<div dir="ltr">Trying again with a trimmed log because the message not posted quoting long size... apologies...<div><div class="gmail_quote"><div dir="ltr"><br><div><div class="gmail_quote"><div dir="ltr"><table width="100%" cellpadding="12" cellspacing="0" border="0" style="font-size:13px;font-family:arial,sans-serif">
<tbody><tr><td><font size="-1"><div dir="ltr"><div><div class="h5">
Hi Guys,<div><br></div><div>
I am trying to get Adtran Netvanta 5430 router connect to Strongswan VPN 5.0.1 running in Amazon VPC using certificate based authentication but am facing issues because during Quick Mode negotiation, Strongswan is deleting the SAD entry while the SA negotiated in phase 1 continues to be up. However, Adtran thinks that both IKE and IPSec are up. It is a net-to-net scenario.</div>
<div><br></div><div>Can you guys please take a look and help with what is going on? I suspect that after Strongswan responds with a quick mode message with the selected proposal, it didn't like what I saw and started tearing down. After that, anytime Adtran sends packets to Strongswan (because it continues to think everything is ok), I see xfrmInNoStates counter go up in XFRM statistics (attached below).</div>
<div><br></div><div>Really appreciate your help.</div><div><br></div><div>Thanks,</div><div>Bharath Kumar</div><div><br></div><div><br></div><div>ipsec.conf (on Strongswan)</div><div>=================================================</div>
<div><div># ipsec.conf - strongSwan IPsec configuration file</div><div><br></div><div># basic configuration</div><div><br></div><div>config setup</div><div> # charondebug = "dmn 2, mgr 2, ike 2, chd 2, job 2, cfg 2, knl 2, net 2, lib 2"</div>
<div> charondebug = "dmn 3, mgr 3, ike 3, chd 3, job 3, cfg 3, knl 3, net 2, lib 3"</div><div> # nat_traversal="yes"</div><div> # strictcrlpolicy=yes</div><div> # uniqueids = no</div>
<div><br></div><div># Add connections here.</div><div><br></div><div>conn %default</div><div> ikelifetime=480m</div><div> keylife=480m</div><div> rekeymargin=3m</div><div> keyingtries=1</div><div>
#keyexchange=ikev1</div><div><br></div><div>conn adtran-cert</div><div> auto=route</div><div> authby=pubkey</div><div> left=%defaultroute</div><div> leftcert=vpngwCert.pem</div><div> leftsubnet=<a href="http://0.0.0.0/0" style="text-decoration:initial" target="_blank">0.0.0.0/0</a></div>
<div> right=107.0.5.22<br></div><div> rightcert=Adtran-VPN.pem</div><div> rightsubnet=<a href="http://172.17.0.0/16" style="text-decoration:initial" target="_blank">172.17.0.0/16</a></div><div>===============================================</div>
</div><div><br></div><div><br></div><div>ip xfrm policy</div><div>==========</div><div><br></div><div><div>src <a href="http://172.17.0.0/16" style="text-decoration:initial" target="_blank">172.17.0.0/16</a> dst <a href="http://0.0.0.0/0" style="text-decoration:initial" target="_blank">0.0.0.0/0</a> </div>
<div><span style="white-space:pre-wrap"> </span>dir fwd priority 4035 ptype main </div><div><span style="white-space:pre-wrap"> </span>tmpl src 107.0.5.22 dst 10.0.0.139</div><div><span style="white-space:pre-wrap"> </span>proto esp reqid 1 mode tunnel</div>
<div>src <a href="http://172.17.0.0/16" style="text-decoration:initial" target="_blank">172.17.0.0/16</a> dst <a href="http://0.0.0.0/0" style="text-decoration:initial" target="_blank">0.0.0.0/0</a> </div><div><span style="white-space:pre-wrap"> </span>dir in priority 4035 ptype main </div>
<div><span style="white-space:pre-wrap"> </span>tmpl src 107.0.5.22 dst 10.0.0.139</div><div><span style="white-space:pre-wrap"> </span>proto esp reqid 1 mode tunnel</div><div>src <a href="http://0.0.0.0/0" style="text-decoration:initial" target="_blank">0.0.0.0/0</a> dst <a href="http://172.17.0.0/16" style="text-decoration:initial" target="_blank">172.17.0.0/16</a> </div>
<div><span style="white-space:pre-wrap"> </span>dir out priority 4035 ptype main </div><div><span style="white-space:pre-wrap"> </span>tmpl src 10.0.0.139 dst 107.0.5.22</div><div><span style="white-space:pre-wrap"> </span>proto esp reqid 1 mode tunnel</div>
<div>src <a href="http://0.0.0.0/0" style="text-decoration:initial" target="_blank">0.0.0.0/0</a> dst <a href="http://0.0.0.0/0" style="text-decoration:initial" target="_blank">0.0.0.0/0</a> </div><div><span style="white-space:pre-wrap"> </span>dir 3 priority 0 ptype main </div>
<div>src <a href="http://0.0.0.0/0" style="text-decoration:initial" target="_blank">0.0.0.0/0</a> dst <a href="http://0.0.0.0/0" style="text-decoration:initial" target="_blank">0.0.0.0/0</a> </div><div><span style="white-space:pre-wrap"> </span>dir 4 priority 0 ptype main </div>
<div>src <a href="http://0.0.0.0/0" style="text-decoration:initial" target="_blank">0.0.0.0/0</a> dst <a href="http://0.0.0.0/0" style="text-decoration:initial" target="_blank">0.0.0.0/0</a> </div><div><span style="white-space:pre-wrap"> </span>dir 3 priority 0 ptype main </div>
<div>src <a href="http://0.0.0.0/0" style="text-decoration:initial" target="_blank">0.0.0.0/0</a> dst <a href="http://0.0.0.0/0" style="text-decoration:initial" target="_blank">0.0.0.0/0</a> </div><div><span style="white-space:pre-wrap"> </span>dir 4 priority 0 ptype main </div>
<div>src ::/0 dst ::/0 </div><div><span style="white-space:pre-wrap"> </span>dir 3 priority 0 ptype main </div><div>src ::/0 dst ::/0 </div><div><span style="white-space:pre-wrap"> </span>dir 4 priority 0 ptype main </div>
<div>src ::/0 dst ::/0 </div><div><span style="white-space:pre-wrap"> </span>dir 3 priority 0 ptype main </div><div>src ::/0 dst ::/0 </div><div><span style="white-space:pre-wrap"> </span>dir 4 priority 0 ptype main </div>
<div><br></div><div>=============================</div><div><br></div><div><br></div><div>$ ip xfrm state</div><div> <empty></div><div><br></div></div><div>==============================</div><div><br></div><div>
<div>$cat /proc/net/xfrm_stat </div><div><br></div><div>XfrmInError <span style="white-space:pre-wrap"> </span>0</div><div>XfrmInBufferError <span style="white-space:pre-wrap"> </span>0</div><div>XfrmInHdrError <span style="white-space:pre-wrap"> </span>0</div>
<div>XfrmInNoStates <span style="white-space:pre-wrap"> </span>966</div><div>XfrmInStateProtoError <span style="white-space:pre-wrap"> </span>0</div><div>XfrmInStateModeError <span style="white-space:pre-wrap"> </span>0</div>
<div>XfrmInStateSeqError <span style="white-space:pre-wrap"> </span>0</div><div>XfrmInStateExpired <span style="white-space:pre-wrap"> </span>0</div><div>XfrmInStateMismatch <span style="white-space:pre-wrap"> </span>0</div>
<div>XfrmInStateInvalid <span style="white-space:pre-wrap"> </span>0</div><div>XfrmInTmplMismatch <span style="white-space:pre-wrap"> </span>0</div><div>XfrmInNoPols <span style="white-space:pre-wrap"> </span>0</div>
<div>XfrmInPolBlock <span style="white-space:pre-wrap"> </span>0</div><div>XfrmInPolError <span style="white-space:pre-wrap"> </span>0</div><div>XfrmOutError <span style="white-space:pre-wrap"> </span>0</div>
<div>XfrmOutBundleGenError <span style="white-space:pre-wrap"> </span>0</div><div>XfrmOutBundleCheckError <span style="white-space:pre-wrap"> </span>0</div><div>XfrmOutNoStates <span style="white-space:pre-wrap"> </span>0</div>
<div>XfrmOutStateProtoError <span style="white-space:pre-wrap"> </span>0</div><div>XfrmOutStateModeError <span style="white-space:pre-wrap"> </span>0</div><div>XfrmOutStateSeqError <span style="white-space:pre-wrap"> </span>0</div>
<div>XfrmOutStateExpired <span style="white-space:pre-wrap"> </span>0</div><div>XfrmOutPolBlock <span style="white-space:pre-wrap"> </span>0</div><div>XfrmOutPolDead <span style="white-space:pre-wrap"> </span>0</div>
<div>XfrmOutPolError <span style="white-space:pre-wrap"> </span>0</div><div><br></div></div><div>==============================</div><div><br></div><div><br></div><div><div>Listening IP addresses:</div><div> 10.0.0.139</div>
<div>Connections:</div><div> adtran-cert: %any...107.0.5.22 IKEv1</div><div> adtran-cert: local: [C=US, ST=California, O=Trend Micro, Inc, OU=ICS, CN=<a href="http://vpngw.ics.trendmicro.com/" style="text-decoration:initial" target="_blank">vpngw.ics.trendmicro.com</a>] uses public key authentication</div>
<div> adtran-cert: cert: "C=US, ST=California, O=Trend Micro, Inc, OU=ICS, CN=<a href="http://vpngw.ics.trendmicro.com/" style="text-decoration:initial" target="_blank">vpngw.ics.trendmicro.com</a>"</div><div>
adtran-cert: remote: [C=US, ST=CA, O=Trend Micro, OU=SME, CN=Adtran-LCCA-test] uses public key authentication</div><div> adtran-cert: cert: "C=US, ST=CA, O=Trend Micro, OU=SME, CN=Adtran-LCCA-test"</div>
<div>
adtran-cert: child: <a href="http://0.0.0.0/0" style="text-decoration:initial" target="_blank">0.0.0.0/0</a> === <a href="http://172.17.0.0/16" style="text-decoration:initial" target="_blank">172.17.0.0/16</a> TUNNEL</div>
<div>Routed Connections:</div><div> adtran-cert{1}: ROUTED, TUNNEL</div><div> adtran-cert{1}: <a href="http://0.0.0.0/0" style="text-decoration:initial" target="_blank">0.0.0.0/0</a> === <a href="http://172.17.0.0/16" style="text-decoration:initial" target="_blank">172.17.0.0/16</a> </div>
<div>Security Associations (1 up, 0 connecting):</div><div> adtran-cert[2]: ESTABLISHED 7 hours ago, 10.0.0.139[C=US, ST=California, O=Trend Micro, Inc, OU=ICS, CN=<a href="http://vpngw.ics.trendmicro.com/" style="text-decoration:initial" target="_blank">vpngw.ics.trendmicro.com</a>]...107.0.5.22[C=US, ST=CA, O=TREND MICRO, OU=SME, CN=ADTRAN-LCCA-TEST]</div>
<div> adtran-cert[2]: IKEv1 SPIs: 24436839deedae30_i 0068db432aea5e52_r*, public key reauthentication in 20 minutes</div><div> adtran-cert[2]: IKE proposal: 3DES_CBC/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1536</div><div>[root@ip-10-0-0-139 ~]# </div>
<div><br></div></div><div><br></div><div><br></div><div><br></div><div>==============================</div><div>And the log messages,</div><div><br></div></div></div><div><div><div class="h5"><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 15[IKE] IKE_SA adtran-cert[2] established between 10.0.0.139[C=US, ST=California, O=Trend Micro, Inc, OU=ICS, CN=<a href="http://vpngw.ics.trendmicro.com/" target="_blank" style="text-decoration:initial">vpngw.ics.trendmicro.com</a>]...107.0.5.22[C=US, ST=CA, O=TREND MICRO, OU=SME, CN=ADTRAN-LCCA-TEST]<br>
</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 15[IKE] IKE_SA adtran-cert[2] state change: CONNECTING => ESTABLISHED</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 04[JOB] next event in 28s 126ms, waiting</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 15[IKE] scheduling reauthentication in 28456s</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 04[JOB] next event in 28s 126ms, waiting</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 15[IKE] maximum IKE_SA lifetime 28636s</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 02[MGR] checkout IKE_SA</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 15[IKE] sending end entity cert "C=US, ST=California, O=Trend Micro, Inc, OU=ICS, CN=<a href="http://vpngw.ics.trendmicro.com/" style="text-decoration:initial" target="_blank">vpngw.ics.trendmicro.com</a>"</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 15[ENC] generating ID_PROT response 0 [ ID CERT SIG ]</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 15[NET] sending packet: from 10.0.0.139[500] to 107.0.5.22[500]</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 08[NET] sending packet: from 10.0.0.139[500] to 107.0.5.22[500]</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 15[MGR] checkin IKE_SA adtran-cert[2]</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 15[MGR] check-in of IKE_SA successful.</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 02[MGR] IKE_SA adtran-cert[2] successfully checked out</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 02[MGR] checkin IKE_SA adtran-cert[2]</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 02[MGR] check-in of IKE_SA successful.</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 07[NET] received packet: from 107.0.5.22[500] to 10.0.0.139[500]</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 07[NET] waiting for data on sockets</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 16[MGR] checkout IKE_SA by message</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 16[MGR] IKE_SA adtran-cert[2] successfully checked out</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 16[NET] received packet: from 107.0.5.22[500] to 10.0.0.139[500]</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 16[ENC] parsed INFORMATIONAL_V1 request 3548971615 [ HASH N(INITIAL_CONTACT) ]</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 16[IKE] Hash => 20 bytes @ 0x7f32fc003000</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 16[IKE] 0: 54 F0 97 38 A7 9F 37 FB D6 67 87 C3 46 0B 5F 4F T..8..7..g..F._O</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 16[IKE] 16: 59 78 58 48 YxXH</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 16[MGR] checkin IKE_SA adtran-cert[2]</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 16[MGR] check-in of IKE_SA successful.</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 07[NET] received packet: from 107.0.5.22[500] to 10.0.0.139[500]</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 07[NET] waiting for data on sockets</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[MGR] checkout IKE_SA by message</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[MGR] IKE_SA adtran-cert[2] successfully checked out</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[NET] received packet: from 107.0.5.22[500] to 10.0.0.139[500]</div><div>
Dec 26 03:31:59 ip-10-0-0-139 charon: 01[ENC] parsed QUICK_MODE request <a href="tel:2536005250" value="+12536005250" style="text-decoration:initial" target="_blank">2536005250</a> [ HASH SA No ID ID ]</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[IKE] Hash(1) => 20 bytes @ 0x7f3304000f20</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[IKE] 0: 3C 3D CC 36 C5 6E D9 C8 10 5E 9E C1 98 2D F3 E0 <=.6.n...^...-..</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[IKE] 16: 37 D9 56 45 <a href="http://7.ve/" style="text-decoration:initial" target="_blank">7.VE</a></div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[CFG] looking for a child config for <a href="http://0.0.0.0/0%5Btcp/http%5D" style="text-decoration:initial" target="_blank">0.0.0.0/0[tcp/http]</a> === <a href="http://172.17.0.0/16%5Btcp%5D" style="text-decoration:initial" target="_blank">172.17.0.0/16[tcp]</a> </div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[CFG] proposing traffic selectors for us:</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[CFG] <a href="http://0.0.0.0/0" style="text-decoration:initial" target="_blank">0.0.0.0/0</a></div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[CFG] proposing traffic selectors for other:</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[CFG] <a href="http://172.17.0.0/16" style="text-decoration:initial" target="_blank">172.17.0.0/16</a></div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[CFG] candidate "adtran-cert" with prio 1+1</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[CFG] found matching child config "adtran-cert" with prio 2</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[CFG] selecting traffic selectors for other:</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[CFG] config: <a href="http://172.17.0.0/16" style="text-decoration:initial" target="_blank">172.17.0.0/16</a>, received: <a href="http://172.17.0.0/16%5Btcp%5D" style="text-decoration:initial" target="_blank">172.17.0.0/16[tcp]</a> => match: <a href="http://172.17.0.0/16%5Btcp%5D" style="text-decoration:initial" target="_blank">172.17.0.0/16[tcp]</a></div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[CFG] selecting traffic selectors for us:</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[CFG] config: <a href="http://0.0.0.0/0" style="text-decoration:initial" target="_blank">0.0.0.0/0</a>, received: <a href="http://0.0.0.0/0%5Btcp/http%5D" style="text-decoration:initial" target="_blank">0.0.0.0/0[tcp/http]</a> => match: <a href="http://0.0.0.0/0%5Btcp/http%5D" style="text-decoration:initial" target="_blank">0.0.0.0/0[tcp/http]</a></div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[CFG] selecting proposal:</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[CFG] no acceptable ENCRYPTION_ALGORITHM found</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[CFG] selecting proposal:</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[CFG] no acceptable DIFFIE_HELLMAN_GROUP found</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[CFG] selecting proposal:</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[CFG] proposal matches</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[CFG] received proposals: ESP:3DES_CBC/HMAC_SHA1_96/NO_EXT_SEQ</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[CFG] configured proposals: ESP:AES_CBC_128/HMAC_SHA1_96/MODP_2048/NO_EXT_SEQ, ESP:3DES_CBC/HMAC_SHA1_96/MODP_1536/NO_EXT_SEQ, ESP:AES_CBC_128/AES_CBC_192/AES_CBC_256/3DES_CBC/BLOWFISH_CBC_256/HMAC_SHA1_96/AES_XCBC_96/HMAC_MD5_96/NO_EXT_SEQ</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[CFG] selected proposal: ESP:3DES_CBC/HMAC_SHA1_96/NO_EXT_SEQ</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[KNL] getting SPI for reqid {2}</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[KNL] sending XFRM_MSG_ALLOCSPI: => 248 bytes @ 0x7f331a549730</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[KNL] 0: F8 00 00 00 16 00 01 00 CC 00 00 00 0E 1F 00 00 ................</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[KNL] 16: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[KNL] 32: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[KNL] 48: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[KNL] 64: 00 00 00 00 00 00 00 00 0A 00 00 8B 00 00 00 00 ................</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[KNL] 80: 00 00 00 00 00 00 00 00 00 00 00 00 32 00 00 00 ............2...</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[KNL] 96: 6B 00 05 16 00 00 00 00 00 00 00 00 00 00 00 00 k...............</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[KNL] 112: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[KNL] 128: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[KNL] 144: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[KNL] 160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[KNL] 176: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[KNL] 192: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[KNL] 208: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[KNL] 224: 02 00 00 00 02 00 01 00 00 00 00 00 00 00 00 00 ................</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[KNL] 240: 00 00 00 C0 FF FF FF CF .......</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[KNL] got SPI c0cde9fa for reqid {2}</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[IKE] Hash(2) => 20 bytes @ 0x7f3304001e50</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[IKE] 0: B9 3D 15 53 04 D6 AE 5C EC 05 9A A9 E1 19 FD 15 .=.S...\........</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[IKE] 16: 61 E4 B9 4D a..M</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[ENC] generating QUICK_MODE response <a href="tel:2536005250" value="+12536005250" style="text-decoration:initial" target="_blank">2536005250</a> [ HASH SA No ID ID ]</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[NET] sending packet: from 10.0.0.139[500] to 107.0.5.22[500]</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 08[NET] sending packet: from 10.0.0.139[500] to 107.0.5.22[500]</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 04[JOB] next event in 3s 999ms, waiting</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[MGR] checkin IKE_SA adtran-cert[2]</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 01[MGR] check-in of IKE_SA successful.</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 07[NET] received packet: from 107.0.5.22[500] to 10.0.0.139[500]</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 07[NET] waiting for data on sockets</div></div></div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 11[MGR] checkout IKE_SA by message</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 11[MGR] IKE_SA adtran-cert[2] successfully checked out</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 11[NET] received packet: from 107.0.5.22[500] to 10.0.0.139[500]</div><div>
Dec 26 03:31:59 ip-10-0-0-139 charon: 11[ENC] parsed INFORMATIONAL_V1 request 3748028806 [ HASH N((24577)) ]</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 11[IKE] Hash => 20 bytes @ 0xd45ed0</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 11[IKE] 0: A6 55 BE 50 CE D2 BC D5 47 9C 51 47 E7 21 5C 24 .U.P....G.QG.!\$</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 11[IKE] 16: 46 25 D5 81 F%..</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 11[IKE] received (24577) notify</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 11[KNL] deleting SAD entry with SPI c0cde9fa (mark 0/0x00000000)</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 11[KNL] sending XFRM_MSG_DELSA: => 40 bytes @ 0x7f331413f770</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 11[KNL] 0: 28 00 00 00 11 00 05 00 CD 00 00 00 0E 1F 00 00 (...............</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 11[KNL] 16: 0A 00 00 8B 00 00 00 00 00 00 00 00 00 00 00 00 ................</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 11[KNL] 32: C0 CD E9 FA 02 00 32 00 ......2.</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 11[KNL] deleted SAD entry with SPI c0cde9fa (mark 0/0x00000000)</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 11[MGR] checkin IKE_SA adtran-cert[2]</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 11[MGR] check-in of IKE_SA successful.</div>
<div class="im">
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 07[NET] received packet: from 107.0.5.22[500] to 10.0.0.139[500]</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 07[NET] waiting for data on sockets</div></div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 13[MGR] checkout IKE_SA by message</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 13[MGR] IKE_SA adtran-cert[2] successfully checked out</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 13[NET] received packet: from 107.0.5.22[500] to 10.0.0.139[500]</div><div>
Dec 26 03:31:59 ip-10-0-0-139 charon: 13[ENC] parsed QUICK_MODE request <a href="tel:2536005250" value="+12536005250" style="text-decoration:initial" target="_blank">2536005250</a> [ HASH ]</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 13[IKE] Hash(3) => 20 bytes @ 0x7f32f8000c70</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 13[IKE] 0: 5F 1E 57 A6 68 99 94 95 46 5E DC 35 25 DD 03 87 _.W.h...F^.5%...</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 13[IKE] 16: 07 C5 54 EE ..T.</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 13[IKE] sa payload missing</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 13[IKE] queueing INFORMATIONAL task</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 13[IKE] activating new tasks</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 13[IKE] activating INFORMATIONAL task</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 13[IKE] Hash => 20 bytes @ 0x7f32f80009c0</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 13[IKE] 0: BA 9B 20 89 6B CC 5E 19 15 6C 87 EC C1 50 D2 98 .. .k.^..l...P..</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 13[IKE] 16: 47 D5 80 DB G...</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 13[ENC] generating INFORMATIONAL_V1 request <a href="tel:4154700430" value="+14154700430" style="text-decoration:initial" target="_blank">4154700430</a> [ HASH N(CRIT) ]</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 13[NET] sending packet: from 10.0.0.139[500] to 107.0.5.22[500]</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 13[IKE] activating new tasks</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 13[IKE] nothing to initiate</div>
<div>Dec 26 03:31:59 ip-10-0-0-139 charon: 13[MGR] checkin IKE_SA adtran-cert[2]</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 13[MGR] check-in of IKE_SA successful.</div><div>Dec 26 03:31:59 ip-10-0-0-139 charon: 08[NET] sending packet: from 10.0.0.139[500] to 107.0.5.22[500]</div>
<div><br></div>
</div></div></font></td></tr></tbody></table></div>
</div><br></div></div>
</div><br></div></div>