debug ikev2
Enables IKEv2 debugging.
Syntax
debug ikev2
{
all
|
error
|
event
|
packet
[
detail
|
receive
|
send
]
|
peer
ip-address
|
trace
[
info
]
}
no debug ikev2
{
all
|
error
|
event
|
packet
[
detail
|
receive
|
send
]
|
peer
ip-address
|
trace
[
info
]
}
Parameters
Modes
Privileged EXEC mode
Examples
The following command debugs IKEv2 event during tunnel down and rekeying.
device# debug ikev2 event Debug: Mar 13 20:14:08 IKE: ipike_isakmp_resend_tmo_cb() :: for tunnel 44 Debug: Mar 13 20:14:39 IKE: ipike_ipsec_sadb_sa_rekey() :: rekey timeout for IPsec SA 0x1224
The following command debugs IKEv2 error during mismatch in algorithms.
device# debug ikev2 error IKEV2: ike error is enabled Debug: Mar 13 20:14:08 IKE: ipike_isakmp_resend_tmo_cb() :: for tunnel 44 Debug: Mar 13 20:14:39 IKE: ipike_ipsec_sadb_sa_rekey() :: rekey timeout for IPsec SA 0x1224Debug: Mar 13 20:14:08 IKE: ipike_isakmp_resend_tmo_cb() :: for tunnel 44 Debug: Mar 13 20:14:39 IKE: ipike_ipsec_sadb_sa_rekey() :: rekey timeout for IPsec SA 0x1224 Debug: Mar 13 20:21:39 IKE: ipike_payload_notify_process_error() :: exchange rejected with NO_PROPOSAL_CHOSEN for tunnel 31 Debug: Mar 13 20:21:39 IKE: ipike_exchange_sa_init_on_delete() :: the exchange was not finished, removing (incomplete) IKE SA for tunnel 31 Debug: Mar 13 20:21:44 IKE: ipike_policy_select_sa_param: no proposal was accepted Debug: Mar 13 20:21:44 IKE: ipike_exchange_sa_init_on_delete() :: the exchange was not finished, removing (incomplete) IKE SA for tunnel 31 Debug: Mar 13 20:21:49 IKE: ipike_payload_notify_process_error() :: exchange rejected with NO_PROPOSAL_CHOSEN for tunnel 31 Debug: Mar 13 20:21:49 IKE: ipike_exchange_sa_init_on_delete() :: the exchange was not finished, removing (incomplete) IKE SA for tunnel 31 Debug: Mar 13 20:21:54 IKE: ike_wr_policy_accept_id return 1
The following command debugs IKEv2 trace.
device# debug ikev2 trace Debug: Mar 13 20:28:40 IKE: Locking IKE SA (ref count 1) Debug: Mar 13 20:28:40 IKE: initiator cookie: 0xe6e53f1404a54b7c Debug: Mar 13 20:28:40 IKE: responder cookie: 0xf81e5e7816388386 Debug: Mar 13 20:28:40 IKE: Locking IKE SA (ref count 2) Debug: Mar 13 20:28:40 IKE: initiator cookie: 0xe6e53f1404a54b7c Debug: Mar 13 20:28:40 IKE: responder cookie: 0xf81e5e7816388386 Debug: Mar 13 20:28:40 IKE: ipike_isakmp_hash_obj_cookie() :: hash key: id=721, type=37, init=1 -> val = 816f120f Debug: Mar 13 20:28:40 IKE: ipike_isakmp_hash_add() :: hash: id=721, type=37, init=1, phase1=0 Debug: Mar 13 20:28:40 IKE: Sending request to 103.1.1.2 [500] Debug: Mar 13 20:28:40 IKE: Message encrypted 88 bytes Debug: Mar 13 20:28:40 IKE: Send 88 octets from 106.1.1.1:500 to 103.1.1.2:500 Debug: Mar 13 20:28:40 IKE: Releasing IKE SA (ref count 1), for tunnel 2 Debug: Mar 13 20:28:40 IKE: initiator cookie: 0xe6e53f1404a54b7c Debug: Mar 13 20:28:40 IKE: responder cookie: 0xf81e5e7816388386 Debug: Mar 13 20:28:40 IKE: Locking IKE SA (ref count 1) Debug: Mar 13 20:28:40 IKE: initiator cookie: 0xb23c157874ab5638 Debug: Mar 13 20:28:40 IKE: responder cookie: 0x599cb6a1a4d3d0fb Debug: Mar 13 20:28:40 IKE: Releasing IKE SA (ref count 0), for tunnel 17 Debug: Mar 13 20:28:40 IKE: initiator cookie: 0xb23c157874ab5638 Debug: Mar 13 20:28:40 IKE: responder cookie: 0x599cb6a1a4d3d0fb Debug: Mar 13 20:28:40 ike ipv4 packet received with src 103.1.1.2 and dest 106.1.1.1 vrf 0 length 88 Debug: Mar 13 20:28:40 IKE: ipike_isakmp_hash_get_from_cookie() :: hash key: id=721, type=37, init=1 Debug: Mar 13 20:28:40 IKE: Message decrypted 88 bytes Debug: Mar 13 20:28:40 IKE: ipike_check_payloads() :: no payloads exist according to the ISAKMP header Debug: Mar 13 20:28:40 IKE: ipike_isakmp_process_message_response() :: destroying completed exchange Debug: Mar 13 20:28:40 IKE: ipike_isakmp_free_exchange() :: exchange 193/1/9 type - INFORMATIONAL Debug: Mar 13 20:28:40 IKE: ipike_isakmp_hash_obj_cookie() :: hash key: id=0, type=0, init=0 -> val = 816f120f Debug: Mar 13 20:28:40 IKE: Releasing IKE SA (ref count 0), for tunnel 2 Debug: Mar 13 20:28:40 IKE: initiator cookie: 0xe6e53f1404a54b7c Debug: Mar 13 20:28:40 IKE: responder cookie: 0xf81e5e7816388386
The following command debugs IKEv2 trace info.
device# debug ikev2 trace info IKEV2: trace info is enabled DUT1#Debug: Mar 13 20:27:18 IKE: Received response 18.18.18.2[500], INFORMATIONAL, #2(2), ID 2da Debug: Mar 13 20:27:18 IKE: informational exchange done Debug: Mar 13 20:27:18 IKE: Received response 13.13.13.2[500], INFORMATIONAL, #2(2), ID 2 Debug: Mar 13 20:27:18 IKE: informational exchange done Debug: Mar 13 20:27:18 IKE: Received response 4.4.4.2[500], INFORMATIONAL, #2(2), ID 2bc Debug: Mar 13 20:27:18 IKE: informational exchange done Debug: Mar 13 20:27:28 IKE: Received response 22.22.22.2[500], INFORMATIONAL, #2(2), ID 2de Debug: Mar 13 20:27:28 IKE: informational exchange done Debug: Mar 13 20:27:28 IKE: Received response 2.2.2.2[500], INFORMATIONAL, #2(2), ID 2c7 Debug: Mar 13 20:27:28 IKE: informational exchange done
The following command debugs IKEv2 packet.
device# debug ikev2 packet IKEV2: packet debugging is on Debug: Mar 13 20:29:26 ike ipv4 packet received with src 122.1.1.2 and dest 120.1.1.1 vrf 3 length 88 Debug: Mar 13 20:29:26 ike_transmit_packet send packet to 122.1.1.2:500 from 120.1.1.1:500 vrf:3 length 88 Debug: Mar 13 20:29:26 IKE sub task: packet transmitted to 122.1.1.2 Debug: Mar 13 20:29:37 ike ipv4 packet received with src 102.1.1.2 and dest 100.1.1.1 vrf 0 length 88 Debug: Mar 13 20:29:37 ike_transmit_packet send packet to 102.1.1.2:500 from 100.1.1.1:500 vrf:0 length 88 Debug: Mar 13 20:29:37 IKE sub task: packet transmitted to 102.1.1.2 Debug: Mar 13 20:29:41 ike_transmit_packet send packet to 12.12.12.2:500 from 12.12.12.1:500 vrf:0 length 88 Debug: Mar 13 20:29:41 IKE sub task: packet transmitted to 12.12.12.2 Debug: Mar 13 20:29:41 ike ipv4 packet received with src 12.12.12.2 and dest 12.12.12.1 vrf 0 length 88 Debug: Mar 13 20:29:58 IKE: Create notify payload with message type 16393 Debug: Mar 13 20:29:58 IKE: Create notify payload with message type 16394 Debug: Mar 13 20:29:58 ike_transmit_packet send packet to 20.20.20.2:500 from 20.20.20.1:500 vrf:0 length 248 Debug: Mar 13 20:29:58 IKE sub task: packet transmitted to 20.20.20.2 Debug: Mar 13 20:29:58 ike ipv4 packet received with src 20.20.20.2 and dest 20.20.20.1 vrf 0 length 248 Debug: Mar 13 20:29:58 IKE: Process initial contact notify payload for tunnel 20 Debug: Mar 13 20:29:58 ike_transmit_packet send packet to 20.20.20.2:500 from 20.20.20.1:500 vrf:0 length 88 Debug: Mar 13 20:29:58 IKE sub task: packet transmitted to 20.20.20.2 Debug: Mar 13 20:29:58 ike ipv4 packet received with src 20.20.20.2 and dest 20.20.20.1 vrf 0 length 88 Debug: Mar 13 20:29:58 ike ipv4 packet received with src 20.20.20.2 and dest 20.20.20.1 vrf 0 length 88 Debug: Mar 13 20:29:58 ike_transmit_packet send packet to 20.20.20.2:500 from 20.20.20.1:500 vrf:0 length 88 Debug: Mar 13 20:29:58 IKE sub task: packet transmitted to 20.20.20.2
The following command debugs IKEv2 send packet.
device# debug ikev2 packet send Debug: Mar 13 20:30:53 ike_transmit_packet send packet to 19.19.19.2:500 from 19.19.19.1:500 vrf:0 length 88
The following command debugs IKEv2 receive packet.
device# debug ikev2 packet receive Debug: Debug: Mar 13 20:31:32 ike ipv4 packet received with src 13.13.13.2 and dest 13.13.13.1 vrf 0 length 80 Debug: Mar 13 20:32:10 ike ipv4 packet received with src 122.1.1.2 and dest 120.1.1.1 vrf 3 length 88 Debug: Mar 13 20:32:11 ike ipv4 packet received with src 122.1.1.2 and dest 120.1.1.1 vrf 3 length 88 Debug: Mar 13 20:32:26 ike ipv4 packet received with src 18.18.18.2 and dest 18.18.18.1 vrf 0 length 88 Debug: Mar 13 20:32:26 ike ipv4 packet received with src 4.4.4.2 and dest 4.4.4.1 vrf 0 length 88
The following command debugs IKEv2 packets in detail.
device# debug ikev2 packet detail Debug: Mar 13 20:33:17 +++ ISAKMP package start (message # 1) +++ Debug: Mar 13 20:33:17 < IKE Header > Debug: Mar 13 20:33:17 IKE_SA Initiator's SPI: 0x333aa6c1ea301ed5 Debug: Mar 13 20:33:17 IKE_SA Responder's SPI: 0xb311338eb36cd7de Debug: Mar 13 20:33:17 Next Payload: none (0) Debug: Mar 13 20:33:17 Version: 2.0 Debug: Mar 13 20:33:17 Exchange Type: INFORMATIONAL Debug: Mar 13 20:33:17 Flags: [ INITIATOR ] Debug: Mar 13 20:33:17 Message ID: 684 Debug: Mar 13 20:33:17 Length: 28 (#x) Debug: Mar 13 20:33:17 --- ISAKMP package end (message # 1) --- Debug: Mar 13 20:33:17 +++ ISAKMP package start (message # 2) +++ Debug: Mar 13 20:33:17 < IKE Header > Debug: Mar 13 20:33:17 IKE_SA Initiator's SPI: 0x333aa6c1ea301ed5 Debug: Mar 13 20:33:17 IKE_SA Responder's SPI: 0xb311338eb36cd7de Debug: Mar 13 20:33:17 Next Payload: none (0) Debug: Mar 13 20:33:17 Version: 2.0 Debug: Mar 13 20:33:17 Exchange Type: INFORMATIONAL Debug: Mar 13 20:33:17 Flags: [ RESPONSE ] Debug: Mar 13 20:33:17 Message ID: 684 Debug: Mar 13 20:33:17 Length: 28 (#x) Debug: Mar 13 20:33:17 --- ISAKMP package end (message # 2) --- Debug: Mar 13 20:33:23 +++ ISAKMP package start (message # 1) +++ Debug: Mar 13 20:33:23 < IKE Header > Debug: Mar 13 20:33:23 IKE_SA Initiator's SPI: 0x506e28a9b3870d90 Debug: Mar 13 20:33:23 IKE_SA Responder's SPI: 0xb860b97a5b1995b8 Debug: Mar 13 20:33:23 Next Payload: none (0) Debug: Mar 13 20:33:23 Version: 2.0 Debug: Mar 13 20:33:23 Exchange Type: INFORMATIONAL Debug: Mar 13 20:33:23 Flags: [ ] Debug: Mar 13 20:33:23 Message ID: 2 Debug: Mar 13 20:33:23 Length: 28 (#x)
The following command debugs all IKEv2 instances.
device# debug ikev2 all Debug: Mar 13 20:38:39 ike ipv4 packet received with src 102.1.1.2 and dest 100.1.1.1 vrf 0 length 88 Debug: Mar 13 20:38:39 IKE: ipike_isakmp_hash_get_from_cookie() :: hash key: id=6, type=37, init=0 Debug: Mar 13 20:38:39 IKE: ipike_isakmp_hash_get_from_cookie() :: hash key: id=6, type=37, init=0 Debug: Mar 13 20:38:39 IKE: New exchange started (INFORMATIONAL with Message ID: 6) Debug: Mar 13 20:38:39 IKE: Locking IKE SA (ref count 1) Debug: Mar 13 20:38:39 IKE: initiator cookie: 0xd762b2a1b460a8da Debug: Mar 13 20:38:39 IKE: responder cookie: 0x22e7083e0ef7753a Debug: Mar 13 20:38:39 IKE: ipike_isakmp_lookup_config() :: Found IKE SA in SADB database, id=tunnel44, looking up in config database Debug: Mar 13 20:38:39 IKE: Releasing IKE SA (ref count 0), for tunnel 44 Debug: Mar 13 20:38:39 IKE: initiator cookie: 0xd762b2a1b460a8da Debug: Mar 13 20:38:39 IKE: responder cookie: 0x22e7083e0ef7753a Debug: Mar 13 20:38:39 IKE: ipike_isakmp_lookup_config() :: Found IKE SA configuration based on SADB entry Debug: Mar 13 20:38:39 IKE: Locking IKE SA (ref count 1) Debug: Mar 13 20:38:39 IKE: initiator cookie: 0xd762b2a1b460a8da Debug: Mar 13 20:38:39 IKE: responder cookie: 0x22e7083e0ef7753a Debug: Mar 13 20:38:39 IKE: ipike_isakmp_lookup_config() :: Found IKE SA in SADB database, id=tunnel44, looking up in config database Debug: Mar 13 20:38:39 IKE: Releasing IKE SA (ref count 0), for tunnel 44 Debug: Mar 13 20:38:39 IKE: initiator cookie: 0xd762b2a1b460a8da Debug: Mar 13 20:38:39 IKE: responder cookie: 0x22e7083e0ef7753a Debug: Mar 13 20:38:39 IKE: ipike_isakmp_lookup_config() :: Found IKE SA configuration based on SADB entry Debug: Mar 13 20:38:39 IKE: Locking IKE SA (ref count 1) Debug: Mar 13 20:38:39 IKE: initiator cookie: 0xd762b2a1b460a8da Debug: Mar 13 20:38:39 IKE: responder cookie: 0x22e7083e0ef7753a Debug: Mar 13 20:38:39 IKE: ipike_isakmp_hash_obj_cookie() :: hash key: id=6, type=37, init=0 -> val = f2d6968f Debug: Mar 13 20:38:39 IKE: ipike_isakmp_hash_add() :: hash: id=6, type=37, init=0, phase1=0 Debug: Mar 13 20:38:39 IKE: Received request 102.1.1.2[500], INFORMATIONAL, #1(2), ID 6 Debug: Mar 13 20:38:39 IKE: Message decrypted 88 bytes Debug: Mar 13 20:38:39 +++ ISAKMP package start (message # 1) +++ Debug: Mar 13 20:38:39 < IKE Header > Debug: Mar 13 20:38:39 IKE_SA Initiator's SPI: 0xd762b2a1b460a8da Debug: Mar 13 20:38:39 IKE_SA Responder's SPI: 0x22e7083e0ef7753a Debug: Mar 13 20:38:39 Next Payload: delete (42) Debug: Mar 13 20:38:39 Version: 2.0 Debug: Mar 13 20:38:39 Exchange Type: INFORMATIONAL Debug: Mar 13 20:38:39 Flags: [ INITIATOR ] Debug: Mar 13 20:38:39 Message ID: 6 Debug: Mar 13 20:38:39 Length: 40 (#x) Debug: Mar 13 20:38:39 IKE: < delete > Debug: Mar 13 20:38:39 IKE: Next Payload: none (0) Debug: Mar 13 20:38:39 IKE: Payload Length: 12 (#x) Debug: Mar 13 20:38:39 IKE: protocol ID: IPSEC_ESP Debug: Mar 13 20:38:39 IKE: SPI 1: 00001748 Debug: Mar 13 20:38:39 --- ISAKMP package end (message # 1) --- Debug: Mar 13 20:38:39 IKE: Deleting IPsec SA Debug: Mar 13 20:38:39 IKE: Deleting IPsec SA Debug: Mar 13 20:38:39 IKE: Sending response to 102.1.1.2 [500] Debug: Mar 13 20:38:39 +++ ISAKMP package start (message # 2) +++ Debug: Mar 13 20:38:39 < IKE Header > Debug: Mar 13 20:38:39 IKE_SA Initiator's SPI: 0xd762b2a1b460a8da Debug: Mar 13 20:38:39 IKE_SA Responder's SPI: 0x22e7083e0ef7753a Debug: Mar 13 20:38:39 Next Payload: delete (42) Debug: Mar 13 20:38:39 Version: 2.0 Debug: Mar 13 20:38:39 Exchange Type: INFORMATIONAL Debug: Mar 13 20:38:39 Flags: [ RESPONSE ] Debug: Mar 13 20:38:39 Message ID: 6 Debug: Mar 13 20:38:39 Length: 40 (#x) Debug: Mar 13 20:38:39 IKE: < delete > Debug: Mar 13 20:38:39 IKE: Next Payload: none (0) Debug: Mar 13 20:38:39 IKE: Payload Length: 12 (#x) Debug: Mar 13 20:38:39 IKE: protocol ID: IPSEC_ESP Debug: Mar 13 20:38:39 IKE: SPI 1: 00000b81 Debug: Mar 13 20:38:39 --- ISAKMP package end (message # 2) --- Debug: Mar 13 20:38:39 IKE: Sending message 102.1.1.2[500]: INFORMATIONAL, #2(2), ID 6 Debug: Mar 13 20:38:39 IKE: Message encrypted 88 bytes Debug: Mar 13 20:38:39 IKE: Send 88 octets from 100.1.1.1:500 to 102.1.1.2:500 Debug: Mar 13 20:38:39 IKE: informational exchange done Debug: Mar 13 20:38:39 IKE: ipike_isakmp_add_ipsec_negotiation() :: Adding IPsec negotiation for 'tunnel44' Debug: Mar 13 20:38:39 IKE: ipike_isakmp_add_ipsec_negotiation() :: looking up IKE SA based on addresses Debug: Mar 13 20:38:39 IKE: local address: 100.1.1.1 Debug: Mar 13 20:38:39 IKE: remote address: 102.1.1.2 Debug: Mar 13 20:38:39 IKE: Locking IKE SA (ref count 2) Debug: Mar 13 20:38:39 IKE: initiator cookie: 0xd762b2a1b460a8da Debug: Mar 13 20:38:39 IKE: responder cookie: 0x22e7083e0ef7753a Debug: Mar 13 20:38:39 IKE: ipike_isakmp_add_ipsec_negotiation() :: ipsec sa will not be started by responder for tunnel 44 Debug: Mar 13 20:38:39 IKE: Releasing IKE SA (ref count 1), for tunnel 44 Debug: Mar 13 20:38:39 IKE: initiator cookie: 0xd762b2a1b460a8da Debug: Mar 13 20:38:39 IKE: responder cookie: 0x22e7083e0ef7753a Debug: Mar 13 20:38:39 IKE: ipike_dispatch_start_sa_negotiation() :: failed to start IPSec negotiation (tunnel44_0) SYSLOG: <14> Mar 13 20:38:39 DUT1 IPsec: IPSec session down Source 102.1.1.2 Destination 100.1.1.1 VRF 0 SPI 0xb81 Direction Ingress SYSLOG: <14> Mar 13 20:38:39 DUT1 IPsec: IPSec session down Source 100.1.1.1 Destination 102.1.1.2 VRF 0 SPI 0x1748 Direction Egress Debug: Mar 13 20:38:39 ike ipv4 packet received with src 102.1.1.2 and dest 100.1.1.1 vrf 0 length 88 Debug: Mar 13 20:38:39 IKE: ipike_isakmp_hash_get_from_cookie() :: hash key: id=7, type=37, init=0 Debug: Mar 13 20:38:39 IKE: ipike_isakmp_hash_get_from_cookie() :: hash key: id=7, type=37, init=0 Debug: Mar 13 20:38:39 IKE: New exchange started (INFORMATIONAL with Message ID: 7) Debug: Mar 13 20:38:39 IKE: Locking IKE SA (ref count 2) Debug: Mar 13 20:38:39 IKE: initiator cookie: 0xd762b2a1b460a8da Debug: Mar 13 20:38:39 IKE: responder cookie: 0x22e7083e0ef7753a Debug: Mar 13 20:38:39 IKE: ipike_isakmp_lookup_config() :: Found IKE SA in SADB database, id=tunnel44, looking up in config database Debug: Mar 13 20:38:39 IKE: Releasing IKE SA (ref count 1), for tunnel 44 Debug: Mar 13 20:38:39 IKE: initiator cookie: 0xd762b2a1b460a8da Debug: Mar 13 20:38:39 IKE: responder cookie: 0x22e7083e0ef7753a Debug: Mar 13 20:38:39 IKE: ipike_isakmp_lookup_config() :: Found IKE SA configuration based on SADB entry Debug: Mar 13 20:38:39 IKE: Locking IKE SA (ref count 2) Debug: Mar 13 20:38:39 IKE: initiator cookie: 0xd762b2a1b460a8da Debug: Mar 13 20:38:39 IKE: responder cookie: 0x22e7083e0ef7753a Debug: Mar 13 20:38:39 IKE: ipike_isakmp_lookup_config() :: Found IKE SA in SADB database, id=tunnel44, looking up in config database Debug: Mar 13 20:38:39 IKE: Releasing IKE SA (ref count 1), for tunnel 44 Debug: Mar 13 20:38:39 IKE: initiator cookie: 0xd762b2a1b460a8da Debug: Mar 13 20:38:39 IKE: responder cookie: 0x22e7083e0ef7753a Debug: Mar 13 20:38:39 IKE: ipike_isakmp_lookup_config() :: Found IKE SA configuration based on SADB entry Debug: Mar 13 20:38:39 IKE: Locking IKE SA (ref count 2) Debug: Mar 13 20:38:39 IKE: initiator cookie: 0xd762b2a1b460a8da Debug: Mar 13 20:38:39 IKE: responder cookie: 0x22e7083e0ef7753a Debug: Mar 13 20:38:39 IKE: ipike_isakmp_hash_obj_cookie() :: hash key: id=7, type=37, init=0 -> val = bec1679 Debug: Mar 13 20:38:39 IKE: ipike_isakmp_hash_add() :: hash: id=7, type=37, init=0, phase1=0 Debug: Mar 13 20:38:39 IKE: Received request 102.1.1.2[500], INFORMATIONAL, #1(2), ID 7 Debug: Mar 13 20:38:39 IKE: Message decrypted 88 bytes Debug: Mar 13 20:38:39 +++ ISAKMP package start (message # 1) +++ Debug: Mar 13 20:38:39 < IKE Header > Debug: Mar 13 20:38:39 IKE_SA Initiator's SPI: 0xd762b2a1b460a8da Debug: Mar 13 20:38:39 IKE_SA Responder's SPI: 0x22e7083e0ef7753a Debug: Mar 13 20:38:39 Next Payload: delete (42) Debug: Mar 13 20:38:39 Version: 2.0 Debug: Mar 13 20:38:39 Exchange Type: INFORMATIONAL Debug: Mar 13 20:38:39 Flags: [ INITIATOR ] Debug: Mar 13 20:38:39 Message ID: 7 Debug: Mar 13 20:38:39 Length: 36 (#x) Debug: Mar 13 20:38:39 IKE: < delete > Debug: Mar 13 20:38:39 IKE: Next Payload: none (0) Debug: Mar 13 20:38:39 IKE: Payload Length: 8 (#x) Debug: Mar 13 20:38:39 IKE: protocol ID: ISAKMP Debug: Mar 13 20:38:39 --- ISAKMP package end (message # 1) --- Debug: Mar 13 20:38:39 IKE: Setting IKE SA (ref count 2) state to dying Debug: Mar 13 20:38:39 IKE: initiator cookie: 0xd762b2a1b460a8da Debug: Mar 13 20:38:39 IKE: responder cookie: 0x22e7083e0ef7753a Debug: Mar 13 20:38:39 IKE: Sending response to 102.1.1.2 [500] Debug: Mar 13 20:38:39 +++ ISAKMP package start (message # 2) +++ Debug: Mar 13 20:38:39 < IKE Header > Debug: Mar 13 20:38:39 IKE_SA Initiator's SPI: 0xd762b2a1b460a8da Debug: Mar 13 20:38:39 IKE_SA Responder's SPI: 0x22e7083e0ef7753a Debug: Mar 13 20:38:39 Next Payload: none (0) Debug: Mar 13 20:38:39 Version: 2.0 Debug: Mar 13 20:38:39 Exchange Type: INFORMATIONAL Debug: Mar 13 20:38:39 Flags: [ RESPONSE ] Debug: Mar 13 20:38:39 Message ID: 7 Debug: Mar 13 20:38:39 Length: 32 (#x) Debug: Mar 13 20:38:39 --- ISAKMP package end (message # 2) --- Debug: Mar 13 20:38:39 IKE: Sending message 102.1.1.2[500]: INFORMATIONAL, #2(2), ID 7 Debug: Mar 13 20:38:39 IKE: Message encrypted 88 bytes Debug: Mar 13 20:38:39 IKE: Send 88 octets from 100.1.1.1:500 to 102.1.1.2:500 Debug: Mar 13 20:38:39 IKE: informational exchange done Debug: Mar 13 20:38:39 IKE sub task: packet transmitted to 102.1.1.2 SYSLOG: <14> Mar 13 20:38:39 DUT1 IKEv2: IKEv2 session down Source 100.1.1.1 Destination 102.1.1.2 VRF 0 SPI 0xd762b2a1b460a8da SYSLOG: <14> Mar 13 20:38:39 DUT1 PORT: tn44 down due to - IKE session down SYSLOG: <14> Mar 13 20:38:39 DUT1 System: Interface ipsec_tnnl 44, state down - IKE session down Debug: Mar 13 20:38:39 IKE: local public DH value 2520515a f7536f69 27413bc7 0efc4262 0f501aa6 0deeed19 6ad81b3e 192ca278 cbc09936 34d4fe3d a60c2239 254a28f5 74225709 0bb186e0 95ee7777 134fdc4c b6c021f4 39894aba 4c3dc91a e1f8c018 089b1570 57179b21 2ddcfd10 284cb2a8 Debug: Mar 13 20:38:39 IKE: ipike_isakmp_hash_obj_cookie() :: hash key: id=0, type=0, init=1 -> val = 78a81769 Debug: Mar 13 20:38:39 IKE: ipike_isakmp_hash_add() :: hash: id=0, type=34, init=1, phase1=1 Debug: Mar 13 20:38:39 Add Payload 33 Debug: Mar 13 20:38:39 Add Payload 47 Debug: Mar 13 20:38:39 Add Payload 41 Debug: Mar 13 20:38:39 Add Payload 34 Debug: Mar 13 20:38:39 Add Payload 40 Debug: Mar 13 20:38:39 IKE: Sending request to 102.1.1.2 [500] Debug: Mar 13 20:38:39 +++ ISAKMP package start (message # 1) +++ Debug: Mar 13 20:38:39 < IKE Header > Debug: Mar 13 20:38:39 IKE_SA Initiator's SPI: 0x4731b3c6a38c0641 Debug: Mar 13 20:38:39 IKE_SA Responder's SPI: 0x0000000000000000 Debug: Mar 13 20:38:39 Next Payload: security association (33) Debug: Mar 13 20:38:39 Version: 2.0 Debug: Mar 13 20:38:39 Exchange Type: IKE_SA_INIT Debug: Mar 13 20:38:39 Flags: [ INITIATOR ] Debug: Mar 13 20:38:39 Message ID: 0 Debug: Mar 13 20:38:39 Length: 248 (#x) Debug: Mar 13 20:38:39 IKE: < security association > Debug: Mar 13 20:38:39 IKE: Next Payload: key exchange (34) Debug: Mar 13 20:38:39 IKE: Payload Length: 48 (#x) Debug: Mar 13 20:38:39 << proposal >> Debug: Mar 13 20:38:39 Proposal #: 1 Debug: Mar 13 20:38:39 Protocol ID: ISAKMP Debug: Mar 13 20:38:39 SPI Size: 0 Debug: Mar 13 20:38:39 IKE: # of Transforms: 4 Debug: Mar 13 20:38:39 <<< transform >>> Debug: Mar 13 20:38:39 Type: dh Debug: Mar 13 20:38:39 ID: ecp384 Debug: Mar 13 20:38:39 <<< transform >>> Debug: Mar 13 20:38:39 Type: prf Debug: Mar 13 20:38:39 ID: sha384 Debug: Mar 13 20:38:39 <<< transform >>> Debug: Mar 13 20:38:39 Type: encr Debug: Mar 13 20:38:39 ID: aes Debug: Mar 13 20:38:39 Attr: 800e0100 Debug: Mar 13 20:38:39 <<< transform >>> Debug: Mar 13 20:38:39 Type: integ Debug: Mar 13 20:38:39 ID: sha384 Debug: Mar 13 20:38:39 IKE: < key exchange > Debug: Mar 13 20:38:39 IKE: Next Payload: nonce (40) Debug: Mar 13 20:38:39 IKE: Payload Length: 104 (#x) Debug: Mar 13 20:38:39 IKE: dh group: 'ecp384' Debug: Mar 13 20:38:39 IKE: data: 2520515a f7536f69 27413bc7 0efc4262 0f501aa6 0deeed19 6ad81b3e 192ca278 cbc09936 34d4fe3d a60c2239 254a28f5 74225709 0bb186e0 95ee7777 134fdc4c b6c021f4 39894aba 4c3dc91a e1f8c018 089b1570 57179b21 2ddcfd10 284cb2a8 Debug: Mar 13 20:38:39 IKE: < nonce > Debug: Mar 13 20:38:39 IKE: Next Payload: none (0) Debug: Mar 13 20:38:39 IKE: Payload Length: 68 (#x) Debug: Mar 13 20:38:39 IKE: data: 434bf3f8 3efe8553 e8c81844 2e3eed96 00380268 1908602d cd1437c2 624f4190 d00d7fe2 4e7fc709 20bdcc44 7373f178 0dfdd62c 370a97dc c01d7f35 3a0f6a3e Debug: Mar 13 20:38:39 --- ISAKMP package end (message # 1) --- Debug: Mar 13 20:38:39 IKE: Sending message 102.1.1.2[500]: IKE_SA_INIT, #1(4), ID 0 Debug: Mar 13 20:38:39 IKE: Send 248 octets from 100.1.1.1:500 to 102.1.1.2:500 Debug: Mar 13 20:38:39 IKE: Locking IKE SA (ref count 2) Debug: Mar 13 20:38:39 IKE: initiator cookie: 0x4731b3c6a38c0641 Debug: Mar 13 20:38:39 IKE: responder cookie: 0x0000000000000000 Debug: Mar 13 20:38:39 IKE: Releasing IKE SA (ref count 1), for tunnel 44 Debug: Mar 13 20:38:39 IKE: initiator cookie: 0x4731b3c6a38c0641 Debug: Mar 13 20:38:39 IKE: responder cookie: 0x0000000000000000 Debug: Mar 13 20:38:39 ike_transmit_packet send packet to 102.1.1.2:500 from 100.1.1.1:500 vrf:0 length 248 Debug: Mar 13 20:38:39 IKE sub task: packet transmitted to 102.1.1.2 Debug: Mar 13 20:38:42 ike ipv4 packet received with src 102.1.1.2 and dest 100.1.1.1 vrf 0 length 248 Debug: Mar 13 20:38:42 IKE: ipike_isakmp_hash_get_from_cookie() :: hash key: id=0, type=0, init=0 Debug: Mar 13 20:38:42 IKE: ipike_isakmp_hash_get_from_cookie() :: hash key: id=0, type=0, init=0 Debug: Mar 13 20:38:42 IKE: New exchange started (IKE_SA_INIT with Message ID: 0) Debug: Mar 13 20:38:42 IKE: ipike_isakmp_lookup_config() :: Found IKE SA configuration based on addresses Debug: Mar 13 20:38:42 IKE: ipike_isakmp_lookup_config() :: Found IKE SA configuration based on addresses Debug: Mar 13 20:38:42 IKE: Setting IKE SA (ref count 0) state to constructing Debug: Mar 13 20:38:42 IKE: initiator cookie: 0x20beacbe38bcb465 Debug: Mar 13 20:38:42 IKE: responder cookie: 0x7f672fffc23b040d Debug: Mar 13 20:38:42 IKE: Locking IKE SA (ref count 1) Debug: Mar 13 20:38:42 IKE: initiator cookie: 0x20beacbe38bcb465 Debug: Mar 13 20:38:42 IKE: responder cookie: 0x7f672fffc23b040d Debug: Mar 13 20:38:42 IKE: ipike_isakmp_hash_obj_cookie() :: hash key: id=0, type=0, init=0 -> val = 9b36fb21 Debug: Mar 13 20:38:42 IKE: ipike_isakmp_hash_add() :: hash: id=0, type=34, init=0, phase1=1 Debug: Mar 13 20:38:42 IKE: Received request 102.1.1.2[500], IKE_SA_INIT, #1(4), ID 0 Debug: Mar 13 20:38:42 +++ ISAKMP package start (message # 1) +++ Debug: Mar 13 20:38:42 < IKE Header > Debug: Mar 13 20:38:42 IKE_SA Initiator's SPI: 0x20beacbe38bcb465 Debug: Mar 13 20:38:42 IKE_SA Responder's SPI: 0x0000000000000000 Debug: Mar 13 20:38:42 Next Payload: security association (33) Debug: Mar 13 20:38:42 Version: 2.0 Debug: Mar 13 20:38:42 Exchange Type: IKE_SA_INIT Debug: Mar 13 20:38:42 Flags: [ INITIATOR ] Debug: Mar 13 20:38:42 Message ID: 0 Debug: Mar 13 20:38:42 Length: 248 (#x) Debug: Mar 13 20:38:42 IKE: < security association > Debug: Mar 13 20:38:42 IKE: Next Payload: key exchange (34) Debug: Mar 13 20:38:42 IKE: Payload Length: 48 (#x) Debug: Mar 13 20:38:42 << proposal >> Debug: Mar 13 20:38:42 Proposal #: 1 Debug: Mar 13 20:38:42 Protocol ID: ISAKMP Debug: Mar 13 20:38:42 SPI Size: 0 Debug: Mar 13 20:38:42 IKE: # of Transforms: 4 Debug: Mar 13 20:38:42 <<< transform >>> Debug: Mar 13 20:38:42 Type: dh Debug: Mar 13 20:38:42 ID: ecp384 Debug: Mar 13 20:38:42 <<< transform >>> Debug: Mar 13 20:38:42 Type: prf Debug: Mar 13 20:38:42 ID: sha384 Debug: Mar 13 20:38:42 <<< transform >>> Debug: Mar 13 20:38:42 Type: encr Debug: Mar 13 20:38:42 ID: aes Debug: Mar 13 20:38:42 Attr: 800e0100 Debug: Mar 13 20:38:42 <<< transform >>> Debug: Mar 13 20:38:42 Type: integ Debug: Mar 13 20:38:42 ID: sha384 Debug: Mar 13 20:38:42 IKE: < key exchange > Debug: Mar 13 20:38:42 IKE: Next Payload: nonce (40) Debug: Mar 13 20:38:42 IKE: Payload Length: 104 (#x) Debug: Mar 13 20:38:42 IKE: dh group: 'ecp384' Debug: Mar 13 20:38:42 IKE: data: d4d789d3 2d30c979 d856295d 5b740be8 32a7b1ff 6626d3d1 0d51f79c 9573fa48 4d158059 89d81198 1b525537 1c96102b e97e073d 8fe4b757 ebbbc40c 6ef76a3a f5ac68f4 b24c094c 9af9c60d c8a02faa 9506dad8 5be9fe78 cf979743 22856a11 Debug: Mar 13 20:38:42 IKE: < nonce > Debug: Mar 13 20:38:42 IKE: Next Payload: none (0) Debug: Mar 13 20:38:42 IKE: Payload Length: 68 (#x) Debug: Mar 13 20:38:42 IKE: data: 2d9db0d5 6453b7f2 0accc5d2 6117d17c 77518abf 1ff952d6 540658e0 98f4019d c65b6824 ac19716d 25a398cd 16717c6d dc870989 149cff89 9ca77cf8 bbccb6f9 Debug: Mar 13 20:38:42 --- ISAKMP package end (message # 1) --- Debug: Mar 13 20:38:42 IKE: selected 'aes' as encryption algorithm Debug: Mar 13 20:38:42 IKE: selected '256' as key length Debug: Mar 13 20:38:42 IKE: selected 'sha384' as hash algorithm Debug: Mar 13 20:38:42 IKE: selected 'sha384' as integrity algorithm Debug: Mar 13 20:38:42 IKE: selected 'ecp384' as DH group description Debug: Mar 13 20:38:42 IKE: local public DH value f20a76e2 a5f4ffd3 f1e602db 175e27a5 de6ee0bb 5398912b e42aa726 3707bffa af06f3ab 07bd6d5e 91977b7d 71c29893 c6319ef9 5a8d8dbf 7d2f177c c6dd270b 01f81f5d 8fb8c352 6da36969 1c8252aa 4c251cda 68c6d48e 4dff1b3b 93644bbd Debug: Mar 13 20:38:42 IKE: remote public DH value d4d789d3 2d30c979 d856295d 5b740be8 32a7b1ff 6626d3d1 0d51f79c 9573fa48 4d158059 89d81198 1b525537 1c96102b e97e073d 8fe4b757 ebbbc40c 6ef76a3a f5ac68f4 b24c094c 9af9c60d c8a02faa 9506dad8 5be9fe78 cf979743 22856a11 Debug: Mar 13 20:38:42 IKE: g^xy 23eb98ce 75f9e6b9 db74f391 943d6e62 99c1a70e 99661d30 5f2115b4 006abec2 d8c75633 dbac2fed 34812aea a6b37510 Debug: Mar 13 20:38:42 IKE: SKEYSEED: 6460e276 5e8521ee 2c660e02 672a1b40 1f9360af a9fa2d6a 3f2d7d7b f063f98f 9c10967d 06c5267b ab3fd497 28ce695e Debug: Mar 13 20:38:42 IKE: Key d: d7c69fef 8f72fc49 0e059883 0a2809ce ea4a0920 e64914b7 da218b46 2b8b72fe 1f9e9c1c 5beda8da d4d4de43 3ba53661 Debug: Mar 13 20:38:42 IKE: Key ai: 4489ba21 e8a914c5 3a13694f f647c46b fbf0cef7 0ceb4c5d bdb623a5 5f4b01c5 62558333 0da07993 c6d187e0 1e638cb7 Debug: Mar 13 20:38:42 IKE: Key ar: 377095ad 1251bd49 265d66ef 3aaa090d d353bfff e98f651b 96a0ecfb cd7c68d4 5058e99d 7e332161 8169a04e 8bae393f Debug: Mar 13 20:38:42 IKE: Key ei: 8c31e91d f8011cdd c1674ea5 73b0ad12 6e60cc70 74cbf967 dbd35a49 99f0a679 Debug: Mar 13 20:38:42 IKE: Key er: 8e7881ff bf853fe2 a7b43864 67f9a587 827740e9 7f63125b 34526ac1 510b23fe Debug: Mar 13 20:38:42 IKE: Key pi: f2646dde d9f565c4 72c1382e 94febb13 49762791 1152c357 64e7613f 00c538bb ec2f5d4b 8c63b249 405769e9 35d8936c Debug: Mar 13 20:38:42 IKE: Key pr: a917acb3 b370f56e 7501c8bc 50209201 375c7d6e 48820e68 f442c1a0 011d5f49 3773a2e1 23e8e867 6c288dcc f8d59a13 Debug: Mar 13 20:38:42 Add Payload 33 Debug: Mar 13 20:38:42 Add Payload 47 Debug: Mar 13 20:38:42 Add Payload 41 Debug: Mar 13 20:38:42 Add Payload 34 Debug: Mar 13 20:38:42 Add Payload 40 Debug: Mar 13 20:38:42 Add Payload 38 Debug: Mar 13 20:38:42 IKE: Sending response to 102.1.1.2 [500] Debug: Mar 13 20:38:42 +++ ISAKMP package start (message # 2) +++ Debug: Mar 13 20:38:42 < IKE Header > Debug: Mar 13 20:38:42 IKE_SA Initiator's SPI: 0x20beacbe38bcb465 Debug: Mar 13 20:38:42 IKE_SA Responder's SPI: 0x7f672fffc23b040d Debug: Mar 13 20:38:42 Next Payload: security association (33) Debug: Mar 13 20:38:42 Version: 2.0 Debug: Mar 13 20:38:42 Exchange Type: IKE_SA_INIT Debug: Mar 13 20:38:42 Flags: [ RESPONSE ] Debug: Mar 13 20:38:42 Message ID: 0 Debug: Mar 13 20:38:42 Length: 248 (#x) Debug: Mar 13 20:38:42 IKE: < security association > Debug: Mar 13 20:38:42 IKE: Next Payload: key exchange (34) Debug: Mar 13 20:38:42 IKE: Payload Length: 48 (#x) Debug: Mar 13 20:38:42 << proposal >> Debug: Mar 13 20:38:42 Proposal #: 1 Debug: Mar 13 20:38:42 Protocol ID: ISAKMP Debug: Mar 13 20:38:42 SPI Size: 0 Debug: Mar 13 20:38:42 IKE: # of Transforms: 4 Debug: Mar 13 20:38:42 <<< transform >>> Debug: Mar 13 20:38:42 Type: encr Debug: Mar 13 20:38:42 ID: aes Debug: Mar 13 20:38:42 Attr: 800e0100 Debug: Mar 13 20:38:42 <<< transform >>> Debug: Mar 13 20:38:42 Type: integ Debug: Mar 13 20:38:42 ID: sha384 Debug: Mar 13 20:38:42 <<< transform >>> Debug: Mar 13 20:38:42 Type: prf Debug: Mar 13 20:38:42 ID: sha384 Debug: Mar 13 20:38:42 <<< transform >>> Debug: Mar 13 20:38:42 Type: dh Debug: Mar 13 20:38:42 ID: ecp384 Debug: Mar 13 20:38:42 IKE: < key exchange > Debug: Mar 13 20:38:42 IKE: Next Payload: nonce (40) Debug: Mar 13 20:38:42 IKE: Payload Length: 104 (#x) Debug: Mar 13 20:38:42 IKE: dh group: 'ecp384' Debug: Mar 13 20:38:42 IKE: data: f20a76e2 a5f4ffd3 f1e602db 175e27a5 de6ee0bb 5398912b e42aa726 3707bffa af06f3ab 07bd6d5e 91977b7d 71c29893 c6319ef9 5a8d8dbf 7d2f177c c6dd270b 01f81f5d 8fb8c352 6da36969 1c8252aa 4c251cda 68c6d48e 4dff1b3b 93644bbd Debug: Mar 13 20:38:42 IKE: < nonce > Debug: Mar 13 20:38:42 IKE: Next Payload: none (0) Debug: Mar 13 20:38:42 IKE: Payload Length: 68 (#x) Debug: Mar 13 20:38:42 IKE: data: 1d49d2fa 0b2c88d1 c01bcd5e 70dedfcd ef78d6dc e71584f0 df6beb24 38ff4e28 a431ba8f 892328dd e00f6029 9df67ff7 0d68de7a 143ca305 c42bbe53 78493a7f Debug: Mar 13 20:38:42 --- ISAKMP package end (message # 2) --- Debug: Mar 13 20:38:42 IKE: Sending message 102.1.1.2[500]: IKE_SA_INIT, #2(4), ID 0 Debug: Mar 13 20:38:42 IKE: Send 248 octets from 100.1.1.1:500 to 102.1.1.2:500 Debug: Mar 13 20:38:42 ike_transmit_packet send packet to 102.1.1.2:500 from 100.1.1.1:500 vrf:0 length 248 Debug: Mar 13 20:38:42 IKE sub task: packet transmitted to 102.1.1.2 Debug: Mar 13 20:38:42 ike ipv4 packet received with src 102.1.1.2 and dest 100.1.1.1 vrf 0 length 248 Debug: Mar 13 20:38:42 IKE: ipike_isakmp_hash_get_from_cookie() :: hash key: id=0, type=0, init=0 Debug: Mar 13 20:38:42 IKE: Received request 102.1.1.2[500], IKE_AUTH, #3(4), ID 1 Debug: Mar 13 20:38:42 IKE: Message decrypted 248 bytes Debug: Mar 13 20:38:42 +++ ISAKMP package start (message # 3) +++ Debug: Mar 13 20:38:42 < IKE Header > Debug: Mar 13 20:38:42 IKE_SA Initiator's SPI: 0x20beacbe38bcb465 Debug: Mar 13 20:38:42 IKE_SA Responder's SPI: 0x7f672fffc23b040d Debug: Mar 13 20:38:42 Next Payload: notify (41) Debug: Mar 13 20:38:42 Version: 2.0 Debug: Mar 13 20:38:42 Exchange Type: IKE_AUTH Debug: Mar 13 20:38:42 Flags: [ INITIATOR ] Debug: Mar 13 20:38:42 Message ID: 1 Debug: Mar 13 20:38:42 Length: 188 (#x) Debug: Mar 13 20:38:42 IKE: < notify > Debug: Mar 13 20:38:42 IKE: Next Payload: identification initiator (35) Debug: Mar 13 20:38:42 IKE: Payload Length: 8 (#x) Debug: Mar 13 20:38:42 IKE: message type: ESP_TFC_PADDING_NOT_SUPPORTED (16394) Debug: Mar 13 20:38:42 IKE: < identification initiator > Debug: Mar 13 20:38:42 IKE: Next Payload: authentication (39) Debug: Mar 13 20:38:42 IKE: Payload Length: 12 (#x) Debug: Mar 13 20:38:42 IKE: id type: address Debug: Mar 13 20:38:42 IKE: id data: 00000000 Debug: Mar 13 20:38:42 IKE: < authentication > Debug: Mar 13 20:38:42 IKE: Next Payload: security association (33) Debug: Mar 13 20:38:42 IKE: Payload Length: 56 (#x) Debug: Mar 13 20:38:42 IKE: method: 'pre_shared_key' Debug: Mar 13 20:38:42 IKE: data: bf993791 8f2d42f5 3bc3ccad 59b8f2a5 761d9a83 d195d5d2 0f70de64 a5d0e677 25c2613a 47e72571 446cb83c 578f7b89 Debug: Mar 13 20:38:42 IKE: < security association > Debug: Mar 13 20:38:42 IKE: Next Payload: traffic selector initiator (44) Debug: Mar 13 20:38:42 IKE: Payload Length: 36 (#x) Debug: Mar 13 20:38:42 << proposal >> Debug: Mar 13 20:38:42 Proposal #: 1 Debug: Mar 13 20:38:42 Protocol ID: IPSEC_ESP Debug: Mar 13 20:38:42 SPI Size: 4 Debug: Mar 13 20:38:42 IKE: spi data: 0000230e Debug: Mar 13 20:38:42 IKE: # of Transforms: 2 Debug: Mar 13 20:38:42 <<< transform >>> Debug: Mar 13 20:38:42 Type: encr Debug: Mar 13 20:38:42 ID: aes256gcm Debug: Mar 13 20:38:42 Attr: 800e0100 Debug: Mar 13 20:38:42 <<< transform >>> Debug: Mar 13 20:38:42 Type: esn Debug: Mar 13 20:38:42 ID: off Debug: Mar 13 20:38:42 IKE: < traffic selector initiator > Debug: Mar 13 20:38:42 IKE: Next Payload: traffic selector responder (45) Debug: Mar 13 20:38:42 IKE: Payload Length: 24 (#x) Debug: Mar 13 20:38:42 IKE: Protocol: any Debug: Mar 13 20:38:42 IKE: Address start: 0.0.0.0 Debug: Mar 13 20:38:42 IKE: Address end: 255.255.255.255 Debug: Mar 13 20:38:42 IKE: Port start: 0 Debug: Mar 13 20:38:42 IKE: Port end: 65535 Debug: Mar 13 20:38:42 IKE: < traffic selector responder > Debug: Mar 13 20:38:42 IKE: Next Payload: none (0) Debug: Mar 13 20:38:42 IKE: Payload Length: 24 (#x) Debug: Mar 13 20:38:42 IKE: Protocol: any Debug: Mar 13 20:38:42 IKE: Address start: 0.0.0.0 Debug: Mar 13 20:38:42 IKE: Address end: 255.255.255.255 Debug: Mar 13 20:38:42 IKE: Port start: 0 Debug: Mar 13 20:38:42 IKE: Port end: 65535 Debug: Mar 13 20:38:42 --- ISAKMP package end (message # 3) --- Debug: Mar 13 20:38:42 IKE: Process initial contact notify payload for tunnel 44 Debug: Mar 13 20:38:42 IKE: ipike_crypto_read_cert: could not open tunnel_44 Debug: Mar 13 20:38:42 IKE: Message: 20beacbe 38bcb465 00000000 00000000 21202208 00000000 000000f8 22000030 0000002c 01010004 03000008 04000014 03000008 02000006 0300000c 0100000c 800e0100 00000008 0300000d 28000068 00140000 d4d789d3 2d30c979 d856295d 5b740be8 32a7b1ff 6626d3d1 0d51f79c 9573fa48 4d158059 89d81198 1b525537 1c96102b e97e073d 8fe4b757 ebbbc40c 6ef76a3a f5ac68f4 b24c094c 9af9c60d c8a02faa 9506dad8 5be9fe78 cf979743 22856a11 00000044 2d9db0d5 6453b7f2 0accc5d2 6117d17c 77518abf 1ff952d6 540658e0 98f4019d c65b6824 ac19. Debug: Mar 13 20:38:42 IKE: Authentication key: 7f602adf 7481a350 d4904150 ed0804b5 0a176fc3 46559ff4 19986e5f 5547be73 695b66ab 24eeabf4 1e9eabfa a0b0c75c Debug: Mar 13 20:38:42 IKE: Authentication data: bf993791 8f2d42f5 3bc3ccad 59b8f2a5 761d9a83 d195d5d2 0f70de64 a5d0e677 25c2613a 47e72571 446cb83c 578f7b89 Debug: Mar 13 20:38:42 IKE: Message: 20beacbe 38bcb465 7f672fff c23b040d 21202220 00000000 000000f8 22000030 0000002c 01010004 0300000c 0100000c 800e0100 03000008 0300000d 03000008 02000006 00000008 04000014 28000068 00140000 f20a76e2 a5f4ffd3 f1e602db 175e27a5 de6ee0bb 5398912b e42aa726 3707bffa af06f3ab 07bd6d5e 91977b7d 71c29893 c6319ef9 5a8d8dbf 7d2f177c c6dd270b 01f81f5d 8fb8c352 6da36969 1c8252aa 4c251cda 68c6d48e 4dff1b3b 93644bbd 00000044 1d49d2fa 0b2c88d1 c01bcd5e 70dedfcd ef78d6dc e71584f0 df6beb24 38ff4e28 a431ba8f 8923. Debug: Mar 13 20:38:42 IKE: Authentication key: 7f602adf 7481a350 d4904150 ed0804b5 0a176fc3 46559ff4 19986e5f 5547be73 695b66ab 24eeabf4 1e9eabfa a0b0c75c Debug: Mar 13 20:38:42 IKE: Authentication data: 3d9760af 143f7e57 7cd521b6 8034ddab e23e101c 54a584de d7ab54e9 0ce3365b ab6d5db3 69d288eb 294c2aed f7f19a2c Debug: Mar 13 20:38:42 IKE: use_esn from config: off Debug: Mar 13 20:38:42 IKE: selected 'aes256gcm' as encryption algorithm Debug: Mar 13 20:38:42 IKE: selected '256' as key length Debug: Mar 13 20:38:42 IKE: selected 'off' for ESN Debug: Mar 13 20:38:42 Add Payload 47 Debug: Mar 13 20:38:42 Add Payload 41 Debug: Mar 13 20:38:42 IKE: Create notify payload with message type 16394 Debug: Mar 13 20:38:42 Add Payload 36 Debug: Mar 13 20:38:42 Add Payload 37 Debug: Mar 13 20:38:42 Add Payload 39 Debug: Mar 13 20:38:42 Add Payload 33 Debug: Mar 13 20:38:42 Add Payload 44 Debug: Mar 13 20:38:42 Add Payload 45 Debug: Mar 13 20:38:42 Add Payload 48 Debug: Mar 13 20:38:42 IKE: Sending response to 102.1.1.2 [500] Debug: Mar 13 20:38:42 +++ ISAKMP package start (message # 4) +++ Debug: Mar 13 20:38:42 < IKE Header > Debug: Mar 13 20:38:42 IKE_SA Initiator's SPI: 0x20beacbe38bcb465 Debug: Mar 13 20:38:42 IKE_SA Responder's SPI: 0x7f672fffc23b040d Debug: Mar 13 20:38:42 Next Payload: notify (41) Debug: Mar 13 20:38:42 Version: 2.0 Debug: Mar 13 20:38:42 Exchange Type: IKE_AUTH Debug: Mar 13 20:38:42 Flags: [ RESPONSE ] Debug: Mar 13 20:38:42 Message ID: 1 Debug: Mar 13 20:38:42 Length: 188 (#x) Debug: Mar 13 20:38:42 IKE: < notify > Debug: Mar 13 20:38:42 IKE: Next Payload: identification responder (36) Debug: Mar 13 20:38:42 IKE: Payload Length: 8 (#x) Debug: Mar 13 20:38:42 IKE: message type: ESP_TFC_PADDING_NOT_SUPPORTED (16394) Debug: Mar 13 20:38:42 IKE: < identification responder > Debug: Mar 13 20:38:42 IKE: Next Payload: authentication (39) Debug: Mar 13 20:38:42 IKE: Payload Length: 12 (#x) Debug: Mar 13 20:38:42 IKE: id type: address Debug: Mar 13 20:38:42 IKE: id data: 00000000 Debug: Mar 13 20:38:42 IKE: < authentication > Debug: Mar 13 20:38:42 IKE: Next Payload: security association (33) Debug: Mar 13 20:38:42 IKE: Payload Length: 56 (#x) Debug: Mar 13 20:38:42 IKE: method: 'pre_shared_key' Debug: Mar 13 20:38:42 IKE: data: 3d9760af 143f7e57 7cd521b6 8034ddab e23e101c 54a584de d7ab54e9 0ce3365b ab6d5db3 69d288eb 294c2aed f7f19a2c Debug: Mar 13 20:38:42 IKE: < security association > Debug: Mar 13 20:38:42 IKE: Next Payload: traffic selector initiator (44) Debug: Mar 13 20:38:42 IKE: Payload Length: 36 (#x) Debug: Mar 13 20:38:42 << proposal >> Debug: Mar 13 20:38:42 Proposal #: 1 Debug: Mar 13 20:38:42 Protocol ID: IPSEC_ESP Debug: Mar 13 20:38:42 SPI Size: 4 Debug: Mar 13 20:38:42 IKE: spi data: 000007fe Debug: Mar 13 20:38:42 IKE: # of Transforms: 2 Debug: Mar 13 20:38:42 <<< transform >>> Debug: Mar 13 20:38:42 Type: esn Debug: Mar 13 20:38:42 ID: off Debug: Mar 13 20:38:42 <<< transform >>> Debug: Mar 13 20:38:42 Type: encr Debug: Mar 13 20:38:42 ID: aes256gcm Debug: Mar 13 20:38:42 Attr: 800e0100 Debug: Mar 13 20:38:42 IKE: < traffic selector initiator > Debug: Mar 13 20:38:42 IKE: Next Payload: traffic selector responder (45) Debug: Mar 13 20:38:42 IKE: Payload Length: 24 (#x) Debug: Mar 13 20:38:42 IKE: Protocol: any Debug: Mar 13 20:38:42 IKE: Address start: 0.0.0.0 Debug: Mar 13 20:38:42 IKE: Address end: 255.255.255.255 Debug: Mar 13 20:38:42 IKE: Port start: 0 Debug: Mar 13 20:38:42 IKE: Port end: 65535 Debug: Mar 13 20:38:42 IKE: < traffic selector responder > Debug: Mar 13 20:38:42 IKE: Next Payload: none (0) Debug: Mar 13 20:38:42 IKE: Payload Length: 24 (#x) Debug: Mar 13 20:38:42 IKE: Protocol: any Debug: Mar 13 20:38:42 IKE: Address start: 0.0.0.0 Debug: Mar 13 20:38:42 IKE: Address end: 255.255.255.255 Debug: Mar 13 20:38:42 IKE: Port start: 0 Debug: Mar 13 20:38:42 IKE: Port end: 65535 Debug: Mar 13 20:38:42 --- ISAKMP package end (message # 4) --- Debug: Mar 13 20:38:42 IKE: Sending message 102.1.1.2[500]: IKE_AUTH, #4(4), ID 1 Debug: Mar 13 20:38:42 IKE: Message encrypted 248 bytes Debug: Mar 13 20:38:42 IKE: Send 248 octets from 100.1.1.1:500 to 102.1.1.2:500 Debug: Mar 13 20:38:42 IKE: ipike_sadb_get_from_ike_config() :: no IKE SA for peer 102.1.1.2, config id 'tunnel44' Debug: Mar 13 20:38:42 IKE: Enc key inbound: 2d551d4a f27a5382 d6139507 9cd7ba09 b801f9f8 585ecd81 2703818e ff5aad8f 2720eb1c Debug: Mar 13 20:38:42 IKE: Enc key outbound: c1984de9 10338d76 7d7c1d7a d47b84ee e9d7ba33 a116b639 dbab15f4 19fb8280 3e30fe3d
History
| Release version | Command history |
|---|---|
| 8.0.41 | This command was introduced. |