<div dir="ltr"><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:#330099">Hi,</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:#330099"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:#330099">Any help on this please ??</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:#330099"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:#330099">-Jayapal</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Oct 27, 2015 at 12:27 PM, Jayapal Reddy <span dir="ltr"><<a href="mailto:jayapalatiiit@gmail.com" target="_blank">jayapalatiiit@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)">Hi,</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)">I am using the strongswan ipsec. I have the remote access vpn setup and windows7 client behind NAT got connected successfully.</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)">The problem comes on restart of ipsec device or configuration update of the ipsec. After restarting my ipsec device vpn client is failed to reconnect. If restart ipsec or down the connection it is able to reconnect.</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)">On restart or config update I am using the '<span style="color:rgb(0,0,0);font-family:Menlo;font-size:12pt">ipsec down L2TP-PSK' to down the existing connections.</span></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)"><span style="color:rgb(0,0,0);font-family:Menlo;font-size:12pt"><br></span></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)">I am giving the ipsec config and logs below.</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)">Is this problem from the strongswan ipsec or configuration issue ?</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)">ipsec version:</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)"><div class="gmail_default"># ipsec --version</div><div class="gmail_default">Linux strongSwan U4.5.2/K3.2.0-4-amd64</div><div class="gmail_default">Institute for Internet Technologies and Applications</div><div class="gmail_default">University of Applied Sciences Rapperswil, Switzerland</div><div class="gmail_default">See 'ipsec --copyright' for copyright information.</div></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)"> ..... /var/log/auth.log</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)"><br></div><div class="gmail_default"><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:45:13 r-49-QA pluto[8032]: packet from <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a>: ignoring Vendor ID payload [Vid-Initial-Contact]</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:45:13 r-49-QA pluto[8032]: packet from <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a>: ignoring Vendor ID payload [IKE CGA version 1]</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:45:13 r-49-QA pluto[8032]: "L2TP-PSK"[1] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #3: responding to Main Mode from unknown peer <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a></font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:45:13 r-49-QA pluto[8032]: "L2TP-PSK"[1] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #3: NAT-Traversal: Result using RFC 3947: peer is NATed</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:45:13 r-49-QA pluto[8032]: "L2TP-PSK"[1] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #3: Peer ID is ID_IPV4_ADDR: '10.1.1.237'</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:45:13 r-49-QA pluto[8032]: "L2TP-PSK"[2] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #3: deleting connection "L2TP-PSK" instance with peer 10.147.52.104 {isakmp=#0/ipsec=#0}</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:45:13 r-49-QA pluto[8032]: "L2TP-PSK"[2] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #3: sent MR3, ISAKMP SA established</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:45:13 r-49-QA pluto[8032]: "L2TP-PSK"[2] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #4: NAT-Traversal: received 2 NAT-OA. using first, ignoring others</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:45:13 r-49-QA pluto[8032]: "L2TP-PSK"[2] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #4: responding to Quick Mode</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:45:13 r-49-QA pluto[8032]: "L2TP-PSK"[2] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #4: IPsec SA established {ESP=>0x9bf54461 <0xce23acb0 NATOA=10.1.1.237}</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"><br></font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"><br></font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"><br></font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"><br></font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"><br></font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:47:51 r-49-QA pluto[8032]: packet from <a href="http://10.147.52.104:500" target="_blank">10.147.52.104:500</a>: received Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000008]</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:47:51 r-49-QA pluto[8032]: packet from <a href="http://10.147.52.104:500" target="_blank">10.147.52.104:500</a>: received Vendor ID payload [RFC 3947]</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:47:51 r-49-QA pluto[8032]: packet from <a href="http://10.147.52.104:500" target="_blank">10.147.52.104:500</a>: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n]</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:47:51 r-49-QA pluto[8032]: packet from <a href="http://10.147.52.104:500" target="_blank">10.147.52.104:500</a>: ignoring Vendor ID payload [FRAGMENTATION]</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:47:51 r-49-QA pluto[8032]: packet from <a href="http://10.147.52.104:500" target="_blank">10.147.52.104:500</a>: ignoring Vendor ID payload [MS-Negotiation Discovery Capable]</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:47:51 r-49-QA pluto[8032]: packet from <a href="http://10.147.52.104:500" target="_blank">10.147.52.104:500</a>: ignoring Vendor ID payload [Vid-Initial-Contact]</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:47:51 r-49-QA pluto[8032]: packet from <a href="http://10.147.52.104:500" target="_blank">10.147.52.104:500</a>: ignoring Vendor ID payload [IKE CGA version 1]</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:47:51 r-49-QA pluto[8032]: "L2TP-PSK"[3] 10.147.52.104 #5: responding to Main Mode from unknown peer 10.147.52.104</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:47:51 r-49-QA pluto[8032]: "L2TP-PSK"[3] 10.147.52.104 #5: NAT-Traversal: Result using RFC 3947: peer is NATed</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:47:51 r-49-QA pluto[8032]: "L2TP-PSK"[3] 10.147.52.104 #5: Peer ID is ID_IPV4_ADDR: '10.1.1.237'</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:47:51 r-49-QA pluto[8032]: "L2TP-PSK"[4] 10.147.52.104 #5: deleting connection "L2TP-PSK" instance with peer 10.147.52.104 {isakmp=#0/ipsec=#0}</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:47:51 r-49-QA pluto[8032]: | NAT-T: new mapping <a href="http://10.147.52.104:500/4500" target="_blank">10.147.52.104:500/4500</a>)</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:47:51 r-49-QA pluto[8032]: "L2TP-PSK"[4] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #5: sent MR3, ISAKMP SA established</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:47:51 r-49-QA pluto[8032]: "L2TP-PSK"[4] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #6: NAT-Traversal: received 2 NAT-OA. using first, ignoring others</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:47:51 r-49-QA pluto[8032]: "L2TP-PSK"[4] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #6: responding to Quick Mode</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"><b>Oct 27 06:47:51 r-49-QA pluto[8032]: "L2TP-PSK"[4] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #6: cannot install eroute -- it is in use for "L2TP-PSK"[2] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> </b>#4</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"><b>Oct 27 06:47:52 r-49-QA pluto[8032]: "L2TP-PSK"[4] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #5: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x01000000 (perhaps this is a duplicated packet)</b></font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:47:52 r-49-QA pluto[8032]: "L2TP-PSK"[4] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #5: sending encrypted notification INVALID_MESSAGE_ID to <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a></font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:47:52 r-49-QA sshd[8410]: Accepted publickey for root from 169.254.0.1 port 46419 ssh2</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:47:52 r-49-QA sshd[8410]: pam_unix(sshd:session): session opened for user root by (uid=0)</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:47:53 r-49-QA sshd[8410]: pam_unix(sshd:session): session closed for user root</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:47:53 r-49-QA sshd[8412]: Accepted publickey for root from 169.254.0.1 port 46420 ssh2</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:47:53 r-49-QA sshd[8412]: pam_unix(sshd:session): session opened for user root by (uid=0)</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:47:53 r-49-QA sshd[8412]: pam_unix(sshd:session): session closed for user root</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:47:53 r-49-QA sshd[8428]: Accepted publickey for root from 169.254.0.1 port 46421 ssh2</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:47:53 r-49-QA sshd[8428]: pam_unix(sshd:session): session opened for user root by (uid=0)</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:47:53 r-49-QA sshd[8428]: pam_unix(sshd:session): session closed for user root</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:47:54 r-49-QA pluto[8032]: "L2TP-PSK"[4] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #5: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x01000000 (perhaps this is a duplicated packet)</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:47:54 r-49-QA pluto[8032]: "L2TP-PSK"[4] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #5: sending encrypted notification INVALID_MESSAGE_ID to <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a></font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:47:54 r-49-QA sshd[8456]: Accepted publickey for root from 169.254.0.1 port 46422 ssh2</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:47:54 r-49-QA sshd[8456]: pam_unix(sshd:session): session opened for user root by (uid=0)</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:47:54 r-49-QA sshd[8456]: pam_unix(sshd:session): session closed for user root</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:47:58 r-49-QA pluto[8032]: "L2TP-PSK"[4] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #5: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x01000000 (perhaps this is a duplicated packet)</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:47:58 r-49-QA pluto[8032]: "L2TP-PSK"[4] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #5: sending encrypted notification INVALID_MESSAGE_ID to <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a></font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:48:01 r-49-QA CRON[8466]: pam_unix(cron:session): session opened for user root by (uid=0)</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:48:01 r-49-QA CRON[8466]: pam_unix(cron:session): session closed for user root</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:48:06 r-49-QA pluto[8032]: "L2TP-PSK"[4] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #5: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x01000000 (perhaps this is a duplicated packet)</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:48:06 r-49-QA pluto[8032]: "L2TP-PSK"[4] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #5: sending encrypted notification INVALID_MESSAGE_ID to <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a></font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:48:22 r-49-QA pluto[8032]: "L2TP-PSK"[4] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #5: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x01000000 (perhaps this is a duplicated packet)</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Oct 27 06:48:22 r-49-QA pluto[8032]: "L2TP-PSK"[4] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> #5: sending encrypted notification INVALID_MESSAGE_ID to <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a></font></div><div style="color:rgb(51,0,153);font-family:verdana,sans-serif;font-size:small">"</div></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)">ipsec configuration:</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)"><br></div><div class="gmail_default"><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">root@r-49-QA:~# cat /etc/ipsec.conf</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"># ipsec.conf - strongSwan IPsec configuration file</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"><br></font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">config setup</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> nat_traversal=yes</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> charonstart=yes</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> plutostart=yes</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"><br></font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">include /etc/ipsec.d/*.conf</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">root@r-49-QA:~#</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">root@r-49-QA:~# cat /etc/ipsec.d/l2tp.conf</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">#ipsec remote access vpn configuration</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">conn L2TP-PSK</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> authby=psk</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> pfs=no</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> rekey=no</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> keyingtries=3</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> keyexchange=ikev1</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> forceencaps=yes</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> leftfirewall=yes</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> leftnexthop=%defaultroute</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> # ----------------------------------------------------------</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> # The VPN server.</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> #</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> # Allow incoming connections on the external network interface.</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> # If you want to use a different interface or if there is no</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> # defaultroute, you can use: left=10.147.52.102</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> #</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> left=10.147.52.102</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> #</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> leftprotoport=17/1701</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> # If you insist on supporting non-updated Windows clients,</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> # you can use: leftprotoport=17/%any</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> #</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> # ----------------------------------------------------------</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> # The remote user(s).</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> #</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> # Allow incoming connections only from this IP address.</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> right=%any</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> # If you want to allow multiple connections from any IP address,</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> # you can use: right=%any</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> #</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> rightprotoport=17/%any</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> #</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> # ----------------------------------------------------------</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> # Change 'ignore' to 'add' to enable this configuration.</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> #</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> rightsubnetwithin=<a href="http://10.1.2.0/8" target="_blank">10.1.2.0/8</a></font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> auto=add</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"><br></font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">#</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"># ipsec status L2TP-PSK</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">000 "L2TP-PSK": 10.147.52.102[10.147.52.102]:17/1701---10.147.52.1...%any[%any]:17/%any==={<a href="http://10.0.0.0/8" target="_blank">10.0.0.0/8</a>}; unrouted; eroute owner: #0</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">000 "L2TP-PSK": newest ISAKMP SA: #0; newest IPsec SA: #0;</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">000 "L2TP-PSK"[2]: 10.147.52.102:4500[10.147.52.102]:17/1701---10.147.52.1...10.147.52.104:4500[10.1.1.237]:17/1701; erouted; eroute owner: #4</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">000 "L2TP-PSK"[2]: newest ISAKMP SA: #3; newest IPsec SA: #4;</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">000 "L2TP-PSK"[10]: 10.147.52.102:4500[10.147.52.102]:17/1701---10.147.52.1...10.147.52.104:4500[10.1.1.237]:17/1701; unrouted; eroute owner: #0</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">000 "L2TP-PSK"[10]: newest ISAKMP SA: #14; newest IPsec SA: #0;</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">000</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">000 #4: "L2TP-PSK"[2] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> STATE_QUICK_R2 (IPsec SA established); EVENT_SA_EXPIRE in 3040s; newest IPSEC; eroute owner</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">000 #4: "L2TP-PSK"[2] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> <a href="mailto:esp.9bf54461@10.147.52.104" target="_blank">esp.9bf54461@10.147.52.104</a> (0 bytes) <a href="mailto:esp.ce23acb0@10.147.52.102" target="_blank">esp.ce23acb0@10.147.52.102</a> (980 bytes, 472s ago); transport</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">000 #3: "L2TP-PSK"[2] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> STATE_MAIN_R3 (sent MR3, ISAKMP SA established); EVENT_SA_EXPIRE in 28240s; newest ISAKMP</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">000 #14: "L2TP-PSK"[10] <a href="http://10.147.52.104:4500" target="_blank">10.147.52.104:4500</a> STATE_MAIN_R3 (sent MR3, ISAKMP SA established); EVENT_SA_EXPIRE in 28772s; newest ISAKMP</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">000</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif">Security Associations:</font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"> no match</font></div><div class="gmail_default"><br></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"><br></font></div><div class="gmail_default"><font color="#330099" face="verdana, sans-serif"><br></font></div></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)">Thanks,</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)">Jayapal</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(51,0,153)"><br></div></div>
</blockquote></div><br></div>