System Log Current Time: Thu Mar 6 19:05:29 2008 ALL System Log Access Log Firewall Log VPN Log Time Event-Type Message Mar 6 18:56:48 2008 VPN Log Initiating Main Mode Mar 6 18:56:48 2008 VPN Log [Tunnel Negotiation Info] >>> Initiator Send Main Mode 1st packet Mar 6 18:56:50 2008 VPN Log Initiating Main Mode Mar 6 18:56:50 2008 VPN Log [Tunnel Negotiation Info] >>> Initiator Send Main Mode 1st packet Mar 6 18:57:03 2008 VPN Log [Tunnel Negotiation Info] <<< Responder Received Main Mode 1st packet Mar 6 18:57:03 2008 VPN Log [Tunnel Negotiation Info] >>> Responder Send Main Mode 2nd packet Mar 6 18:57:03 2008 VPN Log [Tunnel Negotiation Info] <<< Responder Received Main Mode 3rd packet Mar 6 18:57:03 2008 VPN Log [Tunnel Negotiation Info] >>> Responder send Main Mode 4th packet Mar 6 18:57:03 2008 VPN Log [Tunnel Negotiation Info] <<< Responder Received Main Mode 5th packet Mar 6 18:57:03 2008 VPN Log Main mode peer ID is ID_IPV4_ADDR: '65.100.43.210' Mar 6 18:57:03 2008 VPN Log [Tunnel Negotiation Info] >>> Responder Send Main Mode 6th packet Mar 6 18:57:03 2008 VPN Log [Tunnel Negotiation Info] Main Mode Phase 1 SA Established Mar 6 18:57:03 2008 VPN Log [Tunnel Negotiation Info] Initiator Cookies = f364 61ab 27bb fe73 Mar 6 18:57:03 2008 VPN Log [Tunnel Negotiation Info] Responder Cookies = e6fd bcea b38f 25b Mar 6 18:57:04 2008 VPN Log [Tunnel Negotiation Info] <<< Responder Received Quick Mode 1st packet Mar 6 18:57:04 2008 VPN Log [Tunnel Negotiation Info] Inbound SPI value = 889a2f38 Mar 6 18:57:04 2008 VPN Log [Tunnel Negotiation Info] Outbound SPI value = 770e3c84 Mar 6 18:57:04 2008 VPN Log [Tunnel Negotiation Info] >>> Responder send Quick Mode 2nd packet Mar 6 18:57:05 2008 VPN Log [Tunnel Negotiation Info] <<< Responder Received Quick Mode 3rd packet Mar 6 18:57:05 2008 VPN Log [Tunnel Negotiation Info] Quick Mode Phase 2 SA Established, IPSec Tunnel Connected Mar 6 18:57:21 2008 VPN Log Received Vendor ID payload Type = [MS NT5 ISAKMPOAKLEY 00000004] Mar 6 18:57:21 2008 VPN Log Ignoring Vendor ID payload Type = [FRAGMENTATION] Mar 6 18:57:21 2008 VPN Log Received Vendor ID payload Type = [draft-ietf-ipsec-nat-t-ike-02_n] Mar 6 18:57:21 2008 VPN Log [Tunnel Negotiation Info] <<< Initiator Received Main Mode 2nd packet Mar 6 18:57:21 2008 VPN Log Multiple ipsec.secrets entries with distinct secrets match endpoints: first secret used Mar 6 18:57:21 2008 VPN Log [Tunnel Negotiation Info] >>> Initiator send Main Mode 3rd packet Mar 6 18:57:21 2008 VPN Log [Tunnel Negotiation Info] <<< Initiator Received Main Mode 4th packet Mar 6 18:57:21 2008 VPN Log Multiple ipsec.secrets entries with distinct secrets match endpoints: first secret used Mar 6 18:57:21 2008 VPN Log [Tunnel Negotiation Info] >>> Initiator Send Main Mode 5th packet Mar 6 18:57:22 2008 VPN Log Discarding duplicate packet; already STATE_MAIN_I3 Mar 6 18:58:24 2008 VPN Log encrypted Informational Exchange message is invalid because it is for incomplete ISAKMP SA Mar 6 18:58:24 2008 VPN Log Received Vendor ID payload Type = [MS NT5 ISAKMPOAKLEY 00000004] Mar 6 18:58:24 2008 VPN Log Ignoring Vendor ID payload Type = [FRAGMENTATION] Mar 6 18:58:24 2008 VPN Log Received Vendor ID payload Type = [draft-ietf-ipsec-nat-t-ike-02_n] Mar 6 18:58:24 2008 VPN Log [Tunnel Negotiation Info] <<< Responder Received Main Mode 1st packet Mar 6 18:58:24 2008 VPN Log Multiple ipsec.secrets entries with distinct secrets match endpoints: first secret used Mar 6 18:58:24 2008 VPN Log [Tunnel Negotiation Info] >>> Responder Send Main Mode 2nd packet Mar 6 18:58:24 2008 VPN Log [Tunnel Negotiation Info] <<< Responder Received Main Mode 3rd packet Mar 6 18:58:24 2008 VPN Log Multiple ipsec.secrets entries with distinct secrets match endpoints: first secret used Mar 6 18:58:24 2008 VPN Log [Tunnel Negotiation Info] >>> Responder send Main Mode 4th packet Mar 6 18:58:24 2008 VPN Log probable authentication failure (mismatch of preshared secrets?): malformed payload in packet Mar 6 18:58:31 2008 VPN Log Initiating Main Mode to replace #332 Mar 6 18:58:31 2008 VPN Log [Tunnel Negotiation Info] >>> Initiator Send Main Mode 1st packet Mar 6 18:58:31 2008 VPN Log Received Vendor ID payload Type = [MS NT5 ISAKMPOAKLEY 00000004] Mar 6 18:58:31 2008 VPN Log Ignoring Vendor ID payload Type = [FRAGMENTATION] Mar 6 18:58:31 2008 VPN Log Received Vendor ID payload Type = [draft-ietf-ipsec-nat-t-ike-02_n] Mar 6 18:58:31 2008 VPN Log [Tunnel Negotiation Info] <<< Initiator Received Main Mode 2nd packet Mar 6 18:58:31 2008 VPN Log Multiple ipsec.secrets entries with distinct secrets match endpoints: first secret used Mar 6 18:58:31 2008 VPN Log [Tunnel Negotiation Info] >>> Initiator send Main Mode 3rd packet Mar 6 18:58:31 2008 VPN Log [Tunnel Negotiation Info] <<< Initiator Received Main Mode 4th packet Mar 6 18:58:31 2008 VPN Log Multiple ipsec.secrets entries with distinct secrets match endpoints: first secret used Mar 6 18:58:31 2008 VPN Log [Tunnel Negotiation Info] >>> Initiator Send Main Mode 5th packet Mar 6 18:58:32 2008 VPN Log Discarding duplicate packet; already STATE_MAIN_I3 Mar 6 18:58:39 2008 VPN Log probable authentication failure (mismatch of preshared secrets?): malformed payload in packet Mar 6 18:58:46 2008 VPN Log Discarding duplicate packet; already STATE_MAIN_I3 Mar 6 18:58:55 2008 VPN Log probable authentication failure (mismatch of preshared secrets?): malformed payload in packet Mar 6 18:59:02 2008 VPN Log Phase 1 message is part of an unknown exchange Mar 6 18:59:27 2008 VPN Log encrypted Informational Exchange message is invalid because it is for incomplete ISAKMP SA Mar 6 18:59:34 2008 VPN Log Informational Exchange is for an unknown (expired?) SA Mar 6 18:59:34 2008 VPN Log Received Vendor ID payload Type = [MS NT5 ISAKMPOAKLEY 00000004] Mar 6 18:59:34 2008 VPN Log Ignoring Vendor ID payload Type = [FRAGMENTATION] Mar 6 18:59:34 2008 VPN Log Received Vendor ID payload Type = [draft-ietf-ipsec-nat-t-ike-02_n] Mar 6 18:59:34 2008 VPN Log [Tunnel Negotiation Info] <<< Responder Received Main Mode 1st packet Mar 6 18:59:34 2008 VPN Log Multiple ipsec.secrets entries with distinct secrets match endpoints: first secret used Mar 6 18:59:34 2008 VPN Log [Tunnel Negotiation Info] >>> Responder Send Main Mode 2nd packet Mar 6 18:59:34 2008 VPN Log [Tunnel Negotiation Info] <<< Responder Received Main Mode 3rd packet Mar 6 18:59:34 2008 VPN Log Multiple ipsec.secrets entries with distinct secrets match endpoints: first secret used Mar 6 18:59:34 2008 VPN Log [Tunnel Negotiation Info] >>> Responder send Main Mode 4th packet Mar 6 18:59:34 2008 VPN Log probable authentication failure (mismatch of preshared secrets?): malformed payload in packet Mar 6 19:00:37 2008 VPN Log encrypted Informational Exchange message is invalid because it is for incomplete ISAKMP SA Mar 6 19:00:37 2008 VPN Log Received Vendor ID payload Type = [MS NT5 ISAKMPOAKLEY 00000004] Mar 6 19:00:37 2008 VPN Log Ignoring Vendor ID payload Type = [FRAGMENTATION] Mar 6 19:00:37 2008 VPN Log Received Vendor ID payload Type = [draft-ietf-ipsec-nat-t-ike-02_n] Mar 6 19:00:37 2008 VPN Log [Tunnel Negotiation Info] <<< Responder Received Main Mode 1st packet Mar 6 19:00:37 2008 VPN Log Multiple ipsec.secrets entries with distinct secrets match endpoints: first secret used Mar 6 19:00:37 2008 VPN Log [Tunnel Negotiation Info] >>> Responder Send Main Mode 2nd packet Mar 6 19:00:37 2008 VPN Log [Tunnel Negotiation Info] <<< Responder Received Main Mode 3rd packet Mar 6 19:00:37 2008 VPN Log Multiple ipsec.secrets entries with distinct secrets match endpoints: first secret used Mar 6 19:00:37 2008 VPN Log [Tunnel Negotiation Info] >>> Responder send Main Mode 4th packet Mar 6 19:00:37 2008 VPN Log probable authentication failure (mismatch of preshared secrets?): malformed payload in packet Mar 6 19:01:40 2008 VPN Log encrypted Informational Exchange message is invalid because it is for incomplete ISAKMP SA Mar 6 19:02:28 2008 VPN Log Received Vendor ID payload Type = [MS NT5 ISAKMPOAKLEY 00000004] Mar 6 19:02:28 2008 VPN Log Ignoring Vendor ID payload Type = [FRAGMENTATION] Mar 6 19:02:28 2008 VPN Log Received Vendor ID payload Type = [draft-ietf-ipsec-nat-t-ike-02_n] Mar 6 19:02:28 2008 VPN Log Ignoring Vendor ID payload [26244d38eddb61b3...] Mar 6 19:02:28 2008 VPN Log [Tunnel Negotiation Info] <<< Responder Received Main Mode 1st packet Mar 6 19:02:28 2008 VPN Log Multiple ipsec.secrets entries with distinct secrets match endpoints: first secret used Mar 6 19:02:28 2008 VPN Log [Tunnel Negotiation Info] >>> Responder Send Main Mode 2nd packet Mar 6 19:02:28 2008 VPN Log [Tunnel Negotiation Info] <<< Responder Received Main Mode 3rd packet Mar 6 19:02:28 2008 VPN Log Multiple ipsec.secrets entries with distinct secrets match endpoints: first secret used Mar 6 19:02:28 2008 VPN Log [Tunnel Negotiation Info] >>> Responder send Main Mode 4th packet Mar 6 19:02:28 2008 VPN Log probable authentication failure (mismatch of preshared secrets?): malformed payload in packet Mar 6 19:03:31 2008 VPN Log encrypted Informational Exchange message is invalid because it is for incomplete ISAKMP SA Mar 6 19:04:50 2008 VPN Log Initiating Main Mode Mar 6 19:04:50 2008 VPN Log [Tunnel Negotiation Info] >>> Initiator Send Main Mode 1st packet