Sep 20 08:52:45 asa-inside %ASA-7-713906: IP = 217.116.110.196, Oakley proposal is acceptable Sep 20 08:52:45 asa-inside %ASA-7-715049: IP = 217.116.110.196, Received NAT-Traversal ver 03 VID Sep 20 08:52:45 asa-inside %ASA-7-715049: IP = 217.116.110.196, Received NAT-Traversal ver 02 VID Sep 20 08:52:45 asa-inside %ASA-7-715028: IP = 217.116.110.196, IKE SA Proposal # 1, Transform # 1 acceptable Matches global IKE entry # 7 Sep 20 08:52:45 asa-inside %ASA-7-715049: IP = 217.116.110.196, Received Cisco Unity client VID Sep 20 08:52:45 asa-inside %ASA-7-715049: IP = 217.116.110.196, Received DPD VID Sep 20 08:52:45 asa-inside %ASA-7-715038: IP = 217.116.110.196, Processing IOS/PIX Vendor ID payload (version: 1.0.0, capabilities: 0000077f) Sep 20 08:52:45 asa-inside %ASA-7-715049: IP = 217.116.110.196, Received xauth V6 VID Sep 20 08:52:45 asa-inside %ASA-7-713906: IP = 217.116.110.196, computing NAT Discovery hash Sep 20 08:52:45 asa-inside %ASA-7-713906: IP = 217.116.110.196, computing NAT Discovery hash Sep 20 08:52:45 asa-inside %ASA-7-715048: IP = 217.116.110.196, Send IOS VID Sep 20 08:52:45 asa-inside %ASA-7-715038: IP = 217.116.110.196, Constructing ASA spoofing IOS Vendor ID payload (version: 1.0.0, capabilities: 20000409) Sep 20 08:52:45 asa-inside %ASA-7-715048: IP = 217.116.110.196, Send Altiga/Cisco VPN3000/Cisco ASA GW VID Sep 20 08:52:45 asa-inside %ASA-7-713906: IP = 217.116.110.196, computing NAT Discovery hash Sep 20 08:52:45 asa-inside %ASA-7-713906: IP = 217.116.110.196, computing NAT Discovery hash Sep 20 08:52:45 asa-inside %ASA-7-713906: IP = 217.116.110.196, Connection landed on tunnel_group 217.116.110.196 Sep 20 08:52:45 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, Generating keys for Responder... Sep 20 08:52:45 asa-inside %ASA-7-714011: Group = 217.116.110.196, IP = 217.116.110.196, ID_IPV4_ADDR ID received 217.116.110.196 Sep 20 08:52:45 asa-inside %ASA-7-715076: Group = 217.116.110.196, IP = 217.116.110.196, Computing hash for ISAKMP Sep 20 08:52:45 asa-inside %ASA-6-713172: Group = 217.116.110.196, IP = 217.116.110.196, Automatic NAT Detection Status: Remote end is NOT behind a NAT device This end is NOT behind a NAT device Sep 20 08:52:45 asa-inside %ASA-7-713906: IP = 217.116.110.196, Connection landed on tunnel_group 217.116.110.196 Sep 20 08:52:45 asa-inside %ASA-7-715076: Group = 217.116.110.196, IP = 217.116.110.196, Computing hash for ISAKMP Sep 20 08:52:45 asa-inside %ASA-7-715034: IP = 217.116.110.196, Constructing IOS keep alive payload: proposal=32767/32767 sec. Sep 20 08:52:45 asa-inside %ASA-6-113009: AAA retrieved default group policy (DfltGrpPolicy) for user = 217.116.110.196 Sep 20 08:52:45 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, Delete with reason code and text capabilities are negotiated Sep 20 08:52:45 asa-inside %ASA-3-713119: Group = 217.116.110.196, IP = 217.116.110.196, PHASE 1 COMPLETED Sep 20 08:52:45 asa-inside %ASA-7-713121: IP = 217.116.110.196, Keep-alive type for this connection: DPD Sep 20 08:52:45 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, Starting phase 1 rekey timer: 3420000 (ms) Sep 20 08:52:45 asa-inside %ASA-7-714003: IP = 217.116.110.196, IKE Responder starting QM: msg id = ee370b60 Sep 20 08:52:45 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, processing ISA_KE for PFS in phase 2 Sep 20 08:52:45 asa-inside %ASA-7-714011: Group = 217.116.110.196, IP = 217.116.110.196, ID_IPV4_ADDR_SUBNET ID received--217.116.111.0--255.255.255.224 Sep 20 08:52:45 asa-inside %ASA-7-713035: Group = 217.116.110.196, IP = 217.116.110.196, Received remote IP Proxy Subnet data in ID Payload: Address 217.116.111.0, Mask 255.255.255.224, Protocol 1, Port 0 Sep 20 08:52:45 asa-inside %ASA-7-714011: Group = 217.116.110.196, IP = 217.116.110.196, ID_IPV4_ADDR ID received 195.187.143.129 Sep 20 08:52:45 asa-inside %ASA-7-713024: Group = 217.116.110.196, IP = 217.116.110.196, Received local Proxy Host data in ID Payload: Address 195.187.143.129, Protocol 1, Port 0 Sep 20 08:52:45 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, QM IsRekeyed old sa not found by addr Sep 20 08:52:45 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 1... Sep 20 08:52:45 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 1, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 Sep 20 08:52:45 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 2... Sep 20 08:52:45 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 2, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 Sep 20 08:52:45 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 3... Sep 20 08:52:45 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 3, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 Sep 20 08:52:45 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 4... Sep 20 08:52:45 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 4, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 Sep 20 08:52:45 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 5... Sep 20 08:52:45 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 5, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 Sep 20 08:52:45 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 6... Sep 20 08:52:45 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 6, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 Sep 20 08:52:45 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 7... Sep 20 08:52:45 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 7, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 Sep 20 08:52:45 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 8... Sep 20 08:52:45 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 8, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 Sep 20 08:52:45 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 9... Sep 20 08:52:45 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 9, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 Sep 20 08:52:45 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 10... Sep 20 08:52:45 asa-inside %ASA-7-713225: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map OUTSIDE, seq = 10 is a successful match Sep 20 08:52:45 asa-inside %ASA-7-713066: Group = 217.116.110.196, IP = 217.116.110.196, IKE Remote Peer configured for crypto map: OUTSIDE Sep 20 08:52:45 asa-inside %ASA-7-715027: Group = 217.116.110.196, IP = 217.116.110.196, IPSec SA Proposal # 1, Transform # 1 acceptable Matches global IPSec SA entry # 10 Sep 20 08:52:45 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, IKE: requesting SPI! Sep 20 08:52:45 asa-inside %ASA-7-715006: Group = 217.116.110.196, IP = 217.116.110.196, IKE got SPI from key engine: SPI = 0x52b12283 Sep 20 08:52:45 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, oakley constucting quick mode Sep 20 08:52:45 asa-inside %ASA-5-713075: Group = 217.116.110.196, IP = 217.116.110.196, Overriding Initiator's IPSec rekeying duration from 86400 to 28800 seconds Sep 20 08:52:45 asa-inside %ASA-7-715001: Group = 217.116.110.196, IP = 217.116.110.196, constructing proxy ID Sep 20 08:52:45 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, Transmitting Proxy Id: Remote subnet: 217.116.111.0 Mask 255.255.255.224 Protocol 1 Port 0 Local host: 195.187.143.129 Protocol 1 Port 0 Sep 20 08:52:45 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, Sending RESPONDER LIFETIME notification to Initiator Sep 20 08:52:45 asa-inside %ASA-7-714005: Group = 217.116.110.196, IP = 217.116.110.196, IKE Responder sending 2nd QM pkt: msg id = ee370b60 Sep 20 08:52:46 asa-inside %ASA-7-714003: IP = 217.116.110.196, IKE Responder starting QM: msg id = 20ffffd4 Sep 20 08:52:46 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, processing ISA_KE for PFS in phase 2 Sep 20 08:52:46 asa-inside %ASA-7-714011: Group = 217.116.110.196, IP = 217.116.110.196, ID_IPV4_ADDR_SUBNET ID received--217.116.111.0--255.255.255.224 Sep 20 08:52:46 asa-inside %ASA-7-713035: Group = 217.116.110.196, IP = 217.116.110.196, Received remote IP Proxy Subnet data in ID Payload: Address 217.116.111.0, Mask 255.255.255.224, Protocol 47, Port 0 Sep 20 08:52:46 asa-inside %ASA-7-714011: Group = 217.116.110.196, IP = 217.116.110.196, ID_IPV4_ADDR ID received 195.187.143.129 Sep 20 08:52:46 asa-inside %ASA-7-713024: Group = 217.116.110.196, IP = 217.116.110.196, Received local Proxy Host data in ID Payload: Address 195.187.143.129, Protocol 47, Port 0 Sep 20 08:52:46 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, QM IsRekeyed old sa not found by addr Sep 20 08:52:46 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 1... Sep 20 08:52:46 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 1, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 Sep 20 08:52:46 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 2... Sep 20 08:52:46 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 2, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 Sep 20 08:52:46 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 3... Sep 20 08:52:46 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 3, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 Sep 20 08:52:46 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 4... Sep 20 08:52:46 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 4, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 Sep 20 08:52:46 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 5... Sep 20 08:52:46 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 5, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 Sep 20 08:52:46 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 6... Sep 20 08:52:46 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 6, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 Sep 20 08:52:46 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 7... Sep 20 08:52:46 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 7, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 Sep 20 08:52:46 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 8... Sep 20 08:52:46 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 8, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 Sep 20 08:52:46 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 9... Sep 20 08:52:46 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 9, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 Sep 20 08:52:46 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 10... Sep 20 08:52:46 asa-inside %ASA-7-713225: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map OUTSIDE, seq = 10 is a successful match Sep 20 08:52:46 asa-inside %ASA-7-713066: Group = 217.116.110.196, IP = 217.116.110.196, IKE Remote Peer configured for crypto map: OUTSIDE Sep 20 08:52:46 asa-inside %ASA-7-715027: Group = 217.116.110.196, IP = 217.116.110.196, IPSec SA Proposal # 1, Transform # 1 acceptable Matches global IPSec SA entry # 10 Sep 20 08:52:46 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, IKE: requesting SPI! Sep 20 08:52:46 asa-inside %ASA-7-715006: Group = 217.116.110.196, IP = 217.116.110.196, IKE got SPI from key engine: SPI = 0x1af59eca Sep 20 08:52:46 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, oakley constucting quick mode Sep 20 08:52:46 asa-inside %ASA-5-713075: Group = 217.116.110.196, IP = 217.116.110.196, Overriding Initiator's IPSec rekeying duration from 86400 to 28800 seconds Sep 20 08:52:46 asa-inside %ASA-7-715001: Group = 217.116.110.196, IP = 217.116.110.196, constructing proxy ID Sep 20 08:52:46 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, Transmitting Proxy Id: Remote subnet: 217.116.111.0 Mask 255.255.255.224 Protocol 47 Port 0 Local host: 195.187.143.129 Protocol 47 Port 0 Sep 20 08:52:46 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, Sending RESPONDER LIFETIME notification to Initiator Sep 20 08:52:46 asa-inside %ASA-7-714005: Group = 217.116.110.196, IP = 217.116.110.196, IKE Responder sending 2nd QM pkt: msg id = 20ffffd4 Sep 20 08:52:46 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, loading all IPSEC SAs Sep 20 08:52:46 asa-inside %ASA-7-715001: Group = 217.116.110.196, IP = 217.116.110.196, Generating Quick Mode Key! Sep 20 08:52:46 asa-inside %ASA-7-715001: Group = 217.116.110.196, IP = 217.116.110.196, Generating Quick Mode Key! Sep 20 08:52:46 asa-inside %ASA-6-602303: IPSEC: An outbound LAN-to-LAN SA (SPI= 0xD55274ED) between 195.187.143.65 and 217.116.110.196 (user= 217.116.110.196) has been created. Sep 20 08:52:46 asa-inside %ASA-5-713049: Group = 217.116.110.196, IP = 217.116.110.196, Security negotiation complete for LAN-to-LAN Group (217.116.110.196) Responder, Inbound SPI = 0x52b12283, Outbound SPI = 0xd55274ed Sep 20 08:52:46 asa-inside %ASA-7-715007: Group = 217.116.110.196, IP = 217.116.110.196, IKE got a KEY_ADD msg for SA: SPI = 0xd55274ed Sep 20 08:52:46 asa-inside %ASA-6-602303: IPSEC: An inbound LAN-to-LAN SA (SPI= 0x52B12283) between 195.187.143.65 and 217.116.110.196 (user= 217.116.110.196) has been created. Sep 20 08:52:46 asa-inside %ASA-7-715077: Group = 217.116.110.196, IP = 217.116.110.196, Pitcher: received KEY_UPDATE, spi 0x52b12283 Sep 20 08:52:46 asa-inside %ASA-6-713905: Group = 217.116.110.196, IP = 217.116.110.196, Starting P2 Rekey timer to expire in 24479 seconds Sep 20 08:52:46 asa-inside %ASA-5-713120: Group = 217.116.110.196, IP = 217.116.110.196, PHASE 2 COMPLETED (msgid=ee370b60) Sep 20 08:52:46 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, loading all IPSEC SAs Sep 20 08:52:46 asa-inside %ASA-7-715001: Group = 217.116.110.196, IP = 217.116.110.196, Generating Quick Mode Key! Sep 20 08:52:46 asa-inside %ASA-7-715001: Group = 217.116.110.196, IP = 217.116.110.196, Generating Quick Mode Key! Sep 20 08:52:46 asa-inside %ASA-6-602303: IPSEC: An outbound LAN-to-LAN SA (SPI= 0x5111DF5F) between 195.187.143.65 and 217.116.110.196 (user= 217.116.110.196) has been created. Sep 20 08:52:46 asa-inside %ASA-5-713049: Group = 217.116.110.196, IP = 217.116.110.196, Security negotiation complete for LAN-to-LAN Group (217.116.110.196) Responder, Inbound SPI = 0x1af59eca, Outbound SPI = 0x5111df5f Sep 20 08:52:46 asa-inside %ASA-7-715007: Group = 217.116.110.196, IP = 217.116.110.196, IKE got a KEY_ADD msg for SA: SPI = 0x5111df5f Sep 20 08:52:46 asa-inside %ASA-6-602303: IPSEC: An inbound LAN-to-LAN SA (SPI= 0x1AF59ECA) between 195.187.143.65 and 217.116.110.196 (user= 217.116.110.196) has been created. Sep 20 08:52:46 asa-inside %ASA-7-715077: Group = 217.116.110.196, IP = 217.116.110.196, Pitcher: received KEY_UPDATE, spi 0x1af59eca Sep 20 08:52:46 asa-inside %ASA-6-713905: Group = 217.116.110.196, IP = 217.116.110.196, Starting P2 Rekey timer to expire in 24480 seconds Sep 20 08:52:46 asa-inside %ASA-5-713120: Group = 217.116.110.196, IP = 217.116.110.196, PHASE 2 COMPLETED (msgid=20ffffd4)