[ previous ] [ next ] [ threads ]
 
 From:  "Brian R. Watters" <brwatters at abs dash internet dot com>
 To:  <m0n0wall at lists dot m0n0 dot ch>
 Subject:  Mobile Ipsec issues ..
 Date:  Sun, 25 Jan 2004 15:39:37 -0800
We have been seeing the following in our log files via our VPN client and
note that after a reboot of the firewall all is well once again .. Not real
sure whats going on but maybe a SNIP of the log will tell .. Let me know if
you see anything here ..

 1-25: 14:38:55.484 Interface added: 192.168.1.100/255.255.255.0 on LAN
"Lite-On Communications Compatable PCI Fast Ethernet Adapter".
 1-25: 15:12:05.281  
 1-25: 15:12:05.343 My Connections\m0n0wall - Initiating IKE Phase 1 (IP
ADDR=202.124.155.55)
 1-25: 15:12:05.390 My Connections\m0n0wall - SENDING>>>> ISAKMP OAK AG (SA,
KE, NON, ID, VID 5x)
 1-25: 15:12:05.500 My Connections\m0n0wall - RECEIVED<<< ISAKMP OAK AG (SA,
KE, NON, ID, HASH, VID)
 1-25: 15:12:05.531 My Connections\m0n0wall - SENDING>>>> ISAKMP OAK AG
*(HASH, NOTIFY:STATUS_INITIAL_CONTACT)
 1-25: 15:12:05.531 My Connections\m0n0wall - Established IKE SA
 1-25: 15:12:05.531    MY COOKIE 12 eb 2e 53 77 45 e7 3c
 1-25: 15:12:05.531    HIS COOKIE f3 83 19 51 9 48 68 3a
 1-25: 15:12:05.562 My Connections\m0n0wall - Initiating IKE Phase 2 with
Client IDs (message id: D1E6BDCD)
 1-25: 15:12:05.562   Initiator = IP ADDR=192.168.1.100, prot = 0 port = 0
 1-25: 15:12:05.562   Responder = IP SUBNET/MASK=192.168.2.0/255.255.255.0,
prot = 0 port = 0
 1-25: 15:12:05.562 My Connections\m0n0wall - SENDING>>>> ISAKMP OAK QM
*(HASH, SA, NON, KE, ID 2x)
 1-25: 15:12:05.640 My Connections\m0n0wall - RECEIVED<<< ISAKMP OAK QM
*(HASH, SA, NON, KE, ID 2x)
 1-25: 15:12:05.640 My Connections\m0n0wall - SENDING>>>> ISAKMP OAK QM
*(HASH)
 1-25: 15:12:05.656 My Connections\m0n0wall - Loading IPSec SA (Message ID =
D1E6BDCD OUTBOUND SPI = 1C50DE1 INBOUND SPI = CF3D0951)
 1-25: 15:12:05.656  
 1-25: 15:12:08.234 My Connections\m0n0wall - SENDING>>>> ISAKMP OAK INFO
*(HASH, NOTIFY:INVALID_SPI)
 1-25: 15:12:08.328 My Connections\m0n0wall - SENDING>>>> ISAKMP OAK INFO
*(HASH, NOTIFY:INVALID_SPI)
 1-25: 15:12:11.156 My Connections\m0n0wall - SENDING>>>> ISAKMP OAK INFO
*(HASH, NOTIFY:INVALID_SPI)
 1-25: 15:12:11.265 My Connections\m0n0wall - SENDING>>>> ISAKMP OAK INFO
*(HASH, NOTIFY:INVALID_SPI)
 1-25: 15:12:14.265 My Connections\m0n0wall - SENDING>>>> ISAKMP OAK INFO
*(HASH, NOTIFY:INVALID_SPI)
 1-25: 15:12:14.359 My Connections\m0n0wall - SENDING>>>> ISAKMP OAK INFO
*(HASH, NOTIFY:INVALID_SPI)
 1-25: 15:12:17.062 My Connections\m0n0wall - SENDING>>>> ISAKMP OAK INFO
*(HASH, NOTIFY:INVALID_SPI)
 1-25: 15:12:17.171 My Connections\m0n0wall - SENDING>>>> ISAKMP OAK INFO
*(HASH, NOTIFY:INVALID_SPI)
 1-25: 15:13:20.062 My Connections\m0n0wall - SENDING>>>> ISAKMP OAK INFO
*(HASH, NOTIFY:INVALID_SPI)
 1-25: 15:13:20.062 My Connections\m0n0wall - SENDING>>>> ISAKMP OAK INFO
*(HASH, NOTIFY:INVALID_SPI)
 1-25: 15:13:23.000 My Connections\m0n0wall - SENDING>>>> ISAKMP OAK INFO
*(HASH, NOTIFY:INVALID_SPI)
 1-25: 15:13:23.015 My Connections\m0n0wall - SENDING>>>> ISAKMP OAK INFO
*(HASH, NOTIFY:INVALID_SPI)
 1-25: 15:13:23.046 My Connections\m0n0wall - SENDING>>>> ISAKMP OAK INFO
*(HASH, NOTIFY:INVALID_SPI)
 1-25: 15:13:23.046 My Connections\m0n0wall - SENDING>>>> ISAKMP OAK INFO
*(HASH, NOTIFY:INVALID_SPI)
 1-25: 15:13:28.953 My Connections\m0n0wall - SENDING>>>> ISAKMP OAK INFO
*(HASH, NOTIFY:INVALID_SPI)

Brian