Dec 21 03:53:25 snaps ipsec__plutorun: Starting Pluto subsystem...
Dec 21 03:53:25 snaps ipsec__plutorun: Unknown default RSA hostkey scheme, not generating a default hostkey
Dec 21 03:53:25 snaps pluto[6478]: Starting Pluto (Openswan Version 2.4.8 PLUTO_SENDS_VENDORID PLUTO_USES_KEYRR; Vendor ID OEtQ@pxNq\177W`)
Dec 21 03:53:25 snaps pluto[6478]: Setting NAT-Traversal port-4500 floating to on
Dec 21 03:53:25 snaps pluto[6478]: port floating activation criteria nat_t=1/port_fload=1
Dec 21 03:53:25 snaps pluto[6478]: including NAT-Traversal patch (Version 0.6c)
Dec 21 03:53:25 snaps pluto[6478]: ike_alg_register_enc(): Activating OAKLEY_TWOFISH_CBC_SSH: Ok (ret=0)
Dec 21 03:53:25 snaps pluto[6478]: ike_alg_register_enc(): Activating OAKLEY_TWOFISH_CBC: Ok (ret=0)
Dec 21 03:53:25 snaps pluto[6478]: ike_alg_register_enc(): Activating OAKLEY_SERPENT_CBC: Ok (ret=0)
Dec 21 03:53:25 snaps pluto[6478]: ike_alg_register_enc(): Activating OAKLEY_AES_CBC: Ok (ret=0)
Dec 21 03:53:25 snaps pluto[6478]: ike_alg_register_enc(): Activating OAKLEY_BLOWFISH_CBC: Ok (ret=0)
Dec 21 03:53:25 snaps pluto[6478]: ike_alg_register_hash(): Activating OAKLEY_SHA2_512: Ok (ret=0)
Dec 21 03:53:25 snaps pluto[6478]: ike_alg_register_hash(): Activating OAKLEY_SHA2_256: Ok (ret=0)
Dec 21 03:53:25 snaps pluto[6478]: starting up 1 cryptographic helpers
Dec 21 03:53:25 snaps pluto[6478]: started helper pid=6488 (fd:6)
Dec 21 03:53:25 snaps pluto[6478]: Using KLIPS IPsec interface code on 2.6.18.8-klips
Dec 21 03:53:25 snaps pluto[6478]: Changing to directory '/etc/ipsec.d/cacerts'
Dec 21 03:53:25 snaps pluto[6478]: Changing to directory '/etc/ipsec.d/aacerts'
Dec 21 03:53:25 snaps pluto[6478]: Changing to directory '/etc/ipsec.d/ocspcerts'
Dec 21 03:53:25 snaps pluto[6478]: Changing to directory '/etc/ipsec.d/crls'
Dec 21 03:53:25 snaps pluto[6478]: Warning: empty directory
Dec 21 03:53:25 snaps pluto[6478]: loading secrets from "/etc/ipsec.secrets"
Dec 21 03:53:26 snaps pluto[6478]: added connection description "PSKconn"
Dec 21 03:53:26 snaps pluto[6478]: listening for IKE messages
Dec 21 03:53:26 snaps pluto[6478]: adding interface ipsec0/eth1 10.10.136.97:500
Dec 21 03:53:26 snaps pluto[6478]: adding interface ipsec0/eth1 10.10.136.97:4500
Dec 21 03:53:26 snaps pluto[6478]: forgetting secrets
Dec 21 03:53:26 snaps pluto[6478]: loading secrets from "/etc/ipsec.secrets"
Dec 21 03:53:26 snaps pluto[6478]: "PSKconn" #1: initiating Main Mode
Dec 21 03:53:26 snaps pluto[6478]: "PSKconn" #1: ERROR: asynchronous network error report on eth1 (sport=500) for message to 10.10.136.94 port 500, complainant 10.10.136.94: Connection refused [errno 111, origin ICMP type 3 code 3 (not authenticated)]
Dec 21 03:53:30 snaps pluto[6478]: packet from 10.10.136.94:500: received Vendor ID payload [Openswan (this version) 2.4.8 PLUTO_SENDS_VENDORID PLUTO_USES_KEYRR]
Dec 21 03:53:31 snaps pluto[6478]: packet from 10.10.136.94:500: received Vendor ID payload [Dead Peer Detection]
Dec 21 03:53:31 snaps pluto[6478]: packet from 10.10.136.94:500: received Vendor ID payload [RFC 3947] method set to=110
Dec 21 03:53:31 snaps pluto[6478]: packet from 10.10.136.94:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03] meth=108, but already using method 110
Dec 21 03:53:31 snaps pluto[6478]: packet from 10.10.136.94:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02] meth=107, but already using method 110
Dec 21 03:53:31 snaps pluto[6478]: packet from 10.10.136.94:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02] meth=107, but already using method 110
Dec 21 03:53:31 snaps pluto[6478]: packet from 10.10.136.94:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but already using method 110
Dec 21 03:53:31 snaps pluto[6478]: packet from 10.10.136.94:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-00]
Dec 21 03:53:31 snaps pluto[6478]: "PSKconn" #2: responding to Main Mode
Dec 21 03:53:31 snaps pluto[6478]: "PSKconn" #2: Oakley Transform [OAKLEY_3DES_CBC (192), OAKLEY_MD5, OAKLEY_GROUP_MODP1024] refused due to strict flag
Dec 21 03:53:31 snaps pluto[6478]: "PSKconn" #2: no acceptable Oakley Transform
Dec 21 03:53:31 snaps pluto[6478]: "PSKconn" #2: sending notification NO_PROPOSAL_CHOSEN to 10.10.136.94:500
Dec 21 03:53:37 snaps pluto[6478]: packet from 10.10.136.94:500: ignoring informational payload, type NO_PROPOSAL_CHOSEN
Dec 21 03:53:37 snaps pluto[6478]: packet from 10.10.136.94:500: received and ignored informational message
Dec 21 03:53:40 snaps pluto[6478]: packet from 10.10.136.94:500: received Vendor ID payload [Openswan (this version) 2.4.8 PLUTO_SENDS_VENDORID PLUTO_USES_KEYRR]
Dec 21 03:53:41 snaps pluto[6478]: packet from 10.10.136.94:500: received Vendor ID payload [Dead Peer Detection]
Dec 21 03:53:41 snaps pluto[6478]: packet from 10.10.136.94:500: received Vendor ID payload [RFC 3947] method set to=110
Dec 21 03:53:41 snaps pluto[6478]: packet from 10.10.136.94:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03] meth=108, but already using method 110
Dec 21 03:53:41 snaps pluto[6478]: packet from 10.10.136.94:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02] meth=107, but already using method 110
Dec 21 03:53:41 snaps pluto[6478]: packet from 10.10.136.94:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but already using method 110
Dec 21 03:53:41 snaps pluto[6478]: packet from 10.10.136.94:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-00]
Dec 21 03:53:41 snaps pluto[6478]: "PSKconn" #3: responding to Main Mode
Dec 21 03:53:41 snaps pluto[6478]: "PSKconn" #3: Oakley Transform [OAKLEY_3DES_CBC (192), OAKLEY_MD5, OAKLEY_GROUP_MODP1024] refused due to strict flag
Dec 21 03:53:41 snaps pluto[6478]: "PSKconn" #3: no acceptable Oakley Transform
Dec 21 03:53:41 snaps pluto[6478]: "PSKconn" #3: sending notification NO_PROPOSAL_CHOSEN to 10.10.136.94:500
Dec 21 03:53:57 snaps pluto[6478]: packet from 10.10.136.94:500: ignoring informational payload, type NO_PROPOSAL_CHOSEN
Dec 21 03:53:57 snaps pluto[6478]: packet from 10.10.136.94:500: received and ignored informational message