[Aug 26 15:10:18]ikev2_packet_st_input_v1_create_sa: [10b9000/0] No IKE SA for packet; requesting permission to create one. [Aug 26 15:10:18]ikev2_packet_v1_start: Passing IKE v1.0 packet to IKEv1 library [Aug 26 15:10:18]ike_get_sa: Start, SA = { a8188a69 a19b70a0 - 00000000 00000000 } / 00000000, remote = MY-IP:39773 [Aug 26 15:10:18]ike_sa_allocate: Start, SA = { a8188a69 a19b70a0 - 20718e4c 4d12be9f } [Aug 26 15:10:18]ike_st_i_vid: VID[0..8] = 09002689 dfd6b712 ... [Aug 26 15:10:18]ike_st_i_vid: VID[0..16] = 4485152d 18b6bbcd ... [Aug 26 15:10:18]ike_st_i_vid: VID[0..16] = 16f6ca16 e4a4066d ... [Aug 26 15:10:18]ike_st_i_vid: VID[0..16] = 90cb8091 3ebb696e ... [Aug 26 15:10:18]ike_st_i_vid: VID[0..16] = 7d9419a6 5310ca6f ... [Aug 26 15:10:18]ike_st_i_vid: VID[0..16] = 4a131c81 07035845 ... [Aug 26 15:10:18]ike_st_i_vid: VID[0..20] = 4048b7d5 6ebce885 ... [Aug 26 15:10:18]ike_st_i_vid: VID[0..16] = afcad713 68a1f1c9 ... [Aug 26 15:10:18]ike_st_i_vid: VID[0..16] = 3b9031dc e4fcf88b ... [Aug 26 15:10:18]ike_st_i_vid: VID[0..16] = f14b94b7 bff1fef0 ... [Aug 26 15:10:18]ike_st_i_vid: VID[0..20] = 166f932d 55eb64d8 ... [Aug 26 15:10:18]ike_st_i_vid: VID[0..16] = 8404adf9 cda05760 ... [Aug 26 15:10:18]ike_st_i_vid: VID[0..16] = 12f5f28c 457168a9 ... [Aug 26 15:10:18]ike_st_i_id: Start [Aug 26 15:10:18]ike_st_i_sa_proposal: Start [Aug 26 15:10:18]ike_isakmp_sa_reply: Start [Aug 26 15:10:18]ike_state_restart_packet: Start, restart packet SA = { a8188a69 a19b70a0 - 1fd5b213 8cd76919}, nego = -1 [Aug 26 15:10:18]ike_st_i_sa_proposal: Start [Aug 26 15:10:18]ike_st_i_nonce: Start, nonce[0..20] = 0ced8cf1 8bf91d3b ... [Aug 26 15:10:18]ike_st_i_cert: Start [Aug 26 15:10:18]ike_st_i_hash_key: Start, no key_hash [Aug 26 15:10:18]ike_st_i_ke: Ke[0..128] = 36d8de22 2c465077 ... [Aug 26 15:10:18]ike_st_i_cr: Start [Aug 26 15:10:18]ike_st_i_private: Start [Aug 26 15:10:18]ike_st_o_sa_values: Start [Aug 26 15:10:18]ike_st_o_ke: Start [Aug 26 15:10:18]ike_st_o_nonce: Start [Aug 26 15:10:18]ike_policy_reply_isakmp_nonce_data_len: Start [Aug 26 15:10:18]ike_st_o_id: Start [Aug 26 15:10:18]ike_policy_reply_isakmp_id: Start [Aug 26 15:10:18]ike_state_restart_packet: Start, restart packet SA = { a8188a69 a19b70a0 - 1fd5b213 8cd76919}, nego = -1 [Aug 26 15:10:18]ike_st_o_id: Start [Aug 26 15:10:18]ike_st_o_certs_base: Start [Aug 26 15:10:18]ike_st_o_sig_or_hash: Start, auth_method = 4 [Aug 26 15:10:18]ike_st_o_hash: Start [Aug 26 15:10:18]ike_find_pre_shared_key: Find pre shared key key for SRX-IP:500, id = ipv4(any:0,[0..3]=SRX-IP) -> MY-IP:39773, id = usr@fqdn(any:0,[0..9]=vpn@hostname.pl) [Aug 26 15:10:18]ike_policy_reply_find_pre_shared_key: Start [Aug 26 15:10:18]ike_state_restart_packet: Start, restart packet SA = { a8188a69 a19b70a0 - 1fd5b213 8cd76919}, nego = -1 [Aug 26 15:10:18]ike_st_o_sig_or_hash: Start, auth_method = 4 [Aug 26 15:10:18]ike_st_o_hash: Start [Aug 26 15:10:18]ike_find_pre_shared_key: Find pre shared key key for SRX-IP:500, id = ipv4(any:0,[0..3]=SRX-IP) -> MY-IP:39773, id = usr@fqdn(any:0,[0..9]=vpn@hostname.pl) [Aug 26 15:10:18]ike_calc_mac: Start, initiator = false, local = true [Aug 26 15:10:18]ike_policy_reply_isakmp_vendor_ids: Start [Aug 26 15:10:18]ike_st_o_status_n: Start [Aug 26 15:10:18]ike_st_o_private: Start [Aug 26 15:10:18]ike_policy_reply_private_payload_out: Start [Aug 26 15:10:18]ike_policy_reply_private_payload_out: Start [Aug 26 15:10:18]ike_policy_reply_private_payload_out: Start [Aug 26 15:10:18]ike_st_o_calc_skeyid: Calculating skeyid [Aug 26 15:10:18]ike_send_packet: <-------- sending SA = { a8188a69 a19b70a0 - 1fd5b213 8cd76919}, len = 396, nego = -1, local ip= SRX-IP, dst = MY-IP:39773, routing table id = 0 [Aug 26 15:10:18]ike_sa_find: Found SA = { a8188a69 a19b70a0 - 1fd5b213 8cd76919 } [Aug 26 15:10:18]ikev2_packet_v1_start: Passing IKE v1.0 packet to IKEv1 library [Aug 26 15:10:18]ike_get_sa: Start, SA = { a8188a69 a19b70a0 - 1fd5b213 8cd76919 } / 00000000, remote = MY-IP:47579 [Aug 26 15:10:18]ike_sa_find: Found SA = { a8188a69 a19b70a0 - 1fd5b213 8cd76919 } [Aug 26 15:10:18]ike_st_i_hash: Start, hash[0..20] = 1fe79ab4 96ee4d35 ... [Aug 26 15:10:18]ike_calc_mac: Start, initiator = false, local = false [Aug 26 15:10:18]ike_st_i_cert: Start [Aug 26 15:10:18]ike_st_i_private: Start [Aug 26 15:10:18]ike_st_o_wait_done: Marking for waiting for done [Aug 26 15:10:18]ike_st_o_all_done: MESSAGE: Phase 1 { 0xa8188a69 a19b70a0 - 0x1fd5b213 8cd76919 } / 00000000, version = 1.0, xchg = Aggressive, auth_method = Pre shared keys with XAuth (initiator), Responder, cipher = aes-cbc, hash = sha1, [Aug 26 15:10:18]SRX-IP:500 (Responder) <-> MY-IP:39773 { a8188a69 a19b70a0 - 1fd5b213 8cd76919 [-1] / 0x00000000 } Aggr; MESSAGE: Phase 1 version = 1.0, auth_method = Pre shared keys with XAuth (initiator), cipher = aes-cbc [Aug 26 15:10:18]ike_send_notify: Connected, SA = { a8188a69 a19b70a0 - 1fd5b213 8cd76919}, nego = -1 [Aug 26 15:10:18]ike_sa_find: Found SA = { a8188a69 a19b70a0 - 1fd5b213 8cd76919 } [Aug 26 15:10:18]ikev2_packet_v1_start: Passing IKE v1.0 packet to IKEv1 library [Aug 26 15:10:18]ike_get_sa: Start, SA = { a8188a69 a19b70a0 - 1fd5b213 8cd76919 } / c1bd0078, remote = MY-IP:47579 [Aug 26 15:10:18]ike_sa_find: Found SA = { a8188a69 a19b70a0 - 1fd5b213 8cd76919 } [Aug 26 15:10:18]ike_st_o_done: ISAKMP SA negotiation done [Aug 26 15:10:18]ike_send_notify: Connected, SA = { a8188a69 a19b70a0 - 1fd5b213 8cd76919}, nego = -1 [Aug 26 15:10:18]ike_st_i_encrypt: Check that packet was encrypted succeeded [Aug 26 15:10:18]ike_st_i_gen_hash: Start, hash[0..20] = 0e0204a2 cad7ba4e ... [Aug 26 15:10:18]ike_st_i_n: Start, doi = 1, protocol = 1, code = Initial contact notification (24578), spi[0..16] = a8188a69 a19b70a0 ..., data[0..0] = 00000000 00000000 ... [Aug 26 15:10:18]ike_st_i_private: Start [Aug 26 15:10:18]ike_send_notify: Connected, SA = { a8188a69 a19b70a0 - 1fd5b213 8cd76919}, nego = 0 [Aug 26 15:10:18]ssh_ike_connect_cfg: Start, remote_name = :500, flags = 00008000 [Aug 26 15:10:18]ssh_ike_connect_cfg: SA = { a8188a69 a19b70a0 - 1fd5b213 8cd76919}, nego = 0 [Aug 26 15:10:18]ike_st_o_gen_hash: Start [Aug 26 15:10:18]ike_st_o_cfg_attr: Start [Aug 26 15:10:18]ike_st_o_private: Start [Aug 26 15:10:18]ike_policy_reply_private_payload_out: Start [Aug 26 15:10:18]ike_st_o_encrypt: Marking encryption for packet [Aug 26 15:10:18]ike_send_packet: <-------- sending SA = { a8188a69 a19b70a0 - 1fd5b213 8cd76919}, len = 76, nego = 0, local ip= SRX-IP, dst = MY-IP:47579, routing table id = 0 [Aug 26 15:10:18]ike_sa_find: Found SA = { a8188a69 a19b70a0 - 1fd5b213 8cd76919 } [Aug 26 15:10:18]ikev2_packet_v1_start: Passing IKE v1.0 packet to IKEv1 library [Aug 26 15:10:18]ike_get_sa: Start, SA = { a8188a69 a19b70a0 - 1fd5b213 8cd76919 } / 0cd6f61b, remote = MY-IP:47579 [Aug 26 15:10:18]ike_sa_find: Found SA = { a8188a69 a19b70a0 - 1fd5b213 8cd76919 } [Aug 26 15:10:18]ike_st_i_encrypt: Check that packet was encrypted succeeded [Aug 26 15:10:18]ike_st_i_gen_hash: Start, hash[0..20] = 2320112c eb82824e ... [Aug 26 15:10:18]ike_st_i_cfg_attr: Start [Aug 26 15:10:18]ike_st_i_private: Start [Aug 26 15:10:18]ike_st_o_cfg_wait_done: Marking for waiting for done [Aug 26 15:10:18]ike_st_o_cfg_wait_done: MESSAGE: CFG Mode wait done [Aug 26 15:10:18]:500 (Initiator) <-> MY-IP:47579 { a8188a69 a19b70a0 - 1fd5b213 8cd76919 [0] / 0x0cd6f61b } CFG; MESSAGE: CFG Mode wait done [Aug 26 15:10:18]ike_send_notify: Connected, SA = { a8188a69 a19b70a0 - 1fd5b213 8cd76919}, nego = 0 [Aug 26 15:10:23]ike_sa_find: Found SA = { a8188a69 a19b70a0 - 1fd5b213 8cd76919 } [Aug 26 15:10:23]ikev2_packet_v1_start: Passing IKE v1.0 packet to IKEv1 library [Aug 26 15:10:23]ike_get_sa: Start, SA = { a8188a69 a19b70a0 - 1fd5b213 8cd76919 } / 0cd6f61b, remote = MY-IP:47579 [Aug 26 15:10:23]ike_sa_find: Found SA = { a8188a69 a19b70a0 - 1fd5b213 8cd76919 } [Aug 26 15:10:25]ike_sa_find: Found SA = { a8188a69 a19b70a0 - 1fd5b213 8cd76919 } [Aug 26 15:10:25]ikev2_packet_v1_start: Passing IKE v1.0 packet to IKEv1 library [Aug 26 15:10:25]ike_get_sa: Start, SA = { a8188a69 a19b70a0 - 1fd5b213 8cd76919 } / 919675f5, remote = MY-IP:47579 [Aug 26 15:10:25]ike_sa_find: Found SA = { a8188a69 a19b70a0 - 1fd5b213 8cd76919 } [Aug 26 15:10:25]ike_st_i_encrypt: Check that packet was encrypted succeeded [Aug 26 15:10:25]ike_st_i_gen_hash: Start, hash[0..20] = 89ae80af 155cfa2c ... [Aug 26 15:10:25]ike_st_i_d: Start, doi = 1, protocol = 1, spis[0..1][0..16] = [a8188a69 a19b70a0 ...] [Aug 26 15:10:25]ike_sa_find: Found SA = { a8188a69 a19b70a0 - 1fd5b213 8cd76919 } [Aug 26 15:10:25]:4500 (Responder) <-> MY-IP:47579 { a8188a69 a19b70a0 - 1fd5b213 8cd76919 [1] / 0x919675f5 } Info; delete spi[16] = 0xa8188a69 a19b70a0 1fd5b213 8cd76919 [Aug 26 15:10:25]ike_st_i_private: Start [Aug 26 15:10:25]ike_send_notify: Connected, SA = { a8188a69 a19b70a0 - 1fd5b213 8cd76919}, nego = 1 [Aug 26 15:10:25]ssh_ike_tunnel_table_entry_delete: Deleting tunnel_id: 0 from IKE tunnel table [Aug 26 15:10:25]ssh_ike_tunnel_table_entry_delete: The tunnel id: 0 doesn't exist in IKE tunnel table [Aug 26 15:10:25]ike_sa_delete: Start, SA = { a8188a69 a19b70a0 - 1fd5b213 8cd76919 }