rtmx602#debug crypto condition peer ipv4 91.212.206.133 rtmx602#debug crypto condition peer ipv4 91.212.206.134 rtmx602#term mon % Console already monitors rtmx602# rtmx602# rtmx602# rtmx602# rtmx602#debug cryp rtmx602#debug crypto isa rtmx602#debug crypto isakmp Crypto ISAKMP debugging is on rtmx602#debug cry rtmx602#debug crypto *Feb 12 04:09:12.231: ISAKMP (1018): received packet from 91.212.206.134 dport 5 00 sport 500 Global (R) QM_IDLE *Feb 12 04:09:12.231: ISAKMP: set new node 798727740 to QM_IDLE *Feb 12 04:09:12.232: ISAKMP:(1018): processing HASH payload. message ID = 79872 7740 *Feb 12 04:09:12.232: ISAKMP:(1018): processing SA payload. message ID = 7987277 40 *Feb 12 04:09:12.232: ISAKMP:(1018):Checking IPSec proposal 1 *Feb 12 04:09:12.232: ISAKMP: transform 1, ESP_AES *Feb 12 04:09:12.232: ISAKMP: a rtmx602#debug crypto ikttributes in transform: *Feb 12 04:09:12.232: ISAKMP: encaps is 1 (Tunnel) *Feb 12 04:09:12.232: ISAKMP: SA life type in seconds *Feb 12 04:09:12.232: ISAKMP: SA life duration (basic) of 3600 *Feb 12 04:09:12.232: ISAKMP: SA life type in kilobytes *Feb 12 04:09:12.232: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0 *Feb 12 04:09:12.232: ISAKMP: authenticator is HMAC-SHA *Feb 12 04:09:12.232: ISAKMP: key length is 256 *Feb 12 04:09:12.232: ISAKMP:(1018):atts rtmx602#debug crypto ike IKEv2 default debugging is on rtmx602# are acceptable. *Feb 12 04:09:12.232: ISAKMP:(1018): IPSec policy invalidated proposal with erro r 64 *Feb 12 04:09:12.238: ISAKMP:(1018): phase 2 SA policy not acceptable! (local 20 1.96.120.21 remote 91.212.206.134) *Feb 12 04:09:12.238: ISAKMP: set new node 3011254842 to QM_IDLE *Feb 12 04:09:12.238: ISAKMP:(1018):Sending NOTIFY PROPOSAL_NOT_CHOSEN protocol 3 spi 140314048881976, message ID = 3011254842 *Feb 12 04:09:12.238: ISAKMP:(1018): sending packet to 91.212.206.134 my_port 50 0 peer_po rtmx602#rt 500 (R) QM_IDLE *Feb 12 04:09:12.238: ISAKMP:(1018):Sending an IKE IPv4 Packet. *Feb 12 04:09:12.238: ISAKMP:(1018):purging node 3011254842 *Feb 12 04:09:12.238: ISAKMP:(1018):deleting node 798727740 error TRUE reason "Q M rejected" *Feb 12 04:09:12.241: ISAKMP:(1018):Node 798727740, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH *Feb 12 04:09:12.241: ISAKMP:(1018):Old State = IKE_QM_READY New State = IKE_QM _READY rtmx602# *Feb 12 04:09:25.121: ISAKMP:(1017):purging node 18630030 *Feb 12 04:09:25.615: ISAKMP (1017): received packet from 91.212.206.133 dport 5 00 sport 500 Global (I) QM_IDLE *Feb 12 04:09:25.615: ISAKMP: set new node 3312572941 to QM_IDLE *Feb 12 04:09:25.615: ISAKMP:(1017): processing HASH payload. message ID = 33125 72941 *Feb 12 04:09:25.615: ISAKMP:(1017): processing DELETE payload. message ID = 331 2572941 *Feb 12 04:09:25.615: ISAKMP:(1017):peer does not do paranoid keepalives. *Feb 1 rtmx602#2 04:09:25.615: ISAKMP:(1017):Enqueued KEY_MGR_DELETE_SAS for IPSEC SA ( SPI:0x33976737) *Feb 12 04:09:25.615: ISAKMP:(1017):deleting node 3312572941 error FALSE reason "Informational (in) state 1" rtmx602# *Feb 12 04:09:32.238: ISAKMP:(1018):purging node 482098534 rtmx602# *Feb 12 04:09:35.336: ISAKMP: set new node 0 to QM_IDLE *Feb 12 04:09:35.336: SA has outstanding requests (local 201.96.120.21 port 500 , remote 91.212.206.133 port 500) *Feb 12 04:09:35.336: ISAKMP:(1017): sitting IDLE. Starting QM immediately (QM_I DLE ) *Feb 12 04:09:35.336: ISAKMP:(1017):beginning Quick Mode exchange, M-ID of 34953 33650 *Feb 12 04:09:35.336: ISAKMP:(1017):QM Initiator gets spi *Feb 12 04:09:35.336: ISAKMP:(1017): sending packet to 91.212.206.133 my_port 50 0 peer_port 5 rtmx602#00 (I) QM_IDLE *Feb 12 04:09:35.336: ISAKMP:(1017):Sending an IKE IPv4 Packet. *Feb 12 04:09:35.337: ISAKMP:(1017):Node 3495333650, Input = IKE_MESG_INTERNAL, IKE_INIT_QM *Feb 12 04:09:35.337: ISAKMP:(1017):Old State = IKE_QM_READY New State = IKE_QM _I_QM1 *Feb 12 04:09:35.537: ISAKMP (1017): received packet from 91.212.206.133 dport 5 00 sport 500 Global (I) QM_IDLE *Feb 12 04:09:35.537: ISAKMP:(1017): processing HASH payload. message ID = 34953 33650 *Feb 12 04:09:35.537: ISAKMP:(1017): rtmx602#processing SA payload. message ID = 3495333650 *Feb 12 04:09:35.537: ISAKMP:(1017):Checking IPSec proposal 1 *Feb 12 04:09:35.537: ISAKMP: transform 1, ESP_AES *Feb 12 04:09:35.537: ISAKMP: attributes in transform: *Feb 12 04:09:35.537: ISAKMP: encaps is 1 (Tunnel) *Feb 12 04:09:35.537: ISAKMP: SA life type in seconds *Feb 12 04:09:35.537: ISAKMP: SA life duration (basic) of 3600 *Feb 12 04:09:35.537: ISAKMP: SA life type in kilobytes *Feb 12 04:09:35.537: ISAKMP: SA lif rtmx602#e duration (VPI) of 0x0 0x46 0x50 0x0 *Feb 12 04:09:35.537: ISAKMP: authenticator is HMAC-SHA *Feb 12 04:09:35.537: ISAKMP: key length is 256 *Feb 12 04:09:35.537: ISAKMP:(1017):atts are acceptable. *Feb 12 04:09:35.538: ISAKMP:(1017): processing NONCE payload. message ID = 3495 333650 *Feb 12 04:09:35.538: ISAKMP:(1017): processing ID payload. message ID = 3495333 650 *Feb 12 04:09:35.538: ISAKMP:(1017): processing ID payload. message ID = 3495333 650 *Feb 12 04:09:35.538: ISAKMP:(1017):No rtmx602#de 3495333650, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH *Feb 12 04:09:35.538: ISAKMP:(1017):Old State = IKE_QM_I_QM1 New State = IKE_QM _IPSEC_INSTALL_AWAIT *Feb 12 04:09:35.553: ISAKMP:(1017):Received IPSec Install callback... proceedin g with the negotiation *Feb 12 04:09:35.553: ISAKMP:(1017):Successfully installed IPSEC SA (SPI:0xB20F6 8E5) on Tunnel10012880 *Feb 12 04:09:35.553: ISAKMP:(1017): sending packet to 91.212.206.133 my_port 50 0 peer_port 500 (I) QM_IDLE *Feb 12 04:09:35.553: ISAKMP:( rtmx602#1017):Sending an IKE IPv4 Packet. *Feb 12 04:09:35.554: ISAKMP:(1017):deleting node 3495333650 error FALSE reason "No Error" *Feb 12 04:09:35.554: ISAKMP:(1017):Node 3495333650, Input = IKE_MESG_FROM_IPSEC , IPSEC_INSTALL_DONE *Feb 12 04:09:35.554: ISAKMP:(1017):Old State = IKE_QM_IPSEC_INSTALL_AWAIT New State = IKE_QM_PHASE2_COMPLETE rtmx602# *Feb 12 04:09:42.675: ISAKMP (1018): received packet from 91.212.206.134 dport 5 00 sport 500 Global (R) QM_IDLE *Feb 12 04:09:42.675: ISAKMP: set new node 4020696210 to QM_IDLE *Feb 12 04:09:42.675: ISAKMP:(1018): processing HASH payload. message ID = 40206 96210 *Feb 12 04:09:42.675: ISAKMP:(1018): processing SA payload. message ID = 4020696 210 *Feb 12 04:09:42.675: ISAKMP:(1018):Checking IPSec proposal 1 *Feb 12 04:09:42.675: ISAKMP: transform 1, ESP_AES *Feb 12 04:09:42.675: ISAKMP: rtmx602# attributes in transform: *Feb 12 04:09:42.675: ISAKMP: encaps is 1 (Tunnel) *Feb 12 04:09:42.675: ISAKMP: SA life type in seconds *Feb 12 04:09:42.675: ISAKMP: SA life duration (basic) of 3600 *Feb 12 04:09:42.675: ISAKMP: SA life type in kilobytes *Feb 12 04:09:42.675: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0 *Feb 12 04:09:42.676: ISAKMP: authenticator is HMAC-SHA *Feb 12 04:09:42.676: ISAKMP: key length is 256 *Feb 12 04:09:42.676: ISAKMP:(1018):a rtmx602#tts are acceptable. *Feb 12 04:09:42.676: ISAKMP:(1018): IPSec policy invalidated proposal with erro r 64 *Feb 12 04:09:42.681: ISAKMP:(1018): phase 2 SA policy not acceptable! (local 20 1.96.120.21 remote 91.212.206.134) *Feb 12 04:09:42.682: ISAKMP: set new node 3965544087 to QM_IDLE *Feb 12 04:09:42.682: ISAKMP:(1018):Sending NOTIFY PROPOSAL_NOT_CHOSEN protocol 3 spi 140314048881976, message ID = 3965544087 *Feb 12 04:09:42.682: ISAKMP:(1018): sending packet to 91.212.206.134 my_port 50 0 peer rtmx602#_port 500 (R) QM_IDLE *Feb 12 04:09:42.682: ISAKMP:(1018):Sending an IKE IPv4 Packet. *Feb 12 04:09:42.682: ISAKMP:(1018):purging node 3965544087 *Feb 12 04:09:42.682: ISAKMP:(1018):deleting node 4020696210 error TRUE reason " QM rejected" *Feb 12 04:09:42.684: ISAKMP:(1018):Node 4020696210, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH *Feb 12 04:09:42.684: ISAKMP:(1018):Old State = IKE_QM_READY New State = IKE_QM _READY rtmx602# *Feb 12 04:09:52.571: ISAKMP:(1017):purging node 2867998265 rtmx602# *Feb 12 04:09:55.552: ISAKMP:(1017):purging node 389860106 rtmx602# *Feb 12 04:10:02.238: ISAKMP:(1018):purging node 798727740 rtmx602# *Feb 12 04:10:05.759: ISAKMP: set new node 0 to QM_IDLE *Feb 12 04:10:05.760: SA has outstanding requests (local 201.96.120.21 port 500 , remote 91.212.206.133 port 500) *Feb 12 04:10:05.760: ISAKMP:(1017): sitting IDLE. Starting QM immediately (QM_I DLE ) *Feb 12 04:10:05.760: ISAKMP:(1017):beginning Quick Mode exchange, M-ID of 26968 47117 *Feb 12 04:10:05.760: ISAKMP:(1017):QM Initiator gets spi *Feb 12 04:10:05.760: ISAKMP:(1017): sending packet to 91.212.206.133 my_port 50 0 peer_port 5 rtmx602#00 (I) QM_IDLE *Feb 12 04:10:05.760: ISAKMP:(1017):Sending an IKE IPv4 Packet. *Feb 12 04:10:05.760: ISAKMP:(1017):Node 2696847117, Input = IKE_MESG_INTERNAL, IKE_INIT_QM *Feb 12 04:10:05.760: ISAKMP:(1017):Old State = IKE_QM_READY New State = IKE_QM _I_QM1 *Feb 12 04:10:05.961: ISAKMP (1017): received packet from 91.212.206.133 dport 5 00 sport 500 Global (I) QM_IDLE *Feb 12 04:10:05.961: ISAKMP:(1017): processing HASH payload. message ID = 26968 47117 *Feb 12 04:10:05.961: ISAKMP:(1017): rtmx602#processing SA payload. message ID = 2696847117 *Feb 12 04:10:05.961: ISAKMP:(1017):Checking IPSec proposal 1 *Feb 12 04:10:05.961: ISAKMP: transform 1, ESP_AES *Feb 12 04:10:05.961: ISAKMP: attributes in transform: *Feb 12 04:10:05.961: ISAKMP: encaps is 1 (Tunnel) *Feb 12 04:10:05.961: ISAKMP: SA life type in seconds *Feb 12 04:10:05.961: ISAKMP: SA life duration (basic) of 3600 *Feb 12 04:10:05.961: ISAKMP: SA life type in kilobytes *Feb 12 04:10:05.961: ISAKMP: SA lif rtmx602#e duration (VPI) of 0x0 0x46 0x50 0x0 *Feb 12 04:10:05.961: ISAKMP: authenticator is HMAC-SHA *Feb 12 04:10:05.961: ISAKMP: key length is 256 *Feb 12 04:10:05.962: ISAKMP:(1017):atts are acceptable. *Feb 12 04:10:05.962: ISAKMP:(1017): processing NONCE payload. message ID = 2696 847117 *Feb 12 04:10:05.962: ISAKMP:(1017): processing ID payload. message ID = 2696847 117 *Feb 12 04:10:05.962: ISAKMP:(1017): processing ID payload. message ID = 2696847 117 *Feb 12 04:10:05.962: ISAKMP:(1017):No rtmx602#de 2696847117, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH *Feb 12 04:10:05.962: ISAKMP:(1017):Old State = IKE_QM_I_QM1 New State = IKE_QM _IPSEC_INSTALL_AWAIT *Feb 12 04:10:05.976: ISAKMP:(1017):Received IPSec Install callback... proceedin g with the negotiation *Feb 12 04:10:05.976: ISAKMP:(1017):Successfully installed IPSEC SA (SPI:0x22E85 C4E) on Tunnel10012880 *Feb 12 04:10:05.977: ISAKMP:(1017): sending packet to 91.212.206.133 my_port 50 0 peer_port 500 (I) QM_IDLE *Feb 12 04:10:05.977: ISAKMP:( rtmx602#1017):Sending an IKE IPv4 Packet. *Feb 12 04:10:05.977: ISAKMP:(1017):deleting node 2696847117 error FALSE reason "No Error" *Feb 12 04:10:05.977: ISAKMP:(1017):Node 2696847117, Input = IKE_MESG_FROM_IPSEC , IPSEC_INSTALL_DONE *Feb 12 04:10:05.977: ISAKMP:(1017):Old State = IKE_QM_IPSEC_INSTALL_AWAIT New State = IKE_QM_PHASE2_COMPLETE rtmx602# *Feb 12 04:10:12.676: ISAKMP (1018): received packet from 91.212.206.134 dport 5 00 sport 500 Global (R) QM_IDLE *Feb 12 04:10:12.676: ISAKMP: set new node 866477282 to QM_IDLE *Feb 12 04:10:12.676: ISAKMP:(1018): processing HASH payload. message ID = 86647 7282 *Feb 12 04:10:12.676: ISAKMP:(1018): processing SA payload. message ID = 8664772 82 *Feb 12 04:10:12.676: ISAKMP:(1018):Checking IPSec proposal 1 *Feb 12 04:10:12.676: ISAKMP: transform 1, ESP_AES *Feb 12 04:10:12.676: ISAKMP: a rtmx602#ttributes in transform: *Feb 12 04:10:12.676: ISAKMP: encaps is 1 (Tunnel) *Feb 12 04:10:12.676: ISAKMP: SA life type in seconds *Feb 12 04:10:12.676: ISAKMP: SA life duration (basic) of 3600 *Feb 12 04:10:12.676: ISAKMP: SA life type in kilobytes *Feb 12 04:10:12.676: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0 *Feb 12 04:10:12.676: ISAKMP: authenticator is HMAC-SHA *Feb 12 04:10:12.676: ISAKMP: key length is 256 *Feb 12 04:10:12.676: ISAKMP:(1018):atts rtmx602# are acceptable. *Feb 12 04:10:12.677: ISAKMP:(1018): IPSec policy invalidated proposal with erro r 64 *Feb 12 04:10:12.682: ISAKMP:(1018): phase 2 SA policy not acceptable! (local 20 1.96.120.21 remote 91.212.206.134) *Feb 12 04:10:12.682: ISAKMP: set new node 141677746 to QM_IDLE *Feb 12 04:10:12.682: ISAKMP:(1018):Sending NOTIFY PROPOSAL_NOT_CHOSEN protocol 3 spi 140314048881976, message ID = 141677746 *Feb 12 04:10:12.682: ISAKMP:(1018): sending packet to 91.212.206.134 my_port 50 0 peer_port rtmx602# 500 (R) QM_IDLE *Feb 12 04:10:12.682: ISAKMP:(1018):Sending an IKE IPv4 Packet. *Feb 12 04:10:12.683: ISAKMP:(1018):purging node 141677746 *Feb 12 04:10:12.683: ISAKMP:(1018):deleting node 866477282 error TRUE reason "Q M rejected" *Feb 12 04:10:12.685: ISAKMP:(1018):Node 866477282, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH *Feb 12 04:10:12.685: ISAKMP:(1018):Old State = IKE_QM_READY New State = IKE_QM _READY rtmx602# *Feb 12 04:10:15.615: ISAKMP:(1017):purging node 3312572941 rtmx602# *Feb 12 04:10:25.554: ISAKMP:(1017):purging node 3495333650 *Feb 12 04:10:25.732: ISAKMP: set new node 2280361827 to QM_IDLE *Feb 12 04:10:25.732: ISAKMP:(1017): sending packet to 91.212.206.133 my_port 50 0 peer_port 500 (I) QM_IDLE *Feb 12 04:10:25.732: ISAKMP:(1017):Sending an IKE IPv4 Packet. *Feb 12 04:10:25.732: ISAKMP:(1017):purging node 2280361827 *Feb 12 04:10:25.733: ISAKMP:(1017):Input = IKE_MESG_FROM_IPSEC, IKE_PHASE2_DEL *Feb 12 04:10:25.733: ISAKMP:(1017):Old State = IKE_P1 rtmx602#_COMPLETE New State = IKE_P1_COMPLETE rtmx602# *Feb 12 04:10:31.877: ISAKMP: set new node 3915796821 to QM_IDLE *Feb 12 04:10:31.877: ISAKMP:(1017): sending packet to 91.212.206.133 my_port 50 0 peer_port 500 (I) QM_IDLE *Feb 12 04:10:31.877: ISAKMP:(1017):Sending an IKE IPv4 Packet. *Feb 12 04:10:31.877: ISAKMP:(1017):purging node 3915796821 *Feb 12 04:10:31.877: ISAKMP:(1017):Input = IKE_MESG_FROM_IPSEC, IKE_PHASE2_DEL *Feb 12 04:10:31.878: ISAKMP:(1017):Old State = IKE_P1_COMPLETE New State = IKE _P1_COMPLETE *Feb 12 04:10:32.6 rtmx602#82: ISAKMP:(1018):purging node 4020696210 rtmx602# *Feb 12 04:10:35.759: ISAKMP: set new node 0 to QM_IDLE *Feb 12 04:10:35.760: SA has outstanding requests (local 201.96.120.21 port 500 , remote 91.212.206.133 port 500) *Feb 12 04:10:35.760: ISAKMP:(1017): sitting IDLE. Starting QM immediately (QM_I DLE ) *Feb 12 04:10:35.760: ISAKMP:(1017):beginning Quick Mode exchange, M-ID of 78764 5026 *Feb 12 04:10:35.760: ISAKMP:(1017):QM Initiator gets spi *Feb 12 04:10:35.760: ISAKMP:(1017): sending packet to 91.212.206.133 my_port 50 0 peer_port 50 rtmx602#0 (I) QM_IDLE *Feb 12 04:10:35.760: ISAKMP:(1017):Sending an IKE IPv4 Packet. *Feb 12 04:10:35.760: ISAKMP:(1017):Node 787645026, Input = IKE_MESG_INTERNAL, I KE_INIT_QM *Feb 12 04:10:35.760: ISAKMP:(1017):Old State = IKE_QM_READY New State = IKE_QM _I_QM1 *Feb 12 04:10:35.961: ISAKMP (1017): received packet from 91.212.206.133 dport 5 00 sport 500 Global (I) QM_IDLE *Feb 12 04:10:35.961: ISAKMP:(1017): processing HASH payload. message ID = 78764 5026 *Feb 12 04:10:35.961: ISAKMP:(1017): pro rtmx602#cessing SA payload. message ID = 787645026 *Feb 12 04:10:35.961: ISAKMP:(1017):Checking IPSec proposal 1 *Feb 12 04:10:35.961: ISAKMP: transform 1, ESP_AES *Feb 12 04:10:35.961: ISAKMP: attributes in transform: *Feb 12 04:10:35.961: ISAKMP: encaps is 1 (Tunnel) *Feb 12 04:10:35.961: ISAKMP: SA life type in seconds *Feb 12 04:10:35.961: ISAKMP: SA life duration (basic) of 3600 *Feb 12 04:10:35.961: ISAKMP: SA life type in kilobytes *Feb 12 04:10:35.961: ISAKMP: SA life du rtmx602#ration (VPI) of 0x0 0x46 0x50 0x0 *Feb 12 04:10:35.961: ISAKMP: authenticator is HMAC-SHA *Feb 12 04:10:35.961: ISAKMP: key length is 256 *Feb 12 04:10:35.961: ISAKMP:(1017):atts are acceptable. *Feb 12 04:10:35.961: ISAKMP:(1017): processing NONCE payload. message ID = 7876 45026 *Feb 12 04:10:35.961: ISAKMP:(1017): processing ID payload. message ID = 7876450 26 *Feb 12 04:10:35.961: ISAKMP:(1017): processing ID payload. message ID = 7876450 26 *Feb 12 04:10:35.962: ISAKMP:(1017):Node 7876 rtmx602#45026, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH *Feb 12 04:10:35.962: ISAKMP:(1017):Old State = IKE_QM_I_QM1 New State = IKE_QM _IPSEC_INSTALL_AWAIT *Feb 12 04:10:35.976: ISAKMP:(1017):Received IPSec Install callback... proceedin g with the negotiation *Feb 12 04:10:35.976: ISAKMP:(1017):Successfully installed IPSEC SA (SPI:0x4A8D9 2F0) on Tunnel10012880 *Feb 12 04:10:35.976: ISAKMP:(1017): sending packet to 91.212.206.133 my_port 50 0 peer_port 500 (I) QM_IDLE *Feb 12 04:10:35.976: ISAKMP:(1017):Se rtmx602#nding an IKE IPv4 Packet. *Feb 12 04:10:35.976: ISAKMP:(1017):deleting node 787645026 error FALSE reason " No Error" *Feb 12 04:10:35.976: ISAKMP:(1017):Node 787645026, Input = IKE_MESG_FROM_IPSEC, IPSEC_INSTALL_DONE *Feb 12 04:10:35.976: ISAKMP:(1017):Old State = IKE_QM_IPSEC_INSTALL_AWAIT New State = IKE_QM_PHASE2_COMPLETE rtmx602# *Feb 12 04:10:43.100: ISAKMP (1018): received packet from 91.212.206.134 dport 5 00 sport 500 Global (R) QM_IDLE *Feb 12 04:10:43.100: ISAKMP: set new node 436394947 to QM_IDLE *Feb 12 04:10:43.100: ISAKMP:(1018): processing HASH payload. message ID = 43639 4947 *Feb 12 04:10:43.100: ISAKMP:(1018): processing SA payload. message ID = 4363949 47 *Feb 12 04:10:43.100: ISAKMP:(1018):Checking IPSec proposal 1 *Feb 12 04:10:43.100: ISAKMP: transform 1, ESP_AES *Feb 12 04:10:43.100: ISAKMP: a rtmx602#ttributes in transform: *Feb 12 04:10:43.100: ISAKMP: encaps is 1 (Tunnel) *Feb 12 04:10:43.100: ISAKMP: SA life type in seconds *Feb 12 04:10:43.100: ISAKMP: SA life duration (basic) of 3600 *Feb 12 04:10:43.100: ISAKMP: SA life type in kilobytes *Feb 12 04:10:43.100: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0 *Feb 12 04:10:43.100: ISAKMP: authenticator is HMAC-SHA *Feb 12 04:10:43.100: ISAKMP: key length is 256 *Feb 12 04:10:43.100: ISAKMP:(1018):atts rtmx602# are acceptable. *Feb 12 04:10:43.101: ISAKMP:(1018): IPSec policy invalidated proposal with erro r 64 *Feb 12 04:10:43.106: ISAKMP:(1018): phase 2 SA policy not acceptable! (local 20 1.96.120.21 remote 91.212.206.134) *Feb 12 04:10:43.106: ISAKMP: set new node 275068610 to QM_IDLE *Feb 12 04:10:43.106: ISAKMP:(1018):Sending NOTIFY PROPOSAL_NOT_CHOSEN protocol 3 spi 140314048881976, message ID = 275068610 *Feb 12 04:10:43.106: ISAKMP:(1018): sending packet to 91.212.206.134 my_port 50 0 peer_port rtmx602# 500 (R) QM_IDLE *Feb 12 04:10:43.106: ISAKMP:(1018):Sending an IKE IPv4 Packet. *Feb 12 04:10:43.107: ISAKMP:(1018):purging node 275068610 *Feb 12 04:10:43.107: ISAKMP:(1018):deleting node 436394947 error TRUE reason "Q M rejected" *Feb 12 04:10:43.109: ISAKMP:(1018):Node 436394947, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH *Feb 12 04:10:43.109: ISAKMP:(1018):Old State = IKE_QM_READY New State = IKE_QM _READY *Feb 12 04:10:44.682: ISAKMP: set new node 4064344550 to QM_IDLE *Feb 12 04:10:44 rtmx602#.682: ISAKMP:(1017): sending packet to 91.212.206.133 my_port 500 peer_p ort 500 (I) QM_IDLE *Feb 12 04:10:44.682: ISAKMP:(1017):Sending an IKE IPv4 Packet. *Feb 12 04:10:44.682: ISAKMP:(1017):purging node 4064344550 *Feb 12 04:10:44.682: ISAKMP:(1017):Input = IKE_MESG_FROM_IPSEC, IKE_PHASE2_DEL *Feb 12 04:10:44.682: ISAKMP:(1017):Old State = IKE_P1_COMPLETE New State = IKE _P1_COMPLETE rtmx602# *Feb 12 04:10:54.412: ISAKMP: set new node 40078045 to QM_IDLE *Feb 12 04:10:54.413: ISAKMP:(1017): sending packet to 91.212.206.133 my_port 50 0 peer_port 500 (I) QM_IDLE *Feb 12 04:10:54.413: ISAKMP:(1017):Sending an IKE IPv4 Packet. *Feb 12 04:10:54.413: ISAKMP:(1017):purging node 40078045 *Feb 12 04:10:54.413: ISAKMP:(1017):Input = IKE_MESG_FROM_IPSEC, IKE_PHASE2_DEL *Feb 12 04:10:54.413: ISAKMP:(1017):Old State = IKE_P1_COMPLETE New State = IKE _P1_COMPLETE rtmx602# *Feb 12 04:10:55.977: ISAKMP:(1017):purging node 2696847117 rtmx602# *Feb 12 04:11:02.683: ISAKMP:(1018):purging node 866477282 rtmx602# *Feb 12 04:11:06.188: ISAKMP: set new node 0 to QM_IDLE *Feb 12 04:11:06.188: SA has outstanding requests (local 201.96.120.21 port 500 , remote 91.212.206.133 port 500) *Feb 12 04:11:06.188: ISAKMP:(1017): sitting IDLE. Starting QM immediately (QM_I DLE ) *Feb 12 04:11:06.188: ISAKMP:(1017):beginning Quick Mode exchange, M-ID of 21952 26903 *Feb 12 04:11:06.188: ISAKMP:(1017):QM Initiator gets spi *Feb 12 04:11:06.188: ISAKMP:(1017): sending packet to 91.212.206.133 my_port 50 0 peer_port 5 rtmx602#00 (I) QM_IDLE *Feb 12 04:11:06.188: ISAKMP:(1017):Sending an IKE IPv4 Packet. *Feb 12 04:11:06.189: ISAKMP:(1017):Node 2195226903, Input = IKE_MESG_INTERNAL, IKE_INIT_QM *Feb 12 04:11:06.189: ISAKMP:(1017):Old State = IKE_QM_READY New State = IKE_QM _I_QM1 *Feb 12 04:11:06.389: ISAKMP (1017): received packet from 91.212.206.133 dport 5 00 sport 500 Global (I) QM_IDLE *Feb 12 04:11:06.389: ISAKMP:(1017): processing HASH payload. message ID = 21952 26903 *Feb 12 04:11:06.389: ISAKMP:(1017): rtmx602#processing SA payload. message ID = 2195226903 *Feb 12 04:11:06.389: ISAKMP:(1017):Checking IPSec proposal 1 *Feb 12 04:11:06.389: ISAKMP: transform 1, ESP_AES *Feb 12 04:11:06.389: ISAKMP: attributes in transform: *Feb 12 04:11:06.389: ISAKMP: encaps is 1 (Tunnel) *Feb 12 04:11:06.389: ISAKMP: SA life type in seconds *Feb 12 04:11:06.389: ISAKMP: SA life duration (basic) of 3600 *Feb 12 04:11:06.389: ISAKMP: SA life type in kilobytes *Feb 12 04:11:06.389: ISAKMP: SA lif rtmx602#e duration (VPI) of 0x0 0x46 0x50 0x0 *Feb 12 04:11:06.389: ISAKMP: authenticator is HMAC-SHA *Feb 12 04:11:06.389: ISAKMP: key length is 256 *Feb 12 04:11:06.389: ISAKMP:(1017):atts are acceptable. *Feb 12 04:11:06.389: ISAKMP:(1017): processing NONCE payload. message ID = 2195 226903 *Feb 12 04:11:06.389: ISAKMP:(1017): processing ID payload. message ID = 2195226 903 *Feb 12 04:11:06.389: ISAKMP:(1017): processing ID payload. message ID = 2195226 903 *Feb 12 04:11:06.389: ISAKMP:(1017):No rtmx602#de 2195226903, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH *Feb 12 04:11:06.389: ISAKMP:(1017):Old State = IKE_QM_I_QM1 New State = IKE_QM _IPSEC_INSTALL_AWAIT *Feb 12 04:11:06.406: ISAKMP:(1017):Received IPSec Install callback... proceedin g with the negotiation *Feb 12 04:11:06.406: ISAKMP:(1017):Successfully installed IPSEC SA (SPI:0x8BF68 04E) on Tunnel10012880 *Feb 12 04:11:06.406: ISAKMP:(1017): sending packet to 91.212.206.133 my_port 50 0 peer_port 500 (I) QM_IDLE *Feb 12 04:11:06.406: ISAKMP:( rtmx602#1017):Sending an IKE IPv4 Packet. *Feb 12 04:11:06.406: ISAKMP:(1017):deleting node 2195226903 error FALSE reason "No Error" *Feb 12 04:11:06.406: ISAKMP:(1017):Node 2195226903, Input = IKE_MESG_FROM_IPSEC , IPSEC_INSTALL_DONE *Feb 12 04:11:06.406: ISAKMP:(1017):Old State = IKE_QM_IPSEC_INSTALL_AWAIT New State = IKE_QM_PHASE2_COMPLETE rtmx602# *Feb 12 04:11:13.100: ISAKMP (1018): received packet from 91.212.206.134 dport 5 00 sport 500 Global (R) QM_IDLE *Feb 12 04:11:13.100: ISAKMP: set new node 3255287106 to QM_IDLE *Feb 12 04:11:13.101: ISAKMP:(1018): processing HASH payload. message ID = 32552 87106 *Feb 12 04:11:13.101: ISAKMP:(1018): processing SA payload. message ID = 3255287 106 *Feb 12 04:11:13.101: ISAKMP:(1018):Checking IPSec proposal 1 *Feb 12 04:11:13.101: ISAKMP: transform 1, ESP_AES *Feb 12 04:11:13.101: ISAKMP: rtmx602# attributes in transform: *Feb 12 04:11:13.101: ISAKMP: encaps is 1 (Tunnel) *Feb 12 04:11:13.101: ISAKMP: SA life type in seconds *Feb 12 04:11:13.101: ISAKMP: SA life duration (basic) of 3600 *Feb 12 04:11:13.101: ISAKMP: SA life type in kilobytes *Feb 12 04:11:13.101: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0 *Feb 12 04:11:13.101: ISAKMP: authenticator is HMAC-SHA *Feb 12 04:11:13.101: ISAKMP: key length is 256 *Feb 12 04:11:13.101: ISAKMP:(1018):a rtmx602#tts are acceptable. *Feb 12 04:11:13.101: ISAKMP:(1018): IPSec policy invalidated proposal with erro r 64 *Feb 12 04:11:13.107: ISAKMP:(1018): phase 2 SA policy not acceptable! (local 20 1.96.120.21 remote 91.212.206.134) *Feb 12 04:11:13.107: ISAKMP: set new node 3547103395 to QM_IDLE *Feb 12 04:11:13.107: ISAKMP:(1018):Sending NOTIFY PROPOSAL_NOT_CHOSEN protocol 3 spi 140314048881976, message ID = 3547103395 *Feb 12 04:11:13.107: ISAKMP:(1018): sending packet to 91.212.206.134 my_port 50 0 peer rtmx602#_port 500 (R) QM_IDLE *Feb 12 04:11:13.107: ISAKMP:(1018):Sending an IKE IPv4 Packet. *Feb 12 04:11:13.107: ISAKMP:(1018):purging node 3547103395 *Feb 12 04:11:13.107: ISAKMP:(1018):deleting node 3255287106 error TRUE reason " QM rejected" *Feb 12 04:11:13.110: ISAKMP:(1018):Node 3255287106, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH *Feb 12 04:11:13.110: ISAKMP:(1018):Old State = IKE_QM_READY New State = IKE_QM _READY *Feb 12 04:11:14.384: ISAKMP: set new node 1778900490 to QM_IDLE *Feb 12 rtmx602#04:11:14.384: ISAKMP:(1017): sending packet to 91.212.206.133 my_port 50 0 peer_port 500 (I) QM_IDLE *Feb 12 04:11:14.384: ISAKMP:(1017):Sending an IKE IPv4 Packet. *Feb 12 04:11:14.384: ISAKMP:(1017):purging node 1778900490 *Feb 12 04:11:14.384: ISAKMP:(1017):Input = IKE_MESG_FROM_IPSEC, IKE_PHASE2_DEL *Feb 12 04:11:14.384: ISAKMP:(1017):Old State = IKE_P1_COMPLETE New State = IKE _P1_COMPLETE rtmx602# *Feb 12 04:11:25.976: ISAKMP:(1017):purging node 787645026 rtmx602# *Feb 12 04:11:33.107: ISAKMP:(1018):purging node 436394947 rtmx602# *Feb 12 04:11:36.188: ISAKMP: set new node 0 to QM_IDLE *Feb 12 04:11:36.188: SA has outstanding requests (local 201.96.120.21 port 500 , remote 91.212.206.133 port 500) *Feb 12 04:11:36.188: ISAKMP:(1017): sitting IDLE. Starting QM immediately (QM_I DLE ) *Feb 12 04:11:36.188: ISAKMP:(1017):beginning Quick Mode exchange, M-ID of 41028 21298 *Feb 12 04:11:36.188: ISAKMP:(1017):QM Initiator gets spi *Feb 12 04:11:36.188: ISAKMP:(1017): sending packet to 91.212.206.133 my_port 50 0 peer_port 5 rtmx602#00 (I) QM_IDLE *Feb 12 04:11:36.188: ISAKMP:(1017):Sending an IKE IPv4 Packet. *Feb 12 04:11:36.188: ISAKMP:(1017):Node 4102821298, Input = IKE_MESG_INTERNAL, IKE_INIT_QM *Feb 12 04:11:36.188: ISAKMP:(1017):Old State = IKE_QM_READY New State = IKE_QM _I_QM1 *Feb 12 04:11:36.389: ISAKMP (1017): received packet from 91.212.206.133 dport 5 00 sport 500 Global (I) QM_IDLE *Feb 12 04:11:36.389: ISAKMP:(1017): processing HASH payload. message ID = 41028 21298 *Feb 12 04:11:36.389: ISAKMP:(1017): rtmx602#processing SA payload. message ID = 4102821298 *Feb 12 04:11:36.389: ISAKMP:(1017):Checking IPSec proposal 1 *Feb 12 04:11:36.389: ISAKMP: transform 1, ESP_AES *Feb 12 04:11:36.389: ISAKMP: attributes in transform: *Feb 12 04:11:36.389: ISAKMP: encaps is 1 (Tunnel) *Feb 12 04:11:36.389: ISAKMP: SA life type in seconds *Feb 12 04:11:36.389: ISAKMP: SA life duration (basic) of 3600 *Feb 12 04:11:36.389: ISAKMP: SA life type in kilobytes *Feb 12 04:11:36.389: ISAKMP: SA lif rtmx602#e duration (VPI) of 0x0 0x46 0x50 0x0 *Feb 12 04:11:36.389: ISAKMP: authenticator is HMAC-SHA *Feb 12 04:11:36.389: ISAKMP: key length is 256 *Feb 12 04:11:36.389: ISAKMP:(1017):atts are acceptable. *Feb 12 04:11:36.389: ISAKMP:(1017): processing NONCE payload. message ID = 4102 821298 *Feb 12 04:11:36.389: ISAKMP:(1017): processing ID payload. message ID = 4102821 298 *Feb 12 04:11:36.389: ISAKMP:(1017): processing ID payload. message ID = 4102821 298 *Feb 12 04:11:36.389: ISAKMP:(1017):No rtmx602#de 4102821298, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH *Feb 12 04:11:36.390: ISAKMP:(1017):Old State = IKE_QM_I_QM1 New State = IKE_QM _IPSEC_INSTALL_AWAIT *Feb 12 04:11:36.405: ISAKMP:(1017):Received IPSec Install callback... proceedin g with the negotiation *Feb 12 04:11:36.405: ISAKMP:(1017):Successfully installed IPSEC SA (SPI:0x34A4A D9) on Tunnel10012880 *Feb 12 04:11:36.405: ISAKMP:(1017): sending packet to 91.212.206.133 my_port 50 0 peer_port 500 (I) QM_IDLE *Feb 12 04:11:36.405: ISAKMP:(1 rtmx602#un 017):Sending an IKE IPv4 Packet. *Feb 12 04:11:36.405: ISAKMP:(1017):deleting node 4102821298 error FALSE reason "No Error" *Feb 12 04:11:36.405: ISAKMP:(1017):Node 4102821298, Input = IKE_MESG_FROM_IPSEC , IPSEC_INSTALL_DONE *Feb 12 04:11:36.405: ISAKMP:(1017):Old State = IKE_QM_IPSEC_INSTALL_AWAIT New State = IKE_QM_PHASE2_COMPLETE rtmx602#un all Turned off crypto conditional debug. All possible debugging has been turned off rtmx602#