OPNSense IPsec log

May  7 12:12:59 router charon: 16[CFG] received stroke: terminate 'con1'
May  7 12:12:59 router charon: 05[IKE] deleting IKE_SA con1[476] between BRANCHOFFICE-VDSL-WAN-IP[router@btr.some.lan]...HEADOFFICE-FIBER-WAN-IP[router@some.lan]
May  7 12:12:59 router charon: 05[IKE] deleting IKE_SA con1[476] between BRANCHOFFICE-VDSL-WAN-IP[router@btr.some.lan]...HEADOFFICE-FIBER-WAN-IP[router@some.lan]
May  7 12:12:59 router charon: 05[IKE] sending DELETE for IKE_SA con1[476]
May  7 12:12:59 router charon: 05[ENC] generating INFORMATIONAL request 21 [ D ]
May  7 12:12:59 router charon: 05[NET] sending packet: from BRANCHOFFICE-VDSL-WAN-IP[4500] to HEADOFFICE-FIBER-WAN-IP[4500] (76 bytes)
May  7 12:13:03 router charon: 05[IKE] retransmit 1 of request with message ID 21
May  7 12:13:03 router charon: 05[NET] sending packet: from BRANCHOFFICE-VDSL-WAN-IP[4500] to HEADOFFICE-FIBER-WAN-IP[4500] (76 bytes)
May  7 12:13:10 router charon: 05[IKE] retransmit 2 of request with message ID 21
May  7 12:13:10 router charon: 05[NET] sending packet: from BRANCHOFFICE-VDSL-WAN-IP[4500] to HEADOFFICE-FIBER-WAN-IP[4500] (76 bytes)
May  7 12:13:23 router charon: 05[IKE] retransmit 3 of request with message ID 21
May  7 12:13:23 router charon: 05[NET] sending packet: from BRANCHOFFICE-VDSL-WAN-IP[4500] to HEADOFFICE-FIBER-WAN-IP[4500] (76 bytes)
May  7 12:13:25 router charon: 05[CFG] received stroke: terminate 'con1'
May  7 12:13:25 router charon: 09[IKE] destroying IKE_SA in state DELETING without notification
May  7 12:13:25 router charon: 06[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:25 router charon: 09[IKE] initiating IKE_SA con1[477] to HEADOFFICE-FIBER-WAN-IP
May  7 12:13:25 router charon: 09[IKE] initiating IKE_SA con1[477] to HEADOFFICE-FIBER-WAN-IP
May  7 12:13:25 router charon: 09[ENC] generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(HASH_ALG) N(REDIR_SUP) ]
May  7 12:13:25 router charon: 09[NET] sending packet: from BRANCHOFFICE-VDSL-WAN-IP[500] to HEADOFFICE-FIBER-WAN-IP[500] (336 bytes)
May  7 12:13:25 router charon: 09[NET] received packet: from HEADOFFICE-FIBER-WAN-IP[500] to BRANCHOFFICE-VDSL-WAN-IP[500] (361 bytes)
May  7 12:13:25 router charon: 09[ENC] parsed IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) CERTREQ N(FRAG_SUP) N(HASH_ALG) N(MULT_AUTH) ]
May  7 12:13:25 router charon: 09[IKE] received 1 cert requests for an unknown ca
May  7 12:13:25 router charon: 09[IKE] authentication of 'router@btr.some.lan' (myself) with pre-shared key
May  7 12:13:25 router charon: 09[IKE] establishing CHILD_SA con1{53892} reqid 2
May  7 12:13:25 router charon: 09[IKE] establishing CHILD_SA con1{53892} reqid 2
May  7 12:13:25 router charon: 09[ENC] generating IKE_AUTH request 1 [ IDi N(INIT_CONTACT) IDr AUTH N(ESP_TFC_PAD_N) SA TSi TSr N(MOBIKE_SUP) N(ADD_4_ADDR) N(ADD_4_ADDR) N(MULT_AUTH) N(EAP_ONLY) N(MSG_ID_SYN_SUP) ]
May  7 12:13:25 router charon: 09[NET] sending packet: from BRANCHOFFICE-VDSL-WAN-IP[4500] to HEADOFFICE-FIBER-WAN-IP[4500] (332 bytes)
May  7 12:13:26 router charon: 06[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:26 router charon: 13[CFG] ignoring acquire, connection attempt pending
May  7 12:13:26 router charon: 13[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:26 router charon: 13[CFG] ignoring acquire, connection attempt pending
May  7 12:13:26 router charon: 07[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:26 router charon: 13[CFG] ignoring acquire, connection attempt pending
May  7 12:13:26 router charon: 07[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:26 router charon: 13[CFG] ignoring acquire, connection attempt pending
May  7 12:13:26 router charon: 13[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:26 router charon: 07[CFG] ignoring acquire, connection attempt pending
May  7 12:13:27 router charon: 07[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:27 router charon: 13[CFG] ignoring acquire, connection attempt pending
May  7 12:13:27 router charon: 13[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:27 router charon: 07[CFG] ignoring acquire, connection attempt pending
May  7 12:13:27 router charon: 07[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:27 router charon: 13[CFG] ignoring acquire, connection attempt pending
May  7 12:13:27 router charon: 07[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:27 router charon: 13[CFG] ignoring acquire, connection attempt pending
May  7 12:13:28 router charon: 13[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:28 router charon: 07[CFG] ignoring acquire, connection attempt pending
May  7 12:13:28 router charon: 07[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:28 router charon: 15[CFG] ignoring acquire, connection attempt pending
May  7 12:13:28 router charon: 15[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:28 router charon: 07[CFG] ignoring acquire, connection attempt pending
May  7 12:13:28 router charon: 07[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:28 router charon: 15[CFG] ignoring acquire, connection attempt pending
May  7 12:13:29 router charon: 15[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:29 router charon: 07[CFG] ignoring acquire, connection attempt pending
May  7 12:13:29 router charon: 07[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:29 router charon: 15[CFG] ignoring acquire, connection attempt pending
May  7 12:13:29 router charon: 15[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:29 router charon: 07[CFG] ignoring acquire, connection attempt pending
May  7 12:13:29 router charon: 07[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:29 router charon: 15[CFG] ignoring acquire, connection attempt pending
May  7 12:13:29 router charon: 07[IKE] retransmit 1 of request with message ID 1
May  7 12:13:29 router charon: 07[NET] sending packet: from BRANCHOFFICE-VDSL-WAN-IP[4500] to HEADOFFICE-FIBER-WAN-IP[4500] (332 bytes)
May  7 12:13:30 router charon: 07[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:30 router charon: 10[CFG] ignoring acquire, connection attempt pending
May  7 12:13:30 router charon: 10[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:30 router charon: 07[CFG] ignoring acquire, connection attempt pending
May  7 12:13:30 router charon: 07[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:30 router charon: 10[CFG] ignoring acquire, connection attempt pending
May  7 12:13:30 router charon: 10[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:30 router charon: 07[CFG] ignoring acquire, connection attempt pending
May  7 12:13:31 router charon: 07[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:31 router charon: 10[CFG] ignoring acquire, connection attempt pending
May  7 12:13:31 router charon: 10[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:31 router charon: 07[CFG] ignoring acquire, connection attempt pending
May  7 12:13:31 router charon: 07[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:31 router charon: 10[CFG] ignoring acquire, connection attempt pending
May  7 12:13:31 router charon: 10[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:31 router charon: 07[CFG] ignoring acquire, connection attempt pending
May  7 12:13:31 router charon: 07[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:31 router charon: 11[CFG] ignoring acquire, connection attempt pending
May  7 12:13:32 router charon: 11[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:32 router charon: 07[CFG] ignoring acquire, connection attempt pending
May  7 12:13:32 router charon: 07[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:32 router charon: 07[CFG] ignoring acquire, connection attempt pending
May  7 12:13:32 router charon: 07[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:32 router charon: 11[CFG] ignoring acquire, connection attempt pending
May  7 12:13:32 router charon: 11[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:32 router charon: 07[CFG] ignoring acquire, connection attempt pending
May  7 12:13:33 router charon: 07[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:33 router charon: 11[CFG] ignoring acquire, connection attempt pending
May  7 12:13:33 router charon: 11[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:33 router charon: 11[CFG] ignoring acquire, connection attempt pending
May  7 12:13:33 router charon: 07[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:33 router charon: 07[CFG] ignoring acquire, connection attempt pending
May  7 12:13:33 router charon: 05[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:33 router charon: 05[CFG] ignoring acquire, connection attempt pending
May  7 12:13:34 router charon: 05[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:34 router charon: 05[CFG] ignoring acquire, connection attempt pending
May  7 12:13:34 router charon: 07[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:34 router charon: 07[CFG] ignoring acquire, connection attempt pending
May  7 12:13:34 router charon: 07[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:34 router charon: 14[CFG] ignoring acquire, connection attempt pending
May  7 12:13:34 router charon: 14[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:34 router charon: 07[CFG] ignoring acquire, connection attempt pending
May  7 12:13:35 router charon: 07[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:35 router charon: 14[CFG] ignoring acquire, connection attempt pending
May  7 12:13:35 router charon: 14[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:35 router charon: 07[CFG] ignoring acquire, connection attempt pending
May  7 12:13:35 router charon: 07[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:35 router charon: 14[CFG] ignoring acquire, connection attempt pending
May  7 12:13:35 router charon: 14[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:35 router charon: 07[CFG] ignoring acquire, connection attempt pending
May  7 12:13:36 router charon: 14[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:36 router charon: 14[CFG] ignoring acquire, connection attempt pending
May  7 12:13:36 router charon: 14[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:36 router charon: 14[CFG] ignoring acquire, connection attempt pending
May  7 12:13:36 router charon: 12[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:36 router charon: 14[CFG] ignoring acquire, connection attempt pending
May  7 12:13:36 router charon: 14[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:36 router charon: 12[CFG] ignoring acquire, connection attempt pending
May  7 12:13:36 router charon: 12[KNL] creating acquire job for policy BRANCHOFFICE-VDSL-WAN-IP/32 === HEADOFFICE-FIBER-WAN-IP/32 with reqid {2}
May  7 12:13:36 router charon: 14[CFG] ignoring acquire, connection attempt pending
May  7 12:13:37 router charon: 14[IKE] retransmit 2 of request with message ID 1
May  7 12:13:37 router charon: 14[NET] sending packet: from BRANCHOFFICE-VDSL-WAN-IP[4500] to HEADOFFICE-FIBER-WAN-IP[4500] (332 bytes)
May  7 12:13:37 router charon: 14[NET] received packet: from HEADOFFICE-FIBER-WAN-IP[4500] to BRANCHOFFICE-VDSL-WAN-IP[4500] (268 bytes)
May  7 12:13:37 router charon: 14[ENC] parsed IKE_AUTH response 1 [ IDr AUTH N(ESP_TFC_PAD_N) SA TSi TSr N(AUTH_LFT) N(MOBIKE_SUP) N(ADD_4_ADDR) N(ADD_4_ADDR) ]
May  7 12:13:37 router charon: 14[IKE] authentication of 'router@some.lan' with pre-shared key successful
May  7 12:13:37 router charon: 14[IKE] IKE_SA con1[477] established between BRANCHOFFICE-VDSL-WAN-IP[router@btr.some.lan]...HEADOFFICE-FIBER-WAN-IP[router@some.lan]
May  7 12:13:37 router charon: 14[IKE] IKE_SA con1[477] established between BRANCHOFFICE-VDSL-WAN-IP[router@btr.some.lan]...HEADOFFICE-FIBER-WAN-IP[router@some.lan]
May  7 12:13:37 router charon: 14[IKE] scheduling reauthentication in 28107s
May  7 12:13:37 router charon: 14[IKE] maximum IKE_SA lifetime 28647s
May  7 12:13:37 router charon: 14[IKE] received ESP_TFC_PADDING_NOT_SUPPORTED, not using ESPv3 TFC padding
May  7 12:13:37 router charon: 14[IKE] CHILD_SA con1{53892} established with SPIs ccaca3a1_i c61d5a7c_o and TS 10.xx.yy.0/24 === 10.10.xx.0/24
May  7 12:13:37 router charon: 14[IKE] CHILD_SA con1{53892} established with SPIs ccaca3a1_i c61d5a7c_o and TS 10.xx.yy.0/24 === 10.10.xx.0/24
May  7 12:13:37 router charon: 14[IKE] received AUTH_LIFETIME of 28158s, scheduling reauthentication in 27618s
May  7 12:13:37 router charon: 14[IKE] peer supports MOBIKE