<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[2.0 RC1 working ipsec site to site config]]></title><description><![CDATA[<p dir="auto">anyone can send working pf 2.0 RC1 to pf 2.0 RC1 site to site ipsec config ?because mine disconnecting and only after racoon restart able to connect.Before it was working with pf 1.2.3 without any problem.</p>
<p dir="auto">my systems:</p>
<p dir="auto">2.0-RC1 (i386)<br />
built on Thu Apr 7 21:53:59 EDT 2011</p>
]]></description><link>https://forum.netgate.com/topic/32524/2-0-rc1-working-ipsec-site-to-site-config</link><generator>RSS for Node</generator><lastBuildDate>Thu, 18 Jun 2026 14:41:17 GMT</lastBuildDate><atom:link href="https://forum.netgate.com/topic/32524.rss" rel="self" type="application/rss+xml"/><pubDate>Fri, 08 Apr 2011 06:39:10 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to 2.0 RC1 working ipsec site to site config on Wed, 13 Apr 2011 16:03:22 GMT]]></title><description><![CDATA[<p dir="auto">at last i found my periodically ipsec disconnect problem after researching in redmine,i'm using pptp from home to connect corporate PF 2.0 RC1 firewall.<br />
Same issue as Chris Buechler described in  bug 1421 (http://redmine.pfsense.org/issues/1421),today i noticed that after my pptp disconnect all ipsec tunnels disconnecting.I can supply any log and configs for deeper research.</p>
<p dir="auto">regards.</p>
]]></description><link>https://forum.netgate.com/post/274888</link><guid isPermaLink="true">https://forum.netgate.com/post/274888</guid><dc:creator><![CDATA[expert_az]]></dc:creator><pubDate>Wed, 13 Apr 2011 16:03:22 GMT</pubDate></item><item><title><![CDATA[Reply to 2.0 RC1 working ipsec site to site config on Tue, 12 Apr 2011 05:17:49 GMT]]></title><description><![CDATA[<p dir="auto">any help?</p>
]]></description><link>https://forum.netgate.com/post/274654</link><guid isPermaLink="true">https://forum.netgate.com/post/274654</guid><dc:creator><![CDATA[expert_az]]></dc:creator><pubDate>Tue, 12 Apr 2011 05:17:49 GMT</pubDate></item><item><title><![CDATA[Reply to 2.0 RC1 working ipsec site to site config on Mon, 11 Apr 2011 07:00:11 GMT]]></title><description><![CDATA[<p dir="auto">any answers?</p>
<p dir="auto">adding logs and ipsec configs.<strong>Before upgrade  2.0 RC1 this configs was running without any problem,this problems occurs after upgrade,please tell me am i doing something wrong?</strong></p>
<p dir="auto"><strong>Logs</strong></p>
<p dir="auto"><strong>MainOffice111</strong><br />
Apr 9 16:15:42 racoon: [BranchOffice131]: INFO: IPsec-SA established: ESP 111.111.111.111[500]-&gt;131.131.131.131[500] spi=96233152(0x5bc66c0)<br />
Apr 9 16:15:42 racoon: [BranchOffice131]: INFO: IPsec-SA established: ESP 111.111.111.111[500]-&gt;131.131.131.131[500] spi=124500845(0x76bbb6d)<br />
Apr 9 16:15:42 racoon: [BranchOffice131]: INFO: initiate new phase 2 negotiation: 111.111.111.111[500]&lt;=&gt;131.131.131.131[500]<br />
Apr 9 16:15:41 racoon: [BranchOffice131]: INFO: ISAKMP-SA established 111.111.111.111[500]-131.131.131.131[500] spi:a30cb4098833f36b:f9349ee8daaa8e92<br />
Apr 9 16:15:41 racoon: INFO: received Vendor ID: DPD<br />
Apr 9 16:15:41 racoon: INFO: received broken Microsoft ID: FRAGMENTATION<br />
Apr 9 16:15:41 racoon: INFO: begin Aggressive mode.<br />
Apr 9 16:15:41 racoon: [BranchOffice131]: INFO: initiate new phase 1 negotiation: 111.111.111.111[500]&lt;=&gt;131.131.131.131[500]<br />
Apr 9 16:15:41 racoon: [BranchOffice131]: INFO: IPsec-SA request for 131.131.131.131 queued due to no phase1 found.<br />
Apr 9 16:15:32 racoon: [BranchOffice222]: INFO: IPsec-SA established: ESP 111.111.111.111[500]-&gt;222.222.222.222[500] spi=165271763(0x9d9d8d3)<br />
Apr 9 16:15:32 racoon: [BranchOffice222]: INFO: IPsec-SA established: ESP 111.111.111.111[500]-&gt;222.222.222.222[500] spi=31387927(0x1def117)<br />
Apr 9 16:15:32 racoon: [BranchOffice222]: INFO: respond new phase 2 negotiation: 111.111.111.111[500]&lt;=&gt;222.222.222.222[500]<br />
Apr 9 16:15:32 racoon: [BranchOffice222]: INFO: ISAKMP-SA established 111.111.111.111[500]-222.222.222.222[500] spi:28db9ca101ef99c7:56564054e81bd71e<br />
Apr 9 16:15:32 racoon: INFO: received Vendor ID: DPD<br />
Apr 9 16:15:32 racoon: INFO: received broken Microsoft ID: FRAGMENTATION<br />
Apr 9 16:15:32 racoon: INFO: begin Aggressive mode.<br />
Apr 9 16:15:32 racoon: [BranchOffice222]: INFO: respond new phase 1 negotiation: 111.111.111.111[500]&lt;=&gt;222.222.222.222[500]<br />
Apr 9 16:15:31 racoon: [BranchOffice121]: INFO: IPsec-SA established: ESP 111.111.111.111[500]-&gt;121.121.121.121[500] spi=48228194(0x2dfe762)<br />
Apr 9 16:15:31 racoon: [BranchOffice121]: INFO: IPsec-SA established: ESP 111.111.111.111[500]-&gt;121.121.121.121[500] spi=193485563(0xb885afb)<br />
Apr 9 16:15:31 racoon: [BranchOffice121]: INFO: initiate new phase 2 negotiation: 111.111.111.111[500]&lt;=&gt;121.121.121.121[500]<br />
Apr 9 16:15:24 racoon: [Self]: INFO: 111.111.111.111[500] used as isakmp port (fd=17)<br />
Apr 9 16:15:24 racoon: [Self]: INFO: 111.111.111.111[500] used for NAT-T<br />
Apr 9 16:15:24 racoon: [Self]: INFO: 111.111.111.111[4500] used as isakmp port (fd=16)<br />
Apr 9 16:15:24 racoon: [Self]: INFO: 111.111.111.111[4500] used for NAT-T<br />
Apr 9 16:14:47 racoon: ERROR: failed to begin ipsec sa negotication.<br />
Apr 9 16:14:47 racoon: ERROR: phase1 negotiation failed due to send error. ac3aa97737ea0d9d:0000000000000000<br />
Apr 9 16:14:47 racoon: INFO: begin Aggressive mode.<br />
Apr 9 16:14:47 racoon: [BranchOffice222]: INFO: initiate new phase 1 negotiation: 111.111.111.111[500]&lt;=&gt;222.222.222.222[500]<br />
Apr 9 16:14:47 racoon: [BranchOffice222]: INFO: IPsec-SA request for 222.222.222.222 queued due to no phase1 found.<br />
Apr 9 16:14:23 racoon: ERROR: failed to begin ipsec sa negotication.<br />
Apr 9 16:14:23 racoon: ERROR: phase1 negotiation failed due to send error. 54ee0fe2f345b74b:0000000000000000<br />
Apr 9 16:14:23 racoon: INFO: begin Aggressive mode.<br />
Apr 9 16:14:23 racoon: [BranchOffice222]: INFO: initiate new phase 1 negotiation: 111.111.111.111[500]&lt;=&gt;222.222.222.222[500]<br />
Apr 9 16:14:23 racoon: [BranchOffice222]: INFO: IPsec-SA request for 222.222.222.222 queued due to no phase1 found.<br />
Apr 9 16:13:59 racoon: ERROR: failed to begin ipsec sa negotication.<br />
Apr 9 16:13:59 racoon: ERROR: phase1 negotiation failed due to send error. be7fe2346fa975fb:0000000000000000<br />
Apr 9 16:13:59 racoon: INFO: begin Aggressive mode.<br />
Apr 9 16:13:59 racoon: [BranchOffice222]: INFO: initiate new phase 1 negotiation: 111.111.111.111[500]&lt;=&gt;222.222.222.222[500]<br />
Apr 9 16:13:59 racoon: [BranchOffice222]: INFO: IPsec-SA request for 222.222.222.222 queued due to no phase1 found.<br />
Apr 9 16:13:35 racoon: ERROR: failed to begin ipsec sa negotication.<br />
Apr 9 16:13:35 racoon: ERROR: phase1 negotiation failed due to send error. 4acb668add723bf0:0000000000000000<br />
Apr 9 16:13:35 racoon: INFO: begin Aggressive mode.<br />
Apr 9 16:13:35 racoon: [BranchOffice222]: INFO: initiate new phase 1 negotiation: 111.111.111.111[500]&lt;=&gt;222.222.222.222[500]<br />
Apr 9 16:13:35 racoon: [BranchOffice222]: INFO: IPsec-SA request for 222.222.222.222 queued due to no phase1 found.<br />
Apr 9 16:11:42 racoon: ERROR: failed to begin ipsec sa negotication.<br />
Apr 9 16:11:42 racoon: ERROR: phase1 negotiation failed due to send error. 23b1def39da3af33:0000000000000000<br />
Apr 9 16:11:42 racoon: INFO: begin Aggressive mode.<br />
Apr 9 16:11:42 racoon: [BranchOffice222]: INFO: initiate new phase 1 negotiation: 111.111.111.111[500]&lt;=&gt;222.222.222.222[500]<br />
Apr 9 16:11:42 racoon: [BranchOffice222]: INFO: IPsec-SA request for 222.222.222.222 queued due to no phase1 found.<br />
Apr 9 16:11:17 racoon: ERROR: failed to start post getspi.</p>
<p dir="auto"><strong>BranchOffice121</strong><br />
Apr 9 16:15:31 racoon: [MainOffice111]: INFO: IPsec-SA established: ESP 121.121.121.121[0]-&gt;111.111.111.111[0] spi=193485563(0xb885afb)<br />
Apr 9 16:15:31 racoon: [MainOffice111]: INFO: IPsec-SA established: ESP 111.111.111.111[0]-&gt;121.121.121.121[0] spi=48228194(0x2dfe762)<br />
Apr 9 16:15:31 racoon: [MainOffice111]: INFO: respond new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 16:15:31 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:15:01 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 16:14:56 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:14:26 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 16:14:24 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:13:54 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 16:13:50 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:13:20 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 16:13:20 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:12:50 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 16:12:49 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:12:19 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 16:12:16 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:11:46 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 16:11:44 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:11:14 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 16:11:04 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:10:34 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 16:10:34 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:10:04 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 16:10:01 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:09:31 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 16:09:30 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:09:00 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 16:08:54 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:08:24 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 16:08:20 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:07:50 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 16:07:46 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:07:16 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 16:07:14 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:06:44 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 16:06:40 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:06:10 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 16:06:06 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:05:36 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 16:05:32 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:05:02 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 16:05:01 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:04:31 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 16:04:27 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:03:57 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 16:03:50 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:03:20 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 16:03:19 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:02:49 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 16:02:48 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:02:18 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 16:02:16 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:01:46 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 16:01:38 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:01:08 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 16:01:07 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:00:37 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 16:00:37 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:00:07 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 16:00:04 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 15:59:34 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 15:59:30 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 15:59:00 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 15:58:56 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 15:58:26 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 15:58:24 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 15:57:54 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 15:57:49 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 15:57:19 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 15:57:14 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 15:56:44 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 15:56:38 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 15:56:08 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 15:56:03 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 15:55:33 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 15:55:26 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 15:54:56 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 15:54:52 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 15:54:22 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 15:54:20 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 15:53:50 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 15:53:46 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 15:53:16 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 15:53:10 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 15:52:40 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 15:52:35 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 15:52:05 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 15:51:54 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 15:51:24 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 15:51:18 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 15:50:48 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 15:50:46 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 15:50:16 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 15:50:15 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 15:49:45 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 15:49:35 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 15:49:05 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 15:49:04 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 15:48:34 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 15:48:34 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 15:48:04 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 15:48:01 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 15:47:31 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 15:36:00 racoon: [MainOffice111]: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 15:35:30 racoon: [MainOffice111]: INFO: IPsec-SA expired: ESP/Tunnel 111.111.111.111[0]-&gt;121.121.121.121[0] spi=1558667(0x17c88b)<br />
Apr 9 15:35:30 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 15:35:30 racoon: [MainOffice111]: INFO: IPsec-SA expired: ESP 121.121.121.121[0]-&gt;111.111.111.111[0] spi=152684926(0x919c97e)<br />
Apr 9 14:47:29 racoon: [MainOffice111]: INFO: IPsec-SA established: ESP 121.121.121.121[0]-&gt;111.111.111.111[0] spi=152684926(0x919c97e)<br />
Apr 9 14:47:29 racoon: [MainOffice111]: INFO: IPsec-SA established: ESP 111.111.111.111[0]-&gt;121.121.121.121[0] spi=1558667(0x17c88b)<br />
Apr 9 14:47:29 racoon: [MainOffice111]: INFO: IPsec-SA expired: ESP/Tunnel 111.111.111.111[0]-&gt;121.121.121.121[0] spi=225411871(0xd6f831f)<br />
Apr 9 14:47:29 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 14:47:29 racoon: [MainOffice111]: INFO: IPsec-SA expired: ESP 121.121.121.121[0]-&gt;111.111.111.111[0] spi=188446918(0xb3b78c6)<br />
Apr 9 13:59:28 racoon: [MainOffice111]: INFO: IPsec-SA established: ESP 121.121.121.121[0]-&gt;111.111.111.111[0] spi=188446918(0xb3b78c6)<br />
Apr 9 13:59:28 racoon: [MainOffice111]: INFO: IPsec-SA established: ESP 111.111.111.111[0]-&gt;121.121.121.121[0] spi=225411871(0xd6f831f)<br />
Apr 9 13:59:28 racoon: [MainOffice111]: INFO: IPsec-SA expired: ESP/Tunnel 111.111.111.111[0]-&gt;121.121.121.121[0] spi=126827611(0x78f3c5b)<br />
Apr 9 13:59:28 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 13:59:28 racoon: [MainOffice111]: INFO: IPsec-SA expired: ESP 121.121.121.121[0]-&gt;111.111.111.111[0] spi=114434545(0x6d221f1)<br />
Apr 9 13:11:27 racoon: [MainOffice111]: INFO: IPsec-SA established: ESP 121.121.121.121[0]-&gt;111.111.111.111[0] spi=114434545(0x6d221f1)<br />
Apr 9 13:11:27 racoon: [MainOffice111]: INFO: IPsec-SA established: ESP 111.111.111.111[0]-&gt;121.121.121.121[0] spi=126827611(0x78f3c5b)<br />
Apr 9 13:11:27 racoon: [MainOffice111]: INFO: IPsec-SA expired: ESP/Tunnel 111.111.111.111[0]-&gt;121.121.121.121[0] spi=64378002(0x3d65492)<br />
Apr 9 13:11:27 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 13:11:27 racoon: [MainOffice111]: INFO: IPsec-SA expired: ESP 121.121.121.121[0]-&gt;111.111.111.111[0] spi=220194169(0xd1fe579)<br />
Apr 9 12:23:26 racoon: [MainOffice111]: INFO: IPsec-SA established: ESP 121.121.121.121[0]-&gt;111.111.111.111[0] spi=220194169(0xd1fe579)<br />
Apr 9 12:23:26 racoon: [MainOffice111]: INFO: IPsec-SA established: ESP 111.111.111.111[0]-&gt;121.121.121.121[0] spi=64378002(0x3d65492)<br />
Apr 9 12:23:26 racoon: [MainOffice111]: INFO: IPsec-SA expired: ESP/Tunnel 111.111.111.111[0]-&gt;121.121.121.121[0] spi=110620595(0x697efb3)<br />
Apr 9 12:23:26 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 121.121.121.121[0]&lt;=&gt;111.111.111.111[0]<br />
Apr 9 12:23:26 racoon: [MainOffice111]: INFO: IPsec-SA expired: ESP 121.121.121.121[0]-&gt;111.111.111.111[0] spi=77366575(0x49c852f)</p>
<p dir="auto"><strong>BranchOffice222</strong><br />
Apr 9 16:15:32 racoon: [MainOffice111]: INFO: IPsec-SA established: ESP 222.222.222.222[500]-&gt;111.111.111.111[500] spi=31387927(0x1def117)<br />
Apr 9 16:15:32 racoon: [MainOffice111]: INFO: IPsec-SA established: ESP 222.222.222.222[500]-&gt;111.111.111.111[500] spi=165271763(0x9d9d8d3)<br />
Apr 9 16:15:32 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 222.222.222.222[500]&lt;=&gt;111.111.111.111[500]<br />
Apr 9 16:15:32 racoon: [MainOffice111]: INFO: ISAKMP-SA established 222.222.222.222[500]-111.111.111.111[500] spi:28db9ca101ef99c7:56564054e81bd71e<br />
Apr 9 16:15:32 racoon: INFO: received Vendor ID: DPD<br />
Apr 9 16:15:32 racoon: INFO: received broken Microsoft ID: FRAGMENTATION<br />
Apr 9 16:15:25 racoon: [MainOffice111]: [111.111.111.111] INFO: request for establishing IPsec-SA was queued due to no phase1 found.<br />
Apr 9 16:15:23 racoon: INFO: delete phase 2 handler.<br />
Apr 9 16:15:23 racoon: [MainOffice111]: [111.111.111.111] ERROR: phase2 negotiation failed due to time up waiting for phase1 [Remote Side not responding]. ESP 111.111.111.111[0]-&gt;222.222.222.222[0]<br />
Apr 9 16:14:51 racoon: INFO: begin Aggressive mode.<br />
Apr 9 16:14:51 racoon: [MainOffice111]: INFO: initiate new phase 1 negotiation: 222.222.222.222[500]&lt;=&gt;111.111.111.111[500]<br />
Apr 9 16:14:51 racoon: [MainOffice111]: INFO: IPsec-SA request for 111.111.111.111 queued due to no phase1 found.<br />
Apr 9 16:14:50 racoon: INFO: delete phase 2 handler.<br />
Apr 9 16:14:50 racoon: [MainOffice111]: [111.111.111.111] ERROR: phase2 negotiation failed due to time up waiting for phase1 [Remote Side not responding]. ESP 111.111.111.111[0]-&gt;222.222.222.222[0]<br />
Apr 9 16:14:36 racoon: ERROR: phase1 negotiation failed due to time up. 1a40da5577af1a98:0000000000000000<br />
Apr 9 16:14:18 racoon: [MainOffice111]: [111.111.111.111] INFO: request for establishing IPsec-SA was queued due to no phase1 found.<br />
Apr 9 16:14:17 racoon: INFO: delete phase 2 handler.<br />
Apr 9 16:14:17 racoon: [MainOffice111]: [111.111.111.111] ERROR: phase2 negotiation failed due to time up waiting for phase1 [Remote Side not responding]. ESP 111.111.111.111[0]-&gt;222.222.222.222[0]<br />
Apr 9 16:13:46 racoon: INFO: begin Aggressive mode.<br />
Apr 9 16:13:46 racoon: [MainOffice111]: INFO: initiate new phase 1 negotiation: 222.222.222.222[500]&lt;=&gt;111.111.111.111[500]<br />
Apr 9 16:13:46 racoon: [MainOffice111]: INFO: IPsec-SA request for 111.111.111.111 queued due to no phase1 found.<br />
Apr 9 16:13:42 racoon: INFO: delete phase 2 handler.<br />
Apr 9 16:13:42 racoon: [MainOffice111]: [111.111.111.111] ERROR: phase2 negotiation failed due to time up waiting for phase1 [Remote Side not responding]. ESP 111.111.111.111[0]-&gt;222.222.222.222[0]<br />
Apr 9 16:13:25 racoon: ERROR: phase1 negotiation failed due to time up. 4a259d9ee4bbf29b:0000000000000000<br />
Apr 9 16:13:10 racoon: [MainOffice111]: [111.111.111.111] INFO: request for establishing IPsec-SA was queued due to no phase1 found.<br />
Apr 9 16:13:06 racoon: INFO: delete phase 2 handler.<br />
Apr 9 16:13:06 racoon: [MainOffice111]: [111.111.111.111] ERROR: phase2 negotiation failed due to time up waiting for phase1 [Remote Side not responding]. ESP 111.111.111.111[0]-&gt;222.222.222.222[0]<br />
Apr 9 16:12:35 racoon: INFO: begin Aggressive mode.<br />
Apr 9 16:12:35 racoon: [MainOffice111]: INFO: initiate new phase 1 negotiation: 222.222.222.222[500]&lt;=&gt;111.111.111.111[500]<br />
Apr 9 16:12:35 racoon: [MainOffice111]: INFO: IPsec-SA request for 111.111.111.111 queued due to no phase1 found.<br />
Apr 9 16:12:17 racoon: INFO: delete phase 2 handler.<br />
Apr 9 16:12:17 racoon: [MainOffice111]: [111.111.111.111] ERROR: phase2 negotiation failed due to time up waiting for phase1 [Remote Side not responding]. ESP 111.111.111.111[0]-&gt;222.222.222.222[0]<br />
Apr 9 16:11:54 racoon: ERROR: phase1 negotiation failed due to time up. 07e828dbd0030d0c:0000000000000000<br />
Apr 9 16:11:46 racoon: [MainOffice111]: [111.111.111.111] INFO: request for establishing IPsec-SA was queued due to no phase1 found.<br />
Apr 9 16:11:35 racoon: INFO: delete phase 2 handler.<br />
Apr 9 16:11:35 racoon: [MainOffice111]: [111.111.111.111] ERROR: phase2 negotiation failed due to time up waiting for phase1 [Remote Side not responding]. ESP 111.111.111.111[0]-&gt;222.222.222.222[0]<br />
Apr 9 16:11:04 racoon: INFO: begin Aggressive mode.<br />
Apr 9 16:11:04 racoon: [MainOffice111]: INFO: initiate new phase 1 negotiation: 222.222.222.222[500]&lt;=&gt;111.111.111.111[500]<br />
Apr 9 16:11:04 racoon: [MainOffice111]: INFO: IPsec-SA request for 111.111.111.111 queued due to no phase1 found.<br />
Apr 9 16:10:53 racoon: INFO: delete phase 2 handler.<br />
Apr 9 16:10:53 racoon: [MainOffice111]: [111.111.111.111] ERROR: phase2 negotiation failed due to time up waiting for phase1 [Remote Side not responding]. ESP 111.111.111.111[0]-&gt;222.222.222.222[0]<br />
Apr 9 16:10:37 racoon: ERROR: phase1 negotiation failed due to time up. 9437e81477c46ac8:0000000000000000<br />
Apr 9 16:10:22 racoon: [MainOffice111]: [111.111.111.111] INFO: request for establishing IPsec-SA was queued due to no phase1 found.<br />
Apr 9 16:10:19 racoon: INFO: delete phase 2 handler.<br />
Apr 9 16:10:19 racoon: [MainOffice111]: [111.111.111.111] ERROR: phase2 negotiation failed due to time up waiting for phase1 [Remote Side not responding]. ESP 111.111.111.111[0]-&gt;222.222.222.222[0]<br />
Apr 9 16:09:47 racoon: INFO: begin Aggressive mode.<br />
Apr 9 16:09:47 racoon: [MainOffice111]: INFO: initiate new phase 1 negotiation: 222.222.222.222[500]&lt;=&gt;111.111.111.111[500]<br />
Apr 9 16:09:47 racoon: [MainOffice111]: INFO: IPsec-SA request for 111.111.111.111 queued due to no phase1 found.<br />
Apr 9 16:09:42 racoon: INFO: delete phase 2 handler.<br />
Apr 9 16:09:42 racoon: [MainOffice111]: [111.111.111.111] ERROR: phase2 negotiation failed due to time up waiting for phase1 [Remote Side not responding]. ESP 111.111.111.111[0]-&gt;222.222.222.222[0]<br />
Apr 9 16:09:18 racoon: ERROR: phase1 negotiation failed due to time up. 8404f6e665cb5936:0000000000000000<br />
Apr 9 16:09:11 racoon: [MainOffice111]: [111.111.111.111] INFO: request for establishing IPsec-SA was queued due to no phase1 found.<br />
Apr 9 16:08:59 racoon: INFO: delete phase 2 handler.<br />
Apr 9 16:08:59 racoon: [MainOffice111]: [111.111.111.111] ERROR: phase2 negotiation failed due to time up waiting for phase1 [Remote Side not responding]. ESP 111.111.111.111[0]-&gt;222.222.222.222[0]<br />
Apr 9 16:08:27 racoon: INFO: begin Aggressive mode.<br />
Apr 9 16:08:27 racoon: [MainOffice111]: INFO: initiate new phase 1 negotiation: 222.222.222.222[500]&lt;=&gt;111.111.111.111[500]<br />
Apr 9 16:08:27 racoon: [MainOffice111]: INFO: IPsec-SA request for 111.111.111.111 queued due to no phase1 found.<br />
Apr 9 16:08:25 racoon: INFO: delete phase 2 handler.<br />
Apr 9 16:08:25 racoon: [MainOffice111]: [111.111.111.111] ERROR: phase2 negotiation failed due to time up waiting for phase1 [Remote Side not responding]. ESP 111.111.111.111[0]-&gt;222.222.222.222[0]<br />
Apr 9 16:08:10 racoon: ERROR: phase1 negotiation failed due to time up. f22b1d1499e58082:0000000000000000<br />
Apr 9 16:07:54 racoon: [MainOffice111]: [111.111.111.111] INFO: request for establishing IPsec-SA was queued due to no phase1 found.<br />
Apr 9 16:07:51 racoon: INFO: delete phase 2 handler.<br />
Apr 9 16:07:51 racoon: [MainOffice111]: [111.111.111.111] ERROR: phase2 negotiation failed due to time up waiting for phase1 [Remote Side not responding]. ESP 111.111.111.111[0]-&gt;222.222.222.222[0]<br />
Apr 9 16:07:20 racoon: INFO: begin Aggressive mode.<br />
Apr 9 16:07:20 racoon: [MainOffice111]: INFO: initiate new phase 1 negotiation: 222.222.222.222[500]&lt;=&gt;111.111.111.111[500]<br />
Apr 9 16:07:20 racoon: [MainOffice111]: INFO: IPsec-SA request for 111.111.111.111 queued due to no phase1 found.<br />
Apr 9 16:06:59 racoon: [MainOffice111]: INFO: ISAKMP-SA deleted 222.222.222.222[500]-111.111.111.111[500] spi:c3424c4a2ecae460:2b8a7aa67c2a2a1b<br />
Apr 9 16:06:59 racoon: [MainOffice111]: INFO: ISAKMP-SA expired 222.222.222.222[500]-111.111.111.111[500] spi:c3424c4a2ecae460:2b8a7aa67c2a2a1b<br />
Apr 9 16:06:58 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 222.222.222.222[500]&lt;=&gt;111.111.111.111[500]<br />
Apr 9 16:06:53 racoon: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:06:23 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 222.222.222.222[500]&lt;=&gt;111.111.111.111[500]<br />
Apr 9 16:06:09 racoon: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:05:39 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 222.222.222.222[500]&lt;=&gt;111.111.111.111[500]<br />
Apr 9 16:05:37 racoon: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:05:07 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 222.222.222.222[500]&lt;=&gt;111.111.111.111[500]<br />
Apr 9 16:04:55 racoon: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:04:25 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 222.222.222.222[500]&lt;=&gt;111.111.111.111[500]<br />
Apr 9 16:04:21 racoon: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:03:51 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 222.222.222.222[500]&lt;=&gt;111.111.111.111[500]<br />
Apr 9 16:03:47 racoon: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:03:17 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 222.222.222.222[500]&lt;=&gt;111.111.111.111[500]<br />
Apr 9 16:03:07 racoon: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:02:37 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 222.222.222.222[500]&lt;=&gt;111.111.111.111[500]<br />
Apr 9 16:02:33 racoon: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:02:03 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 222.222.222.222[500]&lt;=&gt;111.111.111.111[500]<br />
Apr 9 16:01:45 racoon: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:01:15 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 222.222.222.222[500]&lt;=&gt;111.111.111.111[500]<br />
Apr 9 16:01:11 racoon: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:00:41 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 222.222.222.222[500]&lt;=&gt;111.111.111.111[500]<br />
Apr 9 16:00:33 racoon: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 16:00:03 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 222.222.222.222[500]&lt;=&gt;111.111.111.111[500]<br />
Apr 9 15:59:54 racoon: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 15:59:24 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 222.222.222.222[500]&lt;=&gt;111.111.111.111[500]<br />
Apr 9 15:59:20 racoon: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 15:58:50 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 222.222.222.222[500]&lt;=&gt;111.111.111.111[500]<br />
Apr 9 15:58:33 racoon: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 15:58:03 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 222.222.222.222[500]&lt;=&gt;111.111.111.111[500]<br />
Apr 9 15:57:58 racoon: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.<br />
Apr 9 15:57:28 racoon: [MainOffice111]: INFO: initiate new phase 2 negotiation: 222.222.222.222[500]&lt;=&gt;111.111.111.111[500]<br />
Apr 9 15:57:22 racoon: ERROR: 111.111.111.111 give up to get IPsec-SA due to time up to wait.</p>
<p dir="auto"><strong>BranchOffice131</strong><br />
Apr 9 16:15:41 racoon: [MainOffice111]: INFO: IPsec-SA established: ESP 131.131.131.131[500]-&gt;111.111.111.111[500] spi=124500845(0x76bbb6d)<br />
Apr 9 16:15:41 racoon: [MainOffice111]: INFO: IPsec-SA established: ESP 131.131.131.131[500]-&gt;111.111.111.111[500] spi=96233152(0x5bc66c0)<br />
Apr 9 16:15:41 racoon: [MainOffice111]: INFO: respond new phase 2 negotiation: 131.131.131.131[500]&lt;=&gt;111.111.111.111[500]<br />
Apr 9 16:15:40 racoon: [MainOffice111]: INFO: ISAKMP-SA established 131.131.131.131[500]-111.111.111.111[500] spi:a30cb4098833f36b:f9349ee8daaa8e92<br />
Apr 9 16:15:40 racoon: INFO: received Vendor ID: DPD<br />
Apr 9 16:15:40 racoon: INFO: received broken Microsoft ID: FRAGMENTATION<br />
Apr 9 16:15:40 racoon: INFO: begin Aggressive mode.<br />
Apr 9 16:15:40 racoon: [MainOffice111]: INFO: respond new phase 1 negotiation: 131.131.131.131[500]&lt;=&gt;111.111.111.111[500]<br />
Apr 9 16:12:56 racoon: ERROR: phase1 negotiation failed due to time up. 73f8fcd06dbc6d6f:0000000000000000<br />
Apr 9 16:12:37 racoon: INFO: delete phase 2 handler.<br />
Apr 9 16:12:37 racoon: [MainOffice111]: [111.111.111.111] ERROR: phase2 negotiation failed due to time up waiting for phase1 [Remote Side not responding]. ESP 111.111.111.111[0]-&gt;131.131.131.131[0]<br />
Apr 9 16:12:06 racoon: INFO: begin Aggressive mode.<br />
Apr 9 16:12:06 racoon: [MainOffice111]: INFO: initiate new phase 1 negotiation: 131.131.131.131[500]&lt;=&gt;111.111.111.111[500]<br />
Apr 9 16:12:06 racoon: [MainOffice111]: INFO: IPsec-SA request for 111.111.111.111 queued due to no phase1 found.<br />
Apr 9 16:08:31 racoon: ERROR: phase1 negotiation failed due to time up. 77fb771428668638:0000000000000000<br />
Apr 9 16:08:12 racoon: INFO: delete phase 2 handler.<br />
Apr 9 16:08:12 racoon: [MainOffice111]: [111.111.111.111] ERROR: phase2 negotiation failed due to time up waiting for phase1 [Remote Side not responding]. ESP 111.111.111.111[0]-&gt;131.131.131.131[0]<br />
Apr 9 16:07:41 racoon: INFO: begin Aggressive mode.<br />
Apr 9 16:07:41 racoon: [MainOffice111]: INFO: initiate new phase 1 negotiation: 131.131.131.131[500]&lt;=&gt;111.111.111.111[500]<br />
Apr 9 16:07:41 racoon: [MainOffice111]: INFO: IPsec-SA request for 111.111.111.111 queued due to no phase1 found.<br />
Apr 9 16:04:06 racoon: ERROR: phase1 negotiation failed due to time up. 5155ba68f37035f2:0000000000000000<br />
Apr 9 16:03:47 racoon: INFO: delete phase 2 handler.<br />
Apr 9 16:03:47 racoon: [MainOffice111]: [111.111.111.111] ERROR: phase2 negotiation failed due to time up waiting for phase1 [Remote Side not responding]. ESP 111.111.111.111[0]-&gt;131.131.131.131[0]<br />
Apr 9 16:03:16 racoon: INFO: begin Aggressive mode.<br />
Apr 9 16:03:16 racoon: [MainOffice111]: INFO: initiate new phase 1 negotiation: 131.131.131.131[500]&lt;=&gt;111.111.111.111[500]<br />
Apr 9 16:03:16 racoon: [MainOffice111]: INFO: IPsec-SA request for 111.111.111.111 queued due to no phase1 found.<br />
Apr 9 15:59:40 racoon: ERROR: phase1 negotiation failed due to time up. 44398177140d3491:0000000000000000<br />
Apr 9 15:59:21 racoon: INFO: delete phase 2 handler.<br />
Apr 9 15:59:21 racoon: [MainOffice111]: [111.111.111.111] ERROR: phase2 negotiation failed due to time up waiting for phase1 [Remote Side not responding]. ESP 111.111.111.111[0]-&gt;131.131.131.131[0]<br />
Apr 9 15:58:50 racoon: INFO: begin Aggressive mode.<br />
Apr 9 15:58:50 racoon: [MainOffice111]: INFO: initiate new phase 1 negotiation: 131.131.131.131[500]&lt;=&gt;111.111.111.111[500]<br />
Apr 9 15:58:50 racoon: [MainOffice111]: INFO: IPsec-SA request for 111.111.111.111 queued due to no phase1 found.<br />
Apr 9 15:55:15 racoon: ERROR: phase1 negotiation failed due to time up. 0b5335d91a943d8f:0000000000000000<br />
Apr 9 15:54:56 racoon: INFO: delete phase 2 handler.<br />
Apr 9 15:54:56 racoon: [MainOffice111]: [111.111.111.111] ERROR: phase2 negotiation failed due to time up waiting for phase1 [Remote Side not responding]. ESP 111.111.111.111[0]-&gt;131.131.131.131[0]<br />
Apr 9 15:54:25 racoon: INFO: begin Aggressive mode.<br />
Apr 9 15:54:25 racoon: [MainOffice111]: INFO: initiate new phase 1 negotiation: 131.131.131.131[500]&lt;=&gt;111.111.111.111[500]<br />
Apr 9 15:54:25 racoon: [MainOffice111]: INFO: IPsec-SA request for 111.111.111.111 queued due to no phase1 found.<br />
Apr 9 15:50:50 racoon: ERROR: phase1 negotiation failed due to time up. d0e9d9775d4e5fa7:0000000000000000<br />
Apr 9 15:50:31 racoon: INFO: delete phase 2 handler.<br />
Apr 9 15:50:31 racoon: [MainOffice111]: [111.111.111.111] ERROR: phase2 negotiation failed due to time up waiting for phase1 [Remote Side not responding]. ESP 111.111.111.111[0]-&gt;131.131.131.131[0]<br />
Apr 9 15:50:00 racoon: INFO: begin Aggressive mode.<br />
Apr 9 15:50:00 racoon: [MainOffice111]: INFO: initiate new phase 1 negotiation: 131.131.131.131[500]&lt;=&gt;111.111.111.111[500]<br />
Apr 9 15:50:00 racoon: [MainOffice111]: INFO: IPsec-SA request for 111.111.111.111 queued due to no phase1 found.<br />
Apr 9 15:46:25 racoon: ERROR: phase1 negotiation failed due to time up. e247653ced4bcee6:0000000000000000<br />
Apr 9 15:46:06 racoon: INFO: delete phase 2 handler.<br />
Apr 9 15:46:06 racoon: [MainOffice111]: [111.111.111.111] ERROR: phase2 negotiation failed due to time up waiting for phase1 [Remote Side not responding]. ESP 111.111.111.111[0]-&gt;131.131.131.131[0]<br />
Apr 9 15:45:35 racoon: INFO: begin Aggressive mode.<br />
Apr 9 15:45:35 racoon: [MainOffice111]: INFO: initiate new phase 1 negotiation: 131.131.131.131[500]&lt;=&gt;111.111.111.111[500]<br />
Apr 9 15:45:35 racoon: [MainOffice111]: INFO: IPsec-SA request for 111.111.111.111 queued due to no phase1 found.</p>
<p dir="auto"><strong>Configs:</strong></p>
<p dir="auto"><strong>BranchOffice121(PF 1.2.3)</strong></p>
<h1><a class="anchor-offset" name="this-file-is-automatically-generated.-do-not-edit"></a>This file is automatically generated. Do not edit</h1>
<p dir="auto">listen {<br />
adminsock "/var/db/racoon/racoon.sock" "root" "wheel" 0660;<br />
}<br />
path pre_shared_key "/var/etc/psk.txt";</p>
<p dir="auto">path certificate  "/var/etc";</p>
<p dir="auto">remote 111.111.111.111 {<br />
exchange_mode aggressive;<br />
my_identifier address "121.121.121.121";</p>
<p dir="auto">peers_identifier address 111.111.111.111;<br />
initial_contact on;</p>
<p dir="auto">ike_frag on;<br />
support_proxy on;<br />
proposal_check obey;</p>
<p dir="auto">proposal {<br />
encryption_algorithm 3des;<br />
hash_algorithm sha1;<br />
authentication_method pre_shared_key;<br />
dh_group 2;<br />
lifetime time 28800 secs;<br />
}<br />
lifetime time 28800 secs;<br />
}</p>
<p dir="auto">sainfo address 192.168.60.0/24 any address 192.168.0.0/16 any {<br />
encryption_algorithm 3des;<br />
authentication_algorithm hmac_sha1,hmac_md5;<br />
compression_algorithm deflate;<br />
pfs_group 2;<br />
lifetime time 3600 secs;<br />
}</p>
<p dir="auto"><strong>BranchOffice222(2.0-RC1 (i386) built on Fri Apr 8 18:33:38 EDT 2011)</strong></p>
<h1><a class="anchor-offset" name="this-file-is-automatically-generated.-do-not-edit"></a>This file is automatically generated. Do not edit</h1>
<p dir="auto">path pre_shared_key "/var/etc/psk.txt";</p>
<p dir="auto">path certificate  "/var/etc";</p>
<p dir="auto">listen<br />
{<br />
adminsock "/var/db/racoon/racoon.sock" "root" "wheel" 0660;<br />
isakmp 222.222.222.222 [500];<br />
isakmp_natt 222.222.222.222 [4500];<br />
}</p>
<p dir="auto">remote 111.111.111.111<br />
{<br />
ph1id 1;<br />
exchange_mode main;<br />
my_identifier address 222.222.222.222;<br />
peers_identifier address 111.111.111.111;<br />
ike_frag on;<br />
generate_policy = off;<br />
initial_contact = on;<br />
nat_traversal = off;</p>
<p dir="auto">dpd_delay = 60;<br />
dpd_maxfail = 5;<br />
support_proxy on;<br />
proposal_check obey;</p>
<p dir="auto">proposal<br />
{<br />
authentication_method pre_shared_key;<br />
encryption_algorithm blowfish 256;<br />
hash_algorithm sha1;<br />
dh_group 2;<br />
lifetime time 28800 secs;<br />
}<br />
}</p>
<p dir="auto">sainfo subnet 192.168.55.0/24 any subnet 192.168.0.0/16 any<br />
{<br />
remoteid 1;<br />
encryption_algorithm blowfish 256;<br />
authentication_algorithm hmac_sha1;<br />
pfs_group 2;<br />
lifetime time 3600 secs;<br />
compression_algorithm deflate;<br />
}</p>
<p dir="auto"><strong>BranchOffice131(2.0-RC1 (i386) built on Fri Apr 8 18:33:38 EDT 2011)</strong></p>
<h1><a class="anchor-offset" name="this-file-is-automatically-generated.-do-not-edit"></a>This file is automatically generated. Do not edit</h1>
<p dir="auto">path pre_shared_key "/var/etc/psk.txt";</p>
<p dir="auto">path certificate  "/var/etc";</p>
<p dir="auto">listen<br />
{<br />
adminsock "/var/db/racoon/racoon.sock" "root" "wheel" 0660;<br />
isakmp 131.131.131.131 [500];<br />
isakmp_natt 131.131.131.131 [4500];<br />
}</p>
<p dir="auto">remote 111.111.111.111<br />
{<br />
ph1id 1;<br />
exchange_mode aggressive;<br />
my_identifier user_fqdn "email131@email.com";<br />
peers_identifier user_fqdn "email111@email.com";<br />
ike_frag on;<br />
generate_policy = off;<br />
initial_contact = on;<br />
nat_traversal = off;</p>
<p dir="auto">dpd_delay = 60;<br />
dpd_maxfail = 5;<br />
support_proxy on;<br />
proposal_check obey;</p>
<p dir="auto">proposal<br />
{<br />
authentication_method pre_shared_key;<br />
encryption_algorithm blowfish 256;<br />
hash_algorithm sha1;<br />
dh_group 2;<br />
lifetime time 28800 secs;<br />
}<br />
}</p>
<p dir="auto">sainfo subnet 192.168.10.0/24 any subnet 192.168.0.0/16 any<br />
{<br />
remoteid 1;<br />
encryption_algorithm blowfish 256;<br />
authentication_algorithm hmac_md5;<br />
pfs_group 2;<br />
lifetime time 3600 secs;<br />
compression_algorithm deflate;<br />
}</p>
<p dir="auto"><strong>MainOffice111 (2.0-RC1 (i386) built on Fri Apr 8 18:33:38 EDT 2011)</strong></p>
<h1><a class="anchor-offset" name="this-file-is-automatically-generated.-do-not-edit"></a>This file is automatically generated. Do not edit</h1>
<p dir="auto">path pre_shared_key "/var/etc/psk.txt";</p>
<p dir="auto">path certificate  "/var/etc";</p>
<p dir="auto">listen<br />
{<br />
adminsock "/var/db/racoon/racoon.sock" "root" "wheel" 0660;<br />
isakmp 111.111.111.111 [500];<br />
isakmp_natt 111.111.111.111 [4500];<br />
}</p>
<p dir="auto">remote 131.131.131.131<br />
{<br />
ph1id 1;<br />
exchange_mode aggressive;<br />
my_identifier user_fqdn "email111@email.com";<br />
peers_identifier user_fqdn "email131@email.com";<br />
ike_frag on;<br />
generate_policy = off;<br />
initial_contact = on;<br />
nat_traversal = off;</p>
<p dir="auto">dpd_delay = 60;<br />
dpd_maxfail = 5;<br />
support_proxy on;<br />
proposal_check obey;</p>
<p dir="auto">proposal<br />
{<br />
authentication_method pre_shared_key;<br />
encryption_algorithm blowfish 256;<br />
hash_algorithm sha1;<br />
dh_group 2;<br />
lifetime time 28800 secs;<br />
}<br />
}</p>
<p dir="auto">remote 121.121.121.121<br />
{<br />
ph1id 2;<br />
exchange_mode aggressive;<br />
my_identifier address 111.111.111.111;<br />
peers_identifier address 121.121.121.121;<br />
ike_frag on;<br />
generate_policy = off;<br />
initial_contact = on;<br />
nat_traversal = off;</p>
<p dir="auto">support_proxy on;<br />
proposal_check obey;</p>
<p dir="auto">proposal<br />
{<br />
authentication_method pre_shared_key;<br />
encryption_algorithm 3des;<br />
hash_algorithm sha1;<br />
dh_group 2;<br />
lifetime time 28800 secs;<br />
}<br />
}</p>
<p dir="auto">remote 222.222.222.222<br />
{<br />
ph1id 4;<br />
exchange_mode main;<br />
my_identifier address 111.111.111.111;<br />
peers_identifier address 222.222.222.222;<br />
ike_frag on;<br />
generate_policy = off;<br />
initial_contact = on;<br />
nat_traversal = off;</p>
<p dir="auto">dpd_delay = 60;<br />
dpd_maxfail = 5;<br />
support_proxy on;<br />
proposal_check obey;</p>
<p dir="auto">proposal<br />
{<br />
authentication_method pre_shared_key;<br />
encryption_algorithm blowfish 256;<br />
hash_algorithm sha1;<br />
dh_group 2;<br />
lifetime time 28800 secs;<br />
}<br />
}</p>
<p dir="auto">sainfo subnet 192.168.0.0/16 any subnet 192.168.10.0/24 any<br />
{<br />
remoteid 1;<br />
encryption_algorithm blowfish 256;<br />
authentication_algorithm hmac_md5;<br />
pfs_group 2;<br />
lifetime time 3600 secs;<br />
compression_algorithm deflate;<br />
}</p>
<p dir="auto">sainfo subnet 192.168.0.0/16 any subnet 192.168.60.0/24 any<br />
{<br />
remoteid 2;<br />
encryption_algorithm 3des;<br />
authentication_algorithm hmac_sha1,hmac_md5;<br />
pfs_group 2;<br />
lifetime time 3600 secs;<br />
compression_algorithm deflate;<br />
}</p>
<p dir="auto">sainfo subnet 192.168.0.0/16 any subnet 192.168.55.0/24 any<br />
{<br />
remoteid 4;<br />
encryption_algorithm blowfish 256;<br />
authentication_algorithm hmac_sha1;<br />
pfs_group 2;<br />
lifetime time 3600 secs;<br />
compression_algorithm deflate;<br />
}</p>
]]></description><link>https://forum.netgate.com/post/274477</link><guid isPermaLink="true">https://forum.netgate.com/post/274477</guid><dc:creator><![CDATA[expert_az]]></dc:creator><pubDate>Mon, 11 Apr 2011 07:00:11 GMT</pubDate></item></channel></rss>