ROUTER#debug crypto isakmp Jan 21 09:45:46.563: ISAKMP:(0:17:HW:2): constructed NAT-T vendor-03 ID Jan 21 09:45:46.563: ISAKMP:(0:17:HW:2): sending packet to XXX.XXX.XXX.XXX my_port 500 peer_port 500 (R) MM_SA_SETUP Jan 21 09:45:46.563: ISAKMP:(0:17:HW:2):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE Jan 21 09:45:46.563: ISAKMP:(0:17:HW:2):Old State = IKE_R_MM1 New State = IKE_R_MM2 Jan 21 09:45:46.631: ISAKMP (0:268435473): received packet from XXX.XXX.XXX.XXX dport 500 sport 500 Global (R) MM_SA_SETUP Jan 21 09:45:46.635: ISAKMP:(0:17:HW:2):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH Jan 21 09:45:46.635: ISAKMP:(0:17:HW:2):Old State = IKE_R_MM2 New State = IKE_R_MM3 Jan 21 09:45:46.635: ISAKMP:(0:17:HW:2): processing KE payload. message ID = 0 Jan 21 09:45:46.839: ISAKMP:(0:17:HW:2): processing NONCE payload. message ID = 0 Jan 21 09:45:46.839: ISAKMP: Looking for a matching key for XXX.XXX.XXX.XXX in default : success Jan 21 09:45:46.839: ISAKMP:(0:17:HW:2):found peer pre-shared key matching XXX.XXX.XXX.XXX Jan 21 09:45:46.839: %HIFN79XX-1-ERROR: host_sa_create, pPktEngEntryHMACFreeQ is empty Jan 21 09:45:46.839: %HIFN79XX-3-CMD_ERR: Hifn 79XX command returned error: (0x1051) Jan 21 09:45:46.839: IPSECcard: an error coming back 0x1051 Jan 21 09:45:46.839: ISAKMP:(0:17:HW:2):error from epa_ikmp_create_skeyid (MM_SA_SETUP) Jan 21 09:45:46.843: -Traceback= 80C3E5C4 80C2C590 80C2C77C 80C4A584 80DCBD3C 80C4E05C 80C4DE98 80C22898 80C22DC4 802BDA2C 802C21F8 Jan 21 09:45:46.843: ISAKMP:(0:17:HW:2):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE Jan 21 09:45:46.843: ISAKMP:(0:17:HW:2):Old State = IKE_R_MM3 New State = IKE_R_MM3 Jan 21 09:45:46.843: ISAKMP:(0:17:HW:2): sending packet to XXX.XXX.XXX.XXX my_port 500 peer_port 500 (R) MM_SA_SETUP Jan 21 09:45:46.847: ISAKMP:(0:17:HW:2):Input = IKE_MESG_INTERNAL, IKE_PROCESS_ERROR Jan 21 09:45:46.847: ISAKMP:(0:17:HW:2):Old State = IKE_R_MM3 New State = IKE_R_MM2 Jan 21 09:45:56.847: ISAKMP:(0:17:HW:2): retransmitting phase 1 MM_SA_SETUP... Jan 21 09:45:56.847: ISAKMP:(0:17:HW:2):incrementing error counter on sa: retransmit phase 1 Jan 21 09:45:56.847: ISAKMP:(0:17:HW:2): retransmitting phase 1 MM_SA_SETUP Jan 21 09:45:56.847: ISAKMP:(0:17:HW:2): sending packet to XXX.XXX.XXX.XXX my_port 500 peer_port 500 (R) MM_SA_SETUP Jan 21 09:45:57.387: ISAKMP (0:268435473): received packet from XXX.XXX.XXX.XXX dport 500 sport 500 Global (R) MM_SA_SETUP Jan 21 09:45:57.387: ISAKMP:(0:17:HW:2): phase 1 packet is a duplicate of a previous packet. Jan 21 09:45:57.387: ISAKMP:(0:17:HW:2): retransmission skipped for phase 1 (time since last transmission 540) Jan 21 09:46:02.915: ISAKMP:(0:13:HW:2):purging SA., sa=81E4F93C, delme=81E4F93C Jan 21 09:46:05.783: ISAKMP: quick mode timer expired. Jan 21 09:46:05.783: ISAKMP:(0:14:HW:2):src XXX.XXX.XXX.XXX dst YYY.YYY.YYY.YYY, SA is not authenticated Jan 21 09:46:05.783: ISAKMP:(0:14:HW:2):peer does not do paranoid keepalives. Jan 21 09:46:05.783: ISAKMP:(0:14:HW:2):deleting SA reason "QM_TIMER expired" state (R) MM_SA_SETUP (peer XXX.XXX.XXX.XXX) input queue 0 Jan 21 09:46:05.783: ISAKMP:(0:14:HW:2):deleting SA reason "QM_TIMER expired" state (R) MM_SA_SETUP (peer XXX.XXX.XXX.XXX) input queue 0 Jan 21 09:46:05.787: ISAKMP: Unlocking IKE struct 0x81BCFDD4 for isadb_mark_sa_deleted(), count 0 Jan 21 09:46:05.787: ISAKMP: Deleting peer node by peer_reap for XXX.XXX.XXX.XXX: 81BCFDD4 Jan 21 09:46:05.787: ISAKMP: Deleted node doesn't match node to be deleted! Jan 21 09:46:05.787: ISAKMP:(0:14:HW:2):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL Jan 21 09:46:05.787: ISAKMP:(0:14:HW:2):Old State = IKE_R_MM2 New State = IKE_DEST_SA Jan 21 09:46:07.387: ISAKMP (0:268435473): received packet from XXX.XXX.XXX.XXX dport 500 sport 500 Global (R) MM_SA_SETUP Jan 21 09:46:07.387: ISAKMP:(0:17:HW:2): phase 1 packet is a duplicate of a previous packet. Jan 21 09:46:07.387: ISAKMP:(0:17:HW:2): retransmitting due to retransmit phase 1 Jan 21 09:46:07.387: ISAKMP:(0:17:HW:2): retransmitting phase 1 MM_SA_SETUP... Jan 21 09:46:07.887: ISAKMP:(0:17:HW:2): retransmitting phase 1 MM_SA_SETUP... Jan 21 09:46:07.887: ISAKMP:(0:17:HW:2):incrementing error counter on sa: retransmit phase 1 Jan 21 09:46:07.887: ISAKMP:(0:17:HW:2): retransmitting phase 1 MM_SA_SETUP Jan 21 09:46:07.887: ISAKMP:(0:17:HW:2): sending packet to XXX.XXX.XXX.XXX my_port 500 peer_port 500 (R) MM_SA_SETUP Jan 21 09:46:17.891: ISAKMP:(0:17:HW:2): retransmitting phase 1 MM_SA_SETUP... Jan 21 09:46:17.891: ISAKMP:(0:17:HW:2):incrementing error counter on sa: retransmit phase 1 Jan 21 09:46:17.891: ISAKMP:(0:17:HW:2): retransmitting phase 1 MM_SA_SETUP Jan 21 09:46:17.891: ISAKMP:(0:17:HW:2): sending packet to XXX.XXX.XXX.XXX my_port 500 peer_port 500 (R) MM_SA_SETUP Jan 21 09:46:18.451: ISAKMP (0:268435473): received packet from XXX.XXX.XXX.XXX dport 500 sport 500 Global (R) MM_SA_SETUP Jan 21 09:46:18.455: ISAKMP:(0:17:HW:2): phase 1 packet is a duplicate of a previous packet. Jan 21 09:46:18.455: ISAKMP:(0:17:HW:2): retransmission skipped for phase 1 (time since last transmission 564) Jan 21 09:46:28.431: ISAKMP (0:268435473): received packet from XXX.XXX.XXX.XXX dport 500 sport 500 Global (R) MM_SA_SETUP Jan 21 09:46:28.435: ISAKMP:(0:17:HW:2): phase 1 packet is a duplicate of a previous packet. Jan 21 09:46:28.435: ISAKMP:(0:17:HW:2): retransmitting due to retransmit phase 1 Jan 21 09:46:28.435: ISAKMP:(0:17:HW:2): retransmitting phase 1 MM_SA_SETUP... Jan 21 09:46:28.935: ISAKMP:(0:17:HW:2): retransmitting phase 1 MM_SA_SETUP... Jan 21 09:46:28.935: ISAKMP:(0:17:HW:2):incrementing error counter on sa: retransmit phase 1 Jan 21 09:46:28.935: ISAKMP:(0:17:HW:2): retransmitting phase 1 MM_SA_SETUP Jan 21 09:46:28.935: ISAKMP:(0:17:HW:2): sending packet to XXX.XXX.XXX.XXX my_port 500 peer_port 500 (R) MM_SA_SETUP Jan 21 09:46:38.935: ISAKMP:(0:17:HW:2): retransmitting phase 1 MM_SA_SETUP... Jan 21 09:46:38.935: ISAKMP:(0:17:HW:2):incrementing error counter on sa: retransmit phase 1 Jan 21 09:46:38.935: ISAKMP:(0:17:HW:2): retransmitting phase 1 MM_SA_SETUP Jan 21 09:46:38.935: ISAKMP:(0:17:HW:2): sending packet to XXX.XXX.XXX.XXX my_port 500 peer_port 500 (R) MM_SA_SETUP Jan 21 09:46:39.479: ISAKMP (0:268435473): received packet from XXX.XXX.XXX.XXX dport 500 sport 500 Global (R) MM_SA_SETUP Jan 21 09:46:39.479: ISAKMP:(0:17:HW:2): phase 1 packet is a duplicate of a previous packet. Jan 21 09:46:39.479: ISAKMP:(0:17:HW:2): retransmission skipped for phase 1 (time since last transmission 544) Jan 21 09:46:48.191: ISAKMP (0:0): received packet from XXX.XXX.XXX.XXX dport 500 sport 500 Global (N) NEW SA Jan 21 09:46:48.191: ISAKMP: Created a peer struct for XXX.XXX.XXX.XXX, peer port 500 Jan 21 09:46:48.191: ISAKMP: Locking peer struct 0x81ADC7F0, IKE refcount 1 for crypto_isakmp_process_block Jan 21 09:46:48.195: ISAKMP: local port 500, remote port 500 Jan 21 09:46:48.195: ISAKMP: Find a dup sa in the avl tree during calling isadb_insert sa = 81E523B0 Jan 21 09:46:48.195: ISAKMP:(0:18:HW:2):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH Jan 21 09:46:48.195: ISAKMP:(0:18:HW:2):Old State = IKE_READY New State = IKE_R_MM1 Jan 21 09:46:48.199: ISAKMP:(0:18:HW:2): processing SA payload. message ID = 0 Jan 21 09:46:48.199: ISAKMP:(0:18:HW:2): processing vendor id payload Jan 21 09:46:48.199: ISAKMP:(0:18:HW:2): vendor ID seems Unity/DPD but major 245 mismatch Jan 21 09:46:48.199: ISAKMP:(0:18:HW:2): processing vendor id payload Jan 21 09:46:48.203: ISAKMP:(0:18:HW:2): vendor ID seems Unity/DPD but major 157 mismatch Jan 21 09:46:48.203: ISAKMP:(0:18:HW:2): vendor ID is NAT-T v3 Jan 21 09:46:48.203: ISAKMP:(0:18:HW:2): processing vendor id payload Jan 21 09:46:48.203: ISAKMP:(0:18:HW:2): vendor ID seems Unity/DPD but major 123 mismatch Jan 21 09:46:48.203: ISAKMP:(0:18:HW:2): vendor ID is NAT-T v2 Jan 21 09:46:48.203: ISAKMP: Looking for a matching key for XXX.XXX.XXX.XXX in default : success Jan 21 09:46:48.203: ISAKMP:(0:18:HW:2):found peer pre-shared key matching XXX.XXX.XXX.XXX Jan 21 09:46:48.207: ISAKMP:(0:18:HW:2): local preshared key found Jan 21 09:46:48.207: ISAKMP : Scanning profiles for xauth ... Jan 21 09:46:48.207: ISAKMP:(0:18:HW:2):Checking ISAKMP transform 1 against priority 1 policy Jan 21 09:46:48.207: ISAKMP: encryption DES-CBC Jan 21 09:46:48.207: ISAKMP: hash SHA Jan 21 09:46:48.207: ISAKMP: default group 1 Jan 21 09:46:48.207: ISAKMP: auth pre-share Jan 21 09:46:48.207: ISAKMP: life type in seconds Jan 21 09:46:48.207: ISAKMP: life duration (VPI) of 0x0 0x1 0x51 0x80 Jan 21 09:46:48.211: ISAKMP:(0:18:HW:2):atts are acceptable. Next payload is 3 Jan 21 09:46:48.415: ISAKMP:(0:18:HW:2): processing vendor id payload Jan 21 09:46:48.415: ISAKMP:(0:18:HW:2): vendor ID seems Unity/DPD but major 245 mismatch Jan 21 09:46:48.419: ISAKMP:(0:18:HW:2): processing vendor id payload Jan 21 09:46:48.419: ISAKMP:(0:18:HW:2): vendor ID seems Unity/DPD but major 157 mismatch Jan 21 09:46:48.419: ISAKMP:(0:18:HW:2): vendor ID is NAT-T v3 Jan 21 09:46:48.419: ISAKMP:(0:18:HW:2): processing vendor id payload Jan 21 09:46:48.419: ISAKMP:(0:18:HW:2): vendor ID seems Unity/DPD but major 123 mismatch Jan 21 09:46:48.419: ISAKMP:(0:18:HW:2): vendor ID is NAT-T v2 Jan 21 09:46:48.423: ISAKMP:(0:18:HW:2):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE Jan 21 09:46:48.423: ISAKMP:(0:18:HW:2):Old State = IKE_R_MM1 New State = IKE_R_MM1