*Jul 25 22:28:12.926: ISAKMP: set new node 0 to QM_IDLE *Jul 25 22:28:12.926: ISAKMP:(0):SA is still budding. Attached new ipsec request to it. (local 1.1.1.1, remote 2.2.2.2) *Jul 25 22:28:12.926: ISAKMP: Error while processing SA request: Failed to initialize SA *Jul 25 22:28:12.926: ISAKMP: Error while processing KMI message 0, error 2. *Jul 25 22:28:12.926: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE... *Jul 25 22:28:12.926: ISAKMP (0): incrementing error counter on sa, attempt 3 of 5: retransmit phase 1 *Jul 25 22:28:12.926: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE *Jul 25 22:28:12.926: ISAKMP:(0): sending packet to 2.2.2.2 my_port 500 peer_port 500 (I) MM_NO_STATE *Jul 25 22:28:12.926: ISAKMP:(0):Sending an IKE IPv4 Packet. *Jul 25 22:28:13.018: ISAKMP (0): received packet from 2.2.2.2 dport 500 sport 500 Global (I) MM_NO_STATE *Jul 25 22:28:13.018: ISAKMP:(0):Couldn't find node: message_id 3785787760 *Jul 25 22:28:13.018: ISAKMP (0): Unknown Input IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY: state = IKE_I_MM1 *Jul 25 22:28:13.018: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY *Jul 25 22:28:13.018: ISAKMP:(0):Old State = IKE_I_MM1 New State = IKE_I_MM1 *Jul 25 22:28:16.630: ISAKMP:(1028):purging node 1575536950 *Jul 25 22:28:22.926: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE... *Jul 25 22:28:22.926: ISAKMP (0): incrementing error counter on sa, attempt 4 of 5: retransmit phase 1 *Jul 25 22:28:22.926: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE *Jul 25 22:28:22.926: ISAKMP:(0): sending packet to 2.2.2.2 my_port 500 peer_port 500 (I) MM_NO_STATE *Jul 25 22:28:22.926: ISAKMP:(0):Sending an IKE IPv4 Packet. *Jul 25 22:28:22.998: ISAKMP (0): received packet from 2.2.2.2 dport 500 sport 500 Global (I) MM_NO_STATE *Jul 25 22:28:22.998: ISAKMP:(0):Couldn't find node: message_id 3726511620 *Jul 25 22:28:22.998: ISAKMP (0): Unknown Input IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY: state = IKE_I_MM1 *Jul 25 22:28:22.998: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY *Jul 25 22:28:22.998: ISAKMP:(0):Old State = IKE_I_MM1 New State = IKE_I_MM1 *Jul 25 22:28:31.646: ISAKMP:(0):purging node -1502230291 *Jul 25 22:28:31.646: ISAKMP:(0):purging node 525139381 *Jul 25 22:28:32.898: ISAKMP:(1028):purging node 1766374916 *Jul 25 22:28:32.926: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE... *Jul 25 22:28:32.926: ISAKMP (0): incrementing error counter on sa, attempt 5 of 5: retransmit phase 1 *Jul 25 22:28:32.926: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE *Jul 25 22:28:32.926: ISAKMP:(0): sending packet to 2.2.2.2 my_port 500 peer_port 500 (I) MM_NO_STATE *Jul 25 22:28:32.926: ISAKMP:(0):Sending an IKE IPv4 Packet. *Jul 25 22:28:32.998: ISAKMP (0): received packet from 2.2.2.2 dport 500 sport 500 Global (I) MM_NO_STATE *Jul 25 22:28:32.998: ISAKMP:(0):Couldn't find node: message_id 102984854 *Jul 25 22:28:32.998: ISAKMP (0): Unknown Input IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY: state = IKE_I_MM1 *Jul 25 22:28:32.998: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY *Jul 25 22:28:32.998: ISAKMP:(0):Old State = IKE_I_MM1 New State = IKE_I_MM1 *Jul 25 22:28:41.722: ISAKMP:(0):purging SA., sa=3DD525FC, delme=3DD525FC *Jul 25 22:28:42.926: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE... *Jul 25 22:28:42.926: ISAKMP:(0):peer does not do paranoid keepalives. *Jul 25 22:28:42.926: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (I) MM_NO_STATE (peer 2.2.2.2) *Jul 25 22:28:42.926: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (I) MM_NO_STATE (peer 2.2.2.2) *Jul 25 22:28:42.926: ISAKMP: Unlocking peer struct 0x3DD70918 for isadb_mark_sa_deleted(), count 0 *Jul 25 22:28:42.926: ISAKMP: Deleting peer node by peer_reap for 2.2.2.2: 3DD70918 *Jul 25 22:28:42.926: ISAKMP:(0):deleting node -671896729 error FALSE reason "IKE deleted" *Jul 25 22:28:42.926: ISAKMP:(0):deleting node -547137118 error FALSE reason "IKE deleted" *Jul 25 22:28:42.926: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL *Jul 25 22:28:42.926: ISAKMP:(0):Old State = IKE_I_MM1 New State = IKE_DEST_SA *Jul 25 22:28:44.906: ISAKMP:(0): SA request profile is (NULL) *Jul 25 22:28:44.906: ISAKMP: Created a peer struct for 2.2.2.2, peer port 500 *Jul 25 22:28:44.906: ISAKMP: New peer created peer = 0x3DD70918 peer_handle = 0x80000149 *Jul 25 22:28:44.906: ISAKMP: Locking peer struct 0x3DD70918, refcount 1 for isakmp_initiator *Jul 25 22:28:44.906: ISAKMP: local port 500, remote port 500 *Jul 25 22:28:44.906: ISAKMP: set new node 0 to QM_IDLE *Jul 25 22:28:44.906: ISAKMP: Find a dup sa in the avl tree during calling isadb_insert sa = 3DD5883C *Jul 25 22:28:44.906: ISAKMP:(0):Can not start Aggressive mode, trying Main mode. *Jul 25 22:28:44.906: ISAKMP:(0):found peer pre-shared key matching 2.2.2.2 *Jul 25 22:28:44.906: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID *Jul 25 22:28:44.906: ISAKMP:(0): constructed NAT-T vendor-07 ID *Jul 25 22:28:44.906: ISAKMP:(0): constructed NAT-T vendor-03 ID *Jul 25 22:28:44.906: ISAKMP:(0): constructed NAT-T vendor-02 ID *Jul 25 22:28:44.906: ISAKMP:(0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM *Jul 25 22:28:44.906: ISAKMP:(0):Old State = IKE_READY New State = IKE_I_MM1 *Jul 25 22:28:44.906: ISAKMP:(0): beginning Main Mode exchange *Jul 25 22:28:44.906: ISAKMP:(0): sending packet to 2.2.2.2 my_port 500 peer_port 500 (I) MM_NO_STATE *Jul 25 22:28:44.906: ISAKMP:(0):Sending an IKE IPv4 Packet. *Jul 25 22:28:44.978: ISAKMP (0): received packet from 2.2.2.2 dport 500 sport 500 Global (I) MM_NO_STATE *Jul 25 22:28:44.978: ISAKMP:(0):Couldn't find node: message_id 3087129111 *Jul 25 22:28:44.978: ISAKMP (0): Unknown Input IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY: state = IKE_I_MM1 *Jul 25 22:28:44.978: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY *Jul 25 22:28:44.978: ISAKMP:(0):Old State = IKE_I_MM1 New State = IKE_I_MM1 *Jul 25 22:28:44.978: %CRYPTO-6-IKMP_MODE_FAILURE: Processing of Informational mode failed with peer at 2.2.2.2 *Jul 25 22:28:46.626: ISAKMP:(1028):purging node 1648626982 *Jul 25 22:28:54.906: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE... *Jul 25 22:28:54.906: ISAKMP (0): incrementing error counter on sa, attempt 1 of 5: retransmit phase 1 *Jul 25 22:28:54.906: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE *Jul 25 22:28:54.906: ISAKMP:(0): sending packet to 2.2.2.2 my_port 500 peer_port 500 (I) MM_NO_STATE *Jul 25 22:28:54.906: ISAKMP:(0):Sending an IKE IPv4 Packet. *Jul 25 22:28:54.978: ISAKMP (0): received packet from 2.2.2.2 dport 500 sport 500 Global (I) MM_NO_STATE *Jul 25 22:28:54.978: ISAKMP:(0):Couldn't find node: message_id 2506110068 *Jul 25 22:28:54.978: ISAKMP (0): Unknown Input IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY: state = IKE_I_MM1 *Jul 25 22:28:54.978: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY *Jul 25 22:28:54.978: ISAKMP:(0):Old State = IKE_I_MM1 New State = IKE_I_MM1 *Jul 25 22:29:02.646: ISAKMP (1028): received packet from 189.147.254.88 dport 4500 sport 4500 Global (R) QM_IDLE *Jul 25 22:29:02.646: ISAKMP: set new node -555245481 to QM_IDLE *Jul 25 22:29:02.646: ISAKMP:(1028): processing HASH payload. message ID = 3739721815 *Jul 25 22:29:02.646: ISAKMP:(1028): processing SA payload. message ID = 3739721815 *Jul 25 22:29:02.646: ISAKMP:(1028):Checking IPSec proposal 1 *Jul 25 22:29:02.646: ISAKMP: transform 1, ESP_3DES *Jul 25 22:29:02.646: ISAKMP: attributes in transform: *Jul 25 22:29:02.646: ISAKMP: encaps is 3 (Tunnel-UDP) *Jul 25 22:29:02.646: ISAKMP: SA life type in seconds *Jul 25 22:29:02.646: ISAKMP: SA life duration (basic) of 3600 *Jul 25 22:29:02.646: ISAKMP: SA life type in kilobytes *Jul 25 22:29:02.646: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0 *Jul 25 22:29:02.646: ISAKMP: authenticator is HMAC-SHA *Jul 25 22:29:02.646: ISAKMP:(1028):atts are acceptable. *Jul 25 22:29:02.646: ISAKMP:(1028): IPSec policy invalidated proposal with error 64 *Jul 25 22:29:02.646: ISAKMP:(1028): phase 2 SA policy not acceptable! (local 1.1.1.1 remote 189.147.254.88) *Jul 25 22:29:02.646: ISAKMP: set new node -757372500 to QM_IDLE *Jul 25 22:29:02.646: ISAKMP:(1028):Sending NOTIFY PROPOSAL_NOT_CHOSEN protocol 3 spi 1020926768, message ID = 3537594796 *Jul 25 22:29:02.646: ISAKMP:(1028): sending packet to 189.147.254.88 my_port 4500 peer_port 4500 (R) QM_IDLE *Jul 25 22:29:02.646: ISAKMP:(1028):Sending an IKE IPv4 Packet. *Jul 25 22:29:02.646: ISAKMP:(1028):purging node -757372500 *Jul 25 22:29:02.646: ISAKMP:(1028):deleting node -555245481 error TRUE reason "QM rejected" *Jul 25 22:29:02.646: ISAKMP:(1028):Node 3739721815, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH *Jul 25 22:29:02.646: ISAKMP:(1028):Old State = IKE_QM_READY New State = IKE_QM_READY *Jul 25 22:29:04.906: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE... *Jul 25 22:29:04.906: ISAKMP (0): incrementing error counter on sa, attempt 2 of 5: retransmit phase 1 *Jul 25 22:29:04.906: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE *Jul 25 22:29:04.906: ISAKMP:(0): sending packet to 2.2.2.2 my_port 500 peer_port 500 (I) MM_NO_STATE *Jul 25 22:29:04.906: ISAKMP:(0):Sending an IKE IPv4 Packet. *Jul 25 22:29:04.978: ISAKMP (0): received packet from 2.2.2.2 dport 500 sport 500 Global (I) MM_NO_STATE *Jul 25 22:29:04.978: ISAKMP:(0):Couldn't find node: message_id 651071881 *Jul 25 22:29:04.978: ISAKMP (0): Unknown Input IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY: state = IKE_I_MM1 *Jul 25 22:29:04.978: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY *Jul 25 22:29:04.978: ISAKMP:(0):Old State = IKE_I_MM1 New State = IKE_I_MM1