rendered paste bodyAgressive mode off:
router:~# ipsec whack --name sonicwall --initiate
002 "sonicwall" #1: initiating Main Mode
104 "sonicwall" #1: STATE_MAIN_I1: initiate
010 "sonicwall" #1: STATE_MAIN_I1: retransmission; will wait 20s for response
010 "sonicwall" #1: STATE_MAIN_I1: retransmission; will wait 40s for response
Agressive mode on:
router:~# ipsec whack --name sonicwall --initiate
003 "sonicwall" #1: multiple transforms were set in aggressive mode. Only first one used.
003 "sonicwall" #1: transform (5,2,2,0) ignored.
003 "sonicwall" #1: transform (7,1,2,0) ignored.
003 "sonicwall" #1: transform (7,2,2,0) ignored.
002 "sonicwall" #1: initiating Aggressive Mode #1, connection "sonicwall"
003 "sonicwall" #1: multiple transforms were set in aggressive mode. Only first one used.
003 "sonicwall" #1: transform (5,2,2,0) ignored.
003 "sonicwall" #1: transform (7,1,2,0) ignored.
003 "sonicwall" #1: transform (7,2,2,0) ignored.
112 "sonicwall" #1: STATE_AGGR_I1: initiate
Status:
000 "sonicwall": X.X.X.X[@XXXXX,XC+S=C]...X.X.X.X[@XXXXXXXXXXX,XS+S=C]===192.168.16.11/32; unrouted; eroute owner: #0
000 "sonicwall": srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "sonicwall": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "sonicwall": policy: PSK+ENCRYPT+TUNNEL+UP+AGGRESSIVE; prio: 32,32; interface: eth-public;
000 "sonicwall": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "sonicwall": IKE algorithms wanted: 5_000-1-2, 5_000-2-2, 7_000-1-2, 7_000-2-2, flags=strict
000 "sonicwall": IKE algorithms found: 5_192-1_128-2, 5_192-2_160-2, 7_128-1_128-2, 7_128-2_160-2,
000 "sonicwall": ESP algorithms wanted: 3_000-2, flags=strict
000 "sonicwall": ESP algorithms loaded: 3_000-2, flags=strict