Advanced
Mailing List Archive

Mailing List Archive

  1. Home >
  2. vpnc>
  3. devel
VPN and routes
justin at onyourmark
Jun 7, 2004, 8:36 PM
Post #1 of 7 (3452 views)
Permalink
I finally managed to get all my setup issues resolved and made a connection to the concentrator. Thanks to everyone that helped me with this last week.

I do have some new questions however, pertaining to the routes needed to push the traffic I've been trying to ping boxes on the other side of the vpn, but with no luck. Here's the steps I've taken:

1) Modified and ran /usr/local/etc/rc.d/vpnc.sh-sample start.
2) Opened up two sessions to the box.
3) In session #1, I ran tcpdump -i tun0.
4) In session #2, I ran ping on an IP on the other side of the VPN.

Result:
ping says 100% packet loss.
tcpdump outputs this:
18:26:55.168478 192.168.100.105 > 172.16.1.28: icmp: echo request

Also, while tcpdump was running, some other traffic came in, which looked like this:
18:29:07.217986 192.168.100.105.4436 > 209.153.128.4.domain: 12908+ PTR? 36.1.1.10.in-addr.arpa. (40)

Just for reference, here's my config info:

ifconfig
xl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
options=1<rxcsum>
inet 10.1.1.222 netmask 0xffffff00 broadcast 10.1.1.255
inet6 fe80::201:3ff:fe27:7083%xl0 prefixlen 64 scopeid 0x1
ether 00:01:03:27:70:83
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
tun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1412
inet6 fe80::201:3ff:fe27:7083%tun0 prefixlen 64 scopeid 0x7
inet 192.168.100.105 --> 192.168.100.105 netmask 0xffffffff
Opened by PID 272

netstat
Internet:
Destination Gateway Flags Refs Use Netif Expire
default tun0 USc 1 153 tun0
10.1.1/24 link#1 UC 7 0 xl0
10.1.1.1 00:06:5b:ec:ee:6b UHLW 1 530 xl0 1171
10.1.1.3 00:04:5a:4f:af:e5 UHLW 1 0 xl0 1157
10.1.1.35 00:50:da:24:bd:44 UHLW 0 29 xl0 942
10.1.1.36 00:05:5d:4c:8b:2d UHLW 1 1093 xl0 860
10.1.1.45 00:50:da:23:61:bb UHLW 4 198 xl0 905
10.1.1.71 00:e0:7d:72:23:89 UHLW 2 703 xl0 988
10.1.1.255 ff:ff:ff:ff:ff:ff UHLWb 3 27 xl0
127.0.0.1 127.0.0.1 UH 0 0 lo0
192.168.100.105 192.168.100.105 UH 0 0 tun0
208.23.198.215 10.1.1.3 UGHS 1 196 xl0

vpnc.conf
IPSec gateway 208.23.198.215
IPSec ID ifb_group
IPSec secret ST8j+f5?R2@emE
Xauth username ifb.user
Xauth password Zatuq2S?testuZ

And lastly, the variable in the vpnc.sh-sample file:
VPNGATEWAY=208.23.198.215
ROUTER=10.1.1.3

Hopefully I've provided enough information for someone to give me an idea of what I'm doing wrong. Thanks!
Justin
Justin Hendrickson justin@onyourmark.com
----------------------------------------------------------------------------
Web Development Specialist
Klein Internet Marketing Group
a division of Keith Klein & Associates, Inc.

www.kleininternet.com Phone: 262-820-8201
22603 West Main Street or: 800-747-3399
Sussex, WI 53089 Fax: 262-820-8202
VPN and routes [ In reply to ]
c.lackas at fz-juelich
Jun 7, 2004, 9:15 PM
Post #2 of 7 (3225 views)
Permalink
* Justin Hendrickson <justin@onyourmark.com> [040607 20:49]:

Hello Justin,

> 1) Modified and ran /usr/local/etc/rc.d/vpnc.sh-sample start.

this script is FreeBSD specific.

> VPNGATEWAY=208.23.198.215
> ROUTER=10.1.1.3

Did you remove the comment sign (#) from the 'route' lines? Or may be
you want to give vpnc.sh-sample-fulltunnel a try. This start script
tries to setup a fulltunnel for you.

But first you should try to ping the IP address of your tun0 device. Can
you reach the VPN gateway?

And then turn on the debugging of vpnc and show the result. See vpnc(8)
for details.

Regards,
Christian

--
Forschungszentrum Juelich Central Institute For Electronics (ZEL)
Leo-Brandt-Strasse 52425 Juelich, Germany
Tel: +49-2461-61 2425 Fax: +49-2461-61 3990
VPN and routes [ In reply to ]
justin at onyourmark
Jun 7, 2004, 9:59 PM
Post #3 of 7 (3255 views)
Permalink
>Did you remove the comment sign (#) from the 'route' lines? Or may be
>you want to give vpnc.sh-sample-fulltunnel a try. This start script
>tries to setup a fulltunnel for you.

Yes, I did remove the comment from before those lines.

I gave the vpnc.sh.sample-fulltunnel a try, but I'm getting the same results.

>But first you should try to ping the IP address of your tun0 device. Can
>you reach the VPN gateway?

pinging the tun0 device's IP results in the same problem, 100% packet loss on the ping, and icmp: echo requests on the tun0 device

>And then turn on the debugging of vpnc and show the result. See vpnc(8)
>for details.

vpnc --debug 3

S1
S2
S3
using interface tun0
S4
S4.1
i_cookie: 1f0bd592 53223977
i_nonce: 7d3eea45 aa7eafaf 6fbc0717 a758b068 85201945
S4.2
dh_public:
6f5be22d b81bc589 43cd03e6 40c7d18f 8b4cad0a 0c120ce4 12821141 bcdd186b
df4ef1bf dc6fa58d c18eb10d 02419965 40a83c2c 9a44c51e c8801383 09e73ab1
d27deb8e f9c15c92 25dbe863 f927b100 ace33cfe f87b4528 136024e3 0a83f292
831d6148 a6bbb2f8 1fdcf72e 1cb91758 91a4f02d 8fb0bf20 2a88e1fd ec288a9d
S4.3

sending: ========================>

BEGIN_PARSE
i_cookie: 1f0bd592 53223977
r_cookie: 00000000 00000000
payload: 01
isakmp_version: 10
exchange_type: 04
flags: 00
message_id: 00000000
len: 35020000
PARSING PAYLOAD type: 01
next_type: 04
length: 4c010000
sa.doi: 01000000
sa.situation: 01000000
PARSING PAYLOAD type: 02
next_type: 00
length: 40010000
p.number: 00
p.prot_id: 01
p.spi_size: 00
length: 08
p.spi:
PARSING PAYLOAD type: 03
next_type: 03
length: 28000000
t.number: 00
t.id: 01
t.attributes.type: 0e00
t.attributes.u.attr_16: 0001
t.attributes.type: 0100
t.attributes.u.attr_16: 0700
t.attributes.type: 0200
t.attributes.u.attr_16: 0200
t.attributes.type: 0300
t.attributes.u.attr_16: e9fd
t.attributes.type: 0400
t.attributes.u.attr_16: 0200
t.attributes.type: 0b00
t.attributes.u.attr_16: 0100
t.attributes.type: 0c00
t.attributes.u.lots.length: 0400
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 03
length: 28000000
t.number: 01
t.id: 01
t.attributes.type: 0e00
t.attributes.u.attr_16: 0001
t.attributes.type: 0100
t.attributes.u.attr_16: 0700
t.attributes.type: 0200
t.attributes.u.attr_16: 0100
t.attributes.type: 0300
t.attributes.u.attr_16: e9fd
t.attributes.type: 0400
t.attributes.u.attr_16: 0200
t.attributes.type: 0b00
t.attributes.u.attr_16: 0100
t.attributes.type: 0c00
t.attributes.u.lots.length: 0400
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 03
length: 28000000
t.number: 02
t.id: 01
t.attributes.type: 0e00
t.attributes.u.attr_16: c000
t.attributes.type: 0100
t.attributes.u.attr_16: 0700
t.attributes.type: 0200
t.attributes.u.attr_16: 0200
t.attributes.type: 0300
t.attributes.u.attr_16: e9fd
t.attributes.type: 0400
t.attributes.u.attr_16: 0200
t.attributes.type: 0b00
t.attributes.u.attr_16: 0100
t.attributes.type: 0c00
t.attributes.u.lots.length: 0400
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 03
length: 28000000
t.number: 03
t.id: 01
t.attributes.type: 0e00
t.attributes.u.attr_16: c000
t.attributes.type: 0100
t.attributes.u.attr_16: 0700
t.attributes.type: 0200
t.attributes.u.attr_16: 0100
t.attributes.type: 0300
t.attributes.u.attr_16: e9fd
t.attributes.type: 0400
t.attributes.u.attr_16: 0200
t.attributes.type: 0b00
t.attributes.u.attr_16: 0100
t.attributes.type: 0c00
t.attributes.u.lots.length: 0400
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 03
length: 28000000
t.number: 04
t.id: 01
t.attributes.type: 0e00
t.attributes.u.attr_16: 8000
t.attributes.type: 0100
t.attributes.u.attr_16: 0700
t.attributes.type: 0200
t.attributes.u.attr_16: 0200
t.attributes.type: 0300
t.attributes.u.attr_16: e9fd
t.attributes.type: 0400
t.attributes.u.attr_16: 0200
t.attributes.type: 0b00
t.attributes.u.attr_16: 0100
t.attributes.type: 0c00
t.attributes.u.lots.length: 0400
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 03
length: 28000000
t.number: 05
t.id: 01
t.attributes.type: 0e00
t.attributes.u.attr_16: 8000
t.attributes.type: 0100
t.attributes.u.attr_16: 0700
t.attributes.type: 0200
t.attributes.u.attr_16: 0100
t.attributes.type: 0300
t.attributes.u.attr_16: e9fd
t.attributes.type: 0400
t.attributes.u.attr_16: 0200
t.attributes.type: 0b00
t.attributes.u.attr_16: 0100
t.attributes.type: 0c00
t.attributes.u.lots.length: 0400
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 03
length: 24000000
t.number: 06
t.id: 01
t.attributes.type: 0100
t.attributes.u.attr_16: 0500
t.attributes.type: 0200
t.attributes.u.attr_16: 0200
t.attributes.type: 0300
t.attributes.u.attr_16: e9fd
t.attributes.type: 0400
t.attributes.u.attr_16: 0200
t.attributes.type: 0b00
t.attributes.u.attr_16: 0100
t.attributes.type: 0c00
t.attributes.u.lots.length: 0400
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 00
length: 24000000
t.number: 07
t.id: 01
t.attributes.type: 0100
t.attributes.u.attr_16: 0500
t.attributes.type: 0200
t.attributes.u.attr_16: 0100
t.attributes.type: 0300
t.attributes.u.attr_16: e9fd
t.attributes.type: 0400
t.attributes.u.attr_16: 0200
t.attributes.type: 0b00
t.attributes.u.attr_16: 0100
t.attributes.type: 0c00
t.attributes.u.lots.length: 0400
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 02
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 01
PARSING PAYLOAD type: 04
next_type: 0a
length: 84000000
ke.data:
6f5be22d b81bc589 43cd03e6 40c7d18f 8b4cad0a 0c120ce4 12821141 bcdd186b
df4ef1bf dc6fa58d c18eb10d 02419965 40a83c2c 9a44c51e c8801383 09e73ab1
d27deb8e f9c15c92 25dbe863 f927b100 ace33cfe f87b4528 136024e3 0a83f292
831d6148 a6bbb2f8 1fdcf72e 1cb91758 91a4f02d 8fb0bf20 2a88e1fd ec288a9d
DONE PARSING PAYLOAD type: 04
PARSING PAYLOAD type: 0a
next_type: 05
length: 18000000
ke.data: 7d3eea45 aa7eafaf 6fbc0717 a758b068 85201945
DONE PARSING PAYLOAD type: 0a
PARSING PAYLOAD type: 05
next_type: 0d
length: 11000000
id.type: 0b
id.protocol: 11
id.port: f401
id.data: 6966625f 67726f75 70
DONE PARSING PAYLOAD type: 05
PARSING PAYLOAD type: 0d
next_type: 0d
length: 0c000000
ke.data: 09002689 dfd6b712
DONE PARSING PAYLOAD type: 0d
PARSING PAYLOAD type: 0d
next_type: 00
length: 14000000
ke.data: 12f5f28c 457168a9 702d9fe2 74cc0100
DONE PARSING PAYLOAD type: 0d
PARSING PAYLOAD type: 00
PARSE_OK

exchange_type: 04
S4.4

BEGIN_PARSE
i_cookie: 1f0bd592 53223977
r_cookie: 2a94eb83 5217daf0
payload: 01
isakmp_version: 10
exchange_type: 04
flags: 00
message_id: 00000000
len: 84010000
PARSING PAYLOAD type: 01
next_type: 04
length: 38000000
sa.doi: 01000000
sa.situation: 01000000
PARSING PAYLOAD type: 02
next_type: 00
length: 2c000000
p.number: 01
p.prot_id: 01
p.spi_size: 00
length: 01
p.spi:
PARSING PAYLOAD type: 03
next_type: 00
length: 24000000
t.number: 07
t.id: 01
t.attributes.type: 0100
t.attributes.u.attr_16: 0500
t.attributes.type: 0200
t.attributes.u.attr_16: 0100
t.attributes.type: 0400
t.attributes.u.attr_16: 0200
t.attributes.type: 0300
t.attributes.u.attr_16: e9fd
t.attributes.type: 0b00
t.attributes.u.attr_16: 0100
t.attributes.type: 0c00
t.attributes.u.lots.length: 0400
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 02
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 01
PARSING PAYLOAD type: 04
next_type: 0a
length: 84000000
ke.data:
b7a47124 8f704d28 85cbdf6a b7b3a5ce 88abc563 0715e3d3 fef7ba63 89bdc6b4
29dad1d1 81d1eb89 71ff4ebb 38a5b2ce 4786634d d606b5ae 53037790 8316df4c
a471a360 08c88de2 c0a40c86 32823498 7f22da88 0764f5c2 d57ea463 275cad22
b3b8d90e 1217f640 b10b15d5 7045d1a9 4b05e634 43867afc a1f963cd eece022d
DONE PARSING PAYLOAD type: 04
PARSING PAYLOAD type: 0a
next_type: 05
length: 18000000
ke.data: bf2f7ca0 4feee9a4 dc1a2e34 fad7711e ac3237cf
DONE PARSING PAYLOAD type: 0a
PARSING PAYLOAD type: 05
next_type: 08
length: 0c000000
id.type: 01
id.protocol: 11
id.port: 0000
id.data: d017c6d7
DONE PARSING PAYLOAD type: 05
PARSING PAYLOAD type: 08
next_type: 0d
length: 14000000
ke.data: 1c8b1f85 1ea9b879 0afdba98 c0e67f74
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 0d
next_type: 0d
length: 14000000
ke.data: 12f5f28c 457168a9 702d9fe2 74cc0100
DONE PARSING PAYLOAD type: 0d
PARSING PAYLOAD type: 0d
next_type: 0d
length: 0c000000
ke.data: 09002689 dfd6b712
DONE PARSING PAYLOAD type: 0d
PARSING PAYLOAD type: 0d
next_type: 0d
length: 14000000
ke.data: afcad713 68a1f1c9 6b8696fc 77570100
DONE PARSING PAYLOAD type: 0d
PARSING PAYLOAD type: 0d
next_type: 0d
length: 18000000
ke.data: 4048b7d5 6ebce885 25e7de7f 00d6c2d3 c0000000
DONE PARSING PAYLOAD type: 0d
PARSING PAYLOAD type: 0d
next_type: 0d
length: 14000000
ke.data: df534c9e 5216daf0 ad14e28e 8b87b434
DONE PARSING PAYLOAD type: 0d
PARSING PAYLOAD type: 0d
next_type: 00
length: 14000000
ke.data: 1f07f70e aa6514d3 b0fa9654 2a500400
DONE PARSING PAYLOAD type: 0d
PARSING PAYLOAD type: 00
PARSE_OK

IKE SA selected 3des-md5
skeyid: f4149685 c45ae1d0 dc5bc2cc 2cc23304
returned_hash: 3df2ac79 3ea75bc2 3565ddae 03b7fb47
dh_shared_secret:
0878d21a 4f53c5a6 ebf92544 7f0536ee 7e0ae098 8994f3b4 9e0101c7 7e23f4c3
74c4632e 558826c4 58a62169 58ddea1d 92a5c9ec ef1dd38f 6f3a39f9 e4402f69
0dd61255 8d2ea4f7 18119e99 75332b98 36fbc4c3 a7aafc1a 9d54266c 00889e6f
7bc7de15 2ba920bf 8821e920 bff0755e 3b1ac24b 5bf68c17 8353542f 183de583
skeyid_d: a5872b74 f222bf02 5e1bc36c 9cf1f3ae
skeyid_a: 19e49175 e8a45d41 3a026e7a 7f607422
skeyid_e: 27e9d13b f61ce647 924317c3 e3800e05
enc-key: 9de7b65c 2d75dc0b ba2eee96 a3a63a07 9d5cfa81 0b21867f
current_iv: b6aef8e8 78a24adc
S4.5
size = 68, blksz = 8, padding = 4

sending: ========================>

BEGIN_PARSE
i_cookie: 1f0bd592 53223977
r_cookie: 2a94eb83 5217daf0
payload: 08
isakmp_version: 10
exchange_type: 04
flags: 01
message_id: 00000000
len: 64000000
PARSING PAYLOAD type: 08
next_type: 0b
length: 14000000
ke.data: 3df2ac79 3ea75bc2 3565ddae 03b7fb47
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 0b
next_type: 0d
length: 1c000000
n.doi: 01000000
n.protocol: 01
n.spi_length: 10
n.type: 0260
n.spi: 1f0bd592 53223977 2a94eb83 5217daf0
n.data:
DONE PARSING PAYLOAD type: 0b
PARSING PAYLOAD type: 0d
next_type: 00
length: 14000000
ke.data: 12f5f28c 457168a9 702d9fe2 74cc0100
DONE PARSING PAYLOAD type: 0d
PARSING PAYLOAD type: 00
PARSE_OK

initial_iv: b1612bf0 e94fde18
exchange_type: 05
S4.6
S5
S5.1
S5.2

BEGIN_PARSE
i_cookie: 4fc9809f 4c406e3c
r_cookie: b69d39f6 b4d7112b
payload: 08
isakmp_version: 10
exchange_type: 05
flags: 01
message_id: 0321052a
len: 44000000
PARSING PAYLOAD type: 08
next_type: 65
exchange_type: 05
S5.2

BEGIN_PARSE
i_cookie: 4fc9809f 4c406e3c
r_cookie: b69d39f6 b4d7112b
payload: 08
isakmp_version: 10
exchange_type: 05
flags: 01
message_id: 7f9665f0
len: 4c000000
PARSING PAYLOAD type: 08
next_type: e1
exchange_type: 06
S5.2

BEGIN_PARSE
i_cookie: 1f0bd592 53223977
r_cookie: 2a94eb83 5217daf0
payload: 08
isakmp_version: 10
exchange_type: 06
flags: 01
message_id: 2c4109ca
len: 64000000
PARSING PAYLOAD type: 08
next_type: 0e
length: 14000000
ke.data: 5a99076a 1fe3cef1 cce8936e b17099d4
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 0e
next_type: 00
length: 34000000
modecfg.type: 01
t.id: 0000
t.attributes.type: 8840
(not dumping xauth data)
t.attributes.type: 8940
(not dumping xauth data length)
(not dumping xauth data)
t.attributes.type: 8a40
(not dumping xauth data length)
(not dumping xauth data)
t.attributes.type: 8c40
(not dumping xauth data length)
(not dumping xauth data)
DONE PARSING PAYLOAD type: 0e
PARSING PAYLOAD type: 00
PARSE_OK

hashlen: 16
u.hash.length: 16
expected_hash: 5a99076a 1fe3cef1 cce8936e b17099d4
h->u.hash.data: 5a99076a 1fe3cef1 cce8936e b17099d4
S5.3
S5.4
Enter Username and Password.
S5.5
size = 58, blksz = 8, padding = 6

sending: ========================>

BEGIN_PARSE
i_cookie: 1f0bd592 53223977
r_cookie: 2a94eb83 5217daf0
payload: 08
isakmp_version: 10
exchange_type: 06
flags: 01
message_id: 2c4109ca
len: 5c000000
PARSING PAYLOAD type: 08
next_type: 0e
length: 14000000
ke.data: 77fa7255 c43c5b2f 810c12e8 1ebf755e
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 0e
next_type: 00
length: 26000000
modecfg.type: 02
t.id: 0000
t.attributes.type: 8a40
(not dumping xauth data length)
(not dumping xauth data)
t.attributes.type: 8940
(not dumping xauth data length)
(not dumping xauth data)
DONE PARSING PAYLOAD type: 0e
PARSING PAYLOAD type: 00
PARSE_OK

exchange_type: 06
S5.2

BEGIN_PARSE
i_cookie: 1f0bd592 53223977
r_cookie: 2a94eb83 5217daf0
payload: 08
isakmp_version: 10
exchange_type: 06
flags: 01
message_id: 784800ca
len: 3c000000
PARSING PAYLOAD type: 08
next_type: 0e
length: 14000000
ke.data: bf8829f1 0274351f 44151b3f bc618b4e
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 0e
next_type: 00
length: 0c000000
modecfg.type: 03
t.id: 0000
t.attributes.type: 8f40
(not dumping xauth data)
DONE PARSING PAYLOAD type: 0e
PARSING PAYLOAD type: 00
PARSE_OK

hashlen: 16
u.hash.length: 16
expected_hash: bf8829f1 0274351f 44151b3f bc618b4e
h->u.hash.data: bf8829f1 0274351f 44151b3f bc618b4e
S5.3
S5.6
size = 32, blksz = 8, padding = 0

sending: ========================>

BEGIN_PARSE
i_cookie: 1f0bd592 53223977
r_cookie: 2a94eb83 5217daf0
payload: 08
isakmp_version: 10
exchange_type: 06
flags: 01
message_id: 784800ca
len: 3c000000
PARSING PAYLOAD type: 08
next_type: 0e
length: 14000000
ke.data: a601a305 7b777a8e fd3a1c0f 753efd23
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 0e
next_type: 00
length: 0c000000
modecfg.type: 04
t.id: 0000
t.attributes.type: 8f40
(not dumping xauth data)
DONE PARSING PAYLOAD type: 0e
PARSING PAYLOAD type: 00
PARSE_OK

S5.7
S6
size = 116, blksz = 8, padding = 4

sending: ========================>

BEGIN_PARSE
i_cookie: 1f0bd592 53223977
r_cookie: 2a94eb83 5217daf0
payload: 08
isakmp_version: 10
exchange_type: 06
flags: 01
message_id: 1ceb6899
len: 94000000
PARSING PAYLOAD type: 08
next_type: 0e
length: 14000000
ke.data: 2f4ccb16 3eb29426 688dc3b6 327a7d3b
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 0e
next_type: 00
length: 60000000
modecfg.type: 01
t.id: 1400
t.attributes.type: 0100
t.attributes.u.lots.length: 0000
t.attributes.u.lots.data:
t.attributes.type: 0200
t.attributes.u.lots.length: 0000
t.attributes.u.lots.data:
t.attributes.type: 0300
t.attributes.u.lots.length: 0000
t.attributes.u.lots.data:
t.attributes.type: 0400
t.attributes.u.lots.length: 0000
t.attributes.u.lots.data:
t.attributes.type: 0270
t.attributes.u.lots.length: 0000
t.attributes.u.lots.data:
t.attributes.type: 0770
t.attributes.u.lots.length: 0000
t.attributes.u.lots.data:
t.attributes.type: 0070
t.attributes.u.lots.length: 0000
t.attributes.u.lots.data:
t.attributes.type: 0a70
t.attributes.u.lots.length: 0600
t.attributes.u.lots.data: 70687064 6576
t.attributes.type: 0700
t.attributes.u.lots.length: 2e00
t.attributes.u.lots.data:
43697363 6f205379 7374656d 73205650 4e20436c 69656e74 20302e32 2d726d2b
7a6f6d62 2e313a46 72656542 5344
DONE PARSING PAYLOAD type: 0e
PARSING PAYLOAD type: 00
PARSE_OK

exchange_type: 06

BEGIN_PARSE
i_cookie: 1f0bd592 53223977
r_cookie: 2a94eb83 5217daf0
payload: 08
isakmp_version: 10
exchange_type: 06
flags: 01
message_id: 1ceb6899
len: b4000000
PARSING PAYLOAD type: 08
next_type: 0e
length: 14000000
ke.data: eace4de1 61936396 5cc034c5 3e068fcf
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 0e
next_type: 00
length: 82000000
modecfg.type: 02
t.id: 0000
t.attributes.type: 0100
t.attributes.u.lots.length: 0400
t.attributes.u.lots.data: c0a86469
t.attributes.type: 0300
t.attributes.u.lots.length: 0400
t.attributes.u.lots.data: d00ebdcd
t.attributes.type: 0770
t.attributes.u.attr_16: 0000
t.attributes.type: 0700
t.attributes.u.lots.length: 6200
t.attributes.u.lots.data:
43697363 6f205379 7374656d 732c2049 6e632e2f 56504e20 33303030 20436f6e
63656e74 7261746f 72205665 7273696f 6e20342e 302e312e 45206275 696c7420
62792076 6d757270 6879206f 6e205365 70203138 20323030 33203231 3a31373a
3230
DONE PARSING PAYLOAD type: 0e
PARSING PAYLOAD type: 00
PARSE_OK

hashlen: 16
u.hash.length: 16
expected_hash: eace4de1 61936396 5cc034c5 3e068fcf
h->u.hash.data: eace4de1 61936396 5cc034c5 3e068fcf
got pfs setting: 0
Remote Application Version: Cisco Systems, Inc./VPN 3000 Concentrator Version 4.0.1.E built by vmurphy on Sep 18 2003 21:17:20
got address 192.168.100.105
S7
S7.1
S7.2
size = 344, blksz = 8, padding = 0

sending: ========================>

BEGIN_PARSE
i_cookie: 1f0bd592 53223977
r_cookie: 2a94eb83 5217daf0
payload: 08
isakmp_version: 10
exchange_type: 20
flags: 01
message_id: 3bfa0670
len: 74010000
PARSING PAYLOAD type: 08
next_type: 01
length: 14000000
ke.data: 7fae0e4d 012136db 4f3f67fa cf92a542
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 01
next_type: 0a
length: 10010000
sa.doi: 01000000
sa.situation: 01000000
PARSING PAYLOAD type: 02
next_type: 00
length: 04010000
p.number: 00
p.prot_id: 03
p.spi_size: 04
length: 08
p.spi: b2d02a7b
PARSING PAYLOAD type: 03
next_type: 03
length: 20000000
t.number: 00
t.id: 0c
t.attributes.type: 0600
t.attributes.u.attr_16: 0001
t.attributes.type: 0400
t.attributes.u.attr_16: 0100
t.attributes.type: 0500
t.attributes.u.attr_16: 0200
t.attributes.type: 0100
t.attributes.u.attr_16: 0100
t.attributes.type: 0200
t.attributes.u.lots.length: 0400
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 03
length: 20000000
t.number: 01
t.id: 0c
t.attributes.type: 0600
t.attributes.u.attr_16: 0001
t.attributes.type: 0400
t.attributes.u.attr_16: 0100
t.attributes.type: 0500
t.attributes.u.attr_16: 0100
t.attributes.type: 0100
t.attributes.u.attr_16: 0100
t.attributes.type: 0200
t.attributes.u.lots.length: 0400
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 03
length: 20000000
t.number: 02
t.id: 0c
t.attributes.type: 0600
t.attributes.u.attr_16: c000
t.attributes.type: 0400
t.attributes.u.attr_16: 0100
t.attributes.type: 0500
t.attributes.u.attr_16: 0200
t.attributes.type: 0100
t.attributes.u.attr_16: 0100
t.attributes.type: 0200
t.attributes.u.lots.length: 0400
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 03
length: 20000000
t.number: 03
t.id: 0c
t.attributes.type: 0600
t.attributes.u.attr_16: c000
t.attributes.type: 0400
t.attributes.u.attr_16: 0100
t.attributes.type: 0500
t.attributes.u.attr_16: 0100
t.attributes.type: 0100
t.attributes.u.attr_16: 0100
t.attributes.type: 0200
t.attributes.u.lots.length: 0400
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 03
length: 20000000
t.number: 04
t.id: 0c
t.attributes.type: 0600
t.attributes.u.attr_16: 8000
t.attributes.type: 0400
t.attributes.u.attr_16: 0100
t.attributes.type: 0500
t.attributes.u.attr_16: 0200
t.attributes.type: 0100
t.attributes.u.attr_16: 0100
t.attributes.type: 0200
t.attributes.u.lots.length: 0400
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 03
length: 20000000
t.number: 05
t.id: 0c
t.attributes.type: 0600
t.attributes.u.attr_16: 8000
t.attributes.type: 0400
t.attributes.u.attr_16: 0100
t.attributes.type: 0500
t.attributes.u.attr_16: 0100
t.attributes.type: 0100
t.attributes.u.attr_16: 0100
t.attributes.type: 0200
t.attributes.u.lots.length: 0400
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 03
length: 1c000000
t.number: 06
t.id: 03
t.attributes.type: 0400
t.attributes.u.attr_16: 0100
t.attributes.type: 0500
t.attributes.u.attr_16: 0200
t.attributes.type: 0100
t.attributes.u.attr_16: 0100
t.attributes.type: 0200
t.attributes.u.lots.length: 0400
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 00
length: 1c000000
t.number: 07
t.id: 03
t.attributes.type: 0400
t.attributes.u.attr_16: 0100
t.attributes.type: 0500
t.attributes.u.attr_16: 0100
t.attributes.type: 0100
t.attributes.u.attr_16: 0100
t.attributes.type: 0200
t.attributes.u.lots.length: 0400
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 02
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 01
PARSING PAYLOAD type: 0a
next_type: 05
length: 18000000
ke.data: 6ddb1a11 ea5cfb0e 6b988ef1 b083d831 6c53db16
DONE PARSING PAYLOAD type: 0a
PARSING PAYLOAD type: 05
next_type: 05
length: 0c000000
id.type: 01
id.protocol: 00
id.port: 0000
id.data: c0a86469
DONE PARSING PAYLOAD type: 05
PARSING PAYLOAD type: 05
next_type: 00
length: 10000000
id.type: 04
id.protocol: 00
id.port: 0000
id.data: 00000000 00000000
DONE PARSING PAYLOAD type: 05
PARSING PAYLOAD type: 00
PARSE_OK

exchange_type: 05
S7.3

BEGIN_PARSE
i_cookie: 1f0bd592 53223977
r_cookie: 2a94eb83 5217daf0
payload: 08
isakmp_version: 10
exchange_type: 05
flags: 01
message_id: da854937
len: 5c000000
PARSING PAYLOAD type: 08
next_type: 0b
length: 14000000
ke.data: 0e7e5736 3e84a261 6a1fc6bf 2c329be7
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 0b
next_type: 00
length: 28000000
n.doi: 01000000
n.protocol: 01
n.spi_length: 10
n.type: 0060
n.spi: 1f0bd592 53223977 2a94eb83 5217daf0
n.data: 800b0001 000c0004 00015180
DONE PARSING PAYLOAD type: 0b
PARSING PAYLOAD type: 00
PARSE_OK

hashlen: 16
u.hash.length: 16
expected_hash: ff446f94 19546c6c 344360bf 8e993862
h->u.hash.data: 0e7e5736 3e84a261 6a1fc6bf 2c329be7
S7.4
ignoring responder-lifetime notify
exchange_type: 20
S7.3

BEGIN_PARSE
i_cookie: 1f0bd592 53223977
r_cookie: 2a94eb83 5217daf0
payload: 08
isakmp_version: 10
exchange_type: 20
flags: 01
message_id: 3bfa0670
len: b4000000
PARSING PAYLOAD type: 08
next_type: 01
length: 14000000
ke.data: fce6454e 6e27f6d3 76297f4b 16283bdd
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 01
next_type: 0a
length: 34000000
sa.doi: 01000000
sa.situation: 01000000
PARSING PAYLOAD type: 02
next_type: 00
length: 28000000
p.number: 01
p.prot_id: 03
p.spi_size: 04
length: 01
p.spi: 00a7ae96
PARSING PAYLOAD type: 03
next_type: 00
length: 1c000000
t.number: 01
t.id: 03
t.attributes.type: 0100
t.attributes.u.attr_16: 0100
t.attributes.type: 0200
t.attributes.u.lots.length: 0400
t.attributes.u.lots.data: 0020c49b
t.attributes.type: 0400
t.attributes.u.attr_16: 0100
t.attributes.type: 0500
t.attributes.u.attr_16: 0100
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 02
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 01
PARSING PAYLOAD type: 0a
next_type: 05
length: 18000000
ke.data: c1ed06a1 90f264a1 f28a0483 67786fe7 bc7bdc6f
DONE PARSING PAYLOAD type: 0a
PARSING PAYLOAD type: 05
next_type: 05
length: 0c000000
id.type: 01
id.protocol: 00
id.port: 0000
id.data: c0a86469
DONE PARSING PAYLOAD type: 05
PARSING PAYLOAD type: 05
next_type: 0b
length: 10000000
id.type: 04
id.protocol: 00
id.port: 0000
id.data: 00000000 00000000
DONE PARSING PAYLOAD type: 05
PARSING PAYLOAD type: 0b
next_type: 00
length: 18000000
n.doi: 01000000
n.protocol: 03
n.spi_length: 04
n.type: 0060
n.spi: 00a7ae96
n.data: 80010001 80027080
DONE PARSING PAYLOAD type: 0b
PARSING PAYLOAD type: 00
PARSE_OK

hashlen: 16
u.hash.length: 16
expected_hash: fce6454e 6e27f6d3 76297f4b 16283bdd
h->u.hash.data: fce6454e 6e27f6d3 76297f4b 16283bdd
S7.4
S7.5
S7.6
IPSEC SA selected 3des-md5
authing NULL package!
size = 20, blksz = 8, padding = 4

sending: ========================>

BEGIN_PARSE
i_cookie: 1f0bd592 53223977
r_cookie: 2a94eb83 5217daf0
payload: 08
isakmp_version: 10
exchange_type: 20
flags: 01
message_id: 3bfa0670
len: 34000000
PARSING PAYLOAD type: 08
next_type: 00
length: 14000000
ke.data: 46303e7b 93c900e3 0af76704 1dac22a5
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 00
PARSE_OK

S7.7
size = 68, blksz = 8, padding = 4

sending: ========================>

BEGIN_PARSE
i_cookie: 1f0bd592 53223977
r_cookie: 2a94eb83 5217daf0
payload: 08
isakmp_version: 10
exchange_type: 05
flags: 01
message_id: aec0254f
len: 64000000
PARSING PAYLOAD type: 08
next_type: 0c
length: 14000000
ke.data: e06be555 f81813c6 e5ac031e 528436fa
DONE PARSING PAYLOAD type: 08
PARSING PAYLOAD type: 0c
next_type: 0c
length: 14000000
n.doi: 01
n.protocol: 03
n.spi_length: 04
d.num_spi: 0200
d.spi: b2d02a7b
d.spi: 00a7ae96
DONE PARSING PAYLOAD type: 0c
PARSING PAYLOAD type: 0c
next_type: 00
length: 1c000000
n.doi: 01
n.protocol: 01
n.spi_length: 10
d.num_spi: 0100
d.spi: 1f0bd592 53223977 2a94eb83 5217daf0
DONE PARSING PAYLOAD type: 0c
PARSING PAYLOAD type: 00
PARSE_OK

S7.8
S7.9
generating 40 bytes keymat (cnt=3)
generating 40 bytes keymat (cnt=3)
S7.10
tous.enc_secret: 05ab938f 7b9c7f1f 0c6815ee 4176918f ca65f892 06bb3c12
tous.auth_secret: 2816e5d0 95c72f3c 59872a30 5688dd05
tothem.enc_secret: 764a3448 c444fe78 58fabc29 0379d278 4dae181d 60897800
tothem.auth_secret: fb08e14a 8efc74a2 48ae1f58 e754824f
VPNC started in background (pid: 1148)...

Justin Hendrickson justin@onyourmark.com
----------------------------------------------------------------------------
Web Development Specialist
Klein Internet Marketing Group
a division of Keith Klein & Associates, Inc.

www.kleininternet.com Phone: 262-820-8201
22603 West Main Street or: 800-747-3399
Sussex, WI 53089 Fax: 262-820-8202
VPN and routes [ In reply to ]
justin at onyourmark
Jun 9, 2004, 4:37 PM
Post #4 of 7 (3234 views)
Permalink
I'm still getting the same errors, reguardless of what I change. Anyone have any ideas what I can do to get vpnc working?

On 6/7/2004 at 2:59 PM Justin Hendrickson wrote:
>>Did you remove the comment sign (#) from the 'route' lines? Or may be
>>you want to give vpnc.sh-sample-fulltunnel a try. This start script
>>tries to setup a fulltunnel for you.
>
>Yes, I did remove the comment from before those lines.
>
>I gave the vpnc.sh.sample-fulltunnel a try, but I'm getting the same
>results.
>
>>But first you should try to ping the IP address of your tun0 device. Can
>>you reach the VPN gateway?
>
>pinging the tun0 device's IP results in the same problem, 100% packet loss
>on the ping, and icmp: echo requests on the tun0 device
>
>>And then turn on the debugging of vpnc and show the result. See vpnc(8)
>>for details.
>
>vpnc --debug 3
>
>S1
>S2
>S3
>using interface tun0
>S4
>S4.1
>i_cookie: 1f0bd592 53223977
>i_nonce: 7d3eea45 aa7eafaf 6fbc0717 a758b068 85201945
>S4.2
>dh_public:
>6f5be22d b81bc589 43cd03e6 40c7d18f 8b4cad0a 0c120ce4 12821141 bcdd186b
>df4ef1bf dc6fa58d c18eb10d 02419965 40a83c2c 9a44c51e c8801383 09e73ab1
>d27deb8e f9c15c92 25dbe863 f927b100 ace33cfe f87b4528 136024e3 0a83f292
>831d6148 a6bbb2f8 1fdcf72e 1cb91758 91a4f02d 8fb0bf20 2a88e1fd ec288a9d
>S4.3
>
> sending: ========================>
>
>BEGIN_PARSE
>i_cookie: 1f0bd592 53223977
>r_cookie: 00000000 00000000
>payload: 01
>isakmp_version: 10
>exchange_type: 04
>flags: 00
>message_id: 00000000
>len: 35020000
>PARSING PAYLOAD type: 01
>next_type: 04
>length: 4c010000
>sa.doi: 01000000
>sa.situation: 01000000
>PARSING PAYLOAD type: 02
>next_type: 00
>length: 40010000
>p.number: 00
>p.prot_id: 01
>p.spi_size: 00
>length: 08
>p.spi:
>PARSING PAYLOAD type: 03
>next_type: 03
>length: 28000000
>t.number: 00
>t.id: 01
>t.attributes.type: 0e00
>t.attributes.u.attr_16: 0001
>t.attributes.type: 0100
>t.attributes.u.attr_16: 0700
>t.attributes.type: 0200
>t.attributes.u.attr_16: 0200
>t.attributes.type: 0300
>t.attributes.u.attr_16: e9fd
>t.attributes.type: 0400
>t.attributes.u.attr_16: 0200
>t.attributes.type: 0b00
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0c00
>t.attributes.u.lots.length: 0400
>t.attributes.u.lots.data: 0020c49b
>DONE PARSING PAYLOAD type: 03
>PARSING PAYLOAD type: 03
>next_type: 03
>length: 28000000
>t.number: 01
>t.id: 01
>t.attributes.type: 0e00
>t.attributes.u.attr_16: 0001
>t.attributes.type: 0100
>t.attributes.u.attr_16: 0700
>t.attributes.type: 0200
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0300
>t.attributes.u.attr_16: e9fd
>t.attributes.type: 0400
>t.attributes.u.attr_16: 0200
>t.attributes.type: 0b00
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0c00
>t.attributes.u.lots.length: 0400
>t.attributes.u.lots.data: 0020c49b
>DONE PARSING PAYLOAD type: 03
>PARSING PAYLOAD type: 03
>next_type: 03
>length: 28000000
>t.number: 02
>t.id: 01
>t.attributes.type: 0e00
>t.attributes.u.attr_16: c000
>t.attributes.type: 0100
>t.attributes.u.attr_16: 0700
>t.attributes.type: 0200
>t.attributes.u.attr_16: 0200
>t.attributes.type: 0300
>t.attributes.u.attr_16: e9fd
>t.attributes.type: 0400
>t.attributes.u.attr_16: 0200
>t.attributes.type: 0b00
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0c00
>t.attributes.u.lots.length: 0400
>t.attributes.u.lots.data: 0020c49b
>DONE PARSING PAYLOAD type: 03
>PARSING PAYLOAD type: 03
>next_type: 03
>length: 28000000
>t.number: 03
>t.id: 01
>t.attributes.type: 0e00
>t.attributes.u.attr_16: c000
>t.attributes.type: 0100
>t.attributes.u.attr_16: 0700
>t.attributes.type: 0200
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0300
>t.attributes.u.attr_16: e9fd
>t.attributes.type: 0400
>t.attributes.u.attr_16: 0200
>t.attributes.type: 0b00
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0c00
>t.attributes.u.lots.length: 0400
>t.attributes.u.lots.data: 0020c49b
>DONE PARSING PAYLOAD type: 03
>PARSING PAYLOAD type: 03
>next_type: 03
>length: 28000000
>t.number: 04
>t.id: 01
>t.attributes.type: 0e00
>t.attributes.u.attr_16: 8000
>t.attributes.type: 0100
>t.attributes.u.attr_16: 0700
>t.attributes.type: 0200
>t.attributes.u.attr_16: 0200
>t.attributes.type: 0300
>t.attributes.u.attr_16: e9fd
>t.attributes.type: 0400
>t.attributes.u.attr_16: 0200
>t.attributes.type: 0b00
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0c00
>t.attributes.u.lots.length: 0400
>t.attributes.u.lots.data: 0020c49b
>DONE PARSING PAYLOAD type: 03
>PARSING PAYLOAD type: 03
>next_type: 03
>length: 28000000
>t.number: 05
>t.id: 01
>t.attributes.type: 0e00
>t.attributes.u.attr_16: 8000
>t.attributes.type: 0100
>t.attributes.u.attr_16: 0700
>t.attributes.type: 0200
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0300
>t.attributes.u.attr_16: e9fd
>t.attributes.type: 0400
>t.attributes.u.attr_16: 0200
>t.attributes.type: 0b00
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0c00
>t.attributes.u.lots.length: 0400
>t.attributes.u.lots.data: 0020c49b
>DONE PARSING PAYLOAD type: 03
>PARSING PAYLOAD type: 03
>next_type: 03
>length: 24000000
>t.number: 06
>t.id: 01
>t.attributes.type: 0100
>t.attributes.u.attr_16: 0500
>t.attributes.type: 0200
>t.attributes.u.attr_16: 0200
>t.attributes.type: 0300
>t.attributes.u.attr_16: e9fd
>t.attributes.type: 0400
>t.attributes.u.attr_16: 0200
>t.attributes.type: 0b00
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0c00
>t.attributes.u.lots.length: 0400
>t.attributes.u.lots.data: 0020c49b
>DONE PARSING PAYLOAD type: 03
>PARSING PAYLOAD type: 03
>next_type: 00
>length: 24000000
>t.number: 07
>t.id: 01
>t.attributes.type: 0100
>t.attributes.u.attr_16: 0500
>t.attributes.type: 0200
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0300
>t.attributes.u.attr_16: e9fd
>t.attributes.type: 0400
>t.attributes.u.attr_16: 0200
>t.attributes.type: 0b00
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0c00
>t.attributes.u.lots.length: 0400
>t.attributes.u.lots.data: 0020c49b
>DONE PARSING PAYLOAD type: 03
>PARSING PAYLOAD type: 00
>DONE PARSING PAYLOAD type: 02
>PARSING PAYLOAD type: 00
>DONE PARSING PAYLOAD type: 01
>PARSING PAYLOAD type: 04
>next_type: 0a
>length: 84000000
>ke.data:
>6f5be22d b81bc589 43cd03e6 40c7d18f 8b4cad0a 0c120ce4 12821141 bcdd186b
>df4ef1bf dc6fa58d c18eb10d 02419965 40a83c2c 9a44c51e c8801383 09e73ab1
>d27deb8e f9c15c92 25dbe863 f927b100 ace33cfe f87b4528 136024e3 0a83f292
>831d6148 a6bbb2f8 1fdcf72e 1cb91758 91a4f02d 8fb0bf20 2a88e1fd ec288a9d
>DONE PARSING PAYLOAD type: 04
>PARSING PAYLOAD type: 0a
>next_type: 05
>length: 18000000
>ke.data: 7d3eea45 aa7eafaf 6fbc0717 a758b068 85201945
>DONE PARSING PAYLOAD type: 0a
>PARSING PAYLOAD type: 05
>next_type: 0d
>length: 11000000
>id.type: 0b
>id.protocol: 11
>id.port: f401
>id.data: 6966625f 67726f75 70
>DONE PARSING PAYLOAD type: 05
>PARSING PAYLOAD type: 0d
>next_type: 0d
>length: 0c000000
>ke.data: 09002689 dfd6b712
>DONE PARSING PAYLOAD type: 0d
>PARSING PAYLOAD type: 0d
>next_type: 00
>length: 14000000
>ke.data: 12f5f28c 457168a9 702d9fe2 74cc0100
>DONE PARSING PAYLOAD type: 0d
>PARSING PAYLOAD type: 00
>PARSE_OK
>
>exchange_type: 04
>S4.4
>
>BEGIN_PARSE
>i_cookie: 1f0bd592 53223977
>r_cookie: 2a94eb83 5217daf0
>payload: 01
>isakmp_version: 10
>exchange_type: 04
>flags: 00
>message_id: 00000000
>len: 84010000
>PARSING PAYLOAD type: 01
>next_type: 04
>length: 38000000
>sa.doi: 01000000
>sa.situation: 01000000
>PARSING PAYLOAD type: 02
>next_type: 00
>length: 2c000000
>p.number: 01
>p.prot_id: 01
>p.spi_size: 00
>length: 01
>p.spi:
>PARSING PAYLOAD type: 03
>next_type: 00
>length: 24000000
>t.number: 07
>t.id: 01
>t.attributes.type: 0100
>t.attributes.u.attr_16: 0500
>t.attributes.type: 0200
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0400
>t.attributes.u.attr_16: 0200
>t.attributes.type: 0300
>t.attributes.u.attr_16: e9fd
>t.attributes.type: 0b00
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0c00
>t.attributes.u.lots.length: 0400
>t.attributes.u.lots.data: 0020c49b
>DONE PARSING PAYLOAD type: 03
>PARSING PAYLOAD type: 00
>DONE PARSING PAYLOAD type: 02
>PARSING PAYLOAD type: 00
>DONE PARSING PAYLOAD type: 01
>PARSING PAYLOAD type: 04
>next_type: 0a
>length: 84000000
>ke.data:
>b7a47124 8f704d28 85cbdf6a b7b3a5ce 88abc563 0715e3d3 fef7ba63 89bdc6b4
>29dad1d1 81d1eb89 71ff4ebb 38a5b2ce 4786634d d606b5ae 53037790 8316df4c
>a471a360 08c88de2 c0a40c86 32823498 7f22da88 0764f5c2 d57ea463 275cad22
>b3b8d90e 1217f640 b10b15d5 7045d1a9 4b05e634 43867afc a1f963cd eece022d
>DONE PARSING PAYLOAD type: 04
>PARSING PAYLOAD type: 0a
>next_type: 05
>length: 18000000
>ke.data: bf2f7ca0 4feee9a4 dc1a2e34 fad7711e ac3237cf
>DONE PARSING PAYLOAD type: 0a
>PARSING PAYLOAD type: 05
>next_type: 08
>length: 0c000000
>id.type: 01
>id.protocol: 11
>id.port: 0000
>id.data: d017c6d7
>DONE PARSING PAYLOAD type: 05
>PARSING PAYLOAD type: 08
>next_type: 0d
>length: 14000000
>ke.data: 1c8b1f85 1ea9b879 0afdba98 c0e67f74
>DONE PARSING PAYLOAD type: 08
>PARSING PAYLOAD type: 0d
>next_type: 0d
>length: 14000000
>ke.data: 12f5f28c 457168a9 702d9fe2 74cc0100
>DONE PARSING PAYLOAD type: 0d
>PARSING PAYLOAD type: 0d
>next_type: 0d
>length: 0c000000
>ke.data: 09002689 dfd6b712
>DONE PARSING PAYLOAD type: 0d
>PARSING PAYLOAD type: 0d
>next_type: 0d
>length: 14000000
>ke.data: afcad713 68a1f1c9 6b8696fc 77570100
>DONE PARSING PAYLOAD type: 0d
>PARSING PAYLOAD type: 0d
>next_type: 0d
>length: 18000000
>ke.data: 4048b7d5 6ebce885 25e7de7f 00d6c2d3 c0000000
>DONE PARSING PAYLOAD type: 0d
>PARSING PAYLOAD type: 0d
>next_type: 0d
>length: 14000000
>ke.data: df534c9e 5216daf0 ad14e28e 8b87b434
>DONE PARSING PAYLOAD type: 0d
>PARSING PAYLOAD type: 0d
>next_type: 00
>length: 14000000
>ke.data: 1f07f70e aa6514d3 b0fa9654 2a500400
>DONE PARSING PAYLOAD type: 0d
>PARSING PAYLOAD type: 00
>PARSE_OK
>
>IKE SA selected 3des-md5
>skeyid: f4149685 c45ae1d0 dc5bc2cc 2cc23304
>returned_hash: 3df2ac79 3ea75bc2 3565ddae 03b7fb47
>dh_shared_secret:
>0878d21a 4f53c5a6 ebf92544 7f0536ee 7e0ae098 8994f3b4 9e0101c7 7e23f4c3
>74c4632e 558826c4 58a62169 58ddea1d 92a5c9ec ef1dd38f 6f3a39f9 e4402f69
>0dd61255 8d2ea4f7 18119e99 75332b98 36fbc4c3 a7aafc1a 9d54266c 00889e6f
>7bc7de15 2ba920bf 8821e920 bff0755e 3b1ac24b 5bf68c17 8353542f 183de583
>skeyid_d: a5872b74 f222bf02 5e1bc36c 9cf1f3ae
>skeyid_a: 19e49175 e8a45d41 3a026e7a 7f607422
>skeyid_e: 27e9d13b f61ce647 924317c3 e3800e05
>enc-key: 9de7b65c 2d75dc0b ba2eee96 a3a63a07 9d5cfa81 0b21867f
>current_iv: b6aef8e8 78a24adc
>S4.5
>size = 68, blksz = 8, padding = 4
>
> sending: ========================>
>
>BEGIN_PARSE
>i_cookie: 1f0bd592 53223977
>r_cookie: 2a94eb83 5217daf0
>payload: 08
>isakmp_version: 10
>exchange_type: 04
>flags: 01
>message_id: 00000000
>len: 64000000
>PARSING PAYLOAD type: 08
>next_type: 0b
>length: 14000000
>ke.data: 3df2ac79 3ea75bc2 3565ddae 03b7fb47
>DONE PARSING PAYLOAD type: 08
>PARSING PAYLOAD type: 0b
>next_type: 0d
>length: 1c000000
>n.doi: 01000000
>n.protocol: 01
>n.spi_length: 10
>n.type: 0260
>n.spi: 1f0bd592 53223977 2a94eb83 5217daf0
>n.data:
>DONE PARSING PAYLOAD type: 0b
>PARSING PAYLOAD type: 0d
>next_type: 00
>length: 14000000
>ke.data: 12f5f28c 457168a9 702d9fe2 74cc0100
>DONE PARSING PAYLOAD type: 0d
>PARSING PAYLOAD type: 00
>PARSE_OK
>
>initial_iv: b1612bf0 e94fde18
>exchange_type: 05
>S4.6
>S5
>S5.1
>S5.2
>
>BEGIN_PARSE
>i_cookie: 4fc9809f 4c406e3c
>r_cookie: b69d39f6 b4d7112b
>payload: 08
>isakmp_version: 10
>exchange_type: 05
>flags: 01
>message_id: 0321052a
>len: 44000000
>PARSING PAYLOAD type: 08
>next_type: 65
>exchange_type: 05
>S5.2
>
>BEGIN_PARSE
>i_cookie: 4fc9809f 4c406e3c
>r_cookie: b69d39f6 b4d7112b
>payload: 08
>isakmp_version: 10
>exchange_type: 05
>flags: 01
>message_id: 7f9665f0
>len: 4c000000
>PARSING PAYLOAD type: 08
>next_type: e1
>exchange_type: 06
>S5.2
>
>BEGIN_PARSE
>i_cookie: 1f0bd592 53223977
>r_cookie: 2a94eb83 5217daf0
>payload: 08
>isakmp_version: 10
>exchange_type: 06
>flags: 01
>message_id: 2c4109ca
>len: 64000000
>PARSING PAYLOAD type: 08
>next_type: 0e
>length: 14000000
>ke.data: 5a99076a 1fe3cef1 cce8936e b17099d4
>DONE PARSING PAYLOAD type: 08
>PARSING PAYLOAD type: 0e
>next_type: 00
>length: 34000000
>modecfg.type: 01
>t.id: 0000
>t.attributes.type: 8840
>(not dumping xauth data)
>t.attributes.type: 8940
>(not dumping xauth data length)
>(not dumping xauth data)
>t.attributes.type: 8a40
>(not dumping xauth data length)
>(not dumping xauth data)
>t.attributes.type: 8c40
>(not dumping xauth data length)
>(not dumping xauth data)
>DONE PARSING PAYLOAD type: 0e
>PARSING PAYLOAD type: 00
>PARSE_OK
>
>hashlen: 16
>u.hash.length: 16
>expected_hash: 5a99076a 1fe3cef1 cce8936e b17099d4
>h->u.hash.data: 5a99076a 1fe3cef1 cce8936e b17099d4
>S5.3
>S5.4
>Enter Username and Password.
>S5.5
>size = 58, blksz = 8, padding = 6
>
> sending: ========================>
>
>BEGIN_PARSE
>i_cookie: 1f0bd592 53223977
>r_cookie: 2a94eb83 5217daf0
>payload: 08
>isakmp_version: 10
>exchange_type: 06
>flags: 01
>message_id: 2c4109ca
>len: 5c000000
>PARSING PAYLOAD type: 08
>next_type: 0e
>length: 14000000
>ke.data: 77fa7255 c43c5b2f 810c12e8 1ebf755e
>DONE PARSING PAYLOAD type: 08
>PARSING PAYLOAD type: 0e
>next_type: 00
>length: 26000000
>modecfg.type: 02
>t.id: 0000
>t.attributes.type: 8a40
>(not dumping xauth data length)
>(not dumping xauth data)
>t.attributes.type: 8940
>(not dumping xauth data length)
>(not dumping xauth data)
>DONE PARSING PAYLOAD type: 0e
>PARSING PAYLOAD type: 00
>PARSE_OK
>
>exchange_type: 06
>S5.2
>
>BEGIN_PARSE
>i_cookie: 1f0bd592 53223977
>r_cookie: 2a94eb83 5217daf0
>payload: 08
>isakmp_version: 10
>exchange_type: 06
>flags: 01
>message_id: 784800ca
>len: 3c000000
>PARSING PAYLOAD type: 08
>next_type: 0e
>length: 14000000
>ke.data: bf8829f1 0274351f 44151b3f bc618b4e
>DONE PARSING PAYLOAD type: 08
>PARSING PAYLOAD type: 0e
>next_type: 00
>length: 0c000000
>modecfg.type: 03
>t.id: 0000
>t.attributes.type: 8f40
>(not dumping xauth data)
>DONE PARSING PAYLOAD type: 0e
>PARSING PAYLOAD type: 00
>PARSE_OK
>
>hashlen: 16
>u.hash.length: 16
>expected_hash: bf8829f1 0274351f 44151b3f bc618b4e
>h->u.hash.data: bf8829f1 0274351f 44151b3f bc618b4e
>S5.3
>S5.6
>size = 32, blksz = 8, padding = 0
>
> sending: ========================>
>
>BEGIN_PARSE
>i_cookie: 1f0bd592 53223977
>r_cookie: 2a94eb83 5217daf0
>payload: 08
>isakmp_version: 10
>exchange_type: 06
>flags: 01
>message_id: 784800ca
>len: 3c000000
>PARSING PAYLOAD type: 08
>next_type: 0e
>length: 14000000
>ke.data: a601a305 7b777a8e fd3a1c0f 753efd23
>DONE PARSING PAYLOAD type: 08
>PARSING PAYLOAD type: 0e
>next_type: 00
>length: 0c000000
>modecfg.type: 04
>t.id: 0000
>t.attributes.type: 8f40
>(not dumping xauth data)
>DONE PARSING PAYLOAD type: 0e
>PARSING PAYLOAD type: 00
>PARSE_OK
>
>S5.7
>S6
>size = 116, blksz = 8, padding = 4
>
> sending: ========================>
>
>BEGIN_PARSE
>i_cookie: 1f0bd592 53223977
>r_cookie: 2a94eb83 5217daf0
>payload: 08
>isakmp_version: 10
>exchange_type: 06
>flags: 01
>message_id: 1ceb6899
>len: 94000000
>PARSING PAYLOAD type: 08
>next_type: 0e
>length: 14000000
>ke.data: 2f4ccb16 3eb29426 688dc3b6 327a7d3b
>DONE PARSING PAYLOAD type: 08
>PARSING PAYLOAD type: 0e
>next_type: 00
>length: 60000000
>modecfg.type: 01
>t.id: 1400
>t.attributes.type: 0100
>t.attributes.u.lots.length: 0000
>t.attributes.u.lots.data:
>t.attributes.type: 0200
>t.attributes.u.lots.length: 0000
>t.attributes.u.lots.data:
>t.attributes.type: 0300
>t.attributes.u.lots.length: 0000
>t.attributes.u.lots.data:
>t.attributes.type: 0400
>t.attributes.u.lots.length: 0000
>t.attributes.u.lots.data:
>t.attributes.type: 0270
>t.attributes.u.lots.length: 0000
>t.attributes.u.lots.data:
>t.attributes.type: 0770
>t.attributes.u.lots.length: 0000
>t.attributes.u.lots.data:
>t.attributes.type: 0070
>t.attributes.u.lots.length: 0000
>t.attributes.u.lots.data:
>t.attributes.type: 0a70
>t.attributes.u.lots.length: 0600
>t.attributes.u.lots.data: 70687064 6576
>t.attributes.type: 0700
>t.attributes.u.lots.length: 2e00
>t.attributes.u.lots.data:
>43697363 6f205379 7374656d 73205650 4e20436c 69656e74 20302e32 2d726d2b
>7a6f6d62 2e313a46 72656542 5344
>DONE PARSING PAYLOAD type: 0e
>PARSING PAYLOAD type: 00
>PARSE_OK
>
>exchange_type: 06
>
>BEGIN_PARSE
>i_cookie: 1f0bd592 53223977
>r_cookie: 2a94eb83 5217daf0
>payload: 08
>isakmp_version: 10
>exchange_type: 06
>flags: 01
>message_id: 1ceb6899
>len: b4000000
>PARSING PAYLOAD type: 08
>next_type: 0e
>length: 14000000
>ke.data: eace4de1 61936396 5cc034c5 3e068fcf
>DONE PARSING PAYLOAD type: 08
>PARSING PAYLOAD type: 0e
>next_type: 00
>length: 82000000
>modecfg.type: 02
>t.id: 0000
>t.attributes.type: 0100
>t.attributes.u.lots.length: 0400
>t.attributes.u.lots.data: c0a86469
>t.attributes.type: 0300
>t.attributes.u.lots.length: 0400
>t.attributes.u.lots.data: d00ebdcd
>t.attributes.type: 0770
>t.attributes.u.attr_16: 0000
>t.attributes.type: 0700
>t.attributes.u.lots.length: 6200
>t.attributes.u.lots.data:
>43697363 6f205379 7374656d 732c2049 6e632e2f 56504e20 33303030 20436f6e
>63656e74 7261746f 72205665 7273696f 6e20342e 302e312e 45206275 696c7420
>62792076 6d757270 6879206f 6e205365 70203138 20323030 33203231 3a31373a
>3230
>DONE PARSING PAYLOAD type: 0e
>PARSING PAYLOAD type: 00
>PARSE_OK
>
>hashlen: 16
>u.hash.length: 16
>expected_hash: eace4de1 61936396 5cc034c5 3e068fcf
>h->u.hash.data: eace4de1 61936396 5cc034c5 3e068fcf
>got pfs setting: 0
>Remote Application Version: Cisco Systems, Inc./VPN 3000 Concentrator
>Version 4.0.1.E built by vmurphy on Sep 18 2003 21:17:20
>got address 192.168.100.105
>S7
>S7.1
>S7.2
>size = 344, blksz = 8, padding = 0
>
> sending: ========================>
>
>BEGIN_PARSE
>i_cookie: 1f0bd592 53223977
>r_cookie: 2a94eb83 5217daf0
>payload: 08
>isakmp_version: 10
>exchange_type: 20
>flags: 01
>message_id: 3bfa0670
>len: 74010000
>PARSING PAYLOAD type: 08
>next_type: 01
>length: 14000000
>ke.data: 7fae0e4d 012136db 4f3f67fa cf92a542
>DONE PARSING PAYLOAD type: 08
>PARSING PAYLOAD type: 01
>next_type: 0a
>length: 10010000
>sa.doi: 01000000
>sa.situation: 01000000
>PARSING PAYLOAD type: 02
>next_type: 00
>length: 04010000
>p.number: 00
>p.prot_id: 03
>p.spi_size: 04
>length: 08
>p.spi: b2d02a7b
>PARSING PAYLOAD type: 03
>next_type: 03
>length: 20000000
>t.number: 00
>t.id: 0c
>t.attributes.type: 0600
>t.attributes.u.attr_16: 0001
>t.attributes.type: 0400
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0500
>t.attributes.u.attr_16: 0200
>t.attributes.type: 0100
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0200
>t.attributes.u.lots.length: 0400
>t.attributes.u.lots.data: 0020c49b
>DONE PARSING PAYLOAD type: 03
>PARSING PAYLOAD type: 03
>next_type: 03
>length: 20000000
>t.number: 01
>t.id: 0c
>t.attributes.type: 0600
>t.attributes.u.attr_16: 0001
>t.attributes.type: 0400
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0500
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0100
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0200
>t.attributes.u.lots.length: 0400
>t.attributes.u.lots.data: 0020c49b
>DONE PARSING PAYLOAD type: 03
>PARSING PAYLOAD type: 03
>next_type: 03
>length: 20000000
>t.number: 02
>t.id: 0c
>t.attributes.type: 0600
>t.attributes.u.attr_16: c000
>t.attributes.type: 0400
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0500
>t.attributes.u.attr_16: 0200
>t.attributes.type: 0100
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0200
>t.attributes.u.lots.length: 0400
>t.attributes.u.lots.data: 0020c49b
>DONE PARSING PAYLOAD type: 03
>PARSING PAYLOAD type: 03
>next_type: 03
>length: 20000000
>t.number: 03
>t.id: 0c
>t.attributes.type: 0600
>t.attributes.u.attr_16: c000
>t.attributes.type: 0400
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0500
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0100
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0200
>t.attributes.u.lots.length: 0400
>t.attributes.u.lots.data: 0020c49b
>DONE PARSING PAYLOAD type: 03
>PARSING PAYLOAD type: 03
>next_type: 03
>length: 20000000
>t.number: 04
>t.id: 0c
>t.attributes.type: 0600
>t.attributes.u.attr_16: 8000
>t.attributes.type: 0400
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0500
>t.attributes.u.attr_16: 0200
>t.attributes.type: 0100
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0200
>t.attributes.u.lots.length: 0400
>t.attributes.u.lots.data: 0020c49b
>DONE PARSING PAYLOAD type: 03
>PARSING PAYLOAD type: 03
>next_type: 03
>length: 20000000
>t.number: 05
>t.id: 0c
>t.attributes.type: 0600
>t.attributes.u.attr_16: 8000
>t.attributes.type: 0400
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0500
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0100
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0200
>t.attributes.u.lots.length: 0400
>t.attributes.u.lots.data: 0020c49b
>DONE PARSING PAYLOAD type: 03
>PARSING PAYLOAD type: 03
>next_type: 03
>length: 1c000000
>t.number: 06
>t.id: 03
>t.attributes.type: 0400
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0500
>t.attributes.u.attr_16: 0200
>t.attributes.type: 0100
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0200
>t.attributes.u.lots.length: 0400
>t.attributes.u.lots.data: 0020c49b
>DONE PARSING PAYLOAD type: 03
>PARSING PAYLOAD type: 03
>next_type: 00
>length: 1c000000
>t.number: 07
>t.id: 03
>t.attributes.type: 0400
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0500
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0100
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0200
>t.attributes.u.lots.length: 0400
>t.attributes.u.lots.data: 0020c49b
>DONE PARSING PAYLOAD type: 03
>PARSING PAYLOAD type: 00
>DONE PARSING PAYLOAD type: 02
>PARSING PAYLOAD type: 00
>DONE PARSING PAYLOAD type: 01
>PARSING PAYLOAD type: 0a
>next_type: 05
>length: 18000000
>ke.data: 6ddb1a11 ea5cfb0e 6b988ef1 b083d831 6c53db16
>DONE PARSING PAYLOAD type: 0a
>PARSING PAYLOAD type: 05
>next_type: 05
>length: 0c000000
>id.type: 01
>id.protocol: 00
>id.port: 0000
>id.data: c0a86469
>DONE PARSING PAYLOAD type: 05
>PARSING PAYLOAD type: 05
>next_type: 00
>length: 10000000
>id.type: 04
>id.protocol: 00
>id.port: 0000
>id.data: 00000000 00000000
>DONE PARSING PAYLOAD type: 05
>PARSING PAYLOAD type: 00
>PARSE_OK
>
>exchange_type: 05
>S7.3
>
>BEGIN_PARSE
>i_cookie: 1f0bd592 53223977
>r_cookie: 2a94eb83 5217daf0
>payload: 08
>isakmp_version: 10
>exchange_type: 05
>flags: 01
>message_id: da854937
>len: 5c000000
>PARSING PAYLOAD type: 08
>next_type: 0b
>length: 14000000
>ke.data: 0e7e5736 3e84a261 6a1fc6bf 2c329be7
>DONE PARSING PAYLOAD type: 08
>PARSING PAYLOAD type: 0b
>next_type: 00
>length: 28000000
>n.doi: 01000000
>n.protocol: 01
>n.spi_length: 10
>n.type: 0060
>n.spi: 1f0bd592 53223977 2a94eb83 5217daf0
>n.data: 800b0001 000c0004 00015180
>DONE PARSING PAYLOAD type: 0b
>PARSING PAYLOAD type: 00
>PARSE_OK
>
>hashlen: 16
>u.hash.length: 16
>expected_hash: ff446f94 19546c6c 344360bf 8e993862
>h->u.hash.data: 0e7e5736 3e84a261 6a1fc6bf 2c329be7
>S7.4
>ignoring responder-lifetime notify
>exchange_type: 20
>S7.3
>
>BEGIN_PARSE
>i_cookie: 1f0bd592 53223977
>r_cookie: 2a94eb83 5217daf0
>payload: 08
>isakmp_version: 10
>exchange_type: 20
>flags: 01
>message_id: 3bfa0670
>len: b4000000
>PARSING PAYLOAD type: 08
>next_type: 01
>length: 14000000
>ke.data: fce6454e 6e27f6d3 76297f4b 16283bdd
>DONE PARSING PAYLOAD type: 08
>PARSING PAYLOAD type: 01
>next_type: 0a
>length: 34000000
>sa.doi: 01000000
>sa.situation: 01000000
>PARSING PAYLOAD type: 02
>next_type: 00
>length: 28000000
>p.number: 01
>p.prot_id: 03
>p.spi_size: 04
>length: 01
>p.spi: 00a7ae96
>PARSING PAYLOAD type: 03
>next_type: 00
>length: 1c000000
>t.number: 01
>t.id: 03
>t.attributes.type: 0100
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0200
>t.attributes.u.lots.length: 0400
>t.attributes.u.lots.data: 0020c49b
>t.attributes.type: 0400
>t.attributes.u.attr_16: 0100
>t.attributes.type: 0500
>t.attributes.u.attr_16: 0100
>DONE PARSING PAYLOAD type: 03
>PARSING PAYLOAD type: 00
>DONE PARSING PAYLOAD type: 02
>PARSING PAYLOAD type: 00
>DONE PARSING PAYLOAD type: 01
>PARSING PAYLOAD type: 0a
>next_type: 05
>length: 18000000
>ke.data: c1ed06a1 90f264a1 f28a0483 67786fe7 bc7bdc6f
>DONE PARSING PAYLOAD type: 0a
>PARSING PAYLOAD type: 05
>next_type: 05
>length: 0c000000
>id.type: 01
>id.protocol: 00
>id.port: 0000
>id.data: c0a86469
>DONE PARSING PAYLOAD type: 05
>PARSING PAYLOAD type: 05
>next_type: 0b
>length: 10000000
>id.type: 04
>id.protocol: 00
>id.port: 0000
>id.data: 00000000 00000000
>DONE PARSING PAYLOAD type: 05
>PARSING PAYLOAD type: 0b
>next_type: 00
>length: 18000000
>n.doi: 01000000
>n.protocol: 03
>n.spi_length: 04
>n.type: 0060
>n.spi: 00a7ae96
>n.data: 80010001 80027080
>DONE PARSING PAYLOAD type: 0b
>PARSING PAYLOAD type: 00
>PARSE_OK
>
>hashlen: 16
>u.hash.length: 16
>expected_hash: fce6454e 6e27f6d3 76297f4b 16283bdd
>h->u.hash.data: fce6454e 6e27f6d3 76297f4b 16283bdd
>S7.4
>S7.5
>S7.6
>IPSEC SA selected 3des-md5
>authing NULL package!
>size = 20, blksz = 8, padding = 4
>
> sending: ========================>
>
>BEGIN_PARSE
>i_cookie: 1f0bd592 53223977
>r_cookie: 2a94eb83 5217daf0
>payload: 08
>isakmp_version: 10
>exchange_type: 20
>flags: 01
>message_id: 3bfa0670
>len: 34000000
>PARSING PAYLOAD type: 08
>next_type: 00
>length: 14000000
>ke.data: 46303e7b 93c900e3 0af76704 1dac22a5
>DONE PARSING PAYLOAD type: 08
>PARSING PAYLOAD type: 00
>PARSE_OK
>
>S7.7
>size = 68, blksz = 8, padding = 4
>
> sending: ========================>
>
>BEGIN_PARSE
>i_cookie: 1f0bd592 53223977
>r_cookie: 2a94eb83 5217daf0
>payload: 08
>isakmp_version: 10
>exchange_type: 05
>flags: 01
>message_id: aec0254f
>len: 64000000
>PARSING PAYLOAD type: 08
>next_type: 0c
>length: 14000000
>ke.data: e06be555 f81813c6 e5ac031e 528436fa
>DONE PARSING PAYLOAD type: 08
>PARSING PAYLOAD type: 0c
>next_type: 0c
>length: 14000000
>n.doi: 01
>n.protocol: 03
>n.spi_length: 04
>d.num_spi: 0200
>d.spi: b2d02a7b
>d.spi: 00a7ae96
>DONE PARSING PAYLOAD type: 0c
>PARSING PAYLOAD type: 0c
>next_type: 00
>length: 1c000000
>n.doi: 01
>n.protocol: 01
>n.spi_length: 10
>d.num_spi: 0100
>d.spi: 1f0bd592 53223977 2a94eb83 5217daf0
>DONE PARSING PAYLOAD type: 0c
>PARSING PAYLOAD type: 00
>PARSE_OK
>
>S7.8
>S7.9
>generating 40 bytes keymat (cnt=3)
>generating 40 bytes keymat (cnt=3)
>S7.10
>tous.enc_secret: 05ab938f 7b9c7f1f 0c6815ee 4176918f ca65f892 06bb3c12
>tous.auth_secret: 2816e5d0 95c72f3c 59872a30 5688dd05
>tothem.enc_secret: 764a3448 c444fe78 58fabc29 0379d278 4dae181d 60897800
>tothem.auth_secret: fb08e14a 8efc74a2 48ae1f58 e754824f
>VPNC started in background (pid: 1148)...



Justin Hendrickson justin@onyourmark.com
----------------------------------------------------------------------------
Web Development Specialist
Klein Internet Marketing Group
a division of Keith Klein & Associates, Inc.

www.kleininternet.com Phone: 262-820-8201
22603 West Main Street or: 800-747-3399
Sussex, WI 53089 Fax: 262-820-8202
VPN and routes [ In reply to ]
massar at unix-ag
Jun 9, 2004, 5:07 PM
Post #5 of 7 (3233 views)
Permalink
hi,

> I'm still getting the same errors, reguardless of what I change. Anyone have any ideas what I can
> do to get vpnc working?

your configuration looks like there is a NAT-device between you
and your vpn concentrator (just guessing) ..

are you the only person using ipsec behind this NAT-device?
if not, it will not work because ESP is not NAT compatible
and NAT-T support is still missing from vpnc...

cu
maurice
VPN and routes [ In reply to ]
justin at onyourmark
Jun 9, 2004, 5:19 PM
Post #6 of 7 (3219 views)
Permalink
>your configuration looks like there is a NAT-device between you
>and your vpn concentrator (just guessing) ..

Yes, I am behind a NAT-device (IPCop, specifically).

>are you the only person using ipsec behind this NAT-device?
>if not, it will not work because ESP is not NAT compatible
>and NAT-T support is still missing from vpnc...

I believe that I am the only one using IPSEC in the office, but I'll ask around again, just to make sure.
Justin Hendrickson justin@onyourmark.com
----------------------------------------------------------------------------
Web Development Specialist
Klein Internet Marketing Group
a division of Keith Klein & Associates, Inc.

www.kleininternet.com Phone: 262-820-8201
22603 West Main Street or: 800-747-3399
Sussex, WI 53089 Fax: 262-820-8202
VPN and routes [ In reply to ]
massar at unix-ag
Jun 9, 2004, 5:23 PM
Post #7 of 7 (3234 views)
Permalink
hi,

> >your configuration looks like there is a NAT-device between you
> >and your vpn concentrator (just guessing) ..
>
> Yes, I am behind a NAT-device (IPCop, specifically).
>
> >are you the only person using ipsec behind this NAT-device?
> >if not, it will not work because ESP is not NAT compatible
> >and NAT-T support is still missing from vpnc...
>
> I believe that I am the only one using IPSEC in the office, but I'll ask around again, just to ma
> ke sure.

It just _may_ work if you are the only one ..
... only if the nat-device is smart (ie. esp aware)
... and ip-esp is not explicitly blocked

cu
maurice

©2024 GT.net. A Gossamer Threads company.
5th Floor, 455 Granville St., Vancouver, BC V6C 1T1, Canada | Legal