<html><body>
<p><font size="2" face="sans-serif">Hello, I'm running into a problem using a radius server. I had a working environment last month. Somehow it got messed up. I thought I had coped the config files correctly, but the ones I'm using apparently aren't quite right.</font><br>
<br>
<font size="2" face="sans-serif">The config is pretty close to the tnccs-11-radius</font><font size="2" face="sans-serif"> (</font><font size="2" face="sans-serif"><a href="http://www.strongswan.org/uml/testresults/tnc/tnccs-11-radius/">http://www.strongswan.org/uml/testresults/tnc/tnccs-11-radius/</a> ) except that I using EAP-TLS authentication for the client.</font><br>
<br>
<font size="2" face="sans-serif">This is the ipsec.conf for the client. </font><br>
<font size="2" face="sans-serif">-----------------------------------------------------------------------------------------------</font><br>
<font size="2" face="sans-serif"># ipsec.conf - strongSwan IPsec configuration file </font><br>
<br>
<font size="2" face="sans-serif">config setup </font><br>
<font size="2" face="sans-serif"> strictcrlpolicy=no </font><br>
<font size="2" face="sans-serif"> charonstart=yes </font><br>
<font size="2" face="sans-serif"> plutostart=no </font><br>
<font size="2" face="sans-serif"> charondebug="lib 2,cfg 2,net 2,ike 2, enc 1, chd 2, mgr 2, dmn 2 tls 2" </font><br>
<br>
<font size="2" face="sans-serif"># Add connections here. </font><br>
<br>
<font size="2" face="sans-serif">conn %default </font><br>
<font size="2" face="sans-serif"> ikelifetime=60m </font><br>
<font size="2" face="sans-serif"> keylife=20m </font><br>
<font size="2" face="sans-serif"> rekeymargin=3m </font><br>
<font size="2" face="sans-serif"> keyingtries=1 </font><br>
<font size="2" face="sans-serif"> keyexchange=ikev2 </font><br>
<font size="2" face="sans-serif">conn home </font><br>
<font size="2" face="sans-serif"> left=%any </font><br>
<font size="2" face="sans-serif"> leftauth=eap</font><br>
<font size="2" face="sans-serif"> leftcert=/etc/ipsec.d/certs/nodeBRsa.crt </font><br>
<font size="2" face="sans-serif"> leftid="Node B" </font><br>
<font size="2" face="sans-serif"> leftfirewall=yes</font><br>
<font size="2" face="sans-serif"> right=9.5.46.51 </font><br>
<font size="2" face="sans-serif"> rightid="Node A" </font><br>
<font size="2" face="sans-serif"> rightauth=pubkey</font><br>
<font size="2" face="sans-serif"> auto=start </font><br>
<font size="2" face="sans-serif"> aaa_identity="CN=MINN Radius, O=IBM, OU=MINN TEAM, L=Rochester, S=Minnesota, C=US" </font><br>
<font size="2" face="sans-serif">----------------------------------------------------------------------------------------------</font><br>
<br>
<font size="2" face="sans-serif">This is the ipsec.conf for the gateway</font><br>
<font size="2" face="sans-serif">------------------------------------------------------------------------------------------</font><br>
<font size="2" face="sans-serif"># /etc/ipsec.conf - strongSwan IPsec configuration file </font><br>
<br>
<font size="2" face="sans-serif">config setup </font><br>
<font size="2" face="sans-serif"> strictcrlpolicy=no </font><br>
<font size="2" face="sans-serif"> plutostart=no </font><br>
<font size="2" face="sans-serif"> charonstart=yes </font><br>
<font size="2" face="sans-serif"> charondebug="lib 2,cfg 2, net 2, ike 3, enc 2, chd 2, mgr 2, dmn 2, tls 2" </font><br>
<font size="2" face="sans-serif"> </font><br>
<font size="2" face="sans-serif">conn %default </font><br>
<font size="2" face="sans-serif"> ikelifetime=60m </font><br>
<font size="2" face="sans-serif"> keylife=20m </font><br>
<font size="2" face="sans-serif"> rekeymargin=3m </font><br>
<font size="2" face="sans-serif"> keyingtries=1 </font><br>
<font size="2" face="sans-serif"> keyexchange=ikev2 </font><br>
<br>
<font size="2" face="sans-serif">conn rw-allow </font><br>
<font size="2" face="sans-serif"> rightgroups=allow </font><br>
<font size="2" face="sans-serif"> also=rw-eap </font><br>
<font size="2" face="sans-serif"> auto=add </font><br>
<br>
<font size="2" face="sans-serif">conn rw-isolate </font><br>
<font size="2" face="sans-serif"> rightgroups=isolate</font><br>
<font size="2" face="sans-serif"> also=rw-eap</font><br>
<font size="2" face="sans-serif"> auto=add </font><br>
<br>
<font size="2" face="sans-serif">conn rw-eap</font><br>
<font size="2" face="sans-serif"> leftcert=rncRsa.crt</font><br>
<font size="2" face="sans-serif"> leftid="Node A"</font><br>
<font size="2" face="sans-serif"> left=9.5.46.51</font><br>
<font size="2" face="sans-serif"> leftauth=pubkey</font><br>
<font size="2" face="sans-serif"> rightsendcert=never</font><br>
<font size="2" face="sans-serif"> right=%any</font><br>
<font size="2" face="sans-serif"> rightauth=eap-radius</font><br>
<font size="2" face="sans-serif">------------------------------------------------------------------------------------------</font><br>
<br>
<br>
<br>
<font size="2" face="sans-serif">This is a portion of the output from freeradius</font><br>
<br>
<font size="2" face="sans-serif">---------------------------------------------------------------------------------------------</font><br>
<font size="2" face="sans-serif">Found Auth-Type = EAP</font><br>
<font size="2" face="sans-serif"># Executing group from file /usr/local/etc/raddb/sites-enabled/default</font><br>
<font size="2" face="sans-serif">+- entering group authenticate {...}</font><br>
<font size="2" face="sans-serif">[eap] Request found, released from the list</font><br>
<font size="2" face="sans-serif">[eap] EAP/ttls</font><br>
<font size="2" face="sans-serif">[eap] processing type ttls</font><br>
<font size="2" face="sans-serif">[ttls] Authenticate</font><br>
<font size="2" face="sans-serif">[ttls] processing EAP-TLS</font><br>
<font size="2" face="sans-serif">[ttls] Received TLS ACK</font><br>
<font size="2" face="sans-serif">[ttls] ACK handshake fragment handler</font><br>
<font size="2" face="sans-serif">[ttls] eaptls_verify returned 1 </font><br>
<font size="2" face="sans-serif">[ttls] eaptls_process returned 13 </font><br>
<font size="2" face="sans-serif">++[eap] returns handled</font><br>
<font size="2" face="sans-serif">Sending Access-Challenge of id 78 to 9.5.46.51 port 45040</font><br>
<font size="2" face="sans-serif"> EAP-Message = 0x01080069158000000455467c6bc39327cac128fa941c858874f244dfc34b113848437afa690db2b47ac12ed17acd67f922bea754a35ed155c71f2c24c1320a3fa823bbdda31c5bfd5841017471816ead5f7000be962360bc89c9fdea2f2b0a57a4845c3641fa631524</font><br>
<font size="2" face="sans-serif"> Message-Authenticator = 0x00000000000000000000000000000000</font><br>
<font size="2" face="sans-serif"> State = 0x9f074c24980f5906538646d64966975d</font><br>
<font size="2" face="sans-serif">Finished request 7.</font><br>
<font size="2" face="sans-serif">Going to the next request</font><br>
<font size="2" face="sans-serif">Waking up in 4.9 seconds.</font><br>
<font size="2" face="sans-serif">rad_recv: Access-Request packet from host 9.5.46.51 port 45040, id=79, length=163</font><br>
<font size="2" face="sans-serif"> User-Name = "Node B"</font><br>
<font size="2" face="sans-serif"> EAP-Message = 0x0208004f1580000000451703010040ef7387c87977d629c289077701c7e8ed7e655e4edf6b0b0f75e70ce5555905278b4803e0bf09daf81d9f750b447ffbda76e31fa8204a2d4ca5102e530f2b7031</font><br>
<font size="2" face="sans-serif"> NAS-Port-Type = Virtual</font><br>
<font size="2" face="sans-serif"> NAS-Identifier = "strongSwan"</font><br>
<font size="2" face="sans-serif"> State = 0x9f074c24980f5906538646d64966975d</font><br>
<font size="2" face="sans-serif"> Message-Authenticator = 0x55ecc1b78874439e3e44ffcbfd646a7d</font><br>
<font size="2" face="sans-serif"># Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default</font><br>
<font size="2" face="sans-serif">+- entering group authorize {...}</font><br>
<font size="2" face="sans-serif">++[preprocess] returns ok</font><br>
<font size="2" face="sans-serif">[suffix] No '@' in User-Name = "Node B", looking up realm NULL</font><br>
<font size="2" face="sans-serif">[suffix] Found realm "NULL"</font><br>
<font size="2" face="sans-serif">[suffix] Adding Stripped-User-Name = "Node B"</font><br>
<font size="2" face="sans-serif">[suffix] Adding Realm = "NULL"</font><br>
<font size="2" face="sans-serif">[suffix] Authentication realm is LOCAL.</font><br>
<font size="2" face="sans-serif">++[suffix] returns ok</font><br>
<font size="2" face="sans-serif">[eap] EAP packet type response id 8 length 79</font><br>
<font size="2" face="sans-serif">[eap] Continuing tunnel setup.</font><br>
<font size="2" face="sans-serif">++[eap] returns ok</font><br>
<font size="2" face="sans-serif">Found Auth-Type = EAP</font><br>
<font size="2" face="sans-serif"># Executing group from file /usr/local/etc/raddb/sites-enabled/default</font><br>
<font size="2" face="sans-serif">+- entering group authenticate {...}</font><br>
<font size="2" face="sans-serif">[eap] Request found, released from the list</font><br>
<font size="2" face="sans-serif">[eap] EAP/ttls</font><br>
<font size="2" face="sans-serif">[eap] processing type ttls</font><br>
<font size="2" face="sans-serif">[ttls] Authenticate</font><br>
<font size="2" face="sans-serif">[ttls] processing EAP-TLS</font><br>
<font size="2" face="sans-serif"> TLS Length 69</font><br>
<font size="2" face="sans-serif">[ttls] Length Included</font><br>
<font size="2" face="sans-serif">[ttls] eaptls_verify returned 11 </font><br>
<font size="2" face="sans-serif">[ttls] eaptls_process returned 7 </font><br>
<font size="2" face="sans-serif">[ttls] Session established. Proceeding to decode tunneled attributes.</font><br>
<font size="2" face="sans-serif">[ttls] Got tunneled request</font><br>
<font size="2" face="sans-serif"> EAP-Message = 0x020200110d80000000071503030002020a</font><br>
<font size="2" face="sans-serif"> FreeRADIUS-Proxied-To = 127.0.0.1</font><br>
<font size="2" face="sans-serif">[ttls] Sending tunneled request</font><br>
<font size="2" face="sans-serif"> EAP-Message = 0x020200110d80000000071503030002020a</font><br>
<font size="2" face="sans-serif"> FreeRADIUS-Proxied-To = 127.0.0.1</font><br>
<font size="2" face="sans-serif"> User-Name = "Node B"</font><br>
<font size="2" face="sans-serif"> State = 0x19df77af18dd7a9e17d7edc55b90d0c1</font><br>
<font size="2" face="sans-serif">server inner-tunnel {</font><br>
<font size="2" face="sans-serif"># Executing section authorize from file /usr/local/etc/raddb/sites-enabled/inner-tunnel</font><br>
<font size="2" face="sans-serif">+- entering group authorize {...}</font><br>
<font size="2" face="sans-serif">[suffix] No '@' in User-Name = "Node B", looking up realm NULL</font><br>
<font size="2" face="sans-serif">[suffix] Found realm "NULL"</font><br>
<font size="2" face="sans-serif">[suffix] Adding Stripped-User-Name = "Node B"</font><br>
<font size="2" face="sans-serif">[suffix] Adding Realm = "NULL"</font><br>
<font size="2" face="sans-serif">[suffix] Authentication realm is LOCAL.</font><br>
<font size="2" face="sans-serif">++[suffix] returns ok</font><br>
<font size="2" face="sans-serif">[eap] EAP packet type response id 2 length 17</font><br>
<font size="2" face="sans-serif">[eap] No EAP Start, assuming it's an on-going EAP conversation</font><br>
<font size="2" face="sans-serif">++[eap] returns updated</font><br>
<font size="2" face="sans-serif">[files] users: Matched entry Node B at line 94</font><br>
<font size="2" face="sans-serif">++[files] returns ok</font><br>
<font size="2" face="sans-serif">Found Auth-Type = EAP</font><br>
<font size="2" face="sans-serif"># Executing group from file /usr/local/etc/raddb/sites-enabled/inner-tunnel</font><br>
<font size="2" face="sans-serif">+- entering group authenticate {...}</font><br>
<font size="2" face="sans-serif">[eap] Request found, released from the list</font><br>
<font size="2" face="sans-serif">[eap] EAP/tls</font><br>
<font size="2" face="sans-serif">[eap] processing type tls</font><br>
<font size="2" face="sans-serif">[tls] Authenticate</font><br>
<font size="2" face="sans-serif">[tls] processing EAP-TLS</font><br>
<font size="2" face="sans-serif"> TLS Length 7</font><br>
<font size="2" face="sans-serif">[tls] Length Included</font><br>
<font size="2" face="sans-serif">[tls] eaptls_verify returned 11 </font><br>
<font size="2" face="sans-serif">[tls] >>> Unknown TLS version [length 0002] </font><br>
<font size="2" face="sans-serif">TLS Alert write:fatal:protocol version</font><br>
<font size="2" face="sans-serif">[tls] TLS_accept: Need to read more data: SSLv3 read client certificate A</font><br>
<font size="2" face="sans-serif">rlm_eap: SSL error error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number</font><br>
<font size="2" face="sans-serif">SSL: SSL_read failed in a system call (-1), TLS session fails.</font><br>
<font size="2" face="sans-serif">TLS receive handshake failed during operation</font><br>
<font size="2" face="sans-serif">[tls] eaptls_process returned 4 </font><br>
<font size="2" face="sans-serif">[eap] Handler failed in EAP/tls</font><br>
<font size="2" face="sans-serif">[eap] Failed in EAP select</font><br>
<font size="2" face="sans-serif">++[eap] returns invalid</font><br>
<font size="2" face="sans-serif">Failed to authenticate the user.</font><br>
<font size="2" face="sans-serif">Login incorrect (TLS Alert write:fatal:protocol version): [Node B/<via Auth-Type = EAP>] (from client Node A port 0 via TLS tunnel)</font><br>
<font size="2" face="sans-serif">} # server inner-tunnel</font><br>
<font size="2" face="sans-serif">[ttls] Got tunneled reply code 3</font><br>
<font size="2" face="sans-serif"> EAP-Message = 0x04020004</font><br>
<font size="2" face="sans-serif"> Message-Authenticator = 0x00000000000000000000000000000000</font><br>
<font size="2" face="sans-serif">[ttls] Got tunneled Access-Reject</font><br>
<font size="2" face="sans-serif">[eap] Handler failed in EAP/ttls</font><br>
<font size="2" face="sans-serif">rlm_eap_ttls: Freeing handler for user Node B</font><br>
<font size="2" face="sans-serif">----------------------------------------------------------------------------------------------------------------</font><br>
<br>
<font size="2" face="sans-serif">The charon.log on the gateway doesn't tell me too much</font><br>
<font size="2" face="sans-serif">--------------------------------------------------------------------------</font><br>
<font size="2" face="sans-serif">Aug 25 21:44:59 06[CFG] sending RADIUS Access-Request to 9.5.46.51[1812]</font><br>
<font size="2" face="sans-serif">Aug 25 21:44:59 06[CFG] received RADIUS Access-Challenge from 9.5.46.51[1812]</font><br>
<font size="2" face="sans-serif">Aug 25 21:44:59 06[ENC] generating IKE_AUTH response 5 [ EAP/REQ/TTLS ]</font><br>
<font size="2" face="sans-serif">Aug 25 21:44:59 06[NET] sending packet: from 9.5.46.51[4500] to 9.10.109.43[4500]</font><br>
<font size="2" face="sans-serif">Aug 25 21:44:59 07[NET] received packet: from 9.10.109.43[4500] to 9.5.46.51[4500]</font><br>
<font size="2" face="sans-serif">Aug 25 21:44:59 07[ENC] parsed IKE_AUTH request 6 [ EAP/RES/TTLS ]</font><br>
<font size="2" face="sans-serif">Aug 25 21:44:59 07[CFG] sending RADIUS Access-Request to 9.5.46.51[1812]</font><br>
<font size="2" face="sans-serif">Aug 25 21:44:59 07[CFG] received RADIUS Access-Challenge from 9.5.46.51[1812]</font><br>
<font size="2" face="sans-serif">Aug 25 21:44:59 07[ENC] generating IKE_AUTH response 6 [ EAP/REQ/TTLS ]</font><br>
<font size="2" face="sans-serif">Aug 25 21:44:59 07[NET] sending packet: from 9.5.46.51[4500] to 9.10.109.43[4500]</font><br>
<font size="2" face="sans-serif">Aug 25 21:44:59 01[NET] received packet: from 9.10.109.43[4500] to 9.5.46.51[4500]</font><br>
<font size="2" face="sans-serif">Aug 25 21:44:59 01[ENC] parsed IKE_AUTH request 7 [ EAP/RES/TTLS ]</font><br>
<font size="2" face="sans-serif">Aug 25 21:44:59 01[CFG] sending RADIUS Access-Request to 9.5.46.51[1812]</font><br>
<font size="2" face="sans-serif">Aug 25 21:44:59 01[CFG] received RADIUS Access-Challenge from 9.5.46.51[1812]</font><br>
<font size="2" face="sans-serif">Aug 25 21:44:59 01[ENC] generating IKE_AUTH response 7 [ EAP/REQ/TTLS ]</font><br>
<font size="2" face="sans-serif">Aug 25 21:44:59 01[NET] sending packet: from 9.5.46.51[4500] to 9.10.109.43[4500]</font><br>
<font size="2" face="sans-serif">Aug 25 21:44:59 10[NET] received packet: from 9.10.109.43[4500] to 9.5.46.51[4500]</font><br>
<font size="2" face="sans-serif">Aug 25 21:44:59 10[ENC] parsed IKE_AUTH request 8 [ EAP/RES/TTLS ]</font><br>
<font size="2" face="sans-serif">Aug 25 21:44:59 10[CFG] sending RADIUS Access-Request to 9.5.46.51[1812]</font><br>
<font size="2" face="sans-serif">Aug 25 21:44:59 10[CFG] received RADIUS Access-Challenge from 9.5.46.51[1812]</font><br>
<font size="2" face="sans-serif">Aug 25 21:44:59 10[ENC] generating IKE_AUTH response 8 [ EAP/REQ/TTLS ]</font><br>
<font size="2" face="sans-serif">Aug 25 21:44:59 10[NET] sending packet: from 9.5.46.51[4500] to 9.10.109.43[4500]</font><br>
<font size="2" face="sans-serif">Aug 25 21:44:59 09[NET] received packet: from 9.10.109.43[4500] to 9.5.46.51[4500]</font><br>
<font size="2" face="sans-serif">Aug 25 21:44:59 09[ENC] parsed IKE_AUTH request 9 [ EAP/RES/TTLS ]</font><br>
<font size="2" face="sans-serif">Aug 25 21:44:59 09[CFG] sending RADIUS Access-Request to 9.5.46.51[1812]</font><br>
<font size="2" face="sans-serif">Aug 25 21:45:00 09[CFG] received RADIUS Access-Reject from 9.5.46.51[1812]</font><br>
<font size="2" face="sans-serif">Aug 25 21:45:00 09[IKE] RADIUS authentication of 'Node B' failed</font><br>
<font size="2" face="sans-serif">Aug 25 21:45:00 09[IKE] EAP method EAP_TTLS failed for peer Node B</font><br>
<font size="2" face="sans-serif">Aug 25 21:45:00 09[ENC] generating IKE_AUTH response 9 [ EAP/FAIL ]</font><br>
<font size="2" face="sans-serif">Aug 25 21:45:00 09[NET] sending packet: from 9.5.46.51[4500] to 9.10.109.43[4500]</font><br>
<font size="2" face="sans-serif">-------------------------------------------------------------------------------------------------------</font><br>
<br>
<font size="2" face="sans-serif">The charon.log on the client is a little more interesting but I can't tell what the problem is from there either</font><br>
<font size="2" face="sans-serif">----------------------------------------------------------------------------------</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 15[LIB] size of DH secret exponent: 1020 bits</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 15[TLS] processing TLS Handshake record (4 bytes)</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 15[TLS] received TLS ServerHelloDone handshake (0 bytes)</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 15[TLS] sending TLS ClientKeyExchange handshake (130 bytes)</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 15[TLS] sending TLS Handshake record (134 bytes)</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 15[TLS] sending TLS ChangeCipherSpec record (1 bytes)</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 15[TLS] sending TLS Finished handshake (12 bytes)</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 15[TLS] sending TLS Handshake record (48 bytes)</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 15[TLS] sending EAP_TTLS packet (198 bytes)</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 15[IKE] reinitiating already active tasks</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 15[IKE] IKE_AUTHENTICATE task</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 15[ENC] added payload of type EXTENSIBLE_AUTHENTICATION to message</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 15[ENC] added payload of type EXTENSIBLE_AUTHENTICATION to message</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 15[ENC] generating IKE_AUTH request 5 [ EAP/RES/TTLS ]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 15[ENC] insert payload EXTENSIBLE_AUTHENTICATION to encryption payload</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 15[ENC] generating payload of type HEADER</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 15[ENC] generating HEADER payload finished</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 15[ENC] generating payload of type EXTENSIBLE_AUTHENTICATION</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 15[ENC] generating EXTENSIBLE_AUTHENTICATION payload finished</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 15[ENC] generated content in encryption payload</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 15[ENC] generating payload of type ENCRYPTED</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 15[ENC] generating ENCRYPTED payload finished</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 15[NET] sending packet: from 9.10.109.43[4500] to 9.5.46.51[4500]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 05[NET] sending packet: from 9.10.109.43[4500] to 9.5.46.51[4500]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 01[JOB] next event in 3s 902ms, waiting</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 15[MGR] checkin IKE_SA home[1]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 15[MGR] check-in of IKE_SA successful.</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 06[NET] received packet: from 9.5.46.51[4500] to 9.10.109.43[4500]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 06[ENC] parsing header of message</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 06[ENC] parsing HEADER payload, 140 bytes left</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 06[ENC] parsing HEADER payload finished</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 06[ENC] parsed a IKE_AUTH response</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 06[NET] waiting for data on sockets</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[MGR] checkout IKE_SA by message</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[MGR] IKE_SA home[1] successfully checked out</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[NET] received packet: from 9.5.46.51[4500] to 9.10.109.43[4500]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[ENC] parsing body of message, first payload is ENCRYPTED</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[ENC] starting parsing a ENCRYPTED payload</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[ENC] parsing ENCRYPTED payload, 112 bytes left</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[ENC] parsing ENCRYPTED payload finished</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[ENC] verifying payload of type ENCRYPTED</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[ENC] ENCRYPTED payload verified. Adding to payload list</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[ENC] ENCRYPTED payload found. Stop parsing</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[ENC] process payload of type ENCRYPTED</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[ENC] found an encryption payload</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[ENC] parsing EXTENSIBLE_AUTHENTICATION payload, 73 bytes left</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[ENC] parsing EXTENSIBLE_AUTHENTICATION payload finished</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[ENC] parsed content of encryption payload</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[ENC] insert decrypted payload of type EXTENSIBLE_AUTHENTICATION at end of list</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[ENC] process payload of type EXTENSIBLE_AUTHENTICATION</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[ENC] verifying message structure</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[ENC] found payload of type EXTENSIBLE_AUTHENTICATION</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[ENC] parsed IKE_AUTH response 5 [ EAP/REQ/TTLS ]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[TLS] processing TLS ChangeCipherSpec record (1 bytes)</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[TLS] processing TLS Handshake record (48 bytes)</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[TLS] received TLS Finished handshake (12 bytes)</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[IKE] sending tunneled EAP-TTLS AVP [EAP/RES/ID]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[TLS] sending TLS ApplicationData record (48 bytes)</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[TLS] sending EAP_TTLS packet (53 bytes)</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[IKE] reinitiating already active tasks</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[IKE] IKE_AUTHENTICATE task</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[ENC] added payload of type EXTENSIBLE_AUTHENTICATION to message</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[ENC] added payload of type EXTENSIBLE_AUTHENTICATION to message</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[ENC] generating IKE_AUTH request 6 [ EAP/RES/TTLS ]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[ENC] insert payload EXTENSIBLE_AUTHENTICATION to encryption payload</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[ENC] generating payload of type HEADER</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[ENC] generating HEADER payload finished</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[ENC] generating payload of type EXTENSIBLE_AUTHENTICATION</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[ENC] generating EXTENSIBLE_AUTHENTICATION payload finished</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[ENC] generated content in encryption payload</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[ENC] generating payload of type ENCRYPTED</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[ENC] generating ENCRYPTED payload finished</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[NET] sending packet: from 9.10.109.43[4500] to 9.5.46.51[4500]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 05[NET] sending packet: from 9.10.109.43[4500] to 9.5.46.51[4500]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 01[JOB] next event in 3s 895ms, waiting</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[MGR] checkin IKE_SA home[1]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 16[MGR] check-in of IKE_SA successful.</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 06[NET] received packet: from 9.5.46.51[4500] to 9.10.109.43[4500]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 06[ENC] parsing header of message</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 06[ENC] parsing HEADER payload, 140 bytes left</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 06[ENC] parsing HEADER payload finished</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 06[ENC] parsed a IKE_AUTH response</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 06[NET] waiting for data on sockets</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[MGR] checkout IKE_SA by message</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[MGR] IKE_SA home[1] successfully checked out</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[NET] received packet: from 9.5.46.51[4500] to 9.10.109.43[4500]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[ENC] parsing body of message, first payload is ENCRYPTED</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[ENC] starting parsing a ENCRYPTED payload</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[ENC] parsing ENCRYPTED payload, 112 bytes left</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[ENC] parsing ENCRYPTED payload finished</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[ENC] verifying payload of type ENCRYPTED</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[ENC] ENCRYPTED payload verified. Adding to payload list</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[ENC] ENCRYPTED payload found. Stop parsing</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[ENC] process payload of type ENCRYPTED</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[ENC] found an encryption payload</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[ENC] parsing EXTENSIBLE_AUTHENTICATION payload, 67 bytes left</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[ENC] parsing EXTENSIBLE_AUTHENTICATION payload finished</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[ENC] parsed content of encryption payload</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[ENC] insert decrypted payload of type EXTENSIBLE_AUTHENTICATION at end of list</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[ENC] process payload of type EXTENSIBLE_AUTHENTICATION</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[ENC] verifying message structure</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[ENC] found payload of type EXTENSIBLE_AUTHENTICATION</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[ENC] parsed IKE_AUTH response 6 [ EAP/REQ/TTLS ]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[TLS] processing TLS ApplicationData record (48 bytes)</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[IKE] received tunneled EAP-TTLS AVP [EAP/REQ/TLS]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[IKE] server requested EAP_TLS authentication</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[TLS] disabling ECDSA suites, no backend found</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[TLS] 13 supported TLS cipher suites:</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[TLS] TLS_DHE_RSA_WITH_AES_128_CBC_SHA</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[TLS] TLS_DHE_RSA_WITH_AES_128_CBC_SHA256</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[TLS] TLS_DHE_RSA_WITH_AES_256_CBC_SHA</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[TLS] TLS_DHE_RSA_WITH_AES_256_CBC_SHA256</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[TLS] TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[TLS] TLS_RSA_WITH_AES_128_CBC_SHA</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[TLS] TLS_RSA_WITH_AES_128_CBC_SHA256 </font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[TLS] TLS_RSA_WITH_AES_256_CBC_SHA</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[TLS] TLS_RSA_WITH_AES_256_CBC_SHA256</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[TLS] TLS_RSA_WITH_3DES_EDE_CBC_SHA</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[TLS] TLS_RSA_WITH_NULL_SHA</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[TLS] TLS_RSA_WITH_NULL_SHA256</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[TLS] TLS_RSA_WITH_NULL_MD5</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[TLS] sending TLS ClientHello handshake (83 bytes)</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[TLS] sending TLS Handshake record (87 bytes)</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[TLS] sending EAP_TLS packet (92 bytes)</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[IKE] sending tunneled EAP-TTLS AVP [EAP/RES/TLS]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[TLS] sending TLS ApplicationData record (144 bytes)</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[TLS] sending EAP_TTLS packet (149 bytes)</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[IKE] reinitiating already active tasks</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[IKE] IKE_AUTHENTICATE task</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[ENC] added payload of type EXTENSIBLE_AUTHENTICATION to message</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[ENC] added payload of type EXTENSIBLE_AUTHENTICATION to message</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[ENC] generating IKE_AUTH request 7 [ EAP/RES/TTLS ]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[ENC] insert payload EXTENSIBLE_AUTHENTICATION to encryption payload</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[ENC] generating payload of type HEADER</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[ENC] generating HEADER payload finished</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[ENC] generating payload of type EXTENSIBLE_AUTHENTICATION</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[ENC] generating EXTENSIBLE_AUTHENTICATION payload finished</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[ENC] generated content in encryption payload</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[ENC] generating payload of type ENCRYPTED</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[ENC] generating ENCRYPTED payload finished</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[NET] sending packet: from 9.10.109.43[4500] to 9.5.46.51[4500]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 05[NET] sending packet: from 9.10.109.43[4500] to 9.5.46.51[4500]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[MGR] checkin IKE_SA home[1]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 01[JOB] next event in 3s 889ms, waiting</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 08[MGR] check-in of IKE_SA successful.</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 06[NET] received packet: from 9.5.46.51[4500] to 9.10.109.43[4500]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 06[ENC] parsing header of message</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 06[ENC] parsing HEADER payload, 1100 bytes left</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 06[ENC] parsing HEADER payload finished</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 06[ENC] parsed a IKE_AUTH response</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[MGR] checkout IKE_SA by message</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[MGR] IKE_SA home[1] successfully checked out</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[NET] received packet: from 9.5.46.51[4500] to 9.10.109.43[4500]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[ENC] parsing body of message, first payload is ENCRYPTED</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[ENC] starting parsing a ENCRYPTED payload</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[ENC] parsing ENCRYPTED payload, 1072 bytes left</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[ENC] parsing ENCRYPTED payload finished</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[ENC] verifying payload of type ENCRYPTED</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[ENC] ENCRYPTED payload verified. Adding to payload list</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[ENC] ENCRYPTED payload found. Stop parsing</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[ENC] process payload of type ENCRYPTED</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[ENC] found an encryption payload</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[ENC] parsing EXTENSIBLE_AUTHENTICATION payload, 1028 bytes left</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[ENC] parsing EXTENSIBLE_AUTHENTICATION payload finished</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[ENC] parsed content of encryption payload</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[ENC] insert decrypted payload of type EXTENSIBLE_AUTHENTICATION at end of list</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[ENC] process payload of type EXTENSIBLE_AUTHENTICATION</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[ENC] verifying message structure</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[ENC] found payload of type EXTENSIBLE_AUTHENTICATION</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[ENC] parsed IKE_AUTH response 7 [ EAP/REQ/TTLS ]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[TLS] buffering 1014 bytes, 1014 bytes of 1109 byte TLS record received</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[TLS] sending EAP_TTLS acknowledgement packet</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[IKE] reinitiating already active tasks</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[IKE] IKE_AUTHENTICATE task</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[ENC] added payload of type EXTENSIBLE_AUTHENTICATION to message</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[ENC] added payload of type EXTENSIBLE_AUTHENTICATION to message</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 06[NET] waiting for data on sockets</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[ENC] generating IKE_AUTH request 8 [ EAP/RES/TTLS ]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[ENC] insert payload EXTENSIBLE_AUTHENTICATION to encryption payload</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[ENC] generating payload of type HEADER</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[ENC] generating HEADER payload finished</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[ENC] generating payload of type EXTENSIBLE_AUTHENTICATION</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[ENC] generating ENCRYPTED payload finished</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[NET] sending packet: from 9.10.109.43[4500] to 9.5.46.51[4500]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 05[NET] sending packet: from 9.10.109.43[4500] to 9.5.46.51[4500]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[MGR] checkin IKE_SA home[1]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 07[MGR] check-in of IKE_SA successful.</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 01[JOB] next event in 3s 873ms, waiting</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 06[NET] received packet: from 9.5.46.51[4500] to 9.10.109.43[4500]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 06[ENC] parsing header of message</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 06[ENC] parsing HEADER payload, 172 bytes left</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 06[ENC] parsing HEADER payload finished</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 06[ENC] parsed a IKE_AUTH response</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 06[NET] waiting for data on sockets</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[MGR] checkout IKE_SA by message</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[MGR] IKE_SA home[1] successfully checked out</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[NET] received packet: from 9.5.46.51[4500] to 9.10.109.43[4500]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[ENC] parsing body of message, first payload is ENCRYPTED</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[ENC] starting parsing a ENCRYPTED payload</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[ENC] parsing ENCRYPTED payload, 144 bytes left</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[ENC] parsing ENCRYPTED payload finished</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[ENC] verifying payload of type ENCRYPTED</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[ENC] ENCRYPTED payload verified. Adding to payload list</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[ENC] ENCRYPTED payload found. Stop parsing</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[ENC] process payload of type ENCRYPTED</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[ENC] found an encryption payload</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[ENC] parsing EXTENSIBLE_AUTHENTICATION payload, 109 bytes left</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[ENC] parsing EXTENSIBLE_AUTHENTICATION payload finished</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[ENC] parsed content of encryption payload</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[ENC] insert decrypted payload of type EXTENSIBLE_AUTHENTICATION at end of list</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[ENC] process payload of type EXTENSIBLE_AUTHENTICATION</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[ENC] verifying message structure</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[ENC] found payload of type EXTENSIBLE_AUTHENTICATION</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[ENC] parsed IKE_AUTH response 8 [ EAP/REQ/TTLS ]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[TLS] buffering 95 bytes, 1109 bytes of 1109 byte TLS record received</font><br>
<font size="2" face="sans-s
erif">Aug 25 20:44:59 10[TLS] processing buffered TLS ApplicationData record (1104 bytes)</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[IKE] received tunneled EAP-TTLS AVPs [EAP/REQ/TLS]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[IKE] server requested EAP_TLS authentication</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[TLS] disabling ECDSA suites, no backend found</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[TLS] 13 supported TLS cipher suites:</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[TLS] TLS_DHE_RSA_WITH_AES_128_CBC_SHA</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[TLS] TLS_DHE_RSA_WITH_AES_128_CBC_SHA256</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[TLS] TLS_DHE_RSA_WITH_AES_256_CBC_SHA</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[TLS] TLS_DHE_RSA_WITH_AES_256_CBC_SHA256</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[TLS] TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[TLS] TLS_RSA_WITH_AES_128_CBC_SHA</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[TLS] TLS_RSA_WITH_AES_128_CBC_SHA256 </font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[TLS] TLS_RSA_WITH_AES_256_CBC_SHA</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[TLS] TLS_RSA_WITH_AES_256_CBC_SHA256</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[TLS] TLS_RSA_WITH_3DES_EDE_CBC_SHA</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[TLS] TLS_RSA_WITH_NULL_SHA</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[TLS] TLS_RSA_WITH_NULL_SHA256</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[TLS] TLS_RSA_WITH_NULL_MD5</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[TLS] processing TLS Handshake record (42 bytes)</font><br>
<br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[TLS] received TLS ServerHello handshake (38 bytes)</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[TLS] TLS ServerHello not expected in current state</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[TLS] buffering 967 bytes, 967 bytes of 1891 byte TLS record received</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[TLS] sending fatal TLS alert 'unexpected message'</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[TLS] sending TLS Alert record (2 bytes)</font><br>
<br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[TLS] sending EAP_TLS packet (7 bytes)</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[IKE] sending tunneled EAP-TTLS AVP [EAP/RES/TLS]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[TLS] sending TLS ApplicationData record (64 bytes)</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[TLS] sending EAP_TTLS packet (69 bytes)</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[IKE] reinitiating already active tasks</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[IKE] IKE_AUTHENTICATE task</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[ENC] added payload of type EXTENSIBLE_AUTHENTICATION to message</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[ENC] added payload of type EXTENSIBLE_AUTHENTICATION to message</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[ENC] generating IKE_AUTH request 9 [ EAP/RES/TTLS ]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[ENC] insert payload EXTENSIBLE_AUTHENTICATION to encryption payload</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[ENC] generating payload of type HEADER</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[ENC] generating HEADER payload finished</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[ENC] generating payload of type EXTENSIBLE_AUTHENTICATION</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[ENC] generating EXTENSIBLE_AUTHENTICATION payload finished</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[ENC] generated content in encryption payload</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[ENC] generating payload of type ENCRYPTED</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[ENC] generating ENCRYPTED payload finished</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[NET] sending packet: from 9.10.109.43[4500] to 9.5.46.51[4500]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 01[JOB] next event in 3s 865ms, waiting</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 05[NET] sending packet: from 9.10.109.43[4500] to 9.5.46.51[4500]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[MGR] checkin IKE_SA home[1]</font><br>
<font size="2" face="sans-serif">Aug 25 20:44:59 10[MGR] check-in of IKE_SA successful.</font><br>
<font size="2" face="sans-serif">Aug 25 20:45:00 06[NET] received packet: from 9.5.46.51[4500] to 9.10.109.43[4500]</font><br>
<font size="2" face="sans-serif">Aug 25 20:45:00 06[ENC] parsing header of message</font><br>
<font size="2" face="sans-serif">Aug 25 20:45:00 06[ENC] parsing HEADER payload, 76 bytes left</font><br>
<font size="2" face="sans-serif">Aug 25 20:45:00 06[ENC] parsing HEADER payload finished</font><br>
<font size="2" face="sans-serif">Aug 25 20:45:00 06[ENC] parsed a IKE_AUTH response</font><br>
<font size="2" face="sans-serif">Aug 25 20:45:00 06[NET] waiting for data on sockets</font><br>
<font size="2" face="sans-serif">Aug 25 20:45:00 09[MGR] checkout IKE_SA by message</font><br>
<font size="2" face="sans-serif">Aug 25 20:45:00 09[MGR] IKE_SA home[1] successfully checked out</font><br>
<font size="2" face="sans-serif">Aug 25 20:45:00 09[NET] received packet: from 9.5.46.51[4500] to 9.10.109.43[4500]</font><br>
<font size="2" face="sans-serif">Aug 25 20:45:00 09[ENC] parsing body of message, first payload is ENCRYPTED</font><br>
<font size="2" face="sans-serif">Aug 25 20:45:00 09[ENC] starting parsing a ENCRYPTED payload</font><br>
<font size="2" face="sans-serif">Aug 25 20:45:00 09[ENC] parsing ENCRYPTED payload, 48 bytes left</font><br>
<font size="2" face="sans-serif">Aug 25 20:45:00 09[ENC] parsing ENCRYPTED payload finished</font><br>
<font size="2" face="sans-serif">Aug 25 20:45:00 09[ENC] verifying payload of type ENCRYPTED</font><br>
<font size="2" face="sans-serif">Aug 25 20:45:00 09[ENC] ENCRYPTED payload verified. Adding to payload list</font><br>
<font size="2" face="sans-serif">Aug 25 20:45:00 09[ENC] ENCRYPTED payload found. Stop parsing</font><br>
<font size="2" face="sans-serif">Aug 25 20:45:00 09[ENC] process payload of type ENCRYPTED</font><br>
<font size="2" face="sans-serif">Aug 25 20:45:00 09[ENC] found an encryption payload</font><br>
<font size="2" face="sans-serif">Aug 25 20:45:00 09[ENC] parsing EXTENSIBLE_AUTHENTICATION payload, 8 bytes left</font><br>
<font size="2" face="sans-serif">Aug 25 20:45:00 09[ENC] parsing EXTENSIBLE_AUTHENTICATION payload finished</font><br>
<font size="2" face="sans-serif">Aug 25 20:45:00 09[ENC] parsed content of encryption payload</font><br>
<font size="2" face="sans-serif">Aug 25 20:45:00 09[ENC] insert decrypted payload of type EXTENSIBLE_AUTHENTICATION at end of list</font><br>
<font size="2" face="sans-serif">Aug 25 20:45:00 09[ENC] process payload of type EXTENSIBLE_AUTHENTICATION</font><br>
<font size="2" face="sans-serif">Aug 25 20:45:00 09[ENC] verifying message structure</font><br>
<font size="2" face="sans-serif">Aug 25 20:45:00 09[ENC] found payload of type EXTENSIBLE_AUTHENTICATION</font><br>
<font size="2" face="sans-serif">Aug 25 20:45:00 09[ENC] parsed IKE_AUTH response 9 [ EAP/FAIL ]</font><br>
<font size="2" face="sans-serif">Aug 25 20:45:00 09[IKE] received EAP_FAILURE, EAP authentication failed</font><br>
<font size="2" face="sans-serif">Aug 25 20:45:00 09[KNL] deleting SAD entry with SPI c3a35831</font><br>
<font size="2" face="sans-serif">Aug 25 20:45:00 09[KNL] deleted SAD entry with SPI c3a35831</font><br>
<font size="2" face="sans-serif">Aug 25 20:45:00 09[MGR] checkin and destroy IKE_SA home[1]</font><br>
<font size="2" face="sans-serif">Aug 25 20:45:00 09[IKE] IKE_SA home[1] state change: CONNECTING => DESTROYING</font><br>
<font size="2" face="sans-serif">------------------------------------------------------------------------------------</font><br>
<br>
<br>
<font size="2" face="sans-serif">I've seen posts on other forums indicating that the client has a older SSL implementation. However, I've rebuilt openssl and strongswan on both the client and server (more than once) and I'm still hitting it. Any ideas on what I'm doing wrong?</font><br>
<font size="2" face="sans-serif"> </font><br>
<br>
<font size="2" face="sans-serif"><br>
Terry Hennessy<br>
Dept MR6 : IBM i Security Development<br>
IBM Rochester, MN <br>
(507) 253-4448<br>
</font></body></html>