=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2019.01.20 23:20:42 =~=~=~=~=~=~=~=~=~=~=~=

*Jan 20 23:20:16.687: IKEv2:Got a packet from dispatcher

*Jan 20 23:20:16.695: IKEv2:Processing an item off the pak queue

*Jan 20 23:20:16.695: IKEv2:New ikev2 sa request admitted
*Jan 20 23:20:16.699: IKEv2:Incrementing incoming negotiating sa count by one
*Jan 20 23:20:16.703: IKEv2:Next payload: SA, version: 2.0 Exchange type: IKE_SA_INIT, flags: INITIATOR Message id: 0, length: 464 
Payload contents: 
 SA  Next payload: KE, reserved: 0x0, length: 48
  last proposal: 0x0, reserved: 0x0, length: 44
  Proposal: 1, Protocol id: IKE, SPI size: 0, #trans: 4    last transform: 0x3, reserved: 0x0: length: 12
    type: 1, reserved: 0x0, id: AES-CBC
    last transform: 0x3, reserved: 0x0: length: 8
    type: 2, reserved: 0x0, id: SHA256
    last transform: 0x3, reserved: 0x0: length: 8
    type: 3, reserved: 0x0, id: SHA256
    last transform: 0x0, reserved: 0x0: length: 8
    type: 4, reserved: 0x0, id: DH_GROUP_2048_MODP/Group 14
 KE  Next payload: N, reserved: 0x0, 
Cbtme-Hub#length: 264
    DH group: 14, Reserved: 0x0
 N  Next payload: VID, reserved: 0x0, length: 24

*Jan 20 23:20:16.727: IKEv2:Parse Vendor Specific Payload: CISCO-DELETE-REASON VID  Next payload: VID, reserved: 0x0, length: 23

*Jan 20 23:20:16.727: IKEv2:Parse Vendor Specific Payload: (CUSTOM) VID  Next payload: NOTIFY, reserved: 0x0, length: 21

*Jan 20 23:20:16.727: IKEv2:Parse Notify Payload: NAT_DETECTION_SOURCE_IP NOTIFY(NAT_DETECTION_SOURCE_IP)  Next payload: NOTIFY, reserved: 0x0, length: 28
    Security protocol id: IKE, spi size: 0, type: NAT_DETECTION_SOURCE_IP

*Jan 20 23:20:16.727: IKEv2:Parse Notify Payload: NAT_DETECTION_DESTINATION_IP NOTIFY(NAT_DETECTION_DESTINATION_IP)  Next payload: NONE, reserved: 0x0, length: 28
    Security protocol id: IKE, spi size: 0, type: NAT_DETECTION_DESTINATION_IP

*Jan 20 23:20:16.731: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=BB418CA85847FD41 R_SPI=E309695DEEA599DB (R) MsgID = 00000000 CurState: IDLE Event: EV_RECV_INIT
*Jan 20 
Cbtme-Hub#23:20:16.731: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=BB418CA85847FD41 R_SPI=E309695DEEA599DB (R) MsgID = 00000000 CurState: R_INIT Event: EV_VERIFY_MSG
*Jan 20 23:20:16.731: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=BB418CA85847FD41 R_SPI=E309695DEEA599DB (R) MsgID = 00000000 CurState: R_INIT Event: EV_INSERT_SA
*Jan 20 23:20:16.735: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=BB418CA85847FD41 R_SPI=E309695DEEA599DB (R) MsgID = 00000000 CurState: R_INIT Event: EV_GET_IKE_POLICY
*Jan 20 23:20:16.735: IKEv2:Adding Proposal aes-cbc-256-proposal1 to toolkit policy
*Jan 20 23:20:16.739: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=BB418CA85847FD41 R_SPI=E309695DEEA599DB (R) MsgID = 00000000 CurState: R_INIT Event: EV_PROC_MSG
*Jan 20 23:20:16.739: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=BB418CA85847FD41 R_SPI=E309695DEEA599DB (R) MsgID = 00000000 CurState: R_INIT Event: EV_DETECT_NAT
*Jan 20 23:20:16.743: IKEv2:(SA ID = 2):Process NAT discovery notify
*Jan 20 23:20:16.743: IKEv2:(SA ID = 2):Proces
Cbtme-Hub#sing nat detect src notify
*Jan 20 23:20:16.743: IKEv2:(SA ID = 2):Remote address matched
*Jan 20 23:20:16.743: IKEv2:(SA ID = 2):Processing nat detect dst notify
*Jan 20 23:20:16.743: IKEv2:(SA ID = 2):Local address matched
*Jan 20 23:20:16.743: IKEv2:(SA ID = 2):No NAT found
*Jan 20 23:20:16.743: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=BB418CA85847FD41 R_SPI=E309695DEEA599DB (R) MsgID = 00000000 CurState: R_INIT Event: EV_CHK_CONFIG_MODE
*Jan 20 23:20:16.743: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=BB418CA85847FD41 R_SPI=E309695DEEA599DB (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_SET_POLICY
*Jan 20 23:20:16.743: IKEv2:(SA ID = 2):Setting configured policies
*Jan 20 23:20:16.743: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=BB418CA85847FD41 R_SPI=E309695DEEA599DB (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_CHK_AUTH4PKI
*Jan 20 23:20:16.747: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=BB418CA85847FD41 R_SPI=E309695DEEA599DB (R) MsgID = 00000000 CurState: R_BLD_INIT Event:
Cbtme-Hub# EV_PKI_SESH_OPEN
*Jan 20 23:20:16.747: IKEv2:(SA ID = 2):Opening a PKI session
*Jan 20 23:20:16.747: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=BB418CA85847FD41 R_SPI=E309695DEEA599DB (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_GEN_DH_KEY
*Jan 20 23:20:16.751: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=BB418CA85847FD41 R_SPI=E309695DEEA599DB (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_NO_EVENT
*Jan 20 23:20:16.751: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=BB418CA85847FD41 R_SPI=E309695DEEA599DB (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_OK_RECD_DH_PUBKEY_RESP
*Jan 20 23:20:16.751: IKEv2:(SA ID = 2):Action: Action_Null
*Jan 20 23:20:16.751: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=BB418CA85847FD41 R_SPI=E309695DEEA599DB (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_GEN_DH_SECRET
*Jan 20 23:20:16.951: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=BB418CA85847FD41 R_SPI=E309695DEEA599DB (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_NO_EVENT
*Jan 20 23:20:16.951
Cbtme-Hub#: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=BB418CA85847FD41 R_SPI=E309695DEEA599DB (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_OK_RECD_DH_SECRET_RESP
*Jan 20 23:20:16.951: IKEv2:(SA ID = 2):Action: Action_Null
*Jan 20 23:20:16.951: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=BB418CA85847FD41 R_SPI=E309695DEEA599DB (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_GEN_SKEYID
*Jan 20 23:20:16.951: IKEv2:(SA ID = 2):Generate skeyid
*Jan 20 23:20:16.959: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=BB418CA85847FD41 R_SPI=E309695DEEA599DB (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_GET_CONFIG_MODE
*Jan 20 23:20:16.959: IKEv2:No config data to send to toolkit:
*Jan 20 23:20:16.959: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=BB418CA85847FD41 R_SPI=E309695DEEA599DB (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_BLD_MSG
*Jan 20 23:20:16.959: IKEv2:Construct Vendor Specific Payload: DELETE-REASON
*Jan 20 23:20:16.959: IKEv2:Construct Vendor Specific Payload: (CUSTOM)
*Jan 20 23:2
Cbtme-Hub#0:16.959: IKEv2:Construct Notify Payload: NAT_DETECTION_SOURCE_IP
*Jan 20 23:20:16.959: IKEv2:Construct Notify Payload: NAT_DETECTION_DESTINATION_IP
*Jan 20 23:20:16.959: IKEv2:Construct Notify Payload: HTTP_CERT_LOOKUP_SUPPORTED
*Jan 20 23:20:16.959: IKEv2:(SA ID = 2):Next payload: SA, version: 2.0 Exchange type: IKE_SA_INIT, flags: RESPONDER MSG-RESPONSE Message id: 0, length: 517 
Payload contents: 
 SA  Next payload: KE, reserved: 0x0, length: 48
  last proposal: 0x0, reserved: 0x0, length: 44
  Proposal: 1, Protocol id: IKE, SPI size: 0, #trans: 4    last transform: 0x3, reserved: 0x0: length: 12
    type: 1, reserved: 0x0, id: AES-CBC
    last transform: 0x3, reserved: 0x0: length: 8
    type: 2, reserved: 0x0, id: SHA256
    last transform: 0x3, reserved: 0x0: length: 8
    type: 3, reserved: 0x0, id: SHA256
    last transform: 0x0, reserved: 0x0: length: 8
    type: 4, reserved: 0x0, id: DH_GROUP_2048_MODP/Group 14
 KE  Next payload: N, reserved: 0x0, length: 26
Cbtme-Hub#4
    DH group: 14, Reserved: 0x0
 N  Next payload: VID, reserved: 0x0, length: 24
 VID  Next payload: VID, reserved: 0x0, length: 23
 VID  Next payload: NOTIFY, reserved: 0x0, length: 21
 NOTIFY(NAT_DETECTION_SOURCE_IP)  Next payload: NOTIFY, reserved: 0x0, length: 28
    Security protocol id: IKE, spi size: 0, type: NAT_DETECTION_SOURCE_IP
 NOTIFY(NAT_DETECTION_DESTINATION_IP)  Next payload: CERTREQ, reserved: 0x0, length: 28
    Security protocol id: IKE, spi size: 0, type: NAT_DETECTION_DESTINATION_IP
 CERTREQ  Next payload: NOTIFY, reserved: 0x0, length: 45
    Cert encoding Hash and URL of PKIX
 NOTIFY(HTTP_CERT_LOOKUP_SUPPORTED)  Next payload: NONE, reserved: 0x0, length: 8
    Security protocol id: IKE, spi size: 0, type: HTTP_CERT_LOOKUP_SUPPORTED

*Jan 20 23:20:16.963: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=BB418CA85847FD41 R_SPI=E309695DEEA599DB (R) MsgID = 00000000 CurState: INIT_DONE Event: EV_DONE
*Jan 20 23:20:16.963: IKEv2:(SA ID = 2):Cisco DeleteReason 
Cbtme-Hub#Notify is enabled
*Jan 20 23:20:16.963: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=BB418CA85847FD41 R_SPI=E309695DEEA599DB (R) MsgID = 00000000 CurState: INIT_DONE Event: EV_CHK4_ROLE
*Jan 20 23:20:16.963: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=BB418CA85847FD41 R_SPI=E309695DEEA599DB (R) MsgID = 00000000 CurState: INIT_DONE Event: EV_START_TMR
*Jan 20 23:20:16.963: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=BB418CA85847FD41 R_SPI=E309695DEEA599DB (R) MsgID = 00000000 CurState: R_WAIT_AUTH Event: EV_NO_EVENT
*Jan 20 23:20:17.007: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=1C08CC347D174B27 R_SPI=5BF8B8EB29E45CB1 (R) MsgID = 00000000 CurState: R_WAIT_AUTH Event: EV_WAIT4_AUTH_TMO
*Jan 20 23:20:17.007: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=1C08CC347D174B27 R_SPI=5BF8B8EB29E45CB1 (R) MsgID = 00000000 CurState: AUTH_DONE Event: EV_FAIL
*Jan 20 23:20:17.007: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=1C08CC347D174B27 R_SPI=5BF8B8EB29E45CB1 (R) MsgID = 00000000 CurState: EXIT Event: EV_ABORT
*Jan 20 
Cbtme-Hub#23:20:17.007: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=1C08CC347D174B27 R_SPI=5BF8B8EB29E45CB1 (R) MsgID = 00000000 CurState: EXIT Event: EV_CHK_PENDING_ABORT
*Jan 20 23:20:17.007: IKEv2:Negotiating SA request deleted
*Jan 20 23:20:17.007: IKEv2:Decrement count for incoming negotiating
*Jan 20 23:20:17.007: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=1C08CC347D174B27 R_SPI=5BF8B8EB29E45CB1 (R) MsgID = 00000000 CurState: EXIT Event: EV_UPDATE_CAC_STATS
Cbtme-Hub#
*Jan 20 23:20:46.963: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=BB418CA85847FD41 R_SPI=E309695DEEA599DB (R) MsgID = 00000000 CurState: R_WAIT_AUTH Event: EV_WAIT4_AUTH_TMO
*Jan 20 23:20:46.967: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=BB418CA85847FD41 R_SPI=E309695DEEA599DB (R) MsgID = 00000000 CurState: AUTH_DONE Event: EV_FAIL
*Jan 20 23:20:46.971: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=BB418CA85847FD41 R_SPI=E309695DEEA599DB (R) MsgID = 00000000 CurState: EXIT Event: EV_ABORT
*Jan 20 23:20:46.975: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=BB418CA85847FD41 R_SPI=E309695DEEA599DB (R) MsgID = 00000000 CurState: EXIT Event: EV_CHK_PENDING_ABORT
*Jan 20 23:20:46.975: IKEv2:
Cbtme-Hub#Negotiating SA request deleted
*Jan 20 23:20:46.975: IKEv2:Decrement count for incoming negotiating
*Jan 20 23:20:46.975: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=BB418CA85847FD41 R_SPI=E309695DEEA599DB (R) MsgID = 00000000 CurState: EXIT Event: EV_UPDATE_CAC_STATS
Cbtme-Hub#
*Jan 20 23:20:51.379: IKEv2:Got a packet from dispatcher

*Jan 20 23:20:51.387: IKEv2:Processing an item off the pak queue

*Jan 20 23:20:51.391: IKEv2:New ikev2 sa request admitted
*Jan 20 23:20:51.391: IKEv2:Incrementing incoming negotiating sa count by one
*Jan 20 23:20:51.391: IKEv2:Next payload: SA, version: 2.0 Exchange type: IKE_SA_INIT, flags: INITIATOR Message id: 0, length: 464 
Payload contents: 
 SA  Next payload: KE, reserved: 0x0, length: 48
  last proposal: 0x0, reserved: 0x0, length: 44
  Proposal: 1, Protocol id: IKE, SPI size: 0, #trans: 4    last transform: 0x3, reserved: 0x0: length: 12
    type: 1, reserved: 0x0, id: AES-CBC
    last transform: 0x3, reserved: 0x0: length: 8
    type: 2, reserved: 0x0, id: SHA256
    last transform: 0x3, reserved: 0x0: length: 8
    type: 3, reserved: 0x0, id: SHA256
    last transform: 0x0, reserved: 0x0: length: 8
    type: 4, reserved: 0x0, id: DH_GROUP_2048_MODP/Group 14
 KE  Next payload: N, reserved: 0x0, 
Cbtme-Hub#length: 264
    DH group: 14, Reserved: 0x0
 N  Next payload: VID, reserved: 0x0, length: 24

*Jan 20 23:20:51.391: IKEv2:Parse Vendor Specific Payload: CISCO-DELETE-REASON VID  Next payload: VID, reserved: 0x0, length: 23

*Jan 20 23:20:51.391: IKEv2:Parse Vendor Specific Payload: (CUSTOM) VID  Next payload: NOTIFY, reserved: 0x0, length: 21

*Jan 20 23:20:51.391: IKEv2:Parse Notify Payload: NAT_DETECTION_SOURCE_IP NOTIFY(NAT_DETECTION_SOURCE_IP)  Next payload: NOTIFY, reserved: 0x0, length: 28
    Security protocol id: IKE, spi size: 0, type: NAT_DETECTION_SOURCE_IP

*Jan 20 23:20:51.391: IKEv2:Parse Notify Payload: NAT_DETECTION_DESTINATION_IP NOTIFY(NAT_DETECTION_DESTINATION_IP)  Next payload: NONE, reserved: 0x0, length: 28
    Security protocol id: IKE, spi size: 0, type: NAT_DETECTION_DESTINATION_IP

*Jan 20 23:20:51.395: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=300843FC4CFDFD0F R_SPI=12295B59EA4B343E (R) MsgID = 00000000 CurState: IDLE Event: EV_RECV_INIT
*Jan 20 
Cbtme-Hub#23:20:51.395: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=300843FC4CFDFD0F R_SPI=12295B59EA4B343E (R) MsgID = 00000000 CurState: R_INIT Event: EV_VERIFY_MSG
*Jan 20 23:20:51.395: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=300843FC4CFDFD0F R_SPI=12295B59EA4B343E (R) MsgID = 00000000 CurState: R_INIT Event: EV_INSERT_SA
*Jan 20 23:20:51.395: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=300843FC4CFDFD0F R_SPI=12295B59EA4B343E (R) MsgID = 00000000 CurState: R_INIT Event: EV_GET_IKE_POLICY
*Jan 20 23:20:51.395: IKEv2:Adding Proposal aes-cbc-256-proposal1 to toolkit policy
*Jan 20 23:20:51.395: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=300843FC4CFDFD0F R_SPI=12295B59EA4B343E (R) MsgID = 00000000 CurState: R_INIT Event: EV_PROC_MSG
*Jan 20 23:20:51.395: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=300843FC4CFDFD0F R_SPI=12295B59EA4B343E (R) MsgID = 00000000 CurState: R_INIT Event: EV_DETECT_NAT
*Jan 20 23:20:51.395: IKEv2:(SA ID = 1):Process NAT discovery notify
*Jan 20 23:20:51.395: IKEv2:(SA ID = 1):Proces
Cbtme-Hub#sing nat detect src notify
*Jan 20 23:20:51.395: IKEv2:(SA ID = 1):Remote address matched
*Jan 20 23:20:51.395: IKEv2:(SA ID = 1):Processing nat detect dst notify
*Jan 20 23:20:51.395: IKEv2:(SA ID = 1):Local address matched
*Jan 20 23:20:51.395: IKEv2:(SA ID = 1):No NAT found
*Jan 20 23:20:51.395: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=300843FC4CFDFD0F R_SPI=12295B59EA4B343E (R) MsgID = 00000000 CurState: R_INIT Event: EV_CHK_CONFIG_MODE
*Jan 20 23:20:51.395: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=300843FC4CFDFD0F R_SPI=12295B59EA4B343E (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_SET_POLICY
*Jan 20 23:20:51.395: IKEv2:(SA ID = 1):Setting configured policies
*Jan 20 23:20:51.395: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=300843FC4CFDFD0F R_SPI=12295B59EA4B343E (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_CHK_AUTH4PKI
*Jan 20 23:20:51.395: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=300843FC4CFDFD0F R_SPI=12295B59EA4B343E (R) MsgID = 00000000 CurState: R_BLD_INIT Event:
Cbtme-Hub# EV_PKI_SESH_OPEN
*Jan 20 23:20:51.395: IKEv2:(SA ID = 1):Opening a PKI session
*Jan 20 23:20:51.395: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=300843FC4CFDFD0F R_SPI=12295B59EA4B343E (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_GEN_DH_KEY
*Jan 20 23:20:51.395: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=300843FC4CFDFD0F R_SPI=12295B59EA4B343E (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_NO_EVENT
*Jan 20 23:20:51.395: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=300843FC4CFDFD0F R_SPI=12295B59EA4B343E (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_OK_RECD_DH_PUBKEY_RESP
*Jan 20 23:20:51.395: IKEv2:(SA ID = 1):Action: Action_Null
*Jan 20 23:20:51.395: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=300843FC4CFDFD0F R_SPI=12295B59EA4B343E (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_GEN_DH_SECRET
*Jan 20 23:20:51.619: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=300843FC4CFDFD0F R_SPI=12295B59EA4B343E (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_NO_EVENT
*Jan 20 23:20:51.619: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=300843FC4CFDFD0F R_SPI=12295B59EA4B343E (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_OK_RECD_DH_SECRET_RESP
*Jan 20 23:20:51.619: IKEv2:(SA ID = 1):Action: Action_Null
*Jan 20 23:20:51.619: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=300843FC4CFDFD0F R_SPI=12295B59EA4B343E (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_GEN_SKEYID
*Jan 20 23:20:51.619: IKEv2:(SA ID = 1):Generate skeyid
*Jan 20 23:20:51.619: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=300843FC4CFDFD0F R_SPI=12295B59EA4B343E (R) MsgID = 00000000 CurState
Cbtme-Hub#: R_BLD_INIT Event: EV_GET_CONFIG_MODE
*Jan 20 23:20:51.619: IKEv2:No config data to send to toolkit:
*Jan 20 23:20:51.619: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=300843FC4CFDFD0F R_SPI=12295B59EA4B343E (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_BLD_MSG
*Jan 20 23:20:51.619: IKEv2:Construct Vendor Specific Payload: DELETE-REASON
*Jan 20 23:20:51.619: IKEv2:Construct Vendor Specific Payload: (CUSTOM)
*Jan 20 23:20:51.619: IKEv2:Construct Notify Payload: NAT_DETECTION_SOURCE_IP
*Jan 20 23:20:51.619: IKEv2:Construct Notify Payload: NAT_DETECTION_DESTINATION_IP
*Jan 20 23:20:51.619: IKEv2:Construct Notify Payload: HTTP_CERT_LOOKUP_SUPPORTED
*Jan 20 23:20:51.619: IKEv2:(SA ID = 1):Next payload: SA, version: 2.0 Exchange type: IKE_SA_INIT, flags: RESPONDER MSG-RESPONSE Message id: 0, length: 517 
Payload contents: 
 SA  Next payload: KE, reserved: 0x0, length: 48
  last proposal: 0x0, reserved: 0x0, length: 44
  Proposal: 1, Protocol id: IKE, SPI size: 0, #trans: 4    last transform: 0x3, reserved: 0x0: length: 12
    type: 1, reserved: 0x0, id: AES-CBC
    last trans
Cbtme-Hub#form: 0x3, reserved: 0x0: length: 8
    type: 2, reserved: 0x0, id: SHA256
    last transform: 0x3, reserved: 0x0: length: 8
    type: 3, reserved: 0x0, id: SHA256
    last transform: 0x0, reserved: 0x0: length: 8
    type: 4, reserved: 0x0, id: DH_GROUP_2048_MODP/Group 14
 KE  Next payload: N, reserved: 0x0, length: 264
    DH group: 14, Reserved: 0x0
 N  Next payload: VID, reserved: 0x0, length: 24
 VID  Next payload: VID, reserved: 0x0, length: 23
 VID  Next payload: NOTIFY, reserved: 0x0, length: 21
 NOTIFY(NAT_DETECTION_SOURCE_IP)  Next payload: NOTIFY, reserved: 0x0, length: 28
    Security protocol id: IKE, spi size: 0, type: NAT_DETECTION_SOURCE_IP
 NOTIFY(NAT_DETECTION_DESTINATION_IP)  Next payload: CERTREQ, reserved: 0x0, length: 28
    Security protocol id: IKE, spi size: 0, type: NAT_DETECTION_DESTINATION_IP
 CERTREQ  Next payload: NOTIFY, reserved: 0x0, length: 45
    Cert encoding Hash and URL of PKIX
 NOTIFY(HTTP_CERT_LOOKUP_SUPPORTED)  Next payload: NO
Cbtme-Hub#NE, reserved: 0x0, length: 8
    Security protocol id: IKE, spi size: 0, type: HTTP_CERT_LOOKUP_SUPPORTED

*Jan 20 23:20:51.623: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=300843FC4CFDFD0F R_SPI=12295B59EA4B343E (R) MsgID = 00000000 CurState: INIT_DONE Event: EV_DONE
*Jan 20 23:20:51.623: IKEv2:(SA ID = 1):Cisco DeleteReason Notify is enabled
*Jan 20 23:20:51.623: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=300843FC4CFDFD0F R_SPI=12295B59EA4B343E (R) MsgID = 00000000 CurState: INIT_DONE Event: EV_CHK4_ROLE
*Jan 20 23:20:51.623: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=300843FC4CFDFD0F R_SPI=12295B59EA4B343E (R) MsgID = 00000000 CurState: INIT_DONE Event: EV_START_TMR
*Jan 20 23:20:51.623: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=300843FC4CFDFD0F R_SPI=12295B59EA4B343E (R) MsgID = 00000000 CurState: R_WAIT_AUTH Event: EV_NO_EVENT
Cbtme-Hub#
*Jan 20 23:21:21.371: IKEv2:Got a packet from dispatcher

*Jan 20 23:21:21.375: IKEv2:Processing an item off the pak queue

*Jan 20 23:21:21.379: IKEv2:New ikev2 sa request admitted
*Jan 20 23:21:21.379: IKEv2:Incrementing incoming negotiating sa count by one
*Jan 20 23:21:21.383: IKEv2:Next payload: SA, version: 2.0 Exchange type: IKE_SA_INIT, flags: INITIATOR Message id: 0, length: 464 
Payload contents: 
 SA  Next payload: KE, reserved: 0x0, length: 48
  last proposal: 0x0, reserved: 0x0, length: 44
  Proposal: 1, Protocol id: IKE, SPI size: 0, #trans: 4    last transform: 0x3, reserved: 0x0: length: 12
    type: 1, reserved: 0x0, id: AES-CBC
    last transform: 0x3, reserved: 0x0: length: 8
    type: 2, reserved: 0x0, id: SHA256
    last transform: 0x3, reserved: 0x0: length: 8
    type: 3, reserved: 0x0, id: SHA256
    last transform: 0x0, reserved: 0x0: length: 8
    type: 4, reserved: 0x0, id: DH_GROUP_2048_MODP/Group 14
 KE  Next payload: N, reserved: 0x0, 
Cbtme-Hub#length: 264
    DH group: 14, Reserved: 0x0
 N  Next payload: VID, reserved: 0x0, length: 24

*Jan 20 23:21:21.387: IKEv2:Parse Vendor Specific Payload: CISCO-DELETE-REASON VID  Next payload: VID, reserved: 0x0, length: 23

*Jan 20 23:21:21.387: IKEv2:Parse Vendor Specific Payload: (CUSTOM) VID  Next payload: NOTIFY, reserved: 0x0, length: 21

*Jan 20 23:21:21.387: IKEv2:Parse Notify Payload: NAT_DETECTION_SOURCE_IP NOTIFY(NAT_DETECTION_SOURCE_IP)  Next payload: NOTIFY, reserved: 0x0, length: 28
    Security protocol id: IKE, spi size: 0, type: NAT_DETECTION_SOURCE_IP

*Jan 20 23:21:21.387: IKEv2:Parse Notify Payload: NAT_DETECTION_DESTINATION_IP NOTIFY(NAT_DETECTION_DESTINATION_IP)  Next payload: NONE, reserved: 0x0, length: 28
    Security protocol id: IKE, spi size: 0, type: NAT_DETECTION_DESTINATION_IP

*Jan 20 23:21:21.387: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=095910EDAB7A4361 R_SPI=337C860875B17FCF (R) MsgID = 00000000 CurState: IDLE Event: EV_RECV_INIT
*Jan 20 
Cbtme-Hub#23:21:21.387: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=095910EDAB7A4361 R_SPI=337C860875B17FCF (R) MsgID = 00000000 CurState: R_INIT Event: EV_VERIFY_MSG
*Jan 20 23:21:21.387: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=095910EDAB7A4361 R_SPI=337C860875B17FCF (R) MsgID = 00000000 CurState: R_INIT Event: EV_INSERT_SA
*Jan 20 23:21:21.387: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=095910EDAB7A4361 R_SPI=337C860875B17FCF (R) MsgID = 00000000 CurState: R_INIT Event: EV_GET_IKE_POLICY
*Jan 20 23:21:21.387: IKEv2:Adding Proposal aes-cbc-256-proposal1 to toolkit policy
*Jan 20 23:21:21.387: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=095910EDAB7A4361 R_SPI=337C860875B17FCF (R) MsgID = 00000000 CurState: R_INIT Event: EV_PROC_MSG
*Jan 20 23:21:21.387: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=095910EDAB7A4361 R_SPI=337C860875B17FCF (R) MsgID = 00000000 CurState: R_INIT Event: EV_DETECT_NAT
*Jan 20 23:21:21.387: IKEv2:(SA ID = 2):Process NAT discovery notify
*Jan 20 23:21:21.387: IKEv2:(SA ID = 2):Proces
Cbtme-Hub#sing nat detect src notify
*Jan 20 23:21:21.387: IKEv2:(SA ID = 2):Remote address matched
*Jan 20 23:21:21.387: IKEv2:(SA ID = 2):Processing nat detect dst notify
*Jan 20 23:21:21.387: IKEv2:(SA ID = 2):Local address matched
*Jan 20 23:21:21.387: IKEv2:(SA ID = 2):No NAT found
*Jan 20 23:21:21.387: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=095910EDAB7A4361 R_SPI=337C860875B17FCF (R) MsgID = 00000000 CurState: R_INIT Event: EV_CHK_CONFIG_MODE
*Jan 20 23:21:21.387: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=095910EDAB7A4361 R_SPI=337C860875B17FCF (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_SET_POLICY
*Jan 20 23:21:21.387: IKEv2:(SA ID = 2):Setting configured policies
*Jan 20 23:21:21.391: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=095910EDAB7A4361 R_SPI=337C860875B17FCF (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_CHK_AUTH4PKI
*Jan 20 23:21:21.391: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=095910EDAB7A4361 R_SPI=337C860875B17FCF (R) MsgID = 00000000 CurState: R_BLD_INIT Event:
Cbtme-Hub# EV_PKI_SESH_OPEN
*Jan 20 23:21:21.391: IKEv2:(SA ID = 2):Opening a PKI session
*Jan 20 23:21:21.391: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=095910EDAB7A4361 R_SPI=337C860875B17FCF (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_GEN_DH_KEY
*Jan 20 23:21:21.391: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=095910EDAB7A4361 R_SPI=337C860875B17FCF (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_NO_EVENT
*Jan 20 23:21:21.391: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=095910EDAB7A4361 R_SPI=337C860875B17FCF (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_OK_RECD_DH_PUBKEY_RESP
*Jan 20 23:21:21.391: IKEv2:(SA ID = 2):Action: Action_Null
*Jan 20 23:21:21.391: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=095910EDAB7A4361 R_SPI=337C860875B17FCF (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_GEN_DH_SECRET
*Jan 20 23:21:21.599: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=095910EDAB7A4361 R_SPI=337C860875B17FCF (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_NO_EVENT
*Jan 20 23:21:21.599
Cbtme-Hub#: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=095910EDAB7A4361 R_SPI=337C860875B17FCF (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_OK_RECD_DH_SECRET_RESP
*Jan 20 23:21:21.599: IKEv2:(SA ID = 2):Action: Action_Null
*Jan 20 23:21:21.599: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=095910EDAB7A4361 R_SPI=337C860875B17FCF (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_GEN_SKEYID
*Jan 20 23:21:21.599: IKEv2:(SA ID = 2):Generate skeyid
*Jan 20 23:21:21.603: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=095910EDAB7A4361 R_SPI=337C860875B17FCF (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_GET_CONFIG_MODE
*Jan 20 23:21:21.603: IKEv2:No config data to send to toolkit:
*Jan 20 23:21:21.603: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=095910EDAB7A4361 R_SPI=337C860875B17FCF (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_BLD_MSG
*Jan 20 23:21:21.603: IKEv2:Construct Vendor Specific Payload: DELETE-REASON
*Jan 20 23:21:21.603: IKEv2:Construct Vendor Specific Payload: (CUSTOM)
*Jan 20 23:2
Cbtme-Hub#1:21.603: IKEv2:Construct Notify Payload: NAT_DETECTION_SOURCE_IP
*Jan 20 23:21:21.603: IKEv2:Construct Notify Payload: NAT_DETECTION_DESTINATION_IP
*Jan 20 23:21:21.603: IKEv2:Construct Notify Payload: HTTP_CERT_LOOKUP_SUPPORTED
*Jan 20 23:21:21.603: IKEv2:(SA ID = 2):Next payload: SA, version: 2.0 Exchange type: IKE_SA_INIT, flags: RESPONDER MSG-RESPONSE Message id: 0, length: 517 
Payload contents: 
 SA  Next payload: KE, reserved: 0x0, length: 48
  last proposal: 0x0, reserved: 0x0, length: 44
  Proposal: 1, Protocol id: IKE, SPI size: 0, #trans: 4    last transform: 0x3, reserved: 0x0: length: 12
    type: 1, reserved: 0x0, id: AES-CBC
    last transform: 0x3, reserved: 0x0: length: 8
    type: 2, reserved: 0x0, id: SHA256
    last transform: 0x3, reserved: 0x0: length: 8
    type: 3, reserved: 0x0, id: SHA256
    last transform: 0x0, reserved: 0x0: length: 8
    type: 4, reserved: 0x0, id: DH_GROUP_2048_MODP/Group 14
 KE  Next payload: N, reserved: 0x0, length: 264
    DH group: 14, Reserved: 0x0
 N  Next payload: VID, reserved: 0x0, length: 24
 VID  Next payload: VID, reserved: 0x0, length: 23
 VID  Next payload: NOTIFY, reserved: 0x0, length: 21
 NOTIFY(NAT_DETECTION_SOURCE_IP)  Next payload:
Cbtme-Hub# NOTIFY, reserved: 0x0, length: 28
    Security protocol id: IKE, spi size: 0, type: NAT_DETECTION_SOURCE_IP
 NOTIFY(NAT_DETECTION_DESTINATION_IP)  Next payload: CERTREQ, reserved: 0x0, length: 28
    Security protocol id: IKE, spi size: 0, type: NAT_DETECTION_DESTINATION_IP
 CERTREQ  Next payload: NOTIFY, reserved: 0x0, length: 45
    Cert encoding Hash and URL of PKIX
 NOTIFY(HTTP_CERT_LOOKUP_SUPPORTED)  Next payload: NONE, reserved: 0x0, length: 8
    Security protocol id: IKE, spi size: 0, type: HTTP_CERT_LOOKUP_SUPPORTED

*Jan 20 23:21:21.607: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=095910EDAB7A4361 R_SPI=337C860875B17FCF (R) MsgID = 00000000 CurState: INIT_DONE Event: EV_DONE
*Jan 20 23:21:21.607: IKEv2:(SA ID = 2):Cisco DeleteReason Notify is enabled
*Jan 20 23:21:21.607: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=095910EDAB7A4361 R_SPI=337C860875B17FCF (R) MsgID = 00000000 CurState: INIT_DONE Event: EV_CHK4_ROLE
*Jan 20 23:21:21.607: IKEv2:(SA ID = 2):SM Trace-> SA: I_S
Cbtme-Hub#PI=095910EDAB7A4361 R_SPI=337C860875B17FCF (R) MsgID = 00000000 CurState: INIT_DONE Event: EV_START_TMR
*Jan 20 23:21:21.607: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=095910EDAB7A4361 R_SPI=337C860875B17FCF (R) MsgID = 00000000 CurState: R_WAIT_AUTH Event: EV_NO_EVENT
*Jan 20 23:21:21.627: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=300843FC4CFDFD0F R_SPI=12295B59EA4B343E (R) MsgID = 00000000 CurState: R_WAIT_AUTH Event: EV_WAIT4_AUTH_TMO
*Jan 20 23:21:21.631: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=300843FC4CFDFD0F R_SPI=12295B59EA4B343E (R) MsgID = 00000000 CurState: AUTH_DONE Event: EV_FAIL
*Jan 20 23:21:21.635: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=300843FC4CFDFD0F R_SPI=12295B59EA4B343E (R) MsgID = 00000000 CurState: EXIT Event: EV_ABORT
*Jan 20 23:21:21.639: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=300843FC4CFDFD0F R_SPI=12295B59EA4B343E (R) MsgID = 00000000 CurState: EXIT Event: EV_CHK_PENDING_ABORT
*Jan 20 23:21:21.639: IKEv2:Negotiating SA request deleted
*Jan 20 23:21:21.643: 
Cbtme-Hub#IKEv2:Decrement count for incoming negotiating
*Jan 20 23:21:21.643: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=300843FC4CFDFD0F R_SPI=12295B59EA4B343E (R) MsgID = 00000000 CurState: EXIT Event: EV_UPDATE_CAC_STATS
Cbtme-Hub#
*Jan 20 23:21:51.607: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=095910EDAB7A4361 R_SPI=337C860875B17FCF (R) MsgID = 00000000 CurState: R_WAIT_AUTH Event: EV_WAIT4_AUTH_TMO
*Jan 20 23:21:51.611: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=095910EDAB7A4361 R_SPI=337C860875B17FCF (R) MsgID = 00000000 CurState: AUTH_DONE Event: EV_FAIL
*Jan 20 23:21:51.615: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=095910EDAB7A4361 R_SPI=337C860875B17FCF (R) MsgID = 00000000 CurState: EXIT Event: EV_ABORT
*Jan 20 23:21:51.619: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=095910EDAB7A4361 R_SPI=337C860875B17FCF (R) MsgID = 00000000 CurState: EXIT Event: EV_CHK_PENDING_ABORT
*Jan 20 23:21:51.623: IKEv2:
Cbtme-Hub#Negotiating SA request deleted
*Jan 20 23:21:51.623: IKEv2:Decrement count for incoming negotiating
*Jan 20 23:21:51.627: IKEv2:(SA ID = 2):SM Trace-> SA: I_SPI=095910EDAB7A4361 R_SPI=337C860875B17FCF (R) MsgID = 00000000 CurState: EXIT Event: EV_UPDATE_CAC_STATS
Cbtme-Hub#
*Jan 20 23:21:53.435: IKEv2:Got a packet from dispatcher

*Jan 20 23:21:53.439: IKEv2:Processing an item off the pak queue

*Jan 20 23:21:53.439: IKEv2:New ikev2 sa request admitted
*Jan 20 23:21:53.439: IKEv2:Incrementing incoming negotiating sa count by one
*Jan 20 23:21:53.439: IKEv2:Next payload: SA, version: 2.0 Exchange type: IKE_SA_INIT, flags: INITIATOR Message id: 0, length: 464 
Payload contents: 
 SA  Next payload: KE, reserved: 0x0, length: 48
  last proposal: 0x0, reserved: 0x0, length: 44
  Proposal: 1, Protocol id: IKE, SPI size: 0, #trans: 4    last transform: 0x3, reserved: 0x0: length: 12
    type: 1, reserved: 0x0, id: AES-CBC
    last transform: 0x3, reserved: 0x0: length: 8
    type: 2, reserved: 0x0, id: SHA256
    last transform: 0x3, reserved: 0x0: length: 8
    type: 3, reserved: 0x0, id: SHA256
    last transform: 0x0, reserved: 0x0: length: 8
    type: 4, reserved: 0x0, id: DH_GROUP_2048_MODP/Group 14
 KE  Next payload: N, reserved: 0x0, 
Cbtme-Hub#length: 264
    DH group: 14, Reserved: 0x0
 N  Next payload: VID, reserved: 0x0, length: 24

*Jan 20 23:21:53.439: IKEv2:Parse Vendor Specific Payload: CISCO-DELETE-REASON VID  Next payload: VID, reserved: 0x0, length: 23

*Jan 20 23:21:53.439: IKEv2:Parse Vendor Specific Payload: (CUSTOM) VID  Next payload: NOTIFY, reserved: 0x0, length: 21

*Jan 20 23:21:53.443: IKEv2:Parse Notify Payload: NAT_DETECTION_SOURCE_IP NOTIFY(NAT_DETECTION_SOURCE_IP)  Next payload: NOTIFY, reserved: 0x0, length: 28
    Security protocol id: IKE, spi size: 0, type: NAT_DETECTION_SOURCE_IP

*Jan 20 23:21:53.443: IKEv2:Parse Notify Payload: NAT_DETECTION_DESTINATION_IP NOTIFY(NAT_DETECTION_DESTINATION_IP)  Next payload: NONE, reserved: 0x0, length: 28
    Security protocol id: IKE, spi size: 0, type: NAT_DETECTION_DESTINATION_IP

*Jan 20 23:21:53.443: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=D239AD7DD0A426B2 R_SPI=226CF12A761DA7D8 (R) MsgID = 00000000 CurState: IDLE Event: EV_RECV_INIT
*Jan 20 
Cbtme-Hub#23:21:53.443: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=D239AD7DD0A426B2 R_SPI=226CF12A761DA7D8 (R) MsgID = 00000000 CurState: R_INIT Event: EV_VERIFY_MSG
*Jan 20 23:21:53.443: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=D239AD7DD0A426B2 R_SPI=226CF12A761DA7D8 (R) MsgID = 00000000 CurState: R_INIT Event: EV_INSERT_SA
*Jan 20 23:21:53.443: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=D239AD7DD0A426B2 R_SPI=226CF12A761DA7D8 (R) MsgID = 00000000 CurState: R_INIT Event: EV_GET_IKE_POLICY
*Jan 20 23:21:53.443: IKEv2:Adding Proposal aes-cbc-256-proposal1 to toolkit policy
*Jan 20 23:21:53.443: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=D239AD7DD0A426B2 R_SPI=226CF12A761DA7D8 (R) MsgID = 00000000 CurState: R_INIT Event: EV_PROC_MSG
*Jan 20 23:21:53.443: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=D239AD7DD0A426B2 R_SPI=226CF12A761DA7D8 (R) MsgID = 00000000 CurState: R_INIT Event: EV_DETECT_NAT
*Jan 20 23:21:53.443: IKEv2:(SA ID = 1):Process NAT discovery notify
*Jan 20 23:21:53.443: IKEv2:(SA ID = 1):Proces
Cbtme-Hub#sing nat detect src notify
*Jan 20 23:21:53.443: IKEv2:(SA ID = 1):Remote address matched
*Jan 20 23:21:53.443: IKEv2:(SA ID = 1):Processing nat detect dst notify
*Jan 20 23:21:53.443: IKEv2:(SA ID = 1):Local address matched
*Jan 20 23:21:53.443: IKEv2:(SA ID = 1):No NAT found
*Jan 20 23:21:53.443: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=D239AD7DD0A426B2 R_SPI=226CF12A761DA7D8 (R) MsgID = 00000000 CurState: R_INIT Event: EV_CHK_CONFIG_MODE
*Jan 20 23:21:53.443: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=D239AD7DD0A426B2 R_SPI=226CF12A761DA7D8 (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_SET_POLICY
*Jan 20 23:21:53.443: IKEv2:(SA ID = 1):Setting configured policies
*Jan 20 23:21:53.443: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=D239AD7DD0A426B2 R_SPI=226CF12A761DA7D8 (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_CHK_AUTH4PKI
*Jan 20 23:21:53.443: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=D239AD7DD0A426B2 R_SPI=226CF12A761DA7D8 (R) MsgID = 00000000 CurState: R_BLD_INIT Event:
Cbtme-Hub# EV_PKI_SESH_OPEN
*Jan 20 23:21:53.443: IKEv2:(SA ID = 1):Opening a PKI session
*Jan 20 23:21:53.443: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=D239AD7DD0A426B2 R_SPI=226CF12A761DA7D8 (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_GEN_DH_KEY
*Jan 20 23:21:53.443: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=D239AD7DD0A426B2 R_SPI=226CF12A761DA7D8 (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_NO_EVENT
*Jan 20 23:21:53.443: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=D239AD7DD0A426B2 R_SPI=226CF12A761DA7D8 (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_OK_RECD_DH_PUBKEY_RESP
*Jan 20 23:21:53.443: IKEv2:(SA ID = 1):Action: Action_Null
*Jan 20 23:21:53.443: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=D239AD7DD0A426B2 R_SPI=226CF12A761DA7D8 (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_GEN_DH_SECRET
*Jan 20 23:21:53.667: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=D239AD7DD0A426B2 R_SPI=226CF12A761DA7D8 (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_NO_EVENT
*Jan 20 23:21:53.667
Cbtme-Hub#: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=D239AD7DD0A426B2 R_SPI=226CF12A761DA7D8 (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_OK_RECD_DH_SECRET_RESP
*Jan 20 23:21:53.667: IKEv2:(SA ID = 1):Action: Action_Null
*Jan 20 23:21:53.667: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=D239AD7DD0A426B2 R_SPI=226CF12A761DA7D8 (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_GEN_SKEYID
*Jan 20 23:21:53.667: IKEv2:(SA ID = 1):Generate skeyid
*Jan 20 23:21:53.667: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=D239AD7DD0A426B2 R_SPI=226CF12A761DA7D8 (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_GET_CONFIG_MODE
*Jan 20 23:21:53.667: IKEv2:No config data to send to toolkit:
*Jan 20 23:21:53.667: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=D239AD7DD0A426B2 R_SPI=226CF12A761DA7D8 (R) MsgID = 00000000 CurState: R_BLD_INIT Event: EV_BLD_MSG
*Jan 20 23:21:53.667: IKEv2:Construct Vendor Specific Payload: DELETE-REASON
*Jan 20 23:21:53.667: IKEv2:Construct Vendor Specific Payload: (CUSTOM)
*Jan 20 23:2
Cbtme-Hub#1:53.667: IKEv2:Construct Notify Payload: NAT_DETECTION_SOURCE_IP
*Jan 20 23:21:53.667: IKEv2:Construct Notify Payload: NAT_DETECTION_DESTINATION_IP
*Jan 20 23:21:53.671: IKEv2:Construct Notify Payload: HTTP_CERT_LOOKUP_SUPPORTED
*Jan 20 23:21:53.671: IKEv2:(SA ID = 1):Next payload: SA, version: 2.0 Exchange type: IKE_SA_INIT, flags: RESPONDER MSG-RESPONSE Message id: 0, length: 517 
Payload contents: 
 SA  Next payload: KE, reserved: 0x0, length: 48
  last proposal: 0x0, reserved: 0x0, length: 44
  Proposal: 1, Protocol id: IKE, SPI size: 0, #trans: 4    last transform: 0x3, reserved: 0x0: length: 12
    type: 1, reserved: 0x0, id: AES-CBC
    last transform: 0x3, reserved: 0x0: length: 8
    type: 2, reserved: 0x0, id: SHA256
    last transform: 0x3, reserved: 0x0: length: 8
    type: 3, reserved: 0x0, id: SHA256
    last transform: 0x0, reserved: 0x0: length: 8
    type: 4, reserved: 0x0, id: DH_GROUP_2048_MODP/Group 14
 KE  Next payload: N, reserved: 0x0, length: 26
Cbtme-Hub#4
    DH group: 14, Reserved: 0x0
 N  Next payload: VID, reserved: 0x0, length: 24
 VID  Next payload: VID, reserved: 0x0, length: 23
 VID  Next payload: NOTIFY, reserved: 0x0, length: 21
 NOTIFY(NAT_DETECTION_SOURCE_IP)  Next payload: NOTIFY, reserved: 0x0, length: 28
    Security protocol id: IKE, spi size: 0, type: NAT_DETECTION_SOURCE_IP
 NOTIFY(NAT_DETECTION_DESTINATION_IP)  Next payload: CERTREQ, reserved: 0x0, length: 28
    Security protocol id: IKE, spi size: 0, type: NAT_DETECTION_DESTINATION_IP
 CERTREQ  Next payload: NOTIFY, reserved: 0x0, length: 45
    Cert encoding Hash and URL of PKIX
 NOTIFY(HTTP_CERT_LOOKUP_SUPPORTED)  Next payload: NONE, reserved: 0x0, length: 8
    Security protocol id: IKE, spi size: 0, type: HTTP_CERT_LOOKUP_SUPPORTED

*Jan 20 23:21:53.671: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=D239AD7DD0A426B2 R_SPI=226CF12A761DA7D8 (R) MsgID = 00000000 CurState: INIT_DONE Event: EV_DONE
*Jan 20 23:21:53.671: IKEv2:(SA ID = 1):Cisco DeleteReason 
Cbtme-Hub#Notify is enabled
*Jan 20 23:21:53.671: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=D239AD7DD0A426B2 R_SPI=226CF12A761DA7D8 (R) MsgID = 00000000 CurState: INIT_DONE Event: EV_CHK4_ROLE
*Jan 20 23:21:53.671: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=D239AD7DD0A426B2 R_SPI=226CF12A761DA7D8 (R) MsgID = 00000000 CurState: INIT_DONE Event: EV_START_TMR
*Jan 20 23:21:53.671: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=D239AD7DD0A426B2 R_SPI=226CF12A761DA7D8 (R) MsgID = 00000000 CurState: R_WAIT_AUTH Event: EV_NO_EVENT
Cbtme-Hub#