Syslog logging: enabled (49060 messages dropped, 1 messages rate-limited, 0 flushes, 0 overruns, xml disabled, filtering disabled) Console logging: disabled Monitor logging: level debugging, 0 messages logged, xml disabled, filtering disabled Buffer logging: level debugging, 1015579 messages logged, xml disabled, filtering disabled Logging Exception size (4096 bytes) Count and timestamp logging messages: disabled No active filter modules. ESM: 0 messages dropped Trap logging: level informational, 1296391 message lines logged Log Buffer (4096 bytes): .235.176.8 my_port 500 peer_port 500 (R) QM_IDLE *Sep 22 18:38:34.543: ISAKMP:(2399):purging node -1209749638 *Sep 22 18:38:34.543: ISAKMP:(2399):Input = IKE_MESG_FROM_PEER, IKE_MESG_KEEP_ALIVE *Sep 22 18:38:34.543: ISAKMP:(2399):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE *Sep 22 18:38:38.427: ISAKMP:(2385):purging node -167001578 *Sep 22 18:38:38.859: ISAKMP:(2386):purging node -1065118398 *Sep 22 18:38:39.959: ISAKMP:(2386):purging node -303550784 *Sep 22 18:38:42.899: ISAKMP: quick mode timer expired. *Sep 22 18:38:42.899: ISAKMP:(2386):src 8.43.189.36 dst 201.174.17.238, SA is authenticated *Sep 22 18:38:42.899: ISAKMP:(2386): src 8.43.189.36 dst 201.174.17.238 *Sep 22 18:38:44.855: ISAKMP (0:2386): received packet from 8.43.189.36 dport 500 sport 500 Global (R) QM_IDLE *Sep 22 18:38:44.855: ISAKMP: set new node 724066497 to QM_IDLE *Sep 22 18:38:44.859: ISAKMP:(2386): processing HASH payload. message ID = 724066497 *Sep 22 18:38:44.859: ISAKMP:(2386): processing DELETE payload. message ID = 724066497 *Sep 22 18:38:44.859: ISAKMP:(2386):peer does not do paranoid keepalives. *Sep 22 18:38:44.859: ISAKMP:(2386):deleting node 724066497 error FALSE reason "Informational (in) state 1" *Sep 22 18:38:44.859: ISAKMP:(2386):purging node 1038598399 *Sep 22 18:38:44.859: IPSEC(key_engine): got a queue event with 1 KMI message(s) *Sep 22 18:38:44.859: IPSEC(key_engine_delete_sas): rec'd delete notify from ISAKMP *Sep 22 18:38:44.859: IPSEC(key_engine_delete_sas): delete SA with spi 0x97ADF0BD proto 50 for 8.43.189.36 *Sep 22 18:38:44.859: IPSEC(delete_sa): deleting SA, (sa) sa_dest= 201.174.17.238, sa_proto= 50, sa_spi= 0xF40ACD1F(4094348575), sa_trans= esp-3des esp-md5-hmac , sa_conn_id= 52, (identity) local= 201.174.17.238, remote= 8.43.189.36, local_proxy= 192.168.224.0/255.255.255.192/0/0 (type=4), remote_proxy= 10.1.20.0/255.255.252.0/0/0 (type=4) *Sep 22 18:38:44.859: IPSEC(delete_sa): deleting SA, (sa) sa_dest= 8.43.189.36, sa_proto= 50, sa_spi= 0x97ADF0BD(2544758973), sa_trans= esp-3des esp-md5-hmac , sa_conn_id= 117, (identity) local= 201.174.17.238, remote= 8.43.189.36, local_proxy= 192.168.224.0/255.255.255.192/0/0 (type=4), remote_proxy= 10.1.20.0/255.255.252.0/0/0 (type=4) *Sep 22 18:38:49.855: ISAKMP (0:2386): received packet from 8.43.189.36 dport 500 sport 500 Global (R) QM_IDLE *Sep 22 18:38:49.859: ISAKMP: set new node -561927285 to QM_IDLE *Sep 22 18:38:49.859: ISAKMP:(2386): processing HASH payload. message ID = -561927285 *Sep 22 18:38:49.859: ISAKMP:(2386): processing DELETE payload. message ID = -561927285 *Sep 22 18:38:49.859: ISAKMP:(2386):peer does not do paranoid keepalives. *Sep 22 18:38:49.859: ISAKMP:(2386):deleting node -561927285 error FALSE reason "Informational (in) state 1" *Sep 22 18:38:49.859: IPSEC(key_engine): got a queue event with 1 KMI message(s) *Sep 22 18:38:49.859: IPSEC(key_engine_delete_sas): rec'd delete notify from ISAKMP *Sep 22 18:38:49.859: IPSEC(key_engine_delete_sas): delete SA with spi 0x85578DBF proto 50 for 8.43.189.36 *Sep 22 18:38:49.859: IPSEC(delete_sa): deleting SA, (sa) sa_dest= 201.174.17.238, sa_proto= 50, sa_spi= 0xF3877A74(4085742196), sa_trans= esp-3des esp-md5-hmac , sa_conn_id= 129, (identity) local= 201.174.17.238, remote= 8.43.189.36, local_proxy= 192.168.224.0/255.255.255.192/0/0 (type=4), remote_proxy= 10.203.110.128/255.255.255.224/0/0 (type=4) *Sep 22 18:38:49.859: IPSEC(delete_sa): deleting SA, (sa) sa_dest= 8.43.189.36, sa_proto= 50, sa_spi= 0x85578DBF(2237107647), sa_trans= esp-3des esp-md5-hmac , sa_conn_id= 65, (identity) local= 201.174.17.238, remote= 8.43.189.36, local_proxy= 192.168.224.0/255.255.255.192/0/0 (type=4), remote_proxy= 10.203.110.128/255.255.255.224/0/0 (type=4) *Sep 22 18:38:53.859: ISAKMP:(2386):purging node 368865075 *Sep 22 18:38:53.863: ISAKMP:(2376):purging node 16901895 *Sep 22 18:38:55.859: ISAKMP:(2386):purging node 358284521 *Sep 22 18:38:57.859: ISAKMP:(2386):purging node 747023064 MIXSH1R01#sho logg Syslog logging: enabled (49060 messages dropped, 1 messages rate-limited, 0 flushes, 0 overruns, xml disabled, filtering disabled) Console logging: disabled Monitor logging: level debugging, 0 messages logged, xml disabled, filtering disabled Buffer logging: level debugging, 1015697 messages logged, xml disabled, filtering disabled Logging Exception size (4096 bytes) Count and timestamp logging messages: disabled No active filter modules. ESM: 0 messages dropped Trap logging: level informational, 1296394 message lines logged Log Buffer (4096 bytes): : ISAKMP: attributes in transform: *Sep 22 18:39:14.847: ISAKMP: SA life type in seconds *Sep 22 18:39:14.847: ISAKMP: SA life duration (VPI) of 0x0 0x1 0x51 0x80 *Sep 22 18:39:14.847: ISAKMP: encaps is 1 (Tunnel) *Sep 22 18:39:14.847: ISAKMP: authenticator is HMAC-MD5 *Sep 22 18:39:14.847: ISAKMP:(2385):atts are acceptable. *Sep 22 18:39:14.847: IPSEC(validate_proposal_request): proposal part #1 *Sep 22 18:39:14.847: IPSEC(validate_proposal_request): proposal part #1, (key eng. msg.) INBOUND local= 201.174.17.238, remote= 189.206.7.172, local_proxy= 192.168.224.51/255.255.255.255/0/0 (type=1), remote_proxy= 189.206.60.43/255.255.255.255/0/0 (type=1), protocol= ESP, transform= esp-3des esp-md5-hmac (Tunnel), lifedur= 0s and 0kb, spi= 0x0(0), conn_id= 0, keysize= 0, flags= 0x0 *Sep 22 18:39:14.847: ISAKMP:(2385): processing NONCE payload. message ID = 1668636755 *Sep 22 18:39:14.847: ISAKMP:(2385): processing ID payload. message ID = 1668636755 *Sep 22 18:39:14.847: ISAKMP:(2385): processing ID payload. message ID = 1668636755 *Sep 22 18:39:14.847: ISAKMP:(2385):QM Responder gets spi *Sep 22 18:39:14.847: ISAKMP:(2385):Node 1668636755, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH *Sep 22 18:39:14.847: ISAKMP:(2385):Old State = IKE_QM_READY New State = IKE_QM_SPI_STARVE *Sep 22 18:39:14.847: ISAKMP:(2385): Creating IPSec SAs *Sep 22 18:39:14.847: inbound SA from 189.206.7.172 to 201.174.17.238 (f/i) 0/ 0 (proxy 189.206.60.43 to 192.168.224.51) *Sep 22 18:39:14.847: has spi 0x96C73791 and conn_id 0 *Sep 22 18:39:14.847: lifetime of 86400 seconds *Sep 22 18:39:14.847: outbound SA from 201.174.17.238 to 189.206.7.172 (f/i) 0/0 (proxy 192.168.224.51 to 189.206.60.43) *Sep 22 18:39:14.847: has spi 0x3E0605CB and conn_id 0 *Sep 22 18:39:14.847: lifetime of 86400 seconds *Sep 22 18:39:14.847: ISAKMP:(2385): sending packet to 189.206.7.172 my_port 500 peer_port 500 (R) QM_IDLE *Sep 22 18:39:14.847: ISAKMP:(2385):Node 1668636755, Input = IKE_MESG_INTERNAL, IKE_GOT_SPI *Sep 22 18:39:14.847: ISAKMP:(2385):Old State = IKE_QM_SPI_STARVE New State = IKE_QM_R_QM2 *Sep 22 18:39:14.847: IPSEC(key_engine): got a queue event with 1 KMI message(s) *Sep 22 18:39:14.847: IPSEC(crypto_ipsec_sa_find_ident_head): reconnecting with the same proxies and peer 189.206.7.172 *Sep 22 18:39:14.851: IPSEC(create_sa): sa created, (sa) sa_dest= 201.174.17.238, sa_proto= 50, sa_spi= 0x96C73791(2529638289), sa_trans= esp-3des esp-md5-hmac , sa_conn_id= 255 *Sep 22 18:39:14.851: IPSEC(create_sa): sa created, (sa) sa_dest= 189.206.7.172, sa_proto= 50, sa_spi= 0x3E0605CB(1040582091), sa_trans= esp-3des esp-md5-hmac , sa_conn_id= 120 *Sep 22 18:39:14.851: IPSEC(early_age_out_sibling): sibling outbound SPI 3E0605CA expiring in 30 seconds *Sep 22 18:39:14.851: ISAKMP: set new node -1791325710 to QM_IDLE *Sep 22 18:39:14.851: ISAKMP:(2385): sending packet to 189.206.7.172 my_port 500 peer_port 500 (R) QM_IDLE *Sep 22 18:39:14.851: ISAKMP:(2385):purging node -1791325710 *Sep 22 18:39:14.851: ISAKMP:(2385):Input = IKE_MESG_FROM_IPSEC, IKE_PHASE2_DEL *Sep 22 18:39:14.851: ISAKMP:(2385):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE *Sep 22 18:39:14.915: ISAKMP (0:2385): received packet from 189.206.7.172 dport 500 sport 500 Global (R) QM_IDLE *Sep 22 18:39:14.919: ISAKMP:(2385):deleting node 1668636755 error FALSE reason "QM done (await)" *Sep 22 18:39:14.919: ISAKMP:(2385):Node 1668636755, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH *Sep 22 18:39:14.919: ISAKMP:(2385):Old State = IKE_QM_R_QM2 New State = IKE_QM_PHASE2_COMPLETE *Sep 22 18:39:14.919: IPSEC(key_engine): got a queue event with 1 KMI message(s) *Sep 22 18:39:14.919: IPSEC(key_engine_enable_outbound): rec'd enable notify from ISAKMP *Sep 22 18:39:14.919: IPSEC(key_engine_enable_outbound): enable SA with spi 1040582091/50 *Sep 22 18:39:14.919: IPSEC(update_current_outbound_sa): updated peer 189.206.7.172 current outbound sa to SPI 3E0605CB