All pastes #101218 Raw Edit

Unnamed

public text v1 · immutable
#101218 ·published 2006-07-26 19:15 UTC
rendered paste body
2811::::

*Jul 26 19:07:43.195: IPSEC(sa_request): ,
  (key eng. msg.) OUTBOUND local= 166.102.171.114, remote= x.x.x.x, 
    local_proxy= 10.0.91.0/255.255.255.0/0/0 (type=4), 
    remote_proxy= 192.168.0.0/255.255.0.0/0/0 (type=4),
    protocol= ESP, transform= NONE  (Tunnel), 
    lifedur= 3600s and 4608000kb, 
    spi= 0x18642B43(409217859), conn_id= 0, keysize= 0, flags= 0x0
*Jul 26 19:07:43.195: ISAKMP:(0): SA request profile is (NULL)
*Jul 26 19:07:43.195: ISAKMP: Created a peer struct for x.x.x.x, peer port 500
*Jul 26 19:07:43.195: ISAKMP: New peer created peer = 0x4792E410 peer_handle = 0x8000002F
*Jul 26 19:07:43.195: ISAKMP: Locking peer struct 0x4792E410, refcount 1 for isakmp_initiator
*Jul 26 19:07:43.195: ISAKMP: local port 500, remote port 500
*Jul 26 19:07:43.199: ISAKMP: set new node 0 to QM_IDLE      
*Jul 26 19:07:43.199: ISAKMP: Find a dup sa in the avl tree during calling isadb_insert sa = 469460F4
*Jul 26 19:07:43.199: ISAKMP:(0):Can not start Aggressive mode, trying Main mode.
*Jul 26 19:07:43.199: ISAKMP:(0):found peer pre-shared key matching x.x.x.x
*Jul 26 19:07:43.199: ISAKMP:(0): constructed NAT-T vendor-07 ID
*Jul 26 19:07:43.199: ISAKMP:(0): constructed NAT-T vendor-03 ID
*Jul 26 19:07:43.199: ISAKMP:(0): constructed NAT-T vendor-02 ID
*Jul 26 19:07:43.199: ISAKMP:(0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM
*Jul 26 19:07:43.199: ISAKMP:(0):Old State = IKE_READY  New State = IKE_I_MM1 

*Jul 26 19:07:43.199: ISAKMP:(0): beginning Main Mode exchange
*Jul 26 19:07:43.199: ISAKMP:(0): sending packet to x.x.x.x my_port 500 peer_port 500 (I) MM_NO_STATE
*Jul 26 19:07:43.231: ISAKMP (0:0): received packet from x.x.x.x dport 500 sport 500 Global (I) MM_NO_STATE
*Jul 26 19:07:43.231: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
*Jul 26 19:07:43.231: ISAKMP:(0):Old State = IKE_I_MM1  New State = IKE_I_MM2 

*Jul 26 19:07:43.235: ISAKMP:(0): processing SA payload. message ID = 0
*Jul 26 19:07:43.235: ISAKMP:(0): processing vendor id payload
*Jul 26 19:07:43.235: ISAKMP:(0): vendor ID seems Unity/DPD but major 194 mismatch
*Jul 26 19:07:43.235: ISAKMP:(0):found peer pre-shared key matching x.x.x.x
*Jul 26 19:07:43.235: ISAKMP:(0): local preshared key found
*Jul 26 19:07:43.235: ISAKMP : Scanning profiles for xauth ...
*Jul 26 19:07:43.235: ISAKMP:(0):Checking ISAKMP transform 1 against priority 11 policy
*Jul 26 19:07:43.235: ISAKMP:      encryption 3DES-CBC
*Jul 26 19:07:43.235: ISAKMP:      hash SHA
*Jul 26 19:07:43.235: ISAKMP:      default group 2
*Jul 26 19:07:43.235: ISAKMP:      auth pre-share
*Jul 26 19:07:43.235: ISAKMP:      life type in seconds
*Jul 26 19:07:43.235: ISAKMP:      life duration (basic) of 28800
*Jul 26 19:07:43.235: ISAKMP:(0):atts are acceptable. Next payload is 0
*Jul 26 19:07:43.235: ISAKMP:(0): processing vendor id payload
*Jul 26 19:07:43.235: ISAKMP:(0): vendor ID seems Unity/DPD but major 194 mismatch
*Jul 26 19:07:43.235: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
*Jul 26 19:07:43.235: ISAKMP:(0):Old State = IKE_I_MM2  New State = IKE_I_MM2 

*Jul 26 19:07:43.239: ISAKMP:(0): sending packet to x.x.x.x my_port 500 peer_port 500 (I) MM_SA_SETUP
*Jul 26 19:07:43.239: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
*Jul 26 19:07:43.239: ISAKMP:(0):Old State = IKE_I_MM2  New State = IKE_I_MM3 

*Jul 26 19:07:53.239: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP...
*Jul 26 19:07:53.239: ISAKMP (0:0): incrementing error counter on sa, attempt 1 of 5: retransmit phase 1
*Jul 26 19:07:53.239: ISAKMP:(0): retransmitting phase 1 MM_SA_SETUP
*Jul 26 19:07:53.239: ISAKMP:(0): sending packet to x.x.x.x my_port 500 peer_port 500 (I) MM_SA_SETUP
*Jul 26 19:07:53.271: ISAKMP (0:0): received packet from x.x.x.x dport 500 sport 500 Global (I) MM_SA_SETUP
*Jul 26 19:07:53.271: ISAKMP:(0):Notify has no hash. Rejected.
*Jul 26 19:07:53.271: ISAKMP (0:0): Unknown Input IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY:  state = IKE_I_MM3
*Jul 26 19:07:53.271: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY
*Jul 26 19:07:53.271: ISAKMP:(0):Old State = IKE_I_MM3  New State = IKE_I_MM3 

*Jul 26 19:07:53.271: %CRYPTO-6-IKMP_MODE_FAILURE: Processing of Informational mode failed with peer at x.x.x.x






ASA 5510

Jul 26 15:14:39 [IKEv1]: Group = x.x.x.x, IP = x.x.x.x, Can't find a valid tunnel group, aborting...!
Jul 26 15:14:39 [IKEv1]: Group = x.x.x.x, IP = x.x.x.x, Removing peer from peer table failed, no match!
Jul 26 15:14:39 [IKEv1]: Group = x.x.x.x, IP = x.x.x.x Error: Unable to remove PeerTblEntry
Jul 26 15:14:49 [IKEv1]: IP = x.x.x.x, Header invalid, missing SA payload! (next payload = 4)
Jul 26 15:15:09 [IKEv1]: IP = LEXINGTONSC_0001-05, Removing peer from peer table failed, no match!
Jul 26 15:15:09 [IKEv1]: IP = LEXINGTONSC_0001-05, Error: Unable to remove PeerTblEntry