<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:black;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=black vlink=purple>
<div class=Section1>
<p class=MsoNormal> Client version 2.1.5 on Windows 7 Pro x64, connecting
to an ASA 5505 8.2(1). The tunnel is established, and everything is great
for ~15 minutes. After that, even with traffic flowing through the
tunnel, it disconnects. I’ve tried with DPD enabled and disabled,
it doesn’t make a difference.<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal> Here’s a snippet of the debug log, followed by
the relevant ASA config:<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 DB : phase1 found<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 -> : send NAT-T:KEEP-ALIVE packet
192.168.16.35:4500 -> [REDACTED]:4500<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 DB : phase1 found<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 ii : sending peer DPDV1-R-U-THERE
notification<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 ii : - 192.168.16.35:4500 ->
[REDACTED]:4500<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 ii : - isakmp spi =
3a603904b57b73db:b0b5f4400d195220<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 ii : - data size 4<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 >> : hash payload<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 >> : notification payload<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 == : new informational hash ( 20 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 == : new informational iv ( 8 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 >= : cookies
3a603904b57b73db:b0b5f4400d195220<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 >= : message eab3ef88<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 >= : encrypt iv ( 8 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 == : encrypt packet ( 84 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 == : stored iv ( 8 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 -> : send NAT-T:IKE packet
192.168.16.35:4500 -> [REDACTED]:4500 ( 116 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 ii : DPD ARE-YOU-THERE sequence 3c457e46
requested<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 <- : recv NAT-T:IKE packet [REDACTED]:4500
-> 192.168.16.35:4500 ( 84 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 DB : phase1 found<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 ii : processing informational packet ( 84
bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 == : new informational iv ( 8 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 =< : cookies
3a603904b57b73db:b0b5f4400d195220<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 =< : message 1b8a6452<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 =< : decrypt iv ( 8 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 == : decrypt packet ( 84 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 <= : stored iv ( 8 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 << : hash payload<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 << : notification payload<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 == : informational hash_i ( computed ) (
20 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 == : informational hash_c ( received ) (
20 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 ii : informational hash verified<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 ii : received peer DPDV1-R-U-THERE-ACK
notification<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 ii : - [REDACTED]:4500 ->
192.168.16.35:4500<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 ii : - isakmp spi =
3a603904b57b73db:b0b5f4400d195220<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 ii : - data size 4<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 ii : DPD ARE-YOU-THERE-ACK sequence
3c457e46 accepted<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:14 ii : next tunnel DPD request in 15 secs
for peer [REDACTED]:4500<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:17 <- : recv NAT-T:IKE packet
[REDACTED]:4500 -> 192.168.16.35:4500 ( 368 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:17 DB : phase1 not found<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:17 ii : attempting to locate tunnel for peer
[REDACTED]<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:17 DB : tunnel found<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:17 ww : ike packet from [REDACTED] ignored,
contact is denied for peer<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:25 <- : recv NAT-T:IKE packet
[REDACTED]:4500 -> 192.168.16.35:4500 ( 368 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:25 DB : phase1 not found<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:25 ii : attempting to locate tunnel for peer
[REDACTED]<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:25 DB : tunnel found<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:25 ww : ike packet from [REDACTED] ignored,
contact is denied for peer<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 DB : phase1 found<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 -> : send NAT-T:KEEP-ALIVE packet
192.168.16.35:4500 -> [REDACTED]:4500<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 DB : phase1 found<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 ii : sending peer DPDV1-R-U-THERE
notification<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 ii : - 192.168.16.35:4500 ->
[REDACTED]:4500<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 ii : - isakmp spi =
3a603904b57b73db:b0b5f4400d195220<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 ii : - data size 4<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 >> : hash payload<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 >> : notification payload<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 == : new informational hash ( 20 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 == : new informational iv ( 8 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 >= : cookies
3a603904b57b73db:b0b5f4400d195220<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 >= : message 8cb67d72<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 >= : encrypt iv ( 8 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 == : encrypt packet ( 84 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 == : stored iv ( 8 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 -> : send NAT-T:IKE packet
192.168.16.35:4500 -> [REDACTED]:4500 ( 116 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 ii : DPD ARE-YOU-THERE sequence 3c457e47
requested<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 <- : recv NAT-T:IKE packet
[REDACTED]:4500 -> 192.168.16.35:4500 ( 84 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 DB : phase1 found<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 ii : processing informational packet ( 84
bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 == : new informational iv ( 8 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 =< : cookies
3a603904b57b73db:b0b5f4400d195220<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 =< : message 8fbe801f<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 =< : decrypt iv ( 8 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 == : decrypt packet ( 84 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 <= : stored iv ( 8 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 << : hash payload<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 << : notification payload<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 == : informational hash_i ( computed ) (
20 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 == : informational hash_c ( received ) (
20 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 ii : informational hash verified<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 ii : received peer DPDV1-R-U-THERE-ACK
notification<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 ii : - [REDACTED]:4500 ->
192.168.16.35:4500<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 ii : - isakmp spi =
3a603904b57b73db:b0b5f4400d195220<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 ii : - data size 4<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 ii : DPD ARE-YOU-THERE-ACK sequence
3c457e47 accepted<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:29 ii : next tunnel DPD request in 15 secs
for peer [REDACTED]:4500<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:33 <- : recv NAT-T:IKE packet
[REDACTED]:4500 -> 192.168.16.35:4500 ( 368 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:33 DB : phase1 not found<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:33 ii : attempting to locate tunnel for peer
[REDACTED]<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:33 DB : tunnel found<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:33 ww : ike packet from [REDACTED] ignored,
contact is denied for peer<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:41 <- : recv NAT-T:IKE packet
[REDACTED]:4500 -> 192.168.16.35:4500 ( 368 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:41 DB : phase1 not found<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:41 ii : attempting to locate tunnel for peer
[REDACTED]<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:41 DB : tunnel found<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:41 ww : ike packet from [REDACTED] ignored,
contact is denied for peer<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 DB : phase1 found<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 -> : send NAT-T:KEEP-ALIVE packet
192.168.16.35:4500 -> [REDACTED]:4500<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 DB : phase1 found<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 ii : sending peer DPDV1-R-U-THERE
notification<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 ii : - 192.168.16.35:4500 ->
[REDACTED]:4500<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 ii : - isakmp spi =
3a603904b57b73db:b0b5f4400d195220<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 ii : - data size 4<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 >> : hash payload<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 >> : notification payload<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 == : new informational hash ( 20 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 == : new informational iv ( 8 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 >= : cookies
3a603904b57b73db:b0b5f4400d195220<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 >= : message b22d7d76<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 >= : encrypt iv ( 8 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 == : encrypt packet ( 84 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 == : stored iv ( 8 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 -> : send NAT-T:IKE packet
192.168.16.35:4500 -> [REDACTED]:4500 ( 116 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 ii : DPD ARE-YOU-THERE sequence 3c457e48
requested<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 <- : recv NAT-T:IKE packet
[REDACTED]:4500 -> 192.168.16.35:4500 ( 84 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 DB : phase1 found<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 ii : processing informational packet ( 84
bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 == : new informational iv ( 8 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 =< : cookies
3a603904b57b73db:b0b5f4400d195220<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 =< : message f8872032<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 =< : decrypt iv ( 8 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 == : decrypt packet ( 84 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 <= : stored iv ( 8 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 << : hash payload<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 << : notification payload<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 == : informational hash_i ( computed ) (
20 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 == : informational hash_c ( received ) (
20 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 ii : informational hash verified<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 ii : received peer DPDV1-R-U-THERE-ACK
notification<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 ii : - [REDACTED]:4500 ->
192.168.16.35:4500<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 ii : - isakmp spi =
3a603904b57b73db:b0b5f4400d195220<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 ii : - data size 4<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 ii : DPD ARE-YOU-THERE-ACK sequence
3c457e48 accepted<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:44 ii : next tunnel DPD request in 15 secs
for peer [REDACTED]:4500<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 <- : recv NAT-T:IKE packet
[REDACTED]:4500 -> 192.168.16.35:4500 ( 68 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 DB : phase1 found<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 ii : processing informational packet ( 68
bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 == : new informational iv ( 8 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 =< : cookies
3a603904b57b73db:b0b5f4400d195220<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 =< : message cdae21bd<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 =< : decrypt iv ( 8 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 == : decrypt packet ( 68 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 <= : stored iv ( 8 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 << : hash payload<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 << : delete payload<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 == : informational hash_i ( computed ) (
20 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 == : informational hash_c ( received ) (
20 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 ii : informational hash verified<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 ii : received peer DELETE message<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 ii : - [REDACTED]:4500 ->
192.168.16.35:4500<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 ii : - ipsec-esp spi = 0xddaaf6a2<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 DB : phase2 found<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 DB : cleanup, marked phase2 0xddaaf6a2 for
removal<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 DB : phase2 soft event canceled ( ref
count = 2 )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 DB : phase2 hard event canceled ( ref
count = 1 )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 K> : send pfkey DELETE ESP message<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 K> : send pfkey DELETE ESP message<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 ii : phase2 removal before expire time<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 DB : phase2 deleted ( obj count = 0 )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 <- : recv NAT-T:IKE packet
[REDACTED]:4500 -> 192.168.16.35:4500 ( 84 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 DB : phase1 found<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 ii : processing informational packet ( 84
bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 == : new informational iv ( 8 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 =< : cookies
3a603904b57b73db:b0b5f4400d195220<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 =< : message ffc28f81<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 =< : decrypt iv ( 8 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 == : decrypt packet ( 84 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 <= : trimmed packet padding ( 4 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 <= : stored iv ( 8 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 << : hash payload<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 << : delete payload<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 == : informational hash_i ( computed ) (
20 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 == : informational hash_c ( received ) (
20 bytes )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 ii : informational hash verified<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 ii : received peer DELETE message<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 ii : - [REDACTED]:4500 ->
192.168.16.35:4500<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 ii : - isakmp spi =
3a603904b57b73db:b0b5f4400d195220<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 DB : phase1 found<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 ii : cleanup, marked phase1 3a603904b57b73db:b0b5f4400d195220
for removal<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 DB : phase1 soft event canceled ( ref
count = 4 )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 DB : phase1 hard event canceled ( ref
count = 3 )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 DB : phase1 dead event canceled ( ref
count = 2 )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 DB : config deleted ( obj count = 0 )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 ii : phase1 removal before expire time<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 DB : phase1 not found<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 DB : phase1 deleted ( obj count = 0 )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 DB : policy found<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 ii : removing IPSEC INBOUND policy
ANY:192.168.0.0/24:* -> ANY:192.168.20.12:*<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 K> : send pfkey X_SPDDELETE2 UNSPEC
message<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 DB : policy found<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 ii : removing IPSEC OUTBOUND policy
ANY:192.168.20.12:* -> ANY:192.168.0.0/24:*<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 K> : send pfkey X_SPDDELETE2 UNSPEC
message<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 K< : recv pfkey DELETE ESP message<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:50 ii : removed IPSEC policy route for
ANY:192.168.0.0/24:*<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:51 K< : recv pfkey DELETE ESP message<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:51 K< : recv pfkey X_SPDDELETE2 UNSPEC
message<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:51 DB : policy found<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:51 DB : policy deleted ( obj count = 1 )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:51 K< : recv pfkey X_SPDDELETE2 UNSPEC
message<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:51 DB : policy found<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:51 DB : policy deleted ( obj count = 0 )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:51 ii : disabled adapter ROOT\VNET\0000<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:51 DB : tunnel dpd event canceled ( ref count
= 3 )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:51 DB : tunnel natt event canceled ( ref
count = 2 )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:51 DB : tunnel stats event canceled ( ref
count = 1 )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:51 DB : removing tunnel config references<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:51 DB : removing tunnel phase2 references<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:51 DB : removing tunnel phase1 references<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:51 DB : tunnel deleted ( obj count = 0 )<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:51 DB : removing all peer tunnel refrences<o:p></o:p></p>
<p class=MsoNormal>10/03/26 14:12:51 DB : peer deleted ( obj count = 0 )<o:p></o:p></p>
<div style='mso-element:para-border-div;border:none;border-bottom:solid windowtext 1.0pt;
padding:0in 0in 1.0pt 0in'>
<p class=MsoNormal style='border:none;padding:0in'>10/03/26 14:12:51 ii : ipc
client process thread exit ...<o:p></o:p></p>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>crypto ipsec transform-set strong esp-3des esp-sha-hmac<o:p></o:p></p>
<p class=MsoNormal>crypto ipsec security-association lifetime seconds 28800<o:p></o:p></p>
<p class=MsoNormal>crypto ipsec security-association lifetime kilobytes 4608000<o:p></o:p></p>
<p class=MsoNormal>crypto dynamic-map dynMap 10 set transform-set strong<o:p></o:p></p>
<p class=MsoNormal>crypto dynamic-map dynMap 10 set reverse-route<o:p></o:p></p>
<p class=MsoNormal>crypto map cableMap 10 ipsec-isakmp dynamic dynMap<o:p></o:p></p>
<p class=MsoNormal>crypto map cableMap interface cable<o:p></o:p></p>
<p class=MsoNormal>crypto isakmp enable cable<o:p></o:p></p>
<p class=MsoNormal>crypto isakmp policy 10<o:p></o:p></p>
<p class=MsoNormal> authentication pre-share<o:p></o:p></p>
<p class=MsoNormal> encryption 3des<o:p></o:p></p>
<p class=MsoNormal> hash sha<o:p></o:p></p>
<p class=MsoNormal> group 2<o:p></o:p></p>
<p class=MsoNormal> lifetime 1000<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>group-policy vpnPolicy internal<o:p></o:p></p>
<p class=MsoNormal>group-policy vpnPolicy attributes<o:p></o:p></p>
<p class=MsoNormal> dns-server value 192.168.0.43<o:p></o:p></p>
<p class=MsoNormal> vpn-idle-timeout none<o:p></o:p></p>
<p class=MsoNormal> vpn-session-timeout none<o:p></o:p></p>
<p class=MsoNormal> split-tunnel-policy tunnelspecified<o:p></o:p></p>
<p class=MsoNormal> split-tunnel-network-list value split-tunnel<o:p></o:p></p>
<p class=MsoNormal> default-domain value domain.local<o:p></o:p></p>
<p class=MsoNormal> split-dns value domain.local<o:p></o:p></p>
<p class=MsoNormal>tunnel-group vpnGroup type remote-access<o:p></o:p></p>
<p class=MsoNormal>tunnel-group vpnGroup general-attributes<o:p></o:p></p>
<p class=MsoNormal> address-pool DM-VPN-POOL<o:p></o:p></p>
<p class=MsoNormal> authentication-server-group vpn<o:p></o:p></p>
<p class=MsoNormal> default-group-policy vpnPolicy<o:p></o:p></p>
<p class=MsoNormal>tunnel-group vpnGroup ipsec-attributes<o:p></o:p></p>
<p class=MsoNormal> pre-shared-key *<o:p></o:p></p>
<p class=MsoNormal> isakmp keepalive threshold 15 retry 10<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
</div>
</body>
</html>