<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:blue;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=EN-US link=blue vlink=blue>
<div class=Section1>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>I published a couple of posts about this –
I’m waiting for an escalation with Netgear to go through. It seems their
customer support people can just misrepresent issues they don’t
understand, and their management will believe it.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>I don’t have time to redo the whole
thing, but it is possible to get this to work.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>You must set up a VPN policy – mode-config
doesn’t work. This means you must manually configure the VON IP address
of each client that connects. This IP address must be on a different subnet
than the LAN. <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>The remote IP mask of he VPN policy must
be set to ‘any,’ which means that NetBIOS broadcasts don’t
work. All these behaviours (with the exception of no mode config) also occur with
the Netgear supplied client (cutting Shrew out of the equation completely). But
mode-config does work with the Netgear-supplied client. Netgear are informed
of this, but they’ve chosen to distort and/or ignore the issues.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Those are the main caveats to getting
things to work. There may be a few others – search the archives. <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>
<hr size=2 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal><b><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma;font-weight:bold'>From:</span></font></b><font size=2
face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'>
vpn-help-bounces@lists.shrew.net [mailto:vpn-help-bounces@lists.shrew.net] <b><span
style='font-weight:bold'>On Behalf Of </span></b>Mike Crowe<br>
<b><span style='font-weight:bold'>Sent:</span></b> Wednesday, December 09, 2009
10:34 PM<br>
<b><span style='font-weight:bold'>To:</span></b> vpn-help@lists.shrew.net<br>
<b><span style='font-weight:bold'>Subject:</span></b> [Vpn-help] Help
configuring Netgear FVX538 router</span></font><o:p></o:p></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='margin-bottom:12.0pt'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>Hi folks,<br>
<br>
I'm following the instructions at <a
href="http://www.shrew.net/support/wiki/HowtoNetgear" target="_blank">http://www.shrew.net/support/wiki/HowtoNetgear</a>,
and I can't seem to get the shrew client to connect. When I try an
initiate a connection, I repeatedly see:<br>
<br>
09/12/09 16:14:45 -> : send IKE packet <a href="http://192.168.1.15:500"
target="_blank">192.168.1.15:500</a> -> XX.XXX.XXX.198:500 ( 1177 bytes )<br>
09/12/09 16:14:45 DB : phase1 resend event scheduled ( ref count = 2 )<br>
09/12/09 16:14:50 -> : resend 1 phase1 packet(s) <a
href="http://192.168.1.15:500" target="_blank">192.168.1.15:500</a> ->
XX.XXX.XXX.198:500<br>
<br>
(full log below). If I look at this, it almost appears that the Netgear
isn't listening on port 500. Could that be possible?<br>
<br>
Based on this setup, two questions:<br>
<br>
1) I don't have to set up a VPN policy, right?<br>
2) I don't have to adjust any port forwarding or other rules,
right? I don't have any port 500 rules in place now.<br>
<br>
<br>
<br>
09/12/09 16:10:31 ## : IKE Daemon, ver 2.1.5<br>
09/12/09 16:10:31 ## : Copyright 2009 Shrew Soft Inc.<br>
09/12/09 16:10:31 ## : This product linked OpenSSL 0.9.8h 28 May 2008<br>
09/12/09 16:10:31 ii : opened 'C:\Program Files\ShrewSoft\VPN
Client\debug\iked.log'<br>
09/12/09 16:10:31 ii : rebuilding vnet device list ...<br>
09/12/09 16:10:31 ii : device ROOT\VNET\0000 disabled<br>
09/12/09 16:10:31 ii : network process thread begin ...<br>
09/12/09 16:10:31 ii : ipc server process thread begin ...<br>
09/12/09 16:10:31 ii : pfkey process thread begin ...<br>
09/12/09 16:10:33 ii : ipc client process thread begin ...<br>
09/12/09 16:10:33 <A : peer config add message<br>
09/12/09 16:10:33 DB : peer added ( obj count = 1 )<br>
09/12/09 16:10:33 ii : local address 192.168.1.15 selected for peer<br>
09/12/09 16:10:33 DB : tunnel added ( obj count = 1 )<br>
09/12/09 16:10:33 <A : proposal config message<br>
09/12/09 16:10:33 <A : proposal config message<br>
09/12/09 16:10:33 <A : client config message<br>
09/12/09 16:10:33 <A : xauth username message<br>
09/12/09 16:10:33 <A : xauth password message<br>
09/12/09 16:10:33 <A : local id '<a href="http://vpn.zipitwireless.com"
target="_blank">vpn.zipitwireless.com</a>' message<br>
09/12/09 16:10:33 <A : preshared key message<br>
09/12/09 16:10:33 <A : remote resource message<br>
09/12/09 16:10:33 <A : peer tunnel enable message<br>
09/12/09 16:10:33 DB : new phase1 ( ISAKMP initiator )<br>
09/12/09 16:10:33 DB : exchange type is aggressive<br>
09/12/09 16:10:33 DB : <a href="http://192.168.1.15:500" target="_blank">192.168.1.15:500</a>
<-> <a href="http://74.223.161.198:500" target="_blank">74.223.161.198:500</a><br>
09/12/09 16:10:33 DB : 779787518ff0cc3a:0000000000000000<br>
09/12/09 16:10:33 DB : phase1 added ( obj count = 1 )<br>
09/12/09 16:10:33 >> : security association payload<br>
09/12/09 16:10:33 >> : - proposal #1 payload <br>
09/12/09 16:10:33 >> : -- transform #1 payload <br>
09/12/09 16:10:33 >> : -- transform #2 payload <br>
09/12/09 16:10:33 >> : -- transform #3 payload <br>
09/12/09 16:10:33 >> : -- transform #4 payload <br>
09/12/09 16:10:33 >> : -- transform #5 payload <br>
09/12/09 16:10:33 >> : -- transform #6 payload <br>
09/12/09 16:10:33 >> : -- transform #7 payload <br>
09/12/09 16:10:33 >> : -- transform #8 payload <br>
09/12/09 16:10:33 >> : -- transform #9 payload <br>
09/12/09 16:10:33 >> : -- transform #10 payload <br>
09/12/09 16:10:33 >> : -- transform #11 payload <br>
09/12/09 16:10:33 >> : -- transform #12 payload <br>
09/12/09 16:10:33 >> : -- transform #13 payload <br>
09/12/09 16:10:33 >> : -- transform #14 payload <br>
09/12/09 16:10:33 >> : -- transform #15 payload <br>
09/12/09 16:10:33 >> : -- transform #16 payload <br>
09/12/09 16:10:33 >> : -- transform #17 payload <br>
09/12/09 16:10:33 >> : -- transform #18 payload <br>
09/12/09 16:10:33 >> : key exchange payload<br>
09/12/09 16:10:33 >> : nonce payload<br>
09/12/09 16:10:33 >> : identification payload<br>
09/12/09 16:10:33 >> : vendor id payload<br>
09/12/09 16:10:33 ii : local supports XAUTH<br>
09/12/09 16:10:33 >> : vendor id payload<br>
09/12/09 16:10:33 ii : local supports nat-t ( draft v00 )<br>
09/12/09 16:10:33 >> : vendor id payload<br>
09/12/09 16:10:33 ii : local supports nat-t ( draft v01 )<br>
09/12/09 16:10:33 >> : vendor id payload<br>
09/12/09 16:10:33 ii : local supports nat-t ( draft v02 )<br>
09/12/09 16:10:33 >> : vendor id payload<br>
09/12/09 16:10:33 ii : local supports nat-t ( draft v03 )<br>
09/12/09 16:10:33 >> : vendor id payload<br>
09/12/09 16:10:33 ii : local supports nat-t ( rfc )<br>
09/12/09 16:10:33 >> : vendor id payload<br>
09/12/09 16:10:33 ii : local supports FRAGMENTATION<br>
09/12/09 16:10:33 >> : vendor id payload<br>
09/12/09 16:10:33 ii : local is SHREW SOFT compatible<br>
09/12/09 16:10:33 >> : vendor id payload<br>
09/12/09 16:10:33 ii : local is NETSCREEN compatible<br>
09/12/09 16:10:33 >> : vendor id payload<br>
09/12/09 16:10:33 ii : local is SIDEWINDER compatible<br>
09/12/09 16:10:33 >> : vendor id payload<br>
09/12/09 16:10:33 ii : local is CISCO UNITY compatible<br>
09/12/09 16:10:33 >= : cookies 779787518ff0cc3a:0000000000000000<br>
09/12/09 16:10:33 >= : message 00000000<br>
09/12/09 16:10:33 -> : send IKE packet <a href="http://192.168.1.15:500"
target="_blank">192.168.1.15:500</a> -> <a href="http://74.223.161.198:500"
target="_blank">74.223.161.198:500</a> ( 1177 bytes )<br>
09/12/09 16:10:33 DB : phase1 resend event scheduled ( ref count = 2 )<br>
09/12/09 16:10:38 -> : resend 1 phase1 packet(s) <a
href="http://192.168.1.15:500" target="_blank">192.168.1.15:500</a> -> <a
href="http://74.223.161.198:500" target="_blank">74.223.161.198:500</a><br>
09/12/09 16:10:43 -> : resend 1 phase1 packet(s) <a
href="http://192.168.1.15:500" target="_blank">192.168.1.15:500</a> -> <a
href="http://74.223.161.198:500" target="_blank">74.223.161.198:500</a><br>
09/12/09 16:10:48 -> : resend 1 phase1 packet(s) <a
href="http://192.168.1.15:500" target="_blank">192.168.1.15:500</a> -> <a
href="http://74.223.161.198:500" target="_blank">74.223.161.198:500</a><br>
09/12/09 16:10:53 ii : resend limit exceeded for phase1 exchange<br>
09/12/09 16:10:53 ii : phase1 removal before expire time<br>
09/12/09 16:10:53 DB : phase1 deleted ( obj count = 0 )<br>
09/12/09 16:10:53 DB : policy not found<br>
09/12/09 16:10:53 DB : policy not found<br>
09/12/09 16:10:53 DB : tunnel stats event canceled ( ref count = 1 )<br>
09/12/09 16:10:53 DB : removing tunnel config references<br>
09/12/09 16:10:53 DB : removing tunnel phase2 references<br>
09/12/09 16:10:53 DB : removing tunnel phase1 references<br>
09/12/09 16:10:53 DB : tunnel deleted ( obj count = 0 )<br>
09/12/09 16:10:53 DB : removing all peer tunnel refrences<br>
09/12/09 16:10:53 DB : peer deleted ( obj count = 0 )<br>
09/12/09 16:10:53 ii : ipc client process thread exit ...<br>
09/12/09 16:13:03 ii : ipc client process thread begin ...<br>
09/12/09 16:13:03 <A : peer config add message<br>
09/12/09 16:13:03 DB : peer added ( obj count = 1 )<br>
09/12/09 16:13:03 ii : local address 192.168.1.15 selected for peer<br>
09/12/09 16:13:03 DB : tunnel added ( obj count = 1 )<br>
09/12/09 16:13:03 <A : proposal config message<br>
09/12/09 16:13:03 <A : proposal config message<br>
09/12/09 16:13:03 <A : client config message<br>
09/12/09 16:13:03 <A : xauth username message<br>
09/12/09 16:13:03 <A : xauth password message<br>
09/12/09 16:13:03 <A : local id '<a href="http://vpn.zipitwireless.com"
target="_blank">vpn.zipitwireless.com</a>' message<br>
09/12/09 16:13:03 <A : preshared key message<br>
09/12/09 16:13:03 <A : remote resource message<br>
09/12/09 16:13:03 <A : peer tunnel enable message<br>
09/12/09 16:13:03 DB : new phase1 ( ISAKMP initiator )<br>
09/12/09 16:13:03 DB : exchange type is aggressive<br>
09/12/09 16:13:03 DB : <a href="http://192.168.1.15:500" target="_blank">192.168.1.15:500</a>
<-> <a href="http://74.223.161.198:500" target="_blank">74.223.161.198:500</a><br>
09/12/09 16:13:03 DB : d83d366fe6644d88:0000000000000000<br>
09/12/09 16:13:03 DB : phase1 added ( obj count = 1 )<br>
09/12/09 16:13:03 >> : security association payload<br>
09/12/09 16:13:03 >> : - proposal #1 payload <br>
09/12/09 16:13:03 >> : -- transform #1 payload <br>
09/12/09 16:13:03 >> : -- transform #2 payload <br>
09/12/09 16:13:03 >> : -- transform #3 payload <br>
09/12/09 16:13:03 >> : -- transform #4 payload <br>
09/12/09 16:13:03 >> : -- transform #5 payload <br>
09/12/09 16:13:03 >> : -- transform #6 payload <br>
09/12/09 16:13:03 >> : -- transform #7 payload <br>
09/12/09 16:13:03 >> : -- transform #8 payload <br>
09/12/09 16:13:03 >> : -- transform #9 payload <br>
09/12/09 16:13:03 >> : -- transform #10 payload <br>
09/12/09 16:13:03 >> : -- transform #11 payload <br>
09/12/09 16:13:03 >> : -- transform #12 payload <br>
09/12/09 16:13:03 >> : -- transform #13 payload <br>
09/12/09 16:13:03 >> : -- transform #14 payload <br>
09/12/09 16:13:03 >> : -- transform #15 payload <br>
09/12/09 16:13:03 >> : -- transform #16 payload <br>
09/12/09 16:13:03 >> : -- transform #17 payload <br>
09/12/09 16:13:03 >> : -- transform #18 payload <br>
09/12/09 16:13:03 >> : key exchange payload<br>
09/12/09 16:13:03 >> : nonce payload<br>
09/12/09 16:13:03 >> : identification payload<br>
09/12/09 16:13:03 >> : vendor id payload<br>
09/12/09 16:13:03 ii : local supports XAUTH<br>
09/12/09 16:13:03 >> : vendor id payload<br>
09/12/09 16:13:03 ii : local supports nat-t ( draft v00 )<br>
09/12/09 16:13:03 >> : vendor id payload<br>
09/12/09 16:13:03 ii : local supports nat-t ( draft v01 )<br>
09/12/09 16:13:03 >> : vendor id payload<br>
09/12/09 16:13:03 ii : local supports nat-t ( draft v02 )<br>
09/12/09 16:13:03 >> : vendor id payload<br>
09/12/09 16:13:03 ii : local supports nat-t ( draft v03 )<br>
09/12/09 16:13:03 >> : vendor id payload<br>
09/12/09 16:13:03 ii : local supports nat-t ( rfc )<br>
09/12/09 16:13:03 >> : vendor id payload<br>
09/12/09 16:13:03 ii : local supports FRAGMENTATION<br>
09/12/09 16:13:03 >> : vendor id payload<br>
09/12/09 16:13:03 ii : local is SHREW SOFT compatible<br>
09/12/09 16:13:03 >> : vendor id payload<br>
09/12/09 16:13:03 ii : local is NETSCREEN compatible<br>
09/12/09 16:13:03 >> : vendor id payload<br>
09/12/09 16:13:03 ii : local is SIDEWINDER compatible<br>
09/12/09 16:13:03 >> : vendor id payload<br>
09/12/09 16:13:03 ii : local is CISCO UNITY compatible<br>
09/12/09 16:13:03 >= : cookies d83d366fe6644d88:0000000000000000<br>
09/12/09 16:13:03 >= : message 00000000<br>
09/12/09 16:13:03 -> : send IKE packet <a href="http://192.168.1.15:500"
target="_blank">192.168.1.15:500</a> -> <a href="http://74.223.161.198:500"
target="_blank">74.223.161.198:500</a> ( 1177 bytes )<br>
09/12/09 16:13:03 DB : phase1 resend event scheduled ( ref count = 2 )<br>
09/12/09 16:13:08 -> : resend 1 phase1 packet(s) <a
href="http://192.168.1.15:500" target="_blank">192.168.1.15:500</a> -> <a
href="http://74.223.161.198:500" target="_blank">74.223.161.198:500</a><br>
09/12/09 16:13:13 -> : resend 1 phase1 packet(s) <a
href="http://192.168.1.15:500" target="_blank">192.168.1.15:500</a> -> <a
href="http://74.223.161.198:500" target="_blank">74.223.161.198:500</a><br>
09/12/09 16:13:18 -> : resend 1 phase1 packet(s) <a
href="http://192.168.1.15:500" target="_blank">192.168.1.15:500</a> -> <a
href="http://74.223.161.198:500" target="_blank">74.223.161.198:500</a><br>
09/12/09 16:13:23 ii : resend limit exceeded for phase1 exchange<br>
09/12/09 16:13:23 ii : phase1 removal before expire time<br>
09/12/09 16:13:23 DB : phase1 deleted ( obj count = 0 )<br>
09/12/09 16:13:23 DB : policy not found<br>
09/12/09 16:13:23 DB : policy not found<br>
09/12/09 16:13:23 DB : tunnel stats event canceled ( ref count = 1 )<br>
09/12/09 16:13:23 DB : removing tunnel config references<br>
09/12/09 16:13:23 DB : removing tunnel phase2 references<br>
09/12/09 16:13:23 DB : removing tunnel phase1 references<br>
09/12/09 16:13:23 DB : tunnel deleted ( obj count = 0 )<br>
09/12/09 16:13:23 DB : removing all peer tunnel refrences<br>
09/12/09 16:13:23 DB : peer deleted ( obj count = 0 )<br>
09/12/09 16:13:23 ii : ipc client process thread exit ...<br>
09/12/09 16:14:45 ii : ipc client process thread begin ...<br>
09/12/09 16:14:45 <A : peer config add message<br>
09/12/09 16:14:45 DB : peer added ( obj count = 1 )<br>
09/12/09 16:14:45 ii : local address 192.168.1.15 selected for peer<br>
09/12/09 16:14:45 DB : tunnel added ( obj count = 1 )<br>
09/12/09 16:14:45 <A : proposal config message<br>
09/12/09 16:14:45 <A : proposal config message<br>
09/12/09 16:14:45 <A : client config message<br>
09/12/09 16:14:45 <A : xauth username message<br>
09/12/09 16:14:45 <A : xauth password message<br>
09/12/09 16:14:45 <A : local id '<a href="http://vpn.zipitwireless.com"
target="_blank">vpn.zipitwireless.com</a>' message<br>
09/12/09 16:14:45 <A : preshared key message<br>
09/12/09 16:14:45 <A : remote resource message<br>
09/12/09 16:14:45 <A : peer tunnel enable message<br>
09/12/09 16:14:45 DB : new phase1 ( ISAKMP initiator )<br>
09/12/09 16:14:45 DB : exchange type is aggressive<br>
09/12/09 16:14:45 DB : <a href="http://192.168.1.15:500" target="_blank">192.168.1.15:500</a>
<-> <a href="http://74.223.161.198:500" target="_blank">74.223.161.198:500</a><br>
09/12/09 16:14:45 DB : 76b900f17cca669d:0000000000000000<br>
09/12/09 16:14:45 DB : phase1 added ( obj count = 1 )<br>
09/12/09 16:14:45 >> : security association payload<br>
09/12/09 16:14:45 >> : - proposal #1 payload <br>
09/12/09 16:14:45 >> : -- transform #1 payload <br>
09/12/09 16:14:45 >> : -- transform #2 payload <br>
09/12/09 16:14:45 >> : -- transform #3 payload <br>
09/12/09 16:14:45 >> : -- transform #4 payload <br>
09/12/09 16:14:45 >> : -- transform #5 payload <br>
09/12/09 16:14:45 >> : -- transform #6 payload <br>
09/12/09 16:14:45 >> : -- transform #7 payload <br>
09/12/09 16:14:45 >> : -- transform #8 payload <br>
09/12/09 16:14:45 >> : -- transform #9 payload <br>
09/12/09 16:14:45 >> : -- transform #10 payload <br>
09/12/09 16:14:45 >> : -- transform #11 payload <br>
09/12/09 16:14:45 >> : -- transform #12 payload <br>
09/12/09 16:14:45 >> : -- transform #13 payload <br>
09/12/09 16:14:45 >> : -- transform #14 payload <br>
09/12/09 16:14:45 >> : -- transform #15 payload <br>
09/12/09 16:14:45 >> : -- transform #16 payload <br>
09/12/09 16:14:45 >> : -- transform #17 payload <br>
09/12/09 16:14:45 >> : -- transform #18 payload <br>
09/12/09 16:14:45 >> : key exchange payload<br>
09/12/09 16:14:45 >> : nonce payload<br>
09/12/09 16:14:45 >> : identification payload<br>
09/12/09 16:14:45 >> : vendor id payload<br>
09/12/09 16:14:45 ii : local supports XAUTH<br>
09/12/09 16:14:45 >> : vendor id payload<br>
09/12/09 16:14:45 ii : local supports nat-t ( draft v00 )<br>
09/12/09 16:14:45 >> : vendor id payload<br>
09/12/09 16:14:45 ii : local supports nat-t ( draft v01 )<br>
09/12/09 16:14:45 >> : vendor id payload<br>
09/12/09 16:14:45 ii : local supports nat-t ( draft v02 )<br>
09/12/09 16:14:45 >> : vendor id payload<br>
09/12/09 16:14:45 ii : local supports nat-t ( draft v03 )<br>
09/12/09 16:14:45 >> : vendor id payload<br>
09/12/09 16:14:45 ii : local supports nat-t ( rfc )<br>
09/12/09 16:14:45 >> : vendor id payload<br>
09/12/09 16:14:45 ii : local supports FRAGMENTATION<br>
09/12/09 16:14:45 >> : vendor id payload<br>
09/12/09 16:14:45 ii : local is SHREW SOFT compatible<br>
09/12/09 16:14:45 >> : vendor id payload<br>
09/12/09 16:14:45 ii : local is NETSCREEN compatible<br>
09/12/09 16:14:45 >> : vendor id payload<br>
09/12/09 16:14:45 ii : local is SIDEWINDER compatible<br>
09/12/09 16:14:45 >> : vendor id payload<br>
09/12/09 16:14:45 ii : local is CISCO UNITY compatible<br>
09/12/09 16:14:45 >= : cookies 76b900f17cca669d:0000000000000000<br>
09/12/09 16:14:45 >= : message 00000000<br>
09/12/09 16:14:45 -> : send IKE packet <a href="http://192.168.1.15:500"
target="_blank">192.168.1.15:500</a> -> <a href="http://74.223.161.198:500"
target="_blank">74.223.161.198:500</a> ( 1177 bytes )<br>
09/12/09 16:14:45 DB : phase1 resend event scheduled ( ref count = 2 )<br>
09/12/09 16:14:50 -> : resend 1 phase1 packet(s) <a
href="http://192.168.1.15:500" target="_blank">192.168.1.15:500</a> -> <a
href="http://74.223.161.198:500" target="_blank">74.223.161.198:500</a><br>
09/12/09 16:14:55 -> : resend 1 phase1 packet(s) <a
href="http://192.168.1.15:500" target="_blank">192.168.1.15:500</a> -> <a
href="http://74.223.161.198:500" target="_blank">74.223.161.198:500</a><br>
09/12/09 16:15:00 -> : resend 1 phase1 packet(s) <a
href="http://192.168.1.15:500" target="_blank">192.168.1.15:500</a> -> <a
href="http://74.223.161.198:500" target="_blank">74.223.161.198:500</a><br>
09/12/09 16:15:05 ii : resend limit exceeded for phase1 exchange<br>
09/12/09 16:15:05 ii : phase1 removal before expire time<br>
09/12/09 16:15:05 DB : phase1 deleted ( obj count = 0 )<br>
09/12/09 16:15:05 DB : policy not found<br>
09/12/09 16:15:05 DB : policy not found<br>
09/12/09 16:15:05 DB : tunnel stats event canceled ( ref count = 1 )<br>
09/12/09 16:15:05 DB : removing tunnel config references<br>
09/12/09 16:15:05 DB : removing tunnel phase2 references<br>
09/12/09 16:15:05 DB : removing tunnel phase1 references<br>
09/12/09 16:15:05 DB : tunnel deleted ( obj count = 0 )<br>
09/12/09 16:15:06 DB : removing all peer tunnel refrences<br>
09/12/09 16:15:06 DB : peer deleted ( obj count = 0 )<br>
09/12/09 16:15:06 ii : ipc client process thread exit ...<o:p></o:p></span></font></p>
</div>
</body>
</html>