Mar 11 15:33:04.979: ISAKMP:(0): SA request profile is (NULL) Mar 11 15:33:04.979: ISAKMP: Created a peer struct for 45.X.X.X, peer port 500 Mar 11 15:33:04.979: ISAKMP: New peer created peer = 0x31BC64F4 peer_handle = 0x80000002 Mar 11 15:33:04.979: ISAKMP: Locking peer struct 0x31BC64F4, refcount 1 for isakmp_initiator Mar 11 15:33:04.979: ISAKMP: local port 500, remote port 500 Mar 11 15:33:04.979: ISAKMP: set new node 0 to QM_IDLE Mar 11 15:33:04.979: ISAKMP:(0):insert sa successfully sa = 31BC4174 Mar 11 15:33:04.979: ISAKMP:(0):Can not start Aggressive mode, trying Main mode. Mar 11 15:33:04.979: ISAKMP:(0):found peer pre-shared key matching 45.X.X.X Mar 11 15:33:04.979: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID Mar 11 15:33:04.979: ISAKMP:(0): constructed NAT-T vendor-07 ID Mar 11 15:33:04.979: ISAKMP:(0): constructed NAT-T vendor-03 ID Mar 11 15:33:04.979: ISAKMP:(0): constructed NAT-T vendor-02 ID Mar 11 15:33:04.979: ISAKMP:(0):Input = IKE_MESG_FROM_IPSEC, IK.E_SA_REQ_MM Mar 11 15:33:04.979: ISAKMP:(0):Old State = IKE_READY New State = IKE_I_MM1 Mar 11 15:33:04.979: ISAKMP:(0): beginning Main Mode exchange Mar 11 15:33:04.979: ISAKMP:(0): sending packet to 45.X.X.X my_port 500 peer_port 500 (I) MM_NO_STATE Mar 11 15:33:04.979: ISAKMP:(0):Sending an IKE IPv4 Packet. Mar 11 15:33:04.987: ISAKMP (0): received packet from 45.X.X.X dport 500 sport 500 Global (I) MM_NO_STATE Mar 11 15:33:04.987: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH Mar 11 15:33:04.987: ISAKMP:(0):Old State = IKE_I_MM1 New State = IKE_I_MM2 Mar 11 15:33:04.987: ISAKMP:(0): processing SA payload. message ID = 0 Mar 11 15:33:04.987: ISAKMP:(0): processing vendor id payload Mar 11 15:33:04.987: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch Mar 11 15:33:04.987: ISAKMP (0): vendor ID is NAT-T RFC 3947 Mar 11 15:33:04.987: ISAKMP:(0):found peer pre-shared key matching 45.X.X.X Mar 11 15:33:04.987: ISAKMP:(0): local preshared key found Mar 11. 15:33:04.987: ISAKMP : Scanning profiles for xauth ... Mar 11 15:33:04.987: ISAKMP:(0):Checking ISAKMP transform 1 against priority 1 policy Mar 11 15:33:04.987: ISAKMP: encryption 3DES-CBC Mar 11 15:33:04.987: ISAKMP: hash MD5 Mar 11 15:33:04.987: ISAKMP: default group 2 Mar 11 15:33:04.987: ISAKMP: auth pre-share Mar 11 15:33:04.987: ISAKMP: life type in seconds Mar 11 15:33:04.987: ISAKMP: life duration (VPI) of 0x0 0x1 0x51 0x80 Mar 11 15:33:04.987: ISAKMP:(0):atts are acceptable. Next payload is 0 Mar 11 15:33:04.987: ISAKMP:(0):Acceptable atts:actual life: 0 Mar 11 15:33:04.987: ISAKMP:(0):Acceptable atts:life: 0 Mar 11 15:33:04.987: ISAKMP:(0):Fill atts in sa vpi_length:4 Mar 11 15:33:04.987: ISAKMP:(0):Fill atts in sa life_in_seconds:86400 Mar 11 15:33:04.987: ISAKMP:(0):Returning Actual lifetime: 86400 Mar 11 15:33:04.987: ISAKMP:(0)::Started lifetime timer: 86400. Mar 11 15:33:05.003: ISAKMP:(0): processing vendor id payload Mar 11 15:33:05.003: I.SAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch Mar 11 15:33:05.007: ISAKMP (0): vendor ID is NAT-T RFC 3947 Mar 11 15:33:05.007: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE Mar 11 15:33:05.007: ISAKMP:(0):Old State = IKE_I_MM2 New State = IKE_I_MM2 Mar 11 15:33:05.007: ISAKMP:(0): sending packet to 45.X.X.X my_port 500 peer_port 500 (I) MM_SA_SETUP Mar 11 15:33:05.007: ISAKMP:(0):Sending an IKE IPv4 Packet. Mar 11 15:33:05.007: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE Mar 11 15:33:05.007: ISAKMP:(0):Old State = IKE_I_MM2 New State = IKE_I_MM3 Mar 11 15:33:05.031: ISAKMP (0): received packet from 45.X.X.X dport 500 sport 500 Global (I) MM_SA_SETUP Mar 11 15:33:05.031: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH Mar 11 15:33:05.031: ISAKMP:(0):Old State = IKE_I_MM3 New State = IKE_I_MM4 Mar 11 15:33:05.031: ISAKMP:(0): processing KE payload. message ID = 0 Mar 11 15:33:05.055: ISAKMP:(0): processing NONCE payload. message. ID = 0 Mar 11 15:33:05.055: ISAKMP:(0):found peer pre-shared key matching 45.X.X.X Mar 11 15:33:05.055: ISAKMP:(1001): processing vendor id payload Mar 11 15:33:05.055: ISAKMP:(1001): vendor ID is Unity Mar 11 15:33:05.055: ISAKMP:(1001): processing vendor id payload Mar 11 15:33:05.055: ISAKMP:(1001): vendor ID is DPD Mar 11 15:33:05.055: ISAKMP:(1001): processing vendor id payload Mar 11 15:33:05.055: ISAKMP:(1001): speaking to another IOS box! Mar 11 15:33:05.055: ISAKMP:received payload type 20 Mar 11 15:33:05.055: ISAKMP (1001): NAT found, both nodes inside NAT Mar 11 15:33:05.055: ISAKMP:received payload type 20 Mar 11 15:33:05.055: ISAKMP (1001): My hash no match - this node inside NAT Mar 11 15:33:05.055: ISAKMP:(1001):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE Mar 11 15:33:05.055: ISAKMP:(1001):Old State = IKE_I_MM4 New State = IKE_I_MM4 Mar 11 15:33:05.059: ISAKMP:(1001):Send initial contact Mar 11 15:33:05.059: ISAKMP:(1001):SA is doing pre-shared key authenticati. Success rate is 0 percent (0/5) Router#on using id type ID_IPV4_ADDR Mar 11 15:33:05.059: ISAKMP (1001): ID payload next-payload : 8 type : 1 address : 10.213.100.99 protocol : 17 port : 0 length : 12 Mar 11 15:33:05.059: ISAKMP:(1001):Total payload length: 12 Mar 11 15:33:05.059: ISAKMP:(1001): sending packet to 45.X.X.X my_port 4500 peer_port 4500 (I) MM_KEY_EXCH Mar 11 15:33:05.059: ISAKMP:(1001):Sending an IKE IPv4 Packet. Mar 11 15:33:05.059: ISAKMP:(1001):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE Mar 11 15:33:05.059: ISAKMP:(1001):Old State = IKE_I_MM4 New State = IKE_I_MM5 Mar 11 15:33:05.063: ISAKMP (1001): received packet from 45.X.X.X dport 4500 sport 4500 Global (I) MM_KEY_EXCH Mar 11 15:33:05.063: ISAKMP:(1001): processing ID payload. message ID = 0 Mar 11 15:33:05.063: ISAKMP (1001): ID payload next-payload : 8 type : 1 address : 45.X.X.X protocol : 17 port : 0 length : 12 Mar 11 15:33:05.063: ISAKMP:(0):: peer matches *none* of the profiles Mar 11 15:33:05.063: ISAKMP:(1001): processing HASH payload. message ID = 0 Mar 11 15:33:05.063: ISAKMP:(1001):SA authentication status: authenticated Mar 11 15:33:05.063: ISAKMP:(1001):SA has been authenticated with 45.X.X.X Mar 11 15:33:05.063: ISAKMP:(1001):Setting UDP ENC peer struct 0x295405B4 sa= 0x31BC4174 Mar 11 15:33:05.063: ISAKMP: Trying to insert a peer 10.213.100.99/45.X.X.X/4500/, and inserted successfully 31BC64F4. Mar 11 15:33:05.063: ISAKMP:(1001):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH Mar 11 15:33:05.063: ISAKMP:(1001):Old State = IKE_I_MM5 New State = IKE_I_MM6 Mar 11 15:33:05.063: ISAKMP:(1001):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE Mar 11 15:33:05.063: ISAKMP:(1001):Old State = IKE_I_MM6 New State = IKE_I_MM6 Mar 11 15:33:05.063: ISAKMP:(1001):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE Mar 11 15:33:05.063: ISAKMP:(1001):Old State = IKE_I_MM6 New State = IKE_P1_COMPLETE Mar 11 15:33:05.063: ISAKMP:(1001):beginning Quick Mode exchange, M-ID of -332182705 Mar 11 15:33:05.063: ISAKMP:(1001):QM Initiator gets spi Mar 11 15:33:05.063: ISAKMP:(1001): sending packet to 45.X.X.X my_port 4500 peer_port 4500 (I) QM_IDLE Mar 11 15:33:05.063: ISAKMP:(1001):Sending an IKE IPv4 Packet. Mar 11 15:33:05.063: ISAKMP:(1001):Node -332182705, Input = IKE_MESG_INTERNAL, IKE_INIT_QM Mar 11 15:33:05.063: ISAKMP:(1001):Old State = IKE_QM_READY New State = IKE_QM_I_QM1 Mar 11 15:33:05.063: ISAKMP:(1001):Input = IKE_MESG_INTERNAL, IKE_PHASE1_COMPLETE Mar 11 15:33:05.063: ISAKMP:(1001):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE Mar 11 15:33:05.067: ISAKMP (1001): received packet from 45.X.X.X dport 4500 sport 4500 Global (I) QM_IDLE Mar 11 15:33:05.067: ISAKMP: set new node 1836216183 to QM_IDLE Mar 11 15:33:05.067: ISAKMP:(1001): processing HASH payload. message ID = 1836216183 Mar 11 15:33:05.067: ISAKMP:(1001): processing NOTIFY PROPOSAL_NOT_CHOSEN protocol 3 spi 2359388592, message ID = 1836216183, sa = 31BC4174 Mar 11 15:33:05.067: ISAKMP:(1001): deleting spi 2359388592 message ID = -332182705 Mar 11 15:33:05.067: ISAKMP:(1001):deleting node -332182705 error TRUE reason "Delete Larval" Mar 11 15:33:05.067: ISAKMP:(1001):deleting node 1836216183 error FALSE reason "Informational (in) state 1" Mar 11 15:33:05.067: ISAKMP:(1001):Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY Mar 11 15:33:05.067: ISAKMP:(1001):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE