All pastes #177178 Raw Edit

Mine

public text v1 · immutable
#177178 ·published 2006-09-20 07:10 UTC
rendered paste body
Sep 20 08:52:45 asa-inside %ASA-7-713906: IP = 217.116.110.196, Oakley proposal is acceptable 
Sep 20 08:52:45 asa-inside %ASA-7-715049: IP = 217.116.110.196, Received NAT-Traversal ver 03 VID 
Sep 20 08:52:45 asa-inside %ASA-7-715049: IP = 217.116.110.196, Received NAT-Traversal ver 02 VID 
Sep 20 08:52:45 asa-inside %ASA-7-715028: IP = 217.116.110.196, IKE SA Proposal # 1, Transform # 1 acceptable  Matches global IKE entry # 7 
Sep 20 08:52:45 asa-inside %ASA-7-715049: IP = 217.116.110.196, Received Cisco Unity client VID 
Sep 20 08:52:45 asa-inside %ASA-7-715049: IP = 217.116.110.196, Received DPD VID 
Sep 20 08:52:45 asa-inside %ASA-7-715038: IP = 217.116.110.196, Processing IOS/PIX Vendor ID payload (version: 1.0.0, capabilities: 0000077f) 
Sep 20 08:52:45 asa-inside %ASA-7-715049: IP = 217.116.110.196, Received xauth V6 VID 
Sep 20 08:52:45 asa-inside %ASA-7-713906: IP = 217.116.110.196, computing NAT Discovery hash 
Sep 20 08:52:45 asa-inside %ASA-7-713906: IP = 217.116.110.196, computing NAT Discovery hash 
Sep 20 08:52:45 asa-inside %ASA-7-715048: IP = 217.116.110.196, Send IOS VID 
Sep 20 08:52:45 asa-inside %ASA-7-715038: IP = 217.116.110.196, Constructing ASA spoofing IOS Vendor ID payload (version: 1.0.0, capabilities: 20000409) 
Sep 20 08:52:45 asa-inside %ASA-7-715048: IP = 217.116.110.196, Send Altiga/Cisco VPN3000/Cisco ASA GW VID 
Sep 20 08:52:45 asa-inside %ASA-7-713906: IP = 217.116.110.196, computing NAT Discovery hash 
Sep 20 08:52:45 asa-inside %ASA-7-713906: IP = 217.116.110.196, computing NAT Discovery hash 
Sep 20 08:52:45 asa-inside %ASA-7-713906: IP = 217.116.110.196, Connection landed on tunnel_group 217.116.110.196 
Sep 20 08:52:45 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, Generating keys for Responder... 
Sep 20 08:52:45 asa-inside %ASA-7-714011: Group = 217.116.110.196, IP = 217.116.110.196, ID_IPV4_ADDR ID received 217.116.110.196 
Sep 20 08:52:45 asa-inside %ASA-7-715076: Group = 217.116.110.196, IP = 217.116.110.196, Computing hash for ISAKMP 
Sep 20 08:52:45 asa-inside %ASA-6-713172: Group = 217.116.110.196, IP = 217.116.110.196, Automatic NAT Detection Status:     Remote end is NOT behind a NAT device     This   end is NOT behind a NAT device 
Sep 20 08:52:45 asa-inside %ASA-7-713906: IP = 217.116.110.196, Connection landed on tunnel_group 217.116.110.196 
Sep 20 08:52:45 asa-inside %ASA-7-715076: Group = 217.116.110.196, IP = 217.116.110.196, Computing hash for ISAKMP 
Sep 20 08:52:45 asa-inside %ASA-7-715034: IP = 217.116.110.196, Constructing IOS keep alive payload: proposal=32767/32767 sec. 
Sep 20 08:52:45 asa-inside %ASA-6-113009: AAA retrieved default group policy (DfltGrpPolicy) for user = 217.116.110.196 
Sep 20 08:52:45 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, Delete with reason code and text capabilities are negotiated 
Sep 20 08:52:45 asa-inside %ASA-3-713119: Group = 217.116.110.196, IP = 217.116.110.196, PHASE 1 COMPLETED 
Sep 20 08:52:45 asa-inside %ASA-7-713121: IP = 217.116.110.196, Keep-alive type for this connection: DPD 
Sep 20 08:52:45 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, Starting phase 1 rekey timer: 3420000 (ms) 
Sep 20 08:52:45 asa-inside %ASA-7-714003: IP = 217.116.110.196, IKE Responder starting QM: msg id = ee370b60 
Sep 20 08:52:45 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, processing ISA_KE for PFS in phase 2 
Sep 20 08:52:45 asa-inside %ASA-7-714011: Group = 217.116.110.196, IP = 217.116.110.196, ID_IPV4_ADDR_SUBNET ID received--217.116.111.0--255.255.255.224 
Sep 20 08:52:45 asa-inside %ASA-7-713035: Group = 217.116.110.196, IP = 217.116.110.196, Received remote IP Proxy Subnet data in ID Payload:   Address 217.116.111.0, Mask 255.255.255.224, Protocol 1, Port 0 
Sep 20 08:52:45 asa-inside %ASA-7-714011: Group = 217.116.110.196, IP = 217.116.110.196, ID_IPV4_ADDR ID received 195.187.143.129 
Sep 20 08:52:45 asa-inside %ASA-7-713024: Group = 217.116.110.196, IP = 217.116.110.196, Received local Proxy Host data in ID Payload:  Address 195.187.143.129, Protocol 1, Port 0 
Sep 20 08:52:45 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, QM IsRekeyed old sa not found by addr 
Sep 20 08:52:45 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 1... 
Sep 20 08:52:45 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 1, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 
Sep 20 08:52:45 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 2... 
Sep 20 08:52:45 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 2, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 
Sep 20 08:52:45 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 3... 
Sep 20 08:52:45 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 3, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 
Sep 20 08:52:45 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 4... 
Sep 20 08:52:45 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 4, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 
Sep 20 08:52:45 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 5... 
Sep 20 08:52:45 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 5, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 
Sep 20 08:52:45 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 6... 
Sep 20 08:52:45 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 6, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 
Sep 20 08:52:45 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 7... 
Sep 20 08:52:45 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 7, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 
Sep 20 08:52:45 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 8... 
Sep 20 08:52:45 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 8, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 
Sep 20 08:52:45 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 9... 
Sep 20 08:52:45 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 9, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 
Sep 20 08:52:45 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 10... 
Sep 20 08:52:45 asa-inside %ASA-7-713225: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map OUTSIDE, seq = 10 is a successful match 
Sep 20 08:52:45 asa-inside %ASA-7-713066: Group = 217.116.110.196, IP = 217.116.110.196, IKE Remote Peer configured for crypto map: OUTSIDE 
Sep 20 08:52:45 asa-inside %ASA-7-715027: Group = 217.116.110.196, IP = 217.116.110.196, IPSec SA Proposal # 1, Transform # 1 acceptable  Matches global IPSec SA entry # 10 
Sep 20 08:52:45 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, IKE: requesting SPI! 
Sep 20 08:52:45 asa-inside %ASA-7-715006: Group = 217.116.110.196, IP = 217.116.110.196, IKE got SPI from key engine: SPI = 0x52b12283 
Sep 20 08:52:45 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, oakley constucting quick mode 
Sep 20 08:52:45 asa-inside %ASA-5-713075: Group = 217.116.110.196, IP = 217.116.110.196, Overriding Initiator's IPSec rekeying duration from 86400 to 28800 seconds 
Sep 20 08:52:45 asa-inside %ASA-7-715001: Group = 217.116.110.196, IP = 217.116.110.196, constructing proxy ID 
Sep 20 08:52:45 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, Transmitting Proxy Id:   Remote subnet: 217.116.111.0  Mask 255.255.255.224 Protocol 1  Port 0   Local host:  195.187.143.129  Protocol 1  Port 0 
Sep 20 08:52:45 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, Sending RESPONDER LIFETIME notification to Initiator 
Sep 20 08:52:45 asa-inside %ASA-7-714005: Group = 217.116.110.196, IP = 217.116.110.196, IKE Responder sending 2nd QM pkt: msg id = ee370b60 
Sep 20 08:52:46 asa-inside %ASA-7-714003: IP = 217.116.110.196, IKE Responder starting QM: msg id = 20ffffd4 
Sep 20 08:52:46 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, processing ISA_KE for PFS in phase 2 
Sep 20 08:52:46 asa-inside %ASA-7-714011: Group = 217.116.110.196, IP = 217.116.110.196, ID_IPV4_ADDR_SUBNET ID received--217.116.111.0--255.255.255.224 
Sep 20 08:52:46 asa-inside %ASA-7-713035: Group = 217.116.110.196, IP = 217.116.110.196, Received remote IP Proxy Subnet data in ID Payload:   Address 217.116.111.0, Mask 255.255.255.224, Protocol 47, Port 0 
Sep 20 08:52:46 asa-inside %ASA-7-714011: Group = 217.116.110.196, IP = 217.116.110.196, ID_IPV4_ADDR ID received 195.187.143.129 
Sep 20 08:52:46 asa-inside %ASA-7-713024: Group = 217.116.110.196, IP = 217.116.110.196, Received local Proxy Host data in ID Payload:  Address 195.187.143.129, Protocol 47, Port 0 
Sep 20 08:52:46 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, QM IsRekeyed old sa not found by addr 
Sep 20 08:52:46 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 1... 
Sep 20 08:52:46 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 1, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 
Sep 20 08:52:46 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 2... 
Sep 20 08:52:46 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 2, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 
Sep 20 08:52:46 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 3... 
Sep 20 08:52:46 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 3, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 
Sep 20 08:52:46 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 4... 
Sep 20 08:52:46 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 4, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 
Sep 20 08:52:46 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 5... 
Sep 20 08:52:46 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 5, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 
Sep 20 08:52:46 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 6... 
Sep 20 08:52:46 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 6, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 
Sep 20 08:52:46 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 7... 
Sep 20 08:52:46 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 7, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 
Sep 20 08:52:46 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 8... 
Sep 20 08:52:46 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 8, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 
Sep 20 08:52:46 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 9... 
Sep 20 08:52:46 asa-inside %ASA-7-713222: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map = OUTSIDE, seq = 9, ACL does not match proxy IDs src:217.116.111.0 dst:195.187.143.129 
Sep 20 08:52:46 asa-inside %ASA-7-713221: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, checking map = OUTSIDE, seq = 10... 
Sep 20 08:52:46 asa-inside %ASA-7-713225: Group = 217.116.110.196, IP = 217.116.110.196, Static Crypto Map check, map OUTSIDE, seq = 10 is a successful match 
Sep 20 08:52:46 asa-inside %ASA-7-713066: Group = 217.116.110.196, IP = 217.116.110.196, IKE Remote Peer configured for crypto map: OUTSIDE 
Sep 20 08:52:46 asa-inside %ASA-7-715027: Group = 217.116.110.196, IP = 217.116.110.196, IPSec SA Proposal # 1, Transform # 1 acceptable  Matches global IPSec SA entry # 10 
Sep 20 08:52:46 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, IKE: requesting SPI! 
Sep 20 08:52:46 asa-inside %ASA-7-715006: Group = 217.116.110.196, IP = 217.116.110.196, IKE got SPI from key engine: SPI = 0x1af59eca 
Sep 20 08:52:46 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, oakley constucting quick mode 
Sep 20 08:52:46 asa-inside %ASA-5-713075: Group = 217.116.110.196, IP = 217.116.110.196, Overriding Initiator's IPSec rekeying duration from 86400 to 28800 seconds 
Sep 20 08:52:46 asa-inside %ASA-7-715001: Group = 217.116.110.196, IP = 217.116.110.196, constructing proxy ID 
Sep 20 08:52:46 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, Transmitting Proxy Id:   Remote subnet: 217.116.111.0  Mask 255.255.255.224 Protocol 47  Port 0   Local host:  195.187.143.129  Protocol 47  Port 0 
Sep 20 08:52:46 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, Sending RESPONDER LIFETIME notification to Initiator 
Sep 20 08:52:46 asa-inside %ASA-7-714005: Group = 217.116.110.196, IP = 217.116.110.196, IKE Responder sending 2nd QM pkt: msg id = 20ffffd4 
Sep 20 08:52:46 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, loading all IPSEC SAs 
Sep 20 08:52:46 asa-inside %ASA-7-715001: Group = 217.116.110.196, IP = 217.116.110.196, Generating Quick Mode Key! 
Sep 20 08:52:46 asa-inside %ASA-7-715001: Group = 217.116.110.196, IP = 217.116.110.196, Generating Quick Mode Key! 
Sep 20 08:52:46 asa-inside %ASA-6-602303: IPSEC: An outbound LAN-to-LAN SA (SPI= 0xD55274ED) between 195.187.143.65 and 217.116.110.196 (user= 217.116.110.196) has been created. 
Sep 20 08:52:46 asa-inside %ASA-5-713049: Group = 217.116.110.196, IP = 217.116.110.196, Security negotiation complete for LAN-to-LAN Group (217.116.110.196)  Responder, Inbound SPI = 0x52b12283, Outbound SPI = 0xd55274ed 
Sep 20 08:52:46 asa-inside %ASA-7-715007: Group = 217.116.110.196, IP = 217.116.110.196, IKE got a KEY_ADD msg for SA: SPI = 0xd55274ed 
Sep 20 08:52:46 asa-inside %ASA-6-602303: IPSEC: An inbound LAN-to-LAN SA (SPI= 0x52B12283) between 195.187.143.65 and 217.116.110.196 (user= 217.116.110.196) has been created. 
Sep 20 08:52:46 asa-inside %ASA-7-715077: Group = 217.116.110.196, IP = 217.116.110.196, Pitcher: received KEY_UPDATE, spi 0x52b12283 
Sep 20 08:52:46 asa-inside %ASA-6-713905: Group = 217.116.110.196, IP = 217.116.110.196, Starting P2 Rekey timer to expire in 24479 seconds 
Sep 20 08:52:46 asa-inside %ASA-5-713120: Group = 217.116.110.196, IP = 217.116.110.196, PHASE 2 COMPLETED (msgid=ee370b60) 
Sep 20 08:52:46 asa-inside %ASA-7-713906: Group = 217.116.110.196, IP = 217.116.110.196, loading all IPSEC SAs 
Sep 20 08:52:46 asa-inside %ASA-7-715001: Group = 217.116.110.196, IP = 217.116.110.196, Generating Quick Mode Key! 
Sep 20 08:52:46 asa-inside %ASA-7-715001: Group = 217.116.110.196, IP = 217.116.110.196, Generating Quick Mode Key! 
Sep 20 08:52:46 asa-inside %ASA-6-602303: IPSEC: An outbound LAN-to-LAN SA (SPI= 0x5111DF5F) between 195.187.143.65 and 217.116.110.196 (user= 217.116.110.196) has been created. 
Sep 20 08:52:46 asa-inside %ASA-5-713049: Group = 217.116.110.196, IP = 217.116.110.196, Security negotiation complete for LAN-to-LAN Group (217.116.110.196)  Responder, Inbound SPI = 0x1af59eca, Outbound SPI = 0x5111df5f 
Sep 20 08:52:46 asa-inside %ASA-7-715007: Group = 217.116.110.196, IP = 217.116.110.196, IKE got a KEY_ADD msg for SA: SPI = 0x5111df5f 
Sep 20 08:52:46 asa-inside %ASA-6-602303: IPSEC: An inbound LAN-to-LAN SA (SPI= 0x1AF59ECA) between 195.187.143.65 and 217.116.110.196 (user= 217.116.110.196) has been created. 
Sep 20 08:52:46 asa-inside %ASA-7-715077: Group = 217.116.110.196, IP = 217.116.110.196, Pitcher: received KEY_UPDATE, spi 0x1af59eca 
Sep 20 08:52:46 asa-inside %ASA-6-713905: Group = 217.116.110.196, IP = 217.116.110.196, Starting P2 Rekey timer to expire in 24480 seconds 
Sep 20 08:52:46 asa-inside %ASA-5-713120: Group = 217.116.110.196, IP = 217.116.110.196, PHASE 2 COMPLETED (msgid=20ffffd4)