<div dir="ltr">When connecting and receiving an IP via DHCP it fails everytime. Here are the logs. It seems if I downgrade it doesn't fix the problem but upgrading breaks it.<div><br></div><div><div>11/03/02 08:33:29 ## : IKE Daemon, ver 2.2.0</div>
<div>11/03/02 08:33:29 ## : Copyright 2009 Shrew Soft Inc.</div>
<div>11/03/02 08:33:29 ## : This product linked OpenSSL 0.9.8h 28 May 2008</div><div>11/03/02 10:33:16 ii : opened 'C:\Program Files\ShrewSoft\VPN Client\debug\iked.log'</div><div>11/03/02 10:33:16 ii : rebuilding vnet device list ...</div>
<div>11/03/02 10:33:16 ii : device ROOT\VNET\0000 disabled</div><div>11/03/02 10:33:16 ii : network process thread begin ...</div><div>11/03/02 10:33:16 ii : pfkey process thread begin ...</div><div>11/03/02 10:33:16 ii : ipc server process thread begin ...</div>
<div>11/03/02 10:33:34 ii : ipc client process thread begin ...</div><div>11/03/02 10:33:34 <A : peer config add message</div><div>11/03/02 10:33:34 <A : proposal config message</div><div>11/03/02 10:33:34 <A : proposal config message</div>
<div>11/03/02 10:33:34 <A : proposal config message</div><div>11/03/02 10:33:34 <A : client config message</div><div>11/03/02 10:33:34 <A : xauth username message</div><div>11/03/02 10:33:34 <A : xauth password message</div>
<div>11/03/02 10:33:34 <A : local id '<a href="http://noach.nbn.org.il" target="_blank">noach.nbn.org.il</a>' message</div><div>11/03/02 10:33:34 <A : remote id '<a href="http://sslvpn.nbn.org.il" target="_blank">sslvpn.nbn.org.il</a>' message</div>
<div>11/03/02 10:33:34 <A : preshared key message</div><div>11/03/02 10:33:34 <A : remote resource message</div><div>11/03/02 10:33:34 <A : remote resource message</div><div>11/03/02 10:33:34 <A : peer tunnel enable message</div>
<div>11/03/02 10:33:34 DB : peer added ( obj count = 1 )</div><div>11/03/02 10:33:34 ii : local address 192.168.17.11 selected for peer</div><div>11/03/02 10:33:34 DB : tunnel added ( obj count = 1 )</div><div>11/03/02 10:33:34 DB : new phase1 ( ISAKMP initiator )</div>
<div>11/03/02 10:33:34 DB : exchange type is aggressive</div><div>11/03/02 10:33:34 DB : <a href="http://192.168.17.11:500" target="_blank">192.168.17.11:500</a> <-> <a href="http://91.220.22.1:500" target="_blank">91.220.22.1:500</a></div>
<div>11/03/02 10:33:34 DB : 17e8a2d0eb223d05:0000000000000000</div>
<div>11/03/02 10:33:34 DB : phase1 added ( obj count = 1 )</div><div>11/03/02 10:33:34 >> : security association payload</div><div>11/03/02 10:33:34 >> : - proposal #1 payload </div><div>11/03/02 10:33:34 >> : -- transform #1 payload </div>
<div>11/03/02 10:33:34 >> : -- transform #2 payload </div><div>11/03/02 10:33:34 >> : -- transform #3 payload </div><div>11/03/02 10:33:34 >> : -- transform #4 payload </div><div>11/03/02 10:33:34 >> : -- transform #5 payload </div>
<div>11/03/02 10:33:34 >> : -- transform #6 payload </div><div>11/03/02 10:33:34 >> : -- transform #7 payload </div><div>11/03/02 10:33:34 >> : -- transform #8 payload </div><div>11/03/02 10:33:34 >> : -- transform #9 payload </div>
<div>11/03/02 10:33:34 >> : -- transform #10 payload </div><div>11/03/02 10:33:34 >> : -- transform #11 payload </div><div>11/03/02 10:33:34 >> : -- transform #12 payload </div><div>11/03/02 10:33:34 >> : -- transform #13 payload </div>
<div>11/03/02 10:33:34 >> : -- transform #14 payload </div><div>11/03/02 10:33:34 >> : -- transform #15 payload </div><div>11/03/02 10:33:34 >> : -- transform #16 payload </div><div>11/03/02 10:33:34 >> : -- transform #17 payload </div>
<div>11/03/02 10:33:34 >> : -- transform #18 payload </div><div>11/03/02 10:33:34 >> : key exchange payload</div><div>11/03/02 10:33:34 >> : nonce payload</div><div>11/03/02 10:33:34 >> : identification payload</div>
<div>11/03/02 10:33:34 >> : vendor id payload</div><div>11/03/02 10:33:34 ii : local supports XAUTH</div><div>11/03/02 10:33:34 >> : vendor id payload</div><div>11/03/02 10:33:34 ii : local supports nat-t ( draft v00 )</div>
<div>11/03/02 10:33:34 >> : vendor id payload</div><div>11/03/02 10:33:34 ii : local supports nat-t ( draft v01 )</div><div>11/03/02 10:33:34 >> : vendor id payload</div><div>11/03/02 10:33:34 ii : local supports nat-t ( draft v02 )</div>
<div>11/03/02 10:33:34 >> : vendor id payload</div><div>11/03/02 10:33:34 ii : local supports nat-t ( draft v03 )</div><div>11/03/02 10:33:34 >> : vendor id payload</div><div>11/03/02 10:33:34 ii : local supports nat-t ( rfc )</div>
<div>11/03/02 10:33:34 >> : vendor id payload</div><div>11/03/02 10:33:34 ii : local supports FRAGMENTATION</div><div>11/03/02 10:33:34 >> : vendor id payload</div><div>11/03/02 10:33:34 >> : vendor id payload</div>
<div>11/03/02 10:33:34 ii : local supports DPDv1</div><div>11/03/02 10:33:34 >> : vendor id payload</div><div>11/03/02 10:33:34 ii : local is SHREW SOFT compatible</div><div>11/03/02 10:33:34 >> : vendor id payload</div>
<div>11/03/02 10:33:34 ii : local is NETSCREEN compatible</div><div>11/03/02 10:33:34 >> : vendor id payload</div><div>11/03/02 10:33:34 ii : local is SIDEWINDER compatible</div><div>11/03/02 10:33:34 >> : vendor id payload</div>
<div>11/03/02 10:33:34 ii : local is CISCO UNITY compatible</div><div>11/03/02 10:33:34 >= : cookies 17e8a2d0eb223d05:0000000000000000</div><div>11/03/02 10:33:34 >= : message 00000000</div><div>11/03/02 10:33:34 -> : send IKE packet <a href="http://192.168.17.11:500" target="_blank">192.168.17.11:500</a> -> <a href="http://91.220.22.1:500" target="_blank">91.220.22.1:500</a> ( 1276 bytes )</div>
<div>11/03/02 10:33:34 DB : phase1 resend event scheduled ( ref count = 2 )</div><div>11/03/02 10:33:34 <- : recv IKE packet <a href="http://91.220.22.1:500" target="_blank">91.220.22.1:500</a> -> <a href="http://192.168.17.11:500" target="_blank">192.168.17.11:500</a> ( 441 bytes )</div>
<div>11/03/02 10:33:34 DB : phase1 found</div><div>11/03/02 10:33:34 ii : processing phase1 packet ( 441 bytes )</div><div>11/03/02 10:33:34 =< : cookies 17e8a2d0eb223d05:cf98755f2dc69bbc</div><div>11/03/02 10:33:34 =< : message 00000000</div>
<div>11/03/02 10:33:34 << : security association payload</div><div>11/03/02 10:33:34 << : - propsal #1 payload </div><div>11/03/02 10:33:34 << : -- transform #5 payload </div><div>11/03/02 10:33:34 ii : unmatched isakmp proposal/transform</div>
<div>11/03/02 10:33:34 ii : key length ( 128 != 256 )</div><div>11/03/02 10:33:34 ii : unmatched isakmp proposal/transform</div><div>11/03/02 10:33:34 ii : key length ( 128 != 256 )</div><div>11/03/02 10:33:34 ii : unmatched isakmp proposal/transform</div>
<div>11/03/02 10:33:34 ii : key length ( 128 != 192 )</div><div>11/03/02 10:33:34 ii : unmatched isakmp proposal/transform</div><div>11/03/02 10:33:34 ii : key length ( 128 != 192 )</div><div>11/03/02 10:33:34 ii : matched isakmp proposal #1 transform #5</div>
<div>11/03/02 10:33:34 ii : - transform = ike</div><div>11/03/02 10:33:34 ii : - cipher type = aes</div><div>11/03/02 10:33:34 ii : - key length = 128 bits</div><div>11/03/02 10:33:34 ii : - hash type = md5</div>
<div>11/03/02 10:33:34 ii : - dh group = group5 ( modp-1536 )</div><div>11/03/02 10:33:34 ii : - auth type = xauth-initiator-psk</div><div>11/03/02 10:33:34 ii : - life seconds = 28800</div><div>11/03/02 10:33:34 ii : - life kbytes = 0</div>
<div>11/03/02 10:33:34 << : key exchange payload</div><div>11/03/02 10:33:34 << : nonce payload</div><div>11/03/02 10:33:34 << : identification payload</div><div>11/03/02 10:33:34 ii : phase1 id match </div>
<div>11/03/02 10:33:34 ii : received = fqdn <a href="http://sslvpn.nbn.org.il" target="_blank">sslvpn.nbn.org.il</a></div><div>11/03/02 10:33:34 << : hash payload</div><div>11/03/02 10:33:34 << : vendor id payload</div>
<div>11/03/02 10:33:34 ii : peer supports nat-t ( rfc )</div>
<div>11/03/02 10:33:34 << : nat discovery payload</div><div>11/03/02 10:33:34 << : nat discovery payload</div><div>11/03/02 10:33:34 << : vendor id payload</div><div>11/03/02 10:33:34 ii : peer supports DPDv1</div>
<div>11/03/02 10:33:34 << : vendor id payload</div><div>11/03/02 10:33:34 ii : peer supports XAUTH</div><div>11/03/02 10:33:34 ii : nat discovery - local address is translated</div><div>11/03/02 10:33:34 ii : switching to src nat-t udp port 4500</div>
<div>11/03/02 10:33:34 ii : switching to dst nat-t udp port 4500</div><div>11/03/02 10:33:34 == : DH shared secret ( 192 bytes )</div><div>11/03/02 10:33:34 == : SETKEYID ( 16 bytes )</div><div>11/03/02 10:33:34 == : SETKEYID_d ( 16 bytes )</div>
<div>11/03/02 10:33:34 == : SETKEYID_a ( 16 bytes )</div><div>11/03/02 10:33:34 == : SETKEYID_e ( 16 bytes )</div><div>11/03/02 10:33:34 == : cipher key ( 16 bytes )</div><div>11/03/02 10:33:34 == : cipher iv ( 16 bytes )</div>
<div>11/03/02 10:33:34 == : phase1 hash_i ( computed ) ( 16 bytes )</div><div>11/03/02 10:33:34 >> : hash payload</div><div>11/03/02 10:33:34 >> : nat discovery payload</div><div>11/03/02 10:33:34 >> : nat discovery payload</div>
<div>11/03/02 10:33:34 >= : cookies 17e8a2d0eb223d05:cf98755f2dc69bbc</div><div>11/03/02 10:33:34 >= : message 00000000</div><div>11/03/02 10:33:34 >= : encrypt iv ( 16 bytes )</div><div>11/03/02 10:33:34 == : encrypt packet ( 88 bytes )</div>
<div>11/03/02 10:33:34 == : stored iv ( 16 bytes )</div><div>11/03/02 10:33:34 DB : phase1 resend event canceled ( ref count = 1 )</div><div>11/03/02 10:33:34 -> : send NAT-T:IKE packet <a href="http://192.168.17.11:4500" target="_blank">192.168.17.11:4500</a> -> <a href="http://91.220.22.1:4500" target="_blank">91.220.22.1:4500</a> ( 124 bytes )</div>
<div>11/03/02 10:33:34 == : phase1 hash_r ( computed ) ( 16 bytes )</div><div>11/03/02 10:33:34 == : phase1 hash_r ( received ) ( 16 bytes )</div><div>11/03/02 10:33:34 ii : phase1 sa established</div><div>11/03/02 10:33:34 ii : <a href="http://91.220.22.1:4500" target="_blank">91.220.22.1:4500</a> <-> <a href="http://192.168.17.11:4500" target="_blank">192.168.17.11:4500</a></div>
<div>11/03/02 10:33:34 ii : 17e8a2d0eb223d05:cf98755f2dc69bbc</div><div>11/03/02 10:33:34 ii : sending peer INITIAL-CONTACT notification</div><div>11/03/02 10:33:34 ii : - <a href="http://192.168.17.11:4500" target="_blank">192.168.17.11:4500</a> -> <a href="http://91.220.22.1:4500" target="_blank">91.220.22.1:4500</a></div>
<div>11/03/02 10:33:34 ii : - isakmp spi = 17e8a2d0eb223d05:cf98755f2dc69bbc</div><div>11/03/02 10:33:34 ii : - data size 0</div><div>11/03/02 10:33:34 >> : hash payload</div><div>11/03/02 10:33:34 >> : notification payload</div>
<div>11/03/02 10:33:34 == : new informational hash ( 16 bytes )</div><div>11/03/02 10:33:34 == : new informational iv ( 16 bytes )</div><div>11/03/02 10:33:34 >= : cookies 17e8a2d0eb223d05:cf98755f2dc69bbc</div><div>11/03/02 10:33:34 >= : message cb257f56</div>
<div>11/03/02 10:33:34 >= : encrypt iv ( 16 bytes )</div><div>11/03/02 10:33:34 == : encrypt packet ( 76 bytes )</div><div>11/03/02 10:33:34 == : stored iv ( 16 bytes )</div><div>11/03/02 10:33:34 -> : send NAT-T:IKE packet <a href="http://192.168.17.11:4500" target="_blank">192.168.17.11:4500</a> -> <a href="http://91.220.22.1:4500" target="_blank">91.220.22.1:4500</a> ( 108 bytes )</div>
<div>11/03/02 10:33:34 DB : phase2 not found</div><div>11/03/02 10:33:34 <- : recv NAT-T:IKE packet <a href="http://91.220.22.1:4500" target="_blank">91.220.22.1:4500</a> -> <a href="http://192.168.17.11:4500" target="_blank">192.168.17.11:4500</a> ( 76 bytes )</div>
<div>11/03/02 10:33:34 DB : phase1 found</div><div>11/03/02 10:33:34 ii : processing config packet ( 76 bytes )</div><div>11/03/02 10:33:34 DB : config not found</div><div>11/03/02 10:33:34 DB : config added ( obj count = 1 )</div>
<div>11/03/02 10:33:34 == : new config iv ( 16 bytes )</div><div>11/03/02 10:33:34 =< : cookies 17e8a2d0eb223d05:cf98755f2dc69bbc</div><div>11/03/02 10:33:34 =< : message 8d61cd4d</div><div>11/03/02 10:33:34 =< : decrypt iv ( 16 bytes )</div>
<div>11/03/02 10:33:34 == : decrypt packet ( 76 bytes )</div><div>11/03/02 10:33:34 <= : trimmed packet padding ( 8 bytes )</div><div>11/03/02 10:33:34 <= : stored iv ( 16 bytes )</div><div>11/03/02 10:33:34 << : hash payload</div>
<div>11/03/02 10:33:34 << : attribute payload</div><div>11/03/02 10:33:34 == : configure hash_i ( computed ) ( 16 bytes )</div><div>11/03/02 10:33:34 == : configure hash_c ( computed ) ( 16 bytes )</div><div>11/03/02 10:33:34 ii : configure hash verified</div>
<div>11/03/02 10:33:34 ii : - xauth authentication type</div><div>11/03/02 10:33:34 ii : - xauth username</div><div>11/03/02 10:33:34 ii : - xauth password</div><div>11/03/02 10:33:34 ii : received basic xauth request - </div>
<div>11/03/02 10:33:34 ii : - standard xauth username</div><div>11/03/02 10:33:34 ii : - standard xauth password</div><div>11/03/02 10:33:34 ii : sending xauth response for nsumner99</div><div>11/03/02 10:33:34 >> : hash payload</div>
<div>11/03/02 10:33:34 >> : attribute payload</div><div>11/03/02 10:33:34 == : new configure hash ( 16 bytes )</div><div>11/03/02 10:33:34 >= : cookies 17e8a2d0eb223d05:cf98755f2dc69bbc</div><div>11/03/02 10:33:34 >= : message 8d61cd4d</div>
<div>11/03/02 10:33:34 >= : encrypt iv ( 16 bytes )</div><div>11/03/02 10:33:34 == : encrypt packet ( 90 bytes )</div><div>11/03/02 10:33:34 == : stored iv ( 16 bytes )</div><div>11/03/02 10:33:34 -> : send NAT-T:IKE packet <a href="http://192.168.17.11:4500" target="_blank">192.168.17.11:4500</a> -> <a href="http://91.220.22.1:4500" target="_blank">91.220.22.1:4500</a> ( 124 bytes )</div>
<div>11/03/02 10:33:34 DB : config resend event scheduled ( ref count = 2 )</div><div>11/03/02 10:33:36 <- : recv NAT-T:IKE packet <a href="http://91.220.22.1:4500" target="_blank">91.220.22.1:4500</a> -> <a href="http://192.168.17.11:4500" target="_blank">192.168.17.11:4500</a> ( 76 bytes )</div>
<div>11/03/02 10:33:36 DB : phase1 found</div><div>11/03/02 10:33:36 ii : processing config packet ( 76 bytes )</div><div>11/03/02 10:33:36 DB : config found</div><div>11/03/02 10:33:36 =< : cookies 17e8a2d0eb223d05:cf98755f2dc69bbc</div>
<div>11/03/02 10:33:36 =< : message 8d61cd4d</div><div>11/03/02 10:33:36 =< : decrypt iv ( 16 bytes )</div><div>11/03/02 10:33:36 == : decrypt packet ( 76 bytes )</div><div>11/03/02 10:33:36 !! : validate packet failed ( reserved value is non-null )</div>
<div>11/03/02 10:33:36 !! : config packet ignored ( packet decryption error )</div><div>11/03/02 10:33:39 <- : recv NAT-T:IKE packet <a href="http://91.220.22.1:4500" target="_blank">91.220.22.1:4500</a> -> <a href="http://192.168.17.11:4500" target="_blank">192.168.17.11:4500</a> ( 92 bytes )</div>
<div>11/03/02 10:33:39 DB : phase1 found</div><div>11/03/02 10:33:39 ii : processing informational packet ( 92 bytes )</div><div>11/03/02 10:33:39 == : new informational iv ( 16 bytes )</div><div>11/03/02 10:33:39 =< : cookies 17e8a2d0eb223d05:cf98755f2dc69bbc</div>
<div>11/03/02 10:33:39 =< : message 1d588d5e</div><div>11/03/02 10:33:39 =< : decrypt iv ( 16 bytes )</div><div>11/03/02 10:33:39 == : decrypt packet ( 92 bytes )</div><div>11/03/02 10:33:39 <= : trimmed packet padding ( 12 bytes )</div>
<div>11/03/02 10:33:39 <= : stored iv ( 16 bytes )</div><div>11/03/02 10:33:39 << : hash payload</div><div>11/03/02 10:33:39 << : notification payload</div><div>11/03/02 10:33:39 == : informational hash_i ( computed ) ( 16 bytes )</div>
<div>11/03/02 10:33:39 == : informational hash_c ( received ) ( 16 bytes )</div><div>11/03/02 10:33:39 ii : informational hash verified</div><div>11/03/02 10:33:39 ii : received peer DPDV1-R-U-THERE notification</div><div>
11/03/02 10:33:39 ii : - <a href="http://91.220.22.1:4500" target="_blank">91.220.22.1:4500</a> -> <a href="http://192.168.17.11:4500" target="_blank">192.168.17.11:4500</a></div><div>11/03/02 10:33:39 ii : - isakmp spi = 17e8a2d0eb223d05:cf98755f2dc69bbc</div>
<div>11/03/02 10:33:39 ii : - data size 4</div><div>11/03/02 10:33:39 ii : sending peer DPDV1-R-U-THERE-ACK notification</div><div>11/03/02 10:33:39 ii : - <a href="http://192.168.17.11:4500" target="_blank">192.168.17.11:4500</a> -> <a href="http://91.220.22.1:4500" target="_blank">91.220.22.1:4500</a></div>
<div>11/03/02 10:33:39 ii : - isakmp spi = 17e8a2d0eb223d05:cf98755f2dc69bbc</div><div>11/03/02 10:33:39 ii : - data size 4</div><div>11/03/02 10:33:39 >> : hash payload</div><div>11/03/02 10:33:39 >> : notification payload</div>
<div>11/03/02 10:33:39 == : new informational hash ( 16 bytes )</div><div>11/03/02 10:33:39 == : new informational iv ( 16 bytes )</div><div>11/03/02 10:33:39 >= : cookies 17e8a2d0eb223d05:cf98755f2dc69bbc</div><div>11/03/02 10:33:39 >= : message 816f7bdf</div>
<div>11/03/02 10:33:39 >= : encrypt iv ( 16 bytes )</div><div>11/03/02 10:33:39 == : encrypt packet ( 80 bytes )</div><div>11/03/02 10:33:39 == : stored iv ( 16 bytes )</div><div>11/03/02 10:33:39 -> : send NAT-T:IKE packet <a href="http://192.168.17.11:4500" target="_blank">192.168.17.11:4500</a> -> <a href="http://91.220.22.1:4500" target="_blank">91.220.22.1:4500</a> ( 124 bytes )</div>
<div>11/03/02 10:33:39 ii : DPD ARE-YOU-THERE sequence 00000001 returned</div><div>11/03/02 10:33:39 -> : resend 1 config packet(s) [0/2] <a href="http://192.168.17.11:4500" target="_blank">192.168.17.11:4500</a> -> <a href="http://91.220.22.1:4500" target="_blank">91.220.22.1:4500</a></div>
<div>11/03/02 10:33:40 <- : recv NAT-T:IKE packet <a href="http://91.220.22.1:4500" target="_blank">91.220.22.1:4500</a> -> <a href="http://192.168.17.11:4500" target="_blank">192.168.17.11:4500</a> ( 76 bytes )</div>
<div>11/03/02 10:33:40 DB : phase1 found</div>
<div>11/03/02 10:33:40 ii : processing config packet ( 76 bytes )</div><div>11/03/02 10:33:40 DB : config found</div><div>11/03/02 10:33:40 == : new config iv ( 16 bytes )</div><div>11/03/02 10:33:40 =< : cookies 17e8a2d0eb223d05:cf98755f2dc69bbc</div>
<div>11/03/02 10:33:40 =< : message 6d1ec2af</div><div>11/03/02 10:33:40 =< : decrypt iv ( 16 bytes )</div><div>11/03/02 10:33:40 == : decrypt packet ( 76 bytes )</div><div>11/03/02 10:33:40 <= : trimmed packet padding ( 16 bytes )</div>
<div>11/03/02 10:33:40 <= : stored iv ( 16 bytes )</div><div>11/03/02 10:33:40 << : hash payload</div><div>11/03/02 10:33:40 << : attribute payload</div><div>11/03/02 10:33:40 == : configure hash_i ( computed ) ( 16 bytes )</div>
<div>11/03/02 10:33:40 == : configure hash_c ( computed ) ( 16 bytes )</div><div>11/03/02 10:33:40 ii : configure hash verified</div><div>11/03/02 10:33:40 ii : received xauth result - </div><div>11/03/02 10:33:40 ii : user nsumner99 authentication succeeded</div>
<div>11/03/02 10:33:40 ii : sending xauth acknowledge</div><div>11/03/02 10:33:40 >> : hash payload</div><div>11/03/02 10:33:40 >> : attribute payload</div><div>11/03/02 10:33:40 == : new configure hash ( 16 bytes )</div>
<div>11/03/02 10:33:40 >= : cookies 17e8a2d0eb223d05:cf98755f2dc69bbc</div><div>11/03/02 10:33:40 >= : message 6d1ec2af</div><div>11/03/02 10:33:40 >= : encrypt iv ( 16 bytes )</div><div>11/03/02 10:33:40 == : encrypt packet ( 56 bytes )</div>
<div>11/03/02 10:33:40 == : stored iv ( 16 bytes )</div><div>11/03/02 10:33:40 DB : config resend event canceled ( ref count = 1 )</div><div>11/03/02 10:33:40 -> : send NAT-T:IKE packet <a href="http://192.168.17.11:4500" target="_blank">192.168.17.11:4500</a> -> <a href="http://91.220.22.1:4500" target="_blank">91.220.22.1:4500</a> ( 92 bytes )</div>
<div>11/03/02 10:33:40 DB : config resend event scheduled ( ref count = 2 )</div><div>11/03/02 10:33:40 ii : configuration method is DHCP over IPsec </div><div>11/03/02 10:33:40 ii : setup DHCP socket for address 192.168.17.11</div>
<div>11/03/02 10:33:40 ii : creating IPsec over DHCP policies</div><div>11/03/02 10:33:40 ii : creating IPSEC INBOUND policy UDP:<a href="http://91.220.22.1:67" target="_blank">91.220.22.1:67</a> -> UDP:<a href="http://192.168.17.11:67" target="_blank">192.168.17.11:67</a></div>
<div>11/03/02 10:33:40 DB : policy added ( obj count = 1 )</div><div>11/03/02 10:33:40 K> : send pfkey X_SPDADD UNSPEC message</div><div>11/03/02 10:33:40 K< : recv pfkey X_SPDADD UNSPEC message</div><div>11/03/02 10:33:40 DB : policy found</div>
<div>11/03/02 10:33:40 ii : creating IPSEC OUTBOUND policy UDP:<a href="http://192.168.17.11:67" target="_blank">192.168.17.11:67</a> -> UDP:<a href="http://91.220.22.1:67" target="_blank">91.220.22.1:67</a></div><div>
11/03/02 10:33:40 DB : policy added ( obj count = 2 )</div>
<div>11/03/02 10:33:40 K> : send pfkey X_SPDADD UNSPEC message</div><div>11/03/02 10:33:40 DB : config resend event canceled ( ref count = 1 )</div><div>11/03/02 10:33:40 K< : recv pfkey X_SPDADD UNSPEC message</div>
<div>11/03/02 10:33:40 DB : policy found</div><div>11/03/02 10:33:41 ii : sending DHCP over IPsec discover</div><div>11/03/02 10:33:41 K< : recv pfkey ACQUIRE UNSPEC message</div><div>11/03/02 10:33:41 DB : policy found</div>
<div>11/03/02 10:33:41 DB : policy found</div><div>11/03/02 10:33:41 DB : tunnel found</div><div>11/03/02 10:33:41 DB : new phase2 ( IPSEC initiator )</div><div>11/03/02 10:33:41 DB : phase2 added ( obj count = 1 )</div>
<div>
11/03/02 10:33:41 K> : send pfkey GETSPI ESP message</div><div>11/03/02 10:33:41 K< : recv pfkey GETSPI ESP message</div><div>11/03/02 10:33:41 DB : phase2 found</div><div>11/03/02 10:33:41 ii : updated spi for 1 ipsec-esp proposal</div>
<div>11/03/02 10:33:41 DB : phase1 found</div><div>11/03/02 10:33:41 >> : hash payload</div><div>11/03/02 10:33:41 >> : security association payload</div><div>11/03/02 10:33:41 >> : - proposal #1 payload </div>
<div>11/03/02 10:33:41 >> : -- transform #1 payload </div><div>11/03/02 10:33:41 >> : -- transform #2 payload </div><div>11/03/02 10:33:41 >> : -- transform #3 payload </div><div>11/03/02 10:33:41 >> : -- transform #4 payload </div>
<div>11/03/02 10:33:41 >> : -- transform #5 payload </div><div>11/03/02 10:33:41 >> : -- transform #6 payload </div><div>11/03/02 10:33:41 >> : -- transform #7 payload </div><div>11/03/02 10:33:41 >> : -- transform #8 payload </div>
<div>11/03/02 10:33:41 >> : -- transform #9 payload </div><div>11/03/02 10:33:41 >> : -- transform #10 payload </div><div>11/03/02 10:33:41 >> : -- transform #11 payload </div><div>11/03/02 10:33:41 >> : -- transform #12 payload </div>
<div>11/03/02 10:33:41 >> : -- transform #13 payload </div><div>11/03/02 10:33:41 >> : -- transform #14 payload </div><div>11/03/02 10:33:41 >> : -- transform #15 payload </div><div>11/03/02 10:33:41 >> : -- transform #16 payload </div>
<div>11/03/02 10:33:41 >> : -- transform #17 payload </div><div>11/03/02 10:33:41 >> : -- transform #18 payload </div><div>11/03/02 10:33:41 >> : -- transform #19 payload </div><div>11/03/02 10:33:41 >> : -- transform #20 payload </div>
<div>11/03/02 10:33:41 >> : -- transform #21 payload </div><div>11/03/02 10:33:41 >> : -- transform #22 payload </div><div>11/03/02 10:33:41 >> : -- transform #23 payload </div><div>11/03/02 10:33:41 >> : -- transform #24 payload </div>
<div>11/03/02 10:33:41 >> : -- transform #25 payload </div><div>11/03/02 10:33:41 >> : -- transform #26 payload </div><div>11/03/02 10:33:41 >> : -- transform #27 payload </div><div>11/03/02 10:33:41 >> : -- transform #28 payload </div>
<div>11/03/02 10:33:41 >> : -- transform #29 payload </div><div>11/03/02 10:33:41 >> : -- transform #30 payload </div><div>11/03/02 10:33:41 >> : -- transform #31 payload </div><div>11/03/02 10:33:41 >> : -- transform #32 payload </div>
<div>11/03/02 10:33:41 >> : -- transform #33 payload </div><div>11/03/02 10:33:41 >> : -- transform #34 payload </div><div>11/03/02 10:33:41 >> : -- transform #35 payload </div><div>11/03/02 10:33:41 >> : -- transform #36 payload </div>
<div>11/03/02 10:33:41 >> : -- transform #37 payload </div><div>11/03/02 10:33:41 >> : -- transform #38 payload </div><div>11/03/02 10:33:41 >> : -- transform #39 payload </div><div>11/03/02 10:33:41 >> : -- transform #40 payload </div>
<div>11/03/02 10:33:41 >> : -- transform #41 payload </div><div>11/03/02 10:33:41 >> : -- transform #42 payload </div><div>11/03/02 10:33:41 >> : -- transform #43 payload </div><div>11/03/02 10:33:41 >> : -- transform #44 payload </div>
<div>11/03/02 10:33:41 >> : -- transform #45 payload </div><div>11/03/02 10:33:41 >> : nonce payload</div><div>11/03/02 10:33:41 >> : key exchange payload</div><div>11/03/02 10:33:41 >> : identification payload</div>
<div>11/03/02 10:33:41 >> : identification payload</div><div>11/03/02 10:33:41 == : phase2 hash_i ( input ) ( 1832 bytes )</div><div>11/03/02 10:33:41 == : phase2 hash_i ( computed ) ( 16 bytes )</div><div>11/03/02 10:33:41 == : new phase2 iv ( 16 bytes )</div>
<div>11/03/02 10:33:41 >= : cookies 17e8a2d0eb223d05:cf98755f2dc69bbc</div><div>11/03/02 10:33:41 >= : message 8a060501</div><div>11/03/02 10:33:41 >= : encrypt iv ( 16 bytes )</div><div>11/03/02 10:33:41 == : encrypt packet ( 1876 bytes )</div>
<div>11/03/02 10:33:41 == : stored iv ( 16 bytes )</div><div>11/03/02 10:33:41 -> : send NAT-T:IKE packet <a href="http://192.168.17.11:4500" target="_blank">192.168.17.11:4500</a> -> <a href="http://91.220.22.1:4500" target="_blank">91.220.22.1:4500</a> ( 1916 bytes )</div>
<div>11/03/02 10:33:41 ii : fragmented packet to 1514 bytes ( MTU 1500 bytes )</div><div>11/03/02 10:33:41 ii : fragmented packet to 450 bytes ( MTU 1500 bytes )</div><div>11/03/02 10:33:41 DB : phase2 resend event scheduled ( ref count = 2 )</div>
<div>11/03/02 10:33:42 ii : sending DHCP over IPsec discover</div><div>11/03/02 10:33:43 ii : sending DHCP over IPsec discover</div><div>11/03/02 10:33:44 ii : sending DHCP over IPsec discover</div><div>11/03/02 10:33:44 <- : recv NAT-T:IKE packet <a href="http://91.220.22.1:4500" target="_blank">91.220.22.1:4500</a> -> <a href="http://192.168.17.11:4500" target="_blank">192.168.17.11:4500</a> ( 92 bytes )</div>
<div>11/03/02 10:33:44 DB : phase1 found</div><div>11/03/02 10:33:44 ii : processing informational packet ( 92 bytes )</div><div>11/03/02 10:33:44 == : new informational iv ( 16 bytes )</div><div>11/03/02 10:33:44 =< : cookies 17e8a2d0eb223d05:cf98755f2dc69bbc</div>
<div>11/03/02 10:33:44 =< : message 938a35a3</div><div>11/03/02 10:33:44 =< : decrypt iv ( 16 bytes )</div><div>11/03/02 10:33:44 == : decrypt packet ( 92 bytes )</div><div>11/03/02 10:33:44 <= : trimmed packet padding ( 12 bytes )</div>
<div>11/03/02 10:33:44 <= : stored iv ( 16 bytes )</div><div>11/03/02 10:33:44 << : hash payload</div><div>11/03/02 10:33:44 << : notification payload</div><div>11/03/02 10:33:44 == : informational hash_i ( computed ) ( 16 bytes )</div>
<div>11/03/02 10:33:44 == : informational hash_c ( received ) ( 16 bytes )</div><div>11/03/02 10:33:44 ii : informational hash verified</div><div>11/03/02 10:33:44 ii : received peer DPDV1-R-U-THERE notification</div><div>
11/03/02 10:33:44 ii : - <a href="http://91.220.22.1:4500" target="_blank">91.220.22.1:4500</a> -> <a href="http://192.168.17.11:4500" target="_blank">192.168.17.11:4500</a></div><div>11/03/02 10:33:44 ii : - isakmp spi = 17e8a2d0eb223d05:cf98755f2dc69bbc</div>
<div>11/03/02 10:33:44 ii : - data size 4</div><div>11/03/02 10:33:44 ii : sending peer DPDV1-R-U-THERE-ACK notification</div><div>11/03/02 10:33:44 ii : - <a href="http://192.168.17.11:4500" target="_blank">192.168.17.11:4500</a> -> <a href="http://91.220.22.1:4500" target="_blank">91.220.22.1:4500</a></div>
<div>11/03/02 10:33:44 ii : - isakmp spi = 17e8a2d0eb223d05:cf98755f2dc69bbc</div><div>11/03/02 10:33:44 ii : - data size 4</div><div>11/03/02 10:33:44 >> : hash payload</div><div>11/03/02 10:33:44 >> : notification payload</div>
<div>11/03/02 10:33:44 == : new informational hash ( 16 bytes )</div><div>11/03/02 10:33:44 == : new informational iv ( 16 bytes )</div><div>11/03/02 10:33:44 >= : cookies 17e8a2d0eb223d05:cf98755f2dc69bbc</div><div>11/03/02 10:33:44 >= : message d9fdad07</div>
<div>11/03/02 10:33:44 >= : encrypt iv ( 16 bytes )</div><div>11/03/02 10:33:44 == : encrypt packet ( 80 bytes )</div><div>11/03/02 10:33:44 == : stored iv ( 16 bytes )</div><div>11/03/02 10:33:44 -> : send NAT-T:IKE packet <a href="http://192.168.17.11:4500" target="_blank">192.168.17.11:4500</a> -> <a href="http://91.220.22.1:4500" target="_blank">91.220.22.1:4500</a> ( 124 bytes )</div>
<div>11/03/02 10:33:44 ii : DPD ARE-YOU-THERE sequence 00000002 returned</div><div>11/03/02 10:33:45 ii : sending DHCP over IPsec discover</div><div>11/03/02 10:33:46 ii : sending DHCP over IPsec discover</div><div>11/03/02 10:33:46 ii : fragmented packet to 1514 bytes ( MTU 1500 bytes )</div>
<div>11/03/02 10:33:46 ii : fragmented packet to 450 bytes ( MTU 1500 bytes )</div><div>11/03/02 10:33:46 -> : resend 1 phase2 packet(s) [0/2] <a href="http://192.168.17.11:4500" target="_blank">192.168.17.11:4500</a> -> <a href="http://91.220.22.1:4500" target="_blank">91.220.22.1:4500</a></div>
<div>11/03/02 10:33:47 ii : sending DHCP over IPsec discover</div><div>11/03/02 10:33:48 DB : policy not found</div><div>11/03/02 10:33:48 DB : policy not found</div><div>11/03/02 10:33:48 DB : policy not found</div><div>
11/03/02 10:33:48 DB : policy not found</div><div>11/03/02 10:33:48 DB : policy not found</div><div>11/03/02 10:33:48 DB : policy not found</div><div>11/03/02 10:33:48 DB : policy not found</div><div>11/03/02 10:33:48 DB : policy not found</div>
<div>11/03/02 10:33:48 ii : removing IPsec over DHCP policies</div><div>11/03/02 10:33:48 DB : policy found</div><div>11/03/02 10:33:48 ii : removing IPSEC INBOUND policy UDP:<a href="http://91.220.22.1:67" target="_blank">91.220.22.1:67</a> -> UDP:<a href="http://192.168.17.11:67" target="_blank">192.168.17.11:67</a></div>
<div>11/03/02 10:33:48 K> : send pfkey X_SPDDELETE2 UNSPEC message</div><div>11/03/02 10:33:48 DB : policy found</div><div>11/03/02 10:33:48 ii : removing IPSEC OUTBOUND policy UDP:<a href="http://192.168.17.11:67" target="_blank">192.168.17.11:67</a> -> UDP:<a href="http://91.220.22.1:67" target="_blank">91.220.22.1:67</a></div>
<div>11/03/02 10:33:48 K> : send pfkey X_SPDDELETE2 UNSPEC message</div><div>11/03/02 10:33:48 K< : recv pfkey X_SPDDELETE2 UNSPEC message</div><div>11/03/02 10:33:48 DB : policy found</div><div>11/03/02 10:33:48 DB : policy deleted ( obj count = 1 )</div>
<div>11/03/02 10:33:48 K< : recv pfkey X_SPDDELETE2 UNSPEC message</div><div>11/03/02 10:33:48 DB : policy found</div><div>11/03/02 10:33:48 DB : policy deleted ( obj count = 0 )</div><div>11/03/02 10:33:48 DB : tunnel dpd event canceled ( ref count = 5 )</div>
<div>11/03/02 10:33:48 DB : tunnel natt event canceled ( ref count = 4 )</div><div>11/03/02 10:33:48 DB : removing tunnel config references</div><div>11/03/02 10:33:48 DB : config deleted ( obj count = 0 )</div><div>11/03/02 10:33:48 DB : removing tunnel phase2 references</div>
<div>11/03/02 10:33:48 DB : phase2 resend event canceled ( ref count = 1 )</div><div>11/03/02 10:33:48 ii : phase2 removal before expire time</div><div>11/03/02 10:33:48 DB : phase2 deleted ( obj count = 0 )</div><div>11/03/02 10:33:48 DB : removing tunnel phase1 references</div>
<div>11/03/02 10:33:48 DB : phase1 soft event canceled ( ref count = 3 )</div><div>11/03/02 10:33:48 DB : phase1 hard event canceled ( ref count = 2 )</div><div>11/03/02 10:33:48 DB : phase1 dead event canceled ( ref count = 1 )</div>
<div>11/03/02 10:33:48 ii : sending peer DELETE message</div><div>11/03/02 10:33:48 ii : - <a href="http://192.168.17.11:4500" target="_blank">192.168.17.11:4500</a> -> <a href="http://91.220.22.1:4500" target="_blank">91.220.22.1:4500</a></div>
<div>
11/03/02 10:33:48 ii : - isakmp spi = 17e8a2d0eb223d05:cf98755f2dc69bbc</div><div>11/03/02 10:33:48 ii : - data size 0</div><div>11/03/02 10:33:48 >> : hash payload</div><div>11/03/02 10:33:48 >> : delete payload</div>
<div>11/03/02 10:33:48 == : new informational hash ( 16 bytes )</div><div>11/03/02 10:33:48 == : new informational iv ( 16 bytes )</div><div>11/03/02 10:33:48 >= : cookies 17e8a2d0eb223d05:cf98755f2dc69bbc</div><div>11/03/02 10:33:48 >= : message e2a5af73</div>
<div>11/03/02 10:33:48 >= : encrypt iv ( 16 bytes )</div><div>11/03/02 10:33:48 == : encrypt packet ( 76 bytes )</div><div>11/03/02 10:33:48 == : stored iv ( 16 bytes )</div><div>11/03/02 10:33:48 -> : send NAT-T:IKE packet <a href="http://192.168.17.11:4500" target="_blank">192.168.17.11:4500</a> -> <a href="http://91.220.22.1:4500" target="_blank">91.220.22.1:4500</a> ( 108 bytes )</div>
<div>11/03/02 10:33:48 ii : phase1 removal before expire time</div><div>11/03/02 10:33:48 DB : phase1 deleted ( obj count = 0 )</div><div>11/03/02 10:33:48 DB : tunnel deleted ( obj count = 0 )</div><div>11/03/02 10:33:48 DB : removing all peer tunnel refrences</div>
<div>11/03/02 10:33:48 DB : peer deleted ( obj count = 0 )</div><div>11/03/02 10:33:48 ii : ipc client process thread exit ...</div></div><div><br></div></div>