May 4 14:22:07 firewall kmd[1212]: IKE Phase-1: Negotiation completed; SA expires on Fri May 05 2017 14:22:06 { 5727c9b2 4e5d5f63 - 0abc2346 99f6ea88 } - [local_id=ipv4(any:0,[0..3]=1.1.1.142), local_ip=1.1.1.142, local_port=500, remote_id=ipv4(any:0,[0..3]=6.1.1.85), remote_ip=6.1.1.85, remote_port=500] May 4 14:22:07 firewall kmd[1212]: IKE Phase-1: (Responder) The symmetric crypto key has been generated Successfully [local_ip=1.1.1.142, local_port=0, remote_ip=6.1.1.85, remote_port=0] May 4 14:22:12 firewall kmd[1212]: IKE Phase-2: (Initiator) The symmetric crypto key has been generated Successfully [local_ip=1.1.1.142, local_port=500, remote_ip=6.1.1.85, remote_port=500] May 4 14:22:12 firewall kmd[1212]: KMD_PM_SA_ESTABLISHED: Local gateway: 1.1.1.142, Remote gateway: 6.1.1.85, Local ID: ipv4_subnet(any:0,[0..7]=0.0.0.0/0), Remote ID: ipv4_subnet(any:0,[0..7]=0.0.0.0/0), Direction: inbound, SPI: 392852ae, AUX-SPI: 0, Mode: tunnel, Type: dynamic May 4 14:22:12 firewall kmd[1212]: KMD_PM_SA_ESTABLISHED: Local gateway: 1.1.1.142, Remote gateway: 6.1.1.85, Local ID: ipv4_subnet(any:0,[0..7]=0.0.0.0/0), Remote ID: ipv4_subnet(any:0,[0..7]=0.0.0.0/0), Direction: outbound, SPI: 4ae220bb, AUX-SPI: 0, Mode: tunnel, Type: dynamic May 4 14:22:12 firewall kmd[1212]: IKE Phase-2: Completed negotiations, connection established with tunnel-ID:131073 and lifetime 1418 seconds/0 KB - Local gateway: 1.1.1.142, Remote gateway: 6.1.1.85, Local ID: ipv4_subnet(any:0,[0..7]=0.0.0.0/0), Remote ID: ipv4_subnet(any:0,[0..7]=0.0.0.0/0), Protocol: ESP, Auth algo: sha256, Encryption algo: aes-cbc, Direction: inbound, SPI: 392852ae, AUX-SPI: 0, Mode: tunnel, Type: dynamic May 4 14:22:12 firewall kmd[1212]: IKE Phase-2: Completed negotiations, connection established with tunnel-ID:131073 and lifetime 1418 seconds/0 KB - Local gateway: 1.1.1.142, Remote gateway: 6.1.1.85, Local ID: ipv4_subnet(any:0,[0..7]=0.0.0.0/0), Remote ID: ipv4_subnet(any:0,[0..7]=0.0.0.0/0), Protocol: ESP, Auth algo: sha256, Encryption algo: aes-cbc, Direction: outbound, SPI: 4ae220bb, AUX-SPI: 0, Mode: tunnel, Type: dynamic May 4 14:22:16 firewall kmd[1212]: IKE Phase-1: Negotiation completed; SA expires on Fri May 05 2017 14:22:16 { 99436c92 8bb013c4 - 5e9f241d 3239923b } - [local_id=ipv4(any:0,[0..3]=1.1.1.142), local_ip=1.1.1.142, local_port=500, remote_id=ipv4(any:0,[0..3]=6.1.1.85), remote_ip=6.1.1.85, remote_port=500] May 4 14:22:16 firewall kmd[1212]: IKE Phase-1: (Responder) The symmetric crypto key has been generated Successfully [local_ip=1.1.1.142, local_port=0, remote_ip=6.1.1.85, remote_port=0] May 4 14:22:17 firewall kmd[1212]: IKE Phase-2: (Initiator) The symmetric crypto key has been generated Successfully [local_ip=1.1.1.142, local_port=500, remote_ip=6.1.1.85, remote_port=500] May 4 14:22:17 firewall kmd[1212]: KMD_PM_SA_ESTABLISHED: Local gateway: 1.1.1.142, Remote gateway: 6.1.1.85, Local ID: ipv4_subnet(any:0,[0..7]=0.0.0.0/0), Remote ID: ipv4_subnet(any:0,[0..7]=0.0.0.0/0), Direction: inbound, SPI: 1ec3559d, AUX-SPI: 0, Mode: tunnel, Type: dynamic May 4 14:22:17 firewall kmd[1212]: KMD_PM_SA_ESTABLISHED: Local gateway: 1.1.1.142, Remote gateway: 6.1.1.85, Local ID: ipv4_subnet(any:0,[0..7]=0.0.0.0/0), Remote ID: ipv4_subnet(any:0,[0..7]=0.0.0.0/0), Direction: outbound, SPI: 4ae220bc, AUX-SPI: 0, Mode: tunnel, Type: dynamic May 4 14:22:17 firewall kmd[1212]: IKE Phase-2: Completed negotiations, connection established with tunnel-ID:131073 and lifetime 1410 seconds/0 KB - Local gateway: 1.1.1.142, Remote gateway: 6.1.1.85, Local ID: ipv4_subnet(any:0,[0..7]=0.0.0.0/0), Remote ID: ipv4_subnet(any:0,[0..7]=0.0.0.0/0), Protocol: ESP, Auth algo: sha256, Encryption algo: aes-cbc, Direction: inbound, SPI: 1ec3559d, AUX-SPI: 0, Mode: tunnel, Type: dynamic May 4 14:22:17 firewall kmd[1212]: IKE Phase-2: Completed negotiations, connection established with tunnel-ID:131073 and lifetime 1410 seconds/0 KB - Local gateway: 1.1.1.142, Remote gateway: 6.1.1.85, Local ID: ipv4_subnet(any:0,[0..7]=0.0.0.0/0), Remote ID: ipv4_subnet(any:0,[0..7]=0.0.0.0/0), Protocol: ESP, Auth algo: sha256, Encryption algo: aes-cbc, Direction: outbound, SPI: 4ae220bc, AUX-SPI: 0, Mode: tunnel, Type: dynamic May 4 14:25:17 firewall kmd[1212]: IKE Phase-2 Failure: IKE Phase-2 negotiation retry limit reached [spi=3ffed228, src_ip=1.1.1.142, dst_ip=6.1.1.85]