2020-05-08T10:14:44-07:00 VPN-timer: Timer event for s2s_Site. Primary connection is already UP, so Do nothing...! 2020-05-08T10:14:44-07:00 VPN-timer: Last message 'Timer event for s2s_' repeated 29 times, supressed by syslog-ng on Site 2020-05-08T10:09:43-07:00 VPN-timer: Timer event for s2s_Site. Primary connection is already UP, so Do nothing...! 2020-05-08T10:09:43-07:00 VPN-timer: Last message 'Timer event for s2s_' repeated 30 times, supressed by syslog-ng on Site 2020-05-08T10:04:33-07:00 VPN-timer: Timer event for s2s_Site. Primary connection is already UP, so Do nothing...! 2020-05-08T10:04:33-07:00 VPN-timer: Last message 'Timer event for s2s_' repeated 29 times, supressed by syslog-ng on Site 2020-05-08T09:59:32-07:00 VPN-timer: Timer event for s2s_Site. Primary connection is already UP, so Do nothing...! 2020-05-08T09:59:32-07:00 VPN-timer: Last message 'Timer event for s2s_' repeated 30 times, supressed by syslog-ng on Site 2020-05-08T09:54:22-07:00 VPN-timer: Timer event for s2s_Site. Primary connection is already UP, so Do nothing...! 2020-05-08T09:54:22-07:00 VPN-timer: Last message 'Timer event for s2s_' repeated 29 times, supressed by syslog-ng on Site 2020-05-08T09:49:21-07:00 VPN-timer: Timer event for s2s_Site. Primary connection is already UP, so Do nothing...! 2020-05-08T09:49:17-07:00 charon: 08[NET] sending packet: from rmt.rmt.rmt.rmt[500] to dst.dst.dst.dst[500] (60 bytes) 2020-05-08T09:49:17-07:00 charon: 08[ENC] generating QUICK_MODE request [ HASH ] 2020-05-08T09:49:16-07:00 charon: 08[CHD] updown: Cleared 1 matching VPN connections 2020-05-08T09:49:16-07:00 charon: 08[CHD] updown: Clear VPN connections: (OK) 2020-05-08T09:49:16-07:00 charon: Last message '08[IKE] CHILD_SA s2s' repeated 1 times, supressed by syslog-ng on Site 2020-05-08T09:49:16-07:00 charon: 08[IKE] CHILD_SA s2s_Site-1{10} established with SPIs and TS xxx.xxx.xxx.xxx/24 === xxx.xxx.xxx.xxx/24 2020-05-08T09:49:16-07:00 charon: 08[ENC] parsed QUICK_MODE response [ HASH SA No ID ID N(()) ] 2020-05-08T09:49:16-07:00 charon: 08[NET] received packet: from dst.dst.dst.dst[500] to rmt.rmt.rmt.rmt[500] (204 bytes) 2020-05-08T09:49:16-07:00 charon: 09[IKE] CHILD_SA not found, ignored 2020-05-08T09:49:16-07:00 charon: 09[IKE] received DELETE for ESP CHILD_SA with SPI 2020-05-08T09:49:16-07:00 charon: 09[ENC] parsed INFORMATIONAL_V1 request [ HASH D ] 2020-05-08T09:49:16-07:00 charon: 09[NET] received packet: from dst.dst.dst.dst[500] to rmt.rmt.rmt.rmt[500] (76 bytes) 2020-05-08T09:49:16-07:00 charon: 14[NET] sending packet: from rmt.rmt.rmt.rmt[500] to dst.dst.dst.dst[500] (172 bytes) 2020-05-08T09:49:16-07:00 charon: 14[ENC] generating QUICK_MODE request [ HASH SA No ID ID ] 2020-05-08T09:49:16-07:00 charon: 14[IKE] maximum IKE_SA lifetime 27489s 2020-05-08T09:49:16-07:00 charon: 14[IKE] scheduling reauthentication in 26049s 2020-05-08T09:49:16-07:00 charon: Last message '14[IKE] IKE_SA s2s_A' repeated 1 times, supressed by syslog-ng on Site 2020-05-08T09:49:16-07:00 charon: 14[IKE] IKE_SA s2s_Site[7] established between rmt.rmt.rmt.rmt[rmt.rmt.rmt.rmt]...dst.dst.dst.dst[dst.dst.dst.dst] 2020-05-08T09:49:16-07:00 charon: 14[ENC] parsed ID_PROT response 0 [ ID HASH N(()) ] 2020-05-08T09:49:16-07:00 charon: 14[NET] received packet: from dst.dst.dst.dst[500] to rmt.rmt.rmt.rmt[500] (108 bytes) 2020-05-08T09:49:16-07:00 charon: 12[IKE] INFORMATIONAL_V1 request with message ID processing failed 2020-05-08T09:49:16-07:00 charon: 12[IKE] ignore malformed INFORMATIONAL request 2020-05-08T09:49:16-07:00 charon: 12[IKE] message parsing failed 2020-05-08T09:49:16-07:00 charon: 12[ENC] could not decrypt payloads 2020-05-08T09:49:16-07:00 charon: 12[ENC] Invalid HASH or PSK! 2020-05-08T09:49:16-07:00 charon: 12[ENC] invalid HASH_V1 payload length, decryption failed? 2020-05-08T09:49:16-07:00 charon: 12[NET] received packet: from dst.dst.dst.dst[500] to rmt.rmt.rmt.rmt[500] (92 bytes) 2020-05-08T09:49:16-07:00 charon: 06[NET] sending packet: from rmt.rmt.rmt.rmt[500] to dst.dst.dst.dst[500] (108 bytes) 2020-05-08T09:49:16-07:00 charon: 06[ENC] generating ID_PROT request 0 [ ID HASH N(INITIAL_CONTACT) ] 2020-05-08T09:49:16-07:00 charon: 06[IKE] received XAuth vendor ID 2020-05-08T09:49:16-07:00 charon: 06[ENC] received unknown vendor ID: 2020-05-08T09:49:16-07:00 charon: 06[IKE] received DPD vendor ID 2020-05-08T09:49:16-07:00 charon: 06[IKE] received Cisco Unity vendor ID 2020-05-08T09:49:16-07:00 charon: 06[ENC] parsed ID_PROT response 0 [ KE No V V V V NAT-D NAT-D ] 2020-05-08T09:49:16-07:00 charon: 06[NET] received packet: from dst.dst.dst.dst[500] to rmt.rmt.rmt.rmt[500] (304 bytes) 2020-05-08T09:49:16-07:00 charon: 15[NET] sending packet: from rmt.rmt.rmt.rmt[500] to dst.dst.dst.dst[500] (244 bytes) 2020-05-08T09:49:16-07:00 charon: 15[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ] 2020-05-08T09:49:16-07:00 charon: 15[IKE] received NAT-T (RFC ) vendor ID 2020-05-08T09:49:16-07:00 charon: 15[ENC] parsed ID_PROT response 0 [ SA V ] 2020-05-08T09:49:16-07:00 charon: 15[NET] received packet: from dst.dst.dst.dst[500] to rmt.rmt.rmt.rmt[500] (104 bytes) 2020-05-08T09:49:16-07:00 charon: 05[NET] sending packet: from rmt.rmt.rmt.rmt[500] to dst.dst.dst.dst[500] (200 bytes) 2020-05-08T09:49:16-07:00 charon: 05[ENC] generating ID_PROT request 0 [ SA V V V V V V ] 2020-05-08T09:49:16-07:00 charon: Last message '05[IKE] initiating M' repeated 1 times, supressed by syslog-ng on Site 2020-05-08T09:49:16-07:00 charon: 05[IKE] initiating Main Mode IKE_SA s2s_Site[7] to dst.dst.dst.dst 2020-05-08T09:49:16-07:00 charon: 05[KNL] creating acquire job for policy xxx.xxx.xxx.xxx/32[icmp/3(1)] === xxx.xxx.xxx.xxx/32[icmp/3(1)] with reqid {1} 2020-05-08T09:49:16-07:00 charon: Last message '13[IKE] deleting IKE' repeated 1 times, supressed by syslog-ng on Site 2020-05-08T09:49:15-07:00 charon: 13[IKE] deleting IKE_SA s2s_Site[6] between rmt.rmt.rmt.rmt[rmt.rmt.rmt.rmt]...dst.dst.dst.dst[dst.dst.dst.dst] 2020-05-08T09:49:15-07:00 charon: 13[IKE] received DELETE for IKE_SA s2s_Site[6] 2020-05-08T09:49:15-07:00 charon: 13[ENC] parsed INFORMATIONAL_V1 request [ HASH D ] 2020-05-08T09:49:15-07:00 charon: 13[NET] received packet: from dst.dst.dst.dst[500] to rmt.rmt.rmt.rmt[500] (92 bytes) 2020-05-08T09:49:15-07:00 VPN-timer: Last message 'Timer event for s2s_' repeated 2 times, supressed by syslog-ng on Site 2020-05-08T09:48:51-07:00 VPN-timer: Timer event for s2s_Site. Primary connection is already UP, so Do nothing...! 2020-05-08T09:48:47-07:00 charon: 13[NET] sending packet: from rmt.rmt.rmt.rmt[500] to dst.dst.dst.dst[500] (60 bytes) 2020-05-08T09:48:47-07:00 charon: 13[ENC] generating QUICK_MODE request [ HASH ] 2020-05-08T09:48:47-07:00 charon: 13[CHD] updown: Cleared 1 matching VPN connections 2020-05-08T09:48:47-07:00 charon: 13[CHD] updown: Clear VPN connections: (OK) 2020-05-08T09:48:47-07:00 charon: Last message '13[IKE] CHILD_SA s2s' repeated 1 times, supressed by syslog-ng on Site 2020-05-08T09:48:47-07:00 charon: 13[IKE] CHILD_SA s2s_Site-1{9} established with SPIs and TS xxx.xxx.xxx.xxx/24 === xxx.xxx.xxx.xxx/24 2020-05-08T09:48:47-07:00 charon: 13[ENC] parsed QUICK_MODE response [ HASH SA No ID ID N((24576)) ] 2020-05-08T09:48:47-07:00 charon: 13[NET] received packet: from dst.dst.dst.dst[500] to rmt.rmt.rmt.rmt[500] (204 bytes) 2020-05-08T09:48:46-07:00 charon: 10[IKE] received (24576) notify 2020-05-08T09:48:46-07:00 charon: 10[ENC] parsed INFORMATIONAL_V1 request [ HASH N(()) ] 2020-05-08T09:48:46-07:00 charon: 10[NET] received packet: from dst.dst.dst.dst[500] to rmt.rmt.rmt.rmt[500] (92 bytes) 2020-05-08T09:48:46-07:00 charon: 16[NET] sending packet: from rmt.rmt.rmt.rmt[500] to dst.dst.dst.dst[500] (172 bytes) 2020-05-08T09:48:46-07:00 charon: 16[ENC] generating QUICK_MODE request [ HASH SA No ID ID ] 2020-05-08T09:48:46-07:00 charon: 16[IKE] maximum IKE_SA lifetime 28267s 2020-05-08T09:48:46-07:00 charon: 16[IKE] scheduling reauthentication in 26827s 2020-05-08T09:48:46-07:00 charon: Last message '16[IKE] IKE_SA s2s_A' repeated 1 times, supressed by syslog-ng on Site 2020-05-08T09:48:46-07:00 charon: 16[IKE] IKE_SA s2s_Site[6] established between rmt.rmt.rmt.rmt[rmt.rmt.rmt.rmt]...dst.dst.dst.dst[dst.dst.dst.dst] 2020-05-08T09:48:46-07:00 charon: 16[ENC] parsed ID_PROT response 0 [ ID HASH N((24576)) ] 2020-05-08T09:48:46-07:00 charon: 16[NET] received packet: from dst.dst.dst.dst[500] to rmt.rmt.rmt.rmt[500] (108 bytes) 2020-05-08T09:48:46-07:00 charon: 08[NET] sending packet: from rmt.rmt.rmt.rmt[500] to dst.dst.dst.dst[500] (108 bytes) 2020-05-08T09:48:46-07:00 charon: 08[ENC] generating ID_PROT request 0 [ ID HASH N(INITIAL_CONTACT) ] 2020-05-08T09:48:46-07:00 charon: 08[IKE] received XAuth vendor ID 2020-05-08T09:48:46-07:00 charon: 08[ENC] received unknown vendor ID: ce:bf:0b:a4:e5:41:cd:d6:43:7d:9c:c2:31:fe:ce:2a 2020-05-08T09:48:46-07:00 charon: 08[IKE] received DPD vendor ID 2020-05-08T09:48:46-07:00 charon: 08[IKE] received Cisco Unity vendor ID 2020-05-08T09:48:46-07:00 charon: 08[ENC] parsed ID_PROT response 0 [ KE No V V V V NAT-D NAT-D ] 2020-05-08T09:48:46-07:00 charon: 08[NET] received packet: from dst.dst.dst.dst[500] to rmt.rmt.rmt.rmt[500] (304 bytes) 2020-05-08T09:48:46-07:00 charon: 11[NET] sending packet: from rmt.rmt.rmt.rmt[500] to dst.dst.dst.dst[500] (244 bytes) 2020-05-08T09:48:46-07:00 charon: 11[ENC] generating ID_PROT request 0 [ KE No NAT-D NAT-D ] 2020-05-08T09:48:46-07:00 charon: 11[IKE] received NAT-T (RFC 3947) vendor ID 2020-05-08T09:48:46-07:00 charon: 11[ENC] parsed ID_PROT response 0 [ SA V ] 2020-05-08T09:48:46-07:00 charon: 11[NET] received packet: from dst.dst.dst.dst[500] to rmt.rmt.rmt.rmt[500] (104 bytes) 2020-05-08T09:48:46-07:00 charon: 09[NET] sending packet: from rmt.rmt.rmt.rmt[500] to dst.dst.dst.dst[500] (200 bytes) 2020-05-08T09:48:46-07:00 charon: 09[ENC] generating ID_PROT request 0 [ SA V V V V V V ] 2020-05-08T09:48:46-07:00 charon: Last message '09[IKE] initiating M' repeated 1 times, supressed by syslog-ng on Site 2020-05-08T09:48:46-07:00 charon: 09[IKE] initiating Main Mode IKE_SA s2s_Site[6] to dst.dst.dst.dst 2020-05-08T09:48:46-07:00 charon: 09[KNL] creating acquire job for policy xxx.xxx.xxx.xxx37/32[tcp/50103] === xxx.xxx.xxx.xxx/32[tcp/3389] with reqid {1} 2020-05-08T09:48:46-07:00 charon: Last message '14[IKE] deleting IKE' repeated 1 times, supressed by syslog-ng on Site 2020-05-08T09:48:45-07:00 charon: 14[IKE] deleting IKE_SA s2s_Site[5] between rmt.rmt.rmt.rmt[rmt.rmt.rmt.rmt]...dst.dst.dst.dst[dst.dst.dst.dst] 2020-05-08T09:48:45-07:00 charon: 14[IKE] received DELETE for IKE_SA s2s_Site[5] 2020-05-08T09:48:45-07:00 charon: 14[ENC] parsed INFORMATIONAL_V1 request [ HASH D ] 2020-05-08T09:48:45-07:00 charon: 14[NET] received packet: from dst.dst.dst.dst[500] to rmt.rmt.rmt.rmt[500] (92 bytes) 2020-05-08T09:48:45-07:00 charon: 06[IKE] QUICK_MODE request with message ID processing failed 2020-05-08T09:48:45-07:00 charon: 06[NET] sending packet: from rmt.rmt.rmt.rmt[500] to dst.dst.dst.dst[500] (76 bytes) 2020-05-08T09:48:45-07:00 charon: 06[ENC] generating INFORMATIONAL_V1 request [ HASH N(INVAL_HASH) ] 2020-05-08T09:48:45-07:00 charon: 06[IKE] integrity check failed 2020-05-08T09:48:45-07:00 charon: 06[ENC] received HASH payload does not match 2020-05-08T09:48:45-07:00 charon: 06[ENC] parsed QUICK_MODE request [ HASH SA No ID ID ] 2020-05-08T09:48:45-07:00 charon: 06[NET] received packet: from dst.dst.dst.dst[500] to rmt.rmt.rmt.rmt[500] (172 bytes) 2020-05-08T09:48:45-07:00 charon: 15[NET] sending packet: from rmt.rmt.rmt.rmt[500] to dst.dst.dst.dst[500] (76 bytes) 2020-05-08T09:48:45-07:00 charon: 15[ENC] generating INFORMATIONAL_V1 request [ HASH N(INVAL_ID) ] 2020-05-08T09:48:45-07:00 charon: 15[IKE] no matching CHILD_SA config found 2020-05-08T09:48:45-07:00 charon: 15[ENC] parsed QUICK_MODE request [ HASH SA No ID ID ] 2020-05-08T09:48:45-07:00 charon: 15[NET] received packet: from dst.dst.dst.dst[500] to rmt.rmt.rmt.rmt[500] (172 bytes) 2020-05-08T09:48:45-07:00 charon: 07[NET] sending packet: from rmt.rmt.rmt.rmt[500] to dst.dst.dst.dst[500] (60 bytes) 2020-05-08T09:48:45-07:00 charon: 07[ENC] generating QUICK_MODE request [ HASH ] 2020-05-08T09:48:45-07:00 charon: 07[CHD] updown: Cleared 2 matching VPN connections 2020-05-08T09:48:45-07:00 charon: 07[CHD] updown: Clear VPN connections: (OK) 2020-05-08T09:48:45-07:00 charon: Last message '07[IKE] CHILD_SA s2s' repeated 1 times, supressed by syslog-ng on Site 2020-05-08T09:48:45-07:00 charon: 07[IKE] CHILD_SA s2s_Site-1{8} established with SPIs and TS xxx.xxx.xxx.xxx/24 === xxx.xxx.xxx.xxx/24 2020-05-08T09:48:45-07:00 charon: 07[ENC] parsed QUICK_MODE response [ HASH SA No ID ID N(()) ] 2020-05-08T09:48:45-07:00 charon: 07[NET] received packet: from dst.dst.dst.dst[500] to rmt.rmt.rmt.rmt[500] (204 bytes) 2020-05-08T09:48:45-07:00 charon: 05[NET] sending packet: from rmt.rmt.rmt.rmt[500] to dst.dst.dst.dst[500] (172 bytes) 2020-05-08T09:48:45-07:00 charon: 05[ENC] generating QUICK_MODE request [ HASH SA No ID ID ] 2020-05-08T09:48:45-07:00 charon: 05[KNL] creating acquire job for policy xxx.xxx.xxx.xxx37/32[tcp/49947] === xxx.xxx.xxx.xxx/32[tcp/3389] with reqid {1} 2020-05-08T09:48:45-07:00 charon: Last message '10[IKE] closing CHIL' repeated 1 times, supressed by syslog-ng on Site 2020-05-08T09:48:44-07:00 charon: 10[IKE] closing CHILD_SA s2s_Site-1{7} with SPIs (4480078 bytes) (4054256 bytes) and TS xxx.xxx.xxx.xxx/24 === xxx.xxx.xxx.xxx/24 2020-05-08T09:48:44-07:00 charon: 10[IKE] received DELETE for ESP CHILD_SA with SPI 2020-05-08T09:48:44-07:00 charon: 10[ENC] parsed INFORMATIONAL_V1 request [ HASH D ] 2020-05-08T09:48:44-07:00 charon: 10[NET] received packet: from dst.dst.dst.dst[500] to rmt.rmt.rmt.rmt[500] (76 bytes) 2020-05-08T09:48:41-07:00 VPN-timer: Timer event for s2s_Site. Primary connection is already UP, so Do nothing...! 2020-05-08T09:48:35-07:00 charon: 11[IKE] received retransmit of request with ID , but no response to retransmit 2020-05-08T09:48:35-07:00 charon: 11[NET] received packet: from dst.dst.dst.dst[500] to rmt.rmt.rmt.rmt[500] (172 bytes) 2020-05-08T09:48:31-07:00 VPN-timer: Timer event for s2s_Site. Primary connection is already UP, so Do nothing...! 2020-05-08T09:48:25-07:00 charon: 14[IKE] received retransmit of request with ID , but no response to retransmit 2020-05-08T09:48:25-07:00 charon: 14[NET] received packet: from dst.dst.dst.dst[500] to rmt.rmt.rmt.rmt[500] (172 bytes) 2020-05-08T09:48:21-07:00 VPN-timer: Timer event for s2s_Site. Primary connection is already UP, so Do nothing...! 2020-05-08T09:48:15-07:00 charon: 07[NET] sending packet: from rmt.rmt.rmt.rmt[500] to dst.dst.dst.dst[500] (76 bytes) 2020-05-08T09:48:15-07:00 charon: 07[ENC] generating INFORMATIONAL_V1 request [ HASH N(INVAL_ID) ] 2020-05-08T09:48:15-07:00 charon: 07[IKE] no matching CHILD_SA config found 2020-05-08T09:48:15-07:00 charon: 07[ENC] parsed QUICK_MODE request [ HASH SA No ID ID ] 2020-05-08T09:48:15-07:00 charon: 07[NET] received packet: from dst.dst.dst.dst[500] to rmt.rmt.rmt.rmt[500] (172 bytes)