Hi,
I need help with L2TP/IPSEC.
I’m trying to establish a connection like this:
http://www.youtube.com/watch?v=OBlUaZw9uNU
The result in logs when I try to connect with win7 looks like this:
4:03:21 p.m. ipsec, debug config Remote has no key
4:03:21 p.m. ipsec, debug could not find the pskey for 176.xxx
4:03:21 p.m. ipsec, debug failed to process packet.
4:03:21 p.m. ipsec, debug phase1 negotiation failed.
Hardware: RB2011UAS-2HnD @ ROS 6.9
I spent a lot of time this weekend, trying a lot of options and ideas.
Whatever I do the results is always as above.
I would like to ask you to any ideas, links to check, proposals for changes in the configuration. Anything what could push me in the right direction.
More from logs:
16:03:21 ipsec,debug,packet ==========
16:03:21 ipsec,debug,packet 384 bytes message received from 176.xx.xx.xx[500] to 77.xx.xx.xx[500]
16:03:21 ipsec,debug,packet 6b259da5 ff8ea7a5 00000000 00000000 01100200 00000000 00000180 0d0000d4
16:03:21 ipsec,debug,packet 00000001 00000001 000000c8 01010005 03000028 01010000 80010007 800e0100
16:03:21 ipsec,debug,packet 80020002 80040014 80030001 800b0001 000c0004 00007080 03000028 02010000
16:03:21 ipsec,debug,packet 80010007 800e0080 80020002 80040013 80030001 800b0001 000c0004 00007080
16:03:21 ipsec,debug,packet 03000028 03010000 80010007 800e0100 80020002 8004000e 80030001 800b0001
16:03:21 ipsec,debug,packet 000c0004 00007080 03000024 04010000 80010005 80020002 8004000e 80030001
16:03:21 ipsec,debug,packet 800b0001 000c0004 00007080 00000024 05010000 80010005 80020002 80040002
16:03:21 ipsec,debug,packet 80030001 800b0001 000c0004 00007080 0d000018 1e2b5169 05991c7d 7c96fcbf
16:03:21 ipsec,debug,packet b587e461 00000008 0d000014 4a131c81 07035845 5c5728f2 0e95452f 0d000014
16:03:21 ipsec,debug,packet 90cb8091 3ebb696e 086381b5 ec427b1f 0d000014 4048b7d5 6ebce885 25e7de7f
16:03:21 ipsec,debug,packet 00d6c2d3 0d000014 fb1de3cd f341b7ea 16b7e5be 0855f120 0d000014 26244d38
16:03:21 ipsec,debug,packet eddb61b3 172a36e3 d0cfb819 00000014 e3a5966a 76379fe7 07228231 e5ce8652
16:03:21 ipsec,debug,packet ===
16:03:21 ipsec respond new phase 1 negotiation: 77.xx.xx.xx[500]<=>176.xx.xx.xx[500]
16:03:21 ipsec begin Identity Protection mode.
16:03:21 ipsec,debug,packet begin.
16:03:21 ipsec,debug,packet seen nptype=1(sa)
16:03:21 ipsec,debug,packet seen nptype=13(vid)
16:03:21 ipsec,debug,packet seen nptype=13(vid)
16:03:21 ipsec,debug,packet seen nptype=13(vid)
16:03:21 ipsec,debug,packet seen nptype=13(vid)
16:03:21 ipsec,debug,packet seen nptype=13(vid)
16:03:21 ipsec,debug,packet seen nptype=13(vid)
16:03:21 ipsec,debug,packet seen nptype=13(vid)
16:03:21 ipsec,debug,packet succeed.
16:03:21 ipsec,debug received broken Microsoft ID: MS NT5 ISAKMPOAKLEY
16:03:21 ipsec,debug received Vendor ID: RFC 3947
16:03:21 ipsec,debug received Vendor ID: draft-ietf-ipsec-nat-t-ike-02
16:03:21 ipsec,debug
16:03:21 ipsec,debug received Vendor ID: FRAGMENTATION
16:03:21 ipsec,debug,packet received unknown Vendor ID
16:03:21 ipsec,debug,packet received unknown Vendor ID
16:03:21 ipsec,debug,packet received unknown Vendor ID
16:03:21 ipsec,debug Selected NAT-T version: RFC 3947
16:03:21 ipsec,debug,packet total SA len=208
16:03:21 ipsec,debug,packet 00000001 00000001 000000c8 01010005 03000028 01010000 80010007 800e0100
16:03:21 ipsec,debug,packet 80020002 80040014 80030001 800b0001 000c0004 00007080 03000028 02010000
16:03:21 ipsec,debug,packet 80010007 800e0080 80020002 80040013 80030001 800b0001 000c0004 00007080
16:03:21 ipsec,debug,packet 03000028 03010000 80010007 800e0100 80020002 8004000e 80030001 800b0001
16:03:21 ipsec,debug,packet 000c0004 00007080 03000024 04010000 80010005 80020002 8004000e 80030001
16:03:21 ipsec,debug,packet 800b0001 000c0004 00007080 00000024 05010000 80010005 80020002 80040002
16:03:21 ipsec,debug,packet 80030001 800b0001 000c0004 00007080
16:03:21 ipsec,debug,packet begin.
16:03:21 ipsec,debug,packet seen nptype=2(prop)
16:03:21 ipsec,debug,packet succeed.
16:03:21 ipsec,debug,packet proposal #1 len=200
16:03:21 ipsec,debug,packet begin.
16:03:21 ipsec,debug,packet seen nptype=3(trns)
16:03:21 ipsec,debug,packet seen nptype=3(trns)
16:03:21 ipsec,debug,packet seen nptype=3(trns)
16:03:21 ipsec,debug,packet seen nptype=3(trns)
16:03:21 ipsec,debug,packet seen nptype=3(trns)
16:03:21 ipsec,debug,packet succeed.
16:03:21 ipsec,debug,packet transform #1 len=40
16:03:21 ipsec,debug,packet type=Encryption Algorithm, flag=0x8000, lorv=AES-CBC
16:03:21 ipsec,debug,packet encryption(aes)
16:03:21 ipsec,debug,packet type=Key Length, flag=0x8000, lorv=256
16:03:21 ipsec,debug,packet type=Hash Algorithm, flag=0x8000, lorv=SHA
16:03:21 ipsec,debug,packet hash(sha1)
16:03:21 ipsec,debug,packet type=Group Description, flag=0x8000, lorv=20
16:03:21 ipsec,debug invalid DH group 20.
16:03:21 ipsec,debug,packet transform #2 len=40
16:03:21 ipsec,debug,packet type=Encryption Algorithm, flag=0x8000, lorv=AES-CBC
16:03:21 ipsec,debug,packet encryption(aes)
16:03:21 ipsec,debug,packet type=Key Length, flag=0x8000, lorv=128
16:03:21 ipsec,debug,packet type=Hash Algorithm, flag=0x8000, lorv=SHA
16:03:21 ipsec,debug,packet hash(sha1)
16:03:21 ipsec,debug,packet type=Group Description, flag=0x8000, lorv=19
16:03:21 ipsec,debug invalid DH group 19.
16:03:21 ipsec,debug,packet transform #3 len=40
16:03:21 ipsec,debug,packet type=Encryption Algorithm, flag=0x8000, lorv=AES-CBC
16:03:21 ipsec,debug,packet encryption(aes)
16:03:21 ipsec,debug,packet type=Key Length, flag=0x8000, lorv=256
16:03:21 ipsec,debug,packet type=Hash Algorithm, flag=0x8000, lorv=SHA
16:03:21 ipsec,debug,packet hash(sha1)
16:03:21 ipsec,debug,packet type=Group Description, flag=0x8000, lorv=2048-bit MODP group
16:03:21 ipsec,debug,packet dh(modp2048)
16:03:21 ipsec,debug,packet type=Authentication Method, flag=0x8000, lorv=pre-shared key
16:03:21 ipsec,debug,packet type=Life Type, flag=0x8000, lorv=seconds
16:03:21 ipsec,debug,packet type=Life Duration, flag=0x0000, lorv=4
16:03:21 ipsec,debug,packet transform #4 len=36
16:03:21 ipsec,debug,packet type=Encryption Algorithm, flag=0x8000, lorv=3DES-CBC
16:03:21 ipsec,debug,packet encryption(3des)
16:03:21 ipsec,debug,packet type=Hash Algorithm, flag=0x8000, lorv=SHA
16:03:21 ipsec,debug,packet hash(sha1)
16:03:21 ipsec,debug,packet type=Group Description, flag=0x8000, lorv=2048-bit MODP group
16:03:21 ipsec,debug,packet dh(modp2048)
16:03:21 ipsec,debug,packet type=Authentication Method, flag=0x8000, lorv=pre-shared key
16:03:21 ipsec,debug,packet type=Life Type, flag=0x8000, lorv=seconds
16:03:21 ipsec,debug,packet type=Life Duration, flag=0x0000, lorv=4
16:03:21 ipsec,debug,packet transform #5 len=36
16:03:21 ipsec,debug,packet type=Encryption Algorithm, flag=0x8000, lorv=3DES-CBC
16:03:21 ipsec,debug,packet encryption(3des)
16:03:21 ipsec,debug,packet type=Hash Algorithm, flag=0x8000, lorv=SHA
16:03:21 ipsec,debug,packet hash(sha1)
16:03:21 ipsec,debug,packet type=Group Description, flag=0x8000, lorv=1024-bit MODP group
16:03:21 ipsec,debug,packet dh(modp1024)
16:03:21 ipsec,debug,packet type=Authentication Method, flag=0x8000, lorv=pre-shared key
16:03:21 ipsec,debug,packet type=Life Type, flag=0x8000, lorv=seconds
16:03:21 ipsec,debug,packet type=Life Duration, flag=0x0000, lorv=4
16:03:21 ipsec,debug,packet pair 1:
16:03:21 ipsec,debug,packet 0x4851c8: next=(nil) tnext=0x4851e0
16:03:21 ipsec,debug,packet 0x4851e0: next=(nil) tnext=0x4851f8
16:03:21 ipsec,debug,packet 0x4851f8: next=(nil) tnext=(nil)
16:03:21 ipsec,debug,packet proposal #1: 3 transform
16:03:21 ipsec,debug,packet prop#=1, prot-id=ISAKMP, spi-size=0, #trns=5
16:03:21 ipsec,debug,packet trns#=3, trns-id=IKE
16:03:21 ipsec,debug,packet type=Encryption Algorithm, flag=0x8000, lorv=AES-CBC
16:03:21 ipsec,debug,packet type=Key Length, flag=0x8000, lorv=256
16:03:21 ipsec,debug,packet type=Hash Algorithm, flag=0x8000, lorv=SHA
16:03:21 ipsec,debug,packet type=Group Description, flag=0x8000, lorv=2048-bit MODP group
16:03:21 ipsec,debug,packet type=Authentication Method, flag=0x8000, lorv=pre-shared key
16:03:21 ipsec,debug,packet type=Life Type, flag=0x8000, lorv=seconds
16:03:21 ipsec,debug,packet type=Life Duration, flag=0x0000, lorv=4
16:03:21 ipsec,debug,packet Compared: Local:Peer
16:03:21 ipsec,debug,packet (lifetime = 86400:28800)
16:03:21 ipsec,debug,packet (lifebyte = 0:0)
16:03:21 ipsec,debug,packet enctype = 3DES-CBC:AES-CBC
16:03:21 ipsec,debug,packet (encklen = 0:256)
16:03:21 ipsec,debug,packet hashtype = SHA:SHA
16:03:21 ipsec,debug,packet authmethod = pre-shared key:pre-shared key
16:03:21 ipsec,debug,packet dh_group = 1024-bit MODP group:2048-bit MODP group
16:03:21 ipsec,debug,packet prop#=1, prot-id=ISAKMP, spi-size=0, #trns=5
16:03:21 ipsec,debug,packet trns#=4, trns-id=IKE
16:03:21 ipsec,debug,packet type=Encryption Algorithm, flag=0x8000, lorv=3DES-CBC
16:03:21 ipsec,debug,packet type=Hash Algorithm, flag=0x8000, lorv=SHA
16:03:21 ipsec,debug,packet type=Group Description, flag=0x8000, lorv=2048-bit MODP group
16:03:21 ipsec,debug,packet type=Authentication Method, flag=0x8000, lorv=pre-shared key
16:03:21 ipsec,debug,packet type=Life Type, flag=0x8000, lorv=seconds
16:03:21 ipsec,debug,packet type=Life Duration, flag=0x0000, lorv=4
16:03:21 ipsec,debug,packet Compared: Local:Peer
16:03:21 ipsec,debug,packet (lifetime = 86400:28800)
16:03:21 ipsec,debug,packet (lifebyte = 0:0)
16:03:21 ipsec,debug,packet enctype = 3DES-CBC:3DES-CBC
16:03:21 ipsec,debug,packet (encklen = 0:0)
16:03:21 ipsec,debug,packet hashtype = SHA:SHA
16:03:21 ipsec,debug,packet authmethod = pre-shared key:pre-shared key
16:03:21 ipsec,debug,packet dh_group = 1024-bit MODP group:2048-bit MODP group
16:03:21 ipsec,debug,packet prop#=1, prot-id=ISAKMP, spi-size=0, #trns=5
16:03:21 ipsec,debug,packet trns#=5, trns-id=IKE
16:03:21 ipsec,debug,packet type=Encryption Algorithm, flag=0x8000, lorv=3DES-CBC
16:03:21 ipsec,debug,packet type=Hash Algorithm, flag=0x8000, lorv=SHA
16:03:21 ipsec,debug,packet type=Group Description, flag=0x8000, lorv=1024-bit MODP group
16:03:21 ipsec,debug,packet type=Authentication Method, flag=0x8000, lorv=pre-shared key
16:03:21 ipsec,debug,packet type=Life Type, flag=0x8000, lorv=seconds
16:03:21 ipsec,debug,packet type=Life Duration, flag=0x0000, lorv=4
16:03:21 ipsec,debug,packet Compared: Local:Peer
16:03:21 ipsec,debug,packet (lifetime = 86400:28800)
16:03:21 ipsec,debug,packet (lifebyte = 0:0)
16:03:21 ipsec,debug,packet enctype = 3DES-CBC:3DES-CBC
16:03:21 ipsec,debug,packet (encklen = 0:0)
16:03:21 ipsec,debug,packet hashtype = SHA:SHA
16:03:21 ipsec,debug,packet authmethod = pre-shared key:pre-shared key
16:03:21 ipsec,debug,packet dh_group = 1024-bit MODP group:1024-bit MODP group
16:03:21 ipsec,debug,packet an acceptable proposal found.
16:03:21 ipsec,debug,packet dh(modp1024)
16:03:21 ipsec,debug,packet agreed on pre-shared key auth.
16:03:21 ipsec,debug,packet ===
16:03:21 ipsec,debug,packet new cookie:
16:03:21 ipsec,debug,packet fe30c1693cb3d9e9
16:03:21 ipsec,debug,packet add payload of len 52, next type 13
16:03:21 ipsec,debug,packet add payload of len 16, next type 13
16:03:21 ipsec,debug,packet add payload of len 16, next type 0
16:03:21 ipsec,debug,packet 124 bytes from 77.xx.xx.xx[500] to 176.xx.xx.xx[500]
16:03:21 ipsec,debug,packet sockname 77.xx.xx.xx[500]
16:03:21 ipsec,debug,packet send packet from 77.xx.xx.xx[500]
16:03:21 ipsec,debug,packet send packet to 176.xx.xx.xx[500]
16:03:21 ipsec,debug,packet src4 77.xx.xx.xx[500]
16:03:21 ipsec,debug,packet dst4 176.xx.xx.xx[500]
16:03:21 ipsec,debug,packet 1 times of 124 bytes message will be sent to 176.xx.xx.xx[500]
16:03:21 ipsec,debug,packet 6b259da5 ff8ea7a5 fe30c169 3cb3d9e9 01100200 00000000 0000007c 0d000038
16:03:21 ipsec,debug,packet 00000001 00000001 0000002c 01010001 00000024 05010000 80010005 80020002
16:03:21 ipsec,debug,packet 80040002 80030001 800b0001 000c0004 00007080 0d000014 4a131c81 07035845
16:03:21 ipsec,debug,packet 5c5728f2 0e95452f 00000014 afcad713 68a1f1c9 6b8696fc 77570100
16:03:21 ipsec,debug,packet resend phase1 packet 6b259da5ff8ea7a5:fe30c1693cb3d9e9
16:03:21 ipsec,debug,packet ==========
16:03:21 ipsec,debug,packet 260 bytes message received from 176.xx.xx.xx[500] to 77.xx.xx.xx[500]
16:03:21 ipsec,debug,packet 6b259da5 ff8ea7a5 fe30c169 3cb3d9e9 04100200 00000000 00000104 0a000084
16:03:21 ipsec,debug,packet 828f5996 68f0ac2b efba0c76 0adfbf7d 5b4d3191 87b38a66 59322b0a 97be7e3c
16:03:21 ipsec,debug,packet 1a997b7d d3e8f915 599c621e 8937cd08 e16887c4 d44589f5 03602c1f 9958233f
16:03:21 ipsec,debug,packet ba655699 2102af33 5eeb38dd 7d142a9a ab0bfcdd ee6250ad 29ac3a52 c0ec551f
16:03:21 ipsec,debug,packet c5d2cbdd 0e748348 75e52cea 5c96943f cbacee4c 9ca4bf8f 15eb15d0 e922c1a5
16:03:21 ipsec,debug,packet 14000034 b62dfe07 00312306 9105628a 03367b84 b866066d a6b5deca 7cfc1dbc
16:03:21 ipsec,debug,packet 292116ff 416513d8 684c9e1d e4b01512 3a55d541 14000018 ae9cb26b 8f7ada4c
16:03:21 ipsec,debug,packet a39327b9 b8816e99 5c9386a0 00000018 5608e44e 9ab1e01c 41bda698 74b3492c
16:03:21 ipsec,debug,packet da4fd1a3
16:03:21 ipsec,debug,packet begin.
16:03:21 ipsec,debug,packet seen nptype=4(ke)
16:03:21 ipsec,debug,packet seen nptype=10(nonce)
16:03:21 ipsec,debug,packet seen nptype=20(nat-d)
16:03:21 ipsec,debug,packet seen nptype=20(nat-d)
16:03:21 ipsec,debug,packet succeed.
16:03:21 ipsec,debug Hashing 77.xx.xx.xx[500] with algo #2
16:03:21 ipsec,debug,packet hash(sha1)
16:03:21 ipsec,debug NAT-D payload #0 verified
16:03:21 ipsec,debug Hashing 176.xx.xx.xx[500] with algo #2
16:03:21 ipsec,debug,packet hash(sha1)
16:03:21 ipsec,debug NAT-D payload #1 doesn't match
16:03:21 ipsec,debug NAT detected: PEER
16:03:21 ipsec,debug,packet ===
16:03:21 firewall,info input: in:ether1-gateway out:(none), src-mac b0:c6:9a:e3:3a:41, proto UDP, 176.xx.xx.xx:500->77.xx.xx.xx:500, len 412
16:03:21 ipsec,debug,packet compute DH's private.
16:03:21 ipsec,debug,packet 7cc615f0 135425d7 702e31a1 a6c7c98b c0520f7d 78ef95f5 6099c752 adb2eeac
16:03:21 ipsec,debug,packet dfcba03b 9e2eb237 8af7e5ba 54369442 075de286 47903886 e5ffa41c d908ef36
16:03:21 ipsec,debug,packet d7ad7899 ccc25161 81d7b438 6888a0fe 826c7cb0 4c43c8c3 b9bcf610 4e9b147c
16:03:21 ipsec,debug,packet ee9c0098 751fe246 d2ba79bc 081959cd 13e60b4e 76d466f9 f0678ec6 5293a4f3
16:03:21 ipsec,debug,packet compute DH's public.
16:03:21 ipsec,debug,packet 6bd779da 6b07a2be cca2c00f 824be15a 9fd0cbd9 2c1f46ec 7f4466d5 404eb53e
16:03:21 ipsec,debug,packet 1af0d471 60e728f6 7e05e5d5 5f84fd07 d9589a44 c2facf28 909867b5 bc74a3a1
16:03:21 ipsec,debug,packet 1c42762e fd446013 acca6f73 0697aeb1 1f12ccba c52b79aa fb3f075b 1004819e
16:03:21 ipsec,debug,packet bec35f42 2fac110e 3a1d9d91 0bdccb16 c51c3334 46192d2c 09575b31 41fee564
16:03:21 ipsec,debug Hashing 176.xx.xx.xx[500] with algo #2
16:03:21 ipsec,debug,packet hash(sha1)
16:03:21 ipsec,debug Hashing 77.xx.xx.xx[500] with algo #2
16:03:21 ipsec,debug,packet hash(sha1)
16:03:21 ipsec,debug Adding remote and local NAT-D payloads.
16:03:21 ipsec,debug,packet add payload of len 128, next type 10
16:03:21 ipsec,debug,packet add payload of len 24, next type 20
16:03:21 ipsec,debug,packet add payload of len 20, next type 20
16:03:21 ipsec,debug,packet add payload of len 20, next type 0
16:03:21 ipsec,debug,packet 236 bytes from 77.xx.xx.xx[500] to 176.xx.xx.xx[500]
16:03:21 ipsec,debug,packet sockname 77.xx.xx.xx[500]
16:03:21 ipsec,debug,packet send packet from 77.xx.xx.xx[500]
16:03:21 ipsec,debug,packet send packet to 176.xx.xx.xx[500]
16:03:21 ipsec,debug,packet src4 77.xx.xx.xx[500]
16:03:21 ipsec,debug,packet dst4 176.xx.xx.xx[500]
16:03:21 ipsec,debug,packet 1 times of 236 bytes message will be sent to 176.xx.xx.xx[500]
16:03:21 ipsec,debug,packet 6b259da5 ff8ea7a5 fe30c169 3cb3d9e9 04100200 00000000 000000ec 0a000084
16:03:21 ipsec,debug,packet 6bd779da 6b07a2be cca2c00f 824be15a 9fd0cbd9 2c1f46ec 7f4466d5 404eb53e
16:03:21 ipsec,debug,packet 1af0d471 60e728f6 7e05e5d5 5f84fd07 d9589a44 c2facf28 909867b5 bc74a3a1
16:03:21 ipsec,debug,packet 1c42762e fd446013 acca6f73 0697aeb1 1f12ccba c52b79aa fb3f075b 1004819e
16:03:21 ipsec,debug,packet bec35f42 2fac110e 3a1d9d91 0bdccb16 c51c3334 46192d2c 09575b31 41fee564
16:03:21 ipsec,debug,packet 1400001c a333bcb8 8a029afc f5e212cd ec92b7cb 7a89b0af 688ee279 14000018
16:03:21 ipsec,debug,packet 7a6bd62d 7fca4cd7 31ebab99 b8e8aee9 6e1251e9 00000018 ae9cb26b 8f7ada4c
16:03:21 ipsec,debug,packet a39327b9 b8816e99 5c9386a0
16:03:21 ipsec,debug,packet resend phase1 packet 6b259da5ff8ea7a5:fe30c1693cb3d9e9
16:03:21 ipsec,debug,packet compute DH's shared.
16:03:21 ipsec,debug,packet
16:03:21 ipsec,debug,packet 569a145a 8a79a97a da9fe3a4 9980d515 1a69f77f 646db8fc 8a938b79 df822531
16:03:21 ipsec,debug,packet f1005bf3 44f8e001 7f05d999 b5a528e1 633d9761 fa113eb7 2e3dc168 8a4dd024
16:03:21 ipsec,debug,packet 37026063 a26d3cd5 eadb74b7 2dd195d1 479707b0 83214629 55afe25f 70a4a7a7
16:03:21 ipsec,debug,packet ef2dc729 3eb8a9a9 b1d1f271 61364833 1b658b43 7513478e dc61184d b09bbf6e
16:03:21 ipsec,debug Remote config has no key
16:03:21 ipsec,debug couldn't find the pskey for 176.xx.xx.xx.
16:03:21 ipsec,debug failed to process packet.
16:03:21 ipsec,debug phase1 negotiation failed.
16:03:21 ipsec,debug,packet an undead schedule has been deleted.
16:03:21 ipsec,debug,packet ==========
16:03:21 ipsec,debug,packet 68 bytes message received from 176.xx.xx.xx[4500] to 77.xx.xx.xx[4500]
16:03:21 ipsec,debug,packet 6b259da5 ff8ea7a5 fe30c169 3cb3d9e9 05100201 00000000 00000044 090bf93d
16:03:21 ipsec,debug,packet 5f70bc0b 23214260 a7184580 7a249513 cbcd2341 67210e8e a331a666 030f4165
16:03:21 ipsec,debug,packet fb9f4be9
16:03:21 ipsec,debug,packet malformed cookie received or the spi expired.
16:03:21 firewall,info input: in:ether1-gateway out:(none), src-mac b0:c6:9a:e3:3a:41, proto UDP, 176.xx.xx.xx:4500->77.xx.xx.xx:4500, len 100
16:03:23 ipsec,debug,packet ==========
16:03:23 ipsec,debug,packet 68 bytes message received from 176.xx.xx.xx[4500] to 77.xx.xx.xx[4500]
16:03:23 ipsec,debug,packet 6b259da5 ff8ea7a5 fe30c169 3cb3d9e9 05100201 00000000 00000044 090bf93d
16:03:23 ipsec,debug,packet 5f70bc0b 23214260 a7184580 7a249513 cbcd2341 67210e8e a331a666 030f4165
16:03:23 ipsec,debug,packet fb9f4be9
16:03:23 ipsec,debug,packet malformed cookie received or the spi expired.
16:03:23 firewall,info input: in:ether1-gateway out:(none), src-mac b0:c6:9a:e3:3a:41, proto UDP, 176.xx.xx.xx:4500->77.xx.xx.xx:4500, len 100
16:03:26 ipsec,debug,packet ==========
16:03:26 ipsec,debug,packet 68 bytes message received from 176.xx.xx.xx[4500] to 77.xx.xx.xx[4500]
16:03:26 ipsec,debug,packet 6b259da5 ff8ea7a5 fe30c169 3cb3d9e9 05100201 00000000 00000044 090bf93d
16:03:26 ipsec,debug,packet 5f70bc0b 23214260 a7184580 7a249513 cbcd2341 67210e8e a331a666 030f4165
16:03:26 ipsec,debug,packet fb9f4be9
16:03:26 ipsec,debug,packet malformed cookie received or the spi expired.
16:03:26 firewall,info input: in:ether1-gateway out:(none), src-mac b0:c6:9a:e3:3a:41, proto UDP, 176.xx.xx.xx:4500->77.xx.xx.xx:4500, len 100
16:03:30 ipsec,debug,packet ==========
16:03:30 ipsec,debug,packet 68 bytes message received from 176.xx.xx.xx[4500] to 77.xx.xx.xx[4500]
16:03:30 ipsec,debug,packet 6b259da5 ff8ea7a5 fe30c169 3cb3d9e9 05100201 00000000 00000044 090bf93d
16:03:30 ipsec,debug,packet 5f70bc0b 23214260 a7184580 7a249513 cbcd2341 67210e8e a331a666 030f4165
16:03:30 ipsec,debug,packet fb9f4be9
16:03:30 ipsec,debug,packet malformed cookie received or the spi expired.
16:03:30 firewall,info input: in:ether1-gateway out:(none), src-mac b0:c6:9a:e3:3a:41, proto UDP, 176.xx.xx.xx:4500->77.xx.xx.xx:4500, len 100
16:03:38 ipsec,debug,packet ==========
16:03:38 ipsec,debug,packet 68 bytes message received from 176.xx.xx.xx[4500] to 77.xx.xx.xx[4500]
16:03:38 ipsec,debug,packet 6b259da5 ff8ea7a5 fe30c169 3cb3d9e9 05100201 00000000 00000044 090bf93d
16:03:38 ipsec,debug,packet 5f70bc0b 23214260 a7184580 7a249513 cbcd2341 67210e8e a331a666 030f4165
16:03:38 ipsec,debug,packet fb9f4be9
16:03:38 ipsec,debug,packet malformed cookie received or the spi expired.
