Главная страница
О проекте Навигация Контакт
Поиск


ru.cisco

 
 - RU.CISCO ---------------------------------------------------------------------
 From : Vladimir Litovka                     2:5020/400     22 May 2003  12:24:16
 To : All
 Subject : IPSec/IKE question
 -------------------------------------------------------------------------------- 
 
 Hi,
 
 тут проблема, я не могу понять, почему ISAKMP не устанавливает SA. Вроде бы 
 по логам все в порядке, но вдруг от пира приходит NOTIFY INITIAL_CONTACT и 
 система начинает заново. Потом начинаются какие-то retransmits и опа, 
 Security Association не устанавливается.
 
 Лог слишком большой, вот из него фрагменты с комментариями, помеченными 
 знаками '!'. Если есть какие-то идеи, буду весьма признателен :-)
 
 May 22 11:11:33.379: ISAKMP (0:88): Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM
 May 22 11:11:33.379: ISAKMP (0:88): Old State = IKE_READY  New State = 
 IKE_I_MM1
 
 May 22 11:11:33.379: ISAKMP (0:88): beginning Main Mode exchange
 May 22 11:11:33.379: ISAKMP (0:88): sending packet to 195.94.218.146 
 my_port 500 peer_port 500 (I) MM_NO_STATE
 May 22 11:11:33.687: ISAKMP (0:88): received packet from 195.94.218.146 
 dport 500 sport 500 (I) MM_NO_STATE
 May 22 11:11:33.691: ISAKMP (0:88): Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
 May 22 11:11:33.691: ISAKMP (0:88): Old State = IKE_I_MM1  New State = 
 IKE_I_MM2
 
 May 22 11:11:33.691: ISAKMP (0:88): processing SA payload. message ID = 0
 May 22 11:11:33.691: ISAKMP (0:88): found peer pre-shared key matching 
 195.94.218.146
 May 22 11:11:33.691: ISAKMP (0:88) local preshared key found
 May 22 11:11:33.691: ISAKMP (0:88): Checking ISAKMP transform 1 against 
 priority 1 policy
 May 22 11:11:33.691: ISAKMP:      encryption 3DES-CBC
 May 22 11:11:33.691: ISAKMP:      hash SHA
 May 22 11:11:33.691: ISAKMP:      auth pre-share
 May 22 11:11:33.691: ISAKMP:      default group 2
 May 22 11:11:33.691: ISAKMP:      life type in seconds
 May 22 11:11:33.691: ISAKMP:      life duration (basic) of 28800
 May 22 11:11:33.691: ISAKMP (0:88): atts are acceptable. Next payload is 0
 May 22 11:11:33.711: ISAKMP (0:88): Input = IKE_MESG_INTERNAL, 
 IKE_PROCESS_MAIN_MODE
 May 22 11:11:33.711: ISAKMP (0:88): Old State = IKE_I_MM2  New State = 
 IKE_I_MM2
 
 May 22 11:11:33.711: ISAKMP (0:88): sending packet to 195.94.218.146 
 my_port 500 peer_port 500 (I) MM_SA_SETUP
 May 22 11:11:33.711: ISAKMP (0:88): Input = IKE_MESG_INTERNAL, 
 IKE_PROCESS_COMPLETE
 May 22 11:11:33.711: ISAKMP (0:88): Old State = IKE_I_MM2  New State = 
 IKE_I_MM3
 
 May 22 11:11:34.035: ISAKMP (0:88): received packet from 195.94.218.146 
 dport 500 sport 500 (I) MM_SA_SETUP
 May 22 11:11:34.039: ISAKMP (0:88): Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
 May 22 11:11:34.039: ISAKMP (0:88): Old State = IKE_I_MM3  New State = 
 IKE_I_MM4
 
 May 22 11:11:34.039: ISAKMP (0:88): processing KE payload. message ID = 0
 May 22 11:11:34.055: ISAKMP (0:88): processing NONCE payload. message ID = 0
 May 22 11:11:34.055: ISAKMP (0:88): found peer pre-shared key matching 
 195.94.218.146
 May 22 11:11:34.055: ISAKMP (0:88): found peer pre-shared key matching 
 195.94.218.146
 May 22 11:11:34.059: ISAKMP (0:88): SKEYID state generated
 May 22 11:11:34.059: ISAKMP (0:88): processing vendor id payload
 May 22 11:11:34.059: ISAKMP (0:88): vendor ID seems Unity/DPD but bad major
 May 22 11:11:34.059: ISAKMP (0:88): Input = IKE_MESG_INTERNAL, 
 IKE_PROCESS_MAIN_MODE
 May 22 11:11:34.059: ISAKMP (0:88): Old State = IKE_I_MM4  New State = 
 IKE_I_MM4
 
 May 22 11:11:34.059: ISAKMP (0:88): Send initial contact
 May 22 11:11:34.059: ISAKMP (0:88): SA is doing pre-shared key 
 authentication using id type ID_FQDN
 May 22 11:11:34.059: ISAKMP (88): ID payload
          next-payload : 8
          type         : 2
          FQDN name    : krot.sovam.net.ua
          protocol     : 17
          port         : 0
          length       : 21
 May 22 11:11:34.059: ISAKMP (88): Total payload length: 25
 May 22 11:11:34.063: ISAKMP (0:88): sending packet to 195.94.218.146 
 my_port 500 peer_port 500 (I) MM_KEY_EXCH
 May 22 11:11:34.063: ISAKMP (0:88): Input = IKE_MESG_INTERNAL, 
 IKE_PROCESS_COMPLETE
 May 22 11:11:34.063: ISAKMP (0:88): Old State = IKE_I_MM4  New State = 
 IKE_I_MM5
 
 May 22 11:11:34.307: ISAKMP (0:88): received packet from 195.94.218.146 
 dport 500 sport 500 (I) MM_KEY_EXCH
 May 22 11:11:34.307: ISAKMP (0:88): Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
 May 22 11:11:34.307: ISAKMP (0:88): Old State = IKE_I_MM5  New State = 
 IKE_I_MM6
 
 May 22 11:11:34.307: ISAKMP (0:88): processing ID payload. message ID = 0
 May 22 11:11:34.307: ISAKMP (0:88): processing HASH payload. message ID = 0
 May 22 11:11:34.307: ISAKMP (0:88): processing NOTIFY INITIAL_CONTACT 
 protocol 1 spi 0, message ID = 0, sa = 63E4D190
 
 !!!!!!!!!! до этого момента все вроде нормально, но почему-то
 !!!!!!!!!! со стороны peer'а приходит INITIAL_CONTACT
 !!!!!!!!!! и после этого система идет вразнос - ниже кроме сообщений о
 !!!!!!!!!! retransmit и прочих errors уже ничего нет.
 !!!!!!!!!! В какую сторону копать? Параметры одинаковые на обоих сторонах,
 !!!!!!!!!! но там стоит какой-то девайс NOKIA CC500
 
 May 22 11:11:34.307: ISAKMP (0:88): Process initial contact,
 bring down existing phase 1 and 2 SA's with local 212.109.47.37 remote 
 195.94.218.146 remote port 500
 May 22 11:11:34.307: ISAKMP (0:88): SA has been authenticated with 
 195.94.218.146
 May 22 11:11:34.307: ISAKMP (0:88): Input = IKE_MESG_INTERNAL, 
 IKE_PROCESS_MAIN_MODE
 May 22 11:11:34.307: ISAKMP (0:88): Old State = IKE_I_MM6  New State = 
 IKE_I_MM6
 
 May 22 11:11:34.307: IPSEC(key_engine): got a queue event...
 May 22 11:11:34.311: ISAKMP (0:88): Input = IKE_MESG_INTERNAL, 
 IKE_PROCESS_COMPLETE
 May 22 11:11:34.311: ISAKMP (0:88): Old State = IKE_I_MM6  New State = 
 IKE_P1_COMPLETE
 
 May 22 11:11:34.311: ISAKMP (0:88): beginning Quick Mode exchange, M-ID of 
 -448498841
 May 22 11:11:34.335: ISAKMP (0:88): sending packet to 195.94.218.146 
 my_port 500 peer_port 500 (I) QM_IDLE
 May 22 11:11:34.335: ISAKMP (0:88): Node -448498841, Input = 
 IKE_MESG_INTERNAL, IKE_INIT_QM
 May 22 11:11:34.335: ISAKMP (0:88): Old State = IKE_QM_READY  New State = 
 IKE_QM_I_QM1
 May 22 11:11:34.335: ISAKMP (0:88): Input = IKE_MESG_INTERNAL, 
 IKE_PHASE1_COMPLETE
 May 22 11:11:34.335: ISAKMP (0:88): Old State = IKE_P1_COMPLETE  New State 
 = IKE_P1_COMPLETE
 
 May 22 11:11:34.579: ISAKMP (0:88): received packet from 195.94.218.146 
 dport 500 sport 500 (I) QM_IDLE
 May 22 11:11:34.579: ISAKMP: set new node 1969645041 to QM_IDLE
 May 22 11:11:34.583: ISAKMP (0:88): processing HASH payload. message ID = 
 1969645041
 May 22 11:11:34.583: ISAKMP (0:88): processing NOTIFY ADDRESS_NOTIFICATION 
 protocol 1
          spi 0, message ID = 1969645041, sa = 63E4D190
 May 22 11:11:34.583: ISAKMP (0:88): deleting node 1969645041 error FALSE 
 reason "informational (in) state 1"
 May 22 11:11:34.583: ISAKMP (0:88): Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY
 May 22 11:11:34.583: ISAKMP (0:88): Old State = IKE_P1_COMPLETE  New State 
 = IKE_P1_COMPLETE
 
 May 22 11:11:44.335: ISAKMP (0:88): retransmitting phase 2 QM_IDLE 
 -448498841 ...
 May 22 11:11:44.335: ISAKMP (0:88): incrementing error counter on sa: 
 retransmit phase 2
 May 22 11:11:44.335: ISAKMP (0:88): incrementing error counter on sa: 
 retransmit phase 2
 May 22 11:11:44.335: ISAKMP (0:88): retransmitting phase 2 -448498841 QM_IDLE
 May 22 11:11:44.335: ISAKMP (0:88): sending packet to 195.94.218.146 
 my_port 500 peer_port 500 (I) QM_IDLE
 May 22 11:11:44.571: ISAKMP (0:88): received packet from 195.94.218.146 
 dport 500 sport 500 (I) QM_IDLE
 May 22 11:11:44.571: ISAKMP: set new node 499296123 to QM_IDLE
 May 22 11:11:44.571: ISAKMP (0:88): processing HASH payload. message ID = 
 499296123
 May 22 11:11:44.571: ISAKMP (0:88): processing NOTIFY ADDRESS_NOTIFICATION 
 protocol 1
          spi 0, message ID = 499296123, sa = 63E4D190
 May 22 11:11:44.571: ISAKMP (0:88): deleting node 499296123 error FALSE 
 reason "informational (in) state 1"
 May 22 11:11:44.571: ISAKMP (0:88): Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY
 May 22 11:11:44.571: ISAKMP (0:88): Old State = IKE_P1_COMPLETE  New State 
 = IKE_P1_COMPLETE
 
 May 22 11:11:54.336: ISAKMP (0:88): retransmitting phase 2 QM_IDLE 
 -448498841 ...
 May 22 11:11:54.336: ISAKMP (0:88): incrementing error counter on sa: 
 retransmit phase 2
 May 22 11:11:54.336: ISAKMP (0:88): incrementing error counter on sa: 
 retransmit phase 2
 May 22 11:11:54.336: ISAKMP (0:88): retransmitting phase 2 -448498841 QM_IDLE
 May 22 11:11:54.336: ISAKMP (0:88): sending packet to 195.94.218.146 
 my_port 500 peer_port 500 (I) QM_IDLE
 May 22 11:11:54.572: ISAKMP (0:88): received packet from 195.94.218.146 
 dport 500 sport 500 (I) QM_IDLE
 May 22 11:11:54.572: ISAKMP: set new node -473347998 to QM_IDLE
 May 22 11:11:54.576: ISAKMP (0:88): processing HASH payload. message ID = 
 -473347998
 May 22 11:11:54.576: ISAKMP (0:88): processing NOTIFY ADDRESS_NOTIFICATION 
 protocol 1
          spi 0, message ID = -473347998, sa = 63E4D190
 May 22 11:11:54.576: ISAKMP (0:88): deleting node -473347998 error FALSE 
 reason "informational (in) state 1"
 May 22 11:11:54.576: ISAKMP (0:88): Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY
 May 22 11:11:54.576: ISAKMP (0:88): Old State = IKE_P1_COMPLETE  New State 
 = IKE_P1_COMPLETE
 
 May 22 11:12:03.376: IPSEC(key_engine): request timer fired: count = 1,
    (identity) local= 212.109.47.37, remote= 195.94.218.146,
      local_proxy= 212.109.47.37/255.255.255.255/0/0 (type=1),
      remote_proxy= 195.94.218.146/255.255.255.255/0/0 (type=1)
 May 22 11:12:03.376: IPSEC(sa_request): ,
    (key eng. msg.) OUTBOUND local= 212.109.47.37, remote= 195.94.218.146,
      local_proxy= 212.109.47.37/255.255.255.255/0/0 (type=1),
      remote_proxy= 195.94.218.146/255.255.255.255/0/0 (type=1),
      protocol= ESP, transform= esp-3des esp-sha-hmac ,
      lifedur= 3600s and 4608000kb,
      spi= 0x6B724DCA(1802653130), conn_id= 0, keysize= 0, flags= 0x400B
 May 22 11:12:03.376: ISAKMP: received ke message (1/1)
 May 22 11:12:03.376: ISAKMP: set new node 0 to QM_IDLE
 May 22 11:12:03.376: ISAKMP (0:88): sitting IDLE. Starting QM immediately 
 (QM_IDLE      )
 May 22 11:12:03.376: ISAKMP (0:88): beginning Quick Mode exchange, M-ID of 
 -1211108054
 May 22 11:12:03.396: ISAKMP (0:88): sending packet to 195.94.218.146 
 my_port 500 peer_port 500 (I) QM_IDLE
 May 22 11:12:03.396: ISAKMP (0:88): Node -1211108054, Input = 
 IKE_MESG_INTERNAL, IKE_INIT_QM
 May 22 11:12:03.396: ISAKMP (0:88): Old State = IKE_QM_READY  New State = 
 IKE_QM_I_QM1
 May 22 11:12:03.636: ISAKMP (0:88): received packet from 195.94.218.146 
 dport 500 sport 500 (I) QM_IDLE
 May 22 11:12:03.636: ISAKMP: set new node 642926056 to QM_IDLE
 May 22 11:12:03.636: ISAKMP (0:88): processing HASH payload. message ID = 
 642926056
 May 22 11:12:03.640: ISAKMP (0:88): processing NOTIFY ADDRESS_NOTIFICATION 
 protocol 1
          spi 0, message ID = 642926056, sa = 63E4D190
 May 22 11:12:03.640: ISAKMP (0:88): deleting node 642926056 error FALSE 
 reason "informational (in) state 1"
 May 22 11:12:03.640: ISAKMP (0:88): Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY
 May 22 11:12:03.640: ISAKMP (0:88): Old State = IKE_P1_COMPLETE  New State 
 = IKE_P1_COMPLETE
 
 May 22 11:12:04.336: ISAKMP (0:88): retransmitting phase 2 QM_IDLE 
 -448498841 ...
 May 22 11:12:04.336: ISAKMP (0:88): incrementing error counter on sa: 
 retransmit phase 2
 May 22 11:12:04.336: ISAKMP (0:88): incrementing error counter on sa: 
 retransmit phase 2
 May 22 11:12:04.336: ISAKMP (0:88): retransmitting phase 2 -448498841 QM_IDLE
 May 22 11:12:04.336: ISAKMP (0:88): sending packet to 195.94.218.146 
 my_port 500 peer_port 500 (I) QM_IDLE
 May 22 11:12:04.584: ISAKMP (0:88): received packet from 195.94.218.146 
 dport 500 sport 500 (I) QM_IDLE
 May 22 11:12:04.584: ISAKMP: set new node -1181981880 to QM_IDLE
 May 22 11:12:04.584: ISAKMP (0:88): processing HASH payload. message ID = 
 -1181981880
 May 22 11:12:04.584: ISAKMP (0:88): processing NOTIFY ADDRESS_NOTIFICATION 
 protocol 1
          spi 0, message ID = -1181981880, sa = 63E4D190
 May 22 11:12:04.584: ISAKMP (0:88): deleting node -1181981880 error FALSE 
 reason "informational (in) state 1"
 May 22 11:12:04.584: ISAKMP (0:88): Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY
 May 22 11:12:04.584: ISAKMP (0:88): Old State = IKE_P1_COMPLETE  New State 
 = IKE_P1_COMPLETE
 
 May 22 11:12:13.396: ISAKMP (0:88): retransmitting phase 2 QM_IDLE 
 -1211108054 ...
 May 22 11:12:13.396: ISAKMP (0:88): incrementing error counter on sa: 
 retransmit phase 2
 May 22 11:12:13.396: ISAKMP (0:88): incrementing error counter on sa: 
 retransmit phase 2
 May 22 11:12:13.396: ISAKMP (0:88): retransmitting phase 2 -1211108054 QM_IDLE
 May 22 11:12:13.396: ISAKMP (0:88): sending packet to 195.94.218.146 
 my_port 500 peer_port 500 (I) QM_IDLE
 May 22 11:12:13.632: ISAKMP (0:88): received packet from 195.94.218.146 
 dport 500 sport 500 (I) QM_IDLE
 May 22 11:12:13.632: ISAKMP: set new node 219023775 to QM_IDLE
 May 22 11:12:13.632: ISAKMP (0:88): processing HASH payload. message ID = 
 219023775
 May 22 11:12:13.632: ISAKMP (0:88): processing NOTIFY ADDRESS_NOTIFICATION 
 protocol 1
          spi 0, message ID = 219023775, sa = 63E4D190
 May 22 11:12:13.632: ISAKMP (0:88): deleting node 219023775 error FALSE 
 reason "informational (in) state 1"
 May 22 11:12:13.632: ISAKMP (0:88): Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY
 May 22 11:12:13.632: ISAKMP (0:88): Old State = IKE_P1_COMPLETE  New State 
 = IKE_P1_COMPLETE
 
 May 22 11:12:14.336: ISAKMP (0:88): retransmitting phase 2 QM_IDLE 
 -448498841 ...
 May 22 11:12:14.336: ISAKMP (0:88): incrementing error counter on sa: 
 retransmit phase 2
 May 22 11:12:14.336: ISAKMP (0:88): incrementing error counter on sa: 
 retransmit phase 2
 May 22 11:12:14.336: ISAKMP (0:88): retransmitting phase 2 -448498841 QM_IDLE
 May 22 11:12:14.336: ISAKMP (0:88): sending packet to 195.94.218.146 
 my_port 500 peer_port 500 (I) QM_IDLE
 May 22 11:12:14.564: ISAKMP (0:88): received packet from 195.94.218.146 
 dport 500 sport 500 (I) QM_IDLE
 May 22 11:12:14.564: ISAKMP: set new node -360770401 to QM_IDLE
 May 22 11:12:14.568: ISAKMP (0:88): processing HASH payload. message ID = 
 -360770401
 May 22 11:12:14.568: ISAKMP (0:88): processing NOTIFY ADDRESS_NOTIFICATION 
 protocol 1
          spi 0, message ID = -360770401, sa = 63E4D190
 May 22 11:12:14.568: ISAKMP (0:88): deleting node -360770401 error FALSE 
 reason "informational (in) state 1"
 May 22 11:12:14.568: ISAKMP (0:88): Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY
 May 22 11:12:14.568: ISAKMP (0:88): Old State = IKE_P1_COMPLETE  New State 
 = IKE_P1_COMPLETE
 
 May 22 11:12:23.396: ISAKMP (0:88): retransmitting phase 2 QM_IDLE 
 -1211108054 ...
 May 22 11:12:23.396: ISAKMP (0:88): incrementing error counter on sa: 
 retransmit phase 2
 May 22 11:12:23.396: ISAKMP (0:88): incrementing error counter on sa: 
 retransmit phase 2
 May 22 11:12:23.396: ISAKMP (0:88): retransmitting phase 2 -1211108054 QM_IDLE
 May 22 11:12:23.396: ISAKMP (0:88): sending packet to 195.94.218.146 
 my_port 500 peer_port 500 (I) QM_IDLE
 May 22 11:12:23.640: ISAKMP (0:88): received packet from 195.94.218.146 
 dport 500 sport 500 (I) QM_IDLE
 May 22 11:12:23.640: ISAKMP: set new node -1421442054 to QM_IDLE
 May 22 11:12:23.640: ISAKMP (0:88): processing HASH payload. message ID = 
 -1421442054
 May 22 11:12:23.640: ISAKMP (0:88): processing NOTIFY ADDRESS_NOTIFICATION 
 protocol 1
          spi 0, message ID = -1421442054, sa = 63E4D190
 May 22 11:12:23.640: ISAKMP (0:88): deleting node -1421442054 error FALSE 
 reason "informational (in) state 1"
 May 22 11:12:23.640: ISAKMP (0:88): Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY
 May 22 11:12:23.640: ISAKMP (0:88): Old State = IKE_P1_COMPLETE  New State 
 = IKE_P1_COMPLETE
 
 May 22 11:12:24.336: ISAKMP (0:88): retransmitting phase 2 QM_IDLE 
 -448498841 ...
 May 22 11:12:24.336: ISAKMP (0:88): incrementing error counter on sa: 
 retransmit phase 2
 May 22 11:12:24.336: ISAKMP (0:88): incrementing error counter on sa: 
 retransmit phase 2
 May 22 11:12:24.336: ISAKMP (0:88): retransmitting phase 2 -448498841 QM_IDLE
 May 22 11:12:24.336: ISAKMP (0:88): sending packet to 195.94.218.146 
 my_port 500 peer_port 500 (I) QM_IDLE
 May 22 11:12:24.576: ISAKMP (0:88): received packet from 195.94.218.146 
 dport 500 sport 500 (I) QM_IDLE
 May 22 11:12:24.576: ISAKMP: set new node 1811044662 to QM_IDLE
 May 22 11:12:24.580: ISAKMP (0:88): processing HASH payload. message ID = 
 1811044662
 May 22 11:12:24.580: ISAKMP (0:88): processing NOTIFY ADDRESS_NOTIFICATION 
 protocol 1
          spi 0, message ID = 1811044662, sa = 63E4D190
 May 22 11:12:24.580: ISAKMP (0:88): deleting node 1811044662 error FALSE 
 reason "informational (in) state 1"
 May 22 11:12:24.580: ISAKMP (0:88): Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY
 May 22 11:12:24.580: ISAKMP (0:88): Old State = IKE_P1_COMPLETE  New State 
 = IKE_P1_COMPLETE
 
 May 22 11:12:24.584: ISAKMP (0:88): purging node 1969645041
 May 22 11:12:33.376: IPSEC(key_engine): request timer fired: count = 2,
    (identity) local= 212.109.47.37, remote= 195.94.218.146,
      local_proxy= 212.109.47.37/255.255.255.255/0/0 (type=1),
      remote_proxy= 195.94.218.146/255.255.255.255/0/0 (type=1)
 May 22 11:12:33.376: ISAKMP: received ke message (3/1)
 May 22 11:12:33.376: ISAKMP (0:88): peer does not do paranoid keepalives.
 
 May 22 11:12:33.376: ISAKMP (0:88): deleting SA reason 
 "gen_ipsec_isakmp_delete but doi isakmp" state (I) QM_IDLE       (peer 
 195.94.218.146) input queue 0
 May 22 11:12:33.376: ISAKMP: set new node 1920205396 to QM_IDLE
 May 22 11:12:33.376: ISAKMP (0:88): sending packet to 195.94.218.146 
 my_port 500 peer_port 500 (I) QM_IDLE
 May 22 11:12:33.376: ISAKMP (0:88): purging node 1920205396
 May 22 11:12:33.376: ISAKMP (0:88): Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
 May 22 11:12:33.376: ISAKMP (0:88): Old State = IKE_P1_COMPLETE  New State 
 = IKE_DEST_SA
 
 May 22 11:12:33.376: ISAKMP (0:88): deleting SA reason "" state (I) QM_IDLE 
        (peer 195.94.218.146) input queue 0
 May 22 11:12:33.376: ISAKMP (0:88): deleting node -448498841 error FALSE 
 reason ""
 May 22 11:12:33.380: ISAKMP (0:88): deleting node -1211108054 error FALSE 
 reason ""
 May 22 11:12:33.380: ISAKMP (0:88): Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
 May 22 11:12:33.380: ISAKMP (0:88): Old State = IKE_DEST_SA  New State = 
 IKE_DEST_SA
 
 May 22 11:12:34.112: ISAKMP (0:88): received packet from 195.94.218.146 
 dport 500 sport 500 (I) MM_NO_STATE
 May 22 11:12:34.572: ISAKMP (0:88): purging node 499296123
 May 22 11:12:44.577: ISAKMP (0:88): purging node -473347998
 May 22 11:12:53.641: ISAKMP (0:88): purging node 642926056
 May 22 11:12:54.585: ISAKMP (0:88): purging node -1181981880
 May 22 11:13:03.633: ISAKMP (0:88): purging node 219023775
 May 22 11:13:04.569: ISAKMP (0:88): purging node -360770401
 May 22 11:13:13.641: ISAKMP (0:88): purging node -1421442054
 May 22 11:13:14.581: ISAKMP (0:88): purging node 1811044662
 May 22 11:13:23.381: ISAKMP (0:88): purging node -448498841
 May 22 11:13:23.381: ISAKMP (0:88): purging node -1211108054
 May 22 11:13:33.382: ISAKMP (0:88): purging SA., sa=63E4D190, delme=63E4D190
 -- 
 :r !ripewhois DOKA-RIPE
 -------------------------------------------------------------------------
 Never try to teach a pig to sing. It wastes your time and annoys the pig.
                  -- Lazarus Long, "Time Enough for Love"
 
 --- ifmail v.2.15dev5
  * Origin: Golden Telecom LLC (2:5020/400)

Вернуться к списку тем, сортированных по: возрастание даты  уменьшение даты  тема  автор 

 Тема:    Автор:    Дата:  
 IPSec/IKE question   Vladimir Litovka   22 May 2003 12:24:16 
 Re: IPSec/IKE question   Sergey Levischev   22 May 2003 13:11:15 
Архивное /ru.cisco/16795656c0532.html, оценка 3 из 5, голосов 10
Яндекс.Метрика
Valid HTML 4.01 Transitional