:0)
12:02:20 ipsec,debug enctype = 3DES-CBC:AES-CBC
12:02:20 ipsec,debug (encklen = 0:256)
12:02:20 ipsec,debug hashtype = SHA:SHA
12:02:20 ipsec,debug authmethod = pre-shared key:pre-shared key
12:02:20 ipsec,debug dh_group = 1024-bit MODP group:1536-bit MODP group
12:02:20 ipsec,debug prop#=1, prot-id=ISAKMP, spi-size=0, #trns=14
12:02:20 ipsec,debug trns#=7, trns-id=IKE
12:02:20 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
12:02:20 ipsec,debug type=Life Duration, flag=0x8000, lorv=3600
12:02:20 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=AES-CBC
12:02:20 ipsec,debug type=Key Length, flag=0x8000, lorv=256
12:02:20 ipsec,debug type=Authentication Method, flag=0x8000, lorv=pre-shared key
12:02:20 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=MD5
12:02:20 ipsec,debug type=Group Description, flag=0x8000, lorv=1536-bit MODP group
12:02:20 ipsec,debug Compared: Local:Peer
12:02:20 ipsec,debug (lifetime = 86400:3600)
12:02:20 ipsec,debug (lifebyte = 0:0)
12:02:20 ipsec,debug enctype = AES-CBC:AES-CBC
12:02:20 ipsec,debug (encklen = 256:256)
12:02:20 ipsec,debug hashtype = SHA:MD5
12:02:20 ipsec,debug authmethod = pre-shared key:pre-shared key
12:02:20 ipsec,debug dh_group = 1024-bit MODP group:1536-bit MODP group
12:02:20 ipsec,debug Compared: Local:Peer
12:02:20 ipsec,debug (lifetime = 86400:3600)
12:02:20 ipsec,debug (lifebyte = 0:0)
12:02:20 ipsec,debug enctype = AES-CBC:AES-CBC
12:02:20 ipsec,debug (encklen = 192:256)
12:02:20 ipsec,debug hashtype = SHA:MD5
12:02:20 ipsec,debug authmethod = pre-shared key:pre-shared key
12:02:20 ipsec,debug dh_group = 1024-bit MODP group:1536-bit MODP group
12:02:20 ipsec,debug Compared: Local:Peer
12:02:20 ipsec,debug (lifetime = 86400:3600)
12:02:20 ipsec,debug (lifebyte = 0:0)
12:02:20 ipsec,debug enctype = AES-CBC:AES-CBC
12:02:20 ipsec,debug (encklen = 128:256)
12:02:20 ipsec,debug hashtype = SHA:MD5
12:02:20 ipsec,debug authmethod = pre-shared key:pre-shared key
12:02:20 ipsec,debug dh_group = 1024-bit MODP group:1536-bit MODP group
12:02:20 ipsec,debug Compared: Local:Peer
12:02:20 ipsec,debug (lifetime = 86400:3600)
12:02:20 ipsec,debug (lifebyte = 0:0)
12:02:20 ipsec,debug enctype = 3DES-CBC:AES-CBC
12:02:20 ipsec,debug (encklen = 0:256)
12:02:20 ipsec,debug hashtype = SHA:MD5
12:02:20 ipsec,debug authmethod = pre-shared key:pre-shared key
12:02:20 ipsec,debug dh_group = 1024-bit MODP group:1536-bit MODP group
12:02:20 ipsec,debug prop#=1, prot-id=ISAKMP, spi-size=0, #trns=14
12:02:20 ipsec,debug trns#=8, trns-id=IKE
12:02:20 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
12:02:20 ipsec,debug type=Life Duration, flag=0x8000, lorv=3600
12:02:20 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=AES-CBC
12:02:20 ipsec,debug type=Key Length, flag=0x8000, lorv=256
12:02:20 ipsec,debug type=Authentication Method, flag=0x8000, lorv=pre-shared key
12:02:20 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=4
12:02:20 ipsec,debug type=Group Description, flag=0x8000, lorv=1024-bit MODP group
12:02:20 ipsec,debug Compared: Local:Peer
12:02:20 ipsec,debug (lifetime = 86400:3600)
12:02:20 ipsec,debug (lifebyte = 0:0)
12:02:20 ipsec,debug enctype = AES-CBC:AES-CBC
12:02:20 ipsec,debug (encklen = 256:256)
12:02:20 ipsec,debug hashtype = SHA:4
12:02:20 ipsec,debug authmethod = pre-shared key:pre-shared key
12:02:20 ipsec,debug dh_group = 1024-bit MODP group:1024-bit MODP group
12:02:20 ipsec,debug Compared: Local:Peer
12:02:20 ipsec,debug (lifetime = 86400:3600)
12:02:20 ipsec,debug (lifebyte = 0:0)
12:02:20 ipsec,debug enctype = AES-CBC:AES-CBC
12:02:20 ipsec,debug (encklen = 192:256)
12:02:20 ipsec,debug hashtype = SHA:4
12:02:20 ipsec,debug authmethod = pre-shared key:pre-shared key
12:02:20 ipsec,debug dh_group = 1024-bit MODP group:1024-bit MODP group
12:02:20 ipsec,debug Compared: Local:Peer
12:02:20 ipsec,debug (lifetime = 86400:3600)
12:02:20 ipsec,debug (lifebyte = 0:0)
12:02:20 ipsec,debug enctype = AES-CBC:AES-CBC
12:02:20 ipsec,debug (encklen = 128:256)
12:02:20 ipsec,debug hashtype = SHA:4
12:02:20 ipsec,debug authmethod = pre-shared key:pre-shared key
12:02:20 ipsec,debug dh_group = 1024-bit MODP group:1024-bit MODP group
12:02:20 ipsec,debug Compared: Local:Peer
12:02:20 ipsec,debug (lifetime = 86400:3600)
12:02:20 ipsec,debug (lifebyte = 0:0)
12:02:20 ipsec,debug enctype = 3DES-CBC:AES-CBC
12:02:20 ipsec,debug (encklen = 0:256)
12:02:20 ipsec,debug hashtype = SHA:4
12:02:20 ipsec,debug authmethod = pre-shared key:pre-shared key
12:02:20 ipsec,debug dh_group = 1024-bit MODP group:1024-bit MODP group
12:02:20 ipsec,debug prop#=1, prot-id=ISAKMP, spi-size=0, #trns=14
12:02:20 ipsec,debug trns#=9, trns-id=IKE
12:02:20 ipsec,debug type=Life Type, flag=0x8000, lorv=seconds
12:02:20 ipsec,debug type=Life Duration, flag=0x8000, lorv=3600
12:02:20 ipsec,debug type=Encryption Algorithm, flag=0x8000, lorv=AES-CBC
12:02:20 ipsec,debug type=Key Length, flag=0x8000, lorv=256
12:02:20 ipsec,debug type=Authentication Method, flag=0x8000, lorv=pre-shared key
12:02:20 ipsec,debug type=Hash Algorithm, flag=0x8000, lorv=SHA
12:02:20 ipsec,debug type=Group Description, flag=0x8000, lorv=1024-bit MODP group
12:02:20 ipsec,debug Compared: Local:Peer
12:02:20 ipsec,debug (lifetime = 86400:3600)
12:02:20 ipsec,debug (lifebyte = 0:0)
12:02:20 ipsec,debug enctype = AES-CBC:AES-CBC
12:02:20 ipsec,debug (encklen = 256:256)
12:02:20 ipsec,debug hashtype = SHA:SHA
12:02:20 ipsec,debug authmethod = pre-shared key:pre-shared key
12:02:20 ipsec,debug dh_group = 1024-bit MODP group:1024-bit MODP group
12:02:20 ipsec,debug an acceptable proposal found.
12:02:20 ipsec,debug dh(modp1024)
12:02:20 ipsec,debug agreed on pre-shared key auth.
12:02:20 ipsec,debug ===
12:02:20 ipsec,debug new cookie:
12:02:20 ipsec,debug d7138efe6fef7bd8
12:02:20 ipsec,debug add payload of len 52, next type 13
12:02:20 ipsec,debug add payload of len 16, next type 13
12:02:20 ipsec,debug add payload of len 16, next type 13
12:02:20 ipsec,debug add payload of len 20, next type 0
12:02:20 ipsec,debug 148 bytes from 192.168.200.1[500] to 192.168.200.196[500]
12:02:20 ipsec,debug 1 times of 148 bytes message will be sent to 192.168.200.196[500]
12:02:20 ipsec,debug,packet a430d0fc 1cb28348 d7138efe 6fef7bd8 01100200 00000000 00000094 0d000038
12:02:20 ipsec,debug,packet 00000001 00000001 0000002c 01010001 00000024 09010000 800b0001 800c0e10
12:02:20 ipsec,debug,packet 80010007 800e0100 80030001 80020002 80040002 0d000014 4a131c81 07035845
12:02:20 ipsec,debug,packet 5c5728f2 0e95452f 0d000014 afcad713 68a1f1c9 6b8696fc 77570100 00000018
12:02:20 ipsec,debug,packet 4048b7d5 6ebce885 25e7de7f 00d6c2d3 80000000
12:02:20 ipsec,debug ===== received 228 bytes from 192.168.200.196[500] to 192.168.200.1[500]
12:02:20 ipsec,debug,packet a430d0fc 1cb28348 d7138efe 6fef7bd8 04100200 00000000 000000e4 0a000084
12:02:20 ipsec,debug,packet 63a0ce7e 0190fdc9 8280eeb7 db53a7d4 4aaa3eeb 572abab4 767d3be4 1055ddd9
12:02:20 ipsec,debug,packet 42d62fb5 ca8114b2 567048b7 d5c76c39 97c07247 755a06e9 93c8b352 e49a71e9
12:02:20 ipsec,debug,packet 0e3c7791 f417c275 73093afd b4af9d22 2655cc0a 88075695 d6671c19 2edb0f17
12:02:20 ipsec,debug,packet 83785da6 a2b4869c a1d07531 60f4bb8d 2f2ffbf2 c1a09ceb e4b7f062 75509c3f
12:02:20 ipsec,debug,packet 14000014 ab659238 5780bbf1 9cfb5256 d2047c3e 14000018 91a3e6af c4895cd4
12:02:20 ipsec,debug,packet 5bfce0a7 8df8ebf0 4ead09b8 00000018 ff5822ea 74fbd468 6f859fd3 53467dc7
12:02:20 ipsec,debug,packet c91b2145
12:02:20 ipsec,debug begin.
12:02:20 ipsec,debug seen nptype=4(ke) len=132
12:02:20 ipsec,debug seen nptype=10(nonce) len=20
12:02:20 ipsec,debug seen nptype=20(nat-d) len=24
12:02:20 ipsec,debug seen nptype=20(nat-d) len=24
12:02:20 ipsec,debug succeed.
12:02:20 ipsec,debug hash(sha1)
12:02:20 ipsec,debug hash(sha1)
12:02:20 ipsec,debug ===
12:02:20 ipsec,debug dh(modp1024)
12:02:20 ipsec,debug compute DH's private.
12:02:20 ipsec,debug 6500ac66 c74ae639 2534854e b22c2ad8 e48f3b85 d04a9655 96d3b2c3 b865b8fd
12:02:20 ipsec,debug d54c5b6c c3922a45 e2d40520 d0a807aa 107fd0d4 6c6b812c fece75a2 bc65bbcb
12:02:20 ipsec,debug 58a0873d 052c9932 d6c7169c 63171c62 7b25e740 34bd733d f0234603 08e305cd
12:02:20 ipsec,debug b3104dff e35491e9 b8f5b11a a260476d ec072eab 7efa2fb3 c162683c 612f9cb9
12:02:20 ipsec,debug compute DH's public.
12:02:20 ipsec,debug 3113b1ca fba5c327 4bf86783 3f27dad7 5c53cac2 5daf5377 f6c546bf 0ec351ce
12:02:20 ipsec,debug 44f9c23d 04aeaa5d 3804d00b 01ff50e1 a5a95044 40c72742 8436d1b2 9279135d
12:02:20 ipsec,debug 2fc1d840 69eaea1c 74ecb73a af5b65d7 fc0c62ff a4c0aba3 e3b70c4b 89485871
12:02:20 ipsec,debug 3a7c859a d50443d4 dc0f0282 be7a3608 85d639d9 4835bc2b d7ed99c6 3d6278a1
12:02:20 ipsec,debug hash(sha1)
12:02:20 ipsec,debug hash(sha1)
12:02:20 ipsec,debug add payload of len 128, next type 10
12:02:20 ipsec,debug add payload of len 24, next type 20
12:02:20 ipsec,debug add payload of len 20, next type 20
12:02:20 ipsec,debug add payload of len 20, next type 0
12:02:20 ipsec,debug 236 bytes from 192.168.200.1[500] to 192.168.200.196[500]
12:02:20 ipsec,debug 1 times of 236 bytes message will be sent to 192.168.200.196[500]
12:02:20 ipsec,debug,packet a430d0fc 1cb28348 d7138efe 6fef7bd8 04100200 00000000 000000ec 0a000084
12:02:20 ipsec,debug,packet 3113b1ca fba5c327 4bf86783 3f27dad7 5c53cac2 5daf5377 f6c546bf 0ec351ce
12:02:20 ipsec,debug,packet 44f9c23d 04aeaa5d 3804d00b 01ff50e1 a5a95044 40c72742 8436d1b2 9279135d
12:02:20 ipsec,debug,packet 2fc1d840 69eaea1c 74ecb73a af5b65d7 fc0c62ff a4c0aba3 e3b70c4b 89485871
12:02:20 ipsec,debug,packet 3a7c859a d50443d4 dc0f0282 be7a3608 85d639d9 4835bc2b d7ed99c6 3d6278a1
12:02:20 ipsec,debug,packet 1400001c e3a300f1 997f879e 3f134b80 2c09746a 71a9f4bf f58716f3 14000018
12:02:20 ipsec,debug,packet ff5822ea 74fbd468 6f859fd3 53467dc7 c91b2145 00000018 91a3e6af c4895cd4
12:02:20 ipsec,debug,packet 5bfce0a7 8df8ebf0 4ead09b8
12:02:20 ipsec,debug dh(modp1024)
12:02:20 ipsec,debug compute DH's shared.
12:02:20 ipsec,debug
12:02:20 ipsec,debug c0f29900 c45b27ae 1ed5a1fe ac010251 0be80bae 054950d2 af7b7a4e 04253535
12:02:20 ipsec,debug dc87139b 6a1b4c88 69719d24 99837535 9f2320cd 99b39282 553bf574 be4ffd2c
12:02:20 ipsec,debug c178c3e1 47e0c6a5 4a3eb85d 1669cb04 38e8125d ed231786 5478f88b 9c434e9a
12:02:20 ipsec,debug a343f4c1 dd9fa848 87088b42 b0bffc21 130b8bd9 1e484008 7899dcf0 6d95359b
12:02:20 ipsec,debug nonce 1:
12:02:20 ipsec,debug ab659238 5780bbf1 9cfb5256 d2047c3e
12:02:20 ipsec,debug nonce 2:
12:02:20 ipsec,debug e3a300f1 997f879e 3f134b80 2c09746a 71a9f4bf f58716f3
12:02:20 ipsec,debug hmac(hmac_sha1)
12:02:20 ipsec,debug SKEYID computed:
12:02:20 ipsec,debug 6039e2fa 738c676c 86b47504 4b0a0ddb 1cd2ead0
12:02:20 ipsec,debug hmac(hmac_sha1)
12:02:20 ipsec,debug SKEYID_d computed:
12:02:20 ipsec,debug a544f2cd b7aff081 ebde6ecb f3fe5c04 b5e25236
12:02:20 ipsec,debug hmac(hmac_sha1)
12:02:20 ipsec,debug SKEYID_a computed:
12:02:20 ipsec,debug a185f495 c7ce50da d4b09b30 463a0f28 dcc9863b
12:02:20 ipsec,debug hmac(hmac_sha1)
12:02:20 ipsec,debug SKEYID_e computed:
12:02:20 ipsec,debug bb998940 f7f3df59 bc644be1 8cec7626 60c01e1a
12:02:20 ipsec,debug encryption(aes)
12:02:20 ipsec,debug hash(sha1)
12:02:20 ipsec,debug len(SKEYID_e) < len(Ka) (20 < 32), generating long key (Ka = K1 | K2 | ...)
12:02:20 ipsec,debug hmac(hmac_sha1)
12:02:20 ipsec,debug compute intermediate encryption key K1
12:02:20 ipsec,debug 00
12:02:20 ipsec,debug 7cf608a2 9a56a3a9 4acdab38 130f7d52 ecdcab23
12:02:20 ipsec,debug hmac(hmac_sha1)
12:02:20 ipsec,debug compute intermediate encryption key K2
12:02:20 ipsec,debug 7cf608a2 9a56a3a9 4acdab38 130f7d52 ecdcab23
12:02:20 ipsec,debug 8ff78e1c a64bee5e 0e89a69c d8652698 449f3606
12:02:20 ipsec,debug final encryption key computed:
12:02:20 ipsec,debug 7cf608a2 9a56a3a9 4acdab38 130f7d52 ecdcab23 8ff78e1c a64bee5e 0e89a69c
12:02:20 ipsec,debug hash(sha1)
12:02:20 ipsec,debug encryption(aes)
12:02:20 ipsec,debug IV computed:
12:02:20 ipsec,debug 66f950e6 8e9cd914 8949493f 83f9101a
12:02:20 ipsec,debug ===== received 108 bytes from 192.168.200.196[500] to 192.168.200.1[500]
12:02:20 ipsec,debug,packet a430d0fc 1cb28348 d7138efe 6fef7bd8 05100201 00000000 0000006c 2704266d
12:02:20 ipsec,debug,packet c4fa59e8 050063b8 8e013b28 195ec568 c3607eda bef886ba 4ab90b40 5877790b
12:02:20 ipsec,debug,packet d1443023 0f73e83c 2bccf7ed 81fab442 a73b548b 71a96005 fb03cbdf 5c6ce586
12:02:20 ipsec,debug,packet 65652d84 bd71cf69 f870ac62
12:02:20 ipsec,debug encryption(aes)
12:02:20 ipsec,debug IV was saved for next processing:
12:02:20 ipsec,debug 5c6ce586 65652d84 bd71cf69 f870ac62
12:02:20 ipsec,debug encryption(aes)
12:02:20 ipsec,debug with key:
12:02:20 ipsec,debug 7cf608a2 9a56a3a9 4acdab38 130f7d52 ecdcab23 8ff78e1c a64bee5e 0e89a69c
12:02:20 ipsec,debug decrypted payload by IV:
12:02:20 ipsec,debug 66f950e6 8e9cd914 8949493f 83f9101a
12:02:20 ipsec,debug decrypted payload, but not trimed.
12:02:20 ipsec,debug 0800000c 011101f4 c0a8c8c4 0b000018 2c700a81 3847c557 a5ee37a8 e78c8864
12:02:20 ipsec,debug 0c371a44 0000001c 00000001 01106002 a430d0fc 1cb28348 d7138efe 6fef7bd8
12:02:20 ipsec,debug 00000000 00000000 00000000 00000010
12:02:20 ipsec,debug padding len=17
12:02:20 ipsec,debug skip to trim padding.
12:02:20 ipsec,debug decrypted.
12:02:20 ipsec,debug a430d0fc 1cb28348 d7138efe 6fef7bd8 05100201 00000000 0000006c 0800000c
12:02:20 ipsec,debug 011101f4 c0a8c8c4 0b000018 2c700a81 3847c557 a5ee37a8 e78c8864 0c371a44
12:02:20 ipsec,debug 0000001c 00000001 01106002 a430d0fc 1cb28348 d7138efe 6fef7bd8 00000000
12:02:20 ipsec,debug 00000000 00000000 00000010
12:02:20 ipsec,debug begin.
12:02:20 ipsec,debug seen nptype=5(id) len=12
12:02:20 ipsec,debug seen nptype=8(hash) len=24
12:02:20 ipsec,debug seen nptype=11(notify) len=28
12:02:20 ipsec,debug succeed.
12:02:20 ipsec,debug 192.168.200.196 Notify Message received
12:02:20 ipsec,debug HASH received:
12:02:20 ipsec,debug 2c700a81 3847c557 a5ee37a8 e78c8864 0c371a44
12:02:20 ipsec,debug HASH with:
12:02:20 ipsec,debug 63a0ce7e 0190fdc9 8280eeb7 db53a7d4 4aaa3eeb 572abab4 767d3be4 1055ddd9
12:02:20 ipsec,debug 42d62fb5 ca8114b2 567048b7 d5c76c39 97c07247 755a06e9 93c8b352 e49a71e9
12:02:20 ipsec,debug 0e3c7791 f417c275 73093afd b4af9d22 2655cc0a 88075695 d6671c19 2edb0f17
12:02:20 ipsec,debug 83785da6 a2b4869c a1d07531 60f4bb8d 2f2ffbf2 c1a09ceb e4b7f062 75509c3f
12:02:20 ipsec,debug 3113b1ca fba5c327 4bf86783 3f27dad7 5c53cac2 5daf5377 f6c546bf 0ec351ce
12:02:20 ipsec,debug 44f9c23d 04aeaa5d 3804d00b 01ff50e1 a5a95044 40c72742 8436d1b2 9279135d
12:02:20 ipsec,debug 2fc1d840 69eaea1c 74ecb73a af5b65d7 fc0c62ff a4c0aba3 e3b70c4b 89485871
12:02:20 ipsec,debug 3a7c859a d50443d4 dc0f0282 be7a3608 85d639d9 4835bc2b d7ed99c6 3d6278a1
12:02:20 ipsec,debug a430d0fc 1cb28348 d7138efe 6fef7bd8 00000001 00000001 000001f8 0101000e
12:02:20 ipsec,debug 03000024 01010000 800b0001 800c0e10 80010007 800e0100 80030001 80020004
12:02:20 ipsec,debug 8004000e 03000024 02010000 800b0001 800c0e10 80010007 800e0100 80030001
12:02:20 ipsec,debug 80020002 8004000e 03000024 03010000 800b0001 800c0e10 80010007 800e0100
12:02:20 ipsec,debug 80030001 80020001 8004000e 03000024 04010000 800b0001 800c0e10 80010007
12:02:20 ipsec,debug 800e0100 80030001 80020006 8004000e 03000024 05010000 800b0001 800c0e10
12:02:20 ipsec,debug 80010007 800e0100 80030001 80020004 80040005 03000024 06010000 800b0001
12:02:20 ipsec,debug 800c0e10 80010007 800e0100 80030001 80020002 80040005 03000024 07010000
12:02:20 ipsec,debug 800b0001 800c0e10 80010007 800e0100 80030001 80020001 80040005 03000024
12:02:20 ipsec,debug 08010000 800b0001 800c0e10 80010007 800e0100 80030001 80020004 80040002
12:02:20 ipsec,debug 03000024 09010000 800b0001 800c0e10 80010007 800e0100 80030001 80020002
12:02:20 ipsec,debug 80040002 03000024 0a010000 800b0001 800c0e10 80010007 800e0100 80030001
12:02:20 ipsec,debug 80020001 80040002 03000024 0b010000 800b0001 800c0e10 80010007 800e0080
12:02:20 ipsec,debug 80030001 80020002 80040002 03000024 0c010000 800b0001 800c0e10 80010007
12:02:20 ipsec,debug 800e0080 80030001 80020001 80040002 03000020 0d010000 800b0001 800c0e10
12:02:20 ipsec,debug 80010005 80030001 80020002 80040002 00000020 0e010000 800b0001 800c0e10
12:02:20 ipsec,debug 80010005 80030001 80020001 80040002 011101f4 c0a8c8c4
12:02:20 ipsec,debug hmac(hmac_sha1)
12:02:20 ipsec,debug HASH computed:
12:02:20 ipsec,debug 2c700a81 3847c557 a5ee37a8 e78c8864 0c371a44
12:02:20 ipsec,debug HASH for PSK validated.
12:02:20 ipsec,debug 192.168.200.196 peer's ID
12:02:20 ipsec,debug 011101f4 c0a8c8c4
12:02:20 ipsec,debug ===
12:02:20 ipsec,debug use ID type of IPv4_address
12:02:20 ipsec,debug generate HASH_R
12:02:20 ipsec,debug HASH with:
12:02:20 ipsec,debug 3113b1ca fba5c327 4bf86783 3f27dad7 5c53cac2 5daf5377 f6c546bf 0ec351ce
12:02:20 ipsec,debug 44f9c23d 04aeaa5d 3804d00b 01ff50e1 a5a95044 40c72742 8436d1b2 9279135d
12:02:20 ipsec,debug 2fc1d840 69eaea1c 74ecb73a af5b65d7 fc0c62ff a4c0aba3 e3b70c4b 89485871
12:02:20 ipsec,debug 3a7c859a d50443d4 dc0f0282 be7a3608 85d639d9 4835bc2b d7ed99c6 3d6278a1
12:02:20 ipsec,debug 63a0ce7e 0190fdc9 8280eeb7 db53a7d4 4aaa3eeb 572abab4 767d3be4 1055ddd9
12:02:20 ipsec,debug 42d62fb5 ca8114b2 567048b7 d5c76c39 97c07247 755a06e9 93c8b352 e49a71e9
12:02:20 ipsec,debug 0e3c7791 f417c275 73093afd b4af9d22 2655cc0a 88075695 d6671c19 2edb0f17
12:02:20 ipsec,debug 83785da6 a2b4869c a1d07531 60f4bb8d 2f2ffbf2 c1a09ceb e4b7f062 75509c3f
12:02:20 ipsec,debug d7138efe 6fef7bd8 a430d0fc 1cb28348 00000001 00000001 000001f8 0101000e
12:02:20 ipsec,debug 03000024 01010000 800b0001 800c0e10 80010007 800e0100 80030001 80020004
12:02:20 ipsec,debug 8004000e 03000024 02010000 800b0001 800c0e10 80010007 800e0100 80030001
12:02:20 ipsec,debug 80020002 8004000e 03000024 03010000 800b0001 800c0e10 80010007 800e0100
12:02:20 ipsec,debug 80030001 80020001 8004000e 03000024 04010000 800b0001 800c0e10 80010007
12:02:20 ipsec,debug 800e0100 80030001 80020006 8004000e 03000024 05010000 800b0001 800c0e10
12:02:20 ipsec,debug 80010007 800e0100 80030001 80020004 80040005 03000024 06010000 800b0001
12:02:20 ipsec,debug 800c0e10 80010007 800e0100 80030001 80020002 80040005 03000024 07010000
12:02:20 ipsec,debug 800b0001 800c0e10 80010007 800e0100 80030001 80020001 80040005 03000024
12:02:20 ipsec,debug 08010000 800b0001 800c0e10 80010007 800e0100 80030001 80020004 80040002
12:02:20 ipsec,debug 03000024 09010000 800b0001 800c0e10 80010007 800e0100 80030001 80020002
12:02:20 ipsec,debug 80040002 03000024 0a010000 800b0001 800c0e10 80010007 800e0100 80030001
12:02:20 ipsec,debug 80020001 80040002 03000024 0b010000 800b0001 800c0e10 80010007 800e0080
12:02:20 ipsec,debug 80030001 80020002 80040002 03000024 0c010000 800b0001 800c0e10 80010007
12:02:20 ipsec,debug 800e0080 80030001 80020001 80040002 03000020 0d010000 800b0001 800c0e10
12:02:20 ipsec,debug 80010005 80030001 80020002 80040002 00000020 0e010000 800b0001 800c0e10
12:02:20 ipsec,debug 80010005 80030001 80020001 80040002 011101f4 c0a8c801
12:02:20 ipsec,debug hmac(hmac_sha1)
12:02:20 ipsec,debug HASH computed:
12:02:20 ipsec,debug 336f7ce0 e6abbdb9 d9322f4d a4aaa118 11550fb3
12:02:20 ipsec,debug add payload of len 8, next type 8
12:02:20 ipsec,debug add payload of len 20, next type 0
12:02:20 ipsec,debug begin encryption.
12:02:20 ipsec,debug encryption(aes)
12:02:20 ipsec,debug pad length = 12
12:02:20 ipsec,debug 0800000c 011101f4 c0a8c801 00000018 336f7ce0 e6abbdb9 d9322f4d a4aaa118
12:02:20 ipsec,debug 11550fb3 82cdfee5 8bd38dbd e7f6a00b
12:02:20 ipsec,debug encryption(aes)
12:02:20 ipsec,debug with key:
12:02:20 ipsec,debug 7cf608a2 9a56a3a9 4acdab38 130f7d52 ecdcab23 8ff78e1c a64bee5e 0e89a69c
12:02:20 ipsec,debug encrypted payload by IV:
12:02:20 ipsec,debug 5c6ce586 65652d84 bd71cf69 f870ac62
12:02:20 ipsec,debug save IV for next:
12:02:20 ipsec,debug 8c119880 e2a0f054 71d36ee2 84c75158
12:02:20 ipsec,debug encrypted.
12:02:20 ipsec,debug 76 bytes from 192.168.200.1[500] to 192.168.200.196[500]
12:02:20 ipsec,debug 1 times of 76 bytes message will be sent to 192.168.200.196[500]
12:02:20 ipsec,debug,packet a430d0fc 1cb28348 d7138efe 6fef7bd8 05100201 00000000 0000004c 5eb203c3
12:02:20 ipsec,debug,packet e987eec4 15efcb13 538a36b5 e18878a9 10eb1803 bb594aa7 e7b9c737 8c119880
12:02:20 ipsec,debug,packet e2a0f054 71d36ee2 84c75158
12:02:20 ipsec,info ISAKMP-SA established 192.168.200.1[500]-192.168.200.196[500] spi:a430d0fc1cb28348:d7138efe6fef7bd8
12:02:20 ipsec,debug ===
12:02:21 ipsec,debug ===== received 284 bytes from 192.168.200.196[500] to 192.168.200.1[500]
12:02:21 ipsec,debug,packet a430d0fc 1cb28348 d7138efe 6fef7bd8 08102001 c2ebd5fb 0000011c c225774a
12:02:21 ipsec,debug,packet 245e638b 9f945339 3db65924 4df6951d 127ef2c6 24c36da3 178497b5 dbac4435
12:02:21 ipsec,debug,packet 75f4928c 13a3e113 c1e75b0e e7fc94d9 070a5515 d41ce2ee 372682f0 257b33ba
12:02:21 ipsec,debug,packet be8b9d61 d603e334 f417e714 816eaa69 1d53dad5 74441fc8 dcf2f370 192b9bf9
12:02:21 ipsec,debug,packet b28f755c bb878442 2d0daf53 7db67674 f3c7fb28 716d2d7a 425e0cb6 b30d7635
12:02:21 ipsec,debug,packet b7248084 1a241826 747a678a 4568f782 e5cfea1d 24925f21 9dc7c014 17e5f9ae
12:02:21 ipsec,debug,packet ff7b8627 2dea2401 bac5c825 872983ed d2d67846 57353078 871e8fc8 094b7d54
12:02:21 ipsec,debug,packet 7cca179c b050c115 f2b6bf8c 955fe6c0 acd47d1e f6047475 43127b21 184ee6cf
12:02:21 ipsec,debug,packet 342c2a74 fddbbe40 035c624a 4b751c5c da223494 31484fc6 733b0030
12:02:21 ipsec,debug compute IV for phase2
12:02:21 ipsec,debug phase1 last IV:
12:02:21 ipsec,debug 8c119880 e2a0f054 71d36ee2 84c75158 c2ebd5fb
12:02:21 ipsec,debug hash(sha1)
12:02:21 ipsec,debug encryption(aes)
12:02:21 ipsec,debug phase2 IV computed:
12:02:21 ipsec,debug 1451d951 12034934 064af807 cd849cce
12:02:21 ipsec,debug ===
12:02:21 ipsec,debug encryption(aes)
12:02:21 ipsec,debug IV was saved for next processing:
12:02:21 ipsec,debug 4b751c5c da223494 31484fc6 733b0030
12:02:21 ipsec,debug encryption(aes)
12:02:21 ipsec,debug with key:
12:02:21 ipsec,debug 7cf608a2 9a56a3a9 4acdab38 130f7d52 ecdcab23 8ff78e1c a64bee5e 0e89a69c
12:02:21 ipsec,debug decrypted payload by IV:
12:02:21 ipsec,debug 1451d951 12034934 064af807 cd849cce
12:02:21 ipsec,debug decrypted payload, but not trimed.
12:02:21 ipsec,debug 01000018 df3480e5 2c59b450 393f4dbd 62106d74 07bde443 0a0000b8 00000001
12:02:21 ipsec,debug 00000001 000000ac 01030406 08e0690f 0300001c 010c0000 80010001 80020e10
12:02:21 ipsec,debug 80040002 80060100 80050002 0300001c 020c0000 80010001 80020e10 80040002
12:02:21 ipsec,debug 80060100 80050001 0300001c 030c0000 80010001 80020e10 80040002 80060080
12:02:21 ipsec,debug 80050002 0300001c 040c0000 80010001 80020e10 80040002 80060080 80050001
12:02:21 ipsec,debug 03000018 05030000 80010001 80020e10 80040002 80050002 00000018 06030000
12:02:21 ipsec,debug 80010001 80020e10 80040002 80050001 05000014 f1e62c61 8581bea3 7c85e008
12:02:21 ipsec,debug 5fb7a19d 0500000c 0111e3c4 c0a8c8c4 0000000c 011106a5 c0a8c801 00000004
12:02:21 ipsec,debug padding len=5
12:02:21 ipsec,debug skip to trim padding.
12:02:21 ipsec,debug decrypted.
12:02:21 ipsec,debug a430d0fc 1cb28348 d7138efe 6fef7bd8 08102001 c2ebd5fb 0000011c 01000018
12:02:21 ipsec,debug df3480e5 2c59b450 393f4dbd 62106d74 07bde443 0a0000b8 00000001 00000001
12:02:21 ipsec,debug 000000ac 01030406 08e0690f 0300001c 010c0000 80010001 80020e10 80040002
12:02:21 ipsec,debug 80060100 80050002 0300001c 020c0000 80010001 80020e10 80040002 80060100
12:02:21 ipsec,debug 80050001 0300001c 030c0000 80010001 80020e10 80040002 80060080 80050002
12:02:21 ipsec,debug 0300001c 040c0000 80010001 80020e10 80040002 80060080 80050001 03000018
12:02:21 ipsec,debug 05030000 80010001 80020e10 80040002 80050002 00000018 06030000 80010001
12:02:21 ipsec,debug 80020e10 80040002 80050001 05000014 f1e62c61 8581bea3 7c85e008 5fb7a19d
12:02:21 ipsec,debug 0500000c 0111e3c4 c0a8c8c4 0000000c 011106a5 c0a8c801 00000004
12:02:21 ipsec,debug begin.
12:02:21 ipsec,debug seen nptype=8(hash) len=24
12:02:21 ipsec,debug seen nptype=1(sa) len=184
12:02:21 ipsec,debug seen nptype=10(nonce) len=20
12:02:21 ipsec,debug seen nptype=5(id) len=12
12:02:21 ipsec,debug seen nptype=5(id) len=12
12:02:21 ipsec,debug succeed.
12:02:21 ipsec,debug received IDci2:
12:02:21 ipsec,debug 0111e3c4 c0a8c8c4
12:02:21 ipsec,debug received IDcr2:
12:02:21 ipsec,debug 011106a5 c0a8c801
12:02:21 ipsec,debug HASH(1) validate:
12:02:21 ipsec,debug df3480e5 2c59b450 393f4dbd 62106d74 07bde443
12:02:21 ipsec,debug HASH with:
12:02:21 ipsec,debug c2ebd5fb 0a0000b8 00000001 00000001 000000ac 01030406 08e0690f 0300001c
12:02:21 ipsec,debug 010c0000 80010001 80020e10 80040002 80060100 80050002 0300001c 020c0000
12:02:21 ipsec,debug 80010001 80020e10 80040002 80060100 80050001 0300001c 030c0000 80010001
12:02:21 ipsec,debug 80020e10 80040002 80060080 80050002 0300001c 040c0000 80010001 80020e10
12:02:21 ipsec,debug 80040002 80060080 80050001 03000018 05030000 80010001 80020e10 80040002
12:02:21 ipsec,debug 80050002 00000018 06030000 80010001 80020e10 80040002 80050001 05000014
12:02:21 ipsec,debug f1e62c61 8581bea3 7c85e008 5fb7a19d 0500000c 0111e3c4 c0a8c8c4 0000000c
12:02:21 ipsec,debug 011106a5 c0a8c801
12:02:21 ipsec,debug hmac(hmac_sha1)
12:02:21 ipsec,debug HASH computed:
12:02:21 ipsec,debug df3480e5 2c59b450 393f4dbd 62106d74 07bde443
12:02:21 ipsec,debug total SA len=180
12:02:21 ipsec,debug 00000001 00000001 000000ac 01030406 08e0690f 0300001c 010c0000 80010001
12:02:21 ipsec,debug 80020e10 80040002 80060100 80050002 0300001c 020c0000 80010001 80020e10
12:02:21 ipsec,debug 80040002 80060100 80050001 0300001c 030c0000 80010001 80020e10 80040002
12:02:21 ipsec,debug 80060080 80050002 0300001c 040c0000 80010001 80020e10 80040002 80060080
12:02:21 ipsec,debug 80050001 03000018 05030000 80010001 80020e10 80040002 80050002 00000018
12:02:21 ipsec,debug 06030000 80010001 80020e10 80040002 80050001
12:02:21 ipsec,debug begin.
12:02:21 ipsec,debug seen nptype=2(prop) len=172
12:02:21 ipsec,debug succeed.
12:02:21 ipsec,debug proposal #1 len=172
12:02:21 ipsec,debug begin.
12:02:21 ipsec,debug seen nptype=3(trns) len=28
12:02:21 ipsec,debug seen nptype=3(trns) len=28
12:02:21 ipsec,debug seen nptype=3(trns) len=28
12:02:21 ipsec,debug seen nptype=3(trns) len=28
12:02:21 ipsec,debug seen nptype=3(trns) len=24
12:02:21 ipsec,debug seen nptype=3(trns) len=24
12:02:21 ipsec,debug succeed.
12:02:21 ipsec,debug transform #1 len=28
12:02:21 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
12:02:21 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=3600
12:02:21 ipsec,debug life duration was in TLV.
12:02:21 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=Transport
12:02:21 ipsec,debug type=Key Length, flag=0x8000, lorv=256
12:02:21 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
12:02:21 ipsec,debug transform #2 len=28
12:02:21 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
12:02:21 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=3600
12:02:21 ipsec,debug life duration was in TLV.
12:02:21 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=Transport
12:02:21 ipsec,debug type=Key Length, flag=0x8000, lorv=256
12:02:21 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-md5
12:02:21 ipsec,debug transform #3 len=28
12:02:21 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
12:02:21 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=3600
12:02:21 ipsec,debug life duration was in TLV.
12:02:21 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=Transport
12:02:21 ipsec,debug type=Key Length, flag=0x8000, lorv=128
12:02:21 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
12:02:21 ipsec,debug transform #4 len=28
12:02:21 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
12:02:21 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=3600
12:02:21 ipsec,debug life duration was in TLV.
12:02:21 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=Transport
12:02:21 ipsec,debug type=Key Length, flag=0x8000, lorv=128
12:02:21 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-md5
12:02:21 ipsec,debug transform #5 len=24
12:02:21 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
12:02:21 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=3600
12:02:21 ipsec,debug life duration was in TLV.
12:02:21 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=Transport
12:02:21 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
12:02:21 ipsec,debug transform #6 len=24
12:02:21 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
12:02:21 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=3600
12:02:21 ipsec,debug life duration was in TLV.
12:02:21 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=Transport
12:02:21 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-md5
12:02:21 ipsec,debug pair 1:
12:02:21 ipsec,debug  0x48ec80: next=(nil) tnext=0x4901c8
12:02:21 ipsec,debug   0x4901c8: next=(nil) tnext=0x48e1d0
12:02:21 ipsec,debug    0x48e1d0: next=(nil) tnext=0x48dff8
12:02:21 ipsec,debug     0x48dff8: next=(nil) tnext=0x48e010
12:02:21 ipsec,debug      0x48e010: next=(nil) tnext=0x48e028
12:02:21 ipsec,debug       0x48e028: next=(nil) tnext=(nil)
12:02:21 ipsec,debug proposal #1: 6 transform
12:02:21 ipsec,debug got the local address from ID payload 192.168.200.1[1701] prefixlen=32 ul_proto=17
12:02:21 ipsec,debug got the peer address from ID payload 192.168.200.196[58308] prefixlen=32 ul_proto=17
12:02:21 ipsec,debug updating policy address because of NAT in transport mode
12:02:21 ipsec,debug  (proto_id=ESP spisize=4 spi=00000000 spi_p=00000000 encmode=Transport reqid=6:6)
12:02:21 ipsec,debug   (trns_id=AES-CBC encklen=256 authtype=hmac-sha1)
12:02:21 ipsec,debug   (trns_id=AES-CBC encklen=192 authtype=hmac-sha1)
12:02:21 ipsec,debug   (trns_id=AES-CBC encklen=128 authtype=hmac-sha1)
12:02:21 ipsec,debug   (trns_id=3DES encklen=0 authtype=hmac-sha1)
12:02:21 ipsec,debug begin compare proposals.
12:02:21 ipsec,debug pair[1]: 0x48ec80
12:02:21 ipsec,debug  0x48ec80: next=(nil) tnext=0x4901c8
12:02:21 ipsec,debug   0x4901c8: next=(nil) tnext=0x48e1d0
12:02:21 ipsec,debug    0x48e1d0: next=(nil) tnext=0x48dff8
12:02:21 ipsec,debug     0x48dff8: next=(nil) tnext=0x48e010
12:02:21 ipsec,debug      0x48e010: next=(nil) tnext=0x48e028
12:02:21 ipsec,debug       0x48e028: next=(nil) tnext=(nil)
12:02:21 ipsec,debug prop#=1 prot-id=ESP spi-size=4 #trns=6 trns#=1 trns-id=AES-CBC
12:02:21 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
12:02:21 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=3600
12:02:21 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=Transport
12:02:21 ipsec,debug type=Key Length, flag=0x8000, lorv=256
12:02:21 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
12:02:21 ipsec,debug prop#=1 prot-id=ESP spi-size=4 #trns=6 trns#=2 trns-id=AES-CBC
12:02:21 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
12:02:21 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=3600
12:02:21 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=Transport
12:02:21 ipsec,debug type=Key Length, flag=0x8000, lorv=256
12:02:21 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-md5
12:02:21 ipsec,debug prop#=1 prot-id=ESP spi-size=4 #trns=6 trns#=3 trns-id=AES-CBC
12:02:21 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
12:02:21 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=3600
12:02:21 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=Transport
12:02:21 ipsec,debug type=Key Length, flag=0x8000, lorv=128
12:02:21 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
12:02:21 ipsec,debug prop#=1 prot-id=ESP spi-size=4 #trns=6 trns#=4 trns-id=AES-CBC
12:02:21 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
12:02:21 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=3600
12:02:21 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=Transport
12:02:21 ipsec,debug type=Key Length, flag=0x8000, lorv=128
12:02:21 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-md5
12:02:21 ipsec,debug prop#=1 prot-id=ESP spi-size=4 #trns=6 trns#=5 trns-id=3DES
12:02:21 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
12:02:21 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=3600
12:02:21 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=Transport
12:02:21 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
12:02:21 ipsec,debug prop#=1 prot-id=ESP spi-size=4 #trns=6 trns#=6 trns-id=3DES
12:02:21 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
12:02:21 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=3600
12:02:21 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=Transport
12:02:21 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-md5
12:02:21 ipsec,debug peer's single bundle:
12:02:21 ipsec,debug  (proto_id=ESP spisize=4 spi=08e0690f spi_p=00000000 encmode=Transport reqid=0:0)
12:02:21 ipsec,debug   (trns_id=AES-CBC encklen=256 authtype=hmac-sha1)
12:02:21 ipsec,debug   (trns_id=AES-CBC encklen=256 authtype=hmac-md5)
12:02:21 ipsec,debug   (trns_id=AES-CBC encklen=128 authtype=hmac-sha1)
12:02:21 ipsec,debug   (trns_id=AES-CBC encklen=128 authtype=hmac-md5)
12:02:21 ipsec,debug   (trns_id=3DES encklen=0 authtype=hmac-sha1)
12:02:21 ipsec,debug   (trns_id=3DES encklen=0 authtype=hmac-md5)
12:02:21 ipsec,debug my single bundle:
12:02:21 ipsec,debug  (proto_id=ESP spisize=4 spi=00000000 spi_p=00000000 encmode=Transport reqid=6:6)
12:02:21 ipsec,debug   (trns_id=AES-CBC encklen=256 authtype=hmac-sha1)
12:02:21 ipsec,debug   (trns_id=AES-CBC encklen=192 authtype=hmac-sha1)
12:02:21 ipsec,debug   (trns_id=AES-CBC encklen=128 authtype=hmac-sha1)
12:02:21 ipsec,debug   (trns_id=3DES encklen=0 authtype=hmac-sha1)
12:02:21 ipsec,debug matched
12:02:21 ipsec,debug ===
12:02:21 ipsec,debug call pfkey_send_getspi c2809d9d
12:02:21 ipsec,debug pfkey GETSPI sent: ESP/Transport 192.168.200.196[500]->192.168.200.1[500]
12:02:21 ipsec,debug pfkey getspi sent.
12:02:21 ipsec,debug total SA len=48
12:02:21 ipsec,debug 00000001 00000001 00000028 01030401 00000000 0000001c 010c0000 80010001
12:02:21 ipsec,debug 80020e10 80040002 80060100 80050002
12:02:21 ipsec,debug begin.
12:02:21 ipsec,debug seen nptype=2(prop) len=40
12:02:21 ipsec,debug succeed.
12:02:21 ipsec,debug proposal #1 len=40
12:02:21 ipsec,debug begin.
12:02:21 ipsec,debug seen nptype=3(trns) len=28
12:02:21 ipsec,debug succeed.
12:02:21 ipsec,debug transform #1 len=28
12:02:21 ipsec,debug type=SA Life Type, flag=0x8000, lorv=seconds
12:02:21 ipsec,debug type=SA Life Duration, flag=0x8000, lorv=3600
12:02:21 ipsec,debug life duration was in TLV.
12:02:21 ipsec,debug type=Encryption Mode, flag=0x8000, lorv=Transport
12:02:21 ipsec,debug type=Key Length, flag=0x8000, lorv=256
12:02:21 ipsec,debug type=Authentication Algorithm, flag=0x8000, lorv=hmac-sha1
12:02:21 ipsec,debug pair 1:
12:02:21 ipsec,debug  0x48ec80: next=(nil) tnext=(nil)
12:02:21 ipsec,debug proposal #1: 1 transform
12:02:21 ipsec,debug add payload of len 48, next type 10
12:02:21 ipsec,debug add payload of len 24, next type 5
12:02:21 ipsec,debug add payload of len 8, next type 5
12:02:21 ipsec,debug add payload of len 8, next type 0
12:02:21 ipsec,debug HASH with:
12:02:21 ipsec,debug c2ebd5fb f1e62c61 8581bea3 7c85e008 5fb7a19d 0a000034 00000001 00000001
12:02:21 ipsec,debug 00000028 01030401 01e9137d 0000001c 010c0000 80010001 80020e10 80040002
12:02:21 ipsec,debug 80060100 80050002 0500001c d3831dbc d243f8d4 35db42cf 5035c208 59e84d9d
12:02:21 ipsec,debug 128aa8fa 0500000c 0111e3c4 c0a8c8c4 0000000c 011106a5 c0a8c801
12:02:21 ipsec,debug hmac(hmac_sha1)
12:02:21 ipsec,debug HASH computed:
12:02:21 ipsec,debug 12b8ece6 fe375575 2ac5dd65 f8e3d1e9 b98873c4
12:02:21 ipsec,debug add payload of len 20, next type 1
12:02:21 ipsec,debug begin encryption.
12:02:21 ipsec,debug encryption(aes)
12:02:21 ipsec,debug pad length = 16
12:02:21 ipsec,debug 01000018 12b8ece6 fe375575 2ac5dd65 f8e3d1e9 b98873c4 0a000034 00000001
12:02:21 ipsec,debug 00000001 00000028 01030401 01e9137d 0000001c 010c0000 80010001 80020e10
12:02:21 ipsec,debug 80040002 80060100 80050002 0500001c d3831dbc d243f8d4 35db42cf 5035c208
12:02:21 ipsec,debug 59e84d9d 128aa8fa 0500000c 0111e3c4 c0a8c8c4 0000000c 011106a5 c0a8c801
12:02:21 ipsec,debug 8a8491fb a49797c2 d3aad9a5 bfd7ca0f
12:02:21 ipsec,debug encryption(aes)
12:02:21 ipsec,debug with key:
12:02:21 ipsec,debug 7cf608a2 9a56a3a9 4acdab38 130f7d52 ecdcab23 8ff78e1c a64bee5e 0e89a69c
12:02:21 ipsec,debug encrypted payload by IV:
12:02:21 ipsec,debug 4b751c5c da223494 31484fc6 733b0030
12:02:21 ipsec,debug save IV for next:
12:02:21 ipsec,debug aa7a0720 1a08a4e7 c9d36030 5a894fbc
12:02:21 ipsec,debug encrypted.
12:02:21 ipsec,debug 172 bytes from 192.168.200.1[500] to 192.168.200.196[500]
12:02:21 ipsec,debug 1 times of 172 bytes message will be sent to 192.168.200.196[500]
12:02:21 ipsec,debug,packet a430d0fc 1cb28348 d7138efe 6fef7bd8 08102001 c2ebd5fb 000000ac c2f6d7ff
12:02:21 ipsec,debug,packet bd9c983d 66931e72 c3dfa53f 2d81332e f5f65b0b f2be2028 e6bd0db0 fe0c84dd
12:02:21 ipsec,debug,packet 559652ae 87b1ad74 30c22490 2c7b5b3b 8a0760aa 8e071eb7 13263b2e 4bb5f17a
12:02:21 ipsec,debug,packet 08a270b7 094c7cba f761da97 e582a352 2f425d24 14c00718 ee302091 dfec621f
12:02:21 ipsec,debug,packet 73d1b337 365bbcec 234ef612 b37bafe7 028aaf4c 425411f4 e1bbe560 aa7a0720
12:02:21 ipsec,debug,packet 1a08a4e7 c9d36030 5a894fbc
12:02:21 ipsec,debug ===== received 60 bytes from 192.168.200.196[500] to 192.168.200.1[500]
12:02:21 ipsec,debug,packet a430d0fc 1cb28348 d7138efe 6fef7bd8 08102001 c2ebd5fb 0000003c 1bfc5b05
12:02:21 ipsec,debug,packet 40fb9ced 42e40689 1af14bc4 8cd31f0a 000b539a d2231067 740e991f
12:02:21 ipsec,debug encryption(aes)
12:02:21 ipsec,debug IV was saved for next processing:
12:02:21 ipsec,debug 8cd31f0a 000b539a d2231067 740e991f
12:02:21 ipsec,debug encryption(aes)
12:02:21 ipsec,debug with key:
12:02:21 ipsec,debug 7cf608a2 9a56a3a9 4acdab38 130f7d52 ecdcab23 8ff78e1c a64bee5e 0e89a69c
12:02:21 ipsec,debug decrypted payload by IV:
12:02:21 ipsec,debug aa7a0720 1a08a4e7 c9d36030 5a894fbc
12:02:21 ipsec,debug decrypted payload, but not trimed.
12:02:21 ipsec,debug 00000018 d9cde0b0 7ffef326 68a6e9ad 0a0a1338 06c17b55 00000000 00000008
12:02:21 ipsec,debug padding len=9
12:02:21 ipsec,debug skip to trim padding.
12:02:21 ipsec,debug decrypted.
12:02:21 ipsec,debug a430d0fc 1cb28348 d7138efe 6fef7bd8 08102001 c2ebd5fb 0000003c 00000018
12:02:21 ipsec,debug d9cde0b0 7ffef326 68a6e9ad 0a0a1338 06c17b55 00000000 00000008
12:02:21 ipsec,debug begin.
12:02:21 ipsec,debug seen nptype=8(hash) len=24
12:02:21 ipsec,debug succeed.
12:02:21 ipsec,debug HASH(3) validate:
12:02:21 ipsec,debug d9cde0b0 7ffef326 68a6e9ad 0a0a1338 06c17b55
12:02:21 ipsec,debug HASH with:
12:02:21 ipsec,debug 00c2ebd5 fbf1e62c 618581be a37c85e0 085fb7a1 9dd3831d bcd243f8 d435db42
12:02:21 ipsec,debug cf5035c2 0859e84d 9d128aa8 fa
12:02:21 ipsec,debug hmac(hmac_sha1)
12:02:21 ipsec,debug HASH computed:
12:02:21 ipsec,debug d9cde0b0 7ffef326 68a6e9ad 0a0a1338 06c17b55
12:02:21 ipsec,debug ===
12:02:21 ipsec,debug KEYMAT compute with
12:02:21 ipsec,debug 0301e913 7df1e62c 618581be a37c85e0 085fb7a1 9dd3831d bcd243f8 d435db42
12:02:21 ipsec,debug cf5035c2 0859e84d 9d128aa8 fa
12:02:21 ipsec,debug hmac(hmac_sha1)
12:02:21 ipsec,debug encryption(aes-cbc)
12:02:21 ipsec,debug hmac(sha1)
12:02:21 ipsec,debug encklen=256 authklen=160
12:02:21 ipsec,debug generating 640 bits of key (dupkeymat=4)
12:02:21 ipsec,debug generating K1...K4 for KEYMAT.
12:02:21 ipsec,debug hmac(hmac_sha1)
12:02:21 ipsec,debug hmac(hmac_sha1)
12:02:21 ipsec,debug hmac(hmac_sha1)
12:02:21 ipsec,debug 834c4ccb 380b8150 06e911ae b5563d0e d852312b f47dc61a 364d6a5b 76b7a698
12:02:21 ipsec,debug 9981c329 d573cd8e 275c7d77 213c4577 7bee6719 2aa4d5dc 2bba9f11 aa8a2e15
12:02:21 ipsec,debug b4afdcd4 c746c3d7 20b355ff 45da6b62
12:02:21 ipsec,debug KEYMAT compute with
12:02:21 ipsec,debug 0308e069 0ff1e62c 618581be a37c85e0 085fb7a1 9dd3831d bcd243f8 d435db42
12:02:21 ipsec,debug cf5035c2 0859e84d 9d128aa8 fa
12:02:21 ipsec,debug hmac(hmac_sha1)
12:02:21 ipsec,debug encryption(aes-cbc)
12:02:21 ipsec,debug hmac(sha1)
12:02:21 ipsec,debug encklen=256 authklen=160
12:02:21 ipsec,debug generating 640 bits of key (dupkeymat=4)
12:02:21 ipsec,debug generating K1...K4 for KEYMAT.
12:02:21 ipsec,debug hmac(hmac_sha1)
12:02:21 ipsec,debug hmac(hmac_sha1)
12:02:21 ipsec,debug hmac(hmac_sha1)
12:02:21 ipsec,debug d4ebc3d5 7d850f0b 52c5e6b5 4c7c77a5 16509228 2d27757f 972cd689 08855718
12:02:21 ipsec,debug 50ecc6f4 610f336b 96ef98d8 81ad9532 4566cc97 b6808ed8 e830376f c0be9f8f
12:02:21 ipsec,debug 2cafdf22 d3da59f8 3354021b fffc614d
12:02:21 ipsec,debug KEYMAT computed.
12:02:21 ipsec,debug call pk_sendupdate
12:02:21 ipsec,debug encryption(aes-cbc)
12:02:21 ipsec,debug hmac(sha1)
12:02:21 ipsec,debug call pfkey_send_update_nat
12:02:21 ipsec,debug pfkey update sent.
12:02:21 ipsec,debug encryption(aes-cbc)
12:02:21 ipsec,debug hmac(sha1)
12:02:21 ipsec,debug call pfkey_send_add_nat
12:02:21 ipsec,debug pfkey add sent.
12:02:41 ipsec,debug ===== received 76 bytes from 192.168.200.196[500] to 192.168.200.1[500]
12:02:41 ipsec,debug,packet a430d0fc 1cb28348 d7138efe 6fef7bd8 08100501 dc327354 0000004c ba9be632
12:02:41 ipsec,debug,packet 1da7ac91 18fa97f9 a29db5f5 eb785774 d081f0bc 78bec98d a1aa4a9d c1c4e932
12:02:41 ipsec,debug,packet 2c3b37b6 159c6215 9f701cdf
12:02:41 ipsec,debug receive Information.
12:02:41 ipsec,debug compute IV for phase2
12:02:41 ipsec,debug phase1 last IV:
12:02:41 ipsec,debug 8c119880 e2a0f054 71d36ee2 84c75158 dc327354
12:02:41 ipsec,debug hash(sha1)
12:02:41 ipsec,debug encryption(aes)
12:02:41 ipsec,debug phase2 IV computed:
12:02:41 ipsec,debug 14b25a9d 2007418b 838362c6 1a8ff9b7
12:02:41 ipsec,debug encryption(aes)
12:02:41 ipsec,debug IV was saved for next processing:
12:02:41 ipsec,debug c1c4e932 2c3b37b6 159c6215 9f701cdf
12:02:41 ipsec,debug encryption(aes)
12:02:41 ipsec,debug with key:
12:02:41 ipsec,debug 7cf608a2 9a56a3a9 4acdab38 130f7d52 ecdcab23 8ff78e1c a64bee5e 0e89a69c
12:02:41 ipsec,debug decrypted payload by IV:
12:02:41 ipsec,debug 14b25a9d 2007418b 838362c6 1a8ff9b7
12:02:41 ipsec,debug decrypted payload, but not trimed.
12:02:41 ipsec,debug 0c000018 b10f4e55 bb3c1ec3 743be1e3 2bebb3f6 d84d1be6 00000010 00000001
12:02:41 ipsec,debug 03040001 08e0690f 00000000 00000008
12:02:41 ipsec,debug padding len=9
12:02:41 ipsec,debug skip to trim padding.
12:02:41 ipsec,debug decrypted.
12:02:41 ipsec,debug a430d0fc 1cb28348 d7138efe 6fef7bd8 08100501 dc327354 0000004c 0c000018
12:02:41 ipsec,debug b10f4e55 bb3c1ec3 743be1e3 2bebb3f6 d84d1be6 00000010 00000001 03040001
12:02:41 ipsec,debug 08e0690f 00000000 00000008
12:02:41 ipsec,debug HASH with:
12:02:41 ipsec,debug dc327354 00000010 00000001 03040001 08e0690f
12:02:41 ipsec,debug hmac(hmac_sha1)
12:02:41 ipsec,debug HASH computed:
12:02:41 ipsec,debug b10f4e55 bb3c1ec3 743be1e3 2bebb3f6 d84d1be6
12:02:41 ipsec,debug hash validated.
12:02:41 ipsec,debug begin.
12:02:41 ipsec,debug seen nptype=8(hash) len=24
12:02:41 ipsec,debug seen nptype=12(delete) len=16
12:02:41 ipsec,debug succeed.
12:02:41 ipsec,debug 192.168.200.196 delete payload for protocol ESP
12:02:41 ipsec,debug an undead schedule has been deleted.
12:02:41 ipsec,debug purged SAs.
12:02:41 ipsec,debug ===== received 92 bytes from 192.168.200.196[500] to 192.168.200.1[500]
12:02:41 ipsec,debug,packet a430d0fc 1cb28348 d7138efe 6fef7bd8 08100501 905b2cb6 0000005c fde4c598
12:02:41 ipsec,debug,packet ade54b08 86924e8d 3ebb361e ed3d28d1 91bcd791 e2275a80 ad720303 61824ddf
12:02:41 ipsec,debug,packet ea43021f 83043e43 466d1037 85d858ec e85a2724 0496f475 f1113802
12:02:41 ipsec,debug receive Information.
12:02:41 ipsec,debug compute IV for phase2
12:02:41 ipsec,debug phase1 last IV:
12:02:41 ipsec,debug 8c119880 e2a0f054 71d36ee2 84c75158 905b2cb6
12:02:41 ipsec,debug hash(sha1)
12:02:41 ipsec,debug encryption(aes)
12:02:41 ipsec,debug phase2 IV computed:
12:02:41 ipsec,debug 146398c7 047aaa50 87af7109 77faa1fe
12:02:41 ipsec,debug encryption(aes)
12:02:41 ipsec,debug IV was saved for next processing:
12:02:41 ipsec,debug 85d858ec e85a2724 0496f475 f1113802
12:02:41 ipsec,debug encryption(aes)
12:02:41 ipsec,debug with key:
12:02:41 ipsec,debug 7cf608a2 9a56a3a9 4acdab38 130f7d52 ecdcab23 8ff78e1c a64bee5e 0e89a69c
12:02:41 ipsec,debug decrypted payload by IV:
12:02:41 ipsec,debug 146398c7 047aaa50 87af7109 77faa1fe
12:02:41 ipsec,debug decrypted payload, but not trimed.
12:02:41 ipsec,debug 0c000018 ca768fd8 33ae1a29 540b3991 996057cc 58160267 0000001c 00000001
12:02:41 ipsec,debug 01100001 a430d0fc 1cb28348 d7138efe 6fef7bd8 00000000 00000000 0000000c
12:02:41 ipsec,debug padding len=13
12:02:41 ipsec,debug skip to trim padding.
12:02:41 ipsec,debug decrypted.
12:02:41 ipsec,debug a430d0fc 1cb28348 d7138efe 6fef7bd8 08100501 905b2cb6 0000005c 0c000018
12:02:41 ipsec,debug ca768fd8 33ae1a29 540b3991 996057cc 58160267 0000001c 00000001 01100001
12:02:41 ipsec,debug a430d0fc 1cb28348 d7138efe 6fef7bd8 00000000 00000000 0000000c
12:02:41 ipsec,debug HASH with:
12:02:41 ipsec,debug 905b2cb6 0000001c 00000001 01100001 a430d0fc 1cb28348 d7138efe 6fef7bd8
12:02:41 ipsec,debug hmac(hmac_sha1)
12:02:41 ipsec,debug HASH computed:
12:02:41 ipsec,debug ca768fd8 33ae1a29 540b3991 996057cc 58160267
12:02:41 ipsec,debug hash validated.
12:02:41 ipsec,debug begin.
12:02:41 ipsec,debug seen nptype=8(hash) len=24
12:02:41 ipsec,debug seen nptype=12(delete) len=28
12:02:41 ipsec,debug succeed.
12:02:41 ipsec,debug 192.168.200.196 delete payload for protocol ISAKMP
12:02:41 ipsec,info purging ISAKMP-SA 192.168.200.1[500]<=>192.168.200.196[500] spi=a430d0fc1cb28348:d7138efe6fef7bd8.
12:02:41 ipsec,debug purged SAs.
12:02:41 ipsec,info ISAKMP-SA deleted 192.168.200.1[500]-192.168.200.196[500] spi:a430d0fc1cb28348:d7138efe6fef7bd8 rekey:1
12:02:41 ipsec,debug an undead schedule has been deleted.

/ip route print (xxx.xxx.xxx.xxx - my external ip)

[admin@MikroTik] /log> /ip route print
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit
 #      DST-ADDRESS        PREF-SRC        GATEWAY            DISTANCE
 0 ADS  0.0.0.0/0                          pppoe-out1                0
 1 ADC  xxx.xxx.xxx.xxx/32     xxx.xxx.xxx.xxx    pppoe-out1                0
 2 A S  ;;; Wan
        192.168.180.0/24                   192.168.211.2             1
 3 ADC  192.168.200.0/24   192.168.200.1   bridge1                   0
 4 ADC  192.168.211.2/32   192.168.211.1   <ovpn-proxmox>            0

/ip ipsec peer print

[admin@MikroTik] /log> /ip ipsec peer print
Flags: X - disabled, D - dynamic, R - responder
 0   R address=0.0.0.0/0 passive=yes auth-method=pre-shared-key secret="mySecret" generate-policy=port-override policy-template-group=default exchange-mode=main-l2tp send-initial-contact=yes nat-traversal=no proposal-check=obey
       hash-algorithm=sha1 enc-algorithm=aes-256,aes-192,aes-128,3des dh-group=modp1024 lifetime=1d dpd-interval=2m dpd-maximum-failures=5
[admin@MikroTik] /log>

/ip ipsec remote-peer print
Empty

/ip ipsec policy print

[admin@MikroTik] /log> /ip ipsec policy print
Flags: T - template, X - disabled, D - dynamic, I - invalid, A - active, * - default
 0 T * group=default src-address=::/0 dst-address=::/0 protocol=all proposal=default template=yes

The wierd thing is that i’m not able to connect from any device. That’s why I checked firewall rules…

sindy · April 25, 2018, 10:46am

Was the l2tp logging off while you took the last log? Because even the “l2tp,info” message “first packet received” is missing this time.

I would prefer to see a log with the dynamically creatd IPsec peer in use instead of the manually created one, with complete l2tp in the log, and with all chap, pap etc. permitted in the l2tp-server settings.

We may also agree on testing with my Windows, Android and Mikrotik devices which are all proven to work as clients against my own l2tp/ipsec server setup on Mikrotik if you create for me a username bound to a static l2tp-server interface so that you could set the firewall to drop anything coming in via that interface (****

action=drop in-interface=l2tp-srv-sindy

) in both

chain=input

and

chain=forward

somewhere before

action=accept protocol=icmp

.

pawel100 · April 25, 2018, 11:06am

Sindy, you know what… i tried to enable the logging. I was already enabled… so I dediced to reboot the router… and iPhone connected automatically…

I see it is working. All the settings are same as above (with dynamic IPSec created by L2TP).

Maybe my “secret” to long (12 chars)…

I see it works now.

Thanks for helping me!

pawel100 · April 25, 2018, 11:25am

One more question.

Is it possible to push route config to iPhone via L2TP so network connected via (OVPN .180.x) is accesable from iPhone ?

I have set up iPhone to push all traffic via VPN.

sindy · April 25, 2018, 1:05pm

Pity you guys up there don’t believe in ghosts

12 bytes of a shared secret is kind of scary short to me when talking about security.

Pushing routes aka split tunnels is a PITA. Microsoft asks for DHCP option 121 on Ethernet interfaces, but for option 249 after setting up an L2TP tunnel (although the only difference is that the route list in option 121 should include a default gateway as it supersedes the basic default gateway field in the DHCPOFFER or DHCPACK), Android doesn’t send the DHCPINFORM after the L2TP tunnel comes up, I have no clue whether iOS does. And worst of all, I could not find a way to attach a DHCP server or relay to an l2tp-server interface, so I don’t even know whether it would respond a DHCPINFORM properly.

Mikrotik’s flavour of OVPN is useless for anything but TCP. And if you use IPsec alone with mode-config, the native clients of different Windows versions treat the mode-config differently. So to have a VPN connection active and not use it for all traffic of the client is complex on computers and close to impossible on mobile devices.