<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span>Hi Tobias,<br>
</span>
<div><br>
</div>
<div>Part Push<br>
</div>
<div><br>
</div>
<div>I am concerned about spamming so I hope this isn't too much.<br>
</div>
<div><br>
</div>
<div>conn officeVPN<br>
</div>
<div> aggressive=yes<br>
</div>
<div> keyexchange=ikev1<br>
</div>
<div> type=tunnel<br>
</div>
<div> authby=xauthpsk<br>
</div>
<div> ike=aes128-sha1-modp2048<br>
</div>
<div> left=%defaultroute<br>
</div>
<div> leftsourceip=%config<br>
</div>
<div> modeconfig=push|pull<br>
</div>
<div> right=50.45.0.51<br>
</div>
<div> rightid=196.198.128.64<br>
</div>
<div> rightfirewall=yes<br>
</div>
<div> auto=add<br>
</div>
<div> xauth_identity=user<br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>Logs modeconfig=push<br>
</div>
<div><br>
</div>
<div>~$ sudo ipsec statusall<br>
</div>
<div>Status of IKE charon daemon (weakSwan 5.6.2, Linux 5.0.0-23-generic, x86_64):<br>
</div>
<div> uptime: 2 minutes, since Aug 16 16:14:25 2019<br>
</div>
<div> malloc: sbrk 2568192, mmap 0, used 602752, free 1965440<br>
</div>
<div> worker threads: 10 of 16 idle, 6/0/0/0 working, job queue: 0/0/0/0, scheduled: 2<br>
</div>
<div> loaded plugins: charon aes rc2 sha2 sha1 md4 md5 mgf1 random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey pem openssl fips-prf gmp agent xcbc hmac gcm attr kernel-netlink resolve socket-default connmark stroke vici
updown eap-mschapv2 xauth-generic counters<br>
</div>
<div>Listening IP addresses:<br>
</div>
<div> 10.0.0.3<br>
</div>
<div>Connections:<br>
</div>
<div>officeVPN: %any...50.45.0.51 IKEv1 Aggressive<br>
</div>
<div>officeVPN: local: [10.0.0.3] uses pre-shared key authentication<br>
</div>
<div>officeVPN: local: uses XAuth authentication: any with XAuth identity 'user'<br>
</div>
<div>officeVPN: remote: [196.198.128.64] uses pre-shared key authentication<br>
</div>
<div>officeVPN: child: dynamic === dynamic TUNNEL<br>
</div>
<div>Security Associations (1 up, 0 connecting):<br>
</div>
<div>officeVPN[1]: ESTABLISHED 2 minutes ago, 10.0.0.3[10.0.0.3]...50.45.0.51[196.198.128.64]<br>
</div>
<div>officeVPN[1]: IKEv1 SPIs: <SANITISED VALUE>_i* <SANITISED VALUE>_r, pre-shared key+XAuth reauthentication in 2 hours<br>
</div>
<div>officeVPN[1]: IKE proposal: AES_CBC_128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048<br>
</div>
<div>officeVPN[1]: Tasks queued: QUICK_MODE<br>
</div>
<div><br>
</div>
<div>$ sudo ipsec up officeVPN<br>
</div>
<div>initiating Aggressive Mode IKE_SA officeVPN[1] to 50.45.0.51<br>
</div>
<div>generating AGGRESSIVE request 0 [ SA KE No ID V V V V V ]<br>
</div>
<div>sending packet: from 10.0.0.3[500] to 50.45.0.51[500] (548 bytes)<br>
</div>
<div>received packet: from 50.45.0.51[500] to 10.0.0.3[500] (564 bytes)<br>
</div>
<div>parsed AGGRESSIVE response 0 [ SA KE No ID HASH V NAT-D NAT-D V V V V V ]<br>
</div>
<div>received NAT-T (RFC 3947) vendor ID<br>
</div>
<div>received DPD vendor ID<br>
</div>
<div>received XAuth vendor ID<br>
</div>
<div>received unknown vendor ID: <SANITISED VALUE><br>
</div>
<div>received FRAGMENTATION vendor ID<br>
</div>
<div>received FRAGMENTATION vendor ID<br>
</div>
<div>local host is behind NAT, sending keep alives<br>
</div>
<div>remote host is behind NAT<br>
</div>
<div>generating AGGRESSIVE request 0 [ HASH NAT-D NAT-D ]<br>
</div>
<div>sending packet: from 10.0.0.3[4500] to 50.45.0.51[4500] (108 bytes)<br>
</div>
<div>received packet: from 50.45.0.51[4500] to 10.0.0.3[4500] (76 bytes)<br>
</div>
<div>parsed TRANSACTION request 771264833 [ HASH CPRQ(X_TYPE X_USER X_PWD) ]<br>
</div>
<div>generating TRANSACTION response 771264833 [ HASH CPRP(X_USER X_PWD) ]<br>
</div>
<div>sending packet: from 10.0.0.3[4500] to 50.45.0.51[4500] (92 bytes)<br>
</div>
<div>received packet: from 50.45.0.51[4500] to 10.0.0.3[4500] (76 bytes)<br>
</div>
<div>parsed TRANSACTION request 3349886284 [ HASH CPS(X_STATUS) ]<br>
</div>
<div>XAuth authentication of 'user' (myself) successful<br>
</div>
<div>IKE_SA officeVPN[1] established between 10.0.0.3[10.0.0.3]...50.45.0.51[196.198.128.64]<br>
</div>
<div>scheduling reauthentication in 9852s<br>
</div>
<div>maximum IKE_SA lifetime 10392s<br>
</div>
<div>generating TRANSACTION response 3349886284 [ HASH CPA(X_STATUS) ]<br>
</div>
<div>sending packet: from 10.0.0.3[4500] to 50.45.0.51[4500] (76 bytes)<br>
</div>
<div>received packet: from 50.45.0.51[4500] to 10.0.0.3[4500] (92 bytes)<br>
</div>
<div>parsed INFORMATIONAL_V1 request 1714123051 [ HASH N(DPD) ]<br>
</div>
<div>generating INFORMATIONAL_V1 request 3290006026 [ HASH N(DPD_ACK) ]<br>
</div>
<div>sending packet: from 10.0.0.3[4500] to 50.45.0.51[4500] (92 bytes)<br>
</div>
<div>received packet: from 50.45.0.51[4500] to 10.0.0.3[4500] (92 bytes)<br>
</div>
<div>parsed INFORMATIONAL_V1 request 2545931713 [ HASH N(DPD) ]<br>
</div>
<div>generating INFORMATIONAL_V1 request 3138418696 [ HASH N(DPD_ACK) ]<br>
</div>
<div>sending packet: from 10.0.0.3[4500] to 50.45.0.51[4500] (92 bytes)<br>
</div>
<div>received packet: from 50.45.0.51[4500] to 10.0.0.3[4500] (92 bytes)<br>
</div>
<div>parsed INFORMATIONAL_V1 request 4173293943 [ HASH N(DPD) ]<br>
</div>
<div>generating INFORMATIONAL_V1 request 529988676 [ HASH N(DPD_ACK) ]<br>
</div>
<div>sending packet: from 10.0.0.3[4500] to 50.45.0.51[4500] (92 bytes)<br>
</div>
<div><br>
</div>
<div>Fri, 2019-08-16 16:14 15[NET] <officeVPN|1> received packet: from 50.45.0.51[4500] to 10.0.0.3[4500] (92 bytes)<br>
</div>
<div>Fri, 2019-08-16 16:14 15[ENC] <officeVPN|1> parsed INFORMATIONAL_V1 request 2068099626 [ HASH N(DPD) ]<br>
</div>
<div>Fri, 2019-08-16 16:14 15[IKE] <officeVPN|1> queueing ISAKMP_DPD task<br>
</div>
<div>Fri, 2019-08-16 16:14 15[IKE] <officeVPN|1> activating new tasks<br>
</div>
<div>Fri, 2019-08-16 16:14 15[IKE] <officeVPN|1> activating ISAKMP_DPD task<br>
</div>
<div>Fri, 2019-08-16 16:14 15[ENC] <officeVPN|1> generating INFORMATIONAL_V1 request 2123307044 [ HASH N(DPD_ACK) ]<br>
</div>
<div>Fri, 2019-08-16 16:14 15[NET] <officeVPN|1> sending packet: from 10.0.0.3[4500] to 50.45.0.51[4500] (92 bytes)<br>
</div>
<div>Fri, 2019-08-16 16:14 15[IKE] <officeVPN|1> activating new tasks<br>
</div>
<div>Fri, 2019-08-16 16:14 15[IKE] <officeVPN|1> nothing to initiate<br>
</div>
<div>Fri, 2019-08-16 16:14 00[DMN] signal of type SIGINT received. Shutting down<br>
</div>
<div>Fri, 2019-08-16 16:14 00[IKE] <officeVPN|1> queueing ISAKMP_DELETE task<br>
</div>
<div>Fri, 2019-08-16 16:14 00[IKE] <officeVPN|1> activating new tasks<br>
</div>
<div>Fri, 2019-08-16 16:14 00[IKE] <officeVPN|1> activating ISAKMP_DELETE task<br>
</div>
<div>Fri, 2019-08-16 16:14 00[IKE] <officeVPN|1> deleting IKE_SA officeVPN[1] between 10.0.0.3[10.0.0.3]...50.45.0.51[196.198.128.64]<br>
</div>
<div>Fri, 2019-08-16 16:14 00[IKE] <officeVPN|1> sending DELETE for IKE_SA officeVPN[1]<br>
</div>
<div>Fri, 2019-08-16 16:14 00[IKE] <officeVPN|1> IKE_SA officeVPN[1] state change: ESTABLISHED => DELETING<br>
</div>
<div>Fri, 2019-08-16 16:14 00[ENC] <officeVPN|1> generating INFORMATIONAL_V1 request 2996366783 [ HASH D ]<br>
</div>
<div>Fri, 2019-08-16 16:14 00[NET] <officeVPN|1> sending packet: from 10.0.0.3[4500] to 50.45.0.51[4500] (92 bytes)<br>
</div>
<div>Fri, 2019-08-16 16:14 00[IKE] <officeVPN|1> IKE_SA officeVPN[1] state change: DELETING => DESTROYING<br>
</div>
<div>Fri, 2019-08-16 16:14 00[IKE] <officeVPN|1> removing DNS server 196.198.128.32 from /etc/resolv.conf<br>
</div>
<div>Fri, 2019-08-16 16:14 00[KNL] <officeVPN|1> deleting virtual IP 192.168.50.13<br>
</div>
<div>tail: /var/log/charon_debug.log: file truncated<br>
</div>
<div>Fri, 2019-08-16 16:14 00[DMN] Starting IKE charon daemon (strongSwan 5.6.2, Linux 5.0.0-23-generic, x86_64)<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'aesni': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'aes': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'rc2': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'sha2': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'sha1': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'md4': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'md5': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'mgf1': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'random': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'nonce': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'x509': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'revocation': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'constraints': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'pubkey': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'pkcs1': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'pkcs7': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'pkcs8': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'pkcs12': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'pgp': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'dnskey': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'sshkey': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'pem': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'openssl': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'fips-prf': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'gmp': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'agent': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'xcbc': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'hmac': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'gcm': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'attr': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'kernel-netlink': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'resolve': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'socket-default': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'connmark': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'stroke': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'vici': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'updown': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'eap-mschapv2': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'xauth-generic': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] plugin 'counters': loaded successfully<br>
</div>
<div>Fri, 2019-08-16 16:14 00[KNL] known interfaces and IP addresses:<br>
</div>
<div>Fri, 2019-08-16 16:14 00[KNL] lo<br>
</div>
<div>Fri, 2019-08-16 16:14 00[KNL] 127.0.0.1<br>
</div>
<div>Fri, 2019-08-16 16:14 00[KNL] ::1<br>
</div>
<div>Fri, 2019-08-16 16:14 00[KNL] enp4s0<br>
</div>
<div>Fri, 2019-08-16 16:14 00[KNL] wlp2s0<br>
</div>
<div>Fri, 2019-08-16 16:14 00[KNL] 10.0.0.3<br>
</div>
<div>Fri, 2019-08-16 16:14 00[KNL] <SANITISED VALUE><br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] feature PUBKEY:ED25519 in plugin 'pem' has unmet dependency: PUBKEY:ED25519<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] feature PUBKEY:BLISS in plugin 'pem' has unmet dependency: PUBKEY:BLISS<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] feature PUBKEY:DSA in plugin 'pem' has unmet dependency: PUBKEY:DSA<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] feature PRIVKEY:DSA in plugin 'pem' has unmet dependency: PRIVKEY:DSA<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] feature PRIVKEY:BLISS in plugin 'pem' has unmet dependency: PRIVKEY:BLISS<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] feature CERT_DECODE:OCSP_REQUEST in plugin 'pem' has unmet dependency: CERT_DECODE:OCSP_REQUEST<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] feature PRIVKEY_SIGN:RSA_EMSA_PKCS1_SHA3_224 in plugin 'gmp' has unmet dependency: HASHER:HASH_SHA3_224<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] feature PRIVKEY_SIGN:RSA_EMSA_PKCS1_SHA3_256 in plugin 'gmp' has unmet dependency: HASHER:HASH_SHA3_256<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] feature PRIVKEY_SIGN:RSA_EMSA_PKCS1_SHA3_384 in plugin 'gmp' has unmet dependency: HASHER:HASH_SHA3_384<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] feature PRIVKEY_SIGN:RSA_EMSA_PKCS1_SHA3_512 in plugin 'gmp' has unmet dependency: HASHER:HASH_SHA3_512<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] feature PUBKEY_VERIFY:RSA_EMSA_PKCS1_SHA3_224 in plugin 'gmp' has unmet dependency: HASHER:HASH_SHA3_224<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] feature PUBKEY_VERIFY:RSA_EMSA_PKCS1_SHA3_256 in plugin 'gmp' has unmet dependency: HASHER:HASH_SHA3_256<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] feature PUBKEY_VERIFY:RSA_EMSA_PKCS1_SHA3_384 in plugin 'gmp' has unmet dependency: HASHER:HASH_SHA3_384<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] feature PUBKEY_VERIFY:RSA_EMSA_PKCS1_SHA3_512 in plugin 'gmp' has unmet dependency: HASHER:HASH_SHA3_512<br>
</div>
<div>Fri, 2019-08-16 16:14 00[CFG] loading ca certificates from '/etc/ipsec.d/cacerts'<br>
</div>
<div>Fri, 2019-08-16 16:14 00[CFG] loading aa certificates from '/etc/ipsec.d/aacerts'<br>
</div>
<div>Fri, 2019-08-16 16:14 00[CFG] loading ocsp signer certificates from '/etc/ipsec.d/ocspcerts'<br>
</div>
<div>Fri, 2019-08-16 16:14 00[CFG] loading attribute certificates from '/etc/ipsec.d/acerts'<br>
</div>
<div>Fri, 2019-08-16 16:14 00[CFG] loading crls from '/etc/ipsec.d/crls'<br>
</div>
<div>Fri, 2019-08-16 16:14 00[CFG] loading secrets from '/etc/ipsec.secrets'<br>
</div>
<div>Fri, 2019-08-16 16:14 00[CFG] loaded IKE secret for 50.45.0.51 %any<br>
</div>
<div>Fri, 2019-08-16 16:14 00[CFG] loaded EAP secret for user %any<br>
</div>
<div>Fri, 2019-08-16 16:14 00[CFG] loading secrets from '/etc/ipsec.d/nm-l2tp-ipsec-ee18db9c-522d-4da5-8a69-d3dcb8d23097.secrets'<br>
</div>
<div>Fri, 2019-08-16 16:14 00[CFG] loaded IKE secret for 50.45.0.51<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] unloading plugin 'aesni' without loaded features<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] loaded plugins: charon aes rc2 sha2 sha1 md4 md5 mgf1 random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey pem openssl fips-prf gmp agent xcbc hmac gcm attr kernel-netlink resolve socket-default
connmark stroke vici updown eap-mschapv2 xauth-generic counters<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] unable to load 14 plugin features (14 due to unmet dependencies)<br>
</div>
<div>Fri, 2019-08-16 16:14 00[LIB] dropped capabilities, running as uid 0, gid 0<br>
</div>
<div>Fri, 2019-08-16 16:14 00[JOB] spawning 16 worker threads<br>
</div>
<div>Fri, 2019-08-16 16:14 01[LIB] created thread 01 [6452]<br>
</div>
<div>Fri, 2019-08-16 16:14 03[LIB] created thread 03 [6453]<br>
</div>
<div>Fri, 2019-08-16 16:14 02[LIB] created thread 02 [6454]<br>
</div>
<div>Fri, 2019-08-16 16:14 06[LIB] created thread 06 [6457]<br>
</div>
<div>Fri, 2019-08-16 16:14 05[LIB] created thread 05 [6456]<br>
</div>
<div>Fri, 2019-08-16 16:14 04[LIB] created thread 04 [6455]<br>
</div>
<div>Fri, 2019-08-16 16:14 09[LIB] created thread 09 [6460]<br>
</div>
<div>Fri, 2019-08-16 16:14 07[LIB] created thread 07 [6458]<br>
</div>
<div>Fri, 2019-08-16 16:14 08[LIB] created thread 08 [6459]<br>
</div>
<div>Fri, 2019-08-16 16:14 10[LIB] created thread 10 [6461]<br>
</div>
<div>Fri, 2019-08-16 16:14 11[LIB] created thread 11 [6462]<br>
</div>
<div>Fri, 2019-08-16 16:14 12[LIB] created thread 12 [6463]<br>
</div>
<div>Fri, 2019-08-16 16:14 13[LIB] created thread 13 [6464]<br>
</div>
<div>Fri, 2019-08-16 16:14 14[LIB] created thread 14 [6466]<br>
</div>
<div>Fri, 2019-08-16 16:14 16[LIB] created thread 16 [6467]<br>
</div>
<div>Fri, 2019-08-16 16:14 15[LIB] created thread 15 [6465]<br>
</div>
<div>Fri, 2019-08-16 16:14 04[CFG] received stroke: add connection 'officeVPN'<br>
</div>
<div>Fri, 2019-08-16 16:14 04[CFG] conn officeVPN<br>
</div>
<div>Fri, 2019-08-16 16:14 04[CFG] left=%any<br>
</div>
<div>Fri, 2019-08-16 16:14 04[CFG] leftsourceip=%config<br>
</div>
<div>Fri, 2019-08-16 16:14 04[CFG] leftauth=psk<br>
</div>
<div>Fri, 2019-08-16 16:14 04[CFG] leftauth2=xauth<br>
</div>
<div>Fri, 2019-08-16 16:14 04[CFG] right=50.45.0.51<br>
</div>
<div>Fri, 2019-08-16 16:14 04[CFG] rightauth=psk<br>
</div>
<div>Fri, 2019-08-16 16:14 04[CFG] rightid=196.198.128.64<br>
</div>
<div>Fri, 2019-08-16 16:14 04[CFG] rightupdown=ipsec _updown iptables<br>
</div>
<div>Fri, 2019-08-16 16:14 04[CFG] xauth_identity=user<br>
</div>
<div>Fri, 2019-08-16 16:14 04[CFG] ike=aes128-sha1-modp2048<br>
</div>
<div>Fri, 2019-08-16 16:14 04[CFG] dpddelay=30<br>
</div>
<div>Fri, 2019-08-16 16:14 04[CFG] dpdtimeout=150<br>
</div>
<div>Fri, 2019-08-16 16:14 04[CFG] sha256_96=no<br>
</div>
<div>Fri, 2019-08-16 16:14 04[CFG] mediation=no<br>
</div>
<div>Fri, 2019-08-16 16:14 04[CFG] keyexchange=ikev1<br>
</div>
<div>Fri, 2019-08-16 16:14 04[KNL] 50.45.0.51 is not a local address or the interface is down<br>
</div>
<div>Fri, 2019-08-16 16:14 04[CFG] added configuration 'officeVPN'<br>
</div>
<div>Fri, 2019-08-16 16:14 09[CFG] received stroke: initiate 'officeVPN'<br>
</div>
<div>Fri, 2019-08-16 16:14 08[KNL] <officeVPN|1> using 10.0.0.3 as address to reach 50.45.0.51/32<br>
</div>
<div>Fri, 2019-08-16 16:14 08[IKE] <officeVPN|1> queueing ISAKMP_VENDOR task<br>
</div>
<div>Fri, 2019-08-16 16:14 08[IKE] <officeVPN|1> queueing ISAKMP_CERT_PRE task<br>
</div>
<div>Fri, 2019-08-16 16:14 08[IKE] <officeVPN|1> queueing AGGRESSIVE_MODE task<br>
</div>
<div>Fri, 2019-08-16 16:14 08[IKE] <officeVPN|1> queueing ISAKMP_CERT_POST task<br>
</div>
<div>Fri, 2019-08-16 16:14 08[IKE] <officeVPN|1> queueing ISAKMP_NATD task<br>
</div>
<div>Fri, 2019-08-16 16:14 08[IKE] <officeVPN|1> queueing QUICK_MODE task<br>
</div>
<div>Fri, 2019-08-16 16:14 08[IKE] <officeVPN|1> activating new tasks<br>
</div>
<div>Fri, 2019-08-16 16:14 08[IKE] <officeVPN|1> activating ISAKMP_VENDOR task<br>
</div>
<div>Fri, 2019-08-16 16:14 08[IKE] <officeVPN|1> activating ISAKMP_CERT_PRE task<br>
</div>
<div>Fri, 2019-08-16 16:14 08[IKE] <officeVPN|1> activating AGGRESSIVE_MODE task<br>
</div>
<div>Fri, 2019-08-16 16:14 08[IKE] <officeVPN|1> activating ISAKMP_CERT_POST task<br>
</div>
<div>Fri, 2019-08-16 16:14 08[IKE] <officeVPN|1> activating ISAKMP_NATD task<br>
</div>
<div>Fri, 2019-08-16 16:14 08[IKE] <officeVPN|1> sending XAuth vendor ID<br>
</div>
<div>Fri, 2019-08-16 16:14 08[IKE] <officeVPN|1> sending DPD vendor ID<br>
</div>
<div>Fri, 2019-08-16 16:14 08[IKE] <officeVPN|1> sending FRAGMENTATION vendor ID<br>
</div>
<div>Fri, 2019-08-16 16:14 08[IKE] <officeVPN|1> sending NAT-T (RFC 3947) vendor ID<br>
</div>
<div>Fri, 2019-08-16 16:14 08[IKE] <officeVPN|1> sending draft-ietf-ipsec-nat-t-ike-02\n vendor ID<br>
</div>
<div>Fri, 2019-08-16 16:14 08[IKE] <officeVPN|1> initiating Aggressive Mode IKE_SA officeVPN[1] to 50.45.0.51<br>
</div>
<div>Fri, 2019-08-16 16:14 08[IKE] <officeVPN|1> IKE_SA officeVPN[1] state change: CREATED => CONNECTING<br>
</div>
<div>Fri, 2019-08-16 16:14 08[CFG] <officeVPN|1> configured proposals: IKE:AES_CBC_128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048, IKE:AES_CBC_128/AES_CBC_192/AES_CBC_256/CAMELLIA_CBC_128/CAMELLIA_CBC_192/CAMELLIA_CBC_256/3DES_CBC/HMAC_SHA2_256_128/HMAC_SHA2_384_192/HMAC_SHA2_512_256/HMAC_SHA1_96/AES_XCBC_96/PRF_HMAC_SHA2_256/PRF_HMAC_SHA2_384/PRF_HMAC_SHA2_512/PRF_AES128_XCBC/PRF_HMAC_SHA1/ECP_256/ECP_384/ECP_521/ECP_256_BP/ECP_384_BP/ECP_512_BP/MODP_3072/MODP_4096/MODP_6144/MODP_8192/MODP_2048,
IKE:AES_GCM_16_128/AES_GCM_16_192/AES_GCM_16_256/AES_GCM_12_128/AES_GCM_12_192/AES_GCM_12_256/AES_GCM_8_128/AES_GCM_8_192/AES_GCM_8_256/PRF_HMAC_SHA2_256/PRF_HMAC_SHA2_384/PRF_HMAC_SHA2_512/PRF_AES128_XCBC/PRF_HMAC_SHA1/ECP_256/ECP_384/ECP_521/ECP_256_BP/ECP_384_BP/ECP_512_BP/MODP_3072/MODP_4096/MODP_6144/MODP_8192/MODP_2048<br>
</div>
<div>Fri, 2019-08-16 16:14 08[LIB] <officeVPN|1> size of DH secret exponent: 2047 bits<br>
</div>
<div>Fri, 2019-08-16 16:14 08[ENC] <officeVPN|1> generating AGGRESSIVE request 0 [ SA KE No ID V V V V V ]<br>
</div>
<div>Fri, 2019-08-16 16:14 08[NET] <officeVPN|1> sending packet: from 10.0.0.3[500] to 50.45.0.51[500] (548 bytes)<br>
</div>
<div>Fri, 2019-08-16 16:14 10[NET] <officeVPN|1> received packet: from 50.45.0.51[500] to 10.0.0.3[500] (564 bytes)<br>
</div>
<div>Fri, 2019-08-16 16:14 10[ENC] <officeVPN|1> parsed AGGRESSIVE response 0 [ SA KE No ID HASH V NAT-D NAT-D V V V V V ]<br>
</div>
<div>Fri, 2019-08-16 16:14 10[IKE] <officeVPN|1> received NAT-T (RFC 3947) vendor ID<br>
</div>
<div>Fri, 2019-08-16 16:14 10[IKE] <officeVPN|1> received DPD vendor ID<br>
</div>
<div>Fri, 2019-08-16 16:14 10[IKE] <officeVPN|1> received XAuth vendor ID<br>
</div>
<div>Fri, 2019-08-16 16:14 10[ENC] <officeVPN|1> received unknown vendor ID: 82:99:03:17:57:a3:60:82:c6:a6:21:de:00:00:00:00<br>
</div>
<div>Fri, 2019-08-16 16:14 10[IKE] <officeVPN|1> received FRAGMENTATION vendor ID<br>
</div>
<div>Fri, 2019-08-16 16:14 10[IKE] <officeVPN|1> received FRAGMENTATION vendor ID<br>
</div>
<div>Fri, 2019-08-16 16:14 10[CFG] <officeVPN|1> selecting proposal:<br>
</div>
<div>Fri, 2019-08-16 16:14 10[CFG] <officeVPN|1> proposal matches<br>
</div>
<div>Fri, 2019-08-16 16:14 10[CFG] <officeVPN|1> received proposals: IKE:AES_CBC_128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048<br>
</div>
<div>Fri, 2019-08-16 16:14 10[CFG] <officeVPN|1> configured proposals: IKE:AES_CBC_128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048, IKE:AES_CBC_128/AES_CBC_192/AES_CBC_256/CAMELLIA_CBC_128/CAMELLIA_CBC_192/CAMELLIA_CBC_256/3DES_CBC/HMAC_SHA2_256_128/HMAC_SHA2_384_192/HMAC_SHA2_512_256/HMAC_SHA1_96/AES_XCBC_96/PRF_HMAC_SHA2_256/PRF_HMAC_SHA2_384/PRF_HMAC_SHA2_512/PRF_AES128_XCBC/PRF_HMAC_SHA1/ECP_256/ECP_384/ECP_521/ECP_256_BP/ECP_384_BP/ECP_512_BP/MODP_3072/MODP_4096/MODP_6144/MODP_8192/MODP_2048,
IKE:AES_GCM_16_128/AES_GCM_16_192/AES_GCM_16_256/AES_GCM_12_128/AES_GCM_12_192/AES_GCM_12_256/AES_GCM_8_128/AES_GCM_8_192/AES_GCM_8_256/PRF_HMAC_SHA2_256/PRF_HMAC_SHA2_384/PRF_HMAC_SHA2_512/PRF_AES128_XCBC/PRF_HMAC_SHA1/ECP_256/ECP_384/ECP_521/ECP_256_BP/ECP_384_BP/ECP_512_BP/MODP_3072/MODP_4096/MODP_6144/MODP_8192/MODP_2048<br>
</div>
<div>Fri, 2019-08-16 16:14 10[CFG] <officeVPN|1> selected proposal: IKE:AES_CBC_128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048<br>
</div>
<div>Fri, 2019-08-16 16:14 10[IKE] <officeVPN|1> local host is behind NAT, sending keep alives<br>
</div>
<div>Fri, 2019-08-16 16:14 10[IKE] <officeVPN|1> remote host is behind NAT<br>
</div>
<div>Fri, 2019-08-16 16:14 10[IKE] <officeVPN|1> reinitiating already active tasks<br>
</div>
<div>Fri, 2019-08-16 16:14 10[IKE] <officeVPN|1> ISAKMP_VENDOR task<br>
</div>
<div>Fri, 2019-08-16 16:14 10[IKE] <officeVPN|1> AGGRESSIVE_MODE task<br>
</div>
<div>Fri, 2019-08-16 16:14 10[ENC] <officeVPN|1> generating AGGRESSIVE request 0 [ HASH NAT-D NAT-D ]<br>
</div>
<div>Fri, 2019-08-16 16:14 10[NET] <officeVPN|1> sending packet: from 10.0.0.3[4500] to 50.45.0.51[4500] (108 bytes)<br>
</div>
<div>Fri, 2019-08-16 16:14 10[IKE] <officeVPN|1> activating new tasks<br>
</div>
<div>Fri, 2019-08-16 16:14 10[IKE] <officeVPN|1> nothing to initiate<br>
</div>
<div>Fri, 2019-08-16 16:14 11[NET] <officeVPN|1> received packet: from 50.45.0.51[4500] to 10.0.0.3[4500] (76 bytes)<br>
</div>
<div>Fri, 2019-08-16 16:14 11[ENC] <officeVPN|1> parsed TRANSACTION request 771264833 [ HASH CPRQ(X_TYPE X_USER X_PWD) ]<br>
</div>
<div>Fri, 2019-08-16 16:14 11[ENC] <officeVPN|1> generating TRANSACTION response 771264833 [ HASH CPRP(X_USER X_PWD) ]<br>
</div>
<div>Fri, 2019-08-16 16:14 11[NET] <officeVPN|1> sending packet: from 10.0.0.3[4500] to 50.45.0.51[4500] (92 bytes)<br>
</div>
<div>Fri, 2019-08-16 16:14 12[NET] <officeVPN|1> received packet: from 50.45.0.51[4500] to 10.0.0.3[4500] (76 bytes)<br>
</div>
<div>Fri, 2019-08-16 16:14 12[ENC] <officeVPN|1> parsed TRANSACTION request 3349886284 [ HASH CPS(X_STATUS) ]<br>
</div>
<div>Fri, 2019-08-16 16:14 12[IKE] <officeVPN|1> XAuth authentication of 'user' (myself) successful<br>
</div>
<div>Fri, 2019-08-16 16:14 12[IKE] <officeVPN|1> IKE_SA officeVPN[1] established between 10.0.0.3[10.0.0.3]...50.45.0.51[196.198.128.64]<br>
</div>
<div>Fri, 2019-08-16 16:14 12[IKE] <officeVPN|1> IKE_SA officeVPN[1] state change: CONNECTING => ESTABLISHED<br>
</div>
<div>Fri, 2019-08-16 16:14 12[IKE] <officeVPN|1> scheduling reauthentication in 9852s<br>
</div>
<div>Fri, 2019-08-16 16:14 12[IKE] <officeVPN|1> maximum IKE_SA lifetime 10392s<br>
</div>
<div>Fri, 2019-08-16 16:14 12[ENC] <officeVPN|1> generating TRANSACTION response 3349886284 [ HASH CPA(X_STATUS) ]<br>
</div>
<div>Fri, 2019-08-16 16:14 12[NET] <officeVPN|1> sending packet: from 10.0.0.3[4500] to 50.45.0.51[4500] (76 bytes)<br>
</div>
<div>Fri, 2019-08-16 16:14 12[IKE] <officeVPN|1> activating new tasks<br>
</div>
<div>Fri, 2019-08-16 16:14 12[IKE] <officeVPN|1> nothing to initiate<br>
</div>
<div>Fri, 2019-08-16 16:15 04[NET] <officeVPN|1> received packet: from 50.45.0.51[4500] to 10.0.0.3[4500] (92 bytes)<br>
</div>
<div>Fri, 2019-08-16 16:15 04[ENC] <officeVPN|1> parsed INFORMATIONAL_V1 request 1714123051 [ HASH N(DPD) ]<br>
</div>
<div>Fri, 2019-08-16 16:15 04[IKE] <officeVPN|1> queueing ISAKMP_DPD task<br>
</div>
<div>Fri, 2019-08-16 16:15 04[IKE] <officeVPN|1> activating new tasks<br>
</div>
<div>Fri, 2019-08-16 16:15 04[IKE] <officeVPN|1> activating ISAKMP_DPD task<br>
</div>
<div>Fri, 2019-08-16 16:15 04[ENC] <officeVPN|1> generating INFORMATIONAL_V1 request 3290006026 [ HASH N(DPD_ACK) ]<br>
</div>
<div>Fri, 2019-08-16 16:15 04[NET] <officeVPN|1> sending packet: from 10.0.0.3[4500] to 50.45.0.51[4500] (92 bytes)<br>
</div>
<div>Fri, 2019-08-16 16:15 04[IKE] <officeVPN|1> activating new tasks<br>
</div>
<div>Fri, 2019-08-16 16:15 04[IKE] <officeVPN|1> nothing to initiate<br>
</div>
<div>Fri, 2019-08-16 16:16 11[NET] <officeVPN|1> received packet: from 50.45.0.51[4500] to 10.0.0.3[4500] (92 bytes)<br>
</div>
<div>Fri, 2019-08-16 16:16 11[ENC] <officeVPN|1> parsed INFORMATIONAL_V1 request 2545931713 [ HASH N(DPD) ]<br>
</div>
<div>Fri, 2019-08-16 16:16 11[IKE] <officeVPN|1> queueing ISAKMP_DPD task<br>
</div>
<div>Fri, 2019-08-16 16:16 11[IKE] <officeVPN|1> activating new tasks<br>
</div>
<div>Fri, 2019-08-16 16:16 11[IKE] <officeVPN|1> activating ISAKMP_DPD task<br>
</div>
<div>Fri, 2019-08-16 16:16 11[ENC] <officeVPN|1> generating INFORMATIONAL_V1 request 3138418696 [ HASH N(DPD_ACK) ]<br>
</div>
<div>Fri, 2019-08-16 16:16 11[NET] <officeVPN|1> sending packet: from 10.0.0.3[4500] to 50.45.0.51[4500] (92 bytes)<br>
</div>
<div>Fri, 2019-08-16 16:16 11[IKE] <officeVPN|1> activating new tasks<br>
</div>
<div>Fri, 2019-08-16 16:16 11[IKE] <officeVPN|1> nothing to initiate<br>
</div>
<div>Fri, 2019-08-16 16:17 14[CFG] proposing traffic selectors for us:<br>
</div>
<div>Fri, 2019-08-16 16:17 14[CFG] dynamic<br>
</div>
<div>Fri, 2019-08-16 16:17 14[CFG] proposing traffic selectors for other:<br>
</div>
<div>Fri, 2019-08-16 16:17 14[CFG] dynamic<br>
</div>
<div>Fri, 2019-08-16 16:17 05[NET] <officeVPN|1> received packet: from 50.45.0.51[4500] to 10.0.0.3[4500] (92 bytes)<br>
</div>
<div>Fri, 2019-08-16 16:17 05[ENC] <officeVPN|1> parsed INFORMATIONAL_V1 request 4173293943 [ HASH N(DPD) ]<br>
</div>
<div>Fri, 2019-08-16 16:17 05[IKE] <officeVPN|1> queueing ISAKMP_DPD task<br>
</div>
<div>Fri, 2019-08-16 16:17 05[IKE] <officeVPN|1> activating new tasks<br>
</div>
<div>Fri, 2019-08-16 16:17 05[IKE] <officeVPN|1> activating ISAKMP_DPD task<br>
</div>
<div>Fri, 2019-08-16 16:17 05[ENC] <officeVPN|1> generating INFORMATIONAL_V1 request 529988676 [ HASH N(DPD_ACK) ]<br>
</div>
<div>Fri, 2019-08-16 16:17 05[NET] <officeVPN|1> sending packet: from 10.0.0.3[4500] to 50.45.0.51[4500] (92 bytes)<br>
</div>
<div>Fri, 2019-08-16 16:17 05[IKE] <officeVPN|1> activating new tasks<br>
</div>
<div>Fri, 2019-08-16 16:17 05[IKE] <officeVPN|1> nothing to initiate<br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>Thank you<br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>--<br>
</div>
<div>Kind regards<br>
</div>
<div><br>
</div>
<span>Stephen Feyrer</span><br>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Tobias Brunner <tobias@strongswan.org><br>
<b>Sent:</b> 16 August 2019 15:48<br>
<b>To:</b> Stephen Feyrer <stephen.feyrer@greensill.com>; strongSwan Users-Mailinglist <users@lists.strongswan.org><br>
<b>Subject:</b> Re: [strongSwan] Connecting but not connected</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">This message was sent from outside of Greensill Capital. Please do not open attachments or click on links unless you recognise the source of this email and are certain the content is safe.<br>
<br>
Hi Stephen,<br>
<br>
> I have already advised the team that Aggressive<br>
> mode with psk is unsafe.<br>
<br>
If you are at it, they shouldn't use IKEv1 or L2TP (if they actually do)<br>
anymore either.<br>
<br>
Looks like you might now have to add leftsourceip=%config again (the<br>
peer is apparently not ready yet to accept Quick Mode requests, so it<br>
might be waiting for Mode Config).<br>
<br>
Regards,<br>
Tobias<br>
</div>
</span></font></div>
<p style="font-size:6pt; font-family: 'Cambria','times roman',serif;">This message is for the designated recipient only and may contain privileged, proprietary or otherwise confidential information. If you have received this in error, please contact the sender
immediately and delete the original. Any other use of this e-mail by you is prohibited. If we collect and use your personal data we will use it in accordance with our
<a href="http://www.greensill.com/privacy/">privacy policy</a>. Greensill Capital (UK) Limited. Registered in England and Wales. Registered Number: 8126173. Registered Office: One Southampton Street, Covent Garden, London, WC2R 0LR, United Kingdom. Greensill
Capital Pty Limited. Australian Company Number: 154 088 132. Registered Office: 62 –66 Woondooma Street, Bundaberg, Queensland 4670, Australia.</p>
<br>
</body>
</html>