sh crypto ipsec sa interface: outside Crypto map tag: outside_dyn_map, seq num: 20, local addr: 83.103.27.62 access-list outside_cryptomap_dyn_20 permit ip any 192.168.10.0 255.255.255.0 local ident (addr/mask/prot/port): (0.0.0.0/0.0.0.0/0/0) remote ident (addr/mask/prot/port): (192.168.10.2/255.255.255.255/0/0) current_peer: 87.0.170.10, username: my.user dynamic allocated peer ip: 192.168.10.2 #pkts encaps: 5, #pkts encrypt: 5, #pkts digest: 5 #pkts decaps: 0, #pkts decrypt: 0, #pkts verify: 0 #pkts compressed: 0, #pkts decompressed: 0 #pkts not compressed: 5, #pkts comp failed: 0, #pkts decomp failed: 0 #send errors: 0, #recv errors: 0 local crypto endpt.: 83.103.27.62/4500, remote crypto endpt.: 87.0.170.10/4500 path mtu 1500, ipsec overhead 66, media mtu 1500 current outbound spi: 6C8807FE inbound esp sas: spi: 0x4CED72D7 (1290629847) transform: esp-3des esp-sha-hmac none in use settings ={RA, Tunnel, NAT-T-Encaps, } slot: 0, conn_id: 2, crypto-map: outside_dyn_map sa timing: remaining key lifetime (sec): 28502 <--- More --->Dec 12 18:49:08 [IKEv1 DEBUG]: Group = VPN, Username = my.user, IP = 87.0.170.10, Sending keep-alive of type DPD R-U-THERE (seq number 0x74f05040) Dec 12 18:49:08 [IKEv1 DEBUG]: Group = VPN, Username = my.user, IP = 87.0.170.10, constructing blank hash payload Dec 12 18:49:08 [IKEv1 DEBUG]: Group = VPN, Username = my.user, IP = 87.0.170.10, constructing qm hash payload Dec 12 18:49:08 [IKEv1]: IP = 87.0.170.10, IKE_DECODE SENDING Message (msgid=5cf586e5) with payloads : HDR + HASH (8) + NOTIFY (11) + NONE (0) total length : 84 BEFORE ENCRYPTION RAW PACKET DUMP on SEND 43 9d c1 98 4b b8 71 b0 e6 4b 67 bd ef 39 69 69 | C...K.q..Kg..9ii 08 10 05 00 e5 86 f5 5c 1c 00 00 00 0b 00 00 18 | .......\........ a7 23 c0 3a ef 34 be 99 ef 19 45 33 92 b5 e6 32 | .#.:.4....E3...2 58 56 1b ed 00 00 00 20 00 00 00 01 01 10 8d 28 | XV..... .......( 43 9d c1 98 4b b8 71 b0 e6 4b 67 bd ef 39 69 69 | C...K.q..Kg..9ii 74 f0 50 40 | t.P@ ISAKMP Header Initiator COOKIE: 43 9d c1 98 4b b8 71 b0 Responder COOKIE: e6 4b 67 bd ef 39 69 69 Next Payload: Hash Version: 1.0 Exchange Type: Informational Flags: (none) MessageID: E586F55C Length: 469762048 Payload Hash Next Payload: Notification Reserved: 00 Payload Length: 24 Data: a7 23 c0 3a ef 34 be 99 ef 19 45 33 92 b5 e6 32 58 56 1b ed Payload Notification Next Payload: None Reserved: 00 Payload Length: 32 DOI: IPsec Protocol-ID: PROTO_ISAKMP Spi Size: 16 Notify Type: R_U_THERE SPI: 43 9d c1 98 4b b8 71 b0 e6 4b 67 bd ef 39 69 69 Data: 74 f0 50 40 ISAKMP Header Initiator COOKIE: 43 9d c1 98 4b b8 71 b0 Responder COOKIE: e6 4b 67 bd ef 39 69 69 Next Payload: Hash Version: 1.0 Exchange Type: Informational Flags: (Encryption) MessageID: 5CF586E5 Length: 84 RECV PACKET from 87.0.170.10 ISAKMP Header Initiator COOKIE: 43 9d c1 98 4b b8 71 b0 Responder COOKIE: e6 4b 67 bd ef 39 69 69 Next Payload: Hash Version: 1.0 Exchange Type: Informational Flags: (Encryption) MessageID: B112C0E9 Length: 84 AFTER DECRYPTION ISAKMP Header Initiator COOKIE: 43 9d c1 98 4b b8 71 b0 Responder COOKIE: e6 4b 67 bd ef 39 69 69 Next Payload: Hash Version: 1.0 Exchange Type: Informational Flags: (Encryption) MessageID: B112C0E9 Length: 84 Payload Hash Next Payload: Notification Reserved: 00 Payload Length: 24 Data: e2 f0 83 7a 46 7e 69 2c f7 14 21 5b ef 73 4c 25 78 81 07 2a Payload Notification Next Payload: None Reserved: 00 Payload Length: 32 DOI: IPsec Protocol-ID: PROTO_ISAKMP Spi Size: 16 Notify Type: R_U_THERE_ACK SPI: 43 9d c1 98 4b b8 71 b0 e6 4b 67 bd ef 39 69 69 Data: 74 f0 50 40 Dec 12 18:49:08 [IKEv1]: IP = 87.0.170.10, IKE_DECODE RECEIVED Message (msgid=b112c0e9) with payloads : HDR + HASH (8) + NOTIFY (11) + NONE (0) total length : 84 Dec 12 18:49:08 [IKEv1 DEBUG]: Group = VPN, Username = my.user, IP = 87.0.170.10, processing hash payload Dec 12 18:49:08 [IKEv1 DEBUG]: Group = VPN, Username = my.user, IP = 87.0.170.10, processing notify payload Dec 12 18:49:08 [IKEv1 DEBUG]: Group = VPN, Username = my.user, IP = 87.0.170.10, Received keep-alive of type DPD R-U-THERE-ACK (seq number 0x74f05040)