Jan 1 06:07:08 snaps ipsec__plutorun: Starting Pluto subsystem... Jan 1 06:07:08 snaps ipsec__plutorun: Unknown default RSA hostkey scheme, not generating a default hostkey Jan 1 06:07:08 snaps pluto[3161]: Starting Pluto (Openswan Version 2.4.8 PLUTO_SENDS_VENDORID PLUTO_USES_KEYRR; Vendor ID OEtQ@pxNq\177W`) Jan 1 06:07:08 snaps pluto[3161]: Setting NAT-Traversal port-4500 floating to on Jan 1 06:07:08 snaps pluto[3161]: port floating activation criteria nat_t=1/port_fload=1 Jan 1 06:07:08 snaps pluto[3161]: including NAT-Traversal patch (Version 0.6c) Jan 1 06:07:08 snaps pluto[3161]: ike_alg_register_enc(): Activating OAKLEY_TWOFISH_CBC_SSH: Ok (ret=0) Jan 1 06:07:08 snaps pluto[3161]: ike_alg_register_enc(): Activating OAKLEY_TWOFISH_CBC: Ok (ret=0) Jan 1 06:07:08 snaps pluto[3161]: ike_alg_register_enc(): Activating OAKLEY_SERPENT_CBC: Ok (ret=0) Jan 1 06:07:08 snaps pluto[3161]: ike_alg_register_enc(): Activating OAKLEY_AES_CBC: Ok (ret=0) Jan 1 06:07:08 snaps pluto[3161]: ike_alg_register_enc(): Activating OAKLEY_BLOWFISH_CBC: Ok (ret=0) Jan 1 06:07:08 snaps pluto[3161]: ike_alg_register_hash(): Activating OAKLEY_SHA2_512: Ok (ret=0) Jan 1 06:07:08 snaps pluto[3161]: ike_alg_register_hash(): Activating OAKLEY_SHA2_256: Ok (ret=0) Jan 1 06:07:08 snaps pluto[3161]: starting up 1 cryptographic helpers Jan 1 06:07:08 snaps pluto[3161]: started helper pid=3172 (fd:6) Jan 1 06:07:08 snaps pluto[3161]: Using KLIPS IPsec interface code on 2.6.18.8-klips Jan 1 06:07:08 snaps pluto[3161]: Changing to directory '/etc/ipsec.d/cacerts' Jan 1 06:07:08 snaps pluto[3161]: loaded CA cert file 'Cacertone.pem' (1350 bytes) Jan 1 06:07:08 snaps pluto[3161]: Changing to directory '/etc/ipsec.d/aacerts' Jan 1 06:07:08 snaps pluto[3161]: Changing to directory '/etc/ipsec.d/ocspcerts' Jan 1 06:07:08 snaps pluto[3161]: Changing to directory '/etc/ipsec.d/crls' Jan 1 06:07:08 snaps pluto[3161]: loaded crl file 'Cacertone.crl' (532 bytes) Jan 1 06:07:08 snaps pluto[3161]: loading secrets from "/etc/ipsec.secrets" Jan 1 06:07:10 snaps pluto[3161]: added connection description "one" Jan 1 06:07:10 snaps pluto[3161]: listening for IKE messages Jan 1 06:07:10 snaps pluto[3161]: adding interface ipsec0/eth1 10.10.136.96:500 Jan 1 06:07:10 snaps pluto[3161]: adding interface ipsec0/eth1 10.10.136.96:4500 Jan 1 06:07:10 snaps pluto[3161]: forgetting secrets Jan 1 06:07:10 snaps pluto[3161]: loading secrets from "/etc/ipsec.secrets" Jan 1 06:07:10 snaps pluto[3161]: "one" #1: initiating Main Mode Jan 1 06:07:11 snaps pluto[3161]: "one" #1: received Vendor ID payload [Openswan (this version) 2.4.8 PLUTO_SENDS_VENDORID PLUTO_USES_KEYRR] Jan 1 06:07:11 snaps pluto[3161]: "one" #1: received Vendor ID payload [Dead Peer Detection] Jan 1 06:07:11 snaps pluto[3161]: "one" #1: received Vendor ID payload [RFC 3947] method set to=110 Jan 1 06:07:11 snaps pluto[3161]: "one" #1: enabling possible NAT-traversal with method RFC 3947 (NAT-Traversal) Jan 1 06:07:11 snaps pluto[3161]: "one" #1: transition from state STATE_MAIN_I1 to state STATE_MAIN_I2 Jan 1 06:07:11 snaps pluto[3161]: "one" #1: STATE_MAIN_I2: sent MI2, expecting MR2 Jan 1 06:07:11 snaps pluto[3161]: "one" #1: I did not send a certificate because I do not have one. Jan 1 06:07:11 snaps pluto[3161]: "one" #1: NAT-Traversal: Result using RFC 3947 (NAT-Traversal): no NAT detected Jan 1 06:07:11 snaps pluto[3161]: "one" #1: transition from state STATE_MAIN_I2 to state STATE_MAIN_I3 Jan 1 06:07:11 snaps pluto[3161]: "one" #1: STATE_MAIN_I3: sent MI3, expecting MR3 Jan 1 06:07:11 snaps pluto[3161]: "one" #1: Main mode peer ID is ID_FQDN: '@first' Jan 1 06:07:11 snaps pluto[3161]: "one" #1: transition from state STATE_MAIN_I3 to state STATE_MAIN_I4 Jan 1 06:07:11 snaps pluto[3161]: "one" #1: STATE_MAIN_I4: ISAKMP SA established {auth=OAKLEY_RSA_SIG cipher=oakley_3des_cbc_192 prf=oakley_md5 group=modp768} Jan 1 06:07:11 snaps pluto[3161]: "one" #2: initiating Quick Mode RSASIG+ENCRYPT+COMPRESS+TUNNEL+PFS+UP+failurePASS {using isakmp#1} Jan 1 06:07:11 snaps pluto[3161]: "one" #1: ignoring informational payload, type INVALID_ID_INFORMATION Jan 1 06:07:11 snaps pluto[3161]: "one" #1: received and ignored informational message Jan 1 06:07:20 snaps pluto[3161]: packet from 10.10.136.94:500: received Vendor ID payload [Openswan (this version) 2.4.8 PLUTO_SENDS_VENDORID PLUTO_USES_KEYRR] Jan 1 06:07:20 snaps pluto[3161]: packet from 10.10.136.94:500: received Vendor ID payload [Dead Peer Detection] Jan 1 06:07:20 snaps pluto[3161]: packet from 10.10.136.94:500: received Vendor ID payload [RFC 3947] method set to=110 Jan 1 06:07:20 snaps pluto[3161]: packet from 10.10.136.94:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03] meth=108, but already using method 110 Jan 1 06:07:20 snaps pluto[3161]: packet from 10.10.136.94:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02] meth=107, but already using method 110 Jan 1 06:07:20 snaps pluto[3161]: packet from 10.10.136.94:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but already using method 110 Jan 1 06:07:20 snaps pluto[3161]: packet from 10.10.136.94:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-00] Jan 1 06:07:20 snaps pluto[3161]: "one" #3: responding to Main Mode Jan 1 06:07:20 snaps pluto[3161]: "one" #3: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1 Jan 1 06:07:20 snaps pluto[3161]: "one" #3: STATE_MAIN_R1: sent MR1, expecting MI2 Jan 1 06:07:20 snaps pluto[3161]: "one" #3: NAT-Traversal: Result using RFC 3947 (NAT-Traversal): no NAT detected Jan 1 06:07:20 snaps pluto[3161]: "one" #3: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2 Jan 1 06:07:20 snaps pluto[3161]: "one" #3: STATE_MAIN_R2: sent MR2, expecting MI3 Jan 1 06:07:20 snaps pluto[3161]: "one" #3: Main mode peer ID is ID_FQDN: '@first' Jan 1 06:07:20 snaps pluto[3161]: "one" #3: I did not send a certificate because I do not have one. Jan 1 06:07:20 snaps pluto[3161]: "one" #3: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3 Jan 1 06:07:20 snaps pluto[3161]: "one" #3: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_RSA_SIG cipher=oakley_3des_cbc_192 prf=oakley_md5 group=modp768} Jan 1 06:07:20 snaps pluto[3161]: "one" #3: cannot respond to IPsec SA request because no connection is known for 200.0.0.0/8===10.10.136.96[@second]...10.10.136.94[@first]===192.168.1.0/24 Jan 1 06:07:20 snaps pluto[3161]: "one" #3: sending encrypted notification INVALID_ID_INFORMATION to 10.10.136.94:500 Jan 1 06:07:21 snaps pluto[3161]: "one" #1: ignoring informational payload, type INVALID_MESSAGE_ID Jan 1 06:07:21 snaps pluto[3161]: "one" #1: received and ignored informational message Jan 1 06:07:30 snaps pluto[3161]: "one" #3: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0xd3ec552c (perhaps this is a duplicated packet) Jan 1 06:07:30 snaps pluto[3161]: "one" #3: sending encrypted notification INVALID_MESSAGE_ID to 10.10.136.94:500 Jan 1 06:07:41 snaps pluto[3161]: "one" #1: ignoring informational payload, type INVALID_MESSAGE_ID Jan 1 06:07:41 snaps pluto[3161]: "one" #1: received and ignored informational message Jan 1 06:07:50 snaps pluto[3161]: "one" #3: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0xd3ec552c (perhaps this is a duplicated packet) Jan 1 06:07:50 snaps pluto[3161]: "one" #3: sending encrypted notification INVALID_MESSAGE_ID to 10.10.136.94:500 Jan 1 06:08:07 snaps pluto[3161]: "one" #3: received Delete SA payload: deleting ISAKMP State #3 Jan 1 06:08:08 snaps pluto[3161]: packet from 10.10.136.94:500: received and ignored informational message Jan 1 06:08:08 snaps pluto[3161]: "one" #1: received Delete SA payload: deleting ISAKMP State #1 Jan 1 06:08:08 snaps pluto[3161]: packet from 10.10.136.94:500: received and ignored informational message Jan 1 06:08:15 snaps pluto[3161]: shutting down Jan 1 06:08:15 snaps pluto[3161]: forgetting secrets Jan 1 06:08:15 snaps pluto[3161]: "one": deleting connection Jan 1 06:08:15 snaps pluto[3161]: "one" #2: deleting state (STATE_QUICK_I1) Jan 1 06:08:15 snaps pluto[3161]: shutting down interface ipsec0/eth1 10.10.136.96:4500 Jan 1 06:08:15 snaps pluto[3161]: shutting down interface ipsec0/eth1 10.10.136.96:500