Status of IKE charon daemon (strongSwan 5.7.1, FreeBSD 11.2-RELEASE-p6, amd64): uptime: 3 days, since Feb 08 13:30:04 2019 worker threads: 11 of 16 idle, 5/0/0/0 working, job queue: 0/0/0/0, scheduled: 99 loaded plugins: charon unbound aes des blowfish rc2 sha2 sha1 md4 md5 random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey ipseckey pem openssl fips-prf curve25519 xcbc cmac hmac curl attr kernel-pfkey kernel-pfroute resolve socket-default stroke vici updown eap-identity eap-sim eap-md5 eap-mschapv2 eap-dynamic eap-radius eap-tls eap-ttls eap-peap xauth-generic xauth-eap whitelist addrblock counters Listening IP addresses: 172.23.1.190 172.23.1.100 172.23.2.228 10.200.1.5 169.254.14.2 169.254.13.2 169.254.2.38 169.254.2.34 169.254.2.14 169.254.2.10 169.254.2.18 169.254.2.22 169.254.3.26 169.254.3.30 169.254.3.10 169.254.3.14 169.254.3.18 169.254.3.22 169.254.4.14 169.254.4.10 Connections: con1000: 172.23.1.190...62.146.xx.xx IKEv2, dpddelay=10s con1000: local: [18.185.xx.xx] uses pre-shared key authentication con1000: remote: [62.146.xx.xx] uses pre-shared key authentication con1000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart con12000: 172.23.1.190...18.185.xx.xx IKEv1, dpddelay=10s con12000: local: [172.23.1.190] uses pre-shared key authentication con12000: remote: [18.185.xx.xx] uses pre-shared key authentication con12000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart con13000: 172.23.1.190...18.195.xx.xx IKEv1, dpddelay=10s con13000: local: [172.23.1.190] uses pre-shared key authentication con13000: remote: [18.195.xx.xx] uses pre-shared key authentication con13000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart con14000: 172.23.1.190...3.120.64.17 IKEv1, dpddelay=10s con14000: local: [172.23.1.190] uses pre-shared key authentication con14000: remote: [3.120.64.17] uses pre-shared key authentication con14000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart con15000: 172.23.1.190...18.184.xx.xx IKEv1, dpddelay=10s con15000: local: [172.23.1.190] uses pre-shared key authentication con15000: remote: [18.184.xx.xx] uses pre-shared key authentication con15000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart con16000: 172.23.1.190...52.220.xx,xx IKEv1, dpddelay=10s con16000: local: [172.23.1.190] uses pre-shared key authentication con16000: remote: [52.220.xx,xx] uses pre-shared key authentication con16000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart con17000: 172.23.1.190...54.254.xx.xx IKEv1, dpddelay=10s con17000: local: [172.23.1.190] uses pre-shared key authentication con17000: remote: [54.254.xx.xx] uses pre-shared key authentication con17000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart con18000: 172.23.1.190...18.205.xx.xx IKEv1, dpddelay=10s con18000: local: [172.23.1.190] uses pre-shared key authentication con18000: remote: [18.205.xx.xx] uses pre-shared key authentication con18000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart con19000: 172.23.1.190...34.198.89.68 IKEv1, dpddelay=10s con19000: local: [172.23.1.190] uses pre-shared key authentication con19000: remote: [34.198.89.68] uses pre-shared key authentication con19000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart con20000: 172.23.1.190...18.194.xx.xx IKEv1, dpddelay=10s con20000: local: [172.23.1.190] uses pre-shared key authentication con20000: remote: [18.194.xx.xx] uses pre-shared key authentication con20000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart con21000: 172.23.1.190...18.196.xx.xx IKEv1, dpddelay=10s con21000: local: [172.23.1.190] uses pre-shared key authentication con21000: remote: [18.196.xx.xx] uses pre-shared key authentication con21000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart con22000: 172.23.1.190...34.233.xx.xx IKEv1, dpddelay=10s con22000: local: [172.23.1.190] uses pre-shared key authentication con22000: remote: [34.233.xx.xx] uses pre-shared key authentication con22000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart con23000: 172.23.1.190...54.81.xx.xx IKEv1, dpddelay=10s con23000: local: [172.23.1.190] uses pre-shared key authentication con23000: remote: [54.81.xx.xx] uses pre-shared key authentication con23000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart con24000: 172.23.1.190...18.228.xx.xx IKEv1, dpddelay=10s con24000: local: [172.23.1.190] uses pre-shared key authentication con24000: remote: [18.228.xx.xx] uses pre-shared key authentication con24000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart con25000: 172.23.1.190...52.67.58.38 IKEv1, dpddelay=10s con25000: local: [172.23.1.190] uses pre-shared key authentication con25000: remote: [52.67.58.38] uses pre-shared key authentication con25000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart con2000: 172.23.1.190...34.209.xx.xx IKEv1, dpddelay=10s con2000: local: [172.23.1.190] uses pre-shared key authentication con2000: remote: [34.209.xx.xx] uses pre-shared key authentication con2000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart con3000: 172.23.1.190...54.71.xx.xx IKEv1, dpddelay=10s con3000: local: [172.23.1.190] uses pre-shared key authentication con3000: remote: [54.71.xx.xx] uses pre-shared key authentication con3000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart Security Associations (17 up, 0 connecting): con17000[231]: ESTABLISHED 5 hours ago, 172.23.1.190[172.23.1.190]...54.254.xx.xx[54.254.xx.xx] con17000[231]: IKEv1 SPIs: 84dcaebc9a1e7d89_i* 009a5daf20b4db27_r, pre-shared key reauthentication in 112 minutes con17000[231]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con17000{2294}: REKEYED, TUNNEL, reqid 17000, expires in 4 minutes con17000{2294}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con17000{2314}: INSTALLED, TUNNEL, reqid 17000, ESP in UDP SPIs: cb639bef_i 9a3ce4c6_o con17000{2314}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 42135 bytes_i, 128904 bytes_o, rekeying in 31 minutes con17000{2314}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con13000[249]: ESTABLISHED 3 hours ago, 172.23.1.190[172.23.1.190]...18.195.xx.xx[18.195.xx.xx] con13000[249]: IKEv1 SPIs: 686a3bdac6512da8_i* 3442b772e46dc5b7_r, pre-shared key reauthentication in 4 hours con13000[249]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con13000{2292}: REKEYED, TUNNEL, reqid 13000, expires in 2 minutes con13000{2292}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con13000{2312}: INSTALLED, TUNNEL, reqid 13000, ESP in UDP SPIs: c2589808_i 8623f694_o con13000{2312}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 50206 bytes_i, 153632 bytes_o, rekeying in 31 minutes con13000{2312}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con12000[252]: ESTABLISHED 2 hours ago, 172.23.1.190[172.23.1.190]...18.185.xx.xx[18.185.xx.xx] con12000[252]: IKEv1 SPIs: 059e6b11f96eb604_i* 7c4fa74508c7d128_r, pre-shared key reauthentication in 4 hours con12000[252]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con12000{2291}: REKEYED, TUNNEL, reqid 12000, expires in 2 minutes con12000{2291}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con12000{2313}: INSTALLED, TUNNEL, reqid 12000, ESP in UDP SPIs: c9f302a3_i 3b531e32_o con12000{2313}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 5318853 bytes_i, 1015004 bytes_o, rekeying in 30 minutes con12000{2313}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con22000[247]: ESTABLISHED 3 hours ago, 172.23.1.190[172.23.1.190]...34.233.xx.xx[34.233.xx.xx] con22000[247]: IKEv1 SPIs: 49dd0c1ddc2d2308_i* e874fbe24c83eeb9_r, pre-shared key reauthentication in 4 hours con22000[247]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con22000{2304}: INSTALLED, TUNNEL, reqid 22000, ESP in UDP SPIs: c481161c_i a330acfb_o con22000{2304}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 145143 bytes_i, 443688 bytes_o, rekeying in 7 minutes con22000{2304}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con20000[248]: ESTABLISHED 3 hours ago, 172.23.1.190[172.23.1.190]...18.194.xx.xx[18.194.xx.xx] con20000[248]: IKEv1 SPIs: f198b6931b1790bc_i* dd06123ffedb1d0d_r, pre-shared key reauthentication in 4 hours con20000[248]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con20000{2305}: INSTALLED, TUNNEL, reqid 20000, ESP in UDP SPIs: c46bd8ed_i 8247c230_o con20000{2305}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 143191 bytes_i, 437804 bytes_o, rekeying in 13 minutes con20000{2305}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con25000[229]: ESTABLISHED 7 hours ago, 172.23.1.190[172.23.1.190]...52.67.58.38[52.67.58.38] con25000[229]: IKEv1 SPIs: d5b0fcf51a929f3f_i* b0234f2ce542367f_r, pre-shared key reauthentication in 4 minutes con25000[229]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con25000{2301}: REKEYED, TUNNEL, reqid 25000, expires in 15 minutes con25000{2301}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con25000{2319}: INSTALLED, TUNNEL, reqid 25000, ESP in UDP SPIs: c9eef94e_i f054b7c4_o con25000{2319}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 14253656 bytes_i, 3454212 bytes_o, rekeying in 43 minutes con25000{2319}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con1000[251]: ESTABLISHED 2 hours ago, 172.23.1.190[18.185.xx.xx]...62.146.xx.xx[62.146.xx.xx] con1000[251]: IKEv2 SPIs: 906877690e23dfd2_i 198978bc6cdc350d_r*, pre-shared key reauthentication in 4 hours con1000[251]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con1000{2309}: INSTALLED, TUNNEL, reqid 1000, ESP in UDP SPIs: c265730d_i ce413371_o con1000{2309}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 7269601 bytes_i, 49750572 bytes_o, rekeying in 16 minutes con1000{2309}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con1000{2310}: INSTALLED, TUNNEL, reqid 1000, ESP in UDP SPIs: c65ce153_i c4978a76_o con1000{2310}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 86141382 bytes_i, 631636672 bytes_o, rekeying in 27 minutes con1000{2310}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con3000[230]: ESTABLISHED 7 hours ago, 172.23.1.190[172.23.1.190]...54.71.xx.xx[54.71.xx.xx] con3000[230]: IKEv1 SPIs: 796d148fdefa6cbd_i* f356c73bd351d4a0_r, pre-shared key reauthentication in 45 minutes con3000[230]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con3000{2290}: REKEYED, TUNNEL, reqid 3000, expires in 69 seconds con3000{2290}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con3000{2311}: INSTALLED, TUNNEL, reqid 3000, ESP in UDP SPIs: cb896df3_i 85fd37ff_o con3000{2311}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 50318 bytes_i, 154000 bytes_o, rekeying in 30 minutes con3000{2311}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con18000[250]: ESTABLISHED 2 hours ago, 172.23.1.190[172.23.1.190]...18.205.xx.xx[18.205.xx.xx] con18000[250]: IKEv1 SPIs: 823cff96d351fb7d_i* 3ad1440a1d504e35_r, pre-shared key reauthentication in 4 hours con18000[250]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con18000{2306}: INSTALLED, TUNNEL, reqid 18000, ESP in UDP SPIs: c32bdb04_i 79b5713c_o con18000{2306}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 119633 bytes_i, 365644 bytes_o, rekeying in 13 minutes con18000{2306}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con15000[246]: ESTABLISHED 3 hours ago, 172.23.1.190[172.23.1.190]...18.184.xx.xx[18.184.xx.xx] con15000[246]: IKEv1 SPIs: 62417a15d8b09437_i* 0b2ebdecd45019e9_r, pre-shared key reauthentication in 4 hours con15000[246]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con15000{2293}: REKEYED, TUNNEL, reqid 15000, expires in 2 minutes con15000{2293}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con15000{2307}: INSTALLED, TUNNEL, reqid 15000, ESP in UDP SPIs: c1aa09b6_i 885d6b75_o con15000{2307}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 63806 bytes_i, 196152 bytes_o, rekeying in 29 minutes con15000{2307}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con19000[232]: ESTABLISHED 5 hours ago, 172.23.1.190[172.23.1.190]...34.198.89.68[34.198.89.68] con19000[232]: IKEv1 SPIs: 624c50eb71f7859a_i* 9bc3d34bbbad9f24_r, pre-shared key reauthentication in 2 hours con19000[232]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con19000{2295}: REKEYED, TUNNEL, reqid 19000, expires in 5 minutes con19000{2295}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con19000{2315}: INSTALLED, TUNNEL, reqid 19000, ESP in UDP SPIs: cd351370_i 69dcdc50_o con19000{2315}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 22573893 bytes_i, 8645272 bytes_o, rekeying in 37 minutes con19000{2315}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con24000[253]: ESTABLISHED 65 minutes ago, 172.23.1.190[172.23.1.190]...18.228.xx.xx[18.228.xx.xx] con24000[253]: IKEv1 SPIs: b24a992fa77b52ba_i* 438cd611e013fc47_r, pre-shared key reauthentication in 6 hours con24000[253]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con24000{2308}: INSTALLED, TUNNEL, reqid 24000, ESP in UDP SPIs: c8a92bbe_i 641dc408_o con24000{2308}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 60076 bytes_i, 183712 bytes_o, rekeying in 30 minutes con24000{2308}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con14000[245]: ESTABLISHED 3 hours ago, 172.23.1.190[172.23.1.190]...3.120.64.17[3.120.64.17] con14000[245]: IKEv1 SPIs: 36e04c1d3b538202_i* 64b8873601d1cf03_r, pre-shared key reauthentication in 4 hours con14000[245]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con14000{2297}: REKEYED, TUNNEL, reqid 14000, expires in 9 minutes con14000{2297}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con14000{2317}: INSTALLED, TUNNEL, reqid 14000, ESP in UDP SPIs: c69af60d_i f864ab4b_o con14000{2317}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 26947944 bytes_i, 9223616 bytes_o, rekeying in 36 minutes con14000{2317}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con2000[254]: ESTABLISHED 18 minutes ago, 172.23.1.190[172.23.1.190]...34.209.xx.xx[34.209.xx.xx] con2000[254]: IKEv1 SPIs: e32b9c29ce7b41c9_i* f81bfd5ec6aecdfc_r, pre-shared key reauthentication in 7 hours con2000[254]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con2000{2303}: INSTALLED, TUNNEL, reqid 2000, ESP in UDP SPIs: ca85ee7f_i 99101bf8_o con2000{2303}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 146425 bytes_i, 447620 bytes_o, rekeying in 6 minutes con2000{2303}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con23000[242]: ESTABLISHED 3 hours ago, 172.23.1.190[172.23.1.190]...54.81.xx.xx[54.81.xx.xx] con23000[242]: IKEv1 SPIs: ebe1d5bd0de52844_i* e4a93730f1b04c48_r, pre-shared key reauthentication in 4 hours con23000[242]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con23000{2302}: INSTALLED, TUNNEL, reqid 23000, ESP in UDP SPIs: c4fca6ee_i e4797ccc_o con23000{2302}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 506948527 bytes_i, 119555472 bytes_o, rekeying in 2 minutes con23000{2302}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con16000[243]: ESTABLISHED 3 hours ago, 172.23.1.190[172.23.1.190]...52.220.xx,xx[52.220.xx,xx] con16000[243]: IKEv1 SPIs: 6f9968ecb580172d_i* a33137c28f30cd01_r, pre-shared key reauthentication in 4 hours con16000[243]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con16000{2296}: REKEYED, TUNNEL, reqid 16000, expires in 6 minutes con16000{2296}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con16000{2318}: INSTALLED, TUNNEL, reqid 16000, ESP in UDP SPIs: c74fdabf_i 6d95ccbc_o con16000{2318}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 11204422 bytes_i, 4208088 bytes_o, rekeying in 40 minutes con16000{2318}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con21000[244]: ESTABLISHED 3 hours ago, 172.23.1.190[172.23.1.190]...18.196.xx.xx[18.196.xx.xx] con21000[244]: IKEv1 SPIs: 1f6849a5b95cb325_i* 5a6cf5d7f25547d0_r, pre-shared key reauthentication in 4 hours con21000[244]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con21000{2298}: REKEYED, TUNNEL, reqid 21000, expires in 9 minutes con21000{2298}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con21000{2316}: INSTALLED, TUNNEL, reqid 21000, ESP in UDP SPIs: c74efbc2_i 9b571bda_o con21000{2316}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 87772621 bytes_i, 18888592 bytes_o, rekeying in 38 minutes con21000{2316}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 [2.4.4-RELEASE][admin@technik-prod-transitgw-eu-central-1-001.aws.cipsoft.com]/root: pwd /root [2.4.4-RELEASE][admin@technik-prod-transitgw-eu-central-1-001.aws.cipsoft.com]/root: cat ipsec_statusall Status of IKE charon daemon (strongSwan 5.7.1, FreeBSD 11.2-RELEASE-p6, amd64): uptime: 3 days, since Feb 08 13:30:04 2019 worker threads: 11 of 16 idle, 5/0/0/0 working, job queue: 0/0/0/0, scheduled: 99 loaded plugins: charon unbound aes des blowfish rc2 sha2 sha1 md4 md5 random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey ipseckey pem openssl fips-prf curve25519 xcbc cmac hmac curl attr kernel-pfkey kernel-pfroute resolve socket-default stroke vici updown eap-identity eap-sim eap-md5 eap-mschapv2 eap-dynamic eap-radius eap-tls eap-ttls eap-peap xauth-generic xauth-eap whitelist addrblock counters Listening IP addresses: 172.23.1.190 172.23.1.100 172.23.2.228 10.200.1.5 169.254.14.2 169.254.13.2 169.254.2.38 169.254.2.34 169.254.2.14 169.254.2.10 169.254.2.18 169.254.2.22 169.254.3.26 169.254.3.30 169.254.3.10 169.254.3.14 169.254.3.18 169.254.3.22 169.254.4.14 169.254.4.10 Connections: con1000: 172.23.1.190...62.146.xx.xx IKEv2, dpddelay=10s con1000: local: [18.185.xx.xx] uses pre-shared key authentication con1000: remote: [62.146.xx.xx] uses pre-shared key authentication con1000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart con12000: 172.23.1.190...18.185.xx.xx IKEv1, dpddelay=10s con12000: local: [172.23.1.190] uses pre-shared key authentication con12000: remote: [18.185.xx.xx] uses pre-shared key authentication con12000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart con13000: 172.23.1.190...18.195.xx.xx IKEv1, dpddelay=10s con13000: local: [172.23.1.190] uses pre-shared key authentication con13000: remote: [18.195.xx.xx] uses pre-shared key authentication con13000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart con14000: 172.23.1.190...3.120.64.17 IKEv1, dpddelay=10s con14000: local: [172.23.1.190] uses pre-shared key authentication con14000: remote: [3.120.64.17] uses pre-shared key authentication con14000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart con15000: 172.23.1.190...18.184.xx.xx IKEv1, dpddelay=10s con15000: local: [172.23.1.190] uses pre-shared key authentication con15000: remote: [18.184.xx.xx] uses pre-shared key authentication con15000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart con16000: 172.23.1.190...52.220.xx,xx IKEv1, dpddelay=10s con16000: local: [172.23.1.190] uses pre-shared key authentication con16000: remote: [52.220.xx,xx] uses pre-shared key authentication con16000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart con17000: 172.23.1.190...54.254.xx.xx IKEv1, dpddelay=10s con17000: local: [172.23.1.190] uses pre-shared key authentication con17000: remote: [54.254.xx.xx] uses pre-shared key authentication con17000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart con18000: 172.23.1.190...18.205.xx.xx IKEv1, dpddelay=10s con18000: local: [172.23.1.190] uses pre-shared key authentication con18000: remote: [18.205.xx.xx] uses pre-shared key authentication con18000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart con19000: 172.23.1.190...34.198.89.68 IKEv1, dpddelay=10s con19000: local: [172.23.1.190] uses pre-shared key authentication con19000: remote: [34.198.89.68] uses pre-shared key authentication con19000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart con20000: 172.23.1.190...18.194.xx.xx IKEv1, dpddelay=10s con20000: local: [172.23.1.190] uses pre-shared key authentication con20000: remote: [18.194.xx.xx] uses pre-shared key authentication con20000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart con21000: 172.23.1.190...18.196.xx.xx IKEv1, dpddelay=10s con21000: local: [172.23.1.190] uses pre-shared key authentication con21000: remote: [18.196.xx.xx] uses pre-shared key authentication con21000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart con22000: 172.23.1.190...34.233.xx.xx IKEv1, dpddelay=10s con22000: local: [172.23.1.190] uses pre-shared key authentication con22000: remote: [34.233.xx.xx] uses pre-shared key authentication con22000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart con23000: 172.23.1.190...54.81.xx.xx IKEv1, dpddelay=10s con23000: local: [172.23.1.190] uses pre-shared key authentication con23000: remote: [54.81.xx.xx] uses pre-shared key authentication con23000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart con24000: 172.23.1.190...18.228.xx.xx IKEv1, dpddelay=10s con24000: local: [172.23.1.190] uses pre-shared key authentication con24000: remote: [18.228.xx.xx] uses pre-shared key authentication con24000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart con25000: 172.23.1.190...52.67.58.38 IKEv1, dpddelay=10s con25000: local: [172.23.1.190] uses pre-shared key authentication con25000: remote: [52.67.58.38] uses pre-shared key authentication con25000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart con2000: 172.23.1.190...34.209.xx.xx IKEv1, dpddelay=10s con2000: local: [172.23.1.190] uses pre-shared key authentication con2000: remote: [34.209.xx.xx] uses pre-shared key authentication con2000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart con3000: 172.23.1.190...54.71.xx.xx IKEv1, dpddelay=10s con3000: local: [172.23.1.190] uses pre-shared key authentication con3000: remote: [54.71.xx.xx] uses pre-shared key authentication con3000: child: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 TUNNEL, dpdaction=restart Security Associations (17 up, 0 connecting): con17000[231]: ESTABLISHED 5 hours ago, 172.23.1.190[172.23.1.190]...54.254.xx.xx[54.254.xx.xx] con17000[231]: IKEv1 SPIs: 84dcaebc9a1e7d89_i* 009a5daf20b4db27_r, pre-shared key reauthentication in 112 minutes con17000[231]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con17000{2294}: REKEYED, TUNNEL, reqid 17000, expires in 4 minutes con17000{2294}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con17000{2314}: INSTALLED, TUNNEL, reqid 17000, ESP in UDP SPIs: cb639bef_i 9a3ce4c6_o con17000{2314}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 42135 bytes_i, 128904 bytes_o, rekeying in 31 minutes con17000{2314}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con13000[249]: ESTABLISHED 3 hours ago, 172.23.1.190[172.23.1.190]...18.195.xx.xx[18.195.xx.xx] con13000[249]: IKEv1 SPIs: 686a3bdac6512da8_i* 3442b772e46dc5b7_r, pre-shared key reauthentication in 4 hours con13000[249]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con13000{2292}: REKEYED, TUNNEL, reqid 13000, expires in 2 minutes con13000{2292}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con13000{2312}: INSTALLED, TUNNEL, reqid 13000, ESP in UDP SPIs: c2589808_i 8623f694_o con13000{2312}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 50206 bytes_i, 153632 bytes_o, rekeying in 31 minutes con13000{2312}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con12000[252]: ESTABLISHED 2 hours ago, 172.23.1.190[172.23.1.190]...18.185.xx.xx[18.185.xx.xx] con12000[252]: IKEv1 SPIs: 059e6b11f96eb604_i* 7c4fa74508c7d128_r, pre-shared key reauthentication in 4 hours con12000[252]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con12000{2291}: REKEYED, TUNNEL, reqid 12000, expires in 2 minutes con12000{2291}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con12000{2313}: INSTALLED, TUNNEL, reqid 12000, ESP in UDP SPIs: c9f302a3_i 3b531e32_o con12000{2313}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 5318853 bytes_i, 1015004 bytes_o, rekeying in 30 minutes con12000{2313}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con22000[247]: ESTABLISHED 3 hours ago, 172.23.1.190[172.23.1.190]...34.233.xx.xx[34.233.xx.xx] con22000[247]: IKEv1 SPIs: 49dd0c1ddc2d2308_i* e874fbe24c83eeb9_r, pre-shared key reauthentication in 4 hours con22000[247]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con22000{2304}: INSTALLED, TUNNEL, reqid 22000, ESP in UDP SPIs: c481161c_i a330acfb_o con22000{2304}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 145143 bytes_i, 443688 bytes_o, rekeying in 7 minutes con22000{2304}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con20000[248]: ESTABLISHED 3 hours ago, 172.23.1.190[172.23.1.190]...18.194.xx.xx[18.194.xx.xx] con20000[248]: IKEv1 SPIs: f198b6931b1790bc_i* dd06123ffedb1d0d_r, pre-shared key reauthentication in 4 hours con20000[248]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con20000{2305}: INSTALLED, TUNNEL, reqid 20000, ESP in UDP SPIs: c46bd8ed_i 8247c230_o con20000{2305}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 143191 bytes_i, 437804 bytes_o, rekeying in 13 minutes con20000{2305}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con25000[229]: ESTABLISHED 7 hours ago, 172.23.1.190[172.23.1.190]...52.67.58.38[52.67.58.38] con25000[229]: IKEv1 SPIs: d5b0fcf51a929f3f_i* b0234f2ce542367f_r, pre-shared key reauthentication in 4 minutes con25000[229]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con25000{2301}: REKEYED, TUNNEL, reqid 25000, expires in 15 minutes con25000{2301}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con25000{2319}: INSTALLED, TUNNEL, reqid 25000, ESP in UDP SPIs: c9eef94e_i f054b7c4_o con25000{2319}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 14253656 bytes_i, 3454212 bytes_o, rekeying in 43 minutes con25000{2319}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con1000[251]: ESTABLISHED 2 hours ago, 172.23.1.190[18.185.xx.xx]...62.146.xx.xx[62.146.xx.xx] con1000[251]: IKEv2 SPIs: 906877690e23dfd2_i 198978bc6cdc350d_r*, pre-shared key reauthentication in 4 hours con1000[251]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con1000{2309}: INSTALLED, TUNNEL, reqid 1000, ESP in UDP SPIs: c265730d_i ce413371_o con1000{2309}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 7269601 bytes_i, 49750572 bytes_o, rekeying in 16 minutes con1000{2309}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con1000{2310}: INSTALLED, TUNNEL, reqid 1000, ESP in UDP SPIs: c65ce153_i c4978a76_o con1000{2310}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 86141382 bytes_i, 631636672 bytes_o, rekeying in 27 minutes con1000{2310}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con3000[230]: ESTABLISHED 7 hours ago, 172.23.1.190[172.23.1.190]...54.71.xx.xx[54.71.xx.xx] con3000[230]: IKEv1 SPIs: 796d148fdefa6cbd_i* f356c73bd351d4a0_r, pre-shared key reauthentication in 45 minutes con3000[230]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con3000{2290}: REKEYED, TUNNEL, reqid 3000, expires in 69 seconds con3000{2290}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con3000{2311}: INSTALLED, TUNNEL, reqid 3000, ESP in UDP SPIs: cb896df3_i 85fd37ff_o con3000{2311}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 50318 bytes_i, 154000 bytes_o, rekeying in 30 minutes con3000{2311}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con18000[250]: ESTABLISHED 2 hours ago, 172.23.1.190[172.23.1.190]...18.205.xx.xx[18.205.xx.xx] con18000[250]: IKEv1 SPIs: 823cff96d351fb7d_i* 3ad1440a1d504e35_r, pre-shared key reauthentication in 4 hours con18000[250]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con18000{2306}: INSTALLED, TUNNEL, reqid 18000, ESP in UDP SPIs: c32bdb04_i 79b5713c_o con18000{2306}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 119633 bytes_i, 365644 bytes_o, rekeying in 13 minutes con18000{2306}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con15000[246]: ESTABLISHED 3 hours ago, 172.23.1.190[172.23.1.190]...18.184.xx.xx[18.184.xx.xx] con15000[246]: IKEv1 SPIs: 62417a15d8b09437_i* 0b2ebdecd45019e9_r, pre-shared key reauthentication in 4 hours con15000[246]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con15000{2293}: REKEYED, TUNNEL, reqid 15000, expires in 2 minutes con15000{2293}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con15000{2307}: INSTALLED, TUNNEL, reqid 15000, ESP in UDP SPIs: c1aa09b6_i 885d6b75_o con15000{2307}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 63806 bytes_i, 196152 bytes_o, rekeying in 29 minutes con15000{2307}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con19000[232]: ESTABLISHED 5 hours ago, 172.23.1.190[172.23.1.190]...34.198.89.68[34.198.89.68] con19000[232]: IKEv1 SPIs: 624c50eb71f7859a_i* 9bc3d34bbbad9f24_r, pre-shared key reauthentication in 2 hours con19000[232]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con19000{2295}: REKEYED, TUNNEL, reqid 19000, expires in 5 minutes con19000{2295}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con19000{2315}: INSTALLED, TUNNEL, reqid 19000, ESP in UDP SPIs: cd351370_i 69dcdc50_o con19000{2315}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 22573893 bytes_i, 8645272 bytes_o, rekeying in 37 minutes con19000{2315}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con24000[253]: ESTABLISHED 65 minutes ago, 172.23.1.190[172.23.1.190]...18.228.xx.xx[18.228.xx.xx] con24000[253]: IKEv1 SPIs: b24a992fa77b52ba_i* 438cd611e013fc47_r, pre-shared key reauthentication in 6 hours con24000[253]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con24000{2308}: INSTALLED, TUNNEL, reqid 24000, ESP in UDP SPIs: c8a92bbe_i 641dc408_o con24000{2308}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 60076 bytes_i, 183712 bytes_o, rekeying in 30 minutes con24000{2308}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con14000[245]: ESTABLISHED 3 hours ago, 172.23.1.190[172.23.1.190]...3.120.64.17[3.120.64.17] con14000[245]: IKEv1 SPIs: 36e04c1d3b538202_i* 64b8873601d1cf03_r, pre-shared key reauthentication in 4 hours con14000[245]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con14000{2297}: REKEYED, TUNNEL, reqid 14000, expires in 9 minutes con14000{2297}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con14000{2317}: INSTALLED, TUNNEL, reqid 14000, ESP in UDP SPIs: c69af60d_i f864ab4b_o con14000{2317}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 26947944 bytes_i, 9223616 bytes_o, rekeying in 36 minutes con14000{2317}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con2000[254]: ESTABLISHED 18 minutes ago, 172.23.1.190[172.23.1.190]...34.209.xx.xx[34.209.xx.xx] con2000[254]: IKEv1 SPIs: e32b9c29ce7b41c9_i* f81bfd5ec6aecdfc_r, pre-shared key reauthentication in 7 hours con2000[254]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con2000{2303}: INSTALLED, TUNNEL, reqid 2000, ESP in UDP SPIs: ca85ee7f_i 99101bf8_o con2000{2303}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 146425 bytes_i, 447620 bytes_o, rekeying in 6 minutes con2000{2303}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con23000[242]: ESTABLISHED 3 hours ago, 172.23.1.190[172.23.1.190]...54.81.xx.xx[54.81.xx.xx] con23000[242]: IKEv1 SPIs: ebe1d5bd0de52844_i* e4a93730f1b04c48_r, pre-shared key reauthentication in 4 hours con23000[242]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con23000{2302}: INSTALLED, TUNNEL, reqid 23000, ESP in UDP SPIs: c4fca6ee_i e4797ccc_o con23000{2302}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 506948527 bytes_i, 119555472 bytes_o, rekeying in 2 minutes con23000{2302}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con16000[243]: ESTABLISHED 3 hours ago, 172.23.1.190[172.23.1.190]...52.220.xx,xx[52.220.xx,xx] con16000[243]: IKEv1 SPIs: 6f9968ecb580172d_i* a33137c28f30cd01_r, pre-shared key reauthentication in 4 hours con16000[243]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con16000{2296}: REKEYED, TUNNEL, reqid 16000, expires in 6 minutes con16000{2296}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con16000{2318}: INSTALLED, TUNNEL, reqid 16000, ESP in UDP SPIs: c74fdabf_i 6d95ccbc_o con16000{2318}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 11204422 bytes_i, 4208088 bytes_o, rekeying in 40 minutes con16000{2318}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con21000[244]: ESTABLISHED 3 hours ago, 172.23.1.190[172.23.1.190]...18.196.xx.xx[18.196.xx.xx] con21000[244]: IKEv1 SPIs: 1f6849a5b95cb325_i* 5a6cf5d7f25547d0_r, pre-shared key reauthentication in 4 hours con21000[244]: IKE proposal: AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048 con21000{2298}: REKEYED, TUNNEL, reqid 21000, expires in 9 minutes con21000{2298}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0 con21000{2316}: INSTALLED, TUNNEL, reqid 21000, ESP in UDP SPIs: c74efbc2_i 9b571bda_o con21000{2316}: AES_CBC_256/HMAC_SHA2_256_128/MODP_2048, 87772621 bytes_i, 18888592 bytes_o, rekeying in 38 minutes con21000{2316}: 0.0.0.0/0|/0 === 0.0.0.0/0|/0