Sep 2 00:21:21 	charon 	23026 	06[IKE] <6> IKE_SA (unnamed)[6] state change: CREATED => DESTROYING
Sep 2 00:21:21 	charon 	23026 	06[NET] <6> sending packet: from <ThisFirewallPublicIP>[500] to <ClientPublicIP>[500] (40 bytes)
Sep 2 00:21:21 	charon 	23026 	06[ENC] <6> generating INFORMATIONAL_V1 request 3241660227 [ N(NO_PROP) ]
Sep 2 00:21:21 	charon 	23026 	06[IKE] <6> no IKE config found for <ThisFirewallPublicIP>...<ClientPublicIP>, sending NO_PROPOSAL_CHOSEN
Sep 2 00:21:21 	charon 	23026 	06[CFG] <6> looking for an IKEv1 config for <ThisFirewallPublicIP>...<ClientPublicIP>
Sep 2 00:21:21 	charon 	23026 	06[ENC] <6> parsed ID_PROT request 0 [ SA V V V V V V V V ]
Sep 2 00:21:21 	charon 	23026 	06[NET] <6> received packet: from <ClientPublicIP>[500] to <ThisFirewallPublicIP>[500] (408 bytes)
Sep 2 00:21:18 	charon 	23026 	06[IKE] <5> IKE_SA (unnamed)[5] state change: CREATED => DESTROYING
Sep 2 00:21:18 	charon 	23026 	06[NET] <5> sending packet: from <ThisFirewallPublicIP>[500] to <ClientPublicIP>[500] (40 bytes)
Sep 2 00:21:18 	charon 	23026 	06[ENC] <5> generating INFORMATIONAL_V1 request 981647209 [ N(NO_PROP) ]
Sep 2 00:21:18 	charon 	23026 	06[IKE] <5> no IKE config found for <ThisFirewallPublicIP>...<ClientPublicIP>, sending NO_PROPOSAL_CHOSEN
Sep 2 00:21:18 	charon 	23026 	06[CFG] <5> looking for an IKEv1 config for <ThisFirewallPublicIP>...<ClientPublicIP>
Sep 2 00:21:18 	charon 	23026 	06[ENC] <5> parsed ID_PROT request 0 [ SA V V V V V V V V ]
Sep 2 00:21:18 	charon 	23026 	06[NET] <5> received packet: from <ClientPublicIP>[500] to <ThisFirewallPublicIP>[500] (408 bytes)
Sep 2 00:21:17 	charon 	23026 	06[IKE] <4> IKE_SA (unnamed)[4] state change: CREATED => DESTROYING
Sep 2 00:21:17 	charon 	23026 	06[NET] <4> sending packet: from <ThisFirewallPublicIP>[500] to <ClientPublicIP>[500] (40 bytes)
Sep 2 00:21:17 	charon 	23026 	06[ENC] <4> generating INFORMATIONAL_V1 request 2484884414 [ N(NO_PROP) ]
Sep 2 00:21:17 	charon 	23026 	06[IKE] <4> no IKE config found for <ThisFirewallPublicIP>...<ClientPublicIP>, sending NO_PROPOSAL_CHOSEN
Sep 2 00:21:17 	charon 	23026 	06[CFG] <4> looking for an IKEv1 config for <ThisFirewallPublicIP>...<ClientPublicIP>
Sep 2 00:21:17 	charon 	23026 	06[ENC] <4> parsed ID_PROT request 0 [ SA V V V V V V V V ]
Sep 2 00:21:17 	charon 	23026 	06[NET] <4> received packet: from <ClientPublicIP>[500] to <ThisFirewallPublicIP>[500] (408 bytes)
Sep 2 00:21:16 	charon 	23026 	06[IKE] <3> IKE_SA (unnamed)[3] state change: CREATED => DESTROYING
Sep 2 00:21:16 	charon 	23026 	06[NET] <3> sending packet: from <ThisFirewallPublicIP>[500] to <ClientPublicIP>[500] (40 bytes)
Sep 2 00:21:16 	charon 	23026 	06[ENC] <3> generating INFORMATIONAL_V1 request 1740021788 [ N(NO_PROP) ]
Sep 2 00:21:16 	charon 	23026 	06[IKE] <3> no IKE config found for <ThisFirewallPublicIP>...<ClientPublicIP>, sending NO_PROPOSAL_CHOSEN
Sep 2 00:21:16 	charon 	23026 	06[CFG] <3> looking for an IKEv1 config for <ThisFirewallPublicIP>...<ClientPublicIP>
Sep 2 00:21:16 	charon 	23026 	06[ENC] <3> parsed ID_PROT request 0 [ SA V V V V V V V V ]
Sep 2 00:21:16 	charon 	23026 	06[NET] <3> received packet: from <ClientPublicIP>[500] to <ThisFirewallPublicIP>[500] (408 bytes)
Sep 2 00:21:03 	charon 	23026 	06[IKE] <con-mobile|2> IKE_SA con-mobile[2] state change: CONNECTING => DESTROYING
Sep 2 00:21:03 	charon 	23026 	06[JOB] <con-mobile|2> deleting half open IKE_SA with <ClientPublicIP> after timeout
Sep 2 00:21:00 	newsyslog 	12872 	logfile turned over due to size>500K
Sep 2 00:21:00 	newsyslog 	12872 	logfile turned over due to size>500K
Sep 2 00:20:33 	charon 	23026 	06[NET] <con-mobile|2> sending packet: from <ThisFirewallPublicIP>[4500] to <ClientPublicIP>[15753] (268 bytes)
Sep 2 00:20:33 	charon 	23026 	06[NET] <con-mobile|2> sending packet: from <ThisFirewallPublicIP>[4500] to <ClientPublicIP>[15753] (1248 bytes)
Sep 2 00:20:33 	charon 	23026 	06[ENC] <con-mobile|2> generating IKE_AUTH response 1 [ EF(2/2) ]
Sep 2 00:20:33 	charon 	23026 	06[ENC] <con-mobile|2> generating IKE_AUTH response 1 [ EF(1/2) ]
Sep 2 00:20:33 	charon 	23026 	06[ENC] <con-mobile|2> splitting IKE message (1451 bytes) into 2 fragments
Sep 2 00:20:33 	charon 	23026 	06[ENC] <con-mobile|2> generating IKE_AUTH response 1 [ IDr CERT AUTH EAP/REQ/ID ]
Sep 2 00:20:33 	charon 	23026 	06[IKE] <con-mobile|2> sending end entity cert "CN=<ThisFirewallPublicName>, C=US, ST=ME, L=<FirewallCity>"
Sep 2 00:20:33 	charon 	23026 	06[IKE] <con-mobile|2> authentication of '<ThisFirewallPublicName>' (myself) with RSA signature successful
Sep 2 00:20:33 	charon 	23026 	06[IKE] <con-mobile|2> peer supports MOBIKE, but disabled in config
Sep 2 00:20:33 	charon 	23026 	06[IKE] <con-mobile|2> processing INTERNAL_IP6_SERVER attribute
Sep 2 00:20:33 	charon 	23026 	06[IKE] <con-mobile|2> processing INTERNAL_IP6_DNS attribute
Sep 2 00:20:33 	charon 	23026 	06[IKE] <con-mobile|2> processing INTERNAL_IP6_ADDRESS attribute
Sep 2 00:20:33 	charon 	23026 	06[IKE] <con-mobile|2> processing INTERNAL_IP4_SERVER attribute
Sep 2 00:20:33 	charon 	23026 	06[IKE] <con-mobile|2> processing INTERNAL_IP4_NBNS attribute
Sep 2 00:20:33 	charon 	23026 	06[IKE] <con-mobile|2> processing INTERNAL_IP4_DNS attribute
Sep 2 00:20:33 	charon 	23026 	06[IKE] <con-mobile|2> processing INTERNAL_IP4_ADDRESS attribute
Sep 2 00:20:33 	charon 	23026 	06[IKE] <con-mobile|2> initiating EAP_IDENTITY method (id 0x00)
Sep 2 00:20:33 	charon 	23026 	06[CFG] <con-mobile|2> selected peer config 'con-mobile'
Sep 2 00:20:33 	charon 	23026 	06[CFG] <2> candidate "con-mobile", match: 1/1/1052 (me/other/ike)
Sep 2 00:20:33 	charon 	23026 	06[CFG] <2> looking for peer configs matching <ThisFirewallPublicIP>[%any]...<ClientPublicIP>[<ClientLocalIP>]
Sep 2 00:20:33 	charon 	23026 	06[IKE] <2> received 80 cert requests for an unknown ca
<Many more of these; removed for brevity>
Sep 2 00:20:33 	charon 	23026 	06[IKE] <2> received cert request for unknown ca with keyid 0e:ac:82:60:40:56:27:97:e5:25:13:fc:2a:e1:0a:53:95:59:e4:a4
Sep 2 00:20:33 	charon 	23026 	06[ENC] <2> parsed IKE_AUTH request 1 [ IDi CERTREQ N(MOBIKE_SUP) CPRQ(ADDR DNS NBNS SRV ADDR6 DNS6 SRV6) SA TSi TSr ]
Sep 2 00:20:33 	charon 	23026 	06[ENC] <2> received fragment #2 of 4, reassembled fragmented IKE message (2038 bytes)
Sep 2 00:20:33 	charon 	23026 	06[ENC] <2> parsed IKE_AUTH request 1 [ EF(2/4) ]
Sep 2 00:20:33 	charon 	23026 	06[NET] <2> received packet: from <ClientPublicIP>[15753] to <ThisFirewallPublicIP>[4500] (572 bytes)
Sep 2 00:20:33 	charon 	23026 	15[ENC] <2> received fragment #3 of 4, waiting for complete IKE message
Sep 2 00:20:33 	charon 	23026 	15[ENC] <2> parsed IKE_AUTH request 1 [ EF(3/4) ]
Sep 2 00:20:33 	charon 	23026 	15[NET] <2> received packet: from <ClientPublicIP>[15753] to <ThisFirewallPublicIP>[4500] (572 bytes)
Sep 2 00:20:33 	charon 	23026 	10[ENC] <2> received fragment #4 of 4, waiting for complete IKE message
Sep 2 00:20:33 	charon 	23026 	10[ENC] <2> parsed IKE_AUTH request 1 [ EF(4/4) ]
Sep 2 00:20:33 	charon 	23026 	10[NET] <2> received packet: from <ClientPublicIP>[15753] to <ThisFirewallPublicIP>[4500] (556 bytes)
Sep 2 00:20:33 	charon 	23026 	12[ENC] <2> received fragment #1 of 4, waiting for complete IKE message
Sep 2 00:20:33 	charon 	23026 	12[IKE] <2> remote endpoint changed from <ClientPublicIP>[500] to <ClientPublicIP>[15753]
Sep 2 00:20:33 	charon 	23026 	12[IKE] <2> local endpoint changed from <ThisFirewallPublicIP>[500] to <ThisFirewallPublicIP>[4500]
Sep 2 00:20:33 	charon 	23026 	12[ENC] <2> parsed IKE_AUTH request 1 [ EF(1/4) ]
Sep 2 00:20:33 	charon 	23026 	12[NET] <2> received packet: from <ClientPublicIP>[15753] to <ThisFirewallPublicIP>[4500] (572 bytes)
Sep 2 00:20:33 	charon 	23026 	15[NET] <2> sending packet: from <ThisFirewallPublicIP>[500] to <ClientPublicIP>[500] (345 bytes)
Sep 2 00:20:33 	charon 	23026 	15[ENC] <2> generating IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) CERTREQ N(FRAG_SUP) N(CHDLESS_SUP) N(MULT_AUTH) ]
Sep 2 00:20:33 	charon 	23026 	15[IKE] <2> sending cert request for "CN=internal-ca, C=US, ST=ME, L=<FirewallCity>"
Sep 2 00:20:33 	charon 	23026 	15[IKE] <2> remote host is behind NAT
Sep 2 00:20:33 	charon 	23026 	15[CFG] <2> selected proposal: IKE:AES_GCM_16_256/PRF_HMAC_SHA2_256/MODP_1024
Sep 2 00:20:33 	charon 	23026 	15[CFG] <2> configured proposals: IKE:AES_GCM_16_256/PRF_HMAC_SHA2_256/MODP_4096, IKE:AES_GCM_16_256/PRF_HMAC_SHA2_256/MODP_1024, IKE:AES_GCM_16_256/PRF_HMAC_SHA2_384/MODP_1024
Sep 2 00:20:33 	charon 	23026 	15[CFG] <2> received proposals: IKE:3DES_CBC/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1024, IKE:3DES_CBC/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_1024, IKE:3DES_CBC/HMAC_SHA2_384_192/PRF_HMAC_SHA2_384/MODP_1024, IKE:AES_CBC_128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1024, IKE:AES_CBC_128/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_1024, IKE:AES_CBC_128/HMAC_SHA2_384_192/PRF_HMAC_SHA2_384/MODP_1024, IKE:AES_CBC_192/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1024, IKE:AES_CBC_192/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_1024, IKE:AES_CBC_192/HMAC_SHA2_384_192/PRF_HMAC_SHA2_384/MODP_1024, IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1024, IKE:AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_1024, IKE:AES_CBC_256/HMAC_SHA2_384_192/PRF_HMAC_SHA2_384/MODP_1024, IKE:AES_GCM_16_128/PRF_HMAC_SHA1/MODP_1024, IKE:AES_GCM_16_128/PRF_HMAC_SHA2_256/MODP_1024, IKE:AES_GCM_16_128/PRF_HMAC_SHA2_384/MODP_1024, IKE:AES_GCM_16_256/PRF_HMAC_SHA1/MODP_1024, IKE:AES_GCM_16_256/PRF_HMAC_SHA2_256/MODP_1024, IKE:AES_GCM_16_256/PRF_HMAC_SHA2_384/MODP_1024
Sep 2 00:20:33 	charon 	23026 	15[CFG] <2> proposal matches
Sep 2 00:20:33 	charon 	23026 	15[CFG] <2> selecting proposal:
Sep 2 00:20:33 	charon 	23026 	15[CFG] <2> no acceptable PSEUDO_RANDOM_FUNCTION found
<more of these; removed for brevity>
Sep 2 00:20:33 	charon 	23026 	15[CFG] <2> selecting proposal:
Sep 2 00:20:33 	charon 	23026 	15[CFG] <2> no acceptable ENCRYPTION_ALGORITHM found
Sep 2 00:20:33 	charon 	23026 	15[CFG] <2> selecting proposal:
Sep 2 00:20:33 	charon 	23026 	15[IKE] <2> IKE_SA (unnamed)[2] state change: CREATED => CONNECTING
Sep 2 00:20:33 	charon 	23026 	15[IKE] <2> <ClientPublicIP> is initiating an IKE_SA
Sep 2 00:20:33 	charon 	23026 	15[ENC] <2> received unknown vendor ID: 01:52:8b:bb:c0:06:96:12:18:49:ab:9a:1c:5b:2a:51:00:00:00:02
Sep 2 00:20:33 	charon 	23026 	15[IKE] <2> received Vid-Initial-Contact vendor ID
Sep 2 00:20:33 	charon 	23026 	15[IKE] <2> received MS-Negotiation Discovery Capable vendor ID
Sep 2 00:20:33 	charon 	23026 	15[IKE] <2> received MS NT5 ISAKMPOAKLEY v9 vendor ID
Sep 2 00:20:33 	charon 	23026 	15[IKE] <2> remote endpoint changed from 0.0.0.0 to <ClientPublicIP>[500]
Sep 2 00:20:33 	charon 	23026 	15[IKE] <2> local endpoint changed from 0.0.0.0[500] to <ThisFirewallPublicIP>[500]
Sep 2 00:20:33 	charon 	23026 	15[CFG] <2> found matching ike config: <ThisFirewallPublicIP>...0.0.0.0/0, ::/0 with prio 1052
Sep 2 00:20:33 	charon 	23026 	15[CFG] <2> candidate: <ThisFirewallPublicIP>...0.0.0.0/0, ::/0, prio 1052
Sep 2 00:20:33 	charon 	23026 	15[CFG] <2> looking for an IKEv2 config for <ThisFirewallPublicIP>...<ClientPublicIP>
Sep 2 00:20:33 	charon 	23026 	15[ENC] <2> parsed IKE_SA_INIT request 0 [ SA KE No N(FRAG_SUP) N(NATD_S_IP) N(NATD_D_IP) V V V V ]
Sep 2 00:20:33 	charon 	23026 	15[NET] <2> received packet: from <ClientPublicIP>[500] to <ThisFirewallPublicIP>[500] (1104 bytes)