|
Mar 31 12:47:24 charon 84020 12[NET] <con1|1> sending packet: from 192.168.1.1[500] to 192.168.1.2[500] (80 bytes)
|
|
Mar 31 12:47:24 charon 84020 12[ENC] <con1|1> generating INFORMATIONAL response 27 [ ]
|
|
Mar 31 12:47:24 charon 84020 12[ENC] <con1|1> parsed INFORMATIONAL request 27 [ ]
|
|
Mar 31 12:47:24 charon 84020 12[NET] <con1|1> received packet: from 192.168.1.2[500] to 192.168.1.1[500] (80 bytes)
|
|
Mar 31 12:47:22 charon 84020 12[CFG] trap not found, unable to acquire reqid 5001
|
|
Mar 31 12:47:22 charon 84020 12[KNL] creating acquire job for policy 192.168.1.1/32|/0 === 192.168.1.2/32|/0 with reqid {5001}
|
|
Mar 31 12:47:20 charon 84020 05[CFG] vici client 55 disconnected
|
|
Mar 31 12:47:20 charon 84020 05[CFG] vici client 55 requests: list-sas
|
|
Mar 31 12:47:20 charon 84020 13[CFG] vici client 55 registered for: list-sa
|
|
Mar 31 12:47:20 charon 84020 13[CFG] vici client 55 connected
|
|
Mar 31 12:47:14 charon 84020 05[CFG] vici client 54 disconnected
|
|
Mar 31 12:47:14 charon 84020 05[CFG] vici client 54 requests: list-sas
|
|
Mar 31 12:47:14 charon 84020 11[CFG] vici client 54 registered for: list-sa
|
|
Mar 31 12:47:14 charon 84020 05[CFG] vici client 54 connected
|
|
Mar 31 12:47:14 charon 84020 05[NET] <con1|1> sending packet: from 192.168.1.1[500] to 192.168.1.2[500] (80 bytes)
|
|
Mar 31 12:47:14 charon 84020 05[ENC] <con1|1> generating CREATE_CHILD_SA response 26 [ N(NO_PROP) ]
|
|
Mar 31 12:47:14 charon 84020 05[CHD] <con1|1> CHILD_SA con1{21} state change: INSTALLING => DESTROYING
|
|
Mar 31 12:47:14 charon 84020 05[IKE] <con1|1> failed to establish CHILD_SA, keeping IKE_SA
|
|
Mar 31 12:47:14 charon 84020 05[IKE] <con1|1> unable to install inbound and outbound IPsec SA (SAD) in kernel
|
|
Mar 31 12:47:14 charon 84020 05[CHD] <con1|1> using HMAC_SHA2_256_128 for integrity
|
|
Mar 31 12:47:14 charon 84020 05[CHD] <con1|1> using AES_CBC for encryption
|
|
Mar 31 12:47:14 charon 84020 05[CHD] <con1|1> CHILD_SA con1{21} state change: CREATED => INSTALLING
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> config: ::/0|/0, received: ::/0|/0 => match: ::/0|/0
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> config: ::/0|/0, received: 0.0.0.0/0|/0 => no match
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> config: 0.0.0.0/0|/0, received: ::/0|/0 => no match
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> config: 0.0.0.0/0|/0, received: 0.0.0.0/0|/0 => match: 0.0.0.0/0|/0
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> config: 10.0.6.1/32|/0, received: ::/0|/0 => no match
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> config: 10.0.6.1/32|/0, received: 0.0.0.0/0|/0 => match: 10.0.6.1/32|/0
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> selecting traffic selectors for other:
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> config: ::/0|/0, received: ::/0|/0 => match: ::/0|/0
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> config: ::/0|/0, received: 0.0.0.0/0|/0 => no match
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> config: 0.0.0.0/0|/0, received: ::/0|/0 => no match
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> config: 0.0.0.0/0|/0, received: 0.0.0.0/0|/0 => match: 0.0.0.0/0|/0
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> config: 10.0.6.2/32|/0, received: ::/0|/0 => no match
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> config: 10.0.6.2/32|/0, received: 0.0.0.0/0|/0 => match: 10.0.6.2/32|/0
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> selecting traffic selectors for us:
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> selected proposal: ESP:AES_CBC_256/HMAC_SHA2_256_128/MODP_8192/NO_EXT_SEQ
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> configured proposals: ESP:AES_CBC_256/HMAC_SHA2_256_128/MODP_8192/NO_EXT_SEQ
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> received proposals: ESP:AES_CBC_256/HMAC_SHA2_256_128/MODP_8192/NO_EXT_SEQ
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> proposal matches
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> selecting proposal:
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> found matching child config "con1" with prio 30
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> candidate "con1" with prio 15+15
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> ::/0|/0
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> 0.0.0.0/0|/0
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> 10.0.6.1/32|/0
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> proposing traffic selectors for other:
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> ::/0|/0
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> 0.0.0.0/0|/0
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> 10.0.6.2/32|/0
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> proposing traffic selectors for us:
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> looking for a child config for 0.0.0.0/0|/0 ::/0|/0 === 0.0.0.0/0|/0 ::/0|/0
|
|
Mar 31 12:47:14 charon 84020 05[IKE] <con1|1> received ESP_TFC_PADDING_NOT_SUPPORTED, not using ESPv3 TFC padding
|
|
Mar 31 12:47:14 charon 84020 05[ENC] <con1|1> parsed CREATE_CHILD_SA request 26 [ N(ESP_TFC_PAD_N) SA No KE TSi TSr ]
|
|
Mar 31 12:47:14 charon 84020 05[ENC] <con1|1> received fragment #2 of 2, reassembled fragmented IKE message (1328 bytes)
|
|
Mar 31 12:47:14 charon 84020 05[ENC] <con1|1> parsed CREATE_CHILD_SA request 26 [ EF(2/2) ]
|
|
Mar 31 12:47:14 charon 84020 05[NET] <con1|1> received packet: from 192.168.1.2[500] to 192.168.1.1[500] (148 bytes)
|
|
Mar 31 12:47:14 charon 84020 11[IKE] <con1|1> nothing to initiate
|
|
Mar 31 12:47:14 charon 84020 11[IKE] <con1|1> activating new tasks
|
|
Mar 31 12:47:14 charon 84020 11[CHD] <con1|1> CHILD_SA con1{20} state change: INSTALLING => DESTROYING
|
|
Mar 31 12:47:14 charon 84020 11[ENC] <con1|1> parsed INFORMATIONAL response 15 [ D ]
|
|
Mar 31 12:47:14 charon 84020 11[NET] <con1|1> received packet: from 192.168.1.2[500] to 192.168.1.1[500] (80 bytes)
|
|
Mar 31 12:47:14 charon 84020 10[ENC] <con1|1> received fragment #1 of 2, waiting for complete IKE message
|
|
Mar 31 12:47:14 charon 84020 10[ENC] <con1|1> parsed CREATE_CHILD_SA request 26 [ EF(1/2) ]
|
|
Mar 31 12:47:14 charon 84020 10[NET] <con1|1> received packet: from 192.168.1.2[500] to 192.168.1.1[500] (1252 bytes)
|
|
Mar 31 12:47:14 charon 84020 10[NET] <con1|1> sending packet: from 192.168.1.1[500] to 192.168.1.2[500] (80 bytes)
|
|
Mar 31 12:47:14 charon 84020 10[ENC] <con1|1> generating INFORMATIONAL request 15 [ D ]
|
|
Mar 31 12:47:14 charon 84020 10[IKE] <con1|1> sending DELETE for ESP CHILD_SA with SPI c765cbee
|
|
Mar 31 12:47:14 charon 84020 10[IKE] <con1|1> CHILD_CREATE task
|
|
Mar 31 12:47:14 charon 84020 10[IKE] <con1|1> reinitiating already active tasks
|
|
Mar 31 12:47:14 charon 84020 10[IKE] <con1|1> failed to establish CHILD_SA, keeping IKE_SA
|
|
Mar 31 12:47:14 charon 84020 10[IKE] <con1|1> unable to install inbound and outbound IPsec SA (SAD) in kernel
|
|
Mar 31 12:47:14 charon 84020 10[CHD] <con1|1> using HMAC_SHA2_256_128 for integrity
|
|
Mar 31 12:47:14 charon 84020 10[CHD] <con1|1> using AES_CBC for encryption
|
|
Mar 31 12:47:14 charon 84020 10[CHD] <con1|1> CHILD_SA con1{20} state change: CREATED => INSTALLING
|
|
Mar 31 12:47:14 charon 84020 10[CFG] <con1|1> config: ::/0|/0, received: ::/0|/0 => match: ::/0|/0
|
|
Mar 31 12:47:14 charon 84020 10[CFG] <con1|1> config: ::/0|/0, received: 0.0.0.0/0|/0 => no match
|
|
Mar 31 12:47:14 charon 84020 10[CFG] <con1|1> config: 0.0.0.0/0|/0, received: ::/0|/0 => no match
|
|
Mar 31 12:47:14 charon 84020 10[CFG] <con1|1> config: 0.0.0.0/0|/0, received: 0.0.0.0/0|/0 => match: 0.0.0.0/0|/0
|
|
Mar 31 12:47:14 charon 84020 10[CFG] <con1|1> config: 10.0.6.1/32|/0, received: ::/0|/0 => no match
|
|
Mar 31 12:47:14 charon 84020 10[CFG] <con1|1> config: 10.0.6.1/32|/0, received: 0.0.0.0/0|/0 => match: 10.0.6.1/32|/0
|
|
Mar 31 12:47:14 charon 84020 10[CFG] <con1|1> selecting traffic selectors for other:
|
|
Mar 31 12:47:14 charon 84020 10[CFG] <con1|1> config: ::/0|/0, received: ::/0|/0 => match: ::/0|/0
|
|
Mar 31 12:47:14 charon 84020 10[CFG] <con1|1> config: ::/0|/0, received: 0.0.0.0/0|/0 => no match
|
|
Mar 31 12:47:14 charon 84020 10[CFG] <con1|1> config: 0.0.0.0/0|/0, received: ::/0|/0 => no match
|
|
Mar 31 12:47:14 charon 84020 10[CFG] <con1|1> config: 0.0.0.0/0|/0, received: 0.0.0.0/0|/0 => match: 0.0.0.0/0|/0
|
|
Mar 31 12:47:14 charon 84020 10[CFG] <con1|1> config: 10.0.6.2/32|/0, received: ::/0|/0 => no match
|
|
Mar 31 12:47:14 charon 84020 10[CFG] <con1|1> config: 10.0.6.2/32|/0, received: 0.0.0.0/0|/0 => match: 10.0.6.2/32|/0
|
|
Mar 31 12:47:14 charon 84020 10[CFG] <con1|1> selecting traffic selectors for us:
|
|
Mar 31 12:47:14 charon 84020 10[CFG] <con1|1> selected proposal: ESP:AES_CBC_256/HMAC_SHA2_256_128/MODP_8192/NO_EXT_SEQ
|
|
Mar 31 12:47:14 charon 84020 10[CFG] <con1|1> configured proposals: ESP:AES_CBC_256/HMAC_SHA2_256_128/MODP_8192/NO_EXT_SEQ
|
|
Mar 31 12:47:14 charon 84020 10[CFG] <con1|1> received proposals: ESP:AES_CBC_256/HMAC_SHA2_256_128/MODP_8192/NO_EXT_SEQ
|
|
Mar 31 12:47:14 charon 84020 10[CFG] <con1|1> proposal matches
|
|
Mar 31 12:47:14 charon 84020 10[CFG] <con1|1> selecting proposal:
|
|
Mar 31 12:47:14 charon 84020 10[IKE] <con1|1> received ESP_TFC_PADDING_NOT_SUPPORTED, not using ESPv3 TFC padding
|
|
Mar 31 12:47:14 charon 84020 10[IKE] <con1|1> received ESP_TFC_PADDING_NOT_SUPPORTED notify
|
|
Mar 31 12:47:14 charon 84020 10[ENC] <con1|1> parsed CREATE_CHILD_SA response 14 [ N(ESP_TFC_PAD_N) SA No KE TSi TSr ]
|
|
Mar 31 12:47:14 charon 84020 10[ENC] <con1|1> received fragment #2 of 2, reassembled fragmented IKE message (1328 bytes)
|
|
Mar 31 12:47:14 charon 84020 10[ENC] <con1|1> parsed CREATE_CHILD_SA response 14 [ EF(2/2) ]
|
|
Mar 31 12:47:14 charon 84020 10[NET] <con1|1> received packet: from 192.168.1.2[500] to 192.168.1.1[500] (148 bytes)
|
|
Mar 31 12:47:14 charon 84020 05[ENC] <con1|1> received fragment #1 of 2, waiting for complete IKE message
|
|
Mar 31 12:47:14 charon 84020 05[ENC] <con1|1> parsed CREATE_CHILD_SA response 14 [ EF(1/2) ]
|
|
Mar 31 12:47:14 charon 84020 05[NET] <con1|1> received packet: from 192.168.1.2[500] to 192.168.1.1[500] (1252 bytes)
|
|
Mar 31 12:47:14 charon 84020 05[NET] <con1|1> sending packet: from 192.168.1.1[500] to 192.168.1.2[500] (80 bytes)
|
|
Mar 31 12:47:14 charon 84020 05[ENC] <con1|1> generating INFORMATIONAL response 25 [ ]
|
|
Mar 31 12:47:14 charon 84020 05[ENC] <con1|1> parsed INFORMATIONAL request 25 [ ]
|
|
Mar 31 12:47:14 charon 84020 05[NET] <con1|1> received packet: from 192.168.1.2[500] to 192.168.1.1[500] (80 bytes)
|
|
Mar 31 12:47:14 charon 84020 05[NET] <con1|1> sending packet: from 192.168.1.1[500] to 192.168.1.2[500] (80 bytes)
|
|
Mar 31 12:47:14 charon 84020 05[ENC] <con1|1> generating INFORMATIONAL response 24 [ D ]
|
|
Mar 31 12:47:14 charon 84020 05[NET] <con1|1> sending packet: from 192.168.1.1[500] to 192.168.1.2[500] (148 bytes)
|
|
Mar 31 12:47:14 charon 84020 05[NET] <con1|1> sending packet: from 192.168.1.1[500] to 192.168.1.2[500] (1252 bytes)
|
|
Mar 31 12:47:14 charon 84020 05[ENC] <con1|1> generating CREATE_CHILD_SA request 14 [ EF(2/2) ]
|
|
Mar 31 12:47:14 charon 84020 05[ENC] <con1|1> generating CREATE_CHILD_SA request 14 [ EF(1/2) ]
|
|
Mar 31 12:47:14 charon 84020 05[ENC] <con1|1> splitting IKE message (1328 bytes) into 2 fragments
|
|
Mar 31 12:47:14 charon 84020 05[ENC] <con1|1> generating CREATE_CHILD_SA request 14 [ N(ESP_TFC_PAD_N) SA No KE TSi TSr ]
|
|
Mar 31 12:47:14 charon 84020 05[IKE] <con1|1> establishing CHILD_SA con1{20} reqid 5001
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> configured proposals: ESP:AES_CBC_256/HMAC_SHA2_256_128/MODP_8192/NO_EXT_SEQ
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> ::/0|/0
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> 0.0.0.0/0|/0
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> 10.0.6.1/32|/0
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> proposing traffic selectors for other:
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> ::/0|/0
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> 0.0.0.0/0|/0
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> 10.0.6.2/32|/0
|
|
Mar 31 12:47:14 charon 84020 05[CFG] <con1|1> proposing traffic selectors for us:
|
|
Mar 31 12:47:14 charon 84020 05[IKE] <con1|1> activating CHILD_CREATE task
|
|
Mar 31 12:47:14 charon 84020 05[IKE] <con1|1> activating new tasks
|
|
Mar 31 12:47:14 charon 84020 05[IKE] <con1|1> queueing CHILD_CREATE task
|
|
Mar 31 12:47:14 charon 84020 05[CHD] <con1|1> CHILD_SA con1{1} state change: DELETED => DESTROYING
|
|
Mar 31 12:47:14 charon 84020 05[CHD] <con1|1> CHILD_SA con1{1} state change: DELETING => DELETED
|
|
Mar 31 12:47:14 charon 84020 05[IKE] <con1|1> CHILD_SA closed
|
|
Mar 31 12:47:14 charon 84020 05[CHD] <con1|1> CHILD_SA con1{1} state change: INSTALLED => DELETING
|
|
Mar 31 12:47:14 charon 84020 05[IKE] <con1|1> sending DELETE for ESP CHILD_SA with SPI c8971e31
|
|
Mar 31 12:47:14 charon 84020 05[IKE] <con1|1> closing CHILD_SA con1{1} with SPIs c8971e31_i (2100 bytes) cd3c00c2_o (3900 bytes) and TS 0.0.0.0/0|/0 ::/0|/0 === 0.0.0.0/0|/0 ::/0|/0
|
|
Mar 31 12:47:14 charon 84020 05[IKE] <con1|1> received DELETE for ESP CHILD_SA with SPI cd3c00c2
|
