Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    VPN Unreliable since upgrade to V2.2

    IPsec
    6
    13
    7.6k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • U
      uk26
      last edited by

      We are getting drops in VPN and seeing the below errros

      charon: 06[IKE] peer not responding, trying again (3/3) happens 20 times a day now used to be rock solid before upgrading.

      1 Reply Last reply Reply Quote 0
      • K
        kejianshi
        last edited by

        So thats PPTP?

        No….

        TINC...

        Uhhhhhh....

        Openvpn?

        L2TP?

        or IPSEC?

        1 Reply Last reply Reply Quote 0
        • U
          uk26
          last edited by

          Sorry IPSec

          been going mental today

          Jan 30 19:23:28 ipsec_starter[35858]:
          Jan 30 19:23:28 ipsec_starter[35858]: 'con1000' routed
          Jan 30 19:23:28 ipsec_starter[35858]:
          Jan 30 19:23:28 ipsec_starter[35858]: configuration 'con1000' unrouted
          Jan 30 16:51:34 charon: 11[CFG] received stroke: loglevel -1 for cfg
          Jan 30 16:51:34 charon: 09[CFG] received stroke: loglevel -1 for job
          Jan 30 16:51:34 charon: 09[CFG] received stroke: loglevel -1 for chd
          Jan 30 16:51:34 charon: 09[CFG] received stroke: loglevel -1 for ike
          Jan 30 16:51:34 charon: 09[CFG] received stroke: loglevel -1 for mgr
          Jan 30 16:51:34 charon: 09[CFG] received stroke: loglevel -1 for dmn
          Jan 30 16:51:34 charon: 09[CFG] rereading crls from '/var/etc/ipsec/ipsec.d/crls'
          Jan 30 16:51:34 charon: 09[CFG] rereading attribute certificates from '/var/etc/ipsec/ipsec.d/acerts'
          Jan 30 16:51:34 charon: 09[CFG] rereading aa certificates from '/var/etc/ipsec/ipsec.d/aacerts'
          Jan 30 16:51:34 charon: 09[CFG] rereading ocsp signer certificates from '/var/etc/ipsec/ipsec.d/ocspcerts'
          Jan 30 16:51:34 charon: 09[CFG] rereading ca certificates from '/var/etc/ipsec/ipsec.d/cacerts'
          Jan 30 16:51:34 charon: 09[CFG] loaded IKE secret for %any 212.38.169.250
          Jan 30 16:51:34 charon: 09[CFG] loaded IKE secret for %any 81.168.48.250
          Jan 30 16:51:34 charon: 09[CFG] loading secrets from '/var/etc/ipsec/ipsec.secrets'
          Jan 30 16:51:34 charon: 09[CFG] rereading secrets
          Jan 30 16:51:34 charon: 09[ENC] parsed INFORMATIONAL_V1 request 788743145 [ HASH N(DPD_ACK) ]
          Jan 30 16:51:34 charon: 09[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:51:34 charon: 07[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:51:34 charon: 07[ENC] generating INFORMATIONAL_V1 request 3060198682 [ HASH N(DPD) ]
          Jan 30 16:51:34 charon: 07[IKE] sending DPD request
          Jan 30 16:51:34 charon: 07[IKE] <con2000|255>sending DPD request
          Jan 30 16:51:24 charon: 07[ENC] parsed INFORMATIONAL_V1 request 4221769679 [ HASH N(DPD_ACK) ]
          Jan 30 16:51:24 charon: 07[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:51:24 charon: 07[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:51:24 charon: 07[ENC] generating INFORMATIONAL_V1 request 3567837408 [ HASH N(DPD) ]
          Jan 30 16:51:24 charon: 07[IKE] sending DPD request
          Jan 30 16:51:24 charon: 07[IKE] <con2000|255>sending DPD request
          Jan 30 16:51:21 charon: 07[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (196 bytes)
          Jan 30 16:51:21 charon: 07[IKE] sending retransmit 3 of request message ID 0, seq 1
          Jan 30 16:51:21 charon: 07[IKE] <con1000|260>sending retransmit 3 of request message ID 0, seq 1
          Jan 30 16:51:14 charon: 07[ENC] parsed INFORMATIONAL_V1 request 2589483059 [ HASH N(DPD_ACK) ]
          Jan 30 16:51:14 charon: 07[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:51:14 charon: 07[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:51:14 charon: 07[ENC] generating INFORMATIONAL_V1 request 3843554533 [ HASH N(DPD) ]
          Jan 30 16:51:14 charon: 07[IKE] sending DPD request
          Jan 30 16:51:14 charon: 07[IKE] <con2000|255>sending DPD request
          Jan 30 16:51:08 charon: 07[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (196 bytes)
          Jan 30 16:51:08 charon: 07[IKE] sending retransmit 2 of request message ID 0, seq 1
          Jan 30 16:51:08 charon: 07[IKE] <con1000|260>sending retransmit 2 of request message ID 0, seq 1
          Jan 30 16:51:03 charon: 07[ENC] parsed INFORMATIONAL_V1 request 637938113 [ HASH N(DPD_ACK) ]
          Jan 30 16:51:03 charon: 07[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:51:03 charon: 07[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:51:03 charon: 07[ENC] generating INFORMATIONAL_V1 request 2471942177 [ HASH N(DPD) ]
          Jan 30 16:51:03 charon: 07[IKE] sending DPD request
          Jan 30 16:51:03 charon: 07[IKE] <con2000|255>sending DPD request
          Jan 30 16:51:01 charon: 06[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (196 bytes)
          Jan 30 16:51:01 charon: 06[IKE] sending retransmit 1 of request message ID 0, seq 1
          Jan 30 16:51:01 charon: 06[IKE] <con1000|260>sending retransmit 1 of request message ID 0, seq 1
          Jan 30 16:50:57 charon: 06[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (196 bytes)
          Jan 30 16:50:57 charon: 06[ENC] generating ID_PROT request 0 [ SA V V V V V V ]
          Jan 30 16:50:57 charon: 06[IKE] initiating Main Mode IKE_SA con1000[260] to 81.168.48.250
          Jan 30 16:50:57 charon: 06[IKE] <con1000|260>initiating Main Mode IKE_SA con1000[260] to 81.168.48.250
          Jan 30 16:50:57 charon: 06[IKE] peer not responding, trying again (3/3)
          Jan 30 16:50:57 charon: 06[IKE] <con1000|260>peer not responding, trying again (3/3)
          Jan 30 16:50:57 charon: 06[IKE] giving up after 5 retransmits
          Jan 30 16:50:57 charon: 06[IKE] <con1000|260>giving up after 5 retransmits
          Jan 30 16:50:53 charon: 06[ENC] parsed INFORMATIONAL_V1 request 2095033923 [ HASH N(DPD_ACK) ]
          Jan 30 16:50:53 charon: 06[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:50:53 charon: 06[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:50:53 charon: 06[ENC] generating INFORMATIONAL_V1 request 4288186713 [ HASH N(DPD) ]
          Jan 30 16:50:53 charon: 06[IKE] sending DPD request
          Jan 30 16:50:53 charon: 06[IKE] <con2000|255>sending DPD request
          Jan 30 16:50:43 charon: 07[ENC] parsed INFORMATIONAL_V1 request 11694638 [ HASH N(DPD_ACK) ]
          Jan 30 16:50:43 charon: 07[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:50:43 charon: 07[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:50:43 charon: 07[ENC] generating INFORMATIONAL_V1 request 841954003 [ HASH N(DPD) ]
          Jan 30 16:50:43 charon: 07[IKE] sending DPD request
          Jan 30 16:50:43 charon: 07[IKE] <con2000|255>sending DPD request
          Jan 30 16:50:33 charon: 07[ENC] parsed INFORMATIONAL_V1 request 718148700 [ HASH N(DPD_ACK) ]
          Jan 30 16:50:33 charon: 07[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:50:33 charon: 07[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:50:33 charon: 07[ENC] generating INFORMATIONAL_V1 request 4083807354 [ HASH N(DPD) ]
          Jan 30 16:50:33 charon: 07[IKE] sending DPD request
          Jan 30 16:50:33 charon: 07[IKE] <con2000|255>sending DPD request
          Jan 30 16:50:23 charon: 12[ENC] parsed INFORMATIONAL_V1 request 1577005225 [ HASH N(DPD_ACK) ]
          Jan 30 16:50:23 charon: 12[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:50:23 charon: 12[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:50:23 charon: 12[ENC] generating INFORMATIONAL_V1 request 640359113 [ HASH N(DPD) ]
          Jan 30 16:50:23 charon: 12[IKE] sending DPD request
          Jan 30 16:50:23 charon: 12[IKE] <con2000|255>sending DPD request
          Jan 30 16:50:13 charon: 07[ENC] parsed INFORMATIONAL_V1 request 3146261125 [ HASH N(DPD_ACK) ]
          Jan 30 16:50:13 charon: 07[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:50:13 charon: 07[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:50:13 charon: 07[ENC] generating INFORMATIONAL_V1 request 1601009955 [ HASH N(DPD) ]
          Jan 30 16:50:13 charon: 07[IKE] sending DPD request
          Jan 30 16:50:13 charon: 07[IKE] <con2000|255>sending DPD request
          Jan 30 16:50:03 charon: 07[ENC] parsed INFORMATIONAL_V1 request 3094862307 [ HASH N(DPD_ACK) ]
          Jan 30 16:50:03 charon: 07[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:50:03 charon: 07[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:50:03 charon: 07[ENC] generating INFORMATIONAL_V1 request 289945337 [ HASH N(DPD) ]
          Jan 30 16:50:03 charon: 07[IKE] sending DPD request
          Jan 30 16:50:03 charon: 07[IKE] <con2000|255>sending DPD request
          Jan 30 16:49:53 charon: 07[ENC] parsed INFORMATIONAL_V1 request 3053674439 [ HASH N(DPD_ACK) ]
          Jan 30 16:49:53 charon: 07[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:49:53 charon: 07[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:49:53 charon: 07[ENC] generating INFORMATIONAL_V1 request 4051565405 [ HASH N(DPD) ]
          Jan 30 16:49:53 charon: 07[IKE] sending DPD request
          Jan 30 16:49:53 charon: 07[IKE] <con2000|255>sending DPD request
          Jan 30 16:49:43 charon: 10[ENC] parsed INFORMATIONAL_V1 request 54283509 [ HASH N(DPD_ACK) ]
          Jan 30 16:49:43 charon: 10[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:49:43 charon: 10[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:49:43 charon: 10[ENC] generating INFORMATIONAL_V1 request 2845292127 [ HASH N(DPD) ]
          Jan 30 16:49:43 charon: 10[IKE] sending DPD request
          Jan 30 16:49:43 charon: 10[IKE] <con2000|255>sending DPD request
          Jan 30 16:49:42 charon: 10[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (196 bytes)
          Jan 30 16:49:42 charon: 10[IKE] sending retransmit 5 of request message ID 0, seq 1
          Jan 30 16:49:42 charon: 10[IKE] <con1000|260>sending retransmit 5 of request message ID 0, seq 1
          Jan 30 16:49:33 charon: 10[ENC] parsed INFORMATIONAL_V1 request 183782379 [ HASH N(DPD_ACK) ]
          Jan 30 16:49:33 charon: 10[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:49:33 charon: 10[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:49:33 charon: 10[ENC] generating INFORMATIONAL_V1 request 538410056 [ HASH N(DPD) ]
          Jan 30 16:49:33 charon: 10[IKE] sending DPD request
          Jan 30 16:49:33 charon: 10[IKE] <con2000|255>sending DPD request
          Jan 30 16:49:23 charon: 10[ENC] parsed INFORMATIONAL_V1 request 954374923 [ HASH N(DPD_ACK) ]
          Jan 30 16:49:23 charon: 10[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:49:23 charon: 10[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:49:23 charon: 10[ENC] generating INFORMATIONAL_V1 request 547305630 [ HASH N(DPD) ]
          Jan 30 16:49:23 charon: 10[IKE] sending DPD request
          Jan 30 16:49:23 charon: 10[IKE] <con2000|255>sending DPD request
          Jan 30 16:49:13 charon: 10[ENC] parsed INFORMATIONAL_V1 request 280705186 [ HASH N(DPD_ACK) ]
          Jan 30 16:49:13 charon: 10[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:49:13 charon: 10[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:49:13 charon: 10[ENC] generating INFORMATIONAL_V1 request 1204076042 [ HASH N(DPD) ]
          Jan 30 16:49:13 charon: 10[IKE] sending DPD request
          Jan 30 16:49:13 charon: 10[IKE] <con2000|255>sending DPD request
          Jan 30 16:49:03 charon: 16[ENC] parsed INFORMATIONAL_V1 request 3312007276 [ HASH N(DPD_ACK) ]
          Jan 30 16:49:03 charon: 16[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:49:03 charon: 16[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:49:03 charon: 16[ENC] generating INFORMATIONAL_V1 request 3069398184 [ HASH N(DPD) ]
          Jan 30 16:49:03 charon: 16[IKE] sending DPD request
          Jan 30 16:49:03 charon: 16[IKE] <con2000|255>sending DPD request
          Jan 30 16:49:00 charon: 16[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (196 bytes)
          Jan 30 16:49:00 charon: 16[IKE] sending retransmit 4 of request message ID 0, seq 1
          Jan 30 16:49:00 charon: 16[IKE] <con1000|260>sending retransmit 4 of request message ID 0, seq 1
          Jan 30 16:48:56 charon: 16[IKE] establishing IKE_SA failed, peer not responding
          Jan 30 16:48:56 charon: 16[IKE] <con1000|257>establishing IKE_SA failed, peer not responding
          Jan 30 16:48:56 charon: 16[IKE] giving up after 5 retransmits
          Jan 30 16:48:56 charon: 16[IKE] <con1000|257>giving up after 5 retransmits
          Jan 30 16:48:53 charon: 16[ENC] parsed INFORMATIONAL_V1 request 1525566505 [ HASH N(DPD_ACK) ]
          Jan 30 16:48:53 charon: 16[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:48:53 charon: 16[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:48:53 charon: 16[ENC] generating INFORMATIONAL_V1 request 374289435 [ HASH N(DPD) ]
          Jan 30 16:48:53 charon: 16[IKE] sending DPD request
          Jan 30 16:48:53 charon: 16[IKE] <con2000|255>sending DPD request
          Jan 30 16:48:43 charon: 16[ENC] parsed INFORMATIONAL_V1 request 1277015062 [ HASH N(DPD_ACK) ]
          Jan 30 16:48:43 charon: 16[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:48:43 charon: 16[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:48:43 charon: 16[ENC] generating INFORMATIONAL_V1 request 713138442 [ HASH N(DPD) ]
          Jan 30 16:48:43 charon: 16[IKE] sending DPD request
          Jan 30 16:48:43 charon: 16[IKE] <con2000|255>sending DPD request
          Jan 30 16:48:36 charon: 16[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (196 bytes)
          Jan 30 16:48:36 charon: 16[IKE] sending retransmit 3 of request message ID 0, seq 1
          Jan 30 16:48:36 charon: 16[IKE] <con1000|260>sending retransmit 3 of request message ID 0, seq 1
          Jan 30 16:48:33 charon: 16[ENC] parsed INFORMATIONAL_V1 request 334138567 [ HASH N(DPD_ACK) ]
          Jan 30 16:48:33 charon: 16[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:48:33 charon: 16[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:48:33 charon: 16[ENC] generating INFORMATIONAL_V1 request 1303237051 [ HASH N(DPD) ]
          Jan 30 16:48:33 charon: 16[IKE] sending DPD request
          Jan 30 16:48:33 charon: 16[IKE] <con2000|255>sending DPD request
          Jan 30 16:48:23 charon: 03[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:48:23 charon: 03[ENC] generating INFORMATIONAL_V1 request 1431728415 [ HASH N(DPD_ACK) ]
          Jan 30 16:48:23 charon: 03[ENC] parsed INFORMATIONAL_V1 request 3256667415 [ HASH N(DPD) ]
          Jan 30 16:48:23 charon: 03[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:48:23 charon: 03[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (196 bytes)
          Jan 30 16:48:23 charon: 03[IKE] sending retransmit 2 of request message ID 0, seq 1
          Jan 30 16:48:23 charon: 03[IKE] <con1000|260>sending retransmit 2 of request message ID 0, seq 1
          Jan 30 16:48:16 charon: 03[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (196 bytes)
          Jan 30 16:48:16 charon: 03[IKE] sending retransmit 1 of request message ID 0, seq 1
          Jan 30 16:48:16 charon: 03[IKE] <con1000|260>sending retransmit 1 of request message ID 0, seq 1
          Jan 30 16:48:14 charon: 03[ENC] parsed INFORMATIONAL_V1 request 1320841570 [ HASH N(DPD_ACK) ]
          Jan 30 16:48:14 charon: 03[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:48:14 charon: 03[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:48:14 charon: 03[ENC] generating INFORMATIONAL_V1 request 1240754596 [ HASH N(DPD) ]
          Jan 30 16:48:14 charon: 03[IKE] sending DPD request
          Jan 30 16:48:14 charon: 03[IKE] <con2000|255>sending DPD request
          Jan 30 16:48:12 charon: 03[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (196 bytes)
          Jan 30 16:48:12 charon: 03[ENC] generating ID_PROT request 0 [ SA V V V V V V ]
          Jan 30 16:48:12 charon: 03[IKE] initiating Main Mode IKE_SA con1000[260] to 81.168.48.250
          Jan 30 16:48:12 charon: 03[IKE] <con1000|260>initiating Main Mode IKE_SA con1000[260] to 81.168.48.250
          Jan 30 16:48:12 charon: 03[IKE] peer not responding, trying again (2/3)
          Jan 30 16:48:12 charon: 03[IKE] <con1000|260>peer not responding, trying again (2/3)
          Jan 30 16:48:12 charon: 03[IKE] giving up after 5 retransmits
          Jan 30 16:48:12 charon: 03[IKE] <con1000|260>giving up after 5 retransmits
          Jan 30 16:48:04 charon: 03[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:48:04 charon: 03[ENC] generating INFORMATIONAL_V1 request 2875230535 [ HASH N(DPD_ACK) ]
          Jan 30 16:48:04 charon: 03[ENC] parsed INFORMATIONAL_V1 request 3645244472 [ HASH N(DPD) ]
          Jan 30 16:48:04 charon: 03[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:47:55 charon: 03[ENC] parsed INFORMATIONAL_V1 request 1832871878 [ HASH N(DPD_ACK) ]
          Jan 30 16:47:55 charon: 03[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:47:55 charon: 14[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:47:55 charon: 14[ENC] generating INFORMATIONAL_V1 request 2999487591 [ HASH N(DPD) ]
          Jan 30 16:47:55 charon: 14[IKE] sending DPD request
          Jan 30 16:47:55 charon: 14[IKE] <con2000|255>sending DPD request
          Jan 30 16:47:45 charon: 14[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:47:45 charon: 14[ENC] generating INFORMATIONAL_V1 request 4011686820 [ HASH N(DPD_ACK) ]
          Jan 30 16:47:45 charon: 14[ENC] parsed INFORMATIONAL_V1 request 578003736 [ HASH N(DPD) ]
          Jan 30 16:47:45 charon: 14[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:47:41 charon: 14[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (196 bytes)
          Jan 30 16:47:41 charon: 14[IKE] sending retransmit 5 of request message ID 0, seq 1
          Jan 30 16:47:41 charon: 14[IKE] <con1000|257>sending retransmit 5 of request message ID 0, seq 1
          Jan 30 16:47:40 charon: 03[KNL] creating rekey job for ESP CHILD_SA with SPI c29bdf42 and reqid {2}
          Jan 30 16:47:36 charon: 03[ENC] parsed INFORMATIONAL_V1 request 2921335284 [ HASH N(DPD_ACK) ]
          Jan 30 16:47:36 charon: 03[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:47:36 charon: 03[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:47:36 charon: 03[ENC] generating INFORMATIONAL_V1 request 4083646668 [ HASH N(DPD) ]
          Jan 30 16:47:36 charon: 03[IKE] sending DPD request
          Jan 30 16:47:36 charon: 03[IKE] <con2000|255>sending DPD request
          Jan 30 16:47:26 charon: 03[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:47:26 charon: 03[ENC] generating INFORMATIONAL_V1 request 668052589 [ HASH N(DPD_ACK) ]
          Jan 30 16:47:26 charon: 03[ENC] parsed INFORMATIONAL_V1 request 2586301748 [ HASH N(DPD) ]
          Jan 30 16:47:26 charon: 03[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:47:17 charon: 15[ENC] parsed INFORMATIONAL_V1 request 4066203232 [ HASH N(DPD_ACK) ]
          Jan 30 16:47:17 charon: 15[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:47:17 charon: 15[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:47:17 charon: 15[ENC] generating INFORMATIONAL_V1 request 1425427581 [ HASH N(DPD) ]
          Jan 30 16:47:17 charon: 15[IKE] sending DPD request
          Jan 30 16:47:17 charon: 15[IKE] <con2000|255>sending DPD request
          Jan 30 16:47:07 charon: 15[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:47:07 charon: 15[ENC] generating INFORMATIONAL_V1 request 2379941063 [ HASH N(DPD_ACK) ]
          Jan 30 16:47:07 charon: 15[ENC] parsed INFORMATIONAL_V1 request 2778815708 [ HASH N(DPD) ]
          Jan 30 16:47:07 charon: 15[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:46:59 charon: 15[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (196 bytes)
          Jan 30 16:46:59 charon: 15[IKE] sending retransmit 4 of request message ID 0, seq 1
          Jan 30 16:46:59 charon: 15[IKE] <con1000|257>sending retransmit 4 of request message ID 0, seq 1
          Jan 30 16:46:58 charon: 15[ENC] parsed INFORMATIONAL_V1 request 3544085360 [ HASH N(DPD_ACK) ]
          Jan 30 16:46:58 charon: 15[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:46:58 charon: 15[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:46:58 charon: 15[ENC] generating INFORMATIONAL_V1 request 3628671395 [ HASH N(DPD) ]
          Jan 30 16:46:58 charon: 15[IKE] sending DPD request
          Jan 30 16:46:58 charon: 15[IKE] <con2000|255>sending DPD request
          Jan 30 16:46:56 charon: 15[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (196 bytes)
          Jan 30 16:46:56 charon: 15[IKE] sending retransmit 5 of request message ID 0, seq 1
          Jan 30 16:46:56 charon: 15[IKE] <con1000|260>sending retransmit 5 of request message ID 0, seq 1
          Jan 30 16:46:48 charon: 15[ENC] parsed INFORMATIONAL_V1 request 890175996 [ HASH N(DPD_ACK) ]
          Jan 30 16:46:48 charon: 15[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:46:48 charon: 15[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:46:48 charon: 15[ENC] generating INFORMATIONAL_V1 request 824618597 [ HASH N(DPD) ]
          Jan 30 16:46:48 charon: 15[IKE] sending DPD request
          Jan 30 16:46:48 charon: 15[IKE] <con2000|255>sending DPD request
          Jan 30 16:46:38 charon: 13[ENC] parsed INFORMATIONAL_V1 request 2551543176 [ HASH N(DPD_ACK) ]
          Jan 30 16:46:38 charon: 13[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:46:38 charon: 13[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:46:38 charon: 13[ENC] generating INFORMATIONAL_V1 request 2384237775 [ HASH N(DPD) ]
          Jan 30 16:46:38 charon: 13[IKE] sending DPD request
          Jan 30 16:46:38 charon: 13[IKE] <con2000|255>sending DPD request
          Jan 30 16:46:35 charon: 13[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (196 bytes)
          Jan 30 16:46:35 charon: 13[IKE] sending retransmit 3 of request message ID 0, seq 1
          Jan 30 16:46:35 charon: 13[IKE] <con1000|257>sending retransmit 3 of request message ID 0, seq 1
          Jan 30 16:46:27 charon: 13[ENC] parsed INFORMATIONAL_V1 request 2760272594 [ HASH N(DPD_ACK) ]
          Jan 30 16:46:27 charon: 13[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:46:27 charon: 13[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:46:27 charon: 13[ENC] generating INFORMATIONAL_V1 request 116244434 [ HASH N(DPD) ]
          Jan 30 16:46:27 charon: 13[IKE] sending DPD request
          Jan 30 16:46:27 charon: 13[IKE] <con2000|255>sending DPD request
          Jan 30 16:46:22 charon: 13[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (196 bytes)
          Jan 30 16:46:22 charon: 13[IKE] sending retransmit 2 of request message ID 0, seq 1
          Jan 30 16:46:22 charon: 13[IKE] <con1000|257>sending retransmit 2 of request message ID 0, seq 1
          Jan 30 16:46:17 charon: 13[ENC] parsed INFORMATIONAL_V1 request 3028818906 [ HASH N(DPD_ACK) ]
          Jan 30 16:46:17 charon: 13[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:46:17 charon: 13[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:46:17 charon: 13[ENC] generating INFORMATIONAL_V1 request 3135591218 [ HASH N(DPD) ]
          Jan 30 16:46:17 charon: 13[IKE] sending DPD request
          Jan 30 16:46:17 charon: 13[IKE] <con2000|255>sending DPD request
          Jan 30 16:46:15 charon: 13[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (196 bytes)
          Jan 30 16:46:15 charon: 13[IKE] sending retransmit 1 of request message ID 0, seq 1
          Jan 30 16:46:15 charon: 13[IKE] <con1000|257>sending retransmit 1 of request message ID 0, seq 1
          Jan 30 16:46:14 charon: 13[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (196 bytes)
          Jan 30 16:46:14 charon: 13[IKE] sending retransmit 4 of request message ID 0, seq 1
          Jan 30 16:46:14 charon: 13[IKE] <con1000|260>sending retransmit 4 of request message ID 0, seq 1
          Jan 30 16:46:11 charon: 13[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (196 bytes)
          Jan 30 16:46:11 charon: 13[ENC] generating ID_PROT request 0 [ SA V V V V V V ]
          Jan 30 16:46:11 charon: 13[IKE] initiating Main Mode IKE_SA con1000[257] to 81.168.48.250
          Jan 30 16:46:11 charon: 13[IKE] <con1000|257>initiating Main Mode IKE_SA con1000[257] to 81.168.48.250
          Jan 30 16:46:11 charon: 13[IKE] peer not responding, trying again (3/3)
          Jan 30 16:46:11 charon: 13[IKE] <con1000|257>peer not responding, trying again (3/3)
          Jan 30 16:46:11 charon: 13[IKE] giving up after 5 retransmits
          Jan 30 16:46:11 charon: 13[IKE] <con1000|257>giving up after 5 retransmits
          Jan 30 16:46:07 charon: 13[ENC] parsed INFORMATIONAL_V1 request 2157355661 [ HASH N(DPD_ACK) ]
          Jan 30 16:46:07 charon: 13[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:46:07 charon: 11[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:46:07 charon: 11[ENC] generating INFORMATIONAL_V1 request 3858232307 [ HASH N(DPD) ]
          Jan 30 16:46:07 charon: 11[IKE] sending DPD request
          Jan 30 16:46:07 charon: 11[IKE] <con2000|255>sending DPD request
          Jan 30 16:45:57 charon: 11[IKE] CHILD_SA con2000{2} established with SPIs cf3e65bb_i cc8f755f_o and TS 192.168.1.0/24|/0 === 192.168.50.0/24|/0
          Jan 30 16:45:57 charon: 11[IKE] <con2000|255>CHILD_SA con2000{2} established with SPIs cf3e65bb_i cc8f755f_o and TS 192.168.1.0/24|/0 === 192.168.50.0/24|/0
          Jan 30 16:45:57 charon: 11[ENC] parsed QUICK_MODE request 556550128 [ HASH ]
          Jan 30 16:45:57 charon: 11[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (60 bytes)
          Jan 30 16:45:57 charon: 11[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (188 bytes)
          Jan 30 16:45:57 charon: 11[ENC] generating QUICK_MODE response 556550128 [ HASH SA No ID ID ]
          Jan 30 16:45:57 charon: 11[IKE] detected rekeying of CHILD_SA con2000{2}
          Jan 30 16:45:57 charon: 11[IKE] <con2000|255>detected rekeying of CHILD_SA con2000{2}
          Jan 30 16:45:57 charon: 11[ENC] parsed QUICK_MODE request 556550128 [ HASH SA No ID ID ]
          Jan 30 16:45:57 charon: 11[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (188 bytes)
          Jan 30 16:45:51 charon: 11[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:45:51 charon: 11[ENC] generating INFORMATIONAL_V1 request 2652816399 [ HASH N(DPD_ACK) ]
          Jan 30 16:45:51 charon: 11[ENC] parsed INFORMATIONAL_V1 request 1923889573 [ HASH N(DPD) ]
          Jan 30 16:45:51 charon: 11[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:45:51 charon: 11[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (196 bytes)
          Jan 30 16:45:51 charon: 11[IKE] sending retransmit 3 of request message ID 0, seq 1
          Jan 30 16:45:51 charon: 11[IKE] <con1000|260>sending retransmit 3 of request message ID 0, seq 1
          Jan 30 16:45:41 charon: 09[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:45:41 charon: 09[ENC] generating INFORMATIONAL_V1 request 1778789646 [ HASH N(DPD_ACK) ]
          Jan 30 16:45:41 charon: 09[ENC] parsed INFORMATIONAL_V1 request 412083306 [ HASH N(DPD) ]
          Jan 30 16:45:41 charon: 09[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:45:38 charon: 09[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (196 bytes)
          Jan 30 16:45:38 charon: 09[IKE] sending retransmit 2 of request message ID 0, seq 1
          Jan 30 16:45:38 charon: 09[IKE] <con1000|260>sending retransmit 2 of request message ID 0, seq 1
          Jan 30 16:45:33 charon: 09[IKE] CHILD_SA con1000{1} established with SPIs c4afcc16_i 30414fb3_o and TS 192.168.1.0/24|/0 === 10.0.0.0/24|/0
          Jan 30 16:45:33 charon: 09[IKE] <con1000|261>CHILD_SA con1000{1} established with SPIs c4afcc16_i 30414fb3_o and TS 192.168.1.0/24|/0 === 10.0.0.0/24|/0
          Jan 30 16:45:33 charon: 09[ENC] parsed QUICK_MODE request 1827186182 [ HASH ]
          Jan 30 16:45:33 charon: 09[NET] received packet: from 81.168.48.250[500] to 195.99.170.125[500] (52 bytes)
          Jan 30 16:45:33 charon: 09[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (172 bytes)
          Jan 30 16:45:33 charon: 09[ENC] generating QUICK_MODE response 1827186182 [ HASH SA No ID ID ]
          Jan 30 16:45:33 charon: 09[ENC] parsed QUICK_MODE request 1827186182 [ HASH SA No ID ID ]
          Jan 30 16:45:33 charon: 09[NET] received packet: from 81.168.48.250[500] to 195.99.170.125[500] (156 bytes)
          Jan 30 16:45:33 charon: 11[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (68 bytes)
          Jan 30 16:45:33 charon: 11[ENC] generating ID_PROT response 0 [ ID HASH ]
          Jan 30 16:45:33 charon: 11[IKE] maximum IKE_SA lifetime 28554s
          Jan 30 16:45:33 charon: 11[IKE] <con1000|261>maximum IKE_SA lifetime 28554s
          Jan 30 16:45:33 charon: 11[IKE] scheduling reauthentication in 28014s
          Jan 30 16:45:33 charon: 11[IKE] <con1000|261>scheduling reauthentication in 28014s
          Jan 30 16:45:33 charon: 11[IKE] IKE_SA con1000[261] established between 195.99.170.125[195.99.170.125]…81.168.48.250[81.168.48.250]
          Jan 30 16:45:33 charon: 11[IKE] <con1000|261>IKE_SA con1000[261] established between 195.99.170.125[195.99.170.125]…81.168.48.250[81.168.48.250]
          Jan 30 16:45:33 charon: 11[CFG] selected peer config "con1000"
          Jan 30 16:45:33 charon: 11[CFG] looking for pre-shared key peer configs matching 195.99.170.125…81.168.48.250[81.168.48.250]
          Jan 30 16:45:33 charon: 11[ENC] parsed ID_PROT request 0 [ ID HASH N(INITIAL_CONTACT) ]
          Jan 30 16:45:33 charon: 11[NET] received packet: from 81.168.48.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:45:33 charon: 11[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (212 bytes)
          Jan 30 16:45:33 charon: 11[ENC] generating ID_PROT response 0 [ KE No NAT-D NAT-D ]
          Jan 30 16:45:33 charon: 11[ENC] parsed ID_PROT request 0 [ KE No NAT-D NAT-D ]
          Jan 30 16:45:33 charon: 11[NET] received packet: from 81.168.48.250[500] to 195.99.170.125[500] (196 bytes)
          Jan 30 16:45:33 charon: 11[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (152 bytes)
          Jan 30 16:45:33 charon: 11[ENC] generating ID_PROT response 0 [ SA V V V V ]
          Jan 30 16:45:33 charon: 11[IKE] 81.168.48.250 is initiating a Main Mode IKE_SA
          Jan 30 16:45:33 charon: 11[IKE] <261> 81.168.48.250 is initiating a Main Mode IKE_SA
          Jan 30 16:45:33 charon: 11[IKE] received draft-ietf-ipsec-nat-t-ike-00 vendor ID
          Jan 30 16:45:33 charon: 11[IKE] <261> received draft-ietf-ipsec-nat-t-ike-00 vendor ID
          Jan 30 16:45:33 charon: 11[IKE] received draft-ietf-ipsec-nat-t-ike-02 vendor ID
          Jan 30 16:45:33 charon: 11[IKE] <261> received draft-ietf-ipsec-nat-t-ike-02 vendor ID
          Jan 30 16:45:33 charon: 11[IKE] received draft-ietf-ipsec-nat-t-ike-02\n vendor ID
          Jan 30 16:45:33 charon: 11[IKE] <261> received draft-ietf-ipsec-nat-t-ike-02\n vendor ID
          Jan 30 16:45:33 charon: 11[IKE] received draft-ietf-ipsec-nat-t-ike-03 vendor ID
          Jan 30 16:45:33 charon: 11[IKE] <261> received draft-ietf-ipsec-nat-t-ike-03 vendor ID
          Jan 30 16:45:33 charon: 11[IKE] received NAT-T (RFC 3947) vendor ID
          Jan 30 16:45:33 charon: 11[IKE] <261> received NAT-T (RFC 3947) vendor ID
          Jan 30 16:45:33 charon: 11[IKE] received DPD vendor ID
          Jan 30 16:45:33 charon: 11[IKE] <261> received DPD vendor ID
          Jan 30 16:45:33 charon: 11[ENC] parsed ID_PROT request 0 [ SA V V V V V V ]
          Jan 30 16:45:33 charon: 11[NET] received packet: from 81.168.48.250[500] to 195.99.170.125[500] (200 bytes)
          Jan 30 16:45:31 charon: 06[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:45:31 charon: 06[ENC] generating INFORMATIONAL_V1 request 1471566719 [ HASH N(DPD_ACK) ]
          Jan 30 16:45:31 charon: 06[ENC] parsed INFORMATIONAL_V1 request 3127029776 [ HASH N(DPD) ]
          Jan 30 16:45:31 charon: 06[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:45:31 charon: 06[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (196 bytes)
          Jan 30 16:45:31 charon: 06[IKE] sending retransmit 1 of request message ID 0, seq 1
          Jan 30 16:45:31 charon: 06[IKE] <con1000|260>sending retransmit 1 of request message ID 0, seq 1
          Jan 30 16:45:27 charon: 06[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (196 bytes)
          Jan 30 16:45:27 charon: 06[ENC] generating ID_PROT request 0 [ SA V V V V V V ]
          Jan 30 16:45:27 charon: 06[IKE] initiating Main Mode IKE_SA con1000[260] to 81.168.48.250
          Jan 30 16:45:27 charon: 06[IKE] <con1000|260>initiating Main Mode IKE_SA con1000[260] to 81.168.48.250
          Jan 30 16:45:27 charon: 06[KNL] creating acquire job for policy 195.99.170.125/32|/0 === 81.168.48.250/32|/0 with reqid {1}
          Jan 30 16:45:25 charon: 06[IKE] deleting IKE_SA con1000[259] between 195.99.170.125[195.99.170.125]…81.168.48.250[81.168.48.250]
          Jan 30 16:45:25 charon: 06[IKE] <con1000|259>deleting IKE_SA con1000[259] between 195.99.170.125[195.99.170.125]…81.168.48.250[81.168.48.250]
          Jan 30 16:45:25 charon: 06[IKE] received DELETE for IKE_SA con1000[259]
          Jan 30 16:45:25 charon: 06[IKE] <con1000|259>received DELETE for IKE_SA con1000[259]
          Jan 30 16:45:25 charon: 06[ENC] parsed INFORMATIONAL_V1 request 4018689468 [ HASH D ]
          Jan 30 16:45:25 charon: 06[NET] received packet: from 81.168.48.250[500] to 195.99.170.125[500] (76 bytes)
          Jan 30 16:45:25 charon: 09[IKE] closing CHILD_SA con1000{1} with SPIs ccd5f7d4_i (655060 bytes) 30414fb2_o (1569392 bytes) and TS 192.168.1.0/24|/0 === 10.0.0.0/24|/0
          Jan 30 16:45:25 charon: 09[IKE] <con1000|259>closing CHILD_SA con1000{1} with SPIs ccd5f7d4_i (655060 bytes) 30414fb2_o (1569392 bytes) and TS 192.168.1.0/24|/0 === 10.0.0.0/24|/0
          Jan 30 16:45:25 charon: 09[IKE] received DELETE for ESP CHILD_SA with SPI 30414fb2
          Jan 30 16:45:25 charon: 09[IKE] <con1000|259>received DELETE for ESP CHILD_SA with SPI 30414fb2
          Jan 30 16:45:25 charon: 09[ENC] parsed INFORMATIONAL_V1 request 3951317432 [ HASH D ]
          Jan 30 16:45:25 charon: 09[NET] received packet: from 81.168.48.250[500] to 195.99.170.125[500] (68 bytes)
          Jan 30 16:45:21 charon: 09[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:45:21 charon: 09[ENC] generating INFORMATIONAL_V1 request 244293608 [ HASH N(DPD_ACK) ]
          Jan 30 16:45:21 charon: 09[ENC] parsed INFORMATIONAL_V1 request 1566037627 [ HASH N(DPD) ]
          Jan 30 16:45:21 charon: 09[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:45:21 ipsec_starter[35858]:
          Jan 30 16:45:21 ipsec_starter[35858]: 'con1000' routed
          Jan 30 16:45:21 charon: 09[CFG] received stroke: route 'con1000'
          Jan 30 16:45:21 charon: 11[CFG] added configuration 'con1000'
          Jan 30 16:45:21 charon: 11[CFG] received stroke: add connection 'con1000'
          Jan 30 16:45:21 charon: 11[CFG] deleted connection 'con1000'
          Jan 30 16:45:21 charon: 11[CFG] received stroke: delete connection 'con1000'
          Jan 30 16:45:21 ipsec_starter[35858]:
          Jan 30 16:45:21 ipsec_starter[35858]: configuration 'con1000' unrouted
          Jan 30 16:45:21 charon: 11[CFG] received stroke: unroute 'con1000'
          Jan 30 16:45:21 charon: 07[CFG] rereading crls from '/var/etc/ipsec/ipsec.d/crls'
          Jan 30 16:45:21 charon: 07[CFG] rereading attribute certificates from '/var/etc/ipsec/ipsec.d/acerts'
          Jan 30 16:45:21 charon: 07[CFG] rereading aa certificates from '/var/etc/ipsec/ipsec.d/aacerts'
          Jan 30 16:45:21 charon: 07[CFG] rereading ocsp signer certificates from '/var/etc/ipsec/ipsec.d/ocspcerts'
          Jan 30 16:45:21 charon: 07[CFG] rereading ca certificates from '/var/etc/ipsec/ipsec.d/cacerts'
          Jan 30 16:45:21 charon: 07[CFG] loaded IKE secret for %any 212.38.169.250
          Jan 30 16:45:21 charon: 07[CFG] loaded IKE secret for %any 81.168.48.250
          Jan 30 16:45:21 charon: 07[CFG] loading secrets from '/var/etc/ipsec/ipsec.secrets'
          Jan 30 16:45:21 charon: 07[CFG] rereading secrets
          Jan 30 16:45:11 charon: 07[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:45:11 charon: 07[ENC] generating INFORMATIONAL_V1 request 3945737918 [ HASH N(DPD_ACK) ]
          Jan 30 16:45:11 charon: 07[ENC] parsed INFORMATIONAL_V1 request 2605426342 [ HASH N(DPD) ]
          Jan 30 16:45:11 charon: 07[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:45:01 charon: 07[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:45:01 charon: 07[ENC] generating INFORMATIONAL_V1 request 3797642225 [ HASH N(DPD_ACK) ]
          Jan 30 16:45:01 charon: 07[ENC] parsed INFORMATIONAL_V1 request 1582725926 [ HASH N(DPD) ]
          Jan 30 16:45:01 charon: 07[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:44:55 charon: 07[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (196 bytes)
          Jan 30 16:44:55 charon: 07[IKE] sending retransmit 5 of request message ID 0, seq 1
          Jan 30 16:44:55 charon: 07[IKE] <con1000|257>sending retransmit 5 of request message ID 0, seq 1
          Jan 30 16:44:51 charon: 12[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:44:51 charon: 12[ENC] generating INFORMATIONAL_V1 request 2783461707 [ HASH N(DPD_ACK) ]
          Jan 30 16:44:51 charon: 12[ENC] parsed INFORMATIONAL_V1 request 404322050 [ HASH N(DPD) ]
          Jan 30 16:44:51 charon: 12[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:44:41 charon: 12[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:44:41 charon: 12[ENC] generating INFORMATIONAL_V1 request 2232927505 [ HASH N(DPD_ACK) ]
          Jan 30 16:44:41 charon: 12[ENC] parsed INFORMATIONAL_V1 request 5245550 [ HASH N(DPD) ]
          Jan 30 16:44:41 charon: 12[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:44:37 ipsec_starter[35858]:
          Jan 30 16:44:37 ipsec_starter[35858]: 'con1000' routed
          Jan 30 16:44:37 charon: 12[CFG] received stroke: route 'con1000'
          Jan 30 16:44:37 charon: 07[CFG] added configuration 'con1000'
          Jan 30 16:44:37 charon: 07[CFG] received stroke: add connection 'con1000'
          Jan 30 16:44:37 charon: 07[CFG] deleted connection 'con1000'
          Jan 30 16:44:37 charon: 07[CFG] received stroke: delete connection 'con1000'
          Jan 30 16:44:37 ipsec_starter[35858]:
          Jan 30 16:44:37 charon: 07[CFG] received stroke: unroute 'con1000'
          Jan 30 16:44:37 charon: 12[CFG] rereading crls from '/var/etc/ipsec/ipsec.d/crls'
          Jan 30 16:44:37 charon: 12[CFG] rereading attribute certificates from '/var/etc/ipsec/ipsec.d/acerts'
          Jan 30 16:44:37 charon: 12[CFG] rereading aa certificates from '/var/etc/ipsec/ipsec.d/aacerts'
          Jan 30 16:44:37 charon: 12[CFG] rereading ocsp signer certificates from '/var/etc/ipsec/ipsec.d/ocspcerts'
          Jan 30 16:44:37 charon: 12[CFG] rereading ca certificates from '/var/etc/ipsec/ipsec.d/cacerts'
          Jan 30 16:44:37 charon: 12[CFG] loaded IKE secret for %any 212.38.169.250
          Jan 30 16:44:37 charon: 12[CFG] loaded IKE secret for %any 81.168.48.250
          Jan 30 16:44:37 charon: 12[CFG] loading secrets from '/var/etc/ipsec/ipsec.secrets'
          Jan 30 16:44:37 charon: 12[CFG] rereading secrets
          Jan 30 16:44:31 charon: 10[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:44:31 charon: 10[ENC] generating INFORMATIONAL_V1 request 3771161138 [ HASH N(DPD_ACK) ]
          Jan 30 16:44:31 charon: 10[ENC] parsed INFORMATIONAL_V1 request 312237969 [ HASH N(DPD) ]
          Jan 30 16:44:31 charon: 10[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:44:21 charon: 10[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:44:21 charon: 10[ENC] generating INFORMATIONAL_V1 request 2172736518 [ HASH N(DPD_ACK) ]
          Jan 30 16:44:21 charon: 10[ENC] parsed INFORMATIONAL_V1 request 12508521 [ HASH N(DPD) ]
          Jan 30 16:44:21 charon: 10[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:44:13 charon: 10[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (196 bytes)
          Jan 30 16:44:13 charon: 10[IKE] sending retransmit 4 of request message ID 0, seq 1
          Jan 30 16:44:13 charon: 10[IKE] <con1000|257>sending retransmit 4 of request message ID 0, seq 1
          Jan 30 16:44:11 charon: 10[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:44:11 charon: 10[ENC] generating INFORMATIONAL_V1 request 1228396809 [ HASH N(DPD_ACK) ]
          Jan 30 16:44:11 charon: 10[ENC] parsed INFORMATIONAL_V1 request 552546541 [ HASH N(DPD) ]
          Jan 30 16:44:11 charon: 10[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:44:01 charon: 10[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:44:01 charon: 10[ENC] generating INFORMATIONAL_V1 request 960035738 [ HASH N(DPD_ACK) ]
          Jan 30 16:44:01 charon: 10[ENC] parsed INFORMATIONAL_V1 request 983685187 [ HASH N(DPD) ]
          Jan 30 16:44:01 charon: 10[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:43:51 charon: 16[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:43:51 charon: 16[ENC] generating INFORMATIONAL_V1 request 2438163099 [ HASH N(DPD_ACK) ]
          Jan 30 16:43:51 charon: 16[ENC] parsed INFORMATIONAL_V1 request 2135517361 [ HASH N(DPD) ]
          Jan 30 16:43:51 charon: 16[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:43:50 charon: 16[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (196 bytes)
          Jan 30 16:43:50 charon: 16[IKE] sending retransmit 3 of request message ID 0, seq 1
          Jan 30 16:43:50 charon: 16[IKE] <con1000|257>sending retransmit 3 of request message ID 0, seq 1
          Jan 30 16:43:41 charon: 16[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:43:41 charon: 16[ENC] generating INFORMATIONAL_V1 request 2760017838 [ HASH N(DPD_ACK) ]
          Jan 30 16:43:41 charon: 16[ENC] parsed INFORMATIONAL_V1 request 1524205984 [ HASH N(DPD) ]
          Jan 30 16:43:41 charon: 16[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:43:37 charon: 16[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (196 bytes)
          Jan 30 16:43:37 charon: 16[IKE] sending retransmit 2 of request message ID 0, seq 1
          Jan 30 16:43:37 charon: 16[IKE] <con1000|257>sending retransmit 2 of request message ID 0, seq 1
          Jan 30 16:43:31 charon: 16[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:43:31 charon: 16[ENC] generating INFORMATIONAL_V1 request 4140798287 [ HASH N(DPD_ACK) ]
          Jan 30 16:43:31 charon: 16[ENC] parsed INFORMATIONAL_V1 request 3285195598 [ HASH N(DPD) ]
          Jan 30 16:43:31 charon: 16[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:43:30 charon: 16[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (196 bytes)
          Jan 30 16:43:30 charon: 16[IKE] sending retransmit 1 of request message ID 0, seq 1
          Jan 30 16:43:30 charon: 16[IKE] <con1000|257>sending retransmit 1 of request message ID 0, seq 1
          Jan 30 16:43:26 charon: 16[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (196 bytes)
          Jan 30 16:43:26 charon: 16[ENC] generating ID_PROT request 0 [ SA V V V V V V ]
          Jan 30 16:43:26 charon: 16[IKE] initiating Main Mode IKE_SA con1000[257] to 81.168.48.250
          Jan 30 16:43:26 charon: 16[IKE] <con1000|257>initiating Main Mode IKE_SA con1000[257] to 81.168.48.250
          Jan 30 16:43:26 charon: 16[IKE] peer not responding, trying again (2/3)
          Jan 30 16:43:26 charon: 16[IKE] <con1000|257>peer not responding, trying again (2/3)
          Jan 30 16:43:26 charon: 16[IKE] giving up after 5 retransmits
          Jan 30 16:43:26 charon: 16[IKE] <con1000|257>giving up after 5 retransmits
          Jan 30 16:43:21 charon: 14[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:43:21 charon: 14[ENC] generating INFORMATIONAL_V1 request 3441032433 [ HASH N(DPD_ACK) ]
          Jan 30 16:43:21 charon: 14[ENC] parsed INFORMATIONAL_V1 request 944594875 [ HASH N(DPD) ]
          Jan 30 16:43:21 charon: 14[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:43:11 charon: 14[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:43:11 charon: 14[ENC] generating INFORMATIONAL_V1 request 3683550308 [ HASH N(DPD_ACK) ]
          Jan 30 16:43:11 charon: 14[ENC] parsed INFORMATIONAL_V1 request 2304101870 [ HASH N(DPD) ]
          Jan 30 16:43:11 charon: 14[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:43:01 charon: 14[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:43:01 charon: 14[ENC] generating INFORMATIONAL_V1 request 2257535841 [ HASH N(DPD_ACK) ]
          Jan 30 16:43:01 charon: 14[ENC] parsed INFORMATIONAL_V1 request 3601699866 [ HASH N(DPD) ]
          Jan 30 16:43:01 charon: 14[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:43:00 charon: 14[IKE] CHILD_SA con1000{1} established with SPIs ccd5f7d4_i 30414fb2_o and TS 192.168.1.0/24|/0 === 10.0.0.0/24|/0
          Jan 30 16:43:00 charon: 14[IKE] <con1000|259>CHILD_SA con1000{1} established with SPIs ccd5f7d4_i 30414fb2_o and TS 192.168.1.0/24|/0 === 10.0.0.0/24|/0
          Jan 30 16:43:00 charon: 14[ENC] parsed QUICK_MODE request 2358713825 [ HASH ]
          Jan 30 16:43:00 charon: 14[NET] received packet: from 81.168.48.250[500] to 195.99.170.125[500] (52 bytes)
          Jan 30 16:43:00 charon: 14[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (172 bytes)
          Jan 30 16:43:00 charon: 14[ENC] generating QUICK_MODE response 2358713825 [ HASH SA No ID ID ]
          Jan 30 16:43:00 charon: 14[ENC] parsed QUICK_MODE request 2358713825 [ HASH SA No ID ID ]
          Jan 30 16:43:00 charon: 14[NET] received packet: from 81.168.48.250[500] to 195.99.170.125[500] (148 bytes)
          Jan 30 16:43:00 charon: 14[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (68 bytes)
          Jan 30 16:43:00 charon: 14[ENC] generating ID_PROT response 0 [ ID HASH ]
          Jan 30 16:43:00 charon: 14[IKE] maximum IKE_SA lifetime 28387s
          Jan 30 16:43:00 charon: 14[IKE] <con1000|259>maximum IKE_SA lifetime 28387s
          Jan 30 16:43:00 charon: 14[IKE] scheduling reauthentication in 27847s
          Jan 30 16:43:00 charon: 14[IKE] <con1000|259>scheduling reauthentication in 27847s
          Jan 30 16:43:00 charon: 14[IKE] IKE_SA con1000[259] established between 195.99.170.125[195.99.170.125]…81.168.48.250[81.168.48.250]
          Jan 30 16:43:00 charon: 14[IKE] <con1000|259>IKE_SA con1000[259] established between 195.99.170.125[195.99.170.125]…81.168.48.250[81.168.48.250]
          Jan 30 16:43:00 charon: 14[CFG] selected peer config "con1000"
          Jan 30 16:43:00 charon: 14[CFG] looking for pre-shared key peer configs matching 195.99.170.125…81.168.48.250[81.168.48.250]
          Jan 30 16:43:00 charon: 14[ENC] parsed ID_PROT request 0 [ ID HASH N(INITIAL_CONTACT) ]
          Jan 30 16:43:00 charon: 14[NET] received packet: from 81.168.48.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:43:00 charon: 14[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (204 bytes)
          Jan 30 16:43:00 charon: 14[ENC] generating ID_PROT response 0 [ KE No NAT-D NAT-D ]
          Jan 30 16:43:00 charon: 14[ENC] parsed ID_PROT request 0 [ KE No NAT-D NAT-D ]
          Jan 30 16:43:00 charon: 14[NET] received packet: from 81.168.48.250[500] to 195.99.170.125[500] (188 bytes)
          Jan 30 16:43:00 charon: 14[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (152 bytes)
          Jan 30 16:43:00 charon: 14[ENC] generating ID_PROT response 0 [ SA V V V V ]
          Jan 30 16:43:00 charon: 14[IKE] 81.168.48.250 is initiating a Main Mode IKE_SA
          Jan 30 16:43:00 charon: 14[IKE] <259> 81.168.48.250 is initiating a Main Mode IKE_SA
          Jan 30 16:43:00 charon: 14[IKE] received draft-ietf-ipsec-nat-t-ike-00 vendor ID
          Jan 30 16:43:00 charon: 14[IKE] <259> received draft-ietf-ipsec-nat-t-ike-00 vendor ID
          Jan 30 16:43:00 charon: 14[IKE] received draft-ietf-ipsec-nat-t-ike-02 vendor ID
          Jan 30 16:43:00 charon: 14[IKE] <259> received draft-ietf-ipsec-nat-t-ike-02 vendor ID
          Jan 30 16:43:00 charon: 14[IKE] received draft-ietf-ipsec-nat-t-ike-02\n vendor ID
          Jan 30 16:43:00 charon: 14[IKE] <259> received draft-ietf-ipsec-nat-t-ike-02\n vendor ID
          Jan 30 16:43:00 charon: 14[IKE] received draft-ietf-ipsec-nat-t-ike-03 vendor ID
          Jan 30 16:43:00 charon: 14[IKE] <259> received draft-ietf-ipsec-nat-t-ike-03 vendor ID
          Jan 30 16:43:00 charon: 14[IKE] received NAT-T (RFC 3947) vendor ID
          Jan 30 16:43:00 charon: 14[IKE] <259> received NAT-T (RFC 3947) vendor ID
          Jan 30 16:43:00 charon: 14[IKE] received DPD vendor ID
          Jan 30 16:43:00 charon: 14[IKE] <259> received DPD vendor ID
          Jan 30 16:43:00 charon: 14[ENC] parsed ID_PROT request 0 [ SA V V V V V V ]
          Jan 30 16:43:00 charon: 14[NET] received packet: from 81.168.48.250[500] to 195.99.170.125[500] (200 bytes)
          Jan 30 16:42:58 charon: 14[CFG] ignoring acquire, connection attempt pending
          Jan 30 16:42:58 charon: 14[KNL] creating acquire job for policy 195.99.170.125/32|/0 === 81.168.48.250/32|/0 with reqid {1}
          Jan 30 16:42:58 charon: 14[IKE] deleting IKE_SA con1000[258] between 195.99.170.125[195.99.170.125]…81.168.48.250[81.168.48.250]
          Jan 30 16:42:58 charon: 14[IKE] <con1000|258>deleting IKE_SA con1000[258] between 195.99.170.125[195.99.170.125]…81.168.48.250[81.168.48.250]
          Jan 30 16:42:58 charon: 14[IKE] received DELETE for IKE_SA con1000[258]
          Jan 30 16:42:58 charon: 14[IKE] <con1000|258>received DELETE for IKE_SA con1000[258]
          Jan 30 16:42:58 charon: 14[ENC] parsed INFORMATIONAL_V1 request 1986980393 [ HASH D ]
          Jan 30 16:42:58 charon: 14[NET] received packet: from 81.168.48.250[500] to 195.99.170.125[500] (76 bytes)
          Jan 30 16:42:58 charon: 16[IKE] closing CHILD_SA con1000{1} with SPIs ce9ef5bf_i (568233 bytes) 30414fb1_o (1257192 bytes) and TS 192.168.1.0/24|/0 === 10.0.0.0/24|/0
          Jan 30 16:42:58 charon: 16[IKE] <con1000|258>closing CHILD_SA con1000{1} with SPIs ce9ef5bf_i (568233 bytes) 30414fb1_o (1257192 bytes) and TS 192.168.1.0/24|/0 === 10.0.0.0/24|/0
          Jan 30 16:42:58 charon: 16[IKE] received DELETE for ESP CHILD_SA with SPI 30414fb1
          Jan 30 16:42:58 charon: 16[IKE] <con1000|258>received DELETE for ESP CHILD_SA with SPI 30414fb1
          Jan 30 16:42:58 charon: 16[ENC] parsed INFORMATIONAL_V1 request 1919608357 [ HASH D ]
          Jan 30 16:42:58 charon: 16[NET] received packet: from 81.168.48.250[500] to 195.99.170.125[500] (68 bytes)
          Jan 30 16:42:51 charon: 16[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:42:51 charon: 16[ENC] generating INFORMATIONAL_V1 request 2286573325 [ HASH N(DPD_ACK) ]
          Jan 30 16:42:51 charon: 16[ENC] parsed INFORMATIONAL_V1 request 1189429199 [ HASH N(DPD) ]
          Jan 30 16:42:51 charon: 16[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:42:44 charon: 15[IKE] CHILD_SA con1000{1} established with SPIs ce9ef5bf_i 30414fb1_o and TS 192.168.1.0/24|/0 === 10.0.0.0/24|/0
          Jan 30 16:42:44 charon: 15[IKE] <con1000|258>CHILD_SA con1000{1} established with SPIs ce9ef5bf_i 30414fb1_o and TS 192.168.1.0/24|/0 === 10.0.0.0/24|/0
          Jan 30 16:42:44 charon: 15[ENC] parsed QUICK_MODE request 2077227407 [ HASH ]
          Jan 30 16:42:44 charon: 15[NET] received packet: from 81.168.48.250[500] to 195.99.170.125[500] (52 bytes)
          Jan 30 16:42:44 charon: 15[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (172 bytes)
          Jan 30 16:42:44 charon: 15[ENC] generating QUICK_MODE response 2077227407 [ HASH SA No ID ID ]
          Jan 30 16:42:44 charon: 15[ENC] parsed QUICK_MODE request 2077227407 [ HASH SA No ID ID ]
          Jan 30 16:42:44 charon: 15[NET] received packet: from 81.168.48.250[500] to 195.99.170.125[500] (148 bytes)
          Jan 30 16:42:44 charon: 16[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (68 bytes)
          Jan 30 16:42:44 charon: 16[ENC] generating ID_PROT response 0 [ ID HASH ]
          Jan 30 16:42:44 charon: 16[IKE] maximum IKE_SA lifetime 28683s
          Jan 30 16:42:44 charon: 16[IKE] <con1000|258>maximum IKE_SA lifetime 28683s
          Jan 30 16:42:44 charon: 16[IKE] scheduling reauthentication in 28143s
          Jan 30 16:42:44 charon: 16[IKE] <con1000|258>scheduling reauthentication in 28143s
          Jan 30 16:42:44 charon: 16[IKE] IKE_SA con1000[258] established between 195.99.170.125[195.99.170.125]…81.168.48.250[81.168.48.250]
          Jan 30 16:42:44 charon: 16[IKE] <con1000|258>IKE_SA con1000[258] established between 195.99.170.125[195.99.170.125]…81.168.48.250[81.168.48.250]
          Jan 30 16:42:44 charon: 16[CFG] selected peer config "con1000"
          Jan 30 16:42:44 charon: 16[CFG] looking for pre-shared key peer configs matching 195.99.170.125…81.168.48.250[81.168.48.250]
          Jan 30 16:42:44 charon: 16[ENC] parsed ID_PROT request 0 [ ID HASH N(INITIAL_CONTACT) ]
          Jan 30 16:42:44 charon: 16[NET] received packet: from 81.168.48.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:42:44 charon: 16[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (204 bytes)
          Jan 30 16:42:44 charon: 16[ENC] generating ID_PROT response 0 [ KE No NAT-D NAT-D ]
          Jan 30 16:42:44 charon: 16[ENC] parsed ID_PROT request 0 [ KE No NAT-D NAT-D ]
          Jan 30 16:42:44 charon: 16[NET] received packet: from 81.168.48.250[500] to 195.99.170.125[500] (188 bytes)
          Jan 30 16:42:44 charon: 16[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (152 bytes)
          Jan 30 16:42:44 charon: 16[ENC] generating ID_PROT response 0 [ SA V V V V ]
          Jan 30 16:42:44 charon: 16[IKE] 81.168.48.250 is initiating a Main Mode IKE_SA
          Jan 30 16:42:44 charon: 16[IKE] <258> 81.168.48.250 is initiating a Main Mode IKE_SA
          Jan 30 16:42:44 charon: 16[IKE] received draft-ietf-ipsec-nat-t-ike-00 vendor ID
          Jan 30 16:42:44 charon: 16[IKE] <258> received draft-ietf-ipsec-nat-t-ike-00 vendor ID
          Jan 30 16:42:44 charon: 16[IKE] received draft-ietf-ipsec-nat-t-ike-02 vendor ID
          Jan 30 16:42:44 charon: 16[IKE] <258> received draft-ietf-ipsec-nat-t-ike-02 vendor ID
          Jan 30 16:42:44 charon: 16[IKE] received draft-ietf-ipsec-nat-t-ike-02\n vendor ID
          Jan 30 16:42:44 charon: 16[IKE] <258> received draft-ietf-ipsec-nat-t-ike-02\n vendor ID
          Jan 30 16:42:44 charon: 16[IKE] received draft-ietf-ipsec-nat-t-ike-03 vendor ID
          Jan 30 16:42:44 charon: 16[IKE] <258> received draft-ietf-ipsec-nat-t-ike-03 vendor ID
          Jan 30 16:42:44 charon: 16[IKE] received NAT-T (RFC 3947) vendor ID
          Jan 30 16:42:44 charon: 16[IKE] <258> received NAT-T (RFC 3947) vendor ID
          Jan 30 16:42:44 charon: 16[IKE] received DPD vendor ID
          Jan 30 16:42:44 charon: 16[IKE] <258> received DPD vendor ID
          Jan 30 16:42:44 charon: 16[ENC] parsed ID_PROT request 0 [ SA V V V V V V ]
          Jan 30 16:42:44 charon: 16[NET] received packet: from 81.168.48.250[500] to 195.99.170.125[500] (200 bytes)
          Jan 30 16:42:41 charon: 16[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:42:41 charon: 16[ENC] generating INFORMATIONAL_V1 request 3880806261 [ HASH N(DPD_ACK) ]
          Jan 30 16:42:41 charon: 16[ENC] parsed INFORMATIONAL_V1 request 2008939906 [ HASH N(DPD) ]
          Jan 30 16:42:41 charon: 16[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:42:31 charon: 13[ENC] parsed INFORMATIONAL_V1 request 1750487973 [ HASH N(DPD_ACK) ]
          Jan 30 16:42:31 charon: 13[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:42:31 charon: 13[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:42:31 charon: 13[ENC] generating INFORMATIONAL_V1 request 3840507214 [ HASH N(DPD) ]
          Jan 30 16:42:31 charon: 13[IKE] sending DPD request
          Jan 30 16:42:31 charon: 13[IKE] <con2000|255>sending DPD request
          Jan 30 16:42:21 charon: 13[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:42:21 charon: 13[ENC] generating INFORMATIONAL_V1 request 556316801 [ HASH N(DPD_ACK) ]
          Jan 30 16:42:21 charon: 13[ENC] parsed INFORMATIONAL_V1 request 2381845583 [ HASH N(DPD) ]
          Jan 30 16:42:21 charon: 13[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:42:19 charon: 13[CFG] ignoring acquire, connection attempt pending
          Jan 30 16:42:19 charon: 13[KNL] creating acquire job for policy 195.99.170.125/32|/0 === 81.168.48.250/32|/0 with reqid {1}
          Jan 30 16:42:11 charon: 13[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:42:11 charon: 13[ENC] generating INFORMATIONAL_V1 request 3279964535 [ HASH N(DPD_ACK) ]
          Jan 30 16:42:11 charon: 13[ENC] parsed INFORMATIONAL_V1 request 3755192054 [ HASH N(DPD) ]
          Jan 30 16:42:11 charon: 13[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:42:10 charon: 13[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (196 bytes)
          Jan 30 16:42:10 charon: 13[IKE] sending retransmit 5 of request message ID 0, seq 1
          Jan 30 16:42:10 charon: 13[IKE] <con1000|257>sending retransmit 5 of request message ID 0, seq 1
          Jan 30 16:42:01 charon: 13[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:42:01 charon: 13[ENC] generating INFORMATIONAL_V1 request 3462187374 [ HASH N(DPD_ACK) ]
          Jan 30 16:42:01 charon: 13[ENC] parsed INFORMATIONAL_V1 request 2702747715 [ HASH N(DPD) ]
          Jan 30 16:42:01 charon: 13[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:41:52 charon: 13[CFG] ignoring acquire, connection attempt pending
          Jan 30 16:41:52 charon: 13[KNL] creating acquire job for policy 195.99.170.125/32|/0 === 81.168.48.250/32|/0 with reqid {1}
          Jan 30 16:41:51 charon: 13[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:41:51 charon: 13[ENC] generating INFORMATIONAL_V1 request 85986942 [ HASH N(DPD_ACK) ]
          Jan 30 16:41:51 charon: 13[ENC] parsed INFORMATIONAL_V1 request 977990986 [ HASH N(DPD) ]
          Jan 30 16:41:51 charon: 13[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:41:41 charon: 06[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:41:41 charon: 06[ENC] generating INFORMATIONAL_V1 request 4140697257 [ HASH N(DPD_ACK) ]
          Jan 30 16:41:41 charon: 06[ENC] parsed INFORMATIONAL_V1 request 68026169 [ HASH N(DPD) ]
          Jan 30 16:41:41 charon: 06[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:41:31 charon: 06[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:41:31 charon: 06[ENC] generating INFORMATIONAL_V1 request 646642700 [ HASH N(DPD_ACK) ]
          Jan 30 16:41:31 charon: 06[ENC] parsed INFORMATIONAL_V1 request 3705742781 [ HASH N(DPD) ]
          Jan 30 16:41:31 charon: 06[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:41:30 charon: 06[CFG] ignoring acquire, connection attempt pending
          Jan 30 16:41:30 charon: 06[KNL] creating acquire job for policy 195.99.170.125/32|/0 === 81.168.48.250/32|/0 with reqid {1}
          Jan 30 16:41:28 charon: 06[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (196 bytes)
          Jan 30 16:41:28 charon: 06[IKE] sending retransmit 4 of request message ID 0, seq 1
          Jan 30 16:41:28 charon: 06[IKE] <con1000|257>sending retransmit 4 of request message ID 0, seq 1
          Jan 30 16:41:21 charon: 06[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:41:21 charon: 06[ENC] generating INFORMATIONAL_V1 request 981208545 [ HASH N(DPD_ACK) ]
          Jan 30 16:41:21 charon: 06[ENC] parsed INFORMATIONAL_V1 request 2475012631 [ HASH N(DPD) ]
          Jan 30 16:41:21 charon: 06[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:41:11 charon: 06[NET] sending packet: from 195.99.170.125[500] to 212.38.169.250[500] (92 bytes)
          Jan 30 16:41:11 charon: 06[ENC] generating INFORMATIONAL_V1 request 3584528621 [ HASH N(DPD_ACK) ]
          Jan 30 16:41:11 charon: 06[ENC] parsed INFORMATIONAL_V1 request 2979351022 [ HASH N(DPD) ]
          Jan 30 16:41:11 charon: 06[NET] received packet: from 212.38.169.250[500] to 195.99.170.125[500] (92 bytes)
          Jan 30 16:41:05 charon: 06[CFG] ignoring acquire, connection attempt pending
          Jan 30 16:41:05 charon: 13[KNL] creating acquire job for policy 195.99.170.125/32|/0 === 81.168.48.250/32|/0 with reqid {1}
          Jan 30 16:41:05 charon: 13[NET] sending packet: from 195.99.170.125[500] to 81.168.48.250[500] (196 bytes)
          Jan 30 16:41:05 charon: 13[IKE] sending retransmit 3 of request message ID 0, seq 1
          Jan 30 16:41:05 c</con1000|257></con1000|257></con2000|255></con1000|258></con1000|258></con1000|258></con1000|258></con1000|258></con1000|258></con1000|258></con1000|258></con1000|259></con1000|259></con1000|259></con1000|259></con1000|257></con1000|257></con1000|257></con1000|257></con1000|257></con1000|257></con1000|257></con1000|257></con1000|259></con1000|259></con1000|259></con1000|259></con1000|260></con1000|260></con1000|261></con1000|261></con1000|261></con1000|261></con1000|260></con1000|260></con2000|255></con2000|255></con2000|255></con1000|257></con1000|257></con1000|257></con1000|260></con1000|257></con2000|255></con1000|257></con2000|255></con1000|257></con2000|255></con2000|255></con1000|260></con2000|255></con1000|257></con2000|255></con2000|255></con1000|257></con2000|255></con1000|260></con1000|260></con1000|260></con2000|255></con1000|260></con1000|260></con2000|255></con1000|260></con2000|255></con2000|255></con1000|257></con1000|257></con1000|260></con2000|255></con2000|255></con2000|255></con2000|255></con1000|260></con2000|255></con2000|255></con2000|255></con2000|255></con2000|255></con2000|255></con2000|255></con2000|255></con1000|260></con1000|260></con1000|260></con1000|260></con2000|255></con1000|260></con2000|255></con1000|260></con2000|255></con2000|255>

          1 Reply Last reply Reply Quote 0
          • K
            kejianshi
            last edited by

            Yeah - There has been lots of IPSEC issues but people seem to have fixes.  I'm sure one will be along shortly.

            1 Reply Last reply Reply Quote 0
            • C
              cmb
              last edited by

              Pretty clear it was IPsec, given we're on the IPsec board, and that's what charon does. :)

              uk26: could you get me into that system to dig into it further? PM me and we can arrange something.

              1 Reply Last reply Reply Quote 0
              • K
                kejianshi
                last edited by

                Oooooooooppppsss.

                1 Reply Last reply Reply Quote 0
                • U
                  uk26
                  last edited by

                  Hi,

                  I have noticed when the issue appears there is then an established connection and a connecting connection for the same vpn link. restarting it removes the duplicate and then the vpn will time out for a few minutes and then the duplicate is back again.

                  1 Reply Last reply Reply Quote 0
                  • E
                    eri--
                    last edited by

                    Are your lifetimes matching on both sides?
                    Are the DPD timers low?

                    1 Reply Last reply Reply Quote 0
                    • C
                      cmb
                      last edited by

                      I was able to go through this with uk26 and found a couple potential issues, and an explanation for the "peer not responding" in the logs there.

                      The Draytek on the opposite side of the affected IPsec connection was configured as initiator-only. So when the pfSense side was trying to initiate the connection, the Draytek just ignored it (as it was configured to do).

                      What happened in the drop in that particular instance is the Draytek sent a delete for the child SA, and then waited near 10 seconds to initiate a new child SA. strongswan was attempting to do that before the active SA was deleted, so the connection would stay up, but since the Draytek was configured not to reply it just timed out over and over trying to bring up a new SA to keep the connection up. When the Draytek kicked off negotiation about 10 seconds after it told strongswan to delete the existing SA, it was successful, and came back up.

                      The logs from the Draytek from that time period weren't available, so we only have half the story from that instance. It's now logging to another machine in case any problems come back up.

                      The Draytek was also configured to use 10.0.0.254/24 rather than 10.0.0.0/24. Though there weren't any indications that was causing any issues, it's technically incorrect and was changed to 10.0.0.0/24 to match what's on the pfSense side.

                      I suspect now that the Draytek is configured to be either initiator or responder that this issue will go away. Why there was a behavior change between racoon and strongswan there I'm not sure.

                      uk26 - follow up and let us know how things are going.

                      1 Reply Last reply Reply Quote 0
                      • U
                        uk26
                        last edited by

                        so far seems ok. getting the odd packet loss over the VPN link. ping external IP of PFsense and no packet loss.

                        will keep monitoring

                        1 Reply Last reply Reply Quote 0
                        • R
                          reesesm2000
                          last edited by

                          I am also facing major issues with IPSec since upgrading from 2.1.5 to 2.2

                          I have a tunnel between our office and our cloud provider with 5 phase 2 entries. It is configured with PSK, 3DES, SHA1 and DH Group 2.

                          It is completely random which of the 5 will work and even sometimes all 5 work together but very seldom. Stopping and starting IPSec sometimes has an effect on which links are up and which are down. HAving the link up does not guarantee that it will work though. Links show up but no traffic goes over them. I have tried to remove everything and reconfigure it again but still no luck.

                          Just to give some additional information, it is running on a Supermicro D525 on a USB since the new OS will not install to the discs. Tried every option in the Bios but after formatting and setting volumes it fails with Error Code 19. Only way to get it back was to run it off USB. So all in all a very bad experience upgrading to 2.2

                          Let me know what information I need to send for the IPSec debugging. Major issue for me right now.

                          I have 2 other boxes (different HW) all running fine in other offices around the world, but unfortunately this is our main office and 24 hours of broken internet so far!

                          1 Reply Last reply Reply Quote 0
                          • D
                            doktornotor Banned
                            last edited by

                            @reesesm2000:

                            I am also facing major issues with IPSec since upgrading from 2.1.5 to 2.2

                            Start your own topic please.

                            1 Reply Last reply Reply Quote 0
                            • E
                              eri--
                              last edited by

                              The option to control the behaviour as a responder only will be on 2.2.1

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.