<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Arial Narrow";
panose-1:2 11 6 6 2 2 2 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="2050" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>I
create self signed certs on my sidewinder6.1.2.05 and follow the steps
used on the wiki (except xauth – I only want to use Mutual RSA by
importing the certs from my Sidewinder).<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>I’ve
tried this with Vista 32 and Windows7 64<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>I
use ASN.1 Distinguished Name and check (Use the subject in the client
certificate) for both my local and remote identiies. Then under credentials,
is use my firewall.pem for my Server CA file, I use my remote.pem for my Client
certificate file and I use my remote.p12 for my Client Private Key file.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>I
goto connect and I always receive “unable to verify remote peer
certificate.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>Is
there something with the Sidewinder self signed certs that is not
compatible? My Sidewinder does not have an imported CA file or any CA
certs on it. Is this a requirement for the Shrewsoft client. Here
is my log from the client. If I switch to MUTUAL PSK everything works aok.
It just doesn’t work with MUTUAL RSA.<o:p></o:p></span></font></p>
<div style='mso-element:para-border-div;border:none;border-bottom:solid windowtext 1.0pt;
padding:0in 0in 1.0pt 0in'>
<p class=MsoNormal style='border:none;padding:0in'><font size=2 face=Calibri><span
style='font-size:11.0pt'><o:p> </o:p></span></font></p>
</div>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:42 ## : IKE Daemon, ver 2.1.0<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:42 ## : Copyright 2008 Shrew Soft Inc.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:42 ## : This product linked OpenSSL 0.9.8h 28 May 2008<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:42 ii : opened 'C:\Program Files\ShrewSoft\VPN Client\debug\iked.log'<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:42 ii : opened 'C:\Program Files\ShrewSoft\VPN
Client/debug/dump-ike-decrypt.cap'<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:42 ii : opened 'C:\Program Files\ShrewSoft\VPN
Client/debug/dump-ike-encrypt.cap'<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:42 ii : rebuilding vnet device list ...<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:42 ii : device ROOT\VNET\0000 disabled<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:42 ii : network process thread begin ...<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:42 ii : pfkey process thread begin ...<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:42 ii : ipc server process thread begin ...<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:46 ii : ipc client process thread begin ...<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:46 <A : peer config add message<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:46 DB : peer added ( obj count = 1 )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:46 ii : local address 10.10.0.70 selected for peer<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:46 DB : tunnel added ( obj count = 1 )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:46 <A : proposal config message<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:46 <A : proposal config message<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:46 <A : client config message<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:46 <A : remote cert 'C:\Users\philmadmin\Desktop\certs\Firewall.pem'
message<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:46 ii : 'C:\Users\philmadmin\Desktop\certs\Firewall.pem' loaded<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:46 <A : local cert 'C:\Users\philmadmin\Desktop\certs\Remote.pem'
message<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:46 ii : 'C:\Users\philmadmin\Desktop\certs\Remote.pem' loaded<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:46 <A : local key 'C:\Users\philmadmin\Desktop\certs\Remote.p12'
message<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:46 !! : 'C:\Users\philmadmin\Desktop\certs\Remote.p12' load failed,
requesting password<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 <A : file password<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 <A : local key 'C:\Users\philmadmin\Desktop\certs\Remote.p12'
message<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 ii : 'C:\Users\philmadmin\Desktop\certs\Remote.p12' loaded<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 <A : remote resource message<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 <A : peer tunnel enable message<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 ii : obtained x509 cert subject ( 94 bytes )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 DB : new phase1 ( ISAKMP initiator )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 DB : exchange type is aggressive<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 DB : 10.10.0.70:500 <-> 216.150.200.143:500<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 DB : 6384ff0789267618:0000000000000000<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 DB : phase1 added ( obj count = 1 )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 >> : security association payload<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 >> : - proposal #1 payload <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 >> : -- transform #1 payload <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 >> : key exchange payload<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 >> : nonce payload<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 >> : cert request payload<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 >> : identification payload<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 >> : vendor id payload<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 ii : local supports nat-t ( draft v00 )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 >> : vendor id payload<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 ii : local supports nat-t ( draft v01 )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 >> : vendor id payload<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 ii : local supports nat-t ( draft v02 )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 >> : vendor id payload<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 ii : local supports nat-t ( draft v03 )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 >> : vendor id payload<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 ii : local supports nat-t ( rfc )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 >> : vendor id payload<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 ii : local supports FRAGMENTATION<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 >> : vendor id payload<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 ii : local supports DPDv1<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 >> : vendor id payload<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 ii : local is SHREW SOFT compatible<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 >> : vendor id payload<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 ii : local is NETSCREEN compatible<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 >> : vendor id payload<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 ii : local is SIDEWINDER compatible<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 >> : vendor id payload<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 ii : local is CISCO UNITY compatible<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 >= : cookies 6384ff0789267618:0000000000000000<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 >= : message 00000000<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 -> : send IKE packet 10.10.0.70:500 -> 216.150.200.143:500 ( 603
bytes )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 DB : phase1 resend event scheduled ( ref count = 2 )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 <- : recv IKE packet 216.150.200.143:500 -> 10.10.0.70:500 (
1107 bytes )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 DB : phase1 found<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 ii : processing phase1 packet ( 1107 bytes )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 =< : cookies 6384ff0789267618:5cf6fcf41c9ea379<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 =< : message 00000000<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 << : security association payload<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 << : - propsal #1 payload <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 << : -- transform #1 payload <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 ii : matched isakmp proposal #1 transform #1<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 ii : - transform = ike<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 ii : - cipher type = 3des<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 ii : - key length = default<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 ii : - hash type = sha1<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 ii : - dh group = modp-1024<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 ii : - auth type = sig-rsa<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 ii : - life seconds = 3600<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 ii : - life kbytes = 0<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 << : key exchange payload<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 << : nonce payload<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 << : identification payload<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 ii : phase1 id match ( cert check only )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 ii : received = asn1-dn
C=us,ST=Colorado,L=Lakewood,O=Accruit,CN=Firewall-pro<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 << : cert request payload<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 << : certificate payload<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 << : signature payload<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 << : vendor id payload<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 ii : peer is SIDEWINDER compatible<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 << : vendor id payload<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 ii : unknown vendor id ( 16 bytes )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 0x : e720cdd4 9d2ee7b8 3ce1970a 6c69b528<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 ii : nat-t is unsupported by remote peer<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 == : DH shared secret ( 128 bytes )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 == : SETKEYID ( 20 bytes )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 == : SETKEYID_d ( 20 bytes )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 == : SETKEYID_a ( 20 bytes )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 == : SETKEYID_e ( 20 bytes )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 == : cipher key ( 40 bytes )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 == : cipher iv ( 8 bytes )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 >> : certificate payload<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 == : phase1 hash_i ( computed ) ( 20 bytes )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 >> : signature payload<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 >= : cookies 6384ff0789267618:5cf6fcf41c9ea379<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 >= : message 00000000<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 >= : encrypt iv ( 8 bytes )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 == : encrypt packet ( 748 bytes )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 == : stored iv ( 8 bytes )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 DB : phase1 resend event canceled ( ref count = 1 )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 -> : send IKE packet 10.10.0.70:500 -> 216.150.200.143:500 ( 776
bytes )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 !! : unable to verify remote peer certificate<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 ii : sending peer DELETE message<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 ii : - 10.10.0.70:500 -> 216.150.200.143:500<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 ii : - isakmp spi = 6384ff0789267618:5cf6fcf41c9ea379<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 ii : - data size 0<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 >> : hash payload<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 >> : delete payload<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 == : new informational hash ( 20 bytes )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 == : new informational iv ( 8 bytes )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 >= : cookies 6384ff0789267618:5cf6fcf41c9ea379<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 >= : message 6009d5ac<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 >= : encrypt iv ( 8 bytes )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 == : encrypt packet ( 80 bytes )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 == : stored iv ( 8 bytes )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 -> : send IKE packet 10.10.0.70:500 -> 216.150.200.143:500 ( 112
bytes )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 ii : phase1 removal before expire time<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 DB : phase1 deleted ( obj count = 0 )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 DB : policy not found<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 DB : policy not found<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 DB : tunnel stats event canceled ( ref count = 1 )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 DB : removing tunnel config references<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 DB : removing tunnel phase2 references<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 DB : removing tunnel phase1 references<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 DB : tunnel deleted ( obj count = 0 )<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 DB : removing all peer tunnel refrences<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'>09/11/19
09:51:49 DB : peer deleted ( obj count = 0 )<o:p></o:p></span></font></p>
<div style='mso-element:para-border-div;border:none;border-bottom:solid windowtext 1.0pt;
padding:0in 0in 1.0pt 0in'>
<p class=MsoNormal style='border:none;padding:0in'><font size=2 face=Calibri><span
style='font-size:11.0pt'>09/11/19 09:51:49 ii : ipc client process thread exit
...<o:p></o:p></span></font></p>
</div>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'><o:p> </o:p></span></font></p>
<table class=MsoNormalTable border=0 cellpadding=0 width=550 style='width:412.5pt'>
<tr>
<td style='padding:3.75pt 3.75pt 3.75pt 3.75pt'>
<p class=MsoNormal><font size=3 face="Times New Roman"><span
style='font-size:12.0pt;font-family:"Times New Roman","serif"'><img
width=322 height=91 id="Picture_x0020_1"
src="cid:image001.gif@01CA68FD.EBB913B0"
alt="http://www.accruit.com/images/e-mail-footer.gif"><o:p></o:p></span></font></p>
</td>
</tr>
<tr>
<td style='padding:3.75pt 3.75pt 3.75pt 3.75pt'>
<p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><b><font
size=1 color=black face=Arial><span style='font-size:9.0pt;font-family:"Arial","sans-serif";
color:black;font-weight:bold'>Phil Mullins </span></font></b><font size=1
color=black face=Arial><span style='font-size:9.0pt;font-family:"Arial","sans-serif";
color:black'><br>
Systems Administrator<br>
Accruit, LLC<br>
1514 Curtis Street, Suite 300<br>
Denver, Colorado 80202<br>
Tel: 303-865-7320<br>
Fax: 303-865-7399<br>
Mobile: 303-915-0646 <br>
E-mail: philm@accruit.com<br>
<a href="http://www.accruit.com"><font color=blue><span style='color:blue'>www.accruit.com</span></font></a>
<o:p></o:p></span></font></p>
</td>
</tr>
<tr>
<td bgcolor=white style='background:white;padding:3.75pt 3.75pt 3.75pt 3.75pt'>
<p class=MsoNormal><font size=1 color=black face="Arial Narrow"><span
style='font-size:9.0pt;font-family:"Arial Narrow","sans-serif";color:black'>PLEASE
NOTE: In order for Accruit, LLC to act as "Qualified
Intermediary" as defined within the Treasury regulations under section
1031 of the Internal Revenue Code, Accruit and its employees are prohibited
from providing tax advice. Any written or oral communication with an employee
of Accruit must not be construed as tax advice. Accruit strongly recommends
that you consult with your tax advisor.</span></font><font size=3
face="Times New Roman"><span style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p></o:p></span></font></p>
</td>
</tr>
<tr>
<td bgcolor="#CCCCCC" style='background:#CCCCCC;padding:3.75pt 3.75pt 3.75pt 3.75pt'>
<p class=MsoNormal><font size=1 face="Arial Narrow"><span style='font-size:
9.0pt;font-family:"Arial Narrow","sans-serif"'>CONFIDENTIALITY NOTICE:
This e-mail message and any attachments may contain confidential, legally
privileged information. If you are not the intended recipient, please
be advised that any disclosure, distribution, or use of any of the
information contained in or attached to this message is prohibited. If you
have received this e-mail message in error, please notify us immediately and
destroy this e-mail message and any attachments. Thank you in advance
for your cooperation.</span></font><font size=3 face="Times New Roman"><span
style='font-size:12.0pt;font-family:"Times New Roman","serif"'><o:p></o:p></span></font></p>
</td>
</tr>
</table>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Calibri><span style='font-size:11.0pt'><o:p> </o:p></span></font></p>
</div>
</body>
</html>