Hello,
I've been banging my head against the wall trying to get the nortel branch
to work and have made some progress but am stuck and was wondering if
anyone could provide some insight.
I build the vpnc-nortel branch from the latest SVN.
This is the command I run:
sudo vpnc --gateway <mygateway> --id <groupId> --username <myusername>
--natt-mode none --pfs dh5 --dh dh2 --debug 3 --auth-mode gpassword
--vendor nortel
I'm first prompted for the group password, followed by my password. I know
the group password as I setup the windows client, and for my password, I
use a combination PIN and Token. In the windows avaya/nortel client PIN and
token are split, but from what I've read using vpnc you put your pass in as
PIN+token.
Here is my debug output
Enter IPSec secret for <groupId>@12.46.119.130:
vpnc version 0.5.3-548
hex_test: 00010203
S1 init_sockaddr
[2014-03-06 19:05:12]
S2 make_socket
[2014-03-06 19:05:12]
S3 setup_tunnel
[2014-03-06 19:05:12]
using interface tun0
S4 do_phase1_am
[2014-03-06 19:05:12]
S4.1 create_nonce
[2014-03-06 19:05:12]
i_cookie: 45ff9f07 370002ea
i_nonce:
eb77aaa9 d1be158a 3bcac481 cce33504 1ccc9e49
S4.2 dh setup
[2014-03-06 19:05:12]
dh_public:
7e00ed59 b0356f02 7f7c95cc a7025d5e 7d29c6d6 b95b5697 1f2866e2 627fca0b
1c56e557 847e1b84 6f2bf5f9 888d1adc 4c8a1da1 9585387d 9a1b0a06 ccd2cdde
cb76a02f de44f9b8 c6d15ef4 2ffe2c18 a8afb6a7 17a35b15 8e807fe8 bf354879
6cb82148 cdd93d87 22c0edeb 2fbc0c7c 8a68295a f6f4b407 b417e361 edcc212b
S4.3 AM packet_1
[2014-03-06 19:05:12]
sending: ========================>
BEGIN_PARSE
Received Packet Len: 596
i_cookie: 45ff9f07 370002ea
r_cookie: 00000000 00000000
payload: 01 (ISAKMP_PAYLOAD_SA)
isakmp_version: 10
exchange_type: 04 (ISAKMP_EXCHANGE_AGGRESSIVE)
flags: 00
message_id: 00000000
len: 00000254
PARSING PAYLOAD type: 01 (ISAKMP_PAYLOAD_SA)
next_type: 04 (ISAKMP_PAYLOAD_KE)
length: 017c
sa.doi: 00000001 (ISAKMP_DOI_IPSEC)
sa.situation: 00000001 (ISAKMP_IPSEC_SIT_IDENTITY_ONLY)
PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 0170
p.number: 00
p.prot_id: 01 (ISAKMP_IPSEC_PROTO_ISAKMP)
p.spi_size: 00
length: 0c
p.spi:
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 03 (ISAKMP_PAYLOAD_T)
length: 0020
t.number: 00
t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
t.attributes.type: 000e (IKE_ATTRIB_KEY_LENGTH)
(not dumping xauth data)
t.attributes.type: 0001 (IKE_ATTRIB_ENC)
t.attributes.u.attr_16: 0007 (IKE_ENC_AES_CBC)
t.attributes.type: 0002 (IKE_ATTRIB_HASH)
t.attributes.u.attr_16: 0002 (IKE_HASH_SHA)
t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED)
t.attributes.type: 7fff (IKE_ATTRIB_NORTEL_CLIENT_ID)
t.attributes.u.attr_16: 000a (NORTEL_CLIENT_V04_15)
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 03 (ISAKMP_PAYLOAD_T)
length: 0020
t.number: 01
t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
t.attributes.type: 000e (IKE_ATTRIB_KEY_LENGTH)
(not dumping xauth data)
t.attributes.type: 0001 (IKE_ATTRIB_ENC)
t.attributes.u.attr_16: 0007 (IKE_ENC_AES_CBC)
t.attributes.type: 0002 (IKE_ATTRIB_HASH)
t.attributes.u.attr_16: 0001 (IKE_HASH_MD5)
t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED)
t.attributes.type: 7fff (IKE_ATTRIB_NORTEL_CLIENT_ID)
t.attributes.u.attr_16: 000a (NORTEL_CLIENT_V04_15)
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 03 (ISAKMP_PAYLOAD_T)
length: 0020
t.number: 02
t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
t.attributes.type: 000e (IKE_ATTRIB_KEY_LENGTH)
(not dumping xauth data)
t.attributes.type: 0001 (IKE_ATTRIB_ENC)
t.attributes.u.attr_16: 0007 (IKE_ENC_AES_CBC)
t.attributes.type: 0002 (IKE_ATTRIB_HASH)
t.attributes.u.attr_16: 0002 (IKE_HASH_SHA)
t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED)
t.attributes.type: 7fff (IKE_ATTRIB_NORTEL_CLIENT_ID)
t.attributes.u.attr_16: 000a (NORTEL_CLIENT_V04_15)
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 03 (ISAKMP_PAYLOAD_T)
length: 0020
t.number: 03
t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
t.attributes.type: 000e (IKE_ATTRIB_KEY_LENGTH)
(not dumping xauth data)
t.attributes.type: 0001 (IKE_ATTRIB_ENC)
t.attributes.u.attr_16: 0007 (IKE_ENC_AES_CBC)
t.attributes.type: 0002 (IKE_ATTRIB_HASH)
t.attributes.u.attr_16: 0001 (IKE_HASH_MD5)
t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED)
t.attributes.type: 7fff (IKE_ATTRIB_NORTEL_CLIENT_ID)
t.attributes.u.attr_16: 000a (NORTEL_CLIENT_V04_15)
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 03 (ISAKMP_PAYLOAD_T)
length: 0020
t.number: 04
t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
t.attributes.type: 000e (IKE_ATTRIB_KEY_LENGTH)
(not dumping xauth data)
t.attributes.type: 0001 (IKE_ATTRIB_ENC)
t.attributes.u.attr_16: 0007 (IKE_ENC_AES_CBC)
t.attributes.type: 0002 (IKE_ATTRIB_HASH)
t.attributes.u.attr_16: 0002 (IKE_HASH_SHA)
t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED)
t.attributes.type: 7fff (IKE_ATTRIB_NORTEL_CLIENT_ID)
t.attributes.u.attr_16: 000a (NORTEL_CLIENT_V04_15)
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 03 (ISAKMP_PAYLOAD_T)
length: 0020
t.number: 05
t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
t.attributes.type: 000e (IKE_ATTRIB_KEY_LENGTH)
(not dumping xauth data)
t.attributes.type: 0001 (IKE_ATTRIB_ENC)
t.attributes.u.attr_16: 0007 (IKE_ENC_AES_CBC)
t.attributes.type: 0002 (IKE_ATTRIB_HASH)
t.attributes.u.attr_16: 0001 (IKE_HASH_MD5)
t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED)
t.attributes.type: 7fff (IKE_ATTRIB_NORTEL_CLIENT_ID)
t.attributes.u.attr_16: 000a (NORTEL_CLIENT_V04_15)
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 03 (ISAKMP_PAYLOAD_T)
length: 001c
t.number: 06
t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
t.attributes.type: 0001 (IKE_ATTRIB_ENC)
t.attributes.u.attr_16: 0005 (IKE_ENC_3DES_CBC)
t.attributes.type: 0002 (IKE_ATTRIB_HASH)
t.attributes.u.attr_16: 0002 (IKE_HASH_SHA)
t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED)
t.attributes.type: 7fff (IKE_ATTRIB_NORTEL_CLIENT_ID)
t.attributes.u.attr_16: 000a (NORTEL_CLIENT_V04_15)
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 03 (ISAKMP_PAYLOAD_T)
length: 001c
t.number: 07
t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
t.attributes.type: 0001 (IKE_ATTRIB_ENC)
t.attributes.u.attr_16: 0005 (IKE_ENC_3DES_CBC)
t.attributes.type: 0002 (IKE_ATTRIB_HASH)
t.attributes.u.attr_16: 0001 (IKE_HASH_MD5)
t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED)
t.attributes.type: 7fff (IKE_ATTRIB_NORTEL_CLIENT_ID)
t.attributes.u.attr_16: 000a (NORTEL_CLIENT_V04_15)
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 03 (ISAKMP_PAYLOAD_T)
length: 001c
t.number: 08
t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
t.attributes.type: 0001 (IKE_ATTRIB_ENC)
t.attributes.u.attr_16: 0001 (IKE_ENC_DES_CBC)
t.attributes.type: 0002 (IKE_ATTRIB_HASH)
t.attributes.u.attr_16: 0002 (IKE_HASH_SHA)
t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED)
t.attributes.type: 7fff (IKE_ATTRIB_NORTEL_CLIENT_ID)
t.attributes.u.attr_16: 000a (NORTEL_CLIENT_V04_15)
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 03 (ISAKMP_PAYLOAD_T)
length: 001c
t.number: 09
t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
t.attributes.type: 0001 (IKE_ATTRIB_ENC)
t.attributes.u.attr_16: 0001 (IKE_ENC_DES_CBC)
t.attributes.type: 0002 (IKE_ATTRIB_HASH)
t.attributes.u.attr_16: 0001 (IKE_HASH_MD5)
t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED)
t.attributes.type: 7fff (IKE_ATTRIB_NORTEL_CLIENT_ID)
t.attributes.u.attr_16: 000a (NORTEL_CLIENT_V04_15)
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 03 (ISAKMP_PAYLOAD_T)
length: 001c
t.number: 0a
t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
t.attributes.type: 0001 (IKE_ATTRIB_ENC)
t.attributes.u.attr_16: 0000 (IKE_ENC_NO_CBC)
t.attributes.type: 0002 (IKE_ATTRIB_HASH)
t.attributes.u.attr_16: 0002 (IKE_HASH_SHA)
t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED)
t.attributes.type: 7fff (IKE_ATTRIB_NORTEL_CLIENT_ID)
t.attributes.u.attr_16: 000a (NORTEL_CLIENT_V04_15)
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 001c
t.number: 0b
t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
t.attributes.type: 0001 (IKE_ATTRIB_ENC)
t.attributes.u.attr_16: 0000 (IKE_ENC_NO_CBC)
t.attributes.type: 0002 (IKE_ATTRIB_HASH)
t.attributes.u.attr_16: 0001 (IKE_HASH_MD5)
t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED)
t.attributes.type: 7fff (IKE_ATTRIB_NORTEL_CLIENT_ID)
t.attributes.u.attr_16: 000a (NORTEL_CLIENT_V04_15)
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 01 (ISAKMP_PAYLOAD_SA)
PARSING PAYLOAD type: 04 (ISAKMP_PAYLOAD_KE)
next_type: 0a (ISAKMP_PAYLOAD_NONCE)
length: 0084
ke.data:
7e00ed59 b0356f02 7f7c95cc a7025d5e 7d29c6d6 b95b5697 1f2866e2 627fca0b
1c56e557 847e1b84 6f2bf5f9 888d1adc 4c8a1da1 9585387d 9a1b0a06 ccd2cdde
cb76a02f de44f9b8 c6d15ef4 2ffe2c18 a8afb6a7 17a35b15 8e807fe8 bf354879
6cb82148 cdd93d87 22c0edeb 2fbc0c7c 8a68295a f6f4b407 b417e361 edcc212b
DONE PARSING PAYLOAD type: 04 (ISAKMP_PAYLOAD_KE)
PARSING PAYLOAD type: 0a (ISAKMP_PAYLOAD_NONCE)
next_type: 05 (ISAKMP_PAYLOAD_ID)
length: 0018
ke.data:
eb77aaa9 d1be158a 3bcac481 cce33504 1ccc9e49
DONE PARSING PAYLOAD type: 0a (ISAKMP_PAYLOAD_NONCE)
PARSING PAYLOAD type: 05 (ISAKMP_PAYLOAD_ID)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 0020
id.type: 0b (ISAKMP_IPSEC_ID_KEY_ID)
id.protocol: 11
id.port: 01f4
id.data:
2933da83 3b61be46 9ae8ff79 ef2ba769 c03dadc9 00000000
DONE PARSING PAYLOAD type: 05 (ISAKMP_PAYLOAD_ID)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
PARSE_OK
receiving: <========================
[2014-03-06 19:05:12]
S4.4 AM_packet2
[2014-03-06 19:05:12]
BEGIN_PARSE
Received Packet Len: 280
i_cookie: 45ff9f07 370002ea
r_cookie: 7617f0ef 973575a9
payload: 01 (ISAKMP_PAYLOAD_SA)
isakmp_version: 10
exchange_type: 04 (ISAKMP_EXCHANGE_AGGRESSIVE)
flags: 00
message_id: 00000000
len: 00000118
PARSING PAYLOAD type: 01 (ISAKMP_PAYLOAD_SA)
next_type: 04 (ISAKMP_PAYLOAD_KE)
length: 0030
sa.doi: 00000001 (ISAKMP_DOI_IPSEC)
sa.situation: 00000001 (ISAKMP_IPSEC_SIT_IDENTITY_ONLY)
PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 0024
p.number: 00
p.prot_id: 01 (ISAKMP_IPSEC_PROTO_ISAKMP)
p.spi_size: 00
length: 01
p.spi:
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 001c
t.number: 06
t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
t.attributes.type: 0001 (IKE_ATTRIB_ENC)
t.attributes.u.attr_16: 0005 (IKE_ENC_3DES_CBC)
t.attributes.type: 0002 (IKE_ATTRIB_HASH)
t.attributes.u.attr_16: 0002 (IKE_HASH_SHA)
t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED)
t.attributes.type: 7fff (IKE_ATTRIB_NORTEL_CLIENT_ID)
t.attributes.u.attr_16: 000a (NORTEL_CLIENT_V04_15)
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 01 (ISAKMP_PAYLOAD_SA)
PARSING PAYLOAD type: 04 (ISAKMP_PAYLOAD_KE)
next_type: 0a (ISAKMP_PAYLOAD_NONCE)
length: 0084
ke.data:
ca5d4e7f 7620e92a dcd93fd9 4111ebcd 2ca9f00a 0784697d 4264f6bc 23320edb
6d8ac580 db63edc7 a3dfd81a 87e9e828 847bf7c1 c3cd7564 c55f206c 70363d5b
508da453 66c077df 7cadb887 21ff2459 44e31135 b4b63b9a 02bcda4d bdc8be9b
b57b22da 2091232c d4b0f600 57d4d05d 4b0b02f6 a6ce9d22 68eee1da f17a5c0e
DONE PARSING PAYLOAD type: 04 (ISAKMP_PAYLOAD_KE)
PARSING PAYLOAD type: 0a (ISAKMP_PAYLOAD_NONCE)
next_type: 05 (ISAKMP_PAYLOAD_ID)
length: 0018
ke.data:
58ecfedf e7ed6ba7 e2a43d96 62059964 965e0071
DONE PARSING PAYLOAD type: 0a (ISAKMP_PAYLOAD_NONCE)
PARSING PAYLOAD type: 05 (ISAKMP_PAYLOAD_ID)
next_type: 08 (ISAKMP_PAYLOAD_HASH)
length: 000c
id.type: 01 (ISAKMP_IPSEC_ID_IPV4_ADDR)
id.protocol: 00
id.port: 0000
id.data: 0c2e7782
DONE PARSING PAYLOAD type: 05 (ISAKMP_PAYLOAD_ID)
PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
next_type: 0d (ISAKMP_PAYLOAD_VID)
length: 0018
ke.data:
f1ffffa9 cbf5d1b2 464ad1e3 7266d2d5 042ff304
DONE PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 000c
ke.data: 424e4553 0000000a
(Nortel Contivity v10)
DONE PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
PARSE_OK
IKE SA selected psk-3des-sha1
unknown ISAKMP_PAYLOAD_VID: 424e4553 0000000a
dh_shared_secret:
331a0a31 bfa189c5 0de35ac1 51852339 cde4d76b b99e1617 ab798e73 d522ddfc
28dec30b 4b2d7630 b71f718a 9cc6686f f2b6c4c6 7b853ed6 816186f4 b5bd4fc1
dc77b119 48d2f72b e4d0976c 2eee0283 de381577 0df94873 8137bb13 a6fe8e81
ba252f91 26d71bac 7e4f4a11 925ff610 68168fe0 c9e46146 7e61f28c 932873a2
skeyid:
9a46a7e0 0d4429e4 2b28be65 2520bd03 41265f25
expected hash:
f1ffffa9 cbf5d1b2 464ad1e3 7266d2d5 042ff304
received hash:
f1ffffa9 cbf5d1b2 464ad1e3 7266d2d5 042ff304
returned_hash:
69eb0223 72176634 d0e346c5 781029c0 6ccfe970
psk_hash:
faf0ad23 0d907030 f946bd36 eca834c0 de68bdd9
dh_shared_secret:
331a0a31 bfa189c5 0de35ac1 51852339 cde4d76b b99e1617 ab798e73 d522ddfc
28dec30b 4b2d7630 b71f718a 9cc6686f f2b6c4c6 7b853ed6 816186f4 b5bd4fc1
dc77b119 48d2f72b e4d0976c 2eee0283 de381577 0df94873 8137bb13 a6fe8e81
ba252f91 26d71bac 7e4f4a11 925ff610 68168fe0 c9e46146 7e61f28c 932873a2
skeyid_d:
e3dfee51 5a8d7188 733f0664 a6893a8b f1d288b8
skeyid_a:
6f2a0216 7da28c4c 97795560 3e6dc998 f81c9e10
skeyid_e:
67fce4e3 36ab3166 d9e1c981 66dea372 2d32b14b
enc-key:
a3d9d394 956a3494 99848b4b b259d76d e26d3dd6 b059d2c4
current_iv: a738d0b7 b753125a
NAT status: no NAT-T VID seen
S4.5 AM_packet3
[2014-03-06 19:05:12]
size = 36, blksz = 8, padding = 4
sending: ========================>
BEGIN_PARSE
Received Packet Len: 68
i_cookie: 45ff9f07 370002ea
r_cookie: 7617f0ef 973575a9
payload: 08 (ISAKMP_PAYLOAD_HASH)
isakmp_version: 10
exchange_type: 04 (ISAKMP_EXCHANGE_AGGRESSIVE)
flags: 01
message_id: 00000000
len: 00000044
PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
next_type: 0b (ISAKMP_PAYLOAD_N)
length: 0018
ke.data:
69eb0223 72176634 d0e346c5 781029c0 6ccfe970
DONE PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
PARSING PAYLOAD type: 0b (ISAKMP_PAYLOAD_N)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 000c
n.doi: 00000001 (ISAKMP_DOI_IPSEC)
n.protocol: 01 (ISAKMP_IPSEC_PROTO_ISAKMP)
n.spi_length: 00
n.type: 6002 (ISAKMP_N_IPSEC_INITIAL_CONTACT)
n.spi:
n.data:
DONE PARSING PAYLOAD type: 0b (ISAKMP_PAYLOAD_N)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
extra data: 00000000
PARSE_OK
initial_iv: 8a0dc580 5379e4f8
receiving: <========================
[2014-03-06 19:05:12]
S4.6 cleanup
[2014-03-06 19:05:12]
S5 do_phase2_xauth [1]
[2014-03-06 19:05:12]
S5.1 xauth_request
[2014-03-06 19:05:12]
S5.2 notice_check
[2014-03-06 19:05:12]
BEGIN_PARSE
Received Packet Len: 76
i_cookie: 45ff9f07 370002ea
r_cookie: 7617f0ef 973575a9
payload: 08 (ISAKMP_PAYLOAD_HASH)
isakmp_version: 10
exchange_type: 06 (ISAKMP_EXCHANGE_MODECFG_TRANSACTION)
flags: 01
message_id: f82f5b9a
len: 0000004c
PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
next_type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR)
length: 0018
ke.data:
cdb8391c 5e8222ec 4a92377d 12f4ae18 cd017bfc
DONE PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
PARSING PAYLOAD type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 0014
modecfg.type: 01 (ISAKMP_MODECFG_CFG_REQUEST)
modecfg.id: c800
t.attributes.type: 000d (ISAKMP_MODECFG_ATTRIB_INTERNAL_IP4_SUBNET)
t.attributes.u.attr_16: 0000
t.attributes.type: 000e (ISAKMP_MODECFG_ATTRIB_SUPPORTED_ATTRIBUTES)
t.attributes.u.lots.length: 0000
t.attributes.u.lots.data:
t.attributes.type: 000f (ISAKMP_MODECFG_ATTRIB_INTERNAL_IP6_SUBNET)
t.attributes.u.lots.length: 0000
t.attributes.u.lots.data:
DONE PARSING PAYLOAD type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
extra data: 00000000
PARSE_OK
hashlen: 20
u.hash.length: 20
expected_hash:
cdb8391c 5e8222ec 4a92377d 12f4ae18 cd017bfc
h->u.hash.data:
cdb8391c 5e8222ec 4a92377d 12f4ae18 cd017bfc
S5.3 type-is-xauth check
[2014-03-06 19:05:12]
S5.4 xauth type check
[2014-03-06 19:05:12]
S5.5 do xauth reply
[2014-03-06 19:05:12]
Password for VPN <myusername>@12.46.119.130:
size = 61, blksz = 8, padding = 3
sending: ========================>
BEGIN_PARSE
Received Packet Len: 92
i_cookie: 45ff9f07 370002ea
r_cookie: 7617f0ef 973575a9
payload: 08 (ISAKMP_PAYLOAD_HASH)
isakmp_version: 10
exchange_type: 06 (ISAKMP_EXCHANGE_MODECFG_TRANSACTION)
flags: 01
message_id: f82f5b9a
len: 0000005c
PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
next_type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR)
length: 0018
ke.data:
0a745129 e2398102 aa54eedd a7549e35 2a32dc80
DONE PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
PARSING PAYLOAD type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 0025
modecfg.type: 02 (ISAKMP_MODECFG_CFG_REPLY)
modecfg.id: c800
t.attributes.type: 000d (ISAKMP_MODECFG_ATTRIB_INTERNAL_IP4_SUBNET)
t.attributes.u.attr_16: 0001
t.attributes.type: 000e (ISAKMP_MODECFG_ATTRIB_SUPPORTED_ATTRIBUTES)
(not dumping xauth data length)
(not dumping xauth data)
t.attributes.type: 000f (ISAKMP_MODECFG_ATTRIB_INTERNAL_IP6_SUBNET)
(not dumping xauth data length)
(not dumping xauth data)
DONE PARSING PAYLOAD type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
extra data: 000000
PARSE_OK
receiving: <========================
[2014-03-06 19:05:18]
S5.2 notice_check
[2014-03-06 19:05:18]
BEGIN_PARSE
Received Packet Len: 60
i_cookie: 45ff9f07 370002ea
r_cookie: 7617f0ef 973575a9
payload: 08 (ISAKMP_PAYLOAD_HASH)
isakmp_version: 10
exchange_type: 06 (ISAKMP_EXCHANGE_MODECFG_TRANSACTION)
flags: 01
message_id: f82f5b9a
len: 0000003c
PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
next_type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR)
length: 0018
ke.data:
b2ae1c3b 2f050c61 a052a943 13bfc887 635cf5ac
DONE PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
PARSING PAYLOAD type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 0008
modecfg.type: 06 (ISAKMP_MODECFG_CFG_NORTEL_ERR)
modecfg.id: c800
DONE PARSING PAYLOAD type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
PARSE_OK
hashlen: 20
u.hash.length: 20
expected_hash:
b2ae1c3b 2f050c61 a052a943 13bfc887 635cf5ac
h->u.hash.data:
b2ae1c3b 2f050c61 a052a943 13bfc887 635cf5ac
S5.3 type-is-xauth check
[2014-03-06 19:05:18]
authentication failed
S5.6 process xauth set
[2014-03-06 19:05:18]
S5.8 xauth done
[2014-03-06 19:05:18]
S6 do_phase2_config [1]
[2014-03-06 19:05:18]
receiving: <========================
[2014-03-06 19:05:18]
S6.2 phase2_config receive modecfg
[2014-03-06 19:05:18]
BEGIN_PARSE
Received Packet Len: 84
i_cookie: 45ff9f07 370002ea
r_cookie: 7617f0ef 973575a9
payload: 08 (ISAKMP_PAYLOAD_HASH)
isakmp_version: 10
exchange_type: 05 (ISAKMP_EXCHANGE_INFORMATIONAL)
flags: 01
message_id: 294f04e6
len: 00000054
PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
next_type: 0c (ISAKMP_PAYLOAD_D)
length: 0018
ke.data:
a9cd0576 83cbd42d 1b7a939a 3e80006d f7748338
DONE PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
PARSING PAYLOAD type: 0c (ISAKMP_PAYLOAD_D)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 001c
d.doi: 00000001 (ISAKMP_DOI_IPSEC)
d.protocol: 01 (ISAKMP_IPSEC_PROTO_ISAKMP)
d.spi_length: 10
d.num_spi: 0001
d.spi: 45ff9f07 370002ea 7617f0ef 973575a9
DONE PARSING PAYLOAD type: 0c (ISAKMP_PAYLOAD_D)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
extra data: 00000000
PARSE_OK
hashlen: 20
u.hash.length: 20
expected_hash:
a9cd0576 83cbd42d 1b7a939a 3e80006d f7748338
h->u.hash.data:
a9cd0576 83cbd42d 1b7a939a 3e80006d f7748338
got delete for old connection, ignoring..
vpnc: no response from target
Regards,
--
Cole
I've been banging my head against the wall trying to get the nortel branch
to work and have made some progress but am stuck and was wondering if
anyone could provide some insight.
I build the vpnc-nortel branch from the latest SVN.
This is the command I run:
sudo vpnc --gateway <mygateway> --id <groupId> --username <myusername>
--natt-mode none --pfs dh5 --dh dh2 --debug 3 --auth-mode gpassword
--vendor nortel
I'm first prompted for the group password, followed by my password. I know
the group password as I setup the windows client, and for my password, I
use a combination PIN and Token. In the windows avaya/nortel client PIN and
token are split, but from what I've read using vpnc you put your pass in as
PIN+token.
Here is my debug output
Enter IPSec secret for <groupId>@12.46.119.130:
vpnc version 0.5.3-548
hex_test: 00010203
S1 init_sockaddr
[2014-03-06 19:05:12]
S2 make_socket
[2014-03-06 19:05:12]
S3 setup_tunnel
[2014-03-06 19:05:12]
using interface tun0
S4 do_phase1_am
[2014-03-06 19:05:12]
S4.1 create_nonce
[2014-03-06 19:05:12]
i_cookie: 45ff9f07 370002ea
i_nonce:
eb77aaa9 d1be158a 3bcac481 cce33504 1ccc9e49
S4.2 dh setup
[2014-03-06 19:05:12]
dh_public:
7e00ed59 b0356f02 7f7c95cc a7025d5e 7d29c6d6 b95b5697 1f2866e2 627fca0b
1c56e557 847e1b84 6f2bf5f9 888d1adc 4c8a1da1 9585387d 9a1b0a06 ccd2cdde
cb76a02f de44f9b8 c6d15ef4 2ffe2c18 a8afb6a7 17a35b15 8e807fe8 bf354879
6cb82148 cdd93d87 22c0edeb 2fbc0c7c 8a68295a f6f4b407 b417e361 edcc212b
S4.3 AM packet_1
[2014-03-06 19:05:12]
sending: ========================>
BEGIN_PARSE
Received Packet Len: 596
i_cookie: 45ff9f07 370002ea
r_cookie: 00000000 00000000
payload: 01 (ISAKMP_PAYLOAD_SA)
isakmp_version: 10
exchange_type: 04 (ISAKMP_EXCHANGE_AGGRESSIVE)
flags: 00
message_id: 00000000
len: 00000254
PARSING PAYLOAD type: 01 (ISAKMP_PAYLOAD_SA)
next_type: 04 (ISAKMP_PAYLOAD_KE)
length: 017c
sa.doi: 00000001 (ISAKMP_DOI_IPSEC)
sa.situation: 00000001 (ISAKMP_IPSEC_SIT_IDENTITY_ONLY)
PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 0170
p.number: 00
p.prot_id: 01 (ISAKMP_IPSEC_PROTO_ISAKMP)
p.spi_size: 00
length: 0c
p.spi:
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 03 (ISAKMP_PAYLOAD_T)
length: 0020
t.number: 00
t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
t.attributes.type: 000e (IKE_ATTRIB_KEY_LENGTH)
(not dumping xauth data)
t.attributes.type: 0001 (IKE_ATTRIB_ENC)
t.attributes.u.attr_16: 0007 (IKE_ENC_AES_CBC)
t.attributes.type: 0002 (IKE_ATTRIB_HASH)
t.attributes.u.attr_16: 0002 (IKE_HASH_SHA)
t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED)
t.attributes.type: 7fff (IKE_ATTRIB_NORTEL_CLIENT_ID)
t.attributes.u.attr_16: 000a (NORTEL_CLIENT_V04_15)
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 03 (ISAKMP_PAYLOAD_T)
length: 0020
t.number: 01
t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
t.attributes.type: 000e (IKE_ATTRIB_KEY_LENGTH)
(not dumping xauth data)
t.attributes.type: 0001 (IKE_ATTRIB_ENC)
t.attributes.u.attr_16: 0007 (IKE_ENC_AES_CBC)
t.attributes.type: 0002 (IKE_ATTRIB_HASH)
t.attributes.u.attr_16: 0001 (IKE_HASH_MD5)
t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED)
t.attributes.type: 7fff (IKE_ATTRIB_NORTEL_CLIENT_ID)
t.attributes.u.attr_16: 000a (NORTEL_CLIENT_V04_15)
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 03 (ISAKMP_PAYLOAD_T)
length: 0020
t.number: 02
t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
t.attributes.type: 000e (IKE_ATTRIB_KEY_LENGTH)
(not dumping xauth data)
t.attributes.type: 0001 (IKE_ATTRIB_ENC)
t.attributes.u.attr_16: 0007 (IKE_ENC_AES_CBC)
t.attributes.type: 0002 (IKE_ATTRIB_HASH)
t.attributes.u.attr_16: 0002 (IKE_HASH_SHA)
t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED)
t.attributes.type: 7fff (IKE_ATTRIB_NORTEL_CLIENT_ID)
t.attributes.u.attr_16: 000a (NORTEL_CLIENT_V04_15)
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 03 (ISAKMP_PAYLOAD_T)
length: 0020
t.number: 03
t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
t.attributes.type: 000e (IKE_ATTRIB_KEY_LENGTH)
(not dumping xauth data)
t.attributes.type: 0001 (IKE_ATTRIB_ENC)
t.attributes.u.attr_16: 0007 (IKE_ENC_AES_CBC)
t.attributes.type: 0002 (IKE_ATTRIB_HASH)
t.attributes.u.attr_16: 0001 (IKE_HASH_MD5)
t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED)
t.attributes.type: 7fff (IKE_ATTRIB_NORTEL_CLIENT_ID)
t.attributes.u.attr_16: 000a (NORTEL_CLIENT_V04_15)
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 03 (ISAKMP_PAYLOAD_T)
length: 0020
t.number: 04
t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
t.attributes.type: 000e (IKE_ATTRIB_KEY_LENGTH)
(not dumping xauth data)
t.attributes.type: 0001 (IKE_ATTRIB_ENC)
t.attributes.u.attr_16: 0007 (IKE_ENC_AES_CBC)
t.attributes.type: 0002 (IKE_ATTRIB_HASH)
t.attributes.u.attr_16: 0002 (IKE_HASH_SHA)
t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED)
t.attributes.type: 7fff (IKE_ATTRIB_NORTEL_CLIENT_ID)
t.attributes.u.attr_16: 000a (NORTEL_CLIENT_V04_15)
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 03 (ISAKMP_PAYLOAD_T)
length: 0020
t.number: 05
t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
t.attributes.type: 000e (IKE_ATTRIB_KEY_LENGTH)
(not dumping xauth data)
t.attributes.type: 0001 (IKE_ATTRIB_ENC)
t.attributes.u.attr_16: 0007 (IKE_ENC_AES_CBC)
t.attributes.type: 0002 (IKE_ATTRIB_HASH)
t.attributes.u.attr_16: 0001 (IKE_HASH_MD5)
t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED)
t.attributes.type: 7fff (IKE_ATTRIB_NORTEL_CLIENT_ID)
t.attributes.u.attr_16: 000a (NORTEL_CLIENT_V04_15)
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 03 (ISAKMP_PAYLOAD_T)
length: 001c
t.number: 06
t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
t.attributes.type: 0001 (IKE_ATTRIB_ENC)
t.attributes.u.attr_16: 0005 (IKE_ENC_3DES_CBC)
t.attributes.type: 0002 (IKE_ATTRIB_HASH)
t.attributes.u.attr_16: 0002 (IKE_HASH_SHA)
t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED)
t.attributes.type: 7fff (IKE_ATTRIB_NORTEL_CLIENT_ID)
t.attributes.u.attr_16: 000a (NORTEL_CLIENT_V04_15)
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 03 (ISAKMP_PAYLOAD_T)
length: 001c
t.number: 07
t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
t.attributes.type: 0001 (IKE_ATTRIB_ENC)
t.attributes.u.attr_16: 0005 (IKE_ENC_3DES_CBC)
t.attributes.type: 0002 (IKE_ATTRIB_HASH)
t.attributes.u.attr_16: 0001 (IKE_HASH_MD5)
t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED)
t.attributes.type: 7fff (IKE_ATTRIB_NORTEL_CLIENT_ID)
t.attributes.u.attr_16: 000a (NORTEL_CLIENT_V04_15)
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 03 (ISAKMP_PAYLOAD_T)
length: 001c
t.number: 08
t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
t.attributes.type: 0001 (IKE_ATTRIB_ENC)
t.attributes.u.attr_16: 0001 (IKE_ENC_DES_CBC)
t.attributes.type: 0002 (IKE_ATTRIB_HASH)
t.attributes.u.attr_16: 0002 (IKE_HASH_SHA)
t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED)
t.attributes.type: 7fff (IKE_ATTRIB_NORTEL_CLIENT_ID)
t.attributes.u.attr_16: 000a (NORTEL_CLIENT_V04_15)
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 03 (ISAKMP_PAYLOAD_T)
length: 001c
t.number: 09
t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
t.attributes.type: 0001 (IKE_ATTRIB_ENC)
t.attributes.u.attr_16: 0001 (IKE_ENC_DES_CBC)
t.attributes.type: 0002 (IKE_ATTRIB_HASH)
t.attributes.u.attr_16: 0001 (IKE_HASH_MD5)
t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED)
t.attributes.type: 7fff (IKE_ATTRIB_NORTEL_CLIENT_ID)
t.attributes.u.attr_16: 000a (NORTEL_CLIENT_V04_15)
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 03 (ISAKMP_PAYLOAD_T)
length: 001c
t.number: 0a
t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
t.attributes.type: 0001 (IKE_ATTRIB_ENC)
t.attributes.u.attr_16: 0000 (IKE_ENC_NO_CBC)
t.attributes.type: 0002 (IKE_ATTRIB_HASH)
t.attributes.u.attr_16: 0002 (IKE_HASH_SHA)
t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED)
t.attributes.type: 7fff (IKE_ATTRIB_NORTEL_CLIENT_ID)
t.attributes.u.attr_16: 000a (NORTEL_CLIENT_V04_15)
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 001c
t.number: 0b
t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
t.attributes.type: 0001 (IKE_ATTRIB_ENC)
t.attributes.u.attr_16: 0000 (IKE_ENC_NO_CBC)
t.attributes.type: 0002 (IKE_ATTRIB_HASH)
t.attributes.u.attr_16: 0001 (IKE_HASH_MD5)
t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED)
t.attributes.type: 7fff (IKE_ATTRIB_NORTEL_CLIENT_ID)
t.attributes.u.attr_16: 000a (NORTEL_CLIENT_V04_15)
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 01 (ISAKMP_PAYLOAD_SA)
PARSING PAYLOAD type: 04 (ISAKMP_PAYLOAD_KE)
next_type: 0a (ISAKMP_PAYLOAD_NONCE)
length: 0084
ke.data:
7e00ed59 b0356f02 7f7c95cc a7025d5e 7d29c6d6 b95b5697 1f2866e2 627fca0b
1c56e557 847e1b84 6f2bf5f9 888d1adc 4c8a1da1 9585387d 9a1b0a06 ccd2cdde
cb76a02f de44f9b8 c6d15ef4 2ffe2c18 a8afb6a7 17a35b15 8e807fe8 bf354879
6cb82148 cdd93d87 22c0edeb 2fbc0c7c 8a68295a f6f4b407 b417e361 edcc212b
DONE PARSING PAYLOAD type: 04 (ISAKMP_PAYLOAD_KE)
PARSING PAYLOAD type: 0a (ISAKMP_PAYLOAD_NONCE)
next_type: 05 (ISAKMP_PAYLOAD_ID)
length: 0018
ke.data:
eb77aaa9 d1be158a 3bcac481 cce33504 1ccc9e49
DONE PARSING PAYLOAD type: 0a (ISAKMP_PAYLOAD_NONCE)
PARSING PAYLOAD type: 05 (ISAKMP_PAYLOAD_ID)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 0020
id.type: 0b (ISAKMP_IPSEC_ID_KEY_ID)
id.protocol: 11
id.port: 01f4
id.data:
2933da83 3b61be46 9ae8ff79 ef2ba769 c03dadc9 00000000
DONE PARSING PAYLOAD type: 05 (ISAKMP_PAYLOAD_ID)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
PARSE_OK
receiving: <========================
[2014-03-06 19:05:12]
S4.4 AM_packet2
[2014-03-06 19:05:12]
BEGIN_PARSE
Received Packet Len: 280
i_cookie: 45ff9f07 370002ea
r_cookie: 7617f0ef 973575a9
payload: 01 (ISAKMP_PAYLOAD_SA)
isakmp_version: 10
exchange_type: 04 (ISAKMP_EXCHANGE_AGGRESSIVE)
flags: 00
message_id: 00000000
len: 00000118
PARSING PAYLOAD type: 01 (ISAKMP_PAYLOAD_SA)
next_type: 04 (ISAKMP_PAYLOAD_KE)
length: 0030
sa.doi: 00000001 (ISAKMP_DOI_IPSEC)
sa.situation: 00000001 (ISAKMP_IPSEC_SIT_IDENTITY_ONLY)
PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 0024
p.number: 00
p.prot_id: 01 (ISAKMP_IPSEC_PROTO_ISAKMP)
p.spi_size: 00
length: 01
p.spi:
PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 001c
t.number: 06
t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
t.attributes.type: 0001 (IKE_ATTRIB_ENC)
t.attributes.u.attr_16: 0005 (IKE_ENC_3DES_CBC)
t.attributes.type: 0002 (IKE_ATTRIB_HASH)
t.attributes.u.attr_16: 0002 (IKE_HASH_SHA)
t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
t.attributes.u.attr_16: 0001 (IKE_AUTH_PRESHARED)
t.attributes.type: 7fff (IKE_ATTRIB_NORTEL_CLIENT_ID)
t.attributes.u.attr_16: 000a (NORTEL_CLIENT_V04_15)
DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
DONE PARSING PAYLOAD type: 01 (ISAKMP_PAYLOAD_SA)
PARSING PAYLOAD type: 04 (ISAKMP_PAYLOAD_KE)
next_type: 0a (ISAKMP_PAYLOAD_NONCE)
length: 0084
ke.data:
ca5d4e7f 7620e92a dcd93fd9 4111ebcd 2ca9f00a 0784697d 4264f6bc 23320edb
6d8ac580 db63edc7 a3dfd81a 87e9e828 847bf7c1 c3cd7564 c55f206c 70363d5b
508da453 66c077df 7cadb887 21ff2459 44e31135 b4b63b9a 02bcda4d bdc8be9b
b57b22da 2091232c d4b0f600 57d4d05d 4b0b02f6 a6ce9d22 68eee1da f17a5c0e
DONE PARSING PAYLOAD type: 04 (ISAKMP_PAYLOAD_KE)
PARSING PAYLOAD type: 0a (ISAKMP_PAYLOAD_NONCE)
next_type: 05 (ISAKMP_PAYLOAD_ID)
length: 0018
ke.data:
58ecfedf e7ed6ba7 e2a43d96 62059964 965e0071
DONE PARSING PAYLOAD type: 0a (ISAKMP_PAYLOAD_NONCE)
PARSING PAYLOAD type: 05 (ISAKMP_PAYLOAD_ID)
next_type: 08 (ISAKMP_PAYLOAD_HASH)
length: 000c
id.type: 01 (ISAKMP_IPSEC_ID_IPV4_ADDR)
id.protocol: 00
id.port: 0000
id.data: 0c2e7782
DONE PARSING PAYLOAD type: 05 (ISAKMP_PAYLOAD_ID)
PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
next_type: 0d (ISAKMP_PAYLOAD_VID)
length: 0018
ke.data:
f1ffffa9 cbf5d1b2 464ad1e3 7266d2d5 042ff304
DONE PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 000c
ke.data: 424e4553 0000000a
(Nortel Contivity v10)
DONE PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
PARSE_OK
IKE SA selected psk-3des-sha1
unknown ISAKMP_PAYLOAD_VID: 424e4553 0000000a
dh_shared_secret:
331a0a31 bfa189c5 0de35ac1 51852339 cde4d76b b99e1617 ab798e73 d522ddfc
28dec30b 4b2d7630 b71f718a 9cc6686f f2b6c4c6 7b853ed6 816186f4 b5bd4fc1
dc77b119 48d2f72b e4d0976c 2eee0283 de381577 0df94873 8137bb13 a6fe8e81
ba252f91 26d71bac 7e4f4a11 925ff610 68168fe0 c9e46146 7e61f28c 932873a2
skeyid:
9a46a7e0 0d4429e4 2b28be65 2520bd03 41265f25
expected hash:
f1ffffa9 cbf5d1b2 464ad1e3 7266d2d5 042ff304
received hash:
f1ffffa9 cbf5d1b2 464ad1e3 7266d2d5 042ff304
returned_hash:
69eb0223 72176634 d0e346c5 781029c0 6ccfe970
psk_hash:
faf0ad23 0d907030 f946bd36 eca834c0 de68bdd9
dh_shared_secret:
331a0a31 bfa189c5 0de35ac1 51852339 cde4d76b b99e1617 ab798e73 d522ddfc
28dec30b 4b2d7630 b71f718a 9cc6686f f2b6c4c6 7b853ed6 816186f4 b5bd4fc1
dc77b119 48d2f72b e4d0976c 2eee0283 de381577 0df94873 8137bb13 a6fe8e81
ba252f91 26d71bac 7e4f4a11 925ff610 68168fe0 c9e46146 7e61f28c 932873a2
skeyid_d:
e3dfee51 5a8d7188 733f0664 a6893a8b f1d288b8
skeyid_a:
6f2a0216 7da28c4c 97795560 3e6dc998 f81c9e10
skeyid_e:
67fce4e3 36ab3166 d9e1c981 66dea372 2d32b14b
enc-key:
a3d9d394 956a3494 99848b4b b259d76d e26d3dd6 b059d2c4
current_iv: a738d0b7 b753125a
NAT status: no NAT-T VID seen
S4.5 AM_packet3
[2014-03-06 19:05:12]
size = 36, blksz = 8, padding = 4
sending: ========================>
BEGIN_PARSE
Received Packet Len: 68
i_cookie: 45ff9f07 370002ea
r_cookie: 7617f0ef 973575a9
payload: 08 (ISAKMP_PAYLOAD_HASH)
isakmp_version: 10
exchange_type: 04 (ISAKMP_EXCHANGE_AGGRESSIVE)
flags: 01
message_id: 00000000
len: 00000044
PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
next_type: 0b (ISAKMP_PAYLOAD_N)
length: 0018
ke.data:
69eb0223 72176634 d0e346c5 781029c0 6ccfe970
DONE PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
PARSING PAYLOAD type: 0b (ISAKMP_PAYLOAD_N)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 000c
n.doi: 00000001 (ISAKMP_DOI_IPSEC)
n.protocol: 01 (ISAKMP_IPSEC_PROTO_ISAKMP)
n.spi_length: 00
n.type: 6002 (ISAKMP_N_IPSEC_INITIAL_CONTACT)
n.spi:
n.data:
DONE PARSING PAYLOAD type: 0b (ISAKMP_PAYLOAD_N)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
extra data: 00000000
PARSE_OK
initial_iv: 8a0dc580 5379e4f8
receiving: <========================
[2014-03-06 19:05:12]
S4.6 cleanup
[2014-03-06 19:05:12]
S5 do_phase2_xauth [1]
[2014-03-06 19:05:12]
S5.1 xauth_request
[2014-03-06 19:05:12]
S5.2 notice_check
[2014-03-06 19:05:12]
BEGIN_PARSE
Received Packet Len: 76
i_cookie: 45ff9f07 370002ea
r_cookie: 7617f0ef 973575a9
payload: 08 (ISAKMP_PAYLOAD_HASH)
isakmp_version: 10
exchange_type: 06 (ISAKMP_EXCHANGE_MODECFG_TRANSACTION)
flags: 01
message_id: f82f5b9a
len: 0000004c
PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
next_type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR)
length: 0018
ke.data:
cdb8391c 5e8222ec 4a92377d 12f4ae18 cd017bfc
DONE PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
PARSING PAYLOAD type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 0014
modecfg.type: 01 (ISAKMP_MODECFG_CFG_REQUEST)
modecfg.id: c800
t.attributes.type: 000d (ISAKMP_MODECFG_ATTRIB_INTERNAL_IP4_SUBNET)
t.attributes.u.attr_16: 0000
t.attributes.type: 000e (ISAKMP_MODECFG_ATTRIB_SUPPORTED_ATTRIBUTES)
t.attributes.u.lots.length: 0000
t.attributes.u.lots.data:
t.attributes.type: 000f (ISAKMP_MODECFG_ATTRIB_INTERNAL_IP6_SUBNET)
t.attributes.u.lots.length: 0000
t.attributes.u.lots.data:
DONE PARSING PAYLOAD type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
extra data: 00000000
PARSE_OK
hashlen: 20
u.hash.length: 20
expected_hash:
cdb8391c 5e8222ec 4a92377d 12f4ae18 cd017bfc
h->u.hash.data:
cdb8391c 5e8222ec 4a92377d 12f4ae18 cd017bfc
S5.3 type-is-xauth check
[2014-03-06 19:05:12]
S5.4 xauth type check
[2014-03-06 19:05:12]
S5.5 do xauth reply
[2014-03-06 19:05:12]
Password for VPN <myusername>@12.46.119.130:
size = 61, blksz = 8, padding = 3
sending: ========================>
BEGIN_PARSE
Received Packet Len: 92
i_cookie: 45ff9f07 370002ea
r_cookie: 7617f0ef 973575a9
payload: 08 (ISAKMP_PAYLOAD_HASH)
isakmp_version: 10
exchange_type: 06 (ISAKMP_EXCHANGE_MODECFG_TRANSACTION)
flags: 01
message_id: f82f5b9a
len: 0000005c
PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
next_type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR)
length: 0018
ke.data:
0a745129 e2398102 aa54eedd a7549e35 2a32dc80
DONE PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
PARSING PAYLOAD type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 0025
modecfg.type: 02 (ISAKMP_MODECFG_CFG_REPLY)
modecfg.id: c800
t.attributes.type: 000d (ISAKMP_MODECFG_ATTRIB_INTERNAL_IP4_SUBNET)
t.attributes.u.attr_16: 0001
t.attributes.type: 000e (ISAKMP_MODECFG_ATTRIB_SUPPORTED_ATTRIBUTES)
(not dumping xauth data length)
(not dumping xauth data)
t.attributes.type: 000f (ISAKMP_MODECFG_ATTRIB_INTERNAL_IP6_SUBNET)
(not dumping xauth data length)
(not dumping xauth data)
DONE PARSING PAYLOAD type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
extra data: 000000
PARSE_OK
receiving: <========================
[2014-03-06 19:05:18]
S5.2 notice_check
[2014-03-06 19:05:18]
BEGIN_PARSE
Received Packet Len: 60
i_cookie: 45ff9f07 370002ea
r_cookie: 7617f0ef 973575a9
payload: 08 (ISAKMP_PAYLOAD_HASH)
isakmp_version: 10
exchange_type: 06 (ISAKMP_EXCHANGE_MODECFG_TRANSACTION)
flags: 01
message_id: f82f5b9a
len: 0000003c
PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
next_type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR)
length: 0018
ke.data:
b2ae1c3b 2f050c61 a052a943 13bfc887 635cf5ac
DONE PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
PARSING PAYLOAD type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 0008
modecfg.type: 06 (ISAKMP_MODECFG_CFG_NORTEL_ERR)
modecfg.id: c800
DONE PARSING PAYLOAD type: 0e (ISAKMP_PAYLOAD_MODECFG_ATTR)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
PARSE_OK
hashlen: 20
u.hash.length: 20
expected_hash:
b2ae1c3b 2f050c61 a052a943 13bfc887 635cf5ac
h->u.hash.data:
b2ae1c3b 2f050c61 a052a943 13bfc887 635cf5ac
S5.3 type-is-xauth check
[2014-03-06 19:05:18]
authentication failed
S5.6 process xauth set
[2014-03-06 19:05:18]
S5.8 xauth done
[2014-03-06 19:05:18]
S6 do_phase2_config [1]
[2014-03-06 19:05:18]
receiving: <========================
[2014-03-06 19:05:18]
S6.2 phase2_config receive modecfg
[2014-03-06 19:05:18]
BEGIN_PARSE
Received Packet Len: 84
i_cookie: 45ff9f07 370002ea
r_cookie: 7617f0ef 973575a9
payload: 08 (ISAKMP_PAYLOAD_HASH)
isakmp_version: 10
exchange_type: 05 (ISAKMP_EXCHANGE_INFORMATIONAL)
flags: 01
message_id: 294f04e6
len: 00000054
PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
next_type: 0c (ISAKMP_PAYLOAD_D)
length: 0018
ke.data:
a9cd0576 83cbd42d 1b7a939a 3e80006d f7748338
DONE PARSING PAYLOAD type: 08 (ISAKMP_PAYLOAD_HASH)
PARSING PAYLOAD type: 0c (ISAKMP_PAYLOAD_D)
next_type: 00 (ISAKMP_PAYLOAD_NONE)
length: 001c
d.doi: 00000001 (ISAKMP_DOI_IPSEC)
d.protocol: 01 (ISAKMP_IPSEC_PROTO_ISAKMP)
d.spi_length: 10
d.num_spi: 0001
d.spi: 45ff9f07 370002ea 7617f0ef 973575a9
DONE PARSING PAYLOAD type: 0c (ISAKMP_PAYLOAD_D)
PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
extra data: 00000000
PARSE_OK
hashlen: 20
u.hash.length: 20
expected_hash:
a9cd0576 83cbd42d 1b7a939a 3e80006d f7748338
h->u.hash.data:
a9cd0576 83cbd42d 1b7a939a 3e80006d f7748338
got delete for old connection, ignoring..
vpnc: no response from target
Regards,
--
Cole