Sep 28 10:16:02 pluto[18024]: packet from 196.23.49.121:500: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000005] Sep 28 10:16:02 pluto[18024]: packet from 196.23.49.121:500: received Vendor ID payload [RFC 3947] method set to=110 Sep 28 10:16:02 pluto[18024]: packet from 196.23.49.121:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but already using method 110 Sep 28 10:16:02 pluto[18024]: packet from 196.23.49.121:500: ignoring Vendor ID payload [FRAGMENTATION] Sep 28 10:16:02 pluto[18024]: packet from 196.23.49.121:500: ignoring Vendor ID payload [MS-Negotiation Discovery Capable] Sep 28 10:16:02 pluto[18024]: packet from 196.23.49.121:500: ignoring Vendor ID payload [Vid-Initial-Contact] Sep 28 10:16:02 pluto[18024]: packet from 196.23.49.121:500: ignoring Vendor ID payload [IKE CGA version 1] Sep 28 10:16:02 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[1] 196.23.49.121 #1: responding to Main Mode from unknown peer 196.23.49.121 Sep 28 10:16:02 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[1] 196.23.49.121 #1: Diffie-Hellman group 20 is not a supported modp group. Attribute OAKLEY_GROUP_DESCRIPTION Sep 28 10:16:02 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[1] 196.23.49.121 #1: Diffie-Hellman group 19 is not a supported modp group. Attribute OAKLEY_GROUP_DESCRIPTION Sep 28 10:16:02 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[1] 196.23.49.121 #1: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1 Sep 28 10:16:02 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[1] 196.23.49.121 #1: STATE_MAIN_R1: sent MR1, expecting MI2 Sep 28 10:16:02 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[1] 196.23.49.121 #1: NAT-Traversal: Result using RFC 3947 (NAT-Traversal): peer is NATed Sep 28 10:16:02 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[1] 196.23.49.121 #1: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2 Sep 28 10:16:02 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[1] 196.23.49.121 #1: STATE_MAIN_R2: sent MR2, expecting MI3 Sep 28 10:16:02 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[1] 196.23.49.121 #1: Main mode peer ID is ID_IPV4_ADDR: '10.65.196.32' Sep 28 10:16:02 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[1] 196.23.49.121 #1: switched from "L2TP-PSK-orgWIN2KXP" to "L2TP-PSK-orgWIN2KXP" Sep 28 10:16:02 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: deleting connection "L2TP-PSK-orgWIN2KXP" instance with peer 196.23.49.121 {isakmp=#0/ipsec=#0} Sep 28 10:16:02 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: I did not send a certificate because I do not have one. Sep 28 10:16:02 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3 Sep 28 10:16:02 pluto[18024]: | NAT-T: new mapping 196.23.49.121:500/4500) Sep 28 10:16:02 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp2048} Sep 28 10:16:02 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #2: responding to Quick Mode {msgid:01000000} Sep 28 10:16:02 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #2: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1 Sep 28 10:16:02 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #2: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2 Sep 28 10:16:03 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #2: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2 Sep 28 10:16:03 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #2: STATE_QUICK_R2: IPsec SA established {ESP=>0x7d9082a8 <0xb1ac08cc xfrm=AES_128-HMAC_SHA1 NATD=196.23.49.121:4500 DPD=none} Sep 28 11:15:06 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[3] 196.23.49.121 #3: responding to Quick Mode {msgid:02000000} Sep 28 11:15:07 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[3] 196.23.49.121 #3: cannot install eroute -- it is in use for "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #2 Sep 28 11:15:07 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[3] 196.23.49.121: deleting connection "L2TP-PSK-orgWIN2KXP" instance with peer 196.23.49.121 {isakmp=#0/ipsec=#0} Sep 28 11:15:07 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[4] 196.23.49.121 #4: responding to Quick Mode {msgid:03000000} Sep 28 11:15:07 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[4] 196.23.49.121 #4: cannot install eroute -- it is in use for "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #2 Sep 28 11:15:07 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[4] 196.23.49.121: deleting connection "L2TP-PSK-orgWIN2KXP" instance with peer 196.23.49.121 {isakmp=#0/ipsec=#0} Sep 28 11:15:07 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x03000000 (perhaps this is a duplicated packet) Sep 28 11:15:12 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: sending encrypted notification INVALID_MESSAGE_ID to 196.23.49.121:4500 Sep 28 11:15:18 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x02000000 (perhaps this is a duplicated packet) Sep 28 11:15:18 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: sending encrypted notification INVALID_MESSAGE_ID to 196.23.49.121:4500 Sep 28 11:15:18 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x02000000 (perhaps this is a duplicated packet) Sep 28 11:15:18 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: sending encrypted notification INVALID_MESSAGE_ID to 196.23.49.121:4500 Sep 28 11:15:18 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x03000000 (perhaps this is a duplicated packet) Sep 28 11:15:18 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: sending encrypted notification INVALID_MESSAGE_ID to 196.23.49.121:4500 Sep 28 11:15:18 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x02000000 (perhaps this is a duplicated packet) Sep 28 11:15:18 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: sending encrypted notification INVALID_MESSAGE_ID to 196.23.49.121:4500 Sep 28 11:15:18 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x03000000 (perhaps this is a duplicated packet) Sep 28 11:15:18 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: sending encrypted notification INVALID_MESSAGE_ID to 196.23.49.121:4500 Sep 28 11:15:22 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x02000000 (perhaps this is a duplicated packet) Sep 28 11:15:22 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: sending encrypted notification INVALID_MESSAGE_ID to 196.23.49.121:4500 Sep 28 11:15:22 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x03000000 (perhaps this is a duplicated packet) Sep 28 11:15:22 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: sending encrypted notification INVALID_MESSAGE_ID to 196.23.49.121:4500 Sep 28 11:15:38 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x02000000 (perhaps this is a duplicated packet) Sep 28 11:15:38 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: sending encrypted notification INVALID_MESSAGE_ID to 196.23.49.121:4500 Sep 28 11:15:38 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x03000000 (perhaps this is a duplicated packet) Sep 28 11:15:38 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: sending encrypted notification INVALID_MESSAGE_ID to 196.23.49.121:4500 Sep 28 11:15:54 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x02000000 (perhaps this is a duplicated packet) Sep 28 11:15:54 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: sending encrypted notification INVALID_MESSAGE_ID to 196.23.49.121:4500 Sep 28 11:15:54 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x03000000 (perhaps this is a duplicated packet) Sep 28 11:15:54 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: sending encrypted notification INVALID_MESSAGE_ID to 196.23.49.121:4500 Sep 28 11:16:02 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: received Delete SA(0x7d9082a8) payload: deleting IPSEC State #2 Sep 28 11:16:03 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: received and ignored informational message Sep 28 11:16:25 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: received Delete SA payload: deleting ISAKMP State #1 Sep 28 11:16:25 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121: deleting connection "L2TP-PSK-orgWIN2KXP" instance with peer 196.23.49.121 {isakmp=#0/ipsec=#0} Sep 28 11:16:25 pluto[18024]: packet from 196.23.49.121:4500: received and ignored informational message Sep 28 11:16:25 pluto[18024]: packet from 196.23.49.121:4500: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000005] Sep 28 11:16:25 pluto[18024]: packet from 196.23.49.121:4500: received Vendor ID payload [RFC 3947] method set to=110 Sep 28 11:16:25 pluto[18024]: packet from 196.23.49.121:4500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but already using method 110 Sep 28 11:16:25 pluto[18024]: packet from 196.23.49.121:4500: ignoring Vendor ID payload [FRAGMENTATION] Sep 28 11:16:25 pluto[18024]: packet from 196.23.49.121:4500: ignoring Vendor ID payload [MS-Negotiation Discovery Capable] Sep 28 11:16:25 pluto[18024]: packet from 196.23.49.121:4500: ignoring Vendor ID payload [Vid-Initial-Contact] Sep 28 11:16:25 pluto[18024]: packet from 196.23.49.121:4500: ignoring Vendor ID payload [IKE CGA version 1] Sep 28 11:16:25 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[5] 196.23.49.121 #5: responding to Main Mode from unknown peer 196.23.49.121 Sep 28 11:16:25 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[5] 196.23.49.121 #5: Diffie-Hellman group 20 is not a supported modp group. Attribute OAKLEY_GROUP_DESCRIPTION Sep 28 11:16:25 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[5] 196.23.49.121 #5: Diffie-Hellman group 19 is not a supported modp group. Attribute OAKLEY_GROUP_DESCRIPTION Sep 28 11:16:25 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[5] 196.23.49.121 #5: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1 Sep 28 11:16:25 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[5] 196.23.49.121 #5: STATE_MAIN_R1: sent MR1, expecting MI2 Sep 28 11:16:25 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[5] 196.23.49.121 #5: NAT-Traversal: Result using RFC 3947 (NAT-Traversal): peer is NATed Sep 28 11:16:25 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[5] 196.23.49.121 #5: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2 Sep 28 11:16:25 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[5] 196.23.49.121 #5: STATE_MAIN_R2: sent MR2, expecting MI3 Sep 28 11:16:25 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[5] 196.23.49.121 #5: Main mode peer ID is ID_IPV4_ADDR: '10.65.196.32' Sep 28 11:16:26 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[5] 196.23.49.121 #5: switched from "L2TP-PSK-orgWIN2KXP" to "L2TP-PSK-orgWIN2KXP" Sep 28 11:16:26 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[6] 196.23.49.121 #5: deleting connection "L2TP-PSK-orgWIN2KXP" instance with peer 196.23.49.121 {isakmp=#0/ipsec=#0} Sep 28 11:16:26 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[6] 196.23.49.121 #5: I did not send a certificate because I do not have one. Sep 28 11:16:26 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[6] 196.23.49.121 #5: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3 Sep 28 11:16:26 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[6] 196.23.49.121 #5: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp2048} Sep 28 11:16:26 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[6] 196.23.49.121 #6: responding to Quick Mode {msgid:01000000} Sep 28 11:16:26 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[6] 196.23.49.121 #6: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1 Sep 28 11:16:26 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[6] 196.23.49.121 #6: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2 Sep 28 11:16:26 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #7: responding to Quick Mode {msgid:02000000} Sep 28 11:16:26 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #7: ERROR: netlink XFRM_MSG_NEWPOLICY response for flow tun.10000@41.241.104.164 included errno 17: File exists Sep 28 11:16:26 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #7: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1 Sep 28 11:16:26 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #7: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2 Sep 28 11:16:26 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[8] 196.23.49.121 #8: responding to Quick Mode {msgid:03000000} Sep 28 11:16:26 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[8] 196.23.49.121 #8: ERROR: netlink XFRM_MSG_NEWPOLICY response for flow tun.10000@41.241.104.164 included errno 17: File exists Sep 28 11:16:26 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[8] 196.23.49.121 #8: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1 Sep 28 11:16:26 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[8] 196.23.49.121 #8: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2 Sep 28 11:16:26 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[6] 196.23.49.121 #6: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2 Sep 28 11:16:26 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[6] 196.23.49.121 #6: STATE_QUICK_R2: IPsec SA established {ESP=>0x9ca531c6 <0x739bf6af xfrm=AES_128-HMAC_SHA1 NATD=196.23.49.121:4500 DPD=none} Sep 28 11:16:26 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #7: cannot install eroute -- it is in use for "L2TP-PSK-orgWIN2KXP"[6] 196.23.49.121 #6 Sep 28 11:16:26 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[8] 196.23.49.121 #8: cannot install eroute -- it is in use for "L2TP-PSK-orgWIN2KXP"[6] 196.23.49.121 #6 Sep 28 11:16:26 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[6] 196.23.49.121 #5: received Delete SA(0x9ca531c6) payload: deleting IPSEC State #6 Sep 28 11:16:26 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[6] 196.23.49.121 #5: received and ignored informational message Sep 28 11:16:26 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[6] 196.23.49.121 #5: ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xdf51c94a) not found (maybe expired) Sep 28 11:16:26 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[6] 196.23.49.121 #5: received and ignored informational message Sep 28 11:16:36 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[6] 196.23.49.121 #5: ignoring informational payload, type INVALID_PAYLOAD_TYPE Sep 28 11:16:36 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[6] 196.23.49.121 #5: received and ignored informational message Sep 28 11:16:56 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[6] 196.23.49.121 #5: ignoring informational payload, type INVALID_PAYLOAD_TYPE Sep 28 11:16:56 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[6] 196.23.49.121 #5: received and ignored informational message Sep 28 11:17:25 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[6] 196.23.49.121 #5: ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xfd9c5803) not found (maybe expired) Sep 28 11:17:25 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[6] 196.23.49.121 #5: received and ignored informational message Sep 28 11:17:25 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[6] 196.23.49.121 #5: received Delete SA payload: deleting ISAKMP State #5 Sep 28 11:17:25 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[6] 196.23.49.121: deleting connection "L2TP-PSK-orgWIN2KXP" instance with peer 196.23.49.121 {isakmp=#0/ipsec=#0} Sep 28 11:17:25 pluto[18024]: packet from 196.23.49.121:4500: received and ignored informational message Sep 28 11:18:33 pluto[18024]: packet from 196.23.49.121:500: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000005] Sep 28 11:18:33 pluto[18024]: packet from 196.23.49.121:500: received Vendor ID payload [RFC 3947] method set to=110 Sep 28 11:18:33 pluto[18024]: packet from 196.23.49.121:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but already using method 110 Sep 28 11:18:33 pluto[18024]: packet from 196.23.49.121:500: ignoring Vendor ID payload [FRAGMENTATION] Sep 28 11:18:33 pluto[18024]: packet from 196.23.49.121:500: ignoring Vendor ID payload [MS-Negotiation Discovery Capable] Sep 28 11:18:33 pluto[18024]: packet from 196.23.49.121:500: ignoring Vendor ID payload [Vid-Initial-Contact] Sep 28 11:18:33 pluto[18024]: packet from 196.23.49.121:500: ignoring Vendor ID payload [IKE CGA version 1] Sep 28 11:18:33 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[8] 196.23.49.121 #9: responding to Main Mode from unknown peer 196.23.49.121 Sep 28 11:18:33 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[8] 196.23.49.121 #9: Diffie-Hellman group 20 is not a supported modp group. Attribute OAKLEY_GROUP_DESCRIPTION Sep 28 11:18:33 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[8] 196.23.49.121 #9: Diffie-Hellman group 19 is not a supported modp group. Attribute OAKLEY_GROUP_DESCRIPTION Sep 28 11:18:33 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[8] 196.23.49.121 #9: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1 Sep 28 11:18:33 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[8] 196.23.49.121 #9: STATE_MAIN_R1: sent MR1, expecting MI2 Sep 28 11:18:33 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[8] 196.23.49.121 #9: NAT-Traversal: Result using RFC 3947 (NAT-Traversal): peer is NATed Sep 28 11:18:33 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[8] 196.23.49.121 #9: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2 Sep 28 11:18:33 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[8] 196.23.49.121 #9: STATE_MAIN_R2: sent MR2, expecting MI3 Sep 28 11:18:33 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[8] 196.23.49.121 #9: Main mode peer ID is ID_IPV4_ADDR: '10.65.196.32' Sep 28 11:18:33 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[8] 196.23.49.121 #9: I did not send a certificate because I do not have one. Sep 28 11:18:33 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[8] 196.23.49.121 #9: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3 Sep 28 11:18:33 pluto[18024]: | NAT-T: new mapping 196.23.49.121:500/4500) Sep 28 11:18:33 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[8] 196.23.49.121 #9: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp2048} Sep 28 11:18:33 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[9] 196.23.49.121 #10: responding to Quick Mode {msgid:01000000} Sep 28 11:18:33 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[9] 196.23.49.121 #10: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1 Sep 28 11:18:33 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[9] 196.23.49.121 #10: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2 Sep 28 11:18:34 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[9] 196.23.49.121 #10: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2 Sep 28 11:18:34 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[9] 196.23.49.121 #10: STATE_QUICK_R2: IPsec SA established {ESP=>0xc59d1d8c <0xed12c760 xfrm=AES_128-HMAC_SHA1 NATD=196.23.49.121:4500 DPD=none} Sep 28 11:29:36 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[8] 196.23.49.121 #8: max number of retransmissions (20) reached STATE_QUICK_R1 Sep 28 11:29:36 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #7: max number of retransmissions (20) reached STATE_QUICK_R1 Sep 28 11:29:36 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121: deleting connection "L2TP-PSK-orgWIN2KXP" instance with peer 196.23.49.121 {isakmp=#0/ipsec=#0} Sep 28 12:02:16 pluto[18024]: shutting down Sep 28 12:02:16 pluto[18024]: forgetting secrets Sep 28 12:02:16 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[9] 196.23.49.121: deleting connection "L2TP-PSK-orgWIN2KXP" instance with peer 196.23.49.121 {isakmp=#0/ipsec=#10} Sep 28 12:02:16 pluto[18024]: "L2TP-PSK-orgWIN2KXP" #10: deleting state (STATE_QUICK_R2) Sep 28 12:02:16 pluto[18024]: "L2TP-PSK-orgWIN2KXP": unroute-host output: /usr/lib/ipsec/_updown: doroute `ip route delete 196.23.49.121/32 dev ppp0 ' failed (RTNETLINK answers: No such process) Sep 28 12:02:16 pluto[18024]: "L2TP-PSK-orgWIN2KXP"[8] 196.23.49.121: deleting connection "L2TP-PSK-orgWIN2KXP" instance with peer 196.23.49.121 {isakmp=#9/ipsec=#0} Sep 28 12:02:16 pluto[18024]: "L2TP-PSK-orgWIN2KXP" #9: deleting state (STATE_MAIN_R3) Sep 28 12:02:16 pluto[18024]: "L2TP-PSK-orgWIN2KXP": deleting connection Sep 28 12:27:02 pluto[14784]: packet from 196.23.49.121:500: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000005] Sep 28 12:27:02 pluto[14784]: packet from 196.23.49.121:500: received Vendor ID payload [RFC 3947] method set to=110 Sep 28 12:27:02 pluto[14784]: packet from 196.23.49.121:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but already using method 110 Sep 28 12:27:02 pluto[14784]: packet from 196.23.49.121:500: ignoring Vendor ID payload [FRAGMENTATION] Sep 28 12:27:02 pluto[14784]: packet from 196.23.49.121:500: ignoring Vendor ID payload [MS-Negotiation Discovery Capable] Sep 28 12:27:02 pluto[14784]: packet from 196.23.49.121:500: ignoring Vendor ID payload [Vid-Initial-Contact] Sep 28 12:27:02 pluto[14784]: packet from 196.23.49.121:500: ignoring Vendor ID payload [IKE CGA version 1] Sep 28 12:27:02 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[1] 196.23.49.121 #1: responding to Main Mode from unknown peer 196.23.49.121 Sep 28 12:27:02 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[1] 196.23.49.121 #1: Diffie-Hellman group 20 is not a supported modp group. Attribute OAKLEY_GROUP_DESCRIPTION Sep 28 12:27:02 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[1] 196.23.49.121 #1: Diffie-Hellman group 19 is not a supported modp group. Attribute OAKLEY_GROUP_DESCRIPTION Sep 28 12:27:02 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[1] 196.23.49.121 #1: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1 Sep 28 12:27:02 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[1] 196.23.49.121 #1: STATE_MAIN_R1: sent MR1, expecting MI2 Sep 28 12:27:02 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[1] 196.23.49.121 #1: NAT-Traversal: Result using RFC 3947 (NAT-Traversal): peer is NATed Sep 28 12:27:02 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[1] 196.23.49.121 #1: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2 Sep 28 12:27:02 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[1] 196.23.49.121 #1: STATE_MAIN_R2: sent MR2, expecting MI3 Sep 28 12:27:02 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[1] 196.23.49.121 #1: Main mode peer ID is ID_IPV4_ADDR: '10.65.196.32' Sep 28 12:27:02 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[1] 196.23.49.121 #1: switched from "L2TP-PSK-orgWIN2KXP" to "L2TP-PSK-orgWIN2KXP" Sep 28 12:27:02 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: deleting connection "L2TP-PSK-orgWIN2KXP" instance with peer 196.23.49.121 {isakmp=#0/ipsec=#0} Sep 28 12:27:02 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: I did not send a certificate because I do not have one. Sep 28 12:27:02 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3 Sep 28 12:27:02 pluto[14784]: | NAT-T: new mapping 196.23.49.121:500/4500) Sep 28 12:27:02 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp2048} Sep 28 12:27:03 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #2: responding to Quick Mode {msgid:01000000} Sep 28 12:27:03 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #2: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1 Sep 28 12:27:03 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #2: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2 Sep 28 12:27:03 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #2: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2 Sep 28 12:27:03 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #2: STATE_QUICK_R2: IPsec SA established {ESP=>0x702557b4 <0x890c0a6a xfrm=AES_128-HMAC_SHA1 NATD=196.23.49.121:4500 DPD=none} Sep 28 13:22:32 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #3: initiating Main Mode to replace #1 Sep 28 13:23:42 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #3: max number of retransmissions (2) reached STATE_MAIN_I1. No response (or no acceptable response) to our first IKE message Sep 28 13:23:42 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #3: starting keying attempt 2 of at most 3 Sep 28 13:23:42 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #4: initiating Main Mode to replace #3 Sep 28 13:24:52 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #4: max number of retransmissions (2) reached STATE_MAIN_I1. No response (or no acceptable response) to our first IKE message Sep 28 13:24:52 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #4: starting keying attempt 3 of at most 3 Sep 28 13:24:52 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #5: initiating Main Mode to replace #4 Sep 28 13:25:48 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[3] 196.23.49.121 #6: responding to Quick Mode {msgid:02000000} Sep 28 13:25:48 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[3] 196.23.49.121 #6: cannot install eroute -- it is in use for "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #2 Sep 28 13:25:48 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[3] 196.23.49.121: deleting connection "L2TP-PSK-orgWIN2KXP" instance with peer 196.23.49.121 {isakmp=#0/ipsec=#0} Sep 28 13:25:48 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[4] 196.23.49.121 #7: responding to Quick Mode {msgid:03000000} Sep 28 13:25:48 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[4] 196.23.49.121 #7: cannot install eroute -- it is in use for "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #2 Sep 28 13:25:48 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[4] 196.23.49.121: deleting connection "L2TP-PSK-orgWIN2KXP" instance with peer 196.23.49.121 {isakmp=#0/ipsec=#0} Sep 28 13:25:50 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x03000000 (perhaps this is a duplicated packet) Sep 28 13:25:50 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: sending encrypted notification INVALID_MESSAGE_ID to 196.23.49.121:4500 Sep 28 13:25:50 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x02000000 (perhaps this is a duplicated packet) Sep 28 13:25:50 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: sending encrypted notification INVALID_MESSAGE_ID to 196.23.49.121:4500 Sep 28 13:25:53 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x02000000 (perhaps this is a duplicated packet) Sep 28 13:25:53 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: sending encrypted notification INVALID_MESSAGE_ID to 196.23.49.121:4500 Sep 28 13:25:53 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x03000000 (perhaps this is a duplicated packet) Sep 28 13:25:53 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: sending encrypted notification INVALID_MESSAGE_ID to 196.23.49.121:4500 Sep 28 13:25:58 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x03000000 (perhaps this is a duplicated packet) Sep 28 13:25:58 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: sending encrypted notification INVALID_MESSAGE_ID to 196.23.49.121:4500 Sep 28 13:25:58 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x02000000 (perhaps this is a duplicated packet) Sep 28 13:25:58 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: sending encrypted notification INVALID_MESSAGE_ID to 196.23.49.121:4500 Sep 28 13:26:02 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #5: max number of retransmissions (2) reached STATE_MAIN_I1. No response (or no acceptable response) to our first IKE message Sep 28 13:26:06 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x03000000 (perhaps this is a duplicated packet) Sep 28 13:26:06 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: sending encrypted notification INVALID_MESSAGE_ID to 196.23.49.121:4500 Sep 28 13:26:06 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x02000000 (perhaps this is a duplicated packet) Sep 28 13:26:06 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: sending encrypted notification INVALID_MESSAGE_ID to 196.23.49.121:4500 Sep 28 13:26:22 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x03000000 (perhaps this is a duplicated packet) Sep 28 13:26:22 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: sending encrypted notification INVALID_MESSAGE_ID to 196.23.49.121:4500 Sep 28 13:26:22 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x02000000 (perhaps this is a duplicated packet) Sep 28 13:26:22 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: sending encrypted notification INVALID_MESSAGE_ID to 196.23.49.121:4500 Sep 28 13:26:38 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x03000000 (perhaps this is a duplicated packet) Sep 28 13:26:38 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: sending encrypted notification INVALID_MESSAGE_ID to 196.23.49.121:4500 Sep 28 13:26:38 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x02000000 (perhaps this is a duplicated packet) Sep 28 13:26:38 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: sending encrypted notification INVALID_MESSAGE_ID to 196.23.49.121:4500 Sep 28 13:26:54 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[5] 196.23.49.121 #8: responding to Quick Mode {msgid:04000000} Sep 28 13:26:54 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[5] 196.23.49.121 #8: cannot install eroute -- it is in use for "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #2 Sep 28 13:26:54 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[5] 196.23.49.121: deleting connection "L2TP-PSK-orgWIN2KXP" instance with peer 196.23.49.121 {isakmp=#0/ipsec=#0} Sep 28 13:26:54 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: received Delete SA(0x702557b4) payload: deleting IPSEC State #2 Sep 28 13:26:54 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: received and ignored informational message Sep 28 13:26:54 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121 #1: received Delete SA payload: deleting ISAKMP State #1 Sep 28 13:26:54 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[2] 196.23.49.121: deleting connection "L2TP-PSK-orgWIN2KXP" instance with peer 196.23.49.121 {isakmp=#0/ipsec=#0} Sep 28 13:26:54 pluto[14784]: packet from 196.23.49.121:4500: received and ignored informational message Sep 28 13:26:54 pluto[14784]: packet from 196.23.49.121:4500: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000005] Sep 28 13:26:54 pluto[14784]: packet from 196.23.49.121:4500: received Vendor ID payload [RFC 3947] method set to=110 Sep 28 13:26:54 pluto[14784]: packet from 196.23.49.121:4500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but already using method 110 Sep 28 13:26:54 pluto[14784]: packet from 196.23.49.121:4500: ignoring Vendor ID payload [FRAGMENTATION] Sep 28 13:26:54 pluto[14784]: packet from 196.23.49.121:4500: ignoring Vendor ID payload [MS-Negotiation Discovery Capable] Sep 28 13:26:54 pluto[14784]: packet from 196.23.49.121:4500: ignoring Vendor ID payload [Vid-Initial-Contact] Sep 28 13:26:54 pluto[14784]: packet from 196.23.49.121:4500: ignoring Vendor ID payload [IKE CGA version 1] Sep 28 13:26:54 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[6] 196.23.49.121 #9: responding to Main Mode from unknown peer 196.23.49.121 Sep 28 13:26:54 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[6] 196.23.49.121 #9: Diffie-Hellman group 20 is not a supported modp group. Attribute OAKLEY_GROUP_DESCRIPTION Sep 28 13:26:54 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[6] 196.23.49.121 #9: Diffie-Hellman group 19 is not a supported modp group. Attribute OAKLEY_GROUP_DESCRIPTION Sep 28 13:26:54 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[6] 196.23.49.121 #9: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1 Sep 28 13:26:54 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[6] 196.23.49.121 #9: STATE_MAIN_R1: sent MR1, expecting MI2 Sep 28 13:26:55 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[6] 196.23.49.121 #9: NAT-Traversal: Result using RFC 3947 (NAT-Traversal): peer is NATed Sep 28 13:26:55 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[6] 196.23.49.121 #9: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2 Sep 28 13:26:55 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[6] 196.23.49.121 #9: STATE_MAIN_R2: sent MR2, expecting MI3 Sep 28 13:26:55 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[6] 196.23.49.121 #9: Main mode peer ID is ID_IPV4_ADDR: '10.65.196.32' Sep 28 13:26:55 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[6] 196.23.49.121 #9: switched from "L2TP-PSK-orgWIN2KXP" to "L2TP-PSK-orgWIN2KXP" Sep 28 13:26:55 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #9: deleting connection "L2TP-PSK-orgWIN2KXP" instance with peer 196.23.49.121 {isakmp=#0/ipsec=#0} Sep 28 13:26:55 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #9: I did not send a certificate because I do not have one. Sep 28 13:26:55 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #9: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3 Sep 28 13:26:55 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #9: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp2048} Sep 28 13:26:55 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #10: responding to Quick Mode {msgid:01000000} Sep 28 13:26:55 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #10: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1 Sep 28 13:26:55 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #10: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2 Sep 28 13:26:55 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[8] 196.23.49.121 #11: responding to Quick Mode {msgid:02000000} Sep 28 13:26:55 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[8] 196.23.49.121 #11: ERROR: netlink XFRM_MSG_NEWPOLICY response for flow tun.10000@41.241.104.164 included errno 17: File exists Sep 28 13:26:55 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[8] 196.23.49.121 #11: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1 Sep 28 13:26:55 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[8] 196.23.49.121 #11: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2 Sep 28 13:26:55 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[9] 196.23.49.121 #12: responding to Quick Mode {msgid:03000000} Sep 28 13:26:55 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[9] 196.23.49.121 #12: ERROR: netlink XFRM_MSG_NEWPOLICY response for flow tun.10000@41.241.104.164 included errno 17: File exists Sep 28 13:26:55 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[9] 196.23.49.121 #12: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1 Sep 28 13:26:55 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[9] 196.23.49.121 #12: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2 Sep 28 13:26:55 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[10] 196.23.49.121 #13: responding to Quick Mode {msgid:04000000} Sep 28 13:26:56 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[10] 196.23.49.121 #13: ERROR: netlink XFRM_MSG_NEWPOLICY response for flow tun.10000@41.241.104.164 included errno 17: File exists Sep 28 13:26:56 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[10] 196.23.49.121 #13: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1 Sep 28 13:26:56 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[10] 196.23.49.121 #13: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2 Sep 28 13:26:56 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #10: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2 Sep 28 13:26:56 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #10: STATE_QUICK_R2: IPsec SA established {ESP=>0xee6c8846 <0xadcfd763 xfrm=AES_128-HMAC_SHA1 NATD=196.23.49.121:4500 DPD=none} Sep 28 13:26:56 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[8] 196.23.49.121 #11: cannot install eroute -- it is in use for "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #10 Sep 28 13:26:56 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[9] 196.23.49.121 #12: cannot install eroute -- it is in use for "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #10 Sep 28 13:26:56 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #9: received Delete SA(0xee6c8846) payload: deleting IPSEC State #10 Sep 28 13:26:56 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #9: received and ignored informational message Sep 28 13:26:56 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #9: ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0x58fe1eb2) not found (maybe expired) Sep 28 13:26:56 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #9: received and ignored informational message Sep 28 13:26:56 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[10] 196.23.49.121 #13: cannot install eroute -- it is in use for "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #0 Sep 28 13:26:56 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #9: ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0x6fec7cf6) not found (maybe expired) Sep 28 13:26:56 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #9: received and ignored informational message Sep 28 13:26:56 pluto[14784]: initiate on demand from 41.241.104.164:0 to 196.23.49.121:0 proto=0 state: fos_start because: acquire Sep 28 13:26:56 pluto[14784]: Can not opportunistically initiate for 41.241.104.164 to 196.23.49.121: no routed template covers this pair Sep 28 13:26:56 pluto[14784]: ERROR: netlink XFRM_MSG_DELPOLICY response for flow int.0@0.0.0.0 included errno 2: No such file or directory Sep 28 13:27:06 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #9: ignoring informational payload, type INVALID_PAYLOAD_TYPE Sep 28 13:27:06 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #9: received and ignored informational message Sep 28 13:27:06 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #9: ignoring informational payload, type INVALID_PAYLOAD_TYPE Sep 28 13:27:06 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #9: received and ignored informational message Sep 28 13:27:25 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #9: ignoring informational payload, type INVALID_PAYLOAD_TYPE Sep 28 13:27:25 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #9: received and ignored informational message Sep 28 13:27:25 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #9: ignoring informational payload, type INVALID_PAYLOAD_TYPE Sep 28 13:27:25 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #9: received and ignored informational message Sep 28 13:28:05 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #9: ignoring informational payload, type INVALID_PAYLOAD_TYPE Sep 28 13:28:05 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #9: received and ignored informational message Sep 28 13:28:05 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #9: ignoring informational payload, type INVALID_PAYLOAD_TYPE Sep 28 13:28:05 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #9: received and ignored informational message Sep 28 13:28:35 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #9: ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0x69c314c9) not found (maybe expired) Sep 28 13:28:35 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #9: received and ignored informational message Sep 28 13:28:35 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121 #9: received Delete SA payload: deleting ISAKMP State #9 Sep 28 13:28:35 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[7] 196.23.49.121: deleting connection "L2TP-PSK-orgWIN2KXP" instance with peer 196.23.49.121 {isakmp=#0/ipsec=#0} Sep 28 13:28:35 pluto[14784]: packet from 196.23.49.121:4500: received and ignored informational message Sep 28 13:29:28 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[10] 196.23.49.121: terminating SAs using this connection Sep 28 13:29:28 pluto[14784]: "L2TP-PSK-orgWIN2KXP" #13: deleting state (STATE_QUICK_R1) Sep 28 13:29:28 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[10] 196.23.49.121: deleting connection "L2TP-PSK-orgWIN2KXP" instance with peer 196.23.49.121 {isakmp=#0/ipsec=#0} Sep 28 13:29:28 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[9] 196.23.49.121: terminating SAs using this connection Sep 28 13:29:28 pluto[14784]: "L2TP-PSK-orgWIN2KXP" #12: deleting state (STATE_QUICK_R1) Sep 28 13:29:28 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[9] 196.23.49.121: deleting connection "L2TP-PSK-orgWIN2KXP" instance with peer 196.23.49.121 {isakmp=#0/ipsec=#0} Sep 28 13:29:28 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[8] 196.23.49.121: terminating SAs using this connection Sep 28 13:29:28 pluto[14784]: "L2TP-PSK-orgWIN2KXP" #11: deleting state (STATE_QUICK_R1) Sep 28 13:29:28 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[8] 196.23.49.121: deleting connection "L2TP-PSK-orgWIN2KXP" instance with peer 196.23.49.121 {isakmp=#0/ipsec=#0} Sep 28 13:29:38 pluto[14784]: packet from 196.23.49.121:500: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000005] Sep 28 13:29:38 pluto[14784]: packet from 196.23.49.121:500: received Vendor ID payload [RFC 3947] method set to=110 Sep 28 13:29:38 pluto[14784]: packet from 196.23.49.121:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but already using method 110 Sep 28 13:29:38 pluto[14784]: packet from 196.23.49.121:500: ignoring Vendor ID payload [FRAGMENTATION] Sep 28 13:29:38 pluto[14784]: packet from 196.23.49.121:500: ignoring Vendor ID payload [MS-Negotiation Discovery Capable] Sep 28 13:29:38 pluto[14784]: packet from 196.23.49.121:500: ignoring Vendor ID payload [Vid-Initial-Contact] Sep 28 13:29:38 pluto[14784]: packet from 196.23.49.121:500: ignoring Vendor ID payload [IKE CGA version 1] Sep 28 13:29:38 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[11] 196.23.49.121 #14: responding to Main Mode from unknown peer 196.23.49.121 Sep 28 13:29:38 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[11] 196.23.49.121 #14: Diffie-Hellman group 20 is not a supported modp group. Attribute OAKLEY_GROUP_DESCRIPTION Sep 28 13:29:38 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[11] 196.23.49.121 #14: Diffie-Hellman group 19 is not a supported modp group. Attribute OAKLEY_GROUP_DESCRIPTION Sep 28 13:29:38 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[11] 196.23.49.121 #14: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1 Sep 28 13:29:38 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[11] 196.23.49.121 #14: STATE_MAIN_R1: sent MR1, expecting MI2 Sep 28 13:29:38 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[11] 196.23.49.121 #14: NAT-Traversal: Result using RFC 3947 (NAT-Traversal): peer is NATed Sep 28 13:29:38 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[11] 196.23.49.121 #14: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2 Sep 28 13:29:38 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[11] 196.23.49.121 #14: STATE_MAIN_R2: sent MR2, expecting MI3 Sep 28 13:29:38 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[11] 196.23.49.121 #14: Main mode peer ID is ID_IPV4_ADDR: '10.65.196.32' Sep 28 13:29:38 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[11] 196.23.49.121 #14: switched from "L2TP-PSK-orgWIN2KXP" to "L2TP-PSK-orgWIN2KXP" Sep 28 13:29:38 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[12] 196.23.49.121 #14: deleting connection "L2TP-PSK-orgWIN2KXP" instance with peer 196.23.49.121 {isakmp=#0/ipsec=#0} Sep 28 13:29:39 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[12] 196.23.49.121 #14: I did not send a certificate because I do not have one. Sep 28 13:29:39 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[12] 196.23.49.121 #14: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3 Sep 28 13:29:39 pluto[14784]: | NAT-T: new mapping 196.23.49.121:500/4500) Sep 28 13:29:39 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[12] 196.23.49.121 #14: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp2048} Sep 28 13:29:39 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[12] 196.23.49.121 #15: responding to Quick Mode {msgid:01000000} Sep 28 13:29:39 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[12] 196.23.49.121 #15: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1 Sep 28 13:29:39 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[12] 196.23.49.121 #15: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2 Sep 28 13:29:39 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[12] 196.23.49.121 #15: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2 Sep 28 13:29:39 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[12] 196.23.49.121 #15: STATE_QUICK_R2: IPsec SA established {ESP=>0x9171bf1e <0x334bcad5 xfrm=AES_128-HMAC_SHA1 NATD=196.23.49.121:4500 DPD=none} Sep 28 13:33:22 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[12] 196.23.49.121: terminating SAs using this connection Sep 28 13:33:22 pluto[14784]: "L2TP-PSK-orgWIN2KXP" #15: deleting state (STATE_QUICK_R2) Sep 28 13:33:22 pluto[14784]: "L2TP-PSK-orgWIN2KXP" #14: deleting state (STATE_MAIN_R3) Sep 28 13:33:22 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[12] 196.23.49.121: deleting connection "L2TP-PSK-orgWIN2KXP" instance with peer 196.23.49.121 {isakmp=#0/ipsec=#0} Sep 28 13:33:22 pluto[14784]: packet from 196.23.49.121:4500: Quick Mode message is for a non-existent (expired?) ISAKMP SA Sep 28 13:33:22 pluto[14784]: packet from 196.23.49.121:4500: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000005] Sep 28 13:33:22 pluto[14784]: packet from 196.23.49.121:4500: received Vendor ID payload [RFC 3947] method set to=110 Sep 28 13:33:22 pluto[14784]: packet from 196.23.49.121:4500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but already using method 110 Sep 28 13:33:22 pluto[14784]: packet from 196.23.49.121:4500: ignoring Vendor ID payload [FRAGMENTATION] Sep 28 13:33:22 pluto[14784]: packet from 196.23.49.121:4500: ignoring Vendor ID payload [MS-Negotiation Discovery Capable] Sep 28 13:33:22 pluto[14784]: packet from 196.23.49.121:4500: ignoring Vendor ID payload [Vid-Initial-Contact] Sep 28 13:33:22 pluto[14784]: packet from 196.23.49.121:4500: ignoring Vendor ID payload [IKE CGA version 1] Sep 28 13:33:22 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[13] 196.23.49.121 #16: responding to Main Mode from unknown peer 196.23.49.121 Sep 28 13:33:22 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[13] 196.23.49.121 #16: Diffie-Hellman group 20 is not a supported modp group. Attribute OAKLEY_GROUP_DESCRIPTION Sep 28 13:33:22 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[13] 196.23.49.121 #16: Diffie-Hellman group 19 is not a supported modp group. Attribute OAKLEY_GROUP_DESCRIPTION Sep 28 13:33:22 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[13] 196.23.49.121 #16: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1 Sep 28 13:33:22 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[13] 196.23.49.121 #16: STATE_MAIN_R1: sent MR1, expecting MI2 Sep 28 13:33:23 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[13] 196.23.49.121 #16: NAT-Traversal: Result using RFC 3947 (NAT-Traversal): peer is NATed Sep 28 13:33:23 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[13] 196.23.49.121 #16: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2 Sep 28 13:33:23 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[13] 196.23.49.121 #16: STATE_MAIN_R2: sent MR2, expecting MI3 Sep 28 13:33:23 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[13] 196.23.49.121 #16: Main mode peer ID is ID_IPV4_ADDR: '10.65.196.32' Sep 28 13:33:23 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[13] 196.23.49.121 #16: switched from "L2TP-PSK-orgWIN2KXP" to "L2TP-PSK-orgWIN2KXP" Sep 28 13:33:23 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[14] 196.23.49.121 #16: deleting connection "L2TP-PSK-orgWIN2KXP" instance with peer 196.23.49.121 {isakmp=#0/ipsec=#0} Sep 28 13:33:23 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[14] 196.23.49.121 #16: I did not send a certificate because I do not have one. Sep 28 13:33:23 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[14] 196.23.49.121 #16: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3 Sep 28 13:33:23 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[14] 196.23.49.121 #16: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp2048} Sep 28 13:33:23 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[14] 196.23.49.121 #17: responding to Quick Mode {msgid:01000000} Sep 28 13:33:23 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[14] 196.23.49.121 #17: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1 Sep 28 13:33:23 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[14] 196.23.49.121 #17: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2 Sep 28 13:33:23 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[14] 196.23.49.121 #17: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2 Sep 28 13:33:23 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[14] 196.23.49.121 #17: STATE_QUICK_R2: IPsec SA established {ESP=>0x3eb50f5b <0x1daf5cba xfrm=AES_128-HMAC_SHA1 NATD=196.23.49.121:4500 DPD=none} Sep 28 13:33:30 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[14] 196.23.49.121: terminating SAs using this connection Sep 28 13:33:30 pluto[14784]: "L2TP-PSK-orgWIN2KXP" #17: deleting state (STATE_QUICK_R2) Sep 28 13:33:30 pluto[14784]: "L2TP-PSK-orgWIN2KXP" #16: deleting state (STATE_MAIN_R3) Sep 28 13:33:30 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[14] 196.23.49.121: deleting connection "L2TP-PSK-orgWIN2KXP" instance with peer 196.23.49.121 {isakmp=#0/ipsec=#0} Sep 28 13:34:21 pluto[14784]: packet from 196.23.49.121:500: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000005] Sep 28 13:34:21 pluto[14784]: packet from 196.23.49.121:500: received Vendor ID payload [RFC 3947] method set to=110 Sep 28 13:34:21 pluto[14784]: packet from 196.23.49.121:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but already using method 110 Sep 28 13:34:21 pluto[14784]: packet from 196.23.49.121:500: ignoring Vendor ID payload [FRAGMENTATION] Sep 28 13:34:21 pluto[14784]: packet from 196.23.49.121:500: ignoring Vendor ID payload [MS-Negotiation Discovery Capable] Sep 28 13:34:21 pluto[14784]: packet from 196.23.49.121:500: ignoring Vendor ID payload [Vid-Initial-Contact] Sep 28 13:34:21 pluto[14784]: packet from 196.23.49.121:500: ignoring Vendor ID payload [IKE CGA version 1] Sep 28 13:34:21 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[15] 196.23.49.121 #18: responding to Main Mode from unknown peer 196.23.49.121 Sep 28 13:34:21 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[15] 196.23.49.121 #18: Diffie-Hellman group 20 is not a supported modp group. Attribute OAKLEY_GROUP_DESCRIPTION Sep 28 13:34:21 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[15] 196.23.49.121 #18: Diffie-Hellman group 19 is not a supported modp group. Attribute OAKLEY_GROUP_DESCRIPTION Sep 28 13:34:21 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[15] 196.23.49.121 #18: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1 Sep 28 13:34:21 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[15] 196.23.49.121 #18: STATE_MAIN_R1: sent MR1, expecting MI2 Sep 28 13:34:21 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[15] 196.23.49.121 #18: NAT-Traversal: Result using RFC 3947 (NAT-Traversal): peer is NATed Sep 28 13:34:21 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[15] 196.23.49.121 #18: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2 Sep 28 13:34:21 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[15] 196.23.49.121 #18: STATE_MAIN_R2: sent MR2, expecting MI3 Sep 28 13:34:21 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[15] 196.23.49.121 #18: Main mode peer ID is ID_IPV4_ADDR: '10.65.196.32' Sep 28 13:34:21 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[15] 196.23.49.121 #18: switched from "L2TP-PSK-orgWIN2KXP" to "L2TP-PSK-orgWIN2KXP" Sep 28 13:34:21 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121 #18: deleting connection "L2TP-PSK-orgWIN2KXP" instance with peer 196.23.49.121 {isakmp=#0/ipsec=#0} Sep 28 13:34:21 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121 #18: I did not send a certificate because I do not have one. Sep 28 13:34:21 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121 #18: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3 Sep 28 13:34:21 pluto[14784]: | NAT-T: new mapping 196.23.49.121:500/4500) Sep 28 13:34:21 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121 #18: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp2048} Sep 28 13:34:21 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121 #19: responding to Quick Mode {msgid:01000000} Sep 28 13:34:21 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121 #19: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1 Sep 28 13:34:21 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121 #19: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2 Sep 28 13:34:22 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121 #19: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2 Sep 28 13:34:22 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121 #19: STATE_QUICK_R2: IPsec SA established {ESP=>0x79805fc7 <0x9abc8047 xfrm=AES_128-HMAC_SHA1 NATD=196.23.49.121:4500 DPD=none} Sep 28 13:34:53 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121 #18: received Delete SA payload: deleting ISAKMP State #18 Sep 28 13:34:53 pluto[14784]: packet from 196.23.49.121:4500: received and ignored informational message Sep 28 13:35:04 pluto[14784]: packet from 196.23.49.121:500: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000005] Sep 28 13:35:05 pluto[14784]: packet from 196.23.49.121:500: received Vendor ID payload [RFC 3947] method set to=110 Sep 28 13:35:05 pluto[14784]: packet from 196.23.49.121:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but already using method 110 Sep 28 13:35:05 pluto[14784]: packet from 196.23.49.121:500: ignoring Vendor ID payload [FRAGMENTATION] Sep 28 13:35:05 pluto[14784]: packet from 196.23.49.121:500: ignoring Vendor ID payload [MS-Negotiation Discovery Capable] Sep 28 13:35:05 pluto[14784]: packet from 196.23.49.121:500: ignoring Vendor ID payload [Vid-Initial-Contact] Sep 28 13:35:05 pluto[14784]: packet from 196.23.49.121:500: ignoring Vendor ID payload [IKE CGA version 1] Sep 28 13:35:05 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121 #20: responding to Main Mode from unknown peer 196.23.49.121 Sep 28 13:35:06 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121 #20: Diffie-Hellman group 20 is not a supported modp group. Attribute OAKLEY_GROUP_DESCRIPTION Sep 28 13:35:08 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121 #20: Diffie-Hellman group 19 is not a supported modp group. Attribute OAKLEY_GROUP_DESCRIPTION Sep 28 13:35:09 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121 #20: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1 Sep 28 13:35:10 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121 #20: STATE_MAIN_R1: sent MR1, expecting MI2 Sep 28 13:35:11 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121 #20: NAT-Traversal: Result using RFC 3947 (NAT-Traversal): peer is NATed Sep 28 13:35:12 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121 #20: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2 Sep 28 13:35:19 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121 #20: STATE_MAIN_R2: sent MR2, expecting MI3 Sep 28 13:35:21 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121 #20: Main mode peer ID is ID_IPV4_ADDR: '10.65.196.32' Sep 28 13:35:21 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121 #20: I did not send a certificate because I do not have one. Sep 28 13:35:21 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121 #20: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3 Sep 28 13:35:21 pluto[14784]: | NAT-T: new mapping 196.23.49.121:500/4500) Sep 28 13:35:21 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121 #20: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp2048} Sep 28 13:35:21 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[17] 196.23.49.121 #21: responding to Quick Mode {msgid:01000000} Sep 28 13:35:21 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[17] 196.23.49.121 #21: cannot install eroute -- it is in use for "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121 #19 Sep 28 13:35:21 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[17] 196.23.49.121: deleting connection "L2TP-PSK-orgWIN2KXP" instance with peer 196.23.49.121 {isakmp=#0/ipsec=#0} Sep 28 13:35:21 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121 #20: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x01000000 (perhaps this is a duplicated packet) Sep 28 13:35:21 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121 #20: sending encrypted notification INVALID_MESSAGE_ID to 196.23.49.121:4500 Sep 28 13:35:21 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121 #20: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x01000000 (perhaps this is a duplicated packet) Sep 28 13:35:21 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121 #20: sending encrypted notification INVALID_MESSAGE_ID to 196.23.49.121:4500 Sep 28 13:35:21 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121 #20: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x01000000 (perhaps this is a duplicated packet) Sep 28 13:35:21 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121 #20: sending encrypted notification INVALID_MESSAGE_ID to 196.23.49.121:4500 Sep 28 13:35:25 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121 #20: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x01000000 (perhaps this is a duplicated packet) Sep 28 13:35:25 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121 #20: sending encrypted notification INVALID_MESSAGE_ID to 196.23.49.121:4500 Sep 28 13:35:30 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121 #20: received Delete SA payload: deleting ISAKMP State #20 Sep 28 13:35:30 pluto[14784]: packet from 196.23.49.121:4500: received and ignored informational message Sep 28 13:35:33 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121: terminating SAs using this connection Sep 28 13:35:34 pluto[14784]: "L2TP-PSK-orgWIN2KXP" #19: deleting state (STATE_QUICK_R2) Sep 28 13:35:34 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[16] 196.23.49.121: deleting connection "L2TP-PSK-orgWIN2KXP" instance with peer 196.23.49.121 {isakmp=#0/ipsec=#0} Sep 28 13:35:40 pluto[14784]: packet from 196.23.49.121:500: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000005] Sep 28 13:35:41 pluto[14784]: packet from 196.23.49.121:500: received Vendor ID payload [RFC 3947] method set to=110 Sep 28 13:35:41 pluto[14784]: packet from 196.23.49.121:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but already using method 110 Sep 28 13:35:41 pluto[14784]: packet from 196.23.49.121:500: ignoring Vendor ID payload [FRAGMENTATION] Sep 28 13:35:41 pluto[14784]: packet from 196.23.49.121:500: ignoring Vendor ID payload [MS-Negotiation Discovery Capable] Sep 28 13:35:41 pluto[14784]: packet from 196.23.49.121:500: ignoring Vendor ID payload [Vid-Initial-Contact] Sep 28 13:35:41 pluto[14784]: packet from 196.23.49.121:500: ignoring Vendor ID payload [IKE CGA version 1] Sep 28 13:35:41 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[18] 196.23.49.121 #22: responding to Main Mode from unknown peer 196.23.49.121 Sep 28 13:35:41 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[18] 196.23.49.121 #22: Diffie-Hellman group 20 is not a supported modp group. Attribute OAKLEY_GROUP_DESCRIPTION Sep 28 13:35:41 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[18] 196.23.49.121 #22: Diffie-Hellman group 19 is not a supported modp group. Attribute OAKLEY_GROUP_DESCRIPTION Sep 28 13:35:41 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[18] 196.23.49.121 #22: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1 Sep 28 13:35:41 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[18] 196.23.49.121 #22: STATE_MAIN_R1: sent MR1, expecting MI2 Sep 28 13:35:41 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[18] 196.23.49.121 #22: NAT-Traversal: Result using RFC 3947 (NAT-Traversal): peer is NATed Sep 28 13:35:41 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[18] 196.23.49.121 #22: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2 Sep 28 13:35:41 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[18] 196.23.49.121 #22: STATE_MAIN_R2: sent MR2, expecting MI3 Sep 28 13:35:41 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[18] 196.23.49.121 #22: Main mode peer ID is ID_IPV4_ADDR: '10.65.196.32' Sep 28 13:35:41 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[18] 196.23.49.121 #22: switched from "L2TP-PSK-orgWIN2KXP" to "L2TP-PSK-orgWIN2KXP" Sep 28 13:35:41 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[19] 196.23.49.121 #22: deleting connection "L2TP-PSK-orgWIN2KXP" instance with peer 196.23.49.121 {isakmp=#0/ipsec=#0} Sep 28 13:35:41 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[19] 196.23.49.121 #22: I did not send a certificate because I do not have one. Sep 28 13:35:41 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[19] 196.23.49.121 #22: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3 Sep 28 13:35:41 pluto[14784]: | NAT-T: new mapping 196.23.49.121:500/4500) Sep 28 13:35:41 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[19] 196.23.49.121 #22: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp2048} Sep 28 13:35:41 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[19] 196.23.49.121 #23: responding to Quick Mode {msgid:01000000} Sep 28 13:35:41 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[19] 196.23.49.121 #23: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1 Sep 28 13:35:41 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[19] 196.23.49.121 #23: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2 Sep 28 13:35:41 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[19] 196.23.49.121 #23: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2 Sep 28 13:35:41 pluto[14784]: "L2TP-PSK-orgWIN2KXP"[19] 196.23.49.121 #23: STATE_QUICK_R2: IPsec SA established {ESP=>0xeeefe447 <0xe0dc6007 xfrm=AES_128-HMAC_SHA1 NATD=196.23.49.121:4500 DPD=none}