Skip to main content
imnuan
imnuan
New Member
April 13, 2015
Question

VPN and DHCP Relaying

  • April 13, 2015
  • 20 replies
  • 16529 views

Hello 

Im trying to use my internal DHCP-Server for VPN users. But im only get the Ips from the Client Address Range in the VPN Config. I changed also the internal interface to this config:

 

DHCP Server Enable  Advanced... Mode Server  Relay DHCP Server IP Type Regular  IPsec   But it dosent work.  Did i forgot something?   Kind Regards

20 replies

Show previous replies
Christopher_McMullan
Staff
Christopher_McMullan
Staff
April 16, 2015

Hmm...

Try disabling mode-cfg in Phase 1, and then go back to the Phase 2 settings and enable DHCP:

config vpn ipsec phase1-interface

edit "Du-CISCO"

set mode-cfg disable

end

config vpn ipsec phase2-interface

edit "Du-CISCO"

set dhcp-ipsec enable

end

imnuan
imnuanAuthor
New Member
April 16, 2015

No success.

 

FGT70D # config vpn ipsec phase1-interface 

FGT70D (phase1-interface) # edit Du-CISCO 

FGT70D (Du-CISCO) # set mode-cfg disable 

FGT70D (Du-CISCO) # end

FGT70D # config vpn ipsec phase2-interface 

FGT70D (phase2-interface) # edit Du-CISCO 

FGT70D (Du-CISCO) # set dhcp-ipsec enable 

FGT70D (Du-CISCO) # end

FGT70D #

 

ike 0:Du-CISCO_0:42: sending XAUTH request
ike 0:Du-CISCO_0:42: enc D4DF6FF62FDFF6FB06686194B82DCE360810060136987C4B000000440E00001408BACB0E217C9C6F2B8EA29024619D910000001401001C6AC088000040890000408A0000
ike 0:Du-CISCO_0:42: out D4DF6FF62FDFF6FB06686194B82DCE360810060136987C4B0000004CA044C740D1E91D104EE369DA3A8A00B1E74D3042FCD5EAA8EE067A89183A7F3567E008A07992BD8AF43B6ACD463773AD
ike 0:Du-CISCO_0:42: sent IKE msg (cfg_send): 84.73.193.80:4500->194.230.155.139:43685, len=76, id=d4df6ff62fdff6fb/06686194b82dce36:36987c4b
ike shrank heap by 122880 bytes
ike 0:Du-CISCO_0:42: out D4DF6FF62FDFF6FB06686194B82DCE360810060136987C4B0000004CA044C740D1E91D104EE369DA3A8A00B1E74D3042FCD5EAA8EE067A89183A7F3567E008A07992BD8AF43B6ACD463773AD
ike 0:Du-CISCO_0:42: sent IKE msg (CFG_RETRANS): 84.73.193.80:4500->194.230.155.139:43685, len=76, id=d4df6ff62fdff6fb/06686194b82dce36:36987c4b
ike 0:Du-CISCO_0: link is idle 5 84.73.193.80->194.230.155.139:43685 dpd=1 seqno=2
ike 0:Du-CISCO_0:42: send IKEv1 DPD probe, seqno 2
ike 0:Du-CISCO_0:42: enc D4DF6FF62FDFF6FB06686194B82DCE36081005015B61046C000000500B0000144FC6E4E3E276C40D3E3C9495224DDB1E000000200000000101108D28D4DF6FF62FDFF6FB06686194B82DCE3600000002
ike 0:Du-CISCO_0:42: out D4DF6FF62FDFF6FB06686194B82DCE36081005015B61046C0000005C65739947DC0AB10C3692BB23CB9061DFCA3DE7CF903C64EB4F09ED5510FBAB04EFF4732F041E11312F0EAF773F337E9F32966896B68A529DB53F4CF503CB191F
ike 0:Du-CISCO_0:42: sent IKE msg (R-U-THERE): 84.73.193.80:4500->194.230.155.139:43685, len=92, id=d4df6ff62fdff6fb/06686194b82dce36:5b61046c
ike 0: comes 194.230.155.139:43685->84.73.193.80:4500,ifindex=5....
ike 0: IKEv1 exchange=Informational id=d4df6ff62fdff6fb/06686194b82dce36:6fb2ed68 len=92
ike 0: in D4DF6FF62FDFF6FB06686194B82DCE36081005016FB2ED680000005C884F23D4024195FBB576DF641B34BEC8F597EADA3071A5EE19A8010D2FE1DEFB3FDC386950BDBA0CEC334E7BBBA87628F04D4F88B6BC4596DA0A5DAB6F0D66DE
ike 0:Du-CISCO_0:42: dec D4DF6FF62FDFF6FB06686194B82DCE36081005016FB2ED680000005C0B000014193D2B15C5761B4AAA47D9F216891FA1000000200000000101108D29D4DF6FF62FDFF6FB06686194B82DCE360000000200000000000000000000000C
ike 0:Du-CISCO_0:42: notify msg received: R-U-THERE-ACK
ike 0:Du-CISCO_0:42: out D4DF6FF62FDFF6FB06686194B82DCE360810060136987C4B0000004CA044C740D1E91D104EE369DA3A8A00B1E74D3042FCD5EAA8EE067A89183A7F3567E008A07992BD8AF43B6ACD463773AD
ike 0:Du-CISCO_0:42: sent IKE msg (CFG_RETRANS): 84.73.193.80:4500->194.230.155.139:43685, len=76, id=d4df6ff62fdff6fb/06686194b82dce36:36987c4b
ike 0:Du-CISCO_0: link is idle 5 84.73.193.80->194.230.155.139:43685 dpd=1 seqno=3
ike 0:Du-CISCO_0:42: send IKEv1 DPD probe, seqno 3
ike 0:Du-CISCO_0:42: enc D4DF6FF62FDFF6FB06686194B82DCE360810050103812A41000000500B0000148E76C290294D5F220E9ED166DC774C17000000200000000101108D28D4DF6FF62FDFF6FB06686194B82DCE3600000003
ike 0:Du-CISCO_0:42: out D4DF6FF62FDFF6FB06686194B82DCE360810050103812A410000005C1B32135CE44C683F1123A008F93706F41B358604EFFF2B28145AC18F70CEA50D8D135764200A6D368242E2C4C90826EE3432BC15C4144C15FCCD94506FEBB4CB
ike 0:Du-CISCO_0:42: sent IKE msg (R-U-THERE): 84.73.193.80:4500->194.230.155.139:43685, len=92, id=d4df6ff62fdff6fb/06686194b82dce36:03812a41
ike 0: comes 194.230.155.139:43685->84.73.193.80:4500,ifindex=5....
ike 0: IKEv1 exchange=Informational id=d4df6ff62fdff6fb/06686194b82dce36:dffe8d03 len=92
ike 0: in D4DF6FF62FDFF6FB06686194B82DCE3608100501DFFE8D030000005C346B82359EBAA2E6317AC284B1F44AEF2DB291027986F459AD49426912A05D9887AF40ECD3662AD74822C5BA43FE7C478E8D5EA020F34D166A7F3B32FE3F82FB
ike 0:Du-CISCO_0:42: dec D4DF6FF62FDFF6FB06686194B82DCE3608100501DFFE8D030000005C0B0000147113717AF6CC0B87A5DD9D80E2D1F0DF000000200000000101108D29D4DF6FF62FDFF6FB06686194B82DCE360000000300000000000000000000000C
ike 0:Du-CISCO_0:42: notify msg received: R-U-THERE-ACK
ike 0: comes 194.230.155.139:43685->84.73.193.80:4500,ifindex=5....
ike 0: IKEv1 exchange=Mode config id=d4df6ff62fdff6fb/06686194b82dce36:36987c4b len=92
ike 0: in D4DF6FF62FDFF6FB06686194B82DCE360810060136987C4B0000005C79FC40F0E2DCDC8E37F7F6FEDE78C5B0479CC85DC201192B34E21B8210F5901EAB622BEC010461F6AFC2546EC22C319AE02CDB7D715B09104AC3B40ED169024C
ike 0:Du-CISCO_0:42: dec D4DF6FF62FDFF6FB06686194B82DCE360810060136987C4B0000005C0E0000148CA4EE25EB3EB4E1273E1C61570A845E0000002002001C0040890008636872696869747A408A00085369723168656C6C00000000000000000000000C
ike 0:Du-CISCO_0:42: received XAUTH_USER_NAME 'chrihitz' length 8
ike 0:Du-CISCO_0:42: received XAUTH_USER_PASSWORD length 8
ike 0:Du-CISCO_0: XAUTH user "chrihitz"
ike 0:Du-CISCO: auth group VPN-Users
ike 0:Du-CISCO_0: XAUTH succeeded for user "chrihitz" group "VPN-Users"
ike 0:Du-CISCO_0:42: enc D4DF6FF62FDFF6FB06686194B82DCE36081006010ED826F80000003C0E000014C4F43B6A2E66F5C3A7AC9EE357057BF40000000C03001C00C08F0001
ike 0:Du-CISCO_0:42: out D4DF6FF62FDFF6FB06686194B82DCE36081006010ED826F80000004C00D819A7739112C4B41AF9AA187126231373E17DAB1EF502AB468D76DD9F259702759BB71289C1611E4340AC85839E79
ike 0:Du-CISCO_0:42: sent IKE msg (cfg_send): 84.73.193.80:4500->194.230.155.139:43685, len=76, id=d4df6ff62fdff6fb/06686194b82dce36:0ed826f8
ike 0: comes 194.230.155.139:43685->84.73.193.80:4500,ifindex=5....
ike 0: IKEv1 exchange=Mode config id=d4df6ff62fdff6fb/06686194b82dce36:0ed826f8 len=76
ike 0: in D4DF6FF62FDFF6FB06686194B82DCE36081006010ED826F80000004C1F9F7A558E64853AA9A4E64987C43B70C6A4075392294E2CA78EDB2C4E4A0233EB1078E63C5EE0F85D671B4A80176BE4
ike 0:Du-CISCO_0:42: dec D4DF6FF62FDFF6FB06686194B82DCE36081006010ED826F80000004C0E0000147A47C0317E995B2A088B647395876CF70000000C04001C00C08F000000000000000000000000000000000010
ike 0: comes 194.230.155.139:43685->84.73.193.80:4500,ifindex=5....
ike 0: IKEv1 exchange=Mode config id=d4df6ff62fdff6fb/06686194b82dce36:03cab72d len=172
ike 0: in D4DF6FF62FDFF6FB06686194B82DCE360810060103CAB72D000000ACF7E428AED5F30D6A4FD19A36724FFC1F52917C081F18D285C7C1B50C419F04195E70845085851B01780E6DEB4F4E900B1D26DC4A241E15EFF15B25DF535146C299E9022967ACCDBA6B837DD68EB4D552B08C5576B98A672B4DF5BBF6288DAD61E1D24C9B2746982D4249249193A64414CB14D4AAF93724B71B81B422FBEE0AB23821FACAD4E1F82BBCFCB6B8B506DB66
ike 0:Du-CISCO_0:42: dec D4DF6FF62FDFF6FB06686194B82DCE360810060103CAB72D000000AC0E000014466B0E65AD678A30925837148FDB5D8F0000006E01008686000100000002000000030000000400000005000000070026436973636F2053797374656D732056504E20436C69656E7420382E333A6950686F6E65204F53700000007002000070030000700400007006000070070000700100007008000070090000700B0000000000000000000000000000000E
ike 0:Du-CISCO_0:42: mode-cfg type 1 request 0:''
ike 0:Du-CISCO_0:42: mode-cfg not enabled, ignoring Configuration Method Request
ike 0:Du-CISCO_0: link is idle 5 84.73.193.80->194.230.155.139:43685 dpd=1 seqno=4
ike 0:Du-CISCO_0:42: send IKEv1 DPD probe, seqno 4
ike 0:Du-CISCO_0:42: enc D4DF6FF62FDFF6FB06686194B82DCE36081005016F8215F7000000500B0000142AFE2C3EBBE854E4BB103527FB8D5192000000200000000101108D28D4DF6FF62FDFF6FB06686194B82DCE3600000004
ike 0:Du-CISCO_0:42: out D4DF6FF62FDFF6FB06686194B82DCE36081005016F8215F70000005CA96CAD6B06B33A165AB8AA9CD12C21C2A29E9B9A0E0DDB7AE320695E9F714166168DE4F5D60829B6539F6816001E0BBE299CCC0071626A97B4424AC7121ED869
ike 0:Du-CISCO_0:42: sent IKE msg (R-U-THERE): 84.73.193.80:4500->194.230.155.139:43685, len=92, id=d4df6ff62fdff6fb/06686194b82dce36:6f8215f7
ike 0: comes 194.230.155.139:43685->84.73.193.80:4500,ifindex=5....
ike 0: IKEv1 exchange=Mode config id=d4df6ff62fdff6fb/06686194b82dce36:03cab72d len=172
ike 0: in D4DF6FF62FDFF6FB06686194B82DCE360810060103CAB72D000000ACF7E428AED5F30D6A4FD19A36724FFC1F52917C081F18D285C7C1B50C419F04195E70845085851B01780E6DEB4F4E900B1D26DC4A241E15EFF15B25DF535146C299E9022967ACCDBA6B837DD68EB4D552B08C5576B98A672B4DF5BBF6288DAD61E1D24C9B2746982D4249249193A64414CB14D4AAF93724B71B81B422FBEE0AB23821FACAD4E1F82BBCFCB6B8B506DB66
ike 0:Du-CISCO_0:42: dec D4DF6FF62FDFF6FB06686194B82DCE360810060103CAB72D000000AC0E000014466B0E65AD678A30925837148FDB5D8F0000006E01008686000100000002000000030000000400000005000000070026436973636F2053797374656D732056504E20436C69656E7420382E333A6950686F6E65204F53700000007002000070030000700400007006000070070000700100007008000070090000700B0000000000000000000000000000000E
ike 0:Du-CISCO_0:42: mode-cfg type 1 request 0:''
ike 0:Du-CISCO_0:42: mode-cfg not enabled, ignoring Configuration Method Request
ike 0: comes 194.230.155.139:43685->84.73.193.80:4500,ifindex=5....
ike 0: IKEv1 exchange=Informational id=d4df6ff62fdff6fb/06686194b82dce36:1854bf0e len=92
ike 0: in D4DF6FF62FDFF6FB06686194B82DCE36081005011854BF0E0000005C46DCF2819CD17EC7B6A1583E2DE929A3AA2B1267E5D5150A8A2D8546077D353F87DE554A68B99545679A5951A7ECC2DB04DAAAEF2609D31432A1237A4D45FB17
ike 0:Du-CISCO_0:42: dec D4DF6FF62FDFF6FB06686194B82DCE36081005011854BF0E0000005C0B000014EC4BD2A434CEE39E1A2FCB990C07F6E4000000200000000101108D29D4DF6FF62FDFF6FB06686194B82DCE360000000400000000000000000000000C
ike 0:Du-CISCO_0:42: notify msg received: R-U-THERE-ACK
ike 0: comes 194.230.155.139:43685->84.73.193.80:4500,ifindex=5....
ike 0: IKEv1 exchange=Mode config id=d4df6ff62fdff6fb/06686194b82dce36:03cab72d len=172
ike 0: in D4DF6FF62FDFF6FB06686194B82DCE360810060103CAB72D000000ACF7E428AED5F30D6A4FD19A36724FFC1F52917C081F18D285C7C1B50C419F04195E70845085851B01780E6DEB4F4E900B1D26DC4A241E15EFF15B25DF535146C299E9022967ACCDBA6B837DD68EB4D552B08C5576B98A672B4DF5BBF6288DAD61E1D24C9B2746982D4249249193A64414CB14D4AAF93724B71B81B422FBEE0AB23821FACAD4E1F82BBCFCB6B8B506DB66
ike 0:Du-CISCO_0:42: dec D4DF6FF62FDFF6FB06686194B82DCE360810060103CAB72D000000AC0E000014466B0E65AD678A30925837148FDB5D8F0000006E01008686000100000002000000030000000400000005000000070026436973636F2053797374656D732056504E20436C69656E7420382E333A6950686F6E65204F53700000007002000070030000700400007006000070070000700100007008000070090000700B0000000000000000000000000000000E
ike 0:Du-CISCO_0:42: mode-cfg type 1 request 0:''
ike 0:Du-CISCO_0:42: mode-cfg not enabled, ignoring Configuration Method Request
ike 0:Du-CISCO_0: link is idle 5 84.73.193.80->194.230.155.139:43685 dpd=1 seqno=5
ike 0:Du-CISCO_0:42: send IKEv1 DPD probe, seqno 5
ike 0:Du-CISCO_0:42: enc D4DF6FF62FDFF6FB06686194B82DCE3608100501391D6F52000000500B000014F3EF633847799CC325446C9726C47AC5000000200000000101108D28D4DF6FF62FDFF6FB06686194B82DCE3600000005
ike 0:Du-CISCO_0:42: out D4DF6FF62FDFF6FB06686194B82DCE3608100501391D6F520000005CE25467857DD847164CF1DF172564C437E6EF2916E0BDB199E1958C72734ACE23ED0D5EA9515CE8D9C4AF5C224C85CBAAA59D1C6A75C97E687FCCD4A43EBC7A40
ike 0:Du-CISCO_0:42: sent IKE msg (R-U-THERE): 84.73.193.80:4500->194.230.155.139:43685, len=92, id=d4df6ff62fdff6fb/06686194b82dce36:391d6f52
ike 0: comes 194.230.155.139:43685->84.73.193.80:4500,ifindex=5....
ike 0: IKEv1 exchange=Informational id=d4df6ff62fdff6fb/06686194b82dce36:0a6fc637 len=92
ike 0: in D4DF6FF62FDFF6FB06686194B82DCE36081005010A6FC6370000005CDBA0050F2261D7366C73BAAE4503BA0715150BCAADAAB78B52378CDFD5B7D5196A8D39EF04B13A7F523BC3B94A4317B6F992CAD37F05C617771F26239B2DA849
ike 0:Du-CISCO_0:42: dec D4DF6FF62FDFF6FB06686194B82DCE36081005010A6FC6370000005C0B000014341C1D920CB7E656C91853946ECCB9A6000000200000000101108D29D4DF6FF62FDFF6FB06686194B82DCE360000000500000000000000000000000C
ike 0:Du-CISCO_0:42: notify msg received: R-U-THERE-ACK
ike 0: comes 194.230.155.139:43685->84.73.193.80:4500,ifindex=5....
ike 0: IKEv1 exchange=Mode config id=d4df6ff62fdff6fb/06686194b82dce36:03cab72d len=172
ike 0: in D4DF6FF62FDFF6FB06686194B82DCE360810060103CAB72D000000ACF7E428AED5F30D6A4FD19A36724FFC1F52917C081F18D285C7C1B50C419F04195E70845085851B01780E6DEB4F4E900B1D26DC4A241E15EFF15B25DF535146C299E9022967ACCDBA6B837DD68EB4D552B08C5576B98A672B4DF5BBF6288DAD61E1D24C9B2746982D4249249193A64414CB14D4AAF93724B71B81B422FBEE0AB23821FACAD4E1F82BBCFCB6B8B506DB66
ike 0:Du-CISCO_0:42: dec D4DF6FF62FDFF6FB06686194B82DCE360810060103CAB72D000000AC0E000014466B0E65AD678A30925837148FDB5D8F0000006E01008686000100000002000000030000000400000005000000070026436973636F2053797374656D732056504E20436C69656E7420382E333A6950686F6E65204F53700000007002000070030000700400007006000070070000700100007008000070090000700B0000000000000000000000000000000E
ike 0:Du-CISCO_0:42: mode-cfg type 1 request 0:''
ike 0:Du-CISCO_0:42: mode-cfg not enabled, ignoring Configuration Method Request
ike 0: comes 194.230.155.139:43685->84.73.193.80:4500,ifindex=5....
ike 0: IKEv1 exchange=Mode config id=d4df6ff62fdff6fb/06686194b82dce36:03cab72d len=172
ike 0: in D4DF6FF62FDFF6FB06686194B82DCE360810060103CAB72D000000ACF7E428AED5F30D6A4FD19A36724FFC1F52917C081F18D285C7C1B50C419F04195E70845085851B01780E6DEB4F4E900B1D26DC4A241E15EFF15B25DF535146C299E9022967ACCDBA6B837DD68EB4D552B08C5576B98A672B4DF5BBF6288DAD61E1D24C9B2746982D4249249193A64414CB14D4AAF93724B71B81B422FBEE0AB23821FACAD4E1F82BBCFCB6B8B506DB66
ike 0:Du-CISCO_0:42: dec D4DF6FF62FDFF6FB06686194B82DCE360810060103CAB72D000000AC0E000014466B0E65AD678A30925837148FDB5D8F0000006E01008686000100000002000000030000000400000005000000070026436973636F2053797374656D732056504E20436C69656E7420382E333A6950686F6E65204F53700000007002000070030000700400007006000070070000700100007008000070090000700B0000000000000000000000000000000E
ike 0:Du-CISCO_0:42: mode-cfg type 1 request 0:''
ike 0:Du-CISCO_0:42: mode-cfg not enabled, ignoring Configuration Method Request
ike 0:Du-CISCO_0: link is idle 5 84.73.193.80->194.230.155.139:43685 dpd=1 seqno=6
ike 0:Du-CISCO_0:42: send IKEv1 DPD probe, seqno 6
ike 0:Du-CISCO_0:42: enc D4DF6FF62FDFF6FB06686194B82DCE3608100501A042ADEF000000500B00001413C603D1519BE3B69F3D03181FB8BECF000000200000000101108D28D4DF6FF62FDFF6FB06686194B82DCE3600000006
ike 0:Du-CISCO_0:42: out D4DF6FF62FDFF6FB06686194B82DCE3608100501A042ADEF0000005C513A87B778C66881DE5FE6E0DB409BD06E0D2FF12C8C0884413670D406CDC26BB36CABA29B3E759A3CBD348752660D639F5954771D6DB64259E0977CD6F020B8
ike 0:Du-CISCO_0:42: sent IKE msg (R-U-THERE): 84.73.193.80:4500->194.230.155.139:43685, len=92, id=d4df6ff62fdff6fb/06686194b82dce36:a042adef
ike 0: comes 194.230.155.139:43685->84.73.193.80:4500,ifindex=5....
ike 0: IKEv1 exchange=Informational id=d4df6ff62fdff6fb/06686194b82dce36:518c3bd7 len=92
ike 0: in D4DF6FF62FDFF6FB06686194B82DCE3608100501518C3BD70000005C5B5E83D59BB93B9F0C043B8C3611221CEB90820614D50812B0D992EA457C74B860278695EC3D9A79DF96B353200789572D33FACCBE1D27AC39E07B2B4304526F
ike 0:Du-CISCO_0:42: dec D4DF6FF62FDFF6FB06686194B82DCE3608100501518C3BD70000005C0B000014D23E0DA895A58907F1F67974A5007CF6000000200000000101108D29D4DF6FF62FDFF6FB06686194B82DCE360000000600000000000000000000000C
ike 0:Du-CISCO_0:42: notify msg received: R-U-THERE-ACK
ike 0: comes 194.230.155.139:43685->84.73.193.80:4500,ifindex=5....
ike 0: IKEv1 exchange=Mode config id=d4df6ff62fdff6fb/06686194b82dce36:03cab72d len=172
ike 0: in D4DF6FF62FDFF6FB06686194B82DCE360810060103CAB72D000000ACF7E428AED5F30D6A4FD19A36724FFC1F52917C081F18D285C7C1B50C419F04195E70845085851B01780E6DEB4F4E900B1D26DC4A241E15EFF15B25DF535146C299E9022967ACCDBA6B837DD68EB4D552B08C5576B98A672B4DF5BBF6288DAD61E1D24C9B2746982D4249249193A64414CB14D4AAF93724B71B81B422FBEE0AB23821FACAD4E1F82BBCFCB6B8B506DB66
ike 0:Du-CISCO_0:42: dec D4DF6FF62FDFF6FB06686194B82DCE360810060103CAB72D000000AC0E000014466B0E65AD678A30925837148FDB5D8F0000006E01008686000100000002000000030000000400000005000000070026436973636F2053797374656D732056504E20436C69656E7420382E333A6950686F6E65204F53700000007002000070030000700400007006000070070000700100007008000070090000700B0000000000000000000000000000000E
ike 0:Du-CISCO_0:42: mode-cfg type 1 request 0:''
ike 0:Du-CISCO_0:42: mode-cfg not enabled, ignoring Configuration Method Request
ike 0:Du-CISCO_0: link is idle 5 84.73.193.80->194.230.155.139:43685 dpd=1 seqno=7
ike 0:Du-CISCO_0:42: send IKEv1 DPD probe, seqno 7
ike 0:Du-CISCO_0:42: enc D4DF6FF62FDFF6FB06686194B82DCE360810050196C09702000000500B000014BD356FC3577DDE67A3862090FE31656B000000200000000101108D28D4DF6FF62FDFF6FB06686194B82DCE3600000007
ike 0:Du-CISCO_0:42: out D4DF6FF62FDFF6FB06686194B82DCE360810050196C097020000005C626985C16BA0DC17FA5C09DFD72D0F1C5C95012C5B1B535EC75D03DB8614AE6724D075E70E52F490C592B817521C890E91CA588C8813D6EC98447C89E0269620
ike 0:Du-CISCO_0:42: sent IKE msg (R-U-THERE): 84.73.193.80:4500->194.230.155.139:43685, len=92, id=d4df6ff62fdff6fb/06686194b82dce36:96c09702
ike 0: comes 194.230.155.139:43685->84.73.193.80:4500,ifindex=5....
ike 0: IKEv1 exchange=Informational id=d4df6ff62fdff6fb/06686194b82dce36:b773f83f len=92
ike 0: in D4DF6FF62FDFF6FB06686194B82DCE3608100501B773F83F0000005CDBF692CB0DC649A3DEBF6048080B146A7928AF0D214D2F4DD113B6F7D5259086181FF295BE75D0D15A5BB7234FD74AF454715B89586A2A838ECCE6E89451B7DC
ike 0:Du-CISCO_0:42: dec D4DF6FF62FDFF6FB06686194B82DCE3608100501B773F83F0000005C0B0000147826A81B58FB1CB631E3A2AD90832154000000200000000101108D29D4DF6FF62FDFF6FB06686194B82DCE360000000700000000000000000000000C
ike 0:Du-CISCO_0:42: notify msg received: R-U-THERE-ACK
ike 0: comes 194.230.155.139:43685->84.73.193.80:4500,ifindex=5....
ike 0: IKEv1 exchange=Mode config id=d4df6ff62fdff6fb/06686194b82dce36:03cab72d len=172
ike 0: in D4DF6FF62FDFF6FB06686194B82DCE360810060103CAB72D000000ACF7E428AED5F30D6A4FD19A36724FFC1F52917C081F18D285C7C1B50C419F04195E70845085851B01780E6DEB4F4E900B1D26DC4A241E15EFF15B25DF535146C299E9022967ACCDBA6B837DD68EB4D552B08C5576B98A672B4DF5BBF6288DAD61E1D24C9B2746982D4249249193A64414CB14D4AAF93724B71B81B422FBEE0AB23821FACAD4E1F82BBCFCB6B8B506DB66
ike 0:Du-CISCO_0:42: dec D4DF6FF62FDFF6FB06686194B82DCE360810060103CAB72D000000AC0E000014466B0E65AD678A30925837148FDB5D8F0000006E01008686000100000002000000030000000400000005000000070026436973636F2053797374656D732056504E20436C69656E7420382E333A6950686F6E65204F53700000007002000070030000700400007006000070070000700100007008000070090000700B0000000000000000000000000000000E
ike 0:Du-CISCO_0:42: mode-cfg type 1 request 0:''
ike 0:Du-CISCO_0:42: mode-cfg not enabled, ignoring Configuration Method Request
ike 0: comes 194.230.155.139:43685->84.73.193.80:4500,ifindex=5....
ike 0: IKEv1 exchange=Mode config id=d4df6ff62fdff6fb/06686194b82dce36:03cab72d len=172
ike 0: in D4DF6FF62FDFF6FB06686194B82DCE360810060103CAB72D000000ACF7E428AED5F30D6A4FD19A36724FFC1F52917C081F18D285C7C1B50C419F04195E70845085851B01780E6DEB4F4E900B1D26DC4A241E15EFF15B25DF535146C299E9022967ACCDBA6B837DD68EB4D552B08C5576B98A672B4DF5BBF6288DAD61E1D24C9B2746982D4249249193A64414CB14D4AAF93724B71B81B422FBEE0AB23821FACAD4E1F82BBCFCB6B8B506DB66
ike 0:Du-CISCO_0:42: dec D4DF6FF62FDFF6FB06686194B82DCE360810060103CAB72D000000AC0E000014466B0E65AD678A30925837148FDB5D8F0000006E01008686000100000002000000030000000400000005000000070026436973636F2053797374656D732056504E20436C69656E7420382E333A6950686F6E65204F53700000007002000070030000700400007006000070070000700100007008000070090000700B0000000000000000000000000000000E
ike 0:Du-CISCO_0:42: mode-cfg type 1 request 0:''
ike 0:Du-CISCO_0:42: mode-cfg not enabled, ignoring Configuration Method Request
ike 0:Du-CISCO_0: link is idle 5 84.73.193.80->194.230.155.139:43685 dpd=1 seqno=8
ike 0:Du-CISCO_0:42: send IKEv1 DPD probe, seqno 8
ike 0:Du-CISCO_0:42: enc D4DF6FF62FDFF6FB06686194B82DCE3608100501AE3F956A000000500B000014B8246FD988E97F51B20D0FA8A377FB34000000200000000101108D28D4DF6FF62FDFF6FB06686194B82DCE3600000008
ike 0:Du-CISCO_0:42: out D4DF6FF62FDFF6FB06686194B82DCE3608100501AE3F956A0000005C6A8884B37013CEEBE6A6A93F946FB8B90239FECBC1033BB40B6CDCB0E94872A367B1DE26A8FB5AA2B0467E41EC672F8F0EAAFE5FCCBF1BB4C572AFDD4F3E7C1A
ike 0:Du-CISCO_0:42: sent IKE msg (R-U-THERE): 84.73.193.80:4500->194.230.155.139:43685, len=92, id=d4df6ff62fdff6fb/06686194b82dce36:ae3f956a
ike 0: comes 194.230.155.139:43685->84.73.193.80:4500,ifindex=5....
ike 0: IKEv1 exchange=Informational id=d4df6ff62fdff6fb/06686194b82dce36:23008d73 len=92
ike 0: in D4DF6FF62FDFF6FB06686194B82DCE360810050123008D730000005C2748741AA0CF9FBEDA102298CD90A1643301E76EC8AD94EC8C177444B12459D6BA56F8D5BDF02D71B39693F970141AF454FE2ED1A81E509BE80655BAE03C7510
ike 0:Du-CISCO_0:42: dec D4DF6FF62FDFF6FB06686194B82DCE360810050123008D730000005C0B00001413E398F4275764EE7A83ADB28257B1B8000000200000000101108D29D4DF6FF62FDFF6FB06686194B82DCE360000000800000000000000000000000C
ike 0:Du-CISCO_0:42: notify msg received: R-U-THERE-ACK
ike 0: comes 194.230.155.139:43685->84.73.193.80:4500,ifindex=5....
ike 0: IKEv1 exchange=Mode config id=d4df6ff62fdff6fb/06686194b82dce36:03cab72d len=172
ike 0: in D4DF6FF62FDFF6FB06686194B82DCE360810060103CAB72D000000ACF7E428AED5F30D6A4FD19A36724FFC1F52917C081F18D285C7C1B50C419F04195E70845085851B01780E6DEB4F4E900B1D26DC4A241E15EFF15B25DF535146C299E9022967ACCDBA6B837DD68EB4D552B08C5576B98A672B4DF5BBF6288DAD61E1D24C9B2746982D4249249193A64414CB14D4AAF93724B71B81B422FBEE0AB23821FACAD4E1F82BBCFCB6B8B506DB66
ike 0:Du-CISCO_0:42: dec D4DF6FF62FDFF6FB06686194B82DCE360810060103CAB72D000000AC0E000014466B0E65AD678A30925837148FDB5D8F0000006E01008686000100000002000000030000000400000005000000070026436973636F2053797374656D732056504E20436C69656E7420382E333A6950686F6E65204F53700000007002000070030000700400007006000070070000700100007008000070090000700B0000000000000000000000000000000E
ike 0:Du-CISCO_0:42: mode-cfg type 1 request 0:''
ike 0:Du-CISCO_0:42: mode-cfg not enabled, ignoring Configuration Method Request
ike 0: comes 194.230.155.139:43685->84.73.193.80:4500,ifindex=5....
ike 0: IKEv1 exchange=Mode config id=d4df6ff62fdff6fb/06686194b82dce36:03cab72d len=172
ike 0: in D4DF6FF62FDFF6FB06686194B82DCE360810060103CAB72D000000ACF7E428AED5F30D6A4FD19A36724FFC1F52917C081F18D285C7C1B50C419F04195E70845085851B01780E6DEB4F4E900B1D26DC4A241E15EFF15B25DF535146C299E9022967ACCDBA6B837DD68EB4D552B08C5576B98A672B4DF5BBF6288DAD61E1D24C9B2746982D4249249193A64414CB14D4AAF93724B71B81B422FBEE0AB23821FACAD4E1F82BBCFCB6B8B506DB66
ike 0:Du-CISCO_0:42: dec D4DF6FF62FDFF6FB06686194B82DCE360810060103CAB72D000000AC0E000014466B0E65AD678A30925837148FDB5D8F0000006E01008686000100000002000000030000000400000005000000070026436973636F2053797374656D732056504E20436C69656E7420382E333A6950686F6E65204F53700000007002000070030000700400007006000070070000700100007008000070090000700B0000000000000000000000000000000E
ike 0:Du-CISCO_0:42: mode-cfg type 1 request 0:''
ike 0:Du-CISCO_0:42: mode-cfg not enabled, ignoring Configuration Method Request
ike 0:Du-CISCO_0: link is idle 5 84.73.193.80->194.230.155.139:43685 dpd=1 seqno=9
ike 0:Du-CISCO_0:42: send IKEv1 DPD probe, seqno 9
ike 0:Du-CISCO_0:42: enc D4DF6FF62FDFF6FB06686194B82DCE3608100501CFA6D926000000500B0000145467F2946ED79D95335A210D731E657E000000200000000101108D28D4DF6FF62FDFF6FB06686194B82DCE3600000009
ike 0:Du-CISCO_0:42: out D4DF6FF62FDFF6FB06686194B82DCE3608100501CFA6D9260000005CE0827B6571FF5813A48BC0AC73BCBC252C325B0B77F94EE577EDA75D773AC2EEA1EF8AB700E20354247F3B98D529933BBED7B21E612CA43D8609B711038AD3AD
ike 0:Du-CISCO_0:42: sent IKE msg (R-U-THERE): 84.73.193.80:4500->194.230.155.139:43685, len=92, id=d4df6ff62fdff6fb/06686194b82dce36:cfa6d926
ike 0: comes 194.230.155.139:43685->84.73.193.80:4500,ifindex=5....
ike 0: IKEv1 exchange=Informational id=d4df6ff62fdff6fb/06686194b82dce36:8fbe67c2 len=92
ike 0: in D4DF6FF62FDFF6FB06686194B82DCE36081005018FBE67C20000005C224C572F7D76A6CE36B1C8CB3C518D03966918BE6BD228B88AB67A2059E720B3FD9B5163FB569068BBDAB70A53E26836433D0E87FC3B96984BCDD737070899F0
ike 0:Du-CISCO_0:42: dec D4DF6FF62FDFF6FB06686194B82DCE36081005018FBE67C20000005C0C0000147AF600A450CEDFAE1636440CA40E11C70000001C0000000101100001D4DF6FF62FDFF6FB06686194B82DCE3600000000000000000000000000000010
ike 0:Du-CISCO_0:42: recv ISAKMP SA delete d4df6ff62fdff6fb/06686194b82dce36
ike 0:Du-CISCO_0: deleting
ike 0:Du-CISCO_0: flushing 
ike 0:Du-CISCO_0: sending SNMP tunnel DOWN trap
ike 0:Du-CISCO_0: flushed 
ike 0:Du-CISCO_0: delete dynamic
ike 0:Du-CISCO_0: reset NAT-T
ike 0:Du-CISCO_0: deleted

Christopher_McMullan
Staff
Christopher_McMullan
Staff
April 16, 2015

That may be the end of the road. I would still open a ticket with TAC to make sure I'm not overlooking an obvious solution, but it may be like I said, one or the other: mode-cfg or DHCP.

Terms & ConditionsAccessibility statement
Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.