Cisco nat traversal debug
debug crypto isakmp
R3#
*Mar 1 00:04:48.127: ISAKMP (0:0): received packet from 1.1.1.10 dport 500 sport 500 Global (N) NEW SA
*Mar 1 00:04:48.127: ISAKMP: Created a peer struct for 1.1.1.10, peer port 500
*Mar 1 00:04:48.127: ISAKMP: New peer created peer = 0x64F42D64 peer_handle = 0x80000002
*Mar 1 00:04:48.131: ISAKMP: Locking peer struct 0x64F42D64, IKE refcount 1 for crypto_isakmp_process_block
*Mar 1 00:04:48.131: ISAKMP: local port 500, remote port 500
*Mar 1 00:04:48.131: insert sa successfully sa = 64DE9358
*Mar 1 00:04:48.139: ISAKMP:(0:0:N/A:0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
*Mar 1 00:04:48.143: ISAKMP:(0:0:N/A:0):Old State = IKE_READY New State = IKE_R_MM1
*Mar 1 00:04:48.147: ISAKMP:(0:0:N/A:0): processing SA payload. message ID = 0
*Mar 1 00:04:48.147: ISAKMP:(0:0:N/A:0): processing vendor id payload
*Mar 1 00:04:48.151: ISAKMP:(0:0:N/A:0): vendor ID seems Unity/DPD but major 245 mismatch
*Mar 1 00:04:48.151: ISAKMP (0:0): vendor ID is NAT-T v7
*Mar 1 00:04:48.151: ISAKMP:(0:0:N/A:0): processing vendor id payload
*Mar 1 00:04:48.151: ISAKMP:(0:0:N/A:0): vendor ID seems Unity/DPD but major 157 mismatch
*Mar 1 00:04:48.155: ISAKMP:(0:0:N/A:0): vendor ID is NAT-T v3
*Mar 1 00:04:48.155: ISAKMP:(0:0:N/A:0): processing vendor id payload
*Mar 1 00:04:48.155: ISAKMP:(0:0:N/A:0): vendor ID seems Unity/DPD but major 123 mismatch
*Mar 1 00:04:48.155: ISAKMP:(0:0:N/A:0): vendor ID is NAT-T v2
*Mar 1 00:04:48.159: ISAKMP:(0:0:N/A:0):found peer pre-shared key matching 1.1.1.10
*Mar 1 00:04:48.159: ISAKMP:(0:0:N/A:0): local preshared key found
*Mar 1 00:04:48.159: ISAKMP : Scanning profiles for xauth ...
*Mar 1 00:04:48.159: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 1 against priority 10 policy
*Mar 1 00:04:48.159: ISAKMP: encryption AES-CBC
*Mar 1 00:04:48.163: ISAKMP: keylength of 256
*Mar 1 00:04:48.163: ISAKMP: hash SHA
*Mar 1 00:04:48.163: ISAKMP: default group 5
*Mar 1 00:04:48.163: ISAKMP: auth pre-share
*Mar 1 00:04:48.163: ISAKMP: life type in seconds
*Mar 1 00:04:48.163: ISAKMP: life duration (basic) of 3600
*Mar 1 00:04:48.167: ISAKMP:(0:0:N/A:0):atts are acceptable. Next payload is 0
*Mar 1 00:04:48.311: ISAKMP:(0:1:SW:1): processing vendor id payload
*Mar 1 00:04:48.311: ISAKMP:(0:1:SW:1): vendor ID seems Unity/DPD but major 245 mismatch
*Mar 1 00:04:48.311: ISAKMP (0:134217729): vendor ID is NAT-T v7
*Mar 1 00:04:48.315: ISAKMP:(0:1:SW:1): processing vendor id payload
*Mar 1 00:04:48.315: ISAKMP:(0:1:SW:1): vendor ID seems Unity/DPD but major 157 mismatch
*Mar 1 00:04:48.315: ISAKMP:(0:1:SW:1): vendor ID is NAT-T v3
*Mar 1 00:04:48.315: ISAKMP:(0:1:SW:1): processing vendor id payload
*Mar 1 00:04:48.319: ISAKMP:(0:1:SW:1): vendor ID seems Unity/DPD but major 123 mismatch
*Mar 1 00:04:48.319: ISAKMP:(0:1:SW:1): vendor ID is NAT-T v2
*Mar 1 00:04:48.319: ISAKMP:(0:1:SW:1):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
*Mar 1 00:04:48.323: ISAKMP:(0:1:SW:1):Old State = IKE_R_MM1 New State = IKE_R_MM1
*Mar 1 00:04:48.327: ISAKMP:(0:1:SW:1): constructed NAT-T vendor-07 ID
*Mar 1 00:04:48.331: ISAKMP:(0:1:SW:1): sending packet to 1.1.1.10 my_port 500 peer_port 500 (R) MM_SA_SETUP
*Mar 1 00:04:48.331: ISAKMP:(0:1:SW:1):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
*Mar 1 00:04:48.331: ISAKMP:(0:1:SW:1):Old State = IKE_R_MM1 New State = IKE_R_MM2
*Mar 1 00:04:58.331: ISAKMP:(0:1:SW:1): retransmitting phase 1 MM_SA_SETUP...
*Mar 1 00:04:58.331: ISAKMP (0:134217729): incrementing error counter on sa, attempt 1 of 5: retransmit phase 1
*Mar 1 00:04:58.331: ISAKMP:(0:1:SW:1): retransmitting phase 1 MM_SA_SETUP
*Mar 1 00:04:58.331: ISAKMP:(0:1:SW:1): sending packet to 1.1.1.10 my_port 500 peer_port 500 (R) MM_SA_SETUP
*Mar 1 00:04:58.499: ISAKMP (0:134217729): received packet from 1.1.1.10 dport 500 sport 500 Global (R) MM_SA_SETUP
*Mar 1 00:04:58.499: ISAKMP:(0:1:SW:1):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
*Mar 1 00:04:58.503: ISAKMP:(0:1:SW:1):Old State = IKE_R_MM2 New State = IKE_R_MM3
*Mar 1 00:04:58.503: ISAKMP:(0:1:SW:1): processing KE payload. message ID = 0
*Mar 1 00:04:58.599: ISAKMP:(0:1:SW:1): processing NONCE payload. message ID = 0
*Mar 1 00:04:58.599: ISAKMP:(0:1:SW:1):found peer pre-shared key matching 1.1.1.10
*Mar 1 00:04:58.599: ISAKMP:(0:1:SW:1):SKEYID state generated
*Mar 1 00:04:58.599: ISAKMP:(0:1:SW:1): processing vendor id payload
*Mar 1 00:04:58.599: ISAKMP:(0:1:SW:1): vendor ID is Unity
*Mar 1 00:04:58.599: ISAKMP:(0:1:SW:1): processing vendor id payload
*Mar 1 00:04:58.599: ISAKMP:(0:1:SW:1): vendor ID is DPD
*Mar 1 00:04:58.599: ISAKMP:(0:1:SW:1): processing vendor id payload
*Mar 1 00:04:58.599: ISAKMP:(0:1:SW:1): speaking to another IOS box!
*Mar 1 00:04:58.599: ISAKMP (0:134217729): NAT found, the node outside NAT
*Mar 1 00:04:58.599: ISAKMP:(0:1:SW:1):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
*Mar 1 00:04:58.599: ISAKMP:(0:1:SW:1):Old State = IKE_R_MM3 New State = IKE_R_MM3
*Mar 1 00:04:58.599: ISAKMP:(0:1:SW:1): sending packet to 1.1.1.10 my_port 500 peer_port 500 (R) MM_KEY_EXCH
*Mar 1 00:04:58.599: ISAKMP:(0:1:SW:1):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
*Mar 1 00:04:58.599: ISAKMP:(0:1:SW:1):Old State = IKE_R_MM3 New State = IKE_R_MM4
*Mar 1 00:04:58.775: ISAKMP (0:134217729): received packet from 1.1.1.10 dport 4500 sport 4500 Global (R) MM_KEY_EXCH
*Mar 1 00:04:58.779: ISAKMP:(0:1:SW:1):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
*Mar 1 00:04:58.779: ISAKMP:(0:1:SW:1):Old State = IKE_R_MM4 New State = IKE_R_MM5
*Mar 1 00:04:58.783: ISAKMP:(0:1:SW:1): processing ID payload. message ID = 0
*Mar 1 00:04:58.783: ISAKMP (0:134217729): ID payload
next-payload : 8
type : 1
address : 192.168.1.2
protocol : 17
port : 0
length : 12
*Mar 1 00:04:58.787: ISAKMP:(0:1:SW:1):: peer matches *none* of the profiles
*Mar 1 00:04:58.787: ISAKMP:(0:1:SW:1): processing HASH payload. message ID = 0
*Mar 1 00:04:58.791: ISAKMP:received payload type 17
*Mar 1 00:04:58.791: ISAKMP:(0:1:SW:1): processing NOTIFY INITIAL_CONTACT protocol 1
spi 0, message ID = 0, sa = 64DE9358
*Mar 1 00:04:58.791: ISAKMP:(0:1:SW:1):SA authentication status:
authenticated
*Mar 1 00:04:58.795: ISAKMP:(0:1:SW:1): Process initial contact,
bring down existing phase 1 and 2 SA's with local 1.1.1.2 remote 1.1.1.10 remote port 4500
*Mar 1 00:04:58.795: ISAKMP:(0:1:SW:1):SA authentication status:
authenticated
*Mar 1 00:04:58.795: ISAKMP:(0:1:SW:1):SA has been authenticated with 1.1.1.10
*Mar 1 00:04:58.799: ISAKMP:(0:1:SW:1):Detected port floating to port = 4500
*Mar 1 00:04:58.799: ISAKMP: Trying to insert a peer 1.1.1.2/1.1.1.10/4500/, and inserted successfully 64F42D64.
*Mar 1 00:04:58.799: ISAKMP:(0:1:SW:1):IKE_DPD is enabled, initializing timers
*Mar 1 00:04:58.803: ISAKMP:(0:1:SW:1):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
*Mar 1 00:04:58.803: ISAKMP:(0:1:SW:1):Old State = IKE_R_MM5 New State = IKE_R_MM5
*Mar 1 00:04:58.807: ISAKMP:(0:1:SW:1):SA is doing pre-shared key authentication using id type ID_IPV4_ADDR
*Mar 1 00:04:58.807: ISAKMP (0:134217729): ID payload
next-payload : 8
type : 1
address : 1.1.1.2
protocol : 17
port : 0
length : 12
*Mar 1 00:04:58.811: ISAKMP:(0:1:SW:1):Total payload length: 12
*Mar 1 00:04:58.815: ISAKMP:(0:1:SW:1): sending packet to 1.1.1.10 my_port 4500 peer_port 4500 (R) MM_KEY_EXCH
*Mar 1 00:04:58.819: ISAKMP:(0:1:SW:1):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
*Mar 1 00:04:58.819: ISAKMP:(0:1:SW:1):Old State = IKE_R_MM5 New State = IKE_P1_COMPLETE
*Mar 1 00:04:58.823: ISAKMP:(0:1:SW:1):Input = IKE_MESG_INTERNAL, IKE_PHASE1_COMPLETE
*Mar 1 00:04:58.823: ISAKMP:(0:1:SW:1):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
*Mar 1 00:04:58.967: ISAKMP (0:134217729): received packet from 1.1.1.10 dport 4500 sport 4500 Global (R) QM_IDLE
*Mar 1 00:04:58.967: ISAKMP: set new node -354382317 to QM_IDLE
*Mar 1 00:04:58.971: ISAKMP:(0:1:SW:1): processing HASH payload. message ID = -354382317
*Mar 1 00:04:58.975: ISAKMP:(0:1:SW:1): processing SA payload. message ID = -354382317
*Mar 1 00:04:58.975: ISAKMP:(0:1:SW:1):Checking IPSec proposal 1
*Mar 1 00:04:58.975: ISAKMP: transform 1, ESP_AES
*Mar 1 00:04:58.975: ISAKMP: attributes in transform:
*Mar 1 00:04:58.975: ISAKMP: encaps is 3 (Tunnel-UDP)
*Mar 1 00:04:58.975: ISAKMP: SA life type in seconds
*Mar 1 00:04:58.979: ISAKMP: SA life duration (basic) of 3600
*Mar 1 00:04:58.979: ISAKMP: SA life type in kilobytes
*Mar 1 00:04:58.979: ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0
*Mar 1 00:04:58.979: ISAKMP: authenticator is HMAC-SHA
*Mar 1 00:04:58.979: ISAKMP: key length is 256
*Mar 1 00:04:58.983: ISAKMP:(0:1:SW:1):atts are acceptable.
*Mar 1 00:04:58.987: ISAKMP:(0:1:SW:1): processing NONCE payload. message ID = -354382317
*Mar 1 00:04:58.987: ISAKMP:(0:1:SW:1): processing ID payload. message ID = -354382317
*Mar 1 00:04:58.987: ISAKMP:(0:1:SW:1): processing ID payload. message ID = -354382317
*Mar 1 00:04:58.987: ISAKMP:(0:1:SW:1): asking for 1 spis from ipsec
*Mar 1 00:04:58.991: ISAKMP:(0:1:SW:1):Node -354382317, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
*Mar 1 00:04:58.991: ISAKMP:(0:1:SW:1):Old State = IKE_QM_READY New State = IKE_QM_SPI_STARVE
*Mar 1 00:04:59.007: ISAKMP: received ke message (2/1)
*Mar 1 00:04:59.019: ISAKMP: Locking peer struct 0x64F42D64, IPSEC refcount 1 for for stuff_ke
*Mar 1 00:04:59.019: ISAKMP:(0:1:SW:1): Creating IPSec SAs
*Mar 1 00:04:59.019: inbound SA from 1.1.1.10 to 1.1.1.2 (f/i) 0/ 0
(proxy 10.1.1.0 to 20.1.1.0)
*Mar 1 00:04:59.019: has spi 0x43DA254E and conn_id 0 and flags 400
*Mar 1 00:04:59.023: lifetime of 3600 seconds
*Mar 1 00:04:59.023: lifetime of 4608000 kilobytes
*Mar 1 00:04:59.023: has client flags 0x10
*Mar 1 00:04:59.023: outbound SA from 1.1.1.2 to 1.1.1.10 (f/i) 0/0
(proxy 20.1.1.0 to 10.1.1.0)
*Mar 1 00:04:59.023: has spi -2070038329 and conn_id 0 and flags 408
*Mar 1 00:04:59.027: lifetime of 3600 seconds
*Mar 1 00:04:59.027: lifetime of 4608000 kilobytes
*Mar 1 00:04:59.027: has client flags 0x10
*Mar 1 00:04:59.031: ISAKMP:(0:1:SW:1): sending packet to 1.1.1.10 my_port 4500 peer_port 4500 (R) QM_IDLE
*Mar 1 00:04:59.031: ISAKMP:(0:1:SW:1):Node -354382317, Input = IKE_MESG_FROM_IPSEC, IKE_SPI_REPLY
*Mar 1 00:04:59.031: ISAKMP:(0:1:SW:1):Old State = IKE_QM_SPI_STARVE New State = IKE_QM_R_QM2
*Mar 1 00:04:59.035: ISAKMP: Locking peer struct 0x64F42D64, IPSEC refcount 2 for from create_transforms
*Mar 1 00:04:59.039: ISAKMP: Unlocking IPSEC struct 0x64F42D64 from create_transforms, count 1
*Mar 1 00:04:59.207: ISAKMP (0:134217729): received packet from 1.1.1.10 dport 4500 sport 4500 Global (R) QM_IDLE
*Mar 1 00:04:59.211: ISAKMP:(0:1:SW:1):deleting node -354382317 error FALSE reason "QM done (await)"
*Mar 1 00:04:59.211: ISAKMP:(0:1:SW:1):Node -354382317, Input = IKE_MESG_FROM_PEER, IKE_QM_EXCH
*Mar 1 00:04:59.215: ISAKMP:(0:1:SW:1):Old State = IKE_QM_R_QM2 New State = IKE_QM_PHASE2_COMPLETE
*Mar 1 00:05:08.799: ISAKMP: set new node 1422709612 to QM_IDLE
*Mar 1 00:05:08.803: ISAKMP:(0:1:SW:1):Sending NOTIFY DPD/R_U_THERE protocol 1
spi 1692921744, message ID = 1422709612
*Mar 1 00:05:08.803: ISAKMP:(0:1:SW:1): seq. no 0x52A49F12
*Mar 1 00:05:08.807: ISAKMP:(0:1:SW:1): sending packet to 1.1.1.10 my_port 4500 peer_port 4500 (R) QM_IDLE
*Mar 1 00:05:08.807: ISAKMP:(0:1:SW:1):purging node 1422709612
*Mar 1 00:05:08.807: ISAKMP:(0:1:SW:1):Input = IKE_MESG_FROM_TIMER, IKE_TIMER_IM_ALIVE
*Mar 1 00:05:08.811: ISAKMP:(0:1:SW:1):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
*Mar 1 00:05:08.907: ISAKMP (0:134217729): received packet from 1.1.1.10 dport 4500 sport 4500 Global (R) QM_IDLE
*Mar 1 00:05:08.907: ISAKMP: set new node -656915174 to QM_IDLE
*Mar 1 00:05:08.911: ISAKMP:(0:1:SW:1): processing HASH payload. message ID = -656915174
*Mar 1 00:05:08.911: ISAKMP:(0:1:SW:1): processing NOTIFY DPD/R_U_THERE_ACK protocol 1
spi 0, message ID = -656915174, sa = 64DE9358
*Mar 1 00:05:08.915: ISAKMP:(0:1:SW:1): DPD/R_U_THERE_ACK received from peer 1.1.1.10, sequence 0x52A49F12
*Mar 1 00:05:08.915: ISAKMP:(0:1:SW:1):deleting node -656915174 error FALSE reason "Informational (in) state 1"
*Mar 1 00:05:08.915: ISAKMP:(0:1:SW:1):Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY
*Mar 1 00:05:08.919: ISAKMP:(0:1:SW:1):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
R3#
R3#
R3#
R3#
R3#
R3#
R3#
*Mar 1 00:05:18.915: ISAKMP: set new node 1510357412 to QM_IDLE
*Mar 1 00:05:18.919: ISAKMP:(0:1:SW:1):Sending NOTIFY DPD/R_U_THERE protocol 1
spi 1692921744, message ID = 1510357412
*Mar 1 00:05:18.919: ISAKMP:(0:1:SW:1): seq. no 0x52A49F13
*Mar 1 00:05:18.923: ISAKMP:(0:1:SW:1): sending packet to 1.1.1.10 my_port 4500 peer_port 4500 (R) QM_IDLE
*Mar 1 00:05:18.923: ISAKMP:(0:1:SW:1):purging node 1510357412
*Mar 1 00:05:18.927: ISAKMP:(0:1:SW:1):Input = IKE_MESG_FROM_TIMER, IKE_TIMER_IM_ALIVE
*Mar 1 00:05:18.927: ISAKMP:(0:1:SW:1):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
*Mar 1 00:05:18.931: ISAKMP (0:134217729): received packet from 1.1.1.10 dport 4500 sport 4500 Global (R) QM_IDLE
*Mar 1 00:05:18.935: ISAKMP: set new node 1823054343 to QM_IDLE
*Mar 1 00:05:18.939: ISAKMP:(0:1:SW:1): processing HASH payload. message ID = 1823054343
*Mar 1 00:05:18.939: ISAKMP:(0:1:SW:1): processing NOTIFY DPD/R_U_THERE protocol 1
u
R3#u spi 0, message ID = 1823054343, sa = 64DE9358
*Mar 1 00:05:18.943: ISAKMP:(0:1:SW:1):deleting node 1823054343 error FALSE reason "Informational (in) state 1"
*Mar 1 00:05:18.943: ISAKMP:(0:1:SW:1):Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY
*Mar 1 00:05:18.943: ISAKMP:(0:1:SW:1):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
*Mar 1 00:05:18.947: ISAKMP:(0:1:SW:1):DPD/R_U_THERE received from peer 1.1.1.10, sequence 0x5777117
*Mar 1 00:05:18.951: ISAKMP: set new node -310279714 to QM_IDLE
*Mar 1 00:05:18.955: ISAKMP:(0:1:SW:1):Sending NOTIFY DPD/R_U_THERE_ACK protocol 1
spi 1692921760, message ID = -310279714
*Mar 1 00:05:18.955: ISAKMP:(0:1:SW:1): seq. no 0x5777117
*Mar 1 00:05:18.955: ISAKMP:(0:1:SW:1): sending packet to 1.1.1.10 my_port 4500 peer_port 4500 (R) QM_IDLE
*Mar 1 00:05:18.959: ISAKMP:(0:1:SW:1):purging node -310279714
*Mar 1 00:05:18.959: ISAKMP:(0:1:SW:1):Input = IKE_MESG_FROM_PEER, IKE_MESG_KEEP_ALIVE
*Mar 1 00:05:18.959: ISAKMP:(0:1:SW:1):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
*Mar 1 00:05:19.031: ISAKMP (0:134217729): received packet from 1.1.1.10 dport 4500 sport 4500 Global (R) QM_IDLE
*Mar 1 00:05:19.031: ISAKMP: set new node -854624102 to QM_IDLE
*Mar 1 00:05:19.035: ISAKMP:(0:1:SW:1): processing HASH payload. message ID = -854624102
*Mar 1 00:05:19.035: ISAKMP:(0:1:SW:1): processing NOTIFY DPD/R_U_THERE_ACK protocol 1
spi 0, message ID = -854624102, sa = 64DE9358
*Mar 1 00:05:19.039: ISAKMP:(0:1:SW:1): DPD/R_U_THERE_ACK received from peer 1.1.1.10, sequence 0x52A49F13
*Mar 1 00:05:19.039: ISAKMP:(0:1:SW:1):deleting node -854624102 error FALSE reason "Informational (in) state 1"
*Mar 1 00:05:19.043: ISAKMP:(0:1:SW:1):Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY
*Mar 1 00:05:19.043: ISAKMP:(0:1:SW:1):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
R3#u
R3#u
*Mar 1 00:05:28.703: ISAKMP (0:134217729): received packet from 1.1.1.10 dport 4500 sport 4500 Global (R) QM_IDLE
*Mar 1 00:05:28.703: ISAKMP: set new node 534513955 to QM_IDLE
*Mar 1 00:05:28.707: ISAKMP:(0:1:SW:1): processing HASH payload. message ID = 534513955
*Mar 1 00:05:28.707: ISAKMP:(0:1:SW:1): processing NOTIFY DPD/R_U_THERE protocol 1
spi 0, message ID = 534513955, sa = 64DE9358
*Mar 1 00:05:28.711: ISAKMP:(0:1:SW:1):deleting node 534513955 error FALSE reason "Informational (in) state 1"
*Mar 1 00:05:28.711: ISAKMP:(0:1:SW:1):Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY
*Mar 1 00:05:28.711: ISAKMP:(0:1:SW:1):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
*Mar 1 00:05:28.719: ISAKMP:(0:1:SW:1):DPD/R_U_THERE received from peer 1.1.1.10, sequence 0x5777118
*Mar 1 00:05:28.719: ISAKMP: set new node -1587564027 to QM_IDLE
*Mar 1 00:05:28.723: ISAKMP:(0:1:SW:1):Sending NOTIFY DPD/R_U_THERE_ACK protocol 1
spi 1692921760, message ID = -1587564027
*Mar 1 00:05:28.723: ISAKMP:(0:1:SW:1): seq. no 0x5777118
*Mar 1 00:05:28.727: ISAKMP:(0:1:SW:1): sending packet to 1.1.1.10 my_port 4500 peer_port 4500 (R) QM_IDLE
*Mar 1 00:05:28.727: ISAKMP:(0:1:SW:1):purging node -1587564027
*Mar 1 00:05:28.731: ISAKMP:(0:1:SW:1):Input = IKE_MESG_FROM_PEER, IKE_MESG_KEEP_ALIVE
*Mar 1 00:05:28.731: ISAKMP:(0:1:SW:1):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
R3#u
R3#u
*Mar 1 00:05:49.211: ISAKMP:(0:1:SW:1):purging node -354382317
R3#u
*Mar 1 00:05:57.747: ISAKMP: set new node -1647313086 to QM_IDLE
*Mar 1 00:05:57.751: ISAKMP:(0:1:SW:1):Sending NOTIFY DPD/R_U_THERE protocol 1
spi 1692921744, message ID = -1647313086
*Mar 1 00:05:57.751: ISAKMP:(0:1:SW:1): seq. no 0x52A49F14
*Mar 1 00:05:57.751: ISAKMP:(0:1:SW:1): sending packet to 1.1.1.10 my_port 4500 peer_port 4500 (R) QM_IDLE
*Mar 1 00:05:57.755: ISAKMP:(0:1:SW:1):purging node -1647313086
*Mar 1 00:05:57.755: ISAKMP:(0:1:SW:1):Input = IKE_MESG_FROM_TIMER, IKE_TIMER_IM_ALIVE
*Mar 1 00:05:57.759: ISAKMP:(0:1:SW:1):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
*Mar 1 00:05:57.907: ISAKMP (0:134217729): received packet from 1.1.1.10 dport 4500 sport 4500 Global (R) QM_IDLE
*Mar 1 00:05:57.907: ISAKMP: set new node 2064491867 to QM_IDLE
*Mar 1 00:05:57.911: ISAKMP:(0:1:SW:1): processing HASH payload. message ID = 2064491867
*Mar 1 00:05:57.911: ISAKMP:(0:1:SW:1): processing NOTIFY DPD/R_U_THERE_ACK protoc
R3#u ol 1
spi 0, message ID = 2064491867, sa = 64DE9358
*Mar 1 00:05:57.915: ISAKMP:(0:1:SW:1): DPD/R_U_THERE_ACK received from peer 1.1.1.10, sequence 0x52A49F14
*Mar 1 00:05:57.915: ISAKMP:(0:1:SW:1):deleting node 2064491867 error FALSE reason "Informational (in) state 1"
*Mar 1 00:05:57.919: ISAKMP:(0:1:SW:1):Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY
*Mar 1 00:05:57.919: ISAKMP:(0:1:SW:1):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
*Mar 1 00:05:58.915: ISAKMP:(0:1:SW:1):purging node -656915174
R3#u
R3#u
*Mar 1 00:06:08.943: ISAKMP:(0:1:SW:1):purging node 1823054343
*Mar 1 00:06:09.039: ISAKMP:(0:1:SW:1):purging node -854624102
R3#u
*Mar 1 00:06:17.575: ISAKMP: set new node -1567185810 to QM_IDLE
*Mar 1 00:06:17.579: ISAKMP:(0:1:SW:1):Sending NOTIFY DPD/R_U_THERE protocol 1
spi 1692921744, message ID = -1567185810
*Mar 1 00:06:17.579: ISAKMP:(0:1:SW:1): seq. no 0x52A49F15
*Mar 1 00:06:17.583: ISAKMP:(0:1:SW:1): sending packet to 1.1.1.10 my_port 4500 peer_port 4500 (R) QM_IDLE
*Mar 1 00:06:17.583: ISAKMP:(0:1:SW:1):purging node -1567185810
*Mar 1 00:06:17.583: ISAKMP:(0:1:SW:1):Input = IKE_MESG_FROM_TIMER, IKE_TIMER_IM_ALIVE
*Mar 1 00:06:17.587: ISAKMP:(0:1:SW:1):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
*Mar 1 00:06:17.683: ISAKMP (0:134217729): received packet from 1.1.1.10 dport 4500 sport 4500 Global (R) QM_IDLE
*Mar 1 00:06:17.683: ISAKMP: set new node 1464692749 to QM_IDLE
*Mar 1 00:06:17.687: ISAKMP:(0:1:SW:1): processing HASH payload. message ID = 1464692749
*Mar 1 00:06:17.687: ISAKMP:(0:1:SW:1): processing NOTIFY DPD/R_U_THERE_ACK protocol 1
spi 0, message ID = 1464692749, sa = 64DE9358
*Mar 1 00:06:17.691: ISAKMP:(0:1:SW:1): DPD/R_U_THERE_ACK received from peer 1.1.1.10, sequence 0x52A49F15
*Mar 1 00:06:17.691: ISAKMP:(0:1:SW:1):deleting node 1464692749 error FALSE reason "Informational (in) state 1"
*Mar 1 00:06:17.691: ISAKMP:(0:1:SW:1):Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY
*Mar 1 00:06:17.695: ISAKMP:(0:1:SW:1):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
*Mar 1 00:06:18.711: ISAKMP:(0:1:SW:1):purging node 534513955
R3#u
R3#u
*Mar 1 00:06:27.311: ISAKMP: set new node 1496373895 to QM_IDLE
*Mar 1 00:06:27.315: ISAKMP:(0:1:SW:1):Sending NOTIFY DPD/R_U_THERE protocol 1
spi 1692921744, message ID = 1496373895
*Mar 1 00:06:27.315: ISAKMP:(0:1:SW:1): seq. no 0x52A49F16
*Mar 1 00:06:27.319: ISAKMP:(0:1:SW:1): sending packet to 1.1.1.10 my_port 4500 peer_port 4500 (R) QM_IDLE
*Mar 1 00:06:27.319: ISAKMP:(0:1:SW:1):purging node 1496373895
*Mar 1 00:06:27.319: ISAKMP:(0:1:SW:1):Input = IKE_MESG_FROM_TIMER, IKE_TIMER_IM_ALIVE
*Mar 1 00:06:27.323: ISAKMP:(0:1:SW:1):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
*Mar 1 00:06:27.419: ISAKMP (0:134217729): received packet from 1.1.1.10 dport 4500 sport 4500 Global (R) QM_IDLE
*Mar 1 00:06:27.419: ISAKMP: set new node -1002081710 to QM_IDLE
*Mar 1 00:06:27.423: ISAKMP:(0:1:SW:1): processing HASH payload. message ID = -1002081710
*Mar 1 00:06:27.423: ISAKMP:(0:1:SW:1): processing NOTIFY DPD/R_U_THERE_ACK protocol 1
spi 0, message ID = -1002081710, sa = 64DE9358
*Mar 1 00:06:27.427: ISAKMP:(0:1:SW:1): DPD/R_U_THERE_ACK received from peer 1.1.1.10, sequence 0x52A49F16
*Mar 1 00:06:27.427: ISAKMP:(0:1:SW:1):deleting node -1002081710 error FALSE reason "Informational (in) state 1"
*Mar 1 00:06:27.427: ISAKMP:(0:1:SW:1):Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY
*Mar 1 00:06:27.431: ISAKMP:(0:1:SW:1):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
R3#
R3#
*Mar 1 00:06:37.263: ISAKMP: set new node -913412632 to QM_IDLE
*Mar 1 00:06:37.267: ISAKMP:(0:1:SW:1):Sending NOTIFY DPD/R_U_THERE protocol 1
spi 1692921744, message ID = -913412632
*Mar 1 00:06:37.267: ISAKMP:(0:1:SW:1): seq. no 0x52A49F17
*Mar 1 00:06:37.271: ISAKMP:(0:1:SW:1): sending packet to 1.1.1.10 my_port 4500 peer_port 4500 (R) QM_IDLE
*Mar 1 00:06:37.271: ISAKMP:(0:1:SW:1):purging node -913412632
*Mar 1 00:06:37.271: ISAKMP:(0:1:SW:1):Input = IKE_MESG_FROM_TIMER, IKE_TIMER_IM_ALIVE
*Mar 1 00:06:37.275: ISAKMP:(0:1:SW:1):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
*Mar 1 00:06:37.371: ISAKMP (0:134217729): received packet from 1.1.1.10 dport 4500 sport 4500 Global (R) QM_IDLE
*Mar 1 00:06:37.371: ISAKMP: set new node -609881647 to QM_IDLE
*Mar 1 00:06:37.375: ISAKMP:(0:1:SW:1): processing HASH payload. message ID = -609881647
*Mar 1 00:06:37.375: ISAKMP:(0:1:SW:1): processing NOTIFY DPD/R_U_THERE_ACK protocol 1
spi 0, message ID = -609881647, sa = 64DE9358
*Mar 1 00:06:37.379: ISAKMP:(0:1:SW:1): DPD/R_U_THERE_ACK received from peer 1.1.1.10, sequence 0x52A49F17
*Mar 1 00:06:37.379: ISAKMP:(0:1:SW:1):deleting node -609881647 error FALSE reason "Informational (in) state 1"
*Mar 1 00:06:37.379: ISAKMP:(0:1:SW:1):Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY
*Mar 1 00:06:37.383: ISAKMP:(0:1:SW:1):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
{{#widget:DISQUS
|id=networkm
|uniqid=Cisco nat traversal debug
|url=https://aman.awiki.org/wiki/Cisco_nat_traversal_debug
}}