<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:'
panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">Hello,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Here is some more info, ip xrfrm state and policy. I see see two sets of SA’s. Please provide you invaluable feedback.. what causes this state and any suggested tunning.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">on 182 – ip xfrm state<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">10.204.74.182 10.205.232.89<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> esp mode=transport spi=3433950253(0xccadec2d) reqid=2(0x00000002)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> E: aes-cbc 3e1a86db 886b1bf1 d0f2e614 8fa5c170<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> A: hmac-sha1 208a9219 9f5ec0ea d68633ff 184a6747 de79a18e<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> seq=0x00000000 replay=32 flags=0x00000000 state=mature<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> created: Jun 18 22:27:24 2012 current: Jun 18 22:49:03 2012<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> diff: 1299(s) hard: 3600(s) soft: 2714(s)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> last: Jun 18 22:27:25 2012 hard: 0(s) soft: 0(s)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> current: 551520(bytes) hard: 0(bytes) soft: 0(bytes)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> allocated: 5300 hard: 0 soft: 0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> sadb_seq=2 pid=740 refcnt=0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">10.204.74.182 10.205.232.89<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> esp mode=transport spi=3437636052(0xcce629d4) reqid=3(0x00000003)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> E: aes-cbc 41e378fb a653e524 a29d32cc d548f422<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> A: hmac-sha1 28156309 8ca4b124 e04d18b1 e1dc6c3c efe835af<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> seq=0x00000000 replay=32 flags=0x00000000 state=mature<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> created: Jun 18 22:23:40 2012 current: Jun 18 22:49:03 2012<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> diff: 1523(s) hard: 3600(s) soft: 2824(s)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> last: hard: 0(s) soft: 0(s)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> current: 0(bytes) hard: 0(bytes) soft: 0(bytes)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> allocated: 0 hard: 0 soft: 0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> sadb_seq=1 pid=740 refcnt=0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> 10.205.232.89 10.204.74.182<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> esp mode=transport spi=3260090056(0xc25106c8) reqid=2(0x00000002)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> E: aes-cbc 56bcc429 43593aa5 495a3cb0 17a9ca54<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> A: hmac-sha1 82fd319f abeb8f75 8b75324f bcfd1171 9b41d32b<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> seq=0x00000000 replay=32 flags=0x00000000 state=mature<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> created: Jun 18 22:27:24 2012 current: Jun 18 22:56:22 2012<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> diff: 1738(s) hard: 3600(s) soft: 2966(s)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> last: hard: 0(s) soft: 0(s)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> current: 0(bytes) hard: 0(bytes) soft: 0(bytes)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> allocated: 0 hard: 0 soft: 0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> sadb_seq=9 pid=15515 refcnt=0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">10.205.232.89 10.204.74.182<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> esp mode=transport spi=3474396115(0xcf1713d3) reqid=3(0x00000003)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> E: aes-cbc 05a2ab20 06ad0e31 8b0b8fc4 b84da731<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> A: hmac-sha1 81db062d be36b4a4 ff0a43a2 ccf14161 f33d6323<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> seq=0x00000000 replay=32 flags=0x00000000 state=mature<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> created: Jun 18 22:23:40 2012 current: Jun 18 22:56:22 2012<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> diff: 1962(s) hard: 3600(s) soft: 2825(s)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> last: Jun 18 22:23:41 2012 hard: 0(s) soft: 0(s)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> current: 278920(bytes) hard: 0(bytes) soft: 0(bytes)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> allocated: 6952 hard: 0 soft: 0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> sadb_seq=8 pid=15515 refcnt=0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> --<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">on 89 – ip xfrm state<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">10.205.232.89 10.204.74.182<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> esp mode=transport spi=3260090056(0xc25106c8) reqid=3(0x00000003)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> E: aes-cbc 56bcc429 43593aa5 495a3cb0 17a9ca54<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> A: hmac-sha1 82fd319f abeb8f75 8b75324f bcfd1171 9b41d32b<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> seq=0x00000000 replay=32 flags=0x00000000 state=mature<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> created: Jun 18 22:27:24 2012 current: Jun 18 22:46:35 2012<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> diff: 1151(s) hard: 3600(s) soft: 3041(s)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> last: hard: 0(s) soft: 0(s)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> current: 0(bytes) hard: 0(bytes) soft: 0(bytes)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> allocated: 0 hard: 0 soft: 0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> sadb_seq=20 pid=20818 refcnt=0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">10.205.232.89 10.204.74.182<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> esp mode=transport spi=3474396115(0xcf1713d3) reqid=2(0x00000002)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> E: aes-cbc 05a2ab20 06ad0e31 8b0b8fc4 b84da731<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> A: hmac-sha1 81db062d be36b4a4 ff0a43a2 ccf14161 f33d6323<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> seq=0x00000000 replay=32 flags=0x00000000 state=mature<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> created: Jun 18 22:23:40 2012 current: Jun 18 22:46:35 2012<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> diff: 1375(s) hard: 3600(s) soft: 2995(s)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> last: Jun 18 22:23:41 2012 hard: 0(s) soft: 0(s)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> current: 508536(bytes) hard: 0(bytes) soft: 0(bytes)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> allocated: 4879 hard: 0 soft: 0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> sadb_seq=19 pid=20818 refcnt=0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> 0.204.74.182 10.205.232.89<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> esp mode=transport spi=3433950253(0xccadec2d) reqid=3(0x00000003)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> E: aes-cbc 3e1a86db 886b1bf1 d0f2e614 8fa5c170<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> A: hmac-sha1 208a9219 9f5ec0ea d68633ff 184a6747 de79a18e<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> seq=0x00000000 replay=32 flags=0x00000000 state=mature<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> created: Jun 18 22:27:24 2012 current: Jun 18 22:56:13 2012<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> diff: 1729(s) hard: 3600(s) soft: 2657(s)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> last: Jun 18 22:27:25 2012 hard: 0(s) soft: 0(s)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> current: 282400(bytes) hard: 0(bytes) soft: 0(bytes)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> allocated: 7054 hard: 0 soft: 0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> sadb_seq=8 pid=16192 refcnt=0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">10.204.74.182 10.205.232.89<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> esp mode=transport spi=3437636052(0xcce629d4) reqid=2(0x00000002)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> E: aes-cbc 41e378fb a653e524 a29d32cc d548f422<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> A: hmac-sha1 28156309 8ca4b124 e04d18b1 e1dc6c3c efe835af<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> seq=0x00000000 replay=32 flags=0x00000000 state=mature<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> created: Jun 18 22:23:40 2012 current: Jun 18 22:56:13 2012<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> diff: 1953(s) hard: 3600(s) soft: 3039(s)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> last: hard: 0(s) soft: 0(s)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> current: 0(bytes) hard: 0(bytes) soft: 0(bytes)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> allocated: 0 hard: 0 soft: 0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> sadb_seq=7 pid=16192 refcnt=0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">on 182 – ip xfrm policy<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">src 10.205.232.89/32 dst 10.204.74.182/32<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> dir in priority 1795<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> tmpl src 0.0.0.0 dst 0.0.0.0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> proto esp reqid 2 mode transport<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">src 10.204.74.182/32 dst 10.205.232.89/32<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> dir out priority 1795<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> tmpl src 0.0.0.0 dst 0.0.0.0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> proto esp reqid 2 mode transport<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">on 89 – ip xfrm policy<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">src 10.204.74.182/32 dst 10.205.232.89/32<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> dir in priority 1795<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> tmpl src 0.0.0.0 dst 0.0.0.0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> proto esp reqid 2 mode transport<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">src 10.205.232.89/32 dst 10.204.74.182/32<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> dir out priority 1795<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> tmpl src 0.0.0.0 dst 0.0.0.0<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"> proto esp reqid 2 mode transport<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> users-bounces+sanjay.shukla=ipc.com@lists.strongswan.org [mailto:users-bounces+sanjay.shukla=ipc.com@lists.strongswan.org]
<b>On Behalf Of </b>Shukla, Sanjay<br>
<b>Sent:</b> Monday, June 18, 2012 6:51 PM<br>
<b>To:</b> users@lists.strongswan.org<br>
<b>Subject:</b> [strongSwan] ipsec status shows connection is established but ping does not work / stuck<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">ipsec status shows connection is established but ping does not work / stuck, how can I debug this further ? how do I determine the problem here ?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">-sanjay<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">[root@ffd-ipsec-180 ~]# ipsec statusall<o:p></o:p></p>
<p class="MsoNormal">Status of IKEv2 charon daemon (strongSwan 4.6.2):<o:p></o:p></p>
<p class="MsoNormal"> uptime: 85 minutes, since Jun 18 17:24:52 2012<o:p></o:p></p>
<p class="MsoNormal"> malloc: sbrk 622592, mmap 0, used 439696, free 182896<o:p></o:p></p>
<p class="MsoNormal"> worker threads: 8 of 16 idle, 7/1/0/0 working, job queue: 0/0/0/0, scheduled: 194<o:p></o:p></p>
<p class="MsoNormal"> loaded plugins: aes des sha1 sha2 md5 random x509 revocation constraints pubkey pkcs1 pkcs8 pgp pem fips-prf gmp xcbc hmac attr kernel-netlink resolve socket-raw stroke updown<o:p></o:p></p>
<p class="MsoNormal">Listening IP addresses:<o:p></o:p></p>
<p class="MsoNormal"> 10.204.74.180<o:p></o:p></p>
<p class="MsoNormal"> 10.204.74.182<o:p></o:p></p>
<p class="MsoNormal">Connections:<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.205.232.89: 10.204.74.182...10.205.232.89, dpddelay=30s<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.205.232.89: local: [10.204.74.182] uses public key authentication<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.205.232.89: cert: "C=US, ST=CT, L=Fairfield, O=IPC, CN=10.204.74.182"<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.205.232.89: remote: [%any] uses any authentication<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.205.232.89: child: dynamic === dynamic TRANSPORT, dpdaction=restart<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.205.232.89[5]: ESTABLISHED 79 minutes ago, 10.204.74.182[10.204.74.182]...10.205.232.89[10.205.232.89]<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.205.232.89[5]: IKE SPIs: 6fdd015c0d95375a_i* 8643abee4f1f4cf1_r, rekeying in 83 minutes<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.205.232.89[5]: IKE proposal: AES_CBC_128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.205.232.89{2}: INSTALLED, TRANSPORT, ESP SPIs: c5bd8da5_i cb1dc544_o<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.205.232.89{2}: AES_CBC_128/HMAC_SHA1_96, 0 bytes_i, 963376 bytes_o (0s ago), rekeying in 12 minutes<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.205.232.89{2}: 10.204.74.182/32 === 10.205.232.89/32<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.205.232.89[8]: ESTABLISHED 79 minutes ago, 10.204.74.182[10.204.74.182]...10.205.232.89[10.205.232.89]<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.205.232.89[8]: IKE SPIs: efcd2d4ff0d6fa8a_i b7ea9e91ab8e70f8_r*, rekeying in 87 minutes<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.205.232.89[8]: IKE proposal: AES_CBC_128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.205.232.89{3}: INSTALLED, TRANSPORT, ESP SPIs: c2e4e746_i cd9b6cd6_o<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.205.232.89{3}: AES_CBC_128/HMAC_SHA1_96, 47432 bytes_i (1s ago), 0 bytes_o, rekeying in 13 minutes<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.205.232.89{3}: 10.204.74.182/32 === 10.205.232.89/32<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.204.74.190[89]: ESTABLISHED 2 minutes ago, 10.204.74.182[10.204.74.182]...10.204.74.190[10.204.74.190]<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.204.74.190[89]: IKE SPIs: ed04d602820d44e9_i* 16a268916130f735_r, rekeying in 2 hours<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.204.74.190[89]: IKE proposal: AES_CBC_128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048<o:p></o:p></p>
<div style="border:none;border-bottom:solid windowtext 1.0pt;padding:0in 0in 1.0pt 0in">
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">[root@mh-ums-sec1 ~]# ipsec statusall<o:p></o:p></p>
<p class="MsoNormal">Status of IKEv2 charon daemon (strongSwan 4.6.2):<o:p></o:p></p>
<p class="MsoNormal"> uptime: 85 minutes, since Jun 18 17:24:52 2012<o:p></o:p></p>
<p class="MsoNormal"> malloc: sbrk 622592, mmap 0, used 453216, free 169376<o:p></o:p></p>
<p class="MsoNormal"> worker threads: 8 of 16 idle, 7/1/0/0 working, job queue: 0/0/0/0, scheduled: 199<o:p></o:p></p>
<p class="MsoNormal"> loaded plugins: aes des sha1 sha2 md5 random x509 revocation constraints pubkey pkcs1 pkcs8 pgp pem fips-prf gmp xcbc hmac attr kernel-netlink resolve socket-raw stroke updown<o:p></o:p></p>
<p class="MsoNormal">Listening IP addresses:<o:p></o:p></p>
<p class="MsoNormal"> 10.205.232.90<o:p></o:p></p>
<p class="MsoNormal"> 10.205.232.89<o:p></o:p></p>
<p class="MsoNormal">Connections:<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.204.74.182: 10.205.232.89...10.204.74.182, dpddelay=30s<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.204.74.182: local: [10.205.232.89] uses public key authentication<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.204.74.182: cert: "C=US, ST=CT, L=Fairfield, O=IPC, CN=10.205.232.89"<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.204.74.182: remote: [%any] uses any authentication<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.204.74.182: child: dynamic === dynamic TRANSPORT, dpdaction=restart<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.204.74.182[6]: ESTABLISHED 81 minutes ago, 10.205.232.89[10.205.232.89]...10.204.74.182[10.204.74.182]<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.204.74.182[6]: IKE SPIs: 6fdd015c0d95375a_i 8643abee4f1f4cf1_r*, rekeying in 81 minutes<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.204.74.182[6]: IKE proposal: AES_CBC_128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.204.74.182{3}: INSTALLED, TRANSPORT, ESP SPIs: cb1dc544_i c5bd8da5_o<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.204.74.182{3}: AES_CBC_128/HMAC_SHA1_96, 383928 bytes_i (0s ago), 0 bytes_o, rekeying in 9 minutes<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.204.74.182{3}: 10.205.232.89/32 === 10.204.74.182/32<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.204.74.182[5]: ESTABLISHED 81 minutes ago, 10.205.232.89[10.205.232.89]...10.204.74.182[10.204.74.182]<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.204.74.182[5]: IKE SPIs: efcd2d4ff0d6fa8a_i* b7ea9e91ab8e70f8_r, rekeying in 89 minutes<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.204.74.182[5]: IKE proposal: AES_CBC_128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.204.74.182{2}: INSTALLED, TRANSPORT, ESP SPIs: cd9b6cd6_i c2e4e746_o<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.204.74.182{2}: AES_CBC_128/HMAC_SHA1_96, 0 bytes_i, 124288 bytes_o (1s ago), rekeying in 3 minutes<o:p></o:p></p>
<p class="MsoNormal">VIP_VIP_10.204.74.182{2}: 10.205.232.89/32 === 10.204.74.182/32<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">--<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">[root@mh-ums-sec1 ~]# !pi<o:p></o:p></p>
<p class="MsoNormal">ping -I10.205.232.89 10.204.74.182<o:p></o:p></p>
<p class="MsoNormal">PING 10.204.74.182 (10.204.74.182) from 10.205.232.89 : 56(84) bytes of data.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">--- 10.204.74.182 ping statistics ---<o:p></o:p></p>
<p class="MsoNormal">18 packets transmitted, 0 received, 100% packet loss, time 17003ms<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">[root@ffd-ipsec-180 ~]# !pi<o:p></o:p></p>
<p class="MsoNormal">ping -I10.204.74.182 10.205.232.89<o:p></o:p></p>
<p class="MsoNormal">PING 10.205.232.89 (10.205.232.89) from 10.204.74.182 : 56(84) bytes of data.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">--- 10.205.232.89 ping statistics ---<o:p></o:p></p>
<p class="MsoNormal">18 packets transmitted, 0 received, 100% packet loss, time 17002ms<o:p></o:p></p>
<div style="border:none;border-bottom:solid windowtext 1.0pt;padding:0in 0in 1.0pt 0in">
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p><i><span style="font-size:7.5pt;font-family:"&apos","serif";color:green"><img width="30" height="26" id="_x0000_i1025" src="cid:image001.jpg@01CD4DFF.C4B18560"><em><span style="font-family:"&apos","serif"">Please consider the environment before printing
this email.</span></em></span></i><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif""><o:p> </o:p></span></p>
<p><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:gray">------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------<o:p></o:p></span></p>
<p><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:gray">DISCLAIMER: This e-mail may contain information that is confidential, privileged or otherwise protected from disclosure. If you are not an intended recipient of this e-mail, do not
duplicate or redistribute it by any means. Please delete it and any attachments and notify the sender that you have received it in error. Unintended recipients are prohibited from taking action on the basis of information in this e-mail.E-mail messages may
contain computer viruses or other defects, may not be accurately replicated on other systems, or may be intercepted, deleted or interfered with without the knowledge of the sender or the intended recipient. If you are not comfortable with the risks associated
with e-mail messages, you may decide not to use e-mail to communicate with IPC. IPC reserves the right, to the extent and under circumstances permitted by applicable law, to retain, monitor and intercept e-mail messages to and from its systems.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Times New Roman","serif""><o:p> </o:p></span></p>
</div>
</body>
</html>