rendered paste body11/10/2011 00:18:46.000 Info VPN IKE IKE Responder: Aggressive Mode complete (Phase 1) 75.161.123.59, 500, 75-161-123-59.albq.qwest.net xx.xxx.xxx.xxx, 500 GrouPVPN Policy: WAN GroupVPN;3DES; SHA1;
DH Group 5; lifetime=3600 secs
2 11/10/2011 00:18:45.784 Info VPN IKE IKE Responder: Received Aggressive Mode request (Phase 1) 75.161.123.59, 500, 75-161-123-59.albq.qwest.net xxx.xxx.xxx.xxx, 500
3 11/10/2011 00:18:05.608 Warning VPN IKE IKE Responder: IPSec proposal does not match (Phase 2) 75.161.123.59, 500, 75-161-123-59.albq.qwest.net xxx.xxx.xxx.xxx, 500 VPN Policy: WAN GroupVPN
4 11/10/2011 00:18:05.608 Info VPN IKE IKE Responder: Received Quick Mode Request (Phase 2) 75.161.123.59, 500, 75-161-123-59.albq.qwest.net xxx.xxx.xxx.xxx, 500 VPN Policy: WAN GroupVPN
5 11/10/2011 00:17:45.656 Warning VPN IKE Received packet retransmission. Drop duplicate packet 75.161.123.59, 500, 75-161-123-59.albq.qwest.net xxx.xxx.xxx.xxx, 500 VPN Policy: WAN GroupVPN
6 11/10/2011 00:17:35.592 Warning VPN IKE IKE Responder: IPSec proposal does not match (Phase 2) 75.161.123.59, 500, 75-161-123-59.albq.qwest.net
xxx.xxx.xxx.xxx4, 500 VPN Policy: WAN GroupVPN
))))))))))))))))))))))))))))))))))))))))))))))))))
conn sonicwall
type=tunnel
left=10.0.0.105 #your IP address
leftid=@GroupVPN #don't modify this value
leftxauthclient=yes
right=mail.southwestcare.org #IP address of the sonicwall firewall
rightsubnet=192.168.168.0/24 #Subnet of LAN behind the firewall
rightxauthserver=yes
rightid=@0006B108EDE8 #Sonicwall Unique Firewall Identifier
keyingtries=0
pfs=no
aggrmode=yes
keyexchange=ike
auto=add
auth=esp
esp=3DES-SHA1
ike=3DES-SHA1
authby=secret
(((((((((((((((((((((((((((((((((((((((((((((((((((
yggdrasil@Thomas:~$ sudo ipsec whack --name sonicwall --initiate
003 "sonicwall" #1: multiple DH groups were set in aggressive mode. Only first one used.
003 "sonicwall" #1: transform (5,2,2,0) ignored.
002 "sonicwall" #1: initiating Aggressive Mode #1, connection "sonicwall"
003 "sonicwall" #1: multiple DH groups were set in aggressive mode. Only first one used.
003 "sonicwall" #1: transform (5,2,2,0) ignored.
112 "sonicwall" #1: STATE_AGGR_I1: initiate
003 "sonicwall" #1: ignoring Vendor ID payload [Sonicwall 1 (TZ 170 Standard?)]
003 "sonicwall" #1: ignoring unknown Vendor ID payload [5b362bc820f60007]
003 "sonicwall" #1: received Vendor ID payload [Dead Peer Detection]
003 "sonicwall" #1: received Vendor ID payload [XAUTH]
002 "sonicwall" #1: Aggressive mode peer ID is ID_FQDN: '@0006B108EDE8'
002 "sonicwall" #1: transition from state STATE_AGGR_I1 to state STATE_AGGR_I2
004 "sonicwall" #1: STATE_AGGR_I2: sent AI2, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp1536}
041 "sonicwall" #1: sonicwall prompt for Username:
Enter username: xxxxxxxx
040 "sonicwall" #1: sonicwall prompt for Password:
Enter passphrase:
002 "sonicwall" #1: XAUTH: Answering XAUTH challenge with user='dvaldez'
002 "sonicwall" #1: transition from state STATE_XAUTH_I0 to state STATE_XAUTH_I1
004 "sonicwall" #1: STATE_XAUTH_I1: XAUTH client - awaiting CFG_set
003 "sonicwall" #1: ignoring informational payload, type IPSEC_INITIAL_CONTACT msgid=00000000
003 "sonicwall" #1: received and ignored informational message
002 "sonicwall" #1: XAUTH: Successfully Authenticated
002 "sonicwall" #1: transition from state STATE_XAUTH_I0 to state STATE_XAUTH_I1
004 "sonicwall" #1: STATE_XAUTH_I1: XAUTH client - awaiting CFG_set
002 "sonicwall" #2: initiating Quick Mode PSK+ENCRYPT+TUNNEL+UP+AGGRESSIVE+IKEv2ALLOW {using isakmp#1 msgid:72a90c7b proposal=3DES(3)_192-SHA1(2)_160 pfsgroup=no-pfs}
117 "sonicwall" #2: STATE_QUICK_I1: initiate
010 "sonicwall" #2: STATE_QUICK_I1: retransmission; will wait 20s for response
010 "sonicwall" #2: STATE_QUICK_I1: retransmission; will wait 40s for response