Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- ESQ7390 # diag debug reset
- ESQ7390 # diag debug application ike -1
- Debug messages will be on for 30 minutes.
- ESQ7390 # diag debug enable
- ESQ7390 # ike 0: comes XXX.XXX.XXX.XXX:500->192.168.68.99:500,ifindex=5....
- ike 0: IKEv1 exchange=Identity Protection id=9ee3e9830749d2a6/0000000000000000 len=280
- ike 0: in 9EE3E9830749D2A600000000000000000110020000000000000001180D000064000000010000000100000058010100020300002801010000800B0001000C00040001518080010007800E00808
- 003000180020004800400050000002802010000800B0001000C00040001518080010007800E01008003000180020004800400050D0000144A131C81070358455C5728F20E95452F0D000014CD60464335DF
- 21F87CFDB2FC68B6A4480D00001490CB80913EBB696E086381B5EC427B1F0D0000144C53427B6D465D1B337BB755A37A7FEF0D000014B4F01CA951E9DA8D0BAFBBD34AD3044E0D00001412F5F28C457168A
- 9702D9FE274CC01000D00000C09002689DFD6B71200000014AFCAD71368A1F1C96B8696FC77570100
- ike 0:9ee3e9830749d2a6/0000000000000000:26: responder: main mode get 1st message...
- ike 0:9ee3e9830749d2a6/0000000000000000:26: VID RFC 3947 4A131C81070358455C5728F20E95452F
- ike 0:9ee3e9830749d2a6/0000000000000000:26: VID draft-ietf-ipsec-nat-t-ike-02 CD60464335DF21F87CFDB2FC68B6A448
- ike 0:9ee3e9830749d2a6/0000000000000000:26: VID draft-ietf-ipsec-nat-t-ike-02\n 90CB80913EBB696E086381B5EC427B1F
- ike 0:9ee3e9830749d2a6/0000000000000000:26: VID forticlient connect license 4C53427B6D465D1B337BB755A37A7FEF
- ike 0:9ee3e9830749d2a6/0000000000000000:26: VID Fortinet Endpoint Control B4F01CA951E9DA8D0BAFBBD34AD3044E
- ike 0:9ee3e9830749d2a6/0000000000000000:26: VID CISCO-UNITY 12F5F28C457168A9702D9FE274CC0100
- ike 0:9ee3e9830749d2a6/0000000000000000:26: VID draft-ietf-ipsra-isakmp-xauth-06.txt 09002689DFD6B712
- ike 0:9ee3e9830749d2a6/0000000000000000:26: VID DPD AFCAD71368A1F1C96B8696FC77570100
- ike 0: cache rebuild start
- ike 0: cache rebuild done
- ike 0:9ee3e9830749d2a6/0000000000000000:26: negotiation result
- ike 0:9ee3e9830749d2a6/0000000000000000:26: proposal id = 1:
- ike 0:9ee3e9830749d2a6/0000000000000000:26: protocol id = ISAKMP:
- ike 0:9ee3e9830749d2a6/0000000000000000:26: trans_id = KEY_IKE.
- ike 0:9ee3e9830749d2a6/0000000000000000:26: encapsulation = IKE/none
- ike 0:9ee3e9830749d2a6/0000000000000000:26: type=OAKLEY_ENCRYPT_ALG, val=AES_CBC, key-len=128
- ike 0:9ee3e9830749d2a6/0000000000000000:26: type=OAKLEY_HASH_ALG, val=SHA2_256.
- ike 0:9ee3e9830749d2a6/0000000000000000:26: type=AUTH_METHOD, val=PRESHARED_KEY.
- ike 0:9ee3e9830749d2a6/0000000000000000:26: type=OAKLEY_GROUP, val=MODP1536.
- ike 0:9ee3e9830749d2a6/0000000000000000:26: ISAKMP SA lifetime=86400
- ike 0:9ee3e9830749d2a6/0000000000000000:26: SA proposal chosen, matched gateway vpn
- ike 0:vpn: created connection: 0x14778160 5 192.168.68.99->XXX.XXX.XXX.XXX:500.
- ike 0:vpn:26: DPD negotiated
- ike 0:vpn:26: XAUTHv6 negotiated
- ike 0:vpn:26: peer supports UNITY
- ike 0:vpn:26: enable FortiClient license check
- ike 0:vpn:26: enable FortiClient endpoint compliance check, use 10.0.0.2
- ike 0:vpn:26: selected NAT-T version: RFC 3947
- ike 0:vpn:26: cookie 9ee3e9830749d2a6/e155d76c6ea1fd19
- ike 0:vpn:26: out 9EE3E9830749D2A6E155D76C6EA1FD190110020000000000000000DC0D00003C000000010000000100000030010100010000002801010000800B0001000C000400015180800100078
- 00E00808003000180020004800400050D0000144A131C81070358455C5728F20E95452F0D000014AFCAD71368A1F1C96B8696FC775701000D00000C09002689DFD6B7120D00001412F5F28C457168A9702D
- 9FE274CC02040D0000144C53427B6D465D1B337BB755A37A7FEF0D000014B4F01CA951E9DA8D0BAFBBD34AD3044E000000148299031757A36082C6A621DE00000000
- ike 0:vpn:26: sent IKE msg (ident_r1send): 192.168.68.99:500->XXX.XXX.XXX.XXX:500, len=220, id=9ee3e9830749d2a6/e155d76c6ea1fd19
- ike 0: comes XXX.XXX.XXX.XXX:500->192.168.68.99:500,ifindex=5....
- ike 0: IKEv1 exchange=Identity Protection id=9ee3e9830749d2a6/e155d76c6ea1fd19 len=316
- ike 0: in 9EE3E9830749D2A6E155D76C6EA1FD1904100200000000000000013C0A0000C46FB9CB5AC579C57B2D3825928DE347F643C2A44782C784FB37DFBE758C28B18017603A2BF655D025D60193801
- 87DA9E5AE93A5D89606281D8F16889E47B44E4092ECEDB4C531D303810986125C437985841E7B12B1376F1F29081BFA432C9A0460816DEC6672B74B84241D119B8E4D8FB44135A1CEEC7C4BAD93684998D3
- CE4DC9D3973912CA2893227764A4E6D4B66F5C3502C9832FACAC84F03DB189BB3D277FCD3CF49E631BC12E1ADCF905F2B0883BC9BA7AB586090296028E2A8636ABB314000014A231E6EDC15823852CC9710
- EBAB5D192140000246C1F146C9058C5E1A891308F575FFC4CCA4AF068036D53D81F9C39C5C923F4FC0000002405886753A62C6E50580215B285794020E31506715545B1FBF99941E0B28DC0FE
- ike 0:vpn:26: responder:main mode get 2nd message...
- ike 0:vpn:26: received NAT-D payload type 20
- ike 0:vpn:26: received NAT-D payload type 20
- ike 0:vpn:26: NAT detected: ME PEER
- ike 0:vpn:26: out 9EE3E9830749D2A6E155D76C6EA1FD1904100200000000000000013C0A0000C48E6DA27ACA1C491F896301BDA07463E1722FDA7045EEE4687E2013F56AC8DACBA1A5934A632B47766
- FD0F24ACAF925AF2B10B20FFA259BF99003D0612766688D63C34DBADEB7642B89899073B5C30E3F49D78C69DD7653C5807729443E787440CD2B5EC86FEBC9901333F26B10DB93389F1A1B74F1406B230377
- 2B913F3B8560676A77BD7D79F143C66148E69AF5AD3BEE4306F2F8070BEA38A33C8EA7A4EEDCB207AB77C0B36ECC45C5EA36D009390EB8BC1A68E505B14307FE99B3EB9429CD14000014A0584C7EE5C38E0
- 9A5D574755351EBD3140000246F6AC6CF69C2515643E71E922DD5827557CB9212858D116FAEED67B4BFA8A813000000243B9CE548C4F6E96C5A3B76B22FFADFC4325B1B7E0F52607000A07D3455DF9743
- ike 0:vpn:26: sent IKE msg (ident_r2send): 192.168.68.99:500->XXX.XXX.XXX.XXX:500, len=316, id=9ee3e9830749d2a6/e155d76c6ea1fd19
- ike 0:vpn:26: ISAKMP SA 9ee3e9830749d2a6/e155d76c6ea1fd19 key 16:D535432A394B1A03AB7ADBCA2ED47EA0
- ike 0:vpn:26: out 9EE3E9830749D2A6E155D76C6EA1FD1904100200000000000000013C0A0000C48E6DA27ACA1C491F896301BDA07463E1722FDA7045EEE4687E2013F56AC8DACBA1A5934A632B47766
- FD0F24ACAF925AF2B10B20FFA259BF99003D0612766688D63C34DBADEB7642B89899073B5C30E3F49D78C69DD7653C5807729443E787440CD2B5EC86FEBC9901333F26B10DB93389F1A1B74F1406B230377
- 2B913F3B8560676A77BD7D79F143C66148E69AF5AD3BEE4306F2F8070BEA38A33C8EA7A4EEDCB207AB77C0B36ECC45C5EA36D009390EB8BC1A68E505B14307FE99B3EB9429CD14000014A0584C7EE5C38E0
- 9A5D574755351EBD3140000246F6AC6CF69C2515643E71E922DD5827557CB9212858D116FAEED67B4BFA8A813000000243B9CE548C4F6E96C5A3B76B22FFADFC4325B1B7E0F52607000A07D3455DF9743
- ike 0:vpn:26: sent IKE msg (P1_RETRANSMIT): 192.168.68.99:500->XXX.XXX.XXX.XXX:500, len=316, id=9ee3e9830749d2a6/e155d76c6ea1fd19
- ike 0:vpn:26: out 9EE3E9830749D2A6E155D76C6EA1FD1904100200000000000000013C0A0000C48E6DA27ACA1C491F896301BDA07463E1722FDA7045EEE4687E2013F56AC8DACBA1A5934A632B47766
- FD0F24ACAF925AF2B10B20FFA259BF99003D0612766688D63C34DBADEB7642B89899073B5C30E3F49D78C69DD7653C5807729443E787440CD2B5EC86FEBC9901333F26B10DB93389F1A1B74F1406B230377
- 2B913F3B8560676A77BD7D79F143C66148E69AF5AD3BEE4306F2F8070BEA38A33C8EA7A4EEDCB207AB77C0B36ECC45C5EA36D009390EB8BC1A68E505B14307FE99B3EB9429CD14000014A0584C7EE5C38E0
- 9A5D574755351EBD3140000246F6AC6CF69C2515643E71E922DD5827557CB9212858D116FAEED67B4BFA8A813000000243B9CE548C4F6E96C5A3B76B22FFADFC4325B1B7E0F52607000A07D3455DF9743
- ike 0:vpn:26: sent IKE msg (P1_RETRANSMIT): 192.168.68.99:500->XXX.XXX.XXX.XXX:500, len=316, id=9ee3e9830749d2a6/e155d76c6ea1fd19
- ike shrank heap by 159744 bytes
- ike 0:vpn:26: out 9EE3E9830749D2A6E155D76C6EA1FD1904100200000000000000013C0A0000C48E6DA27ACA1C491F896301BDA07463E1722FDA7045EEE4687E2013F56AC8DACBA1A5934A632B47766
- FD0F24ACAF925AF2B10B20FFA259BF99003D0612766688D63C34DBADEB7642B89899073B5C30E3F49D78C69DD7653C5807729443E787440CD2B5EC86FEBC9901333F26B10DB93389F1A1B74F1406B230377
- 2B913F3B8560676A77BD7D79F143C66148E69AF5AD3BEE4306F2F8070BEA38A33C8EA7A4EEDCB207AB77C0B36ECC45C5EA36D009390EB8BC1A68E505B14307FE99B3EB9429CD14000014A0584C7EE5C38E0
- 9A5D574755351EBD3140000246F6AC6CF69C2515643E71E922DD5827557CB9212858D116FAEED67B4BFA8A813000000243B9CE548C4F6E96C5A3B76B22FFADFC4325B1B7E0F52607000A07D3455DF9743
- ike 0:vpn:26: sent IKE msg (P1_RETRANSMIT): 192.168.68.99:500->XXX.XXX.XXX.XXX:500, len=316, id=9ee3e9830749d2a6/e155d76c6ea1fd19
- ike 0:vpn:26: negotiation timeout, deleting
- ike 0:vpn: connection expiring due to phase1 down
- ike 0:vpn: deleting
- ike 0:vpn: deleted
Advertisement
Add Comment
Please, Sign In to add comment