Oct 20 15:12:51 vyos-g2 charon: 13[ENC] generating CREATE_CHILD_SA request 4318 [ N(REKEY_SA) SA No TSi TSr ]
Oct 20 15:12:51 vyos-g2 charon: 13[NET] sending packet: from 192.168.230.29[4500] to 192.168.230.12[4500] (208 bytes)
Oct 20 15:12:51 vyos-g2 charon: 10[NET] received packet: from 192.168.230.12[4500] to 192.168.230.29[4500] (208 bytes)
Oct 20 15:12:51 vyos-g2 charon: 10[ENC] parsed CREATE_CHILD_SA response 4318 [ SA No TSi TSr ]
Oct 20 15:12:51 vyos-g2 charon: 10[CFG] selected proposal: ESP:AES_CBC_256/HMAC_SHA1_96/NO_EXT_SEQ
Oct 20 15:12:51 vyos-g2 charon: 10[IKE] inbound CHILD_SA peer-192.168.230.12-tunnel-vti{833500} established with SPIs c5cc9dc6_i 4a7edd30_o and TS 0.0.0.0/0 === 0.0.0.0/0
Oct 20 15:12:51 vyos-g2 charon: 10[IKE] outbound CHILD_SA peer-192.168.230.12-tunnel-vti{833500} established with SPIs c5cc9dc6_i 4a7edd30_o and TS 0.0.0.0/0 === 0.0.0.0/0
Oct 20 15:12:51 vyos-g2 charon: 10[IKE] closing CHILD_SA peer-192.168.230.12-tunnel-vti{832729} with SPIs c75a9b95_i (33737083 bytes) 90acba4e_o (1127580 bytes) and TS 0.0.0.0/0 === 0.0.0.0/0
Oct 20 15:12:51 vyos-g2 charon: 10[IKE] sending DELETE for ESP CHILD_SA with SPI c75a9b95
Oct 20 15:12:51 vyos-g2 charon: 10[ENC] generating INFORMATIONAL request 4319 [ D ]
Oct 20 15:12:51 vyos-g2 charon: 10[NET] sending packet: from 192.168.230.29[4500] to 192.168.230.12[4500] (80 bytes)
Oct 20 15:12:51 vyos-g2 charon: 08[NET] received packet: from 192.168.230.12[4500] to 192.168.230.29[4500] (80 bytes)
Oct 20 15:12:51 vyos-g2 charon: 08[ENC] parsed INFORMATIONAL response 4319 [ D ]
Oct 20 15:12:51 vyos-g2 charon: 08[IKE] received DELETE for ESP CHILD_SA with SPI 90acba4e
Oct 20 15:12:51 vyos-g2 charon: 08[IKE] CHILD_SA closed
Oct 20 15:12:52 vyos-g2 charon: 09[NET] received packet: from 194.186.83.147[4500] to 77.236.229.162[4500] (80 bytes)
Oct 20 15:16:57 vyos-g2 charon: 06[IKE] retransmit 1 of request with message ID 4345
Oct 20 15:16:57 vyos-g2 charon: 06[NET] sending packet: from 192.168.230.29[4500] to 192.168.230.12[4500] (208 bytes)
Oct 20 15:16:57 vyos-g2 charon: 15[IKE] retransmit 1 of request with message ID 4363
Oct 20 15:16:57 vyos-g2 charon: 15[NET] sending packet: from 192.168.221.29[4500] to 192.168.221.22[4500] (208 bytes)
Oct 20 15:17:04 vyos-g2 charon: 12[IKE] retransmit 2 of request with message ID 0
Oct 20 15:17:04 vyos-g2 charon: 12[NET] sending packet: from 77.236.229.162[500] to 194.186.83.147[500] (464 bytes)
Oct 20 15:17:04 vyos-g2 charon: 13[IKE] retransmit 2 of request with message ID 4345
Oct 20 15:17:04 vyos-g2 charon: 13[NET] sending packet: from 192.168.230.29[4500] to 192.168.230.12[4500] (208 bytes)
Oct 20 15:17:04 vyos-g2 charon: 08[IKE] retransmit 2 of request with message ID 4363
Oct 20 15:17:04 vyos-g2 charon: 08[NET] sending packet: from 192.168.221.29[4500] to 192.168.221.22[4500] (208 bytes)
Oct 20 15:17:13 vyos-g2 netplugd[929]: vti03: ignoring event
Oct 20 15:17:13 vyos-g2 charon: 07[KNL] interface vti03 deactivated
Oct 20 15:17:17 vyos-g2 charon: 06[IKE] retransmit 3 of request with message ID 0
Oct 20 15:17:17 vyos-g2 charon: 06[NET] sending packet: from 77.236.229.162[500] to 194.186.83.147[500] (464 bytes)
Oct 20 15:17:17 vyos-g2 charon: 15[IKE] retransmit 3 of request with message ID 4345
Oct 20 15:17:17 vyos-g2 charon: 15[NET] sending packet: from 192.168.230.29[4500] to 192.168.230.12[4500] (208 bytes)
Oct 20 15:17:17 vyos-g2 charon: 08[IKE] retransmit 3 of request with message ID 4363
Oct 20 15:17:17 vyos-g2 charon: 08[NET] sending packet: from 192.168.221.29[4500] to 192.168.221.22[4500] (208 bytes)
Oct 20 15:17:40 vyos-g2 charon: 05[IKE] retransmit 4 of request with message ID 0
Oct 20 15:17:40 vyos-g2 charon: 05[NET] sending packet: from 77.236.229.162[500] to 194.186.83.147[500] (464 bytes)
Oct 20 15:17:40 vyos-g2 charon: 14[IKE] retransmit 4 of request with message ID 4345
Oct 20 15:17:40 vyos-g2 charon: 14[NET] sending packet: from 192.168.230.29[4500] to 192.168.230.12[4500] (208 bytes)
Oct 20 15:17:41 vyos-g2 charon: 06[IKE] retransmit 4 of request with message ID 4363
Oct 20 15:17:41 vyos-g2 charon: 06[NET] sending packet: from 192.168.221.29[4500] to 192.168.221.22[4500] (208 bytes)
Oct 20 15:18:22 vyos-g2 charon: 10[IKE] retransmit 5 of request with message ID 0
Oct 20 15:18:22 vyos-g2 charon: 10[NET] sending packet: from 77.236.229.162[500] to 194.186.83.147[500] (464 bytes)
Oct 20 15:18:22 vyos-g2 charon: 09[IKE] retransmit 5 of request with message ID 4345
Oct 20 15:18:22 vyos-g2 charon: 09[NET] sending packet: from 192.168.230.29[4500] to 192.168.230.12[4500] (208 bytes)
Oct 20 15:18:23 vyos-g2 charon: 05[IKE] retransmit 5 of request with message ID 4363
Oct 20 15:18:23 vyos-g2 charon: 05[NET] sending packet: from 192.168.221.29[4500] to 192.168.221.22[4500] (208 bytes)
Oct 20 15:19:38 vyos-g2 charon: 14[IKE] giving up after 5 retransmits
Oct 20 15:19:38 vyos-g2 charon: 14[IKE] peer not responding, trying again (2/0)
Oct 20 15:19:38 vyos-g2 charon: 14[IKE] initiating IKE_SA peer-194.186.83.147-tunnel-vti[196] to 194.186.83.147
Oct 20 15:19:38 vyos-g2 charon: 14[ENC] generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(HASH_ALG) N(REDIR_SUP) ]
Oct 20 15:19:38 vyos-g2 charon: 14[NET] sending packet: from 77.236.229.162[500] to 194.186.83.147[500] (464 bytes)
Oct 20 15:19:38 vyos-g2 charon: 15[KNL] creating delete job for CHILD_SA ESP/0xcb2ee007/192.168.230.29
Oct 20 15:19:38 vyos-g2 charon: 01[JOB] CHILD_SA ESP/0xcb2ee007/192.168.230.29 not found for delete
Oct 20 15:19:38 vyos-g2 charon: 11[IKE] giving up after 5 retransmits
Oct 20 15:19:38 vyos-g2 charon: 11[IKE] restarting CHILD_SA peer-192.168.230.12-tunnel-vti
Oct 20 15:19:38 vyos-g2 charon: 11[IKE] initiating IKE_SA peer-192.168.230.12-tunnel-vti[197] to 192.168.230.12
Oct 20 15:19:38 vyos-g2 charon: 11[ENC] generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(HASH_ALG) N(REDIR_SUP) ]
Oct 20 15:19:38 vyos-g2 charon: 11[NET] sending packet: from 192.168.230.29[500] to 192.168.230.12[500] (464 bytes)
Oct 20 15:19:38 vyos-g2 charon: 08[KNL] creating delete job for CHILD_SA ESP/0xc12f7621/192.168.221.29
Oct 20 15:19:38 vyos-g2 charon: 07[JOB] CHILD_SA ESP/0xc12f7621/192.168.221.29 not found for delete
Oct 20 15:19:38 vyos-g2 charon: 13[IKE] giving up after 5 retransmits
Oct 20 15:19:38 vyos-g2 charon: 13[IKE] restarting CHILD_SA peer-192.168.221.22-tunnel-vti
Oct 20 15:19:38 vyos-g2 charon: 13[IKE] initiating IKE_SA peer-192.168.221.22-tunnel-vti[198] to 192.168.221.22
Oct 20 15:19:38 vyos-g2 charon: 13[ENC] generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(HASH_ALG) N(REDIR_SUP) ]
Oct 20 15:19:38 vyos-g2 charon: 13[NET] sending packet: from 192.168.221.29[500] to 192.168.221.22[500] (464 bytes)
Oct 20 15:19:39 vyos-g2 netplugd[929]: vti02: ignoring event
Oct 20 15:19:39 vyos-g2 charon: 05[KNL] interface vti02 deactivated
Oct 20 15:19:39 vyos-g2 bfdd[1094]: state-change: [mhop:no peer:172.25.1.0 local:0.0.0.0 vrf:default ifname:eth1] down -> up
Oct 20 15:19:42 vyos-g2 charon: 09[IKE] retransmit 1 of request with message ID 0
Oct 20 15:19:42 vyos-g2 charon: 09[NET] sending packet: from 77.236.229.162[500] to 194.186.83.147[500] (464 bytes)
Oct 20 15:19:42 vyos-g2 charon: 01[NET] received packet: from 194.186.83.147[500] to 77.236.229.162[500] (551 bytes)
Oct 20 15:19:42 vyos-g2 charon: 01[ENC] parsed IKE_SA_INIT response 0 [ SA KE No V V V V N(NATD_S_IP) N(NATD_D_IP) CERTREQ N(HTTP_CERT_LOOK) ]
Oct 20 15:19:42 vyos-g2 charon: 01[IKE] received Cisco Delete Reason vendor ID
Oct 20 15:19:42 vyos-g2 charon: 01[ENC] received unknown vendor ID: 43:49:53:43:4f:56:50:4e:2d:52:45:56:2d:30:32
Oct 20 15:19:42 vyos-g2 charon: 01[ENC] received unknown vendor ID: 43:49:53:43:4f:2d:44:59:4e:41:4d:49:43:2d:52:4f:55:54:45
Oct 20 15:19:42 vyos-g2 charon: 01[IKE] received Cisco FlexVPN Supported vendor ID
Oct 20 15:19:42 vyos-g2 charon: 01[CFG] selected proposal: IKE:AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_2048
Oct 20 15:19:42 vyos-g2 charon: 01[IKE] cert payload ANY not supported - ignored
Oct 20 15:19:42 vyos-g2 charon: 01[IKE] authentication of 'ntop2-e-gw.zenit.ru' (myself) with pre-shared key
Oct 20 15:19:42 vyos-g2 charon: 01[IKE] establishing CHILD_SA peer-194.186.83.147-tunnel-vti{833556}
Oct 20 15:19:42 vyos-g2 charon: 01[ENC] generating IKE_AUTH request 1 [ IDi N(INIT_CONTACT) IDr AUTH SA TSi TSr N(MOBIKE_SUP) N(ADD_4_ADDR) N(ADD_4_ADDR) N(ADD_4_ADDR) N(ADD_4_ADDR) N(ADD_4_ADDR) N(ADD_4_ADDR) N(EAP_ONLY) N(MSG_ID_SYN_SUP) ]
Oct 20 15:19:42 vyos-g2 charon: 01[NET] sending packet: from 77.236.229.162[4500] to 194.186.83.147[4500] (352 bytes)
Oct 20 15:19:42 vyos-g2 charon: 11[NET] received packet: from 194.186.83.147[4500] to 77.236.229.162[4500] (272 bytes)
Oct 20 15:19:42 vyos-g2 charon: 11[ENC] parsed IKE_AUTH response 1 [ V IDr AUTH SA TSi TSr N(SET_WINSIZE) N(ESP_TFC_PAD_N) N(NON_FIRST_FRAG) ]
Oct 20 15:19:42 vyos-g2 charon: 11[IKE] authentication of 'ccr38.zenit.ru' with pre-shared key successful
Oct 20 15:19:42 vyos-g2 charon: 11[IKE] IKE_SA peer-194.186.83.147-tunnel-vti[196] established between 77.236.229.162[ntop2-e-gw.zenit.ru]...194.186.83.147[ccr38.zenit.ru]
Oct 20 15:19:42 vyos-g2 charon: 11[IKE] scheduling rekeying in 85547s
Oct 20 15:19:42 vyos-g2 charon: 11[IKE] maximum IKE_SA lifetime 86087s
Oct 20 15:19:42 vyos-g2 charon: 11[IKE] received ESP_TFC_PADDING_NOT_SUPPORTED, not using ESPv3 TFC padding
Oct 20 15:19:42 vyos-g2 charon: 11[CFG] selected proposal: ESP:AES_CBC_256/HMAC_SHA1_96/NO_EXT_SEQ
Oct 20 15:19:42 vyos-g2 charon: 11[IKE] CHILD_SA peer-194.186.83.147-tunnel-vti{833556} established with SPIs cb9964ed_i c98606b8_o and TS 0.0.0.0/0 === 0.0.0.0/0
Oct 20 15:19:42 vyos-g2 charon: 11[IKE] establishing CHILD_SA peer-194.186.83.147-tunnel-vti{833557}
Oct 20 15:19:42 vyos-g2 charon: 11[ENC] generating CREATE_CHILD_SA request 2 [ SA No TSi TSr ]
Oct 20 15:19:42 vyos-g2 charon: 11[NET] sending packet: from 77.236.229.162[4500] to 194.186.83.147[4500] (208 bytes)
Oct 20 15:19:42 vyos-g2 charon: 07[NET] received packet: from 194.186.83.147[4500] to 77.236.229.162[4500] (80 bytes)
Oct 20 15:19:42 vyos-g2 charon: 13[ENC] generating IKE_AUTH request 1 [ IDi N(INIT_CONTACT) IDr AUTH SA TSi TSr N(MOBIKE_SUP) N(ADD_4_ADDR) N(ADD_4_ADDR) N(ADD_4_ADDR) N(ADD_4_ADDR) N(ADD_4_ADDR) N(ADD_4_ADDR) N(EAP_ONLY) N(MSG_ID_SYN_SUP) ]
Oct 20 15:19:42 vyos-g2 charon: 13[NET] sending packet: from 192.168.230.29[4500] to 192.168.230.12[4500] (352 bytes)
Oct 20 15:19:42 vyos-g2 charon: 05[NET] received packet: from 192.168.230.12[4500] to 192.168.230.29[4500] (272 bytes)
Oct 20 15:19:42 vyos-g2 charon: 05[ENC] parsed IKE_AUTH response 1 [ V IDr AUTH SA TSi TSr N(SET_WINSIZE) N(ESP_TFC_PAD_N) N(NON_FIRST_FRAG) ]
Oct 20 15:19:42 vyos-g2 charon: 05[IKE] authentication of 'ccr38.zenit.ru' with pre-shared key successful
Oct 20 15:19:42 vyos-g2 charon: 05[IKE] IKE_SA peer-192.168.230.12-tunnel-vti[197] established between 192.168.230.29[ntop2-b-gw.zenit.ru]...192.168.230.12[ccr38.zenit.ru]
Oct 20 15:19:42 vyos-g2 charon: 05[IKE] scheduling rekeying in 85596s
Oct 20 15:19:42 vyos-g2 charon: 05[IKE] maximum IKE_SA lifetime 86136s
Oct 20 15:19:42 vyos-g2 charon: 05[IKE] received ESP_TFC_PADDING_NOT_SUPPORTED, not using ESPv3 TFC padding
Oct 20 15:19:42 vyos-g2 charon: 05[CFG] selected proposal: ESP:AES_CBC_256/HMAC_SHA1_96/NO_EXT_SEQ
Oct 20 15:19:42 vyos-g2 charon: 05[IKE] CHILD_SA peer-192.168.230.12-tunnel-vti{833558} established with SPIs c3f5d448_i f28dddfc_o and TS 0.0.0.0/0 === 0.0.0.0/0
Oct 20 15:19:42 vyos-g2 charon: 05[IKE] establishing CHILD_SA peer-192.168.230.12-tunnel-vti{833559}
Oct 20 15:19:42 vyos-g2 charon: 05[ENC] generating CREATE_CHILD_SA request 2 [ SA No TSi TSr ]
Oct 20 15:19:42 vyos-g2 charon: 05[NET] sending packet: from 192.168.230.29[4500] to 192.168.230.12[4500] (208 bytes)
Oct 20 15:19:42 vyos-g2 charon: 14[NET] received packet: from 192.168.230.12[4500] to 192.168.230.29[4500] (80 bytes)
Oct 20 15:19:42 vyos-g2 charon: 14[ENC] generating IKE_AUTH request 1 [ IDi N(INIT_CONTACT) IDr AUTH SA TSi TSr N(MOBIKE_SUP) N(ADD_4_ADDR) N(ADD_4_ADDR) N(ADD_4_ADDR) N(ADD_4_ADDR) N(ADD_4_ADDR) N(ADD_4_ADDR) N(ADD_4_ADDR) N(EAP_ONLY) N(MSG_ID_SYN_SUP) ]
Oct 20 15:19:42 vyos-g2 charon: 14[NET] sending packet: from 192.168.221.29[4500] to 192.168.221.22[4500] (368 bytes)
Oct 20 15:19:42 vyos-g2 charon: 09[NET] received packet: from 192.168.221.22[4500] to 192.168.221.29[4500] (272 bytes)
Oct 20 15:19:42 vyos-g2 charon: 09[ENC] parsed IKE_AUTH response 1 [ V IDr AUTH SA TSi TSr N(SET_WINSIZE) N(ESP_TFC_PAD_N) N(NON_FIRST_FRAG) ]
Oct 20 15:19:42 vyos-g2 charon: 09[IKE] authentication of 'ccr38.zenit.ru' with pre-shared key successful
Oct 20 15:19:42 vyos-g2 charon: 09[IKE] IKE_SA peer-192.168.221.22-tunnel-vti[198] established between 192.168.221.29[ntop2-m-gw.zenit.ru]...192.168.221.22[ccr38.zenit.ru]
Oct 20 15:19:42 vyos-g2 charon: 09[IKE] scheduling rekeying in 85638s
Oct 20 15:19:42 vyos-g2 charon: 09[IKE] maximum IKE_SA lifetime 86178s
Oct 20 15:19:42 vyos-g2 charon: 09[IKE] received ESP_TFC_PADDING_NOT_SUPPORTED, not using ESPv3 TFC padding
Oct 20 15:19:42 vyos-g2 charon: 09[CFG] selected proposal: ESP:AES_CBC_256/HMAC_SHA1_96/NO_EXT_SEQ
Oct 20 15:19:42 vyos-g2 charon: 09[IKE] CHILD_SA peer-192.168.221.22-tunnel-vti{833560} established with SPIs c775d39d_i 5085f883_o and TS 0.0.0.0/0 === 0.0.0.0/0
Oct 20 15:19:42 vyos-g2 charon: 09[IKE] establishing CHILD_SA peer-192.168.221.22-tunnel-vti{833561}
Oct 20 15:19:42 vyos-g2 charon: 09[ENC] generating CREATE_CHILD_SA request 2 [ SA No TSi TSr ]
Oct 20 15:19:42 vyos-g2 charon: 09[NET] sending packet: from 192.168.221.29[4500] to 192.168.221.22[4500] (208 bytes)
Oct 20 15:19:42 vyos-g2 charon: 11[NET] received packet: from 192.168.221.22[4500] to 192.168.221.29[4500] (80 bytes)