May 28 18:46:28 charon 36179 07[CFG] send_cert = CERT_ALWAYS_SEND May 28 18:46:28 charon 36179 07[CFG] ppk_id = (null) May 28 18:46:28 charon 36179 07[CFG] ppk_required = 0 May 28 18:46:28 charon 36179 07[CFG] mobike = 1 May 28 18:46:28 charon 36179 07[CFG] aggressive = 0 May 28 18:46:28 charon 36179 07[CFG] dscp = 0x00 May 28 18:46:28 charon 36179 07[CFG] encap = 0 May 28 18:46:28 charon 36179 07[CFG] dpd_delay = 10 May 28 18:46:28 charon 36179 07[CFG] dpd_timeout = 0 May 28 18:46:28 charon 36179 07[CFG] fragmentation = 2 May 28 18:46:28 charon 36179 07[CFG] childless = 0 May 28 18:46:28 charon 36179 07[CFG] unique = UNIQUE_REPLACE May 28 18:46:28 charon 36179 07[CFG] keyingtries = 1 May 28 18:46:28 charon 36179 07[CFG] reauth_time = 0 May 28 18:46:28 charon 36179 07[CFG] rekey_time = 25920 May 28 18:46:28 charon 36179 07[CFG] over_time = 2880 May 28 18:46:28 charon 36179 07[CFG] rand_time = 2880 May 28 18:46:28 charon 36179 07[CFG] proposals = IKE:AES_GCM_16_256/PRF_HMAC_SHA2_256/MODP_4096, IKE:AES_GCM_16_256/PRF_HMAC_SHA2_256/MODP_1024, IKE:AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048, IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048 May 28 18:46:28 charon 36179 07[CFG] if_id_in = 0 May 28 18:46:28 charon 36179 07[CFG] if_id_out = 0 May 28 18:46:28 charon 36179 07[CFG] local: May 28 18:46:28 charon 36179 07[CFG] class = public key May 28 18:46:28 charon 36179 07[CFG] id = 192.168.1.1 May 28 18:46:28 charon 36179 07[CFG] cert = CN=192.168.1.1, C=BE May 28 18:46:28 charon 36179 07[CFG] remote: May 28 18:46:28 charon 36179 07[CFG] eap-type = EAP_MSCHAPV2 May 28 18:46:28 charon 36179 07[CFG] class = EAP May 28 18:46:28 charon 36179 07[CFG] eap_id = %any May 28 18:46:28 charon 36179 07[CFG] id = %any May 28 18:46:28 charon 36179 07[CFG] updated vici connection: con-mobile May 28 18:46:28 charon 36179 08[CFG] vici client 45 disconnected May 28 18:46:54 charon 36179 08[KNL] 2a02:1811:3c00:3a10:92ec:77ff:fe29:7652 appeared on igc0 May 28 18:46:54 charon 36179 08[KNL] 2a02:1811:3c00:3a00::9ace appeared on ix3 May 28 18:53:04 charon 36179 14[KNL] 192.168.1.1 disappeared from igc0 May 28 18:53:04 charon 36179 14[KNL] 2a02:1811:3c00:3a10:92ec:77ff:fe29:7652 disappeared from igc0 May 28 18:55:53 charon 36179 06[NET] <4> received packet: from 94.225.60.189[500] to 81.82.245.127[500] (1104 bytes) May 28 18:55:53 charon 36179 06[ENC] <4> parsed IKE_SA_INIT request 0 [ SA KE No N(FRAG_SUP) N(NATD_S_IP) N(NATD_D_IP) V V V V ] May 28 18:55:53 charon 36179 06[CFG] <4> looking for an IKEv2 config for 81.82.245.127...94.225.60.189 May 28 18:55:53 charon 36179 06[CFG] <4> candidate: 81.82.245.127...0.0.0.0/0, ::/0, prio 1052 May 28 18:55:53 charon 36179 06[CFG] <4> found matching ike config: 81.82.245.127...0.0.0.0/0, ::/0 with prio 1052 May 28 18:55:53 charon 36179 06[IKE] <4> local endpoint changed from 0.0.0.0[500] to 81.82.245.127[500] May 28 18:55:53 charon 36179 06[IKE] <4> remote endpoint changed from 0.0.0.0 to 94.225.60.189[500] May 28 18:55:53 charon 36179 06[IKE] <4> received MS NT5 ISAKMPOAKLEY v9 vendor ID May 28 18:55:53 charon 36179 06[IKE] <4> received MS-Negotiation Discovery Capable vendor ID May 28 18:55:53 charon 36179 06[IKE] <4> received Vid-Initial-Contact vendor ID May 28 18:55:53 charon 36179 06[ENC] <4> received unknown vendor ID: 01:52:8b:bb:c0:06:96:12:18:49:ab:9a:1c:5b:2a:51:00:00:00:02 May 28 18:55:53 charon 36179 06[IKE] <4> 94.225.60.189 is initiating an IKE_SA May 28 18:55:53 charon 36179 06[IKE] <4> IKE_SA (unnamed)[4] state change: CREATED => CONNECTING May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable PSEUDO_RANDOM_FUNCTION found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable DIFFIE_HELLMAN_GROUP found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable PSEUDO_RANDOM_FUNCTION found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> no acceptable PSEUDO_RANDOM_FUNCTION found May 28 18:55:53 charon 36179 06[CFG] <4> selecting proposal: May 28 18:55:53 charon 36179 06[CFG] <4> proposal matches May 28 18:55:53 charon 36179 06[CFG] <4> received proposals: IKE:3DES_CBC/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1024, IKE:3DES_CBC/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_1024, IKE:3DES_CBC/HMAC_SHA2_384_192/PRF_HMAC_SHA2_384/MODP_1024, IKE:AES_CBC_128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1024, IKE:AES_CBC_128/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_1024, IKE:AES_CBC_128/HMAC_SHA2_384_192/PRF_HMAC_SHA2_384/MODP_1024, IKE:AES_CBC_192/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1024, IKE:AES_CBC_192/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_1024, IKE:AES_CBC_192/HMAC_SHA2_384_192/PRF_HMAC_SHA2_384/MODP_1024, IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1024, IKE:AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_1024, IKE:AES_CBC_256/HMAC_SHA2_384_192/PRF_HMAC_SHA2_384/MODP_1024, IKE:AES_GCM_16_128/PRF_HMAC_SHA1/MODP_1024, IKE:AES_GCM_16_128/PRF_HMAC_SHA2_256/MODP_1024, IKE:AES_GCM_16_128/PRF_HMAC_SHA2_384/MODP_1024, IKE:AES_GCM_16_256/PRF_HMAC_SHA1/MODP_1024, IKE:AES_GCM_16_256/PRF_HMAC_SHA2_256/MODP_1024, IKE:AES_GCM_16_256/PRF_HMAC_SHA2_384/MODP_1024 May 28 18:55:53 charon 36179 06[CFG] <4> configured proposals: IKE:AES_GCM_16_256/PRF_HMAC_SHA2_256/MODP_4096, IKE:AES_GCM_16_256/PRF_HMAC_SHA2_256/MODP_1024, IKE:AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048, IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048 May 28 18:55:53 charon 36179 06[CFG] <4> selected proposal: IKE:AES_GCM_16_256/PRF_HMAC_SHA2_256/MODP_1024 May 28 18:55:53 charon 36179 06[IKE] <4> remote host is behind NAT May 28 18:55:53 charon 36179 06[IKE] <4> sending cert request for "CN=mobile-ipsec-ca" May 28 18:55:53 charon 36179 06[ENC] <4> generating IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) CERTREQ N(FRAG_SUP) N(CHDLESS_SUP) N(MULT_AUTH) ] May 28 18:55:53 charon 36179 06[NET] <4> sending packet: from 81.82.245.127[500] to 94.225.60.189[500] (345 bytes) May 28 18:55:53 charon 36179 06[NET] <4> received packet: from 94.225.60.189[4500] to 81.82.245.127[4500] (572 bytes) May 28 18:55:53 charon 36179 06[ENC] <4> parsed IKE_AUTH request 1 [ EF(1/3) ] May 28 18:55:53 charon 36179 06[IKE] <4> local endpoint changed from 81.82.245.127[500] to 81.82.245.127[4500] May 28 18:55:53 charon 36179 06[IKE] <4> remote endpoint changed from 94.225.60.189[500] to 94.225.60.189[4500] May 28 18:55:53 charon 36179 06[ENC] <4> received fragment #1 of 3, waiting for complete IKE message May 28 18:55:53 charon 36179 06[NET] <4> received packet: from 94.225.60.189[4500] to 81.82.245.127[4500] (572 bytes) May 28 18:55:53 charon 36179 06[ENC] <4> parsed IKE_AUTH request 1 [ EF(2/3) ] May 28 18:55:53 charon 36179 06[ENC] <4> received fragment #2 of 3, waiting for complete IKE message May 28 18:55:53 charon 36179 06[NET] <4> received packet: from 94.225.60.189[4500] to 81.82.245.127[4500] (220 bytes) May 28 18:55:53 charon 36179 06[ENC] <4> parsed IKE_AUTH request 1 [ EF(3/3) ] May 28 18:55:53 charon 36179 06[ENC] <4> received fragment #3 of 3, reassembled fragmented IKE message (1198 bytes) May 28 18:55:53 charon 36179 06[ENC] <4> parsed IKE_AUTH request 1 [ IDi CERTREQ N(MOBIKE_SUP) CPRQ(ADDR DNS NBNS SRV ADDR6 DNS6 SRV6) SA TSi TSr ] May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid 0e:ac:82:60:40:56:27:97:e5:25:13:fc:2a:e1:0a:53:95:59:e4:a4 May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid dd:bc:bd:86:9c:3f:07:ed:40:e3:1b:08:ef:ce:c4:d1:88:cd:3b:15 May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for "CN=mobile-ipsec-ca" May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid 6e:58:4e:33:75:bd:57:f6:d5:42:1b:16:01:c2:d8:c0:f5:3a:9f:6e May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid 4a:5c:75:22:aa:46:bf:a4:08:9d:39:97:4e:bd:b4:a3:60:f7:a0:1d May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid 19:45:87:ae:30:36:11:23:7b:91:5d:e5:83:b7:41:f7:60:f2:73:f3 May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid 5c:b8:69:fe:8d:ef:c1:ed:66:27:ee:b2:12:0f:72:1b:b8:0a:0e:04 May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid 6a:47:a2:67:c9:2e:2f:19:68:8b:9b:86:61:66:95:ed:c1:2c:13:00 May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid 01:f0:33:4c:1a:a1:d9:ee:5b:7b:a9:de:43:bc:02:7d:57:09:33:fb May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid 88:a9:5a:ef:c0:84:fc:13:74:41:6b:b1:63:32:c2:cf:92:59:bb:3b May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid bb:c2:3e:29:0b:b3:28:77:1d:ad:3e:a2:4d:bd:f4:23:bd:06:b0:3d May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid f9:27:b6:1b:0a:37:f3:c3:1a:fa:17:ec:2d:46:17:16:12:9d:0c:0e May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid 34:4f:30:2d:25:69:31:91:ea:f7:73:5c:ab:f5:86:8d:37:82:40:ec May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid 3e:df:29:0c:c1:f5:cc:73:2c:eb:3d:24:e1:7e:52:da:bd:27:e2:f0 May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid 6d:ef:53:25:0e:5c:b1:dc:85:91:22:46:73:52:7d:29:02:5d:67:03 May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid 7c:32:d4:85:fd:89:0a:66:b5:97:ce:86:f4:d5:26:a9:21:07:e8:3e May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid 64:1d:f8:d5:0e:23:31:c2:29:b2:50:cb:32:f5:6d:f5:5c:8e:00:fa May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid da:ed:64:74:14:9c:14:3c:ab:dd:99:a9:bd:5b:28:4d:8b:3c:c9:d8 May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid 5e:8c:53:18:22:60:1d:56:71:d6:6a:a0:cc:64:a0:60:07:43:d5:a8 May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid 86:26:cb:1b:c5:54:b3:9f:bd:6b:ed:63:7f:b9:89:a9:80:f1:f4:8a May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid ed:0d:c8:d6:2c:d3:13:29:d8:82:fe:2d:c3:fc:c5:10:d3:4d:bb:14 May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid a8:e3:02:96:70:a6:8b:57:eb:ec:ef:cc:29:4e:91:74:9a:d4:92:38 May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid f7:93:19:ef:df:c1:f5:20:fb:ac:85:55:2c:f2:d2:8f:5a:b9:ca:0b May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid 30:a4:e6:4f:de:76:8a:fc:ed:5a:90:84:28:30:46:79:2c:29:15:70 May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid c4:30:28:c5:d3:e3:08:0c:10:44:8b:2c:77:ba:24:53:97:60:bb:f9 May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid f8:16:51:3c:fd:1b:44:9f:2e:6b:28:a1:97:22:1f:b8:1f:51:4e:3c May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid 87:db:d4:5f:b0:92:8d:4e:1d:f8:15:67:e7:f2:ab:af:d6:2b:67:75 May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid 4a:81:0c:de:f0:c0:90:0f:19:06:42:31:35:a2:a2:8d:d3:44:fd:08 May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid d5:2e:13:c1:ab:e3:49:da:e8:b4:95:94:ef:7c:38:43:60:64:66:bd May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid a5:06:8a:78:cf:84:bd:74:32:dd:58:f9:65:eb:3a:55:e7:c7:80:dc May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid e2:7f:7b:d8:77:d5:df:9e:0a:3f:9e:b4:cb:0e:2e:a9:ef:db:69:77 May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid 83:31:7e:62:85:42:53:d6:d7:78:31:90:ec:91:90:56:e9:91:b9:e3 May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid 3e:22:d4:2c:1f:02:44:b8:04:10:65:61:7c:c7:6b:ae:da:87:29:9c May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid b1:81:08:1a:19:a4:c0:94:1f:fa:e8:95:28:c1:24:c9:9b:34:ac:c7 May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid c8:95:13:68:01:97:28:0a:2c:55:c3:fc:d3:90:f5:3a:05:3b:c9:fb May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid ee:e5:9f:1e:2a:a5:44:c3:cb:25:43:a6:9a:5b:d4:6a:25:bc:bb:8e May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid 68:33:0e:61:35:85:21:59:29:83:a3:c8:d2:d2:e1:40:6e:7a:b3:c1 May 28 18:55:53 charon 36179 06[IKE] <4> received cert request for unknown ca with keyid 4f:9c:7d:21:79:9c:ad:0e:d8:b9:0c:57:9f:1a:02:99:e7:90:f3:87 May 28 18:55:53 charon 36179 06[IKE] <4> received 37 cert requests for an unknown ca May 28 18:55:53 charon 36179 06[CFG] <4> looking for peer configs matching 81.82.245.127[%any]...94.225.60.189[192.168.0.249] May 28 18:55:53 charon 36179 06[CFG] <4> candidate "con-mobile", match: 1/1/1052 (me/other/ike) May 28 18:55:53 charon 36179 06[CFG] selected peer config 'con-mobile' May 28 18:55:53 charon 36179 06[IKE] initiating EAP_IDENTITY method (id 0x00) May 28 18:55:53 charon 36179 06[IKE] processing INTERNAL_IP4_ADDRESS attribute May 28 18:55:53 charon 36179 06[IKE] processing INTERNAL_IP4_DNS attribute May 28 18:55:53 charon 36179 06[IKE] processing INTERNAL_IP4_NBNS attribute May 28 18:55:53 charon 36179 06[IKE] processing INTERNAL_IP4_SERVER attribute May 28 18:55:53 charon 36179 06[IKE] processing INTERNAL_IP6_ADDRESS attribute May 28 18:55:53 charon 36179 06[IKE] processing INTERNAL_IP6_DNS attribute May 28 18:55:53 charon 36179 06[IKE] processing INTERNAL_IP6_SERVER attribute May 28 18:55:53 charon 36179 06[IKE] peer supports MOBIKE May 28 18:55:53 charon 36179 06[IKE] authentication of '192.168.1.1' (myself) with RSA signature successful May 28 18:55:53 charon 36179 06[IKE] sending end entity cert "CN=192.168.1.1, C=BE" May 28 18:55:53 charon 36179 06[ENC] generating IKE_AUTH response 1 [ IDr CERT AUTH EAP/REQ/ID ] May 28 18:55:53 charon 36179 06[ENC] splitting IKE message (1326 bytes) into 2 fragments May 28 18:55:53 charon 36179 06[ENC] generating IKE_AUTH response 1 [ EF(1/2) ] May 28 18:55:53 charon 36179 06[ENC] generating IKE_AUTH response 1 [ EF(2/2) ] May 28 18:55:53 charon 36179 06[NET] sending packet: from 81.82.245.127[4500] to 94.225.60.189[4500] (1248 bytes) May 28 18:55:53 charon 36179 06[NET] sending packet: from 81.82.245.127[4500] to 94.225.60.189[4500] (143 bytes) May 28 18:55:53 charon 36179 06[NET] received packet: from 94.225.60.189[4500] to 81.82.245.127[4500] (88 bytes) May 28 18:55:53 charon 36179 06[ENC] parsed IKE_AUTH request 2 [ EAP/RES/ID ] May 28 18:55:53 charon 36179 06[IKE] received EAP identity 'info@cdm-ict.be' May 28 18:55:53 charon 36179 06[IKE] initiating EAP_MSCHAPV2 method (id 0x72) May 28 18:55:53 charon 36179 06[ENC] generating IKE_AUTH response 2 [ EAP/REQ/MSCHAPV2 ] May 28 18:55:53 charon 36179 06[NET] sending packet: from 81.82.245.127[4500] to 94.225.60.189[4500] (97 bytes) May 28 18:55:53 charon 36179 06[NET] received packet: from 94.225.60.189[4500] to 81.82.245.127[4500] (136 bytes) May 28 18:55:53 charon 36179 06[ENC] parsed IKE_AUTH request 3 [ EAP/RES/MSCHAPV2 ] May 28 18:55:53 charon 36179 06[ENC] generating IKE_AUTH response 3 [ EAP/REQ/MSCHAPV2 ] May 28 18:55:53 charon 36179 06[NET] sending packet: from 81.82.245.127[4500] to 94.225.60.189[4500] (134 bytes) May 28 18:55:53 charon 36179 06[NET] received packet: from 94.225.60.189[4500] to 81.82.245.127[4500] (72 bytes) May 28 18:55:53 charon 36179 06[ENC] parsed IKE_AUTH request 4 [ EAP/RES/MSCHAPV2 ] May 28 18:55:53 charon 36179 06[IKE] EAP method EAP_MSCHAPV2 succeeded, MSK established May 28 18:55:53 charon 36179 06[ENC] generating IKE_AUTH response 4 [ EAP/SUCC ] May 28 18:55:53 charon 36179 06[NET] sending packet: from 81.82.245.127[4500] to 94.225.60.189[4500] (65 bytes) May 28 18:55:53 charon 36179 06[NET] received packet: from 94.225.60.189[4500] to 81.82.245.127[4500] (104 bytes) May 28 18:55:53 charon 36179 06[ENC] parsed IKE_AUTH request 5 [ AUTH ] May 28 18:55:53 charon 36179 06[IKE] authentication of '192.168.0.249' with EAP successful May 28 18:55:53 charon 36179 06[IKE] authentication of '192.168.1.1' (myself) with EAP May 28 18:55:53 charon 36179 06[IKE] IKE_SA con-mobile[4] established between 81.82.245.127[192.168.1.1]...94.225.60.189[192.168.0.249] May 28 18:55:53 charon 36179 06[IKE] IKE_SA con-mobile[4] state change: CONNECTING => ESTABLISHED May 28 18:55:53 charon 36179 06[IKE] scheduling rekeying in 24581s May 28 18:55:53 charon 36179 06[IKE] maximum IKE_SA lifetime 27461s May 28 18:55:53 charon 36179 06[IKE] peer requested virtual IP %any May 28 18:55:53 charon 36179 06[CFG] reassigning offline lease to 'info@cdm-ict.be' May 28 18:55:53 charon 36179 06[IKE] assigning virtual IP 10.3.200.1 to peer 'info@cdm-ict.be' May 28 18:55:53 charon 36179 06[IKE] peer requested virtual IP %any6 May 28 18:55:53 charon 36179 06[CFG] reassigning offline lease to 'info@cdm-ict.be' May 28 18:55:53 charon 36179 06[IKE] assigning virtual IP 2001:db8:1:df01::1 to peer 'info@cdm-ict.be' May 28 18:55:53 charon 36179 06[IKE] building INTERNAL_IP4_DNS attribute May 28 18:55:53 charon 36179 06[IKE] building INTERNAL_IP4_SUBNET attribute May 28 18:55:53 charon 36179 06[IKE] building (27674) attribute May 28 18:55:53 charon 36179 06[IKE] building UNITY_SPLITDNS_NAME attribute May 28 18:55:53 charon 36179 06[CFG] looking for a child config for 0.0.0.0/0|/0 ::/0|/0 === 0.0.0.0/0|/0 ::/0|/0 May 28 18:55:53 charon 36179 06[CFG] proposing traffic selectors for us: May 28 18:55:53 charon 36179 06[CFG] 192.168.0.0/22|/0 May 28 18:55:53 charon 36179 06[CFG] proposing traffic selectors for other: May 28 18:55:53 charon 36179 06[CFG] 10.3.200.1/32|/0 May 28 18:55:53 charon 36179 06[CFG] 2001:db8:1:df01::1/128|/0 May 28 18:55:53 charon 36179 06[CFG] candidate "con-mobile" with prio 2+3 May 28 18:55:53 charon 36179 06[CFG] found matching child config "con-mobile" with prio 5 May 28 18:55:53 charon 36179 06[CFG] selecting proposal: May 28 18:55:53 charon 36179 06[CFG] no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] selecting proposal: May 28 18:55:53 charon 36179 06[CFG] no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] selecting proposal: May 28 18:55:53 charon 36179 06[CFG] no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] selecting proposal: May 28 18:55:53 charon 36179 06[CFG] no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] selecting proposal: May 28 18:55:53 charon 36179 06[CFG] no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] selecting proposal: May 28 18:55:53 charon 36179 06[CFG] no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] selecting proposal: May 28 18:55:53 charon 36179 06[CFG] no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] selecting proposal: May 28 18:55:53 charon 36179 06[CFG] no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] selecting proposal: May 28 18:55:53 charon 36179 06[CFG] no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] selecting proposal: May 28 18:55:53 charon 36179 06[CFG] no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] selecting proposal: May 28 18:55:53 charon 36179 06[CFG] no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] selecting proposal: May 28 18:55:53 charon 36179 06[CFG] no acceptable INTEGRITY_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] selecting proposal: May 28 18:55:53 charon 36179 06[CFG] no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] selecting proposal: May 28 18:55:53 charon 36179 06[CFG] no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] selecting proposal: May 28 18:55:53 charon 36179 06[CFG] no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] selecting proposal: May 28 18:55:53 charon 36179 06[CFG] no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] selecting proposal: May 28 18:55:53 charon 36179 06[CFG] no acceptable INTEGRITY_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] selecting proposal: May 28 18:55:53 charon 36179 06[CFG] no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] selecting proposal: May 28 18:55:53 charon 36179 06[CFG] no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] selecting proposal: May 28 18:55:53 charon 36179 06[CFG] no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] selecting proposal: May 28 18:55:53 charon 36179 06[CFG] no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] selecting proposal: May 28 18:55:53 charon 36179 06[CFG] no acceptable INTEGRITY_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] selecting proposal: May 28 18:55:53 charon 36179 06[CFG] no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] selecting proposal: May 28 18:55:53 charon 36179 06[CFG] no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] selecting proposal: May 28 18:55:53 charon 36179 06[CFG] no acceptable ENCRYPTION_ALGORITHM found May 28 18:55:53 charon 36179 06[CFG] received proposals: ESP:AES_CBC_256/HMAC_SHA1_96/NO_EXT_SEQ, ESP:AES_CBC_128/HMAC_SHA1_96/NO_EXT_SEQ, ESP:3DES_CBC/HMAC_SHA1_96/NO_EXT_SEQ, ESP:DES_CBC/HMAC_SHA1_96/NO_EXT_SEQ, ESP:NULL/HMAC_SHA1_96/NO_EXT_SEQ May 28 18:55:53 charon 36179 06[CFG] configured proposals: ESP:AES_GCM_16_256/MODP_2048/NO_EXT_SEQ, ESP:AES_GCM_16_128/MODP_2048/NO_EXT_SEQ, ESP:AES_CBC_128/HMAC_SHA2_256_128/MODP_2048/NO_EXT_SEQ, ESP:AES_CBC_128/HMAC_SHA2_384_192/MODP_2048/NO_EXT_SEQ, ESP:AES_CBC_128/HMAC_SHA2_512_256/MODP_2048/NO_EXT_SEQ May 28 18:55:53 charon 36179 06[IKE] no acceptable proposal found May 28 18:55:53 charon 36179 06[IKE] failed to establish CHILD_SA, keeping IKE_SA May 28 18:55:53 charon 36179 06[CHD] CHILD_SA con-mobile{3} state change: CREATED => DESTROYING May 28 18:55:53 charon 36179 06[ENC] generating IKE_AUTH response 5 [ AUTH CPRP(ADDR ADDR6 DNS SUBNET (27674) U_SPLITDNS) N(MOBIKE_SUP) N(ADD_4_ADDR) N(ADD_6_ADDR) N(ADD_6_ADDR) N(NO_PROP) ] May 28 18:55:53 charon 36179 06[NET] sending packet: from 81.82.245.127[4500] to 94.225.60.189[4500] (266 bytes) May 28 18:55:54 charon 36179 06[NET] received packet: from 94.225.60.189[4500] to 81.82.245.127[4500] (72 bytes) May 28 18:55:54 charon 36179 06[ENC] parsed INFORMATIONAL request 6 [ D ] May 28 18:55:54 charon 36179 06[IKE] received DELETE for IKE_SA con-mobile[4] May 28 18:55:54 charon 36179 06[IKE] deleting IKE_SA con-mobile[4] between 81.82.245.127[192.168.1.1]...94.225.60.189[192.168.0.249] May 28 18:55:54 charon 36179 06[IKE] IKE_SA con-mobile[4] state change: ESTABLISHED => DELETING May 28 18:55:54 charon 36179 06[IKE] IKE_SA deleted May 28 18:55:54 charon 36179 06[ENC] generating INFORMATIONAL response 6 [ ] May 28 18:55:54 charon 36179 06[NET] sending packet: from 81.82.245.127[4500] to 94.225.60.189[4500] (57 bytes) May 28 18:55:54 charon 36179 06[IKE] IKE_SA con-mobile[4] state change: DELETING => DESTROYING May 28 18:55:54 charon 36179 06[CFG] lease 2001:db8:1:df01::1 by 'info@cdm-ict.be' went offline May 28 18:55:54 charon 36179 06[CFG] lease 10.3.200.1 by 'info@cdm-ict.be' went offline May 28 18:56:14 charon 36179 05[KNL] fe80::1:1 disappeared from igc0 May 28 18:56:14 charon 36179 05[KNL] 192.168.1.1 appeared on igc0 May 28 18:56:14 charon 36179 05[KNL] fe80::1:1 appeared on igc0 May 28 18:56:14 charon 36179 05[KNL] 2a02:1811:3c00:3a00::9ace disappeared from ix3 May 28 18:56:30 charon 36179 07[CFG] vici client 46 connected May 28 18:56:30 charon 36179 07[CFG] vici client 46 requests: reload-settings May 28 18:56:30 charon 36179 07[CFG] ipseckey plugin is disabled May 28 18:56:30 charon 36179 07[CFG] loaded attribute INTERNAL_IP4_DNS: 0a:03:00:01 May 28 18:56:30 charon 36179 07[CFG] loaded attribute INTERNAL_IP4_SUBNET: c0:a8:00:00:ff:ff:fc:00 May 28 18:56:30 charon 36179 07[CFG] loaded attribute UNITY_SPLIT_INCLUDE: c0:a8:00:00:ff:ff:fc:00 May 28 18:56:30 charon 36179 07[CFG] loaded attribute (27674): 6c:6f:63:61:6c:2e:6c:61:6e May 28 18:56:30 charon 36179 07[CFG] loaded attribute UNITY_SPLITDNS_NAME: 6c:6f:63:61:6c:2e:6c:61:6e:20:6c:6f:63:61:6c:2e:6c:61:6e May 28 18:56:30 charon 36179 07[CFG] loaded 5 entries for attr plugin configuration May 28 18:56:30 charon 36179 07[CFG] loaded 0 RADIUS server configurations May 28 18:56:30 charon 36179 10[CFG] vici client 46 disconnected May 28 18:56:30 charon 36179 07[CFG] vici client 47 connected May 28 18:56:30 charon 36179 10[CFG] vici client 47 requests: get-keys May 28 18:56:30 charon 36179 07[CFG] vici client 47 requests: get-shared May 28 18:56:30 charon 36179 10[CFG] vici client 47 requests: load-cert May 28 18:56:30 charon 36179 10[CFG] loaded certificate 'CN=192.168.1.1, C=BE' May 28 18:56:30 charon 36179 12[CFG] vici client 47 requests: load-cert May 28 18:56:30 charon 36179 12[CFG] loaded certificate 'CN=mobile-ipsec-ca' May 28 18:56:30 charon 36179 12[CFG] vici client 47 requests: load-key May 28 18:56:30 charon 36179 12[CFG] loaded ANY private key May 28 18:56:30 charon 36179 10[CFG] vici client 47 requests: load-shared May 28 18:56:30 charon 36179 10[CFG] loaded EAP shared key with id 'eap-1' for: 'info@cdm-ict.be' May 28 18:56:30 charon 36179 12[CFG] vici client 47 requests: get-authorities May 28 18:56:30 charon 36179 12[CFG] vici client 47 requests: get-pools May 28 18:56:30 charon 36179 12[CFG] vici client 47 requests: load-pool May 28 18:56:30 charon 36179 12[CFG] updated vici pool mobile-pool-v4: 10.3.200.0, 254 entries May 28 18:56:30 charon 36179 11[CFG] vici client 47 requests: load-pool May 28 18:56:30 charon 36179 11[CFG] virtual IP pool too large, limiting to 2001:db8:1:df01::/97 May 28 18:56:30 charon 36179 11[CFG] updated vici pool mobile-pool-v6: 2001:db8:1:df01::, 2147483646 entries May 28 18:56:30 charon 36179 11[CFG] vici client 47 requests: get-conns May 28 18:56:30 charon 36179 11[CFG] vici client 47 requests: load-conn May 28 18:56:30 charon 36179 11[CFG] conn bypass: May 28 18:56:30 charon 36179 11[CFG] child bypasslan: May 28 18:56:30 charon 36179 11[CFG] rekey_time = 3600 May 28 18:56:30 charon 36179 11[CFG] life_time = 3960 May 28 18:56:30 charon 36179 11[CFG] rand_time = 360 May 28 18:56:30 charon 36179 11[CFG] rekey_bytes = 0 May 28 18:56:30 charon 36179 11[CFG] life_bytes = 0 May 28 18:56:30 charon 36179 11[CFG] rand_bytes = 0 May 28 18:56:30 charon 36179 11[CFG] rekey_packets = 0 May 28 18:56:30 charon 36179 11[CFG] life_packets = 0 May 28 18:56:30 charon 36179 11[CFG] rand_packets = 0 May 28 18:56:30 charon 36179 11[CFG] updown = (null) May 28 18:56:30 charon 36179 11[CFG] hostaccess = 0 May 28 18:56:30 charon 36179 11[CFG] ipcomp = 0 May 28 18:56:30 charon 36179 11[CFG] mode = PASS May 28 18:56:30 charon 36179 11[CFG] policies = 1 May 28 18:56:30 charon 36179 11[CFG] policies_fwd_out = 0 May 28 18:56:30 charon 36179 11[CFG] dpd_action = clear May 28 18:56:30 charon 36179 11[CFG] start_action = hold May 28 18:56:30 charon 36179 11[CFG] close_action = clear May 28 18:56:30 charon 36179 11[CFG] reqid = 0 May 28 18:56:30 charon 36179 11[CFG] tfc = 0 May 28 18:56:30 charon 36179 11[CFG] priority = 0 May 28 18:56:30 charon 36179 11[CFG] interface = (null) May 28 18:56:30 charon 36179 11[CFG] if_id_in = 0 May 28 18:56:30 charon 36179 11[CFG] if_id_out = 0 May 28 18:56:30 charon 36179 11[CFG] mark_in = 0/0 May 28 18:56:30 charon 36179 11[CFG] mark_in_sa = 0 May 28 18:56:30 charon 36179 11[CFG] mark_out = 0/0 May 28 18:56:30 charon 36179 11[CFG] set_mark_in = 0/0 May 28 18:56:30 charon 36179 11[CFG] set_mark_out = 0/0 May 28 18:56:30 charon 36179 11[CFG] inactivity = 0 May 28 18:56:30 charon 36179 11[CFG] proposals = ESP:AES_GCM_16_128/AES_GCM_16_192/AES_GCM_16_256, ESP:AES_CBC_128/AES_CBC_192/AES_CBC_256/HMAC_SHA2_256_128/HMAC_SHA2_384_192/HMAC_SHA2_512_256/HMAC_SHA1_96/AES_XCBC_96/NO_EXT_SEQ May 28 18:56:30 charon 36179 11[CFG] local_ts = 192.168.0.0/22|/0 May 28 18:56:30 charon 36179 11[CFG] remote_ts = 192.168.0.0/22|/0 May 28 18:56:30 charon 36179 11[CFG] hw_offload = no May 28 18:56:30 charon 36179 11[CFG] sha256_96 = 0 May 28 18:56:30 charon 36179 11[CFG] copy_df = 1 May 28 18:56:30 charon 36179 11[CFG] copy_ecn = 1 May 28 18:56:30 charon 36179 11[CFG] copy_dscp = out May 28 18:56:30 charon 36179 11[CFG] version = 0 May 28 18:56:30 charon 36179 11[CFG] local_addrs = %any May 28 18:56:30 charon 36179 11[CFG] remote_addrs = 127.0.0.1 May 28 18:56:30 charon 36179 11[CFG] local_port = 500 May 28 18:56:30 charon 36179 11[CFG] remote_port = 500 May 28 18:56:30 charon 36179 11[CFG] send_certreq = 1 May 28 18:56:30 charon 36179 11[CFG] send_cert = CERT_SEND_IF_ASKED May 28 18:56:30 charon 36179 11[CFG] ppk_id = (null) May 28 18:56:30 charon 36179 11[CFG] ppk_required = 0 May 28 18:56:30 charon 36179 11[CFG] mobike = 1 May 28 18:56:30 charon 36179 11[CFG] aggressive = 0 May 28 18:56:30 charon 36179 11[CFG] dscp = 0x00 May 28 18:56:30 charon 36179 11[CFG] encap = 0 May 28 18:56:30 charon 36179 11[CFG] dpd_delay = 0 May 28 18:56:30 charon 36179 11[CFG] dpd_timeout = 0 May 28 18:56:30 charon 36179 11[CFG] fragmentation = 2 May 28 18:56:30 charon 36179 11[CFG] childless = 0 May 28 18:56:30 charon 36179 11[CFG] unique = UNIQUE_NO May 28 18:56:30 charon 36179 11[CFG] keyingtries = 1 May 28 18:56:30 charon 36179 11[CFG] reauth_time = 0 May 28 18:56:30 charon 36179 11[CFG] rekey_time = 14400 May 28 18:56:30 charon 36179 11[CFG] over_time = 1440 May 28 18:56:30 charon 36179 11[CFG] rand_time = 1440 May 28 18:56:30 charon 36179 11[CFG] proposals = IKE:AES_CBC_128/AES_CBC_192/AES_CBC_256/CAMELLIA_CBC_128/CAMELLIA_CBC_192/CAMELLIA_CBC_256/3DES_CBC/HMAC_SHA2_256_128/HMAC_SHA2_384_192/HMAC_SHA2_512_256/HMAC_SHA1_96/AES_XCBC_96/AES_CMAC_96/PRF_HMAC_SHA2_256/PRF_HMAC_SHA2_384/PRF_HMAC_SHA2_512/PRF_AES128_XCBC/PRF_AES128_CMAC/PRF_HMAC_SHA1/ECP_256/ECP_384/ECP_521/ECP_256_BP/ECP_384_BP/ECP_512_BP/CURVE_25519/CURVE_448/MODP_3072/MODP_4096/MODP_6144/MODP_8192/MODP_2048, IKE:AES_GCM_16_128/AES_GCM_16_192/AES_GCM_16_256/AES_CCM_16_128/AES_CCM_16_192/AES_CCM_16_256/CHACHA20_POLY1305/AES_GCM_12_128/AES_GCM_12_192/AES_GCM_12_256/AES_GCM_8_128/AES_GCM_8_192/AES_GCM_8_256/AES_CCM_12_128/AES_CCM_12_192/AES_CCM_12_256/AES_CCM_8_128/AES_CCM_8_192/AES_CCM_8_256/PRF_HMAC_SHA2_256/PRF_HMAC_SHA2_384/PRF_HMAC_SHA2_512/PRF_AES128_XCBC/PRF_AES128_CMAC/PRF_HMAC_SHA1/ECP_256/ECP_384/ECP_521/ECP_256_BP/ECP_384_BP/ECP_512_BP/CURVE_25519/CURVE_448/MODP_3072/MODP_4096/MODP_6144/MODP_8192/MODP_2048 May 28 18:56:30 charon 36179 11[CFG] if_id_in = 0 May 28 18:56:30 charon 36179 11[CFG] if_id_out = 0 May 28 18:56:30 charon 36179 11[CFG] local: May 28 18:56:30 charon 36179 11[CFG] remote: May 28 18:56:30 charon 36179 11[CFG] updated vici connection: bypass May 28 18:56:30 charon 36179 15[CFG] vici client 47 requests: load-conn May 28 18:56:30 charon 36179 15[CFG] conn con-mobile: May 28 18:56:30 charon 36179 15[CFG] child con-mobile: May 28 18:56:30 charon 36179 15[CFG] rekey_time = 3240 May 28 18:56:30 charon 36179 15[CFG] life_time = 3600 May 28 18:56:30 charon 36179 15[CFG] rand_time = 360 May 28 18:56:30 charon 36179 15[CFG] rekey_bytes = 0 May 28 18:56:30 charon 36179 15[CFG] life_bytes = 0 May 28 18:56:30 charon 36179 15[CFG] rand_bytes = 0 May 28 18:56:30 charon 36179 15[CFG] rekey_packets = 0 May 28 18:56:30 charon 36179 15[CFG] life_packets = 0 May 28 18:56:30 charon 36179 15[CFG] rand_packets = 0 May 28 18:56:30 charon 36179 15[CFG] updown = (null) May 28 18:56:30 charon 36179 15[CFG] hostaccess = 0 May 28 18:56:30 charon 36179 15[CFG] ipcomp = 0 May 28 18:56:30 charon 36179 15[CFG] mode = TUNNEL May 28 18:56:30 charon 36179 15[CFG] policies = 1 May 28 18:56:30 charon 36179 15[CFG] policies_fwd_out = 0 May 28 18:56:30 charon 36179 15[CFG] dpd_action = clear May 28 18:56:30 charon 36179 15[CFG] start_action = clear May 28 18:56:30 charon 36179 15[CFG] close_action = clear May 28 18:56:30 charon 36179 15[CFG] reqid = 0 May 28 18:56:30 charon 36179 15[CFG] tfc = 0 May 28 18:56:30 charon 36179 15[CFG] priority = 0 May 28 18:56:30 charon 36179 15[CFG] interface = (null) May 28 18:56:30 charon 36179 15[CFG] if_id_in = 0 May 28 18:56:30 charon 36179 15[CFG] if_id_out = 0 May 28 18:56:30 charon 36179 15[CFG] mark_in = 0/0 May 28 18:56:30 charon 36179 15[CFG] mark_in_sa = 0 May 28 18:56:30 charon 36179 15[CFG] mark_out = 0/0 May 28 18:56:30 charon 36179 15[CFG] set_mark_in = 0/0 May 28 18:56:30 charon 36179 15[CFG] set_mark_out = 0/0 May 28 18:56:30 charon 36179 15[CFG] inactivity = 0 May 28 18:56:30 charon 36179 15[CFG] proposals = ESP:AES_GCM_16_256/MODP_2048/NO_EXT_SEQ, ESP:AES_GCM_16_128/MODP_2048/NO_EXT_SEQ, ESP:AES_CBC_128/HMAC_SHA2_256_128/MODP_2048/NO_EXT_SEQ, ESP:AES_CBC_128/HMAC_SHA2_384_192/MODP_2048/NO_EXT_SEQ, ESP:AES_CBC_128/HMAC_SHA2_512_256/MODP_2048/NO_EXT_SEQ May 28 18:56:30 charon 36179 15[CFG] local_ts = 192.168.0.0/22|/0 May 28 18:56:30 charon 36179 15[CFG] remote_ts = dynamic May 28 18:56:30 charon 36179 15[CFG] hw_offload = no May 28 18:56:30 charon 36179 15[CFG] sha256_96 = 0 May 28 18:56:30 charon 36179 15[CFG] copy_df = 1 May 28 18:56:30 charon 36179 15[CFG] copy_ecn = 1 May 28 18:56:30 charon 36179 15[CFG] copy_dscp = out May 28 18:56:30 charon 36179 15[CFG] version = 2 May 28 18:56:30 charon 36179 15[CFG] local_addrs = 81.82.245.127 May 28 18:56:30 charon 36179 15[CFG] remote_addrs = 0.0.0.0/0, ::/0 May 28 18:56:30 charon 36179 15[CFG] local_port = 500 May 28 18:56:30 charon 36179 15[CFG] remote_port = 500 May 28 18:56:30 charon 36179 15[CFG] send_certreq = 1 May 28 18:56:30 charon 36179 15[CFG] send_cert = CERT_ALWAYS_SEND May 28 18:56:30 charon 36179 15[CFG] ppk_id = (null) May 28 18:56:30 charon 36179 15[CFG] ppk_required = 0 May 28 18:56:30 charon 36179 15[CFG] mobike = 1 May 28 18:56:30 charon 36179 15[CFG] aggressive = 0 May 28 18:56:30 charon 36179 15[CFG] dscp = 0x00 May 28 18:56:30 charon 36179 15[CFG] encap = 0 May 28 18:56:30 charon 36179 15[CFG] dpd_delay = 10 May 28 18:56:30 charon 36179 15[CFG] dpd_timeout = 0 May 28 18:56:30 charon 36179 15[CFG] fragmentation = 2 May 28 18:56:30 charon 36179 15[CFG] childless = 0 May 28 18:56:30 charon 36179 15[CFG] unique = UNIQUE_REPLACE May 28 18:56:30 charon 36179 15[CFG] keyingtries = 1 May 28 18:56:30 charon 36179 15[CFG] reauth_time = 0 May 28 18:56:30 charon 36179 15[CFG] rekey_time = 25920 May 28 18:56:30 charon 36179 15[CFG] over_time = 2880 May 28 18:56:30 charon 36179 15[CFG] rand_time = 2880 May 28 18:56:30 charon 36179 15[CFG] proposals = IKE:AES_GCM_16_256/PRF_HMAC_SHA2_256/MODP_4096, IKE:AES_GCM_16_256/PRF_HMAC_SHA2_256/MODP_1024, IKE:AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048, IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048 May 28 18:56:30 charon 36179 15[CFG] if_id_in = 0 May 28 18:56:30 charon 36179 15[CFG] if_id_out = 0 May 28 18:56:30 charon 36179 15[CFG] local: May 28 18:56:30 charon 36179 15[CFG] class = public key May 28 18:56:30 charon 36179 15[CFG] id = 192.168.1.1 May 28 18:56:30 charon 36179 15[CFG] cert = CN=192.168.1.1, C=BE May 28 18:56:30 charon 36179 15[CFG] remote: May 28 18:56:30 charon 36179 15[CFG] eap-type = EAP_MSCHAPV2 May 28 18:56:30 charon 36179 15[CFG] class = EAP May 28 18:56:30 charon 36179 15[CFG] eap_id = %any May 28 18:56:30 charon 36179 15[CFG] id = %any May 28 18:56:30 charon 36179 15[CFG] updated vici connection: con-mobile May 28 18:56:30 charon 36179 11[CFG] vici client 47 disconnected May 28 18:56:55 charon 36179 11[KNL] 2a02:1811:3c00:3a10:92ec:77ff:fe29:7652 appeared on igc0 May 28 18:56:55 charon 36179 15[KNL] 2a02:1811:3c00:3a00::9ace appeared on ix3 May 28 18:57:34 charon 36179 12[CFG] vici client 48 connected May 28 18:57:34 charon 36179 11[CFG] vici client 48 registered for: list-sa May 28 18:57:34 charon 36179 13[CFG] vici client 48 requests: list-sas May 28 18:57:34 charon 36179 12[CFG] vici client 48 disconnected May 28 18:57:37 charon 36179 15[CFG] vici client 49 connected May 28 18:57:37 charon 36179 09[CFG] vici client 49 requests: get-pools May 28 18:57:37 charon 36179 15[CFG] vici client 49 disconnected May 28 18:57:47 charon 36179 13[CFG] vici client 50 connected May 28 18:57:47 charon 36179 06[CFG] vici client 50 registered for: list-sa May 28 18:57:47 charon 36179 15[CFG] vici client 50 requests: list-sas May 28 18:57:47 charon 36179 13[CFG] vici client 50 disconnected