IPSEC LOG when wrong : Mar 15 16:28:45 racoon: INFO: purging ISAKMP-SA spi=606947e60a07e623:e091d4be709125af:00007c67. Mar 15 16:28:45 racoon: INFO: deleting a generated policy. Mar 15 16:28:45 racoon: INFO: purged IPsec-SA spi=249457509. Mar 15 16:28:45 racoon: INFO: purged ISAKMP-SA spi=606947e60a07e623:e091d4be709125af:00007c67. Mar 15 16:28:46 racoon: [Unknown Gateway/Dynamic]: INFO: ISAKMP-SA deleted 95.96.134.40[4500]-212.83.247.226[39567] spi:606947e60a07e623:e091d4be709125af Mar 15 16:28:46 racoon: INFO: Released port 0 Mar 15 16:42:15 racoon: [Unknown Gateway/Dynamic]: INFO: respond new phase 1 negotiation: 95.96.134.40[500]<=>212.83.247.226[500] Mar 15 16:42:15 racoon: INFO: begin Aggressive mode. Mar 15 16:42:15 racoon: INFO: received Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Mar 15 16:42:15 racoon: INFO: received Vendor ID: draft-ietf-ipsec-nat-t-ike-01 Mar 15 16:42:15 racoon: INFO: received Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Mar 15 16:42:15 racoon: INFO: received Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Mar 15 16:42:15 racoon: INFO: received Vendor ID: RFC 3947 Mar 15 16:42:15 racoon: INFO: received broken Microsoft ID: FRAGMENTATION Mar 15 16:42:15 racoon: INFO: received Vendor ID: DPD Mar 15 16:42:15 racoon: INFO: received Vendor ID: CISCO-UNITY Mar 15 16:42:15 racoon: [212.83.247.226] INFO: Selected NAT-T version: RFC 3947 Mar 15 16:42:15 racoon: INFO: Adding remote and local NAT-D payloads. Mar 15 16:42:15 racoon: [212.83.247.226] INFO: Hashing 212.83.247.226[500] with algo #2 Mar 15 16:42:15 racoon: [95.96.134.40] INFO: Hashing 95.96.134.40[500] with algo #2 Mar 15 16:42:15 racoon: [Unknown Gateway/Dynamic]: INFO: NAT-T: ports changed to: 212.83.247.226[39044]<->95.96.134.40[4500] Mar 15 16:42:15 racoon: [95.96.134.40] INFO: Hashing 95.96.134.40[4500] with algo #2 Mar 15 16:42:15 racoon: INFO: NAT-D payload #0 doesn't match Mar 15 16:42:15 racoon: [212.83.247.226] INFO: Hashing 212.83.247.226[39044] with algo #2 Mar 15 16:42:15 racoon: INFO: NAT-D payload #1 doesn't match Mar 15 16:42:15 racoon: INFO: NAT detected: ME PEER Mar 15 16:42:15 racoon: [Unknown Gateway/Dynamic]: INFO: ISAKMP-SA established 95.96.134.40[4500]-212.83.247.226[39044] spi:879f5647eb36136a:31c124b04cbf7ae5 Mar 15 16:42:15 racoon: [212.83.247.226] INFO: received INITIAL-CONTACT Mar 15 16:42:15 racoon: INFO: Using port 0 Mar 15 16:42:15 racoon: WARNING: Ignored attribute INTERNAL_ADDRESS_EXPIRY Mar 15 16:42:15 racoon: [Unknown Gateway/Dynamic]: INFO: respond new phase 2 negotiation: 95.96.134.40[4500]<=>212.83.247.226[39044] Mar 15 16:42:15 racoon: [Unknown Gateway/Dynamic]: INFO: no policy found, try to generate the policy : 192.168.78.1/32[0] 10.1.1.0/24[0] proto=any dir=in Mar 15 16:42:15 racoon: INFO: Adjusting my encmode UDP-Tunnel->Tunnel Mar 15 16:42:15 racoon: INFO: Adjusting peer's encmode UDP-Tunnel(3)->Tunnel(1) Mar 15 16:42:15 racoon: [Unknown Gateway/Dynamic]: INFO: IPsec-SA established: ESP 95.96.134.40[500]->212.83.247.226[500] spi=7095212(0x6c43ac) Mar 15 16:42:15 racoon: [Unknown Gateway/Dynamic]: INFO: IPsec-SA established: ESP 95.96.134.40[500]->212.83.247.226[500] spi=3268653652(0xc2d3b254) Mar 15 16:42:26 racoon: ERROR: no configuration found for 212.83.247.226. Mar 15 16:42:26 racoon: ERROR: failed to begin ipsec sa negotication. Mar 15 16:42:43 racoon: ERROR: no configuration found for 212.83.247.226. Mar 15 16:42:43 racoon: ERROR: failed to begin ipsec sa negotication. Mar 15 16:42:48 racoon: ERROR: no configuration found for 212.83.247.226. Mar 15 16:42:48 racoon: ERROR: failed to begin ipsec sa negotication. Mar 15 16:42:56 racoon: ERROR: no configuration found for 212.83.247.226. Mar 15 16:42:56 racoon: ERROR: failed to begin ipsec sa negotication. Mar 15 16:43:12 racoon: INFO: purging ISAKMP-SA spi=879f5647eb36136a:31c124b04cbf7ae5:00007f3c. Mar 15 16:43:12 racoon: INFO: deleting a generated policy. Mar 15 16:43:12 racoon: INFO: purged IPsec-SA spi=7095212. Mar 15 16:43:12 racoon: INFO: purged ISAKMP-SA spi=879f5647eb36136a:31c124b04cbf7ae5:00007f3c. Mar 15 16:43:13 racoon: [Unknown Gateway/Dynamic]: INFO: ISAKMP-SA deleted 95.96.134.40[4500]-212.83.247.226[39044] spi:879f5647eb36136a:31c124b04cbf7ae5 Mar 15 16:43:13 racoon: INFO: Released port 0 Mar 15 16:28:45 racoon: INFO: purging ISAKMP-SA spi=606947e60a07e623:e091d4be709125af:00007c67. Mar 15 16:28:45 racoon: INFO: deleting a generated policy. Mar 15 16:28:45 racoon: INFO: purged IPsec-SA spi=249457509. Mar 15 16:28:45 racoon: INFO: purged ISAKMP-SA spi=606947e60a07e623:e091d4be709125af:00007c67. Mar 15 16:28:46 racoon: [Unknown Gateway/Dynamic]: INFO: ISAKMP-SA deleted 95.96.134.40[4500]-212.83.247.226[39567] spi:606947e60a07e623:e091d4be709125af Mar 15 16:28:46 racoon: INFO: Released port 0 Mar 15 16:42:15 racoon: [Unknown Gateway/Dynamic]: INFO: respond new phase 1 negotiation: 95.96.134.40[500]<=>212.83.247.226[500] Mar 15 16:42:15 racoon: INFO: begin Aggressive mode. Mar 15 16:42:15 racoon: INFO: received Vendor ID: draft-ietf-ipsec-nat-t-ike-00 Mar 15 16:42:15 racoon: INFO: received Vendor ID: draft-ietf-ipsec-nat-t-ike-01 Mar 15 16:42:15 racoon: INFO: received Vendor ID: draft-ietf-ipsec-nat-t-ike-02 Mar 15 16:42:15 racoon: INFO: received Vendor ID: draft-ietf-ipsec-nat-t-ike-03 Mar 15 16:42:15 racoon: INFO: received Vendor ID: RFC 3947 Mar 15 16:42:15 racoon: INFO: received broken Microsoft ID: FRAGMENTATION System log when wrong : Mar 15 09:49:38 kernel: em0: Watchdog timeout -- resetting Mar 15 09:49:39 kernel: em0: Watchdog timeout -- resetting Mar 15 09:49:40 kernel: em0: Watchdog timeout -- resetting Mar 15 09:49:41 kernel: em0: Watchdog timeout -- resetting Mar 15 09:49:42 kernel: em0: Watchdog timeout -- resetting Mar 15 09:54:39 kernel: em0: Watchdog timeout -- resetting Mar 15 09:54:40 kernel: em0: Watchdog timeout -- resetting Mar 15 16:06:58 kernel: WARNING: pseudo-random number generator used for IPsec processing Mar 15 16:19:43 php: /index.php: Successful webConfigurator login for user 'administrator' from 212.83.247.226 Mar 15 16:19:43 php: /index.php: Successful webConfigurator login for user 'administrator' from 212.83.247.226