2811:::: *Jul 26 19:07:43.195: IPSEC(sa_request): , (key eng. msg.) OUTBOUND local= 166.102.171.114, remote= x.x.x.x, local_proxy= 10.0.91.0/255.255.255.0/0/0 (type=4), remote_proxy= 192.168.0.0/255.255.0.0/0/0 (type=4), protocol= ESP, transform= NONE (Tunnel), lifedur= 3600s and 4608000kb, spi= 0x18642B43(409217859), conn_id= 0, keysize= 0, flags= 0x0 *Jul 26 19:07:43.195: ISAKMP:(0): SA request profile is (NULL) *Jul 26 19:07:43.195: ISAKMP: Created a peer struct for x.x.x.x, peer port 500 *Jul 26 19:07:43.195: ISAKMP: New peer created peer = 0x4792E410 peer_handle = 0x8000002F *Jul 26 19:07:43.195: ISAKMP: Locking peer struct 0x4792E410, refcount 1 for isakmp_initiator *Jul 26 19:07:43.195: ISAKMP: local port 500, remote port 500 *Jul 26 19:07:43.199: ISAKMP: set new node 0 to QM_IDLE *Jul 26 19:07:43.199: ISAKMP: Find a dup sa in the avl tree during calling isadb_insert sa = 469460F4 *Jul 26 19:07:43.199: ISAKMP:(0):Can not start Aggressive mode, trying Main mode. *Jul 26 19:07:43.199: ISAKMP:(0):found peer pre-shared key matching x.x.x.x *Jul 26 19:07:43.199: ISAKMP:(0): constructed NAT-T vendor-07 ID *Jul 26 19:07:43.199: ISAKMP:(0): constructed NAT-T vendor-03 ID *Jul 26 19:07:43.199: ISAKMP:(0): constructed NAT-T vendor-02 ID *Jul 26 19:07:43.199: ISAKMP:(0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM *Jul 26 19:07:43.199: ISAKMP:(0):Old State = IKE_READY New State = IKE_I_MM1 *Jul 26 19:07:43.199: ISAKMP:(0): beginning Main Mode exchange *Jul 26 19:07:43.199: ISAKMP:(0): sending packet to x.x.x.x my_port 500 peer_port 500 (I) MM_NO_STATE *Jul 26 19:07:43.231: ISAKMP (0:0): received packet from x.x.x.x dport 500 sport 500 Global (I) MM_NO_STATE *Jul 26 19:07:43.231: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH *Jul 26 19:07:43.231: ISAKMP:(0):Old State = IKE_I_MM1 New State = IKE_I_MM2 *Jul 26 19:07:43.235: ISAKMP:(0): processing SA payload. message ID = 0 *Jul 26 19:07:43.235: ISAKMP:(0): processing vendor id payload *Jul 26 19:07:43.235: ISAKMP:(0): vendor ID seems Unity/DPD but major 194 mismatch *Jul 26 19:07:43.235: ISAKMP:(0):found peer pre-shared key matching x.x.x.x *Jul 26 19:07:43.235: ISAKMP:(0): local preshared key found *Jul 26 19:07:43.235: ISAKMP : Scanning profiles for xauth ... *Jul 26 19:07:43.235: ISAKMP:(0):Checking ISAKMP transform 1 against priority 11 policy *Jul 26 19:07:43.235: ISAKMP: encryption 3DES-CBC *Jul 26 19:07:43.235: ISAKMP: hash SHA *Jul 26 19:07:43.235: ISAKMP: default group 2 *Jul 26 19:07:43.235: ISAKMP: auth pre-share *Jul 26 19:07:43.235: ISAKMP: life type in seconds *Jul 26 19:07:43.235: ISAKMP: life duration (basic) of 28800 *Jul 26 19:07:43.235: ISAKMP:(0):atts are acceptable. Next payload is 0 *Jul 26 19:07:43.235: ISAKMP:(0): processing vendor id payload *Jul 26 19:07:43.235: ISAKMP:(0): vendor ID seems Unity/DPD but major 194 mismatch *Jul 26 19:07:43.235: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE *Jul 26 19:07:43.235: ISAKMP:(0):Old State = IKE_I_MM2 New State = IKE_I_MM2 *Jul 26 19:07:43.239: ISAKMP:(0): sending packet to x.x.x.x my_port 500 peer_port 500 (I) MM_SA_SETUP *Jul 26 19:07:43.239: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE *Jul 26 19:07:43.239: ISAKMP:(0):Old State = IKE_I_MM2 New State = IKE_I_MM3 *Jul 26 19:07:53.239: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP... *Jul 26 19:07:53.239: ISAKMP (0:0): incrementing error counter on sa, attempt 1 of 5: retransmit phase 1 *Jul 26 19:07:53.239: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP *Jul 26 19:07:53.239: ISAKMP:(0): sending packet to x.x.x.x my_port 500 peer_port 500 (I) MM_SA_SETUP *Jul 26 19:07:53.271: ISAKMP (0:0): received packet from x.x.x.x dport 500 sport 500 Global (I) MM_SA_SETUP *Jul 26 19:07:53.271: ISAKMP:(0):Notify has no hash. Rejected. *Jul 26 19:07:53.271: ISAKMP (0:0): Unknown Input IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY: state = IKE_I_MM3 *Jul 26 19:07:53.271: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY *Jul 26 19:07:53.271: ISAKMP:(0):Old State = IKE_I_MM3 New State = IKE_I_MM3 *Jul 26 19:07:53.271: %CRYPTO-6-IKMP_MODE_FAILURE: Processing of Informational mode failed with peer at x.x.x.x ASA 5510 Jul 26 15:14:39 [IKEv1]: Group = x.x.x.x, IP = x.x.x.x, Can't find a valid tunnel group, aborting...! Jul 26 15:14:39 [IKEv1]: Group = x.x.x.x, IP = x.x.x.x, Removing peer from peer table failed, no match! Jul 26 15:14:39 [IKEv1]: Group = x.x.x.x, IP = x.x.x.x Error: Unable to remove PeerTblEntry Jul 26 15:14:49 [IKEv1]: IP = x.x.x.x, Header invalid, missing SA payload! (next payload = 4) Jul 26 15:15:09 [IKEv1]: IP = LEXINGTONSC_0001-05, Removing peer from peer table failed, no match! Jul 26 15:15:09 [IKEv1]: IP = LEXINGTONSC_0001-05, Error: Unable to remove PeerTblEntry