Nov 29 23:38:58 ip-172-31-25-2 charon: 00[DMN] Starting IKE charon daemon (strongSwan 5.1.2, Linux 3.13.0-36-generic, x86_64)
Nov 29 23:38:58 ip-172-31-25-2 charon: 00[CFG] loading ca certificates from '/etc/ipsec.d/cacerts'
Nov 29 23:38:58 ip-172-31-25-2 charon: 00[CFG] loading aa certificates from '/etc/ipsec.d/aacerts'
Nov 29 23:38:58 ip-172-31-25-2 charon: 00[CFG] loading ocsp signer certificates from '/etc/ipsec.d/ocspcerts'
Nov 29 23:38:58 ip-172-31-25-2 charon: 00[CFG] loading attribute certificates from '/etc/ipsec.d/acerts'
Nov 29 23:38:58 ip-172-31-25-2 charon: 00[CFG] loading crls from '/etc/ipsec.d/crls'
Nov 29 23:38:58 ip-172-31-25-2 charon: 00[CFG] loading secrets from '/etc/ipsec.secrets'
Nov 29 23:38:58 ip-172-31-25-2 charon: 00[CFG]   loaded IKE secret for app
Nov 29 23:38:58 ip-172-31-25-2 charon: 00[CFG]   loaded EAP secret for app
Nov 29 23:38:58 ip-172-31-25-2 charon: 00[CFG]   loaded IKE secret for %any
Nov 29 23:38:58 ip-172-31-25-2 charon: 00[LIB] loaded plugins: charon test-vectors aes rc2 sha1 sha2 md4 md5 rdrand random nonce x509 revocation constraints pkcs1 pkcs7 pkcs8 pkcs12 pem openssl xcbc cmac hmac ctr ccm gcm attr kernel-netlink resolve socket-default stroke updown eap-identity addrblock
Nov 29 23:38:58 ip-172-31-25-2 charon: 00[LIB] unable to load 5 plugin features (5 due to unmet dependencies)
Nov 29 23:38:58 ip-172-31-25-2 charon: 00[LIB] dropped capabilities, running as uid 0, gid 0
Nov 29 23:38:58 ip-172-31-25-2 charon: 00[JOB] spawning 16 worker threads
Nov 29 23:38:58 ip-172-31-25-2 charon: 11[CFG] received stroke: add connection 'vpn'
Nov 29 23:38:58 ip-172-31-25-2 charon: 11[CFG] left nor right host is our side, assuming left=local
Nov 29 23:38:58 ip-172-31-25-2 charon: 11[CFG] added configuration 'vpn'
Nov 29 23:39:16 ip-172-31-25-2 charon: 00[DMN] signal of type SIGINT received. Shutting down
Nov 29 23:39:18 ip-172-31-25-2 charon: 00[DMN] Starting IKE charon daemon (strongSwan 5.1.2, Linux 3.13.0-36-generic, x86_64)
Nov 29 23:39:18 ip-172-31-25-2 charon: 00[CFG] loading ca certificates from '/etc/ipsec.d/cacerts'
Nov 29 23:39:18 ip-172-31-25-2 charon: 00[CFG] loading aa certificates from '/etc/ipsec.d/aacerts'
Nov 29 23:39:18 ip-172-31-25-2 charon: 00[CFG] loading ocsp signer certificates from '/etc/ipsec.d/ocspcerts'
Nov 29 23:39:18 ip-172-31-25-2 charon: 00[CFG] loading attribute certificates from '/etc/ipsec.d/acerts'
Nov 29 23:39:18 ip-172-31-25-2 charon: 00[CFG] loading crls from '/etc/ipsec.d/crls'
Nov 29 23:39:18 ip-172-31-25-2 charon: 00[CFG] loading secrets from '/etc/ipsec.secrets'
Nov 29 23:39:18 ip-172-31-25-2 charon: 00[CFG]   loaded IKE secret for unifiapp
Nov 29 23:39:18 ip-172-31-25-2 charon: 00[CFG]   loaded EAP secret for unifiapp
Nov 29 23:39:18 ip-172-31-25-2 charon: 00[CFG]   loaded IKE secret for %any
Nov 29 23:39:18 ip-172-31-25-2 charon: 00[LIB] loaded plugins: charon test-vectors aes rc2 sha1 sha2 md4 md5 rdrand random nonce x509 revocation constraints pkcs1 pkcs7 pkcs8 pkcs12 pem openssl xcbc cmac hmac ctr ccm gcm attr kernel-netlink resolve socket-default stroke updown eap-identity addrblock
Nov 29 23:39:18 ip-172-31-25-2 charon: 00[LIB] unable to load 5 plugin features (5 due to unmet dependencies)
Nov 29 23:39:18 ip-172-31-25-2 charon: 00[LIB] dropped capabilities, running as uid 0, gid 0
Nov 29 23:39:18 ip-172-31-25-2 charon: 00[JOB] spawning 16 worker threads
Nov 29 23:39:18 ip-172-31-25-2 charon: 11[CFG] received stroke: add connection 'vpn'
Nov 29 23:39:18 ip-172-31-25-2 charon: 11[CFG] left nor right host is our side, assuming left=local
Nov 29 23:39:18 ip-172-31-25-2 charon: 11[CFG] added configuration 'vpn'
Nov 29 23:40:27 ip-172-31-25-2 charon: 13[NET] received packet: from 76.126.165.62[34469] to 172.31.25.2[500] (996 bytes)
Nov 29 23:40:27 ip-172-31-25-2 charon: 13[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N((16430)) ]
Nov 29 23:40:27 ip-172-31-25-2 charon: 13[IKE] 76.126.165.62 is initiating an IKE_SA
Nov 29 23:40:27 ip-172-31-25-2 charon: 13[IKE] local host is behind NAT, sending keep alives
Nov 29 23:40:27 ip-172-31-25-2 charon: 13[IKE] remote host is behind NAT
Nov 29 23:40:27 ip-172-31-25-2 charon: 13[ENC] generating IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(MULT_AUTH) ]
Nov 29 23:40:27 ip-172-31-25-2 charon: 13[NET] sending packet: from 172.31.25.2[500] to 76.126.165.62[34469] (440 bytes)
Nov 29 23:40:28 ip-172-31-25-2 charon: 14[NET] received packet: from 76.126.165.62[39666] to 172.31.25.2[4500] (3500 bytes)
Nov 29 23:40:28 ip-172-31-25-2 charon: 14[ENC] parsed IKE_AUTH request 1 [ IDi N(INIT_CONTACT) CERTREQ CPRQ(ADDR ADDR6 DNS DNS6) N(ESP_TFC_PAD_N) SA TSi TSr N(MOBIKE_SUP) N(ADD_6_ADDR) N(ADD_6_ADDR) N(MULT_AUTH) N(EAP_ONLY) ]
Nov 29 23:40:28 ip-172-31-25-2 charon: 14[IKE] received 148 cert requests for an unknown ca
Nov 29 23:40:28 ip-172-31-25-2 charon: 14[CFG] looking for peer configs matching 172.31.25.2[%any]...76.126.165.62[unifiapp]
Nov 29 23:40:28 ip-172-31-25-2 charon: 14[CFG] selected peer config 'vpn'
Nov 29 23:40:28 ip-172-31-25-2 charon: 14[IKE] peer requested EAP, config inacceptable
Nov 29 23:40:28 ip-172-31-25-2 charon: 14[CFG] no alternative config found
Nov 29 23:40:28 ip-172-31-25-2 charon: 14[IKE] received ESP_TFC_PADDING_NOT_SUPPORTED, not using ESPv3 TFC padding
Nov 29 23:40:28 ip-172-31-25-2 charon: 14[IKE] peer supports MOBIKE
Nov 29 23:40:28 ip-172-31-25-2 charon: 14[ENC] generating IKE_AUTH response 1 [ N(AUTH_FAILED) ]
Nov 29 23:40:28 ip-172-31-25-2 charon: 14[NET] sending packet: from 172.31.25.2[4500] to 76.126.165.62[39666] (76 bytes)