Dialup VPN IPSEC Tunnel flapped while ISP Stated Everything is looks Good at their end

sk4 · ‎12-03-2025

Hi Team,

I am facing the issue where dialup vpn ipsec tunnel is not coming up while another ipsec tunnels are up via same wan connection.

When i am debugging at dialup server site - below is the error message.

from Dialup Server ( Responder)

mmm-tt-tmes-rvm-01 # 2025-12-03 13:36:51.231140 ike V=root:0:ISP2_MGMT:1188888: negotiation timeout, deleting
2025-12-03 13:36:51.231237 ike V=root:0:ISP2_MGMT: connection expiring due to phase1 down
2025-12-03 13:36:51.231247 ike V=root:0:ISP2_MGMT: going to be deleted
2025-12-03 13:36:51.519365 ike V=root:0: comes 65.12.12.75:500->48.12.12.74:500,ifindex=6,vrf=0,len=341....
2025-12-03 13:36:51.519408 ike V=root:0: IKEv2 exchange=SA_INIT id=fc1507345c5cadc2/0000000000000000 len=341
2025-12-03 13:36:51.519416 ike 0: in FC1507345C5CADC200000000000000002120220800000000000001552200003800000034010100050300000C01000014800E010
00300000802000005030000080400000E030000080400001300000008040000152800008C00150000010F39F1C50804667975B4ED9FCA8E2EAC4809C3330AED7399072CC8A48
C408AF23BC932540F8C24685D54EDCF702A3EA8324C38F5EA46CC57F3E941108B4091415800FA0FCF6406097535F1898CDF44CB1C0D7915C4E66CC39BA04E230E59B4D713E19
F21EB8E7B3FBF56A6B0B5E2787A48EEC24F23F9DD791B0BB76D56E60160D9A48229000024E990E2447FF99FB13975DC0B786B010892D9D64260B2BDA4CC3C0FBE3CA25EF4290
0001C00004004D7B14C148F8EF0F7B71D806AC1093AB1711FD4692900001C000040059D29762B31F1F6A18CA8286A67B297CFA0127F9C290000080000402E290000090000F05
00C000000080000F101
2025-12-03 13:36:51.519456 ike V=root:0:fc1507345c5cadc2/0000000000000000:1188892: responder received SA_INIT msg
2025-12-03 13:36:51.519468 ike V=root:0:fc1507345c5cadc2/0000000000000000:1188892: received notify type NAT_DETECTION_SOURCE_IP
2025-12-03 13:36:51.519478 ike V=root:0:fc1507345c5cadc2/0000000000000000:1188892: received notify type NAT_DETECTION_DESTINATION_IP
2025-12-03 13:36:51.519485 ike V=root:0:fc1507345c5cadc2/0000000000000000:1188892: received notify type FRAGMENTATION_SUPPORTED
2025-12-03 13:36:51.519493 ike V=root:0:fc1507345c5cadc2/0000000000000000:1188892: received notify type VPN_NETWORK_ID
2025-12-03 13:36:51.519501 ike V=root:0:fc1507345c5cadc2/0000000000000000:1188892: NETWORK ID : 12
2025-12-03 13:36:51.519506 ike V=root:0:fc1507345c5cadc2/0000000000000000:1188892: received notify type EXCHANGE_INTF_IP
2025-12-03 13:36:51.519517 ike V=root:0:fc1507345c5cadc2/0000000000000000:1188892: incoming proposal:
2025-12-03 13:36:51.519524 ike V=root:0:fc1507345c5cadc2/0000000000000000:1188892: proposal id = 1:
2025-12-03 13:36:51.519531 ike V=root:0:fc1507345c5cadc2/0000000000000000:1188892: protocol = IKEv2:
2025-12-03 13:36:51.519534 ike V=root:0:fc1507345c5cadc2/0000000000000000:1188892: encapsulation = IKEv2/none
2025-12-03 13:36:51.519541 ike V=root:0:fc1507345c5cadc2/0000000000000000:1188892: type=ENCR, val=AES_GCM_16 (key_len = 256)
2025-12-03 13:36:51.519550 ike V=root:0:fc1507345c5cadc2/0000000000000000:1188892: type=PRF, val=PRF_HMAC_SHA2_256
2025-12-03 13:36:51.519555 ike V=root:0:fc1507345c5cadc2/0000000000000000:1188892: type=DH_GROUP, val=ECP521.
2025-12-03 13:36:51.519561 ike V=root:0:fc1507345c5cadc2/0000000000000000:1188892: type=DH_GROUP, val=ECP256.
2025-12-03 13:36:51.519567 ike V=root:0:fc1507345c5cadc2/0000000000000000:1188892: type=DH_GROUP, val=MODP2048.
2025-12-03 13:36:51.519578 ike V=root:0:fc1507345c5cadc2/0000000000000000:1188892: matched proposal id 1
2025-12-03 13:36:51.519585 ike V=root:0:fc1507345c5cadc2/0000000000000000:1188892: proposal id = 1:
2025-12-03 13:36:51.519591 ike V=root:0:fc1507345c5cadc2/0000000000000000:1188892: protocol = IKEv2:
2025-12-03 13:36:51.519594 ike V=root:0:fc1507345c5cadc2/0000000000000000:1188892: encapsulation = IKEv2/none
2025-12-03 13:36:51.519600 ike V=root:0:fc1507345c5cadc2/0000000000000000:1188892: type=ENCR, val=AES_GCM_16 (key_len = 256)
2025-12-03 13:36:51.519603 ike V=root:0:fc1507345c5cadc2/0000000000000000:1188892: type=INTEGR, val=NONE
2025-12-03 13:36:51.519612 ike V=root:0:fc1507345c5cadc2/0000000000000000:1188892: type=PRF, val=PRF_HMAC_SHA2_256
2025-12-03 13:36:51.519617 ike V=root:0:fc1507345c5cadc2/0000000000000000:1188892: type=DH_GROUP, val=ECP521.
2025-12-03 13:36:51.519621 ike V=root:0:fc1507345c5cadc2/0000000000000000:1188892: lifetime=28800
2025-12-03 13:36:51.519625 ike V=root:0:fc1507345c5cadc2/0000000000000000:1188892: SA proposal chosen, matched gateway ISP2_MGMT
2025-12-03 13:36:51.519640 ike V=root:0:ISP2_MGMT:ISP2_MGMT: created connection: 0x1105a720 6 48.12.12.74->65.12.12.75:500.
2025-12-03 13:36:51.519654 ike V=root:0:ISP2_MGMT:1188892: processing notify type NAT_DETECTION_SOURCE_IP
2025-12-03 13:36:51.519685 ike V=root:0:ISP2_MGMT:1188892: processing NAT-D payload
2025-12-03 13:36:51.519696 ike V=root:0:ISP2_MGMT:1188892: NAT not detected
2025-12-03 13:36:51.519703 ike V=root:0:ISP2_MGMT:1188892: process NAT-D
2025-12-03 13:36:51.519708 ike V=root:0:ISP2_MGMT:1188892: processing notify type NAT_DETECTION_DESTINATION_IP
2025-12-03 13:36:51.519720 ike V=root:0:ISP2_MGMT:1188892: processing NAT-D payload
2025-12-03 13:36:51.519727 ike V=root:0:ISP2_MGMT:1188892: NAT detected: ME
2025-12-03 13:36:51.519733 ike V=root:0:ISP2_MGMT:1188892: process NAT-D
2025-12-03 13:36:51.519739 ike V=root:0:ISP2_MGMT:1188892: processing notify type FRAGMENTATION_SUPPORTED
2025-12-03 13:36:51.519749 ike V=root:0:ISP2_MGMT:1188892: processing notify type EXCHANGE_INTF_IP
2025-12-03 13:36:51.519776 ike V=root:0:ISP2_MGMT:1188892: responder preparing SA_INIT msg
2025-12-03 13:36:51.519786 ike V=root:0:ISP2_MGMT:1188892: generate DH public value request queued
2025-12-03 13:36:51.519835 ike V=root:0:ISP2_MGMT:1188892: responder preparing SA_INIT msg
2025-12-03 13:36:51.519844 ike V=root:0:ISP2_MGMT:1188892: compute DH shared secret request queued
2025-12-03 13:36:51.522215 ike V=root:0:ISP2_MGMT:1188892: responder preparing SA_INIT msg
2025-12-03 13:36:51.522237 ike V=root:0:ISP2_MGMT:1188892: create NAT-D hash local 48.12.12.74/500 remote 65.12.12.75/500
2025-12-03 13:36:51.522251 ike 0:ISP2_MGMT:1188892: out FC1507345C5CADC29F3AC90E3391C6DA21202220000000000000012C2200002800000024010100030300
000C01000014800E0100030000080200000500000008040000152800008C001500000012D3148D25B071CA11B6A81EA21A3917A5393C17F3F5A5A36A7B271C8C9479836672F7
17277D9E03E33CC6C92E53A32CA1AF4CC949E89C128E0D3CD4159B2740C900B3F220AFCAAD42A962E43B217285B59F17FDCB40C3EC25907016A5CF6E74ED04E192381A3F17A7
2AC1065D2442B9E7F53423E37541B428B748639716560AA14F98290000147B7642601105ABAB3D2ECEF492E878442900001C0000400419C211D78C0AF2487737E534D0A32134
4B502D552900001C00004005D5729321FF0E7F8EF6C64648C38493FE216C78BA290000080000402E000000080000F101
2025-12-03 13:36:51.522275 ike V=root:0:ISP2_MGMT:1188892: sent IKE msg (SA_INIT_RESPONSE): 48.12.12.74:500->65.12.12.75:500, len=300, vrf=
0, id=fc1507345c5cadc2/9f3ac90e3391c6da, oif=6
2025-12-03 13:36:51.522318 ike 0:ISP2_MGMT:1188892: IKE SA fc1507345c5cadc2/9f3ac90e3391c6da SK_ei 36:5EC2E5F6BFF00EA1526BD2D2F698E80A188799
7F517102E5371FA1C5BA42D6BEFC6D432E
2025-12-03 13:36:51.522324 ike 0:ISP2_MGMT:1188892: IKE SA fc1507345c5cadc2/9f3ac90e3391c6da SK_er 36:D982825D05D986B7A33E0C4D54D8244F8D43FB
7652118F37590258B6DA0DA45B2BA39689
2025-12-03 13:36:52.147747 ike :change cfg 1 interface 0 router 0 certs 0 ha 0
2025-12-03 13:36:55.144075 ike :config update start
2025-12-03 13:36:55.144193 ike :ike_embryonic_conn_limit = 10000
2025-12-03 13:36:55.144248 ike :ikecrypt DH multi-process enabled
2025-12-03 13:36:55.149580 ike config clean start 578
2025-12-03 13:36:55.149639 ike config clean done 578
2025-12-03 13:36:55.149647 ike :config update done
2025-12-03 13:37:21.519200 ike V=root:0:ISP2_MGMT:1188892: negotiation timeout, deleting
2025-12-03 13:37:21.519286 ike V=root:0:ISP2_MGMT: connection expiring due to phase1 down
2025-12-03 13:37:21.519299 ike V=root:0:ISP2_MGMT: going to be deleted
2025-12-03 13:37:21.760257 ike V=root:0: comes 65.12.12.75:500->48.12.12.74:500,ifindex=6,vrf=0,len=341....
2025-12-03 13:37:21.760300 ike V=root:0: IKEv2 exchange=SA_INIT id=c980445f6e0fc92b/0000000000000000 len=341
2025-12-03 13:37:21.760313 ike 0: in C980445F6E0FC92B00000000000000002120220800000000000001552200003800000034010100050300000C01000014800E010
00300000802000005030000080400000E030000080400001300000008040000152800008C0015000000FCB642E1C6141B9A81D73F71CD9A05F655DE90FF5A0DB336ABE52CD61
CDB3E7E4B124758F0347C0A6B77E317E647F497F05F7D89371FC0DAB1710ADBDC0DE309DA004279106822565A60F5B1A69E2AAB5392A41A2905280D62698B9A499E6B1598B70
DF1FE85F34055F3AABAD812C8F3075177BAC0BE019CBF6886C036E51AD7E6EE28290000242975FECA97A2E446BBD16BABA9C7079E970EAE8EC514BAC439D4961CEFE66E91290
0001C00004004A5EF07009E801A75A5923CB28F5A293562D8B2B82900001C000040053729E46D0D0E5E95305D7AC47E96879E35033954290000080000402E290000090000F05
00C000000080000F101
2025-12-03 13:37:21.760341 ike V=root:0:c980445f6e0fc92b/0000000000000000:1188896: responder received SA_INIT msg
2025-12-03 13:37:21.760348 ike V=root:0:c980445f6e0fc92b/0000000000000000:1188896: received notify type NAT_DETECTION_SOURCE_IP
2025-12-03 13:37:21.760354 ike V=root:0:c980445f6e0fc92b/0000000000000000:1188896: received notify type NAT_DETECTION_DESTINATION_IP
2025-12-03 13:37:21.760359 ike V=root:0:c980445f6e0fc92b/0000000000000000:1188896: received notify type FRAGMENTATION_SUPPORTED
2025-12-03 13:37:21.760363 ike V=root:0:c980445f6e0fc92b/0000000000000000:1188896: received notify type VPN_NETWORK_ID
2025-12-03 13:37:21.760368 ike V=root:0:c980445f6e0fc92b/0000000000000000:1188896: NETWORK ID : 12
2025-12-03 13:37:21.760373 ike V=root:0:c980445f6e0fc92b/0000000000000000:1188896: received notify type EXCHANGE_INTF_IP
2025-12-03 13:37:21.760382 ike V=root:0:c980445f6e0fc92b/0000000000000000:1188896: incoming proposal:
2025-12-03 13:37:21.760387 ike V=root:0:c980445f6e0fc92b/0000000000000000:1188896: proposal id = 1:
2025-12-03 13:37:21.760390 ike V=root:0:c980445f6e0fc92b/0000000000000000:1188896: protocol = IKEv2:
2025-12-03 13:37:21.760393 ike V=root:0:c980445f6e0fc92b/0000000000000000:1188896: encapsulation = IKEv2/none
2025-12-03 13:37:21.760398 ike V=root:0:c980445f6e0fc92b/0000000000000000:1188896: type=ENCR, val=AES_GCM_16 (key_len = 256)
2025-12-03 13:37:21.760402 ike V=root:0:c980445f6e0fc92b/0000000000000000:1188896: type=PRF, val=PRF_HMAC_SHA2_256
2025-12-03 13:37:21.760406 ike V=root:0:c980445f6e0fc92b/0000000000000000:1188896: type=DH_GROUP, val=ECP521.
2025-12-03 13:37:21.760411 ike V=root:0:c980445f6e0fc92b/0000000000000000:1188896: type=DH_GROUP, val=ECP256.
2025-12-03 13:37:21.760415 ike V=root:0:c980445f6e0fc92b/0000000000000000:1188896: type=DH_GROUP, val=MODP2048.
2025-12-03 13:37:21.760454 ike V=root:0:c980445f6e0fc92b/0000000000000000:1188896: matched proposal id 1
2025-12-03 13:37:21.760463 ike V=root:0:c980445f6e0fc92b/0000000000000000:1188896: proposal id = 1:
2025-12-03 13:37:21.760470 ike V=root:0:c980445f6e0fc92b/0000000000000000:1188896: protocol = IKEv2:
2025-12-03 13:37:21.760473 ike V=root:0:c980445f6e0fc92b/0000000000000000:1188896: encapsulation = IKEv2/none
2025-12-03 13:37:21.760479 ike V=root:0:c980445f6e0fc92b/0000000000000000:1188896: type=ENCR, val=AES_GCM_16 (key_len = 256)
2025-12-03 13:37:21.760484 ike V=root:0:c980445f6e0fc92b/0000000000000000:1188896: type=INTEGR, val=NONE
2025-12-03 13:37:21.760488 ike V=root:0:c980445f6e0fc92b/0000000000000000:1188896: type=PRF, val=PRF_HMAC_SHA2_256
2025-12-03 13:37:21.760495 ike V=root:0:c980445f6e0fc92b/0000000000000000:1188896: type=DH_GROUP, val=ECP521.
2025-12-03 13:37:21.760498 ike V=root:0:c980445f6e0fc92b/0000000000000000:1188896: lifetime=28800
2025-12-03 13:37:21.760502 ike V=root:0:c980445f6e0fc92b/0000000000000000:1188896: SA proposal chosen, matched gateway ISP2_MGMT
2025-12-03 13:37:21.760518 ike V=root:0:ISP2_MGMT:ISP2_MGMT: created connection: 0x1105a720 6 48.12.12.74->65.12.12.75:500.
2025-12-03 13:37:21.760532 ike V=root:0:ISP2_MGMT:1188896: processing notify type NAT_DETECTION_SOURCE_IP
2025-12-03 13:37:21.760587 ike V=root:0:ISP2_MGMT:1188896: processing NAT-D payload
2025-12-03 13:37:21.760603 ike V=root:0:ISP2_MGMT:1188896: NAT not detected
2025-12-03 13:37:21.760612 ike V=root:0:ISP2_MGMT:1188896: process NAT-D
2025-12-03 13:37:21.760616 ike V=root:0:ISP2_MGMT:1188896: processing notify type NAT_DETECTION_DESTINATION_IP
2025-12-03 13:37:21.760627 ike V=root:0:ISP2_MGMT:1188896: processing NAT-D payload
2025-12-03 13:37:21.760634 ike V=root:0:ISP2_MGMT:1188896: NAT detected: ME
2025-12-03 13:37:21.760638 ike V=root:0:ISP2_MGMT:1188896: process NAT-D
2025-12-03 13:37:21.760644 ike V=root:0:ISP2_MGMT:1188896: processing notify type FRAGMENTATION_SUPPORTED
2025-12-03 13:37:21.760656 ike V=root:0:ISP2_MGMT:1188896: processing notify type EXCHANGE_INTF_IP
2025-12-03 13:37:21.760685 ike V=root:0:ISP2_MGMT:1188896: responder preparing SA_INIT msg
2025-12-03 13:37:21.760696 ike V=root:0:ISP2_MGMT:1188896: generate DH public value request queued
2025-12-03 13:37:21.760755 ike V=root:0:ISP2_MGMT:1188896: responder preparing SA_INIT msg
2025-12-03 13:37:21.760765 ike V=root:0:ISP2_MGMT:1188896: compute DH shared secret request queued
2025-12-03 13:37:21.763041 ike V=root:0:ISP2_MGMT:1188896: responder preparing SA_INIT msg
2025-12-03 13:37:21.763062 ike V=root:0:ISP2_MGMT:1188896: create NAT-D hash local 48.12.12.74/500 remote 65.12.12.75/500
2025-12-03 13:37:21.763079 ike 0:ISP2_MGMT:1188896: out C980445F6E0FC92B9408BAD301F500BA21202220000000000000012C2200002800000024010100030300
000C01000014800E0100030000080200000500000008040000152800008C0015000000C327B512ACFED788D7B8620E94671E4230BAB648063CCC18026AAD99605238A035AAC5
0E9F6361F771B0BE4EC742286CC11ED9E768D819785ACE81E4CDED27781C01F03A32D8A24F4033F26086D229ACE7EA7DCCAB1FC67C5B4E633C818B4D7273BFFCECCBE3F3DB47
0466AA3A44EBB416693813022FCDE5A8B589DAE9F7AC43BC54DA29000014D3BA2C5FABCEA7E2502738DD5F49B0CE2900001C0000400428ADB24C011FE510AC27F96F9422D6DA
3AD7C4F22900001C000040050DFBCDFF9225A08BB3AB17227FFEAA7AA7129E55290000080000402E000000080000F101
2025-12-03 13:37:21.763119 ike V=root:0:ISP2_MGMT:1188896: sent IKE msg (SA_INIT_RESPONSE): 48.12.12.74:500->65.12.12.75:500, len=300, vrf=
0, id=c980445f6e0fc92b/9408bad301f500ba, oif=6
2025-12-03 13:37:21.763165 ike 0:ISP2_MGMT:1188896: IKE SA c980445f6e0fc92b/9408bad301f500ba SK_ei 36:D0B3109BB839CCC16F68F979E9BA34C99699D8
FDF0AF5DD194F84E620E5681110F88814F
2025-12-03 13:37:21.763173 ike 0:ISP2_MGMT:1188896: IKE SA c980445f6e0fc92b/9408bad301f500ba SK_er 36:D5F95D070DB278C6BE77ECCAC14B750DC6B699
151B0609CE4687EF1AAD32E6A51AF92702
2025-12-03 13:37:51.760137 ike V=root:0:ISP2_MGMT:1188896: negotiation timeout, deleting
2025-12-03 13:37:51.760211 ike V=root:0:ISP2_MGMT: connection expiring due to phase1 down
2025-12-03 13:37:51.760228 ike V=root:0:ISP2_MGMT: going to be deleted
2025-12-03 13:37:51.980179 ike V=root:0: comes 65.12.12.75:500->48.12.12.74:500,ifindex=6,vrf=0,len=341....
2025-12-03 13:37:51.980240 ike V=root:0: IKEv2 exchange=SA_INIT id=61a13266095437d7/0000000000000000 len=341
2025-12-03 13:37:51.980249 ike 0: in 61A13266095437D700000000000000002120220800000000000001552200003800000034010100050300000C01000014800E010
00300000802000005030000080400000E030000080400001300000008040000152800008C0015000000CD993B5EE3C3710173D542AEAAB4FAF2945DB6581089281F087C5BB6D
5CDD8945E78D6D784A81C4453FE760C2361E673271262D6DD24A89E9D6FF609E80ADCD4D600AB562D5A5FDE9C34C4AF19EB8B978FC15D7CA8BDFB89840DB30439DD7485374B8
65EC32002245F369DF3C8E99C90C7B8704E4DA2716CC62BE9DF1A8B1F4AE235B029000024EAD4F00929D70D7761E26BD84737BA25C07331299ACBF56BBEEEBCAB57B501DC290
0001C00004004D9973A0CEC7B9BFB9249F93D3B57CC7A0B8CB23B2900001C00004005393015337FCA70D2D203A2A28DCA8C9C021B3728290000080000402E290000090000F05
00C000000080000F101
2025-12-03 13:37:51.980290 ike V=root:0:61a13266095437d7/0000000000000000:1188899: responder received SA_INIT msg
2025-12-03 13:37:51.980303 ike V=root:0:61a13266095437d7/0000000000000000:1188899: received notify type NAT_DETECTION_SOURCE_IP
2025-12-03 13:37:51.980312 ike V=root:0:61a13266095437d7/0000000000000000:1188899: received notify type NAT_DETECTION_DESTINATION_IP
2025-12-03 13:37:51.980320 ike V=root:0:61a13266095437d7/0000000000000000:1188899: received notify type FRAGMENTATION_SUPPORTED
2025-12-03 13:37:51.980328 ike V=root:0:61a13266095437d7/0000000000000000:1188899: received notify type VPN_NETWORK_ID
2025-12-03 13:37:51.980334 ike V=root:0:61a13266095437d7/0000000000000000:1188899: NETWORK ID : 12
2025-12-03 13:37:51.980341 ike V=root:0:61a13266095437d7/0000000000000000:1188899: received notify type EXCHANGE_INTF_IP
2025-12-03 13:37:51.980352 ike V=root:0:61a13266095437d7/0000000000000000:1188899: incoming proposal:
2025-12-03 13:37:51.980360 ike V=root:0:61a13266095437d7/0000000000000000:1188899: proposal id = 1:
2025-12-03 13:37:51.980369 ike V=root:0:61a13266095437d7/0000000000000000:1188899: protocol = IKEv2:
2025-12-03 13:37:51.980375 ike V=root:0:61a13266095437d7/0000000000000000:1188899: encapsulation = IKEv2/none
2025-12-03 13:37:51.980382 ike V=root:0:61a13266095437d7/0000000000000000:1188899: type=ENCR, val=AES_GCM_16 (key_len = 256)
2025-12-03 13:37:51.980386 ike V=root:0:61a13266095437d7/0000000000000000:1188899: type=PRF, val=PRF_HMAC_SHA2_256
2025-12-03 13:37:51.980392 ike V=root:0:61a13266095437d7/0000000000000000:1188899: type=DH_GROUP, val=ECP521.
2025-12-03 13:37:51.980398 ike V=root:0:61a13266095437d7/0000000000000000:1188899: type=DH_GROUP, val=ECP256.
2025-12-03 13:37:51.980404 ike V=root:0:61a13266095437d7/0000000000000000:1188899: type=DH_GROUP, val=MODP2048.
2025-12-03 13:37:51.980414 ike V=root:0:61a13266095437d7/0000000000000000:1188899: matched proposal id 1
2025-12-03 13:37:51.980422 ike V=root:0:61a13266095437d7/0000000000000000:1188899: proposal id = 1:
2025-12-03 13:37:51.980428 ike V=root:0:61a13266095437d7/0000000000000000:1188899: protocol = IKEv2:
2025-12-03 13:37:51.980434 ike V=root:0:61a13266095437d7/0000000000000000:1188899: encapsulation = IKEv2/none
2025-12-03 13:37:51.980440 ike V=root:0:61a13266095437d7/0000000000000000:1188899: type=ENCR, val=AES_GCM_16 (key_len = 256)
2025-12-03 13:37:51.980444 ike V=root:0:61a13266095437d7/0000000000000000:1188899: type=INTEGR, val=NONE
2025-12-03 13:37:51.980450 ike V=root:0:61a13266095437d7/0000000000000000:1188899: type=PRF, val=PRF_HMAC_SHA2_256
2025-12-03 13:37:51.980453 ike V=root:0:61a13266095437d7/0000000000000000:1188899: type=DH_GROUP, val=ECP521.
2025-12-03 13:37:51.980459 ike V=root:0:61a13266095437d7/0000000000000000:1188899: lifetime=28800
2025-12-03 13:37:51.980465 ike V=root:0:61a13266095437d7/0000000000000000:1188899: SA proposal chosen, matched gateway ISP2_MGMT
2025-12-03 13:37:51.980483 ike V=root:0:ISP2_MGMT:ISP2_MGMT: created connection: 0x1105a720 6 48.12.12.74->65.12.12.75:500.
2025-12-03 13:37:51.980498 ike V=root:0:ISP2_MGMT:1188899: processing notify type NAT_DETECTION_SOURCE_IP
2025-12-03 13:37:51.980532 ike V=root:0:ISP2_MGMT:1188899: processing NAT-D payload
2025-12-03 13:37:51.980544 ike V=root:0:ISP2_MGMT:1188899: NAT not detected
2025-12-03 13:37:51.980551 ike V=root:0:ISP2_MGMT:1188899: process NAT-D
2025-12-03 13:37:51.980556 ike V=root:0:ISP2_MGMT:1188899: processing notify type NAT_DETECTION_DESTINATION_IP
2025-12-03 13:37:51.980569 ike V=root:0:ISP2_MGMT:1188899: processing NAT-D payload
2025-12-03 13:37:51.980576 ike V=root:0:ISP2_MGMT:1188899: NAT detected: ME
2025-12-03 13:37:51.980585 ike V=root:0:ISP2_MGMT:1188899: process NAT-D
2025-12-03 13:37:51.980591 ike V=root:0:ISP2_MGMT:1188899: processing notify type FRAGMENTATION_SUPPORTED
2025-12-03 13:37:51.980603 ike V=root:0:ISP2_MGMT:1188899: processing notify type EXCHANGE_INTF_IP
2025-12-03 13:37:51.980632 ike V=root:0:ISP2_MGMT:1188899: responder preparing SA_INIT msg
2025-12-03 13:37:51.980643 ike V=root:0:ISP2_MGMT:1188899: generate DH public value request queued
2025-12-03 13:37:51.980765 ike V=root:0:ISP2_MGMT:1188899: responder preparing SA_INIT msg
2025-12-03 13:37:51.980778 ike V=root:0:ISP2_MGMT:1188899: compute DH shared secret request queued
2025-12-03 13:37:51.983289 ike V=root:0:ISP2_MGMT:1188899: responder preparing SA_INIT msg
2025-12-03 13:37:51.983315 ike V=root:0:ISP2_MGMT:1188899: create NAT-D hash local 48.12.12.74/500 remote 65.12.12.75/500
2025-12-03 13:37:51.983333 ike 0:ISP2_MGMT:1188899: out 61A13266095437D7B34DF62EBC3EA0C721202220000000000000012C2200002800000024010100030300
000C01000014800E0100030000080200000500000008040000152800008C0015000000F4BE89BBA5083DC7C46D030F32D8DDF279950F05037D6F31F9EA031796304DE210F6C9
8D49E31AA551B0DD5DACDAF3A6D743D63C21A66E33DCB5912C7EC78B905A01EB3CB7A10CF256BAADCB1C8BCEBE1E613283F22289B245E6053BAE13200B5F3B23678B3151F03C
483530EC8CD14374E6B10B5C90267C9785ECDDB145F5C0CA0B98290000146553CA327EC262218E24A4C1B230867C2900001C00004004C2A1D49575E5A7DDE4044ED71D23D606
02B20E4E2900001C0000400510CEF62FE258A82EDE731021CFA76A33573045B0290000080000402E000000080000F101
2025-12-03 13:37:51.983365 ike V=root:0:ISP2_MGMT:1188899: sent IKE msg (SA_INIT_RESPONSE): 48.12.12.74:500->65.12.12.75:500, len=300, vrf=
0, id=61a13266095437d7/b34df62ebc3ea0c7, oif=6
2025-12-03 13:37:51.983407 ike 0:ISP2_MGMT:1188899: IKE SA 61a13266095437d7/b34df62ebc3ea0c7 SK_ei 36:BD81E1827944438CCB1544A8B3101952D64997
2CBC51D21E96039DBEC6533AD5A10FD5E1
2025-12-03 13:37:51.983415 ike 0:ISP2_MGMT:1188899: IKE SA 61a13266095437d7/b34df62ebc3ea0c7 SK_er 36:D1C67B3B3831610CAC66C3C2AD5A3909B99835
0E3670112AAB8BD1DA9788E89F7EEA2EE9
2025-12-03 13:38:21.988380 ike V=root:0:ISP2_MGMT:1188899: negotiation timeout, deleting
2025-12-03 13:38:21.988493 ike V=root:0:ISP2_MGMT: connection expiring due to phase1 down
2025-12-03 13:38:21.988502 ike V=root:0:ISP2_MGMT: going to be deleted
2025-12-03 13:38:22.220844 ike V=root:0: comes 65.12.12.75:500->48.12.12.74:500,ifindex=6,vrf=0,len=341....
2025-12-03 13:38:22.220883 ike V=root:0: IKEv2 exchange=SA_INIT id=60e8b170a59225d4/0000000000000000 len=341
2025-12-03 13:38:22.220891 ike 0: in 60E8B170A59225D400000000000000002120220800000000000001552200003800000034010100050300000C01000014800E010
00300000802000005030000080400000E030000080400001300000008040000152800008C001500000126A063DCEF1EC8F29F902B4EFD1D086C7D72F9C8620F25549E19E71B6
2086E491D568A10BB0D47F506A5F4B245E7E0E97FB644C5D3BC42C8BD542EAF0FE055518900EEC2A387EB80284F8C7D6F7F7175B717B429BFC98528D367863116B3106B7F07B
967135135553762289D81B4BFD9D7C142A4F88D497DB9AC8DA5DA0EDB3FEAB8E529000024538F4D8A361D8C948A7564401C23072F869590F7D9B294061C57976AFEFEEA12290
0001C0000400444A70382C1D4E0FED3C0583A70043239136662B72900001C000040059B6C12734E62E6037E2549E5188D9D69BF9546DF290000080000402E290000090000F05
00C000000080000F101
2025-12-03 13:38:22.220914 ike V=root:0:60e8b170a59225d4/0000000000000000:1188903: responder received SA_INIT msg
2025-12-03 13:38:22.220925 ike V=root:0:60e8b170a59225d4/0000000000000000:1188903: received notify type NAT_DETECTION_SOURCE_IP
2025-12-03 13:38:22.220934 ike V=root:0:60e8b170a59225d4/0000000000000000:1188903: received notify type NAT_DETECTION_DESTINATION_IP
2025-12-03 13:38:22.220938 ike V=root:0:60e8b170a59225d4/0000000000000000:1188903: received notify type FRAGMENTATION_SUPPORTED
2025-12-03 13:38:22.220942 ike V=root:0:60e8b170a59225d4/0000000000000000:1188903: received notify type VPN_NETWORK_ID
2025-12-03 13:38:22.220947 ike V=root:0:60e8b170a59225d4/0000000000000000:1188903: NETWORK ID : 12
2025-12-03 13:38:22.220951 ike V=root:0:60e8b170a59225d4/0000000000000000:1188903: received notify type EXCHANGE_INTF_IP
2025-12-03 13:38:22.220959 ike V=root:0:60e8b170a59225d4/0000000000000000:1188903: incoming proposal:
2025-12-03 13:38:22.220967 ike V=root:0:60e8b170a59225d4/0000000000000000:1188903: proposal id = 1:
2025-12-03 13:38:22.220980 ike V=root:0:60e8b170a59225d4/0000000000000000:1188903: protocol = IKEv2:
2025-12-03 13:38:22.220987 ike V=root:0:60e8b170a59225d4/0000000000000000:1188903: encapsulation = IKEv2/none
2025-12-03 13:38:22.220993 ike V=root:0:60e8b170a59225d4/0000000000000000:1188903: type=ENCR, val=AES_GCM_16 (key_len = 256)
2025-12-03 13:38:22.220999 ike V=root:0:60e8b170a59225d4/0000000000000000:1188903: type=PRF, val=PRF_HMAC_SHA2_256
2025-12-03 13:38:22.221005 ike V=root:0:60e8b170a59225d4/0000000000000000:1188903: type=DH_GROUP, val=ECP521.
2025-12-03 13:38:22.221011 ike V=root:0:60e8b170a59225d4/0000000000000000:1188903: type=DH_GROUP, val=ECP256.
2025-12-03 13:38:22.221017 ike V=root:0:60e8b170a59225d4/0000000000000000:1188903: type=DH_GROUP, val=MODP2048.
2025-12-03 13:38:22.221029 ike V=root:0:60e8b170a59225d4/0000000000000000:1188903: matched proposal id 1
2025-12-03 13:38:22.221037 ike V=root:0:60e8b170a59225d4/0000000000000000:1188903: proposal id = 1:
2025-12-03 13:38:22.221045 ike V=root:0:60e8b170a59225d4/0000000000000000:1188903: protocol = IKEv2:
2025-12-03 13:38:22.221051 ike V=root:0:60e8b170a59225d4/0000000000000000:1188903: encapsulation = IKEv2/none
2025-12-03 13:38:22.221054 ike V=root:0:60e8b170a59225d4/0000000000000000:1188903: type=ENCR, val=AES_GCM_16 (key_len = 256)
2025-12-03 13:38:22.221060 ike V=root:0:60e8b170a59225d4/0000000000000000:1188903: type=INTEGR, val=NONE
2025-12-03 13:38:22.221066 ike V=root:0:60e8b170a59225d4/0000000000000000:1188903: type=PRF, val=PRF_HMAC_SHA2_256
2025-12-03 13:38:22.221072 ike V=root:0:60e8b170a59225d4/0000000000000000:1188903: type=DH_GROUP, val=ECP521.
2025-12-03 13:38:22.221075 ike V=root:0:60e8b170a59225d4/0000000000000000:1188903: lifetime=28800
2025-12-03 13:38:22.221085 ike V=root:0:60e8b170a59225d4/0000000000000000:1188903: SA proposal chosen, matched gateway ISP2_MGMT
2025-12-03 13:38:22.221101 ike V=root:0:ISP2_MGMT:ISP2_MGMT: created connection: 0x1105a720 6 48.12.12.74->65.12.12.75:500.
2025-12-03 13:38:22.221119 ike V=root:0:ISP2_MGMT:1188903: processing notify type NAT_DETECTION_SOURCE_IP
2025-12-03 13:38:22.221146 ike V=root:0:ISP2_MGMT:1188903: processing NAT-D payload
2025-12-03 13:38:22.221157 ike V=root:0:ISP2_MGMT:1188903: NAT not detected
2025-12-03 13:38:22.221160 ike V=root:0:ISP2_MGMT:1188903: process NAT-D
2025-12-03 13:38:22.221164 ike V=root:0:ISP2_MGMT:1188903: processing notify type NAT_DETECTION_DESTINATION_IP
2025-12-03 13:38:22.221172 ike V=root:0:ISP2_MGMT:1188903: processing NAT-D payload
2025-12-03 13:38:22.221176 ike V=root:0:ISP2_MGMT:1188903: NAT detected: ME
2025-12-03 13:38:22.221179 ike V=root:0:ISP2_MGMT:1188903: process NAT-D
2025-12-03 13:38:22.221182 ike V=root:0:ISP2_MGMT:1188903: processing notify type FRAGMENTATION_SUPPORTED
2025-12-03 13:38:22.221190 ike V=root:0:ISP2_MGMT:1188903: processing notify type EXCHANGE_INTF_IP
2025-12-03 13:38:22.221215 ike V=root:0:ISP2_MGMT:1188903: responder preparing SA_INIT msg
2025-12-03 13:38:22.221226 ike V=root:0:ISP2_MGMT:1188903: generate DH public value request queued
2025-12-03 13:38:22.221279 ike V=root:0:ISP2_MGMT:1188903: responder preparing SA_INIT msg
2025-12-03 13:38:22.221287 ike V=root:0:ISP2_MGMT:1188903: compute DH shared secret request queued
2025-12-03 13:38:22.223526 ike V=root:0:ISP2_MGMT:1188903: responder preparing SA_INIT msg
2025-12-03 13:38:22.223555 ike V=root:0:ISP2_MGMT:1188903: create NAT-D hash local 48.12.12.74/500 remote 65.12.12.75/500
2025-12-03 13:38:22.223576 ike 0:ISP2_MGMT:1188903: out 60E8B170A59225D4B29A39EEBC08A5D221202220000000000000012C2200002800000024010100030300
000C01000014800E0100030000080200000500000008040000152800008C0015000001B3182B949D4FFBA99EC806149E0F8ED86F2E66B280C3AC3F61F712A4C02F393C62D7AD
D49DEB97F70CAB38212535D7EF87F2BAB0D88D45BAF0A73B9738C50FAF9C0168CB83A9515B2C845734CDABD492B50009769925C70EB918D8E42718E16D764D17CD8537AF941F
A9A147B4B456D899F8F99EA8786C50D078DDC82A6A66EA3A506329000014105FE99A8CA8EF14F765A486EC1CEAAC2900001C000040043F620661168694BF5220D879825478EB
14DE38B82900001C00004005B77E2A9637A0714AB893BCA16F7D02FD9E74BB80290000080000402E000000080000F101
2025-12-03 13:38:22.223601 ike V=root:0:ISP2_MGMT:1188903: sent IKE msg (SA_INIT_RESPONSE): 48.12.12.74:500->65.12.12.75:500, len=300, vrf=
0, id=60e8b170a59225d4/b29a39eebc08a5d2, oif=6
2025-12-03 13:38:22.223645 ike 0:ISP2_MGMT:1188903: IKE SA 60e8b170a59225d4/b29a39eebc08a5d2 SK_ei 36:7815F7D863CF602E0637A4BC95455ACFC4C5AF
295930D94BF8F510183EF6332B3F162E9B
2025-12-03 13:38:22.223654 ike 0:ISP2_MGMT:1188903: IKE SA 60e8b170a59225d4/b29a39eebc08a5d2 SK_er 36:AEEAA3E19C83603B7589DD5B92FC31D6354A65
5D691889BFBE73E55ACA0BD35BA20883BD
diagnose debug reset

From Branch - Initiator

mmm-tt-cmm-01-esl01 (root) # 2025-12-03 13:36:16.744096 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->62.23
9.6.139:0
2025-12-03 13:36:16.744183 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: using existing connection
2025-12-03 13:36:16.744217 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:
0
2025-12-03 13:36:16.744249 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:36:16.744277 ike V=root:0:MGMT_D_ISP2: request is on the queue
2025-12-03 13:36:17.373207 ike :change cfg 1 interface 0 router 0 certs 0 ha 0
2025-12-03 13:36:19.773912 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:36:19.774012 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: using existing connection
2025-12-03 13:36:19.774047 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:
0
2025-12-03 13:36:19.774078 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:36:19.774106 ike V=root:0:MGMT_D_ISP2: request is on the queue
2025-12-03 13:36:20.393213 ike :config update start
2025-12-03 13:36:20.393524 ike :ike_embryonic_conn_limit = 1000
2025-12-03 13:36:20.393904 ike :ikecrypt DH multi-process enabled
2025-12-03 13:36:20.432572 ike :config update done
2025-12-03 13:36:22.523232 ike V=root:0:MGMT_D_ISP2:118790: negotiation timeout, deleting
2025-12-03 13:36:22.523556 ike V=root:0:MGMT_D_ISP2: connection expiring due to phase1 down
2025-12-03 13:36:22.523664 ike V=root:0:MGMT_D_ISP2: going to be deleted
2025-12-03 13:36:22.793893 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:36:22.793968 ike V=root:0:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:0
2025-12-03 13:36:22.794013 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:36:22.794092 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: created connection: 0xa0c28a0 23 65.12.12.75->61.238.5.138:500.
2025-12-03 13:36:22.794155 ike V=root:0:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:500 negotiating
2025-12-03 13:36:22.794234 ike V=root:0:MGMT_D_ISP2: no suitable IKE_SA, queuing CHILD_SA request and initiating IKE_SA negotiation
2025-12-03 13:36:22.794314 ike V=root:0:MGMT_D_ISP2:118792: generate DH public value request queued
2025-12-03 13:36:22.794469 ike V=root:0:MGMT_D_ISP2:118792: create NAT-D hash local 65.12.12.75/500 remote 61.238.5.138/500
2025-12-03 13:36:22.794552 ike 0:MGMT_D_ISP2:118792: out FC1507345C5CADC20000000000000000212022080000000000000155220000380000003401
0100050300000C01000014800E01000300000802000005030000080400000E030000080400001300000008040000152800008C00150000010F39F1C50804667975B
4ED9FCA8E2EAC4809C3330AED7399072CC8A48C408AF23BC932540F8C24685D54EDCF702A3EA8324C38F5EA46CC57F3E941108B4091415800FA0FCF6406097535F1
898CDF44CB1C0D7915C4E66CC39BA04E230E59B4D713E19F21EB8E7B3FBF56A6B0B5E2787A48EEC24F23F9DD791B0BB76D56E60160D9A48229000024E990E2447FF
99FB13975DC0B786B010892D9D64260B2BDA4CC3C0FBE3CA25EF42900001C00004004D7B14C148F8EF0F7B71D806AC1093AB1711FD4692900001C000040059D2976
2B31F1F6A18CA8286A67B297CFA0127F9C290000080000402E290000090000F0500C000000080000F101

2025-12-03 13:36:22.794682 ike V=root:0:MGMT_D_ISP2:118792: sent IKE msg (SA_INIT): 65.12.12.75:500->61.238.5.138:500, len=341, vrf
=1, id=fc1507345c5cadc2/0000000000000000, oif=23
2025-12-03 13:36:22.840501 ike V=root:0: comes 61.238.5.138:500->65.12.12.75:500,ifindex=23,vrf=1,len=300....
2025-12-03 13:36:22.840594 ike V=root:0: IKEv2 exchange=SA_INIT_RESPONSE id=fc1507345c5cadc2/9f3ac90e3391c6da len=300
2025-12-03 13:36:22.840640 ike 0: in FC1507345C5CADC29F3AC90E3391C6DA21202220000000000000012C2200002800000024010100030300000C010000
14800E0100030000080200000500000008040000152800008C001500000012D3148D25B071CA11B6A81EA21A3917A5393C17F3F5A5A36A7B271C8C9479836672F71
7277D9E03E33CC6C92E53A32CA1AF4CC949E89C128E0D3CD4159B2740C900B3F220AFCAAD42A962E43B217285B59F17FDCB40C3EC25907016A5CF6E74ED04E19238
1A3F17A72AC1065D2442B9E7F53423E37541B428B748639716560AA14F98290000147B7642601105ABAB3D2ECEF492E878442900001C0000400419C211D78C0AF24
87737E534D0A321344B502D552900001C00004005D5729321FF0E7F8EF6C64648C38493FE216C78BA290000080000402E000000080000F101
2025-12-03 13:36:22.840711 ike V=root:0:MGMT_D_ISP2:118792: initiator received SA_INIT response
2025-12-03 13:36:22.840760 ike V=root:0:MGMT_D_ISP2:118792: processing notify type NAT_DETECTION_SOURCE_IP
2025-12-03 13:36:22.840858 ike V=root:0:MGMT_D_ISP2:118792: processing NAT-D payload
2025-12-03 13:36:22.840903 ike V=root:0:MGMT_D_ISP2:118792: NAT detected: PEER
2025-12-03 13:36:22.840963 ike V=root:0:MGMT_D_ISP2:118792: process NAT-D
2025-12-03 13:36:22.840998 ike V=root:0:MGMT_D_ISP2:118792: processing notify type NAT_DETECTION_DESTINATION_IP
2025-12-03 13:36:22.841116 ike V=root:0:MGMT_D_ISP2:118792: processing NAT-D payload
2025-12-03 13:36:22.841163 ike V=root:0:MGMT_D_ISP2:118792: NAT detected: PEER
2025-12-03 13:36:22.841197 ike V=root:0:MGMT_D_ISP2:118792: process NAT-D
2025-12-03 13:36:22.841231 ike V=root:0:MGMT_D_ISP2:118792: processing notify type FRAGMENTATION_SUPPORTED
2025-12-03 13:36:22.841301 ike V=root:0:MGMT_D_ISP2:118792: processing notify type EXCHANGE_INTF_IP
2025-12-03 13:36:22.841391 ike V=root:0:MGMT_D_ISP2:118792: incoming proposal:
2025-12-03 13:36:22.841433 ike V=root:0:MGMT_D_ISP2:118792: proposal id = 1:
2025-12-03 13:36:22.841467 ike V=root:0:MGMT_D_ISP2:118792: protocol = IKEv2:
2025-12-03 13:36:22.841500 ike V=root:0:MGMT_D_ISP2:118792: encapsulation = IKEv2/none
2025-12-03 13:36:22.841535 ike V=root:0:MGMT_D_ISP2:118792: type=ENCR, val=AES_GCM_16 (key_len = 256)
2025-12-03 13:36:22.841602 ike V=root:0:MGMT_D_ISP2:118792: type=PRF, val=PRF_HMAC_SHA2_256
2025-12-03 13:36:22.841633 ike V=root:0:MGMT_D_ISP2:118792: type=DH_GROUP, val=ECP521.
2025-12-03 13:36:22.841674 ike V=root:0:MGMT_D_ISP2:118792: matched proposal id 1
2025-12-03 13:36:22.841705 ike V=root:0:MGMT_D_ISP2:118792: proposal id = 1:
2025-12-03 13:36:22.841734 ike V=root:0:MGMT_D_ISP2:118792: protocol = IKEv2:
2025-12-03 13:36:22.841770 ike V=root:0:MGMT_D_ISP2:118792: encapsulation = IKEv2/none
2025-12-03 13:36:22.841801 ike V=root:0:MGMT_D_ISP2:118792: type=ENCR, val=AES_GCM_16 (key_len = 256)
2025-12-03 13:36:22.841834 ike V=root:0:MGMT_D_ISP2:118792: type=INTEGR, val=NONE
2025-12-03 13:36:22.841864 ike V=root:0:MGMT_D_ISP2:118792: type=PRF, val=PRF_HMAC_SHA2_256
2025-12-03 13:36:22.841895 ike V=root:0:MGMT_D_ISP2:118792: type=DH_GROUP, val=ECP521.
2025-12-03 13:36:22.841926 ike V=root:0:MGMT_D_ISP2:118792: lifetime=28800
2025-12-03 13:36:22.841967 ike V=root:0:MGMT_D_ISP2:118792: compute DH shared secret request queued
2025-12-03 13:36:22.860977 ike 0:MGMT_D_ISP2:118792: IKE SA fc1507345c5cadc2/9f3ac90e3391c6da SK_ei 36:5EC2E5F6BFF00EA1526BD2D2F698
E80A1887997F517102E5371FA1C5BA42D6BEFC6D432E
2025-12-03 13:36:22.861053 ike 0:MGMT_D_ISP2:118792: IKE SA fc1507345c5cadc2/9f3ac90e3391c6da SK_er 36:D982825D05D986B7A33E0C4D54D8
244F8D43FB7652118F37590258B6DA0DA45B2BA39689
2025-12-03 13:36:22.861165 ike V=root:0:MGMT_D_ISP2:118792: initiator preparing AUTH msg
2025-12-03 13:36:22.861261 ike V=root:0:MGMT_D_ISP2:118792: sending INITIAL-CONTACT
2025-12-03 13:36:22.861307 ike V=root:0:MGMT_D_ISP2:118792: add INTERFACE-ADDR4 101.102.12.201
2025-12-03 13:36:22.861385 ike 0:MGMT_D_ISP2:118792: enc 2900000B0200000050544F29000008000040002700000C0000F0F964670EE1290000280200
0000DA5B528C8F9EC09541BEAD51445350DE48C6DB4D17CEDAD6E8935D2CC1EC905C21000008000040242C00002400000020010304028D5370FE0300000C0100001
4800E010000000008050000002D00002802000000070000100000FFFF64670EE164670EE1070000100000FFFF00000000FFFFFFFF29000028020000000700001000
00FFFF64670E0064670E00070000100000FFFF00000000FFFFFFFF0000000C0000F051AC10C92D080706050403020108
2025-12-03 13:36:22.861494 ike V=root:0:MGMT_D_ISP2:118792: detected NAT
2025-12-03 13:36:22.861527 ike V=root:0:MGMT_D_ISP2:118792: NAT-T float port 4500
2025-12-03 13:36:22.861568 ike 0:MGMT_D_ISP2:118792: out FC1507345C5CADC29F3AC90E3391C6DA2E2023080000000100000110230000F4CEF4B63B5B
50D0AC69852C9CC83B9BB569CBE870CA053CE03E89988C50A6F593B61D5ABF71E18D15282B88B39CA91B7C4C14AC262C462A8B87754B0762DF729D3229AAA152D85
6075342FE9543F7031FF83D4BA1744B8596273C922D3377BB8CBB86FEC7F978CF66699DE355582D9897AFA013F14890929562653F01AEB57F9CE053C38EBB7306DA
932D37BB7AC541B3A69913D92AE66EA961A70064D3AC5F49C487DDF936BAC9CC7FF0DCCF8F3FEA1F68C6E4759B03E97E45B3C6F109757CF4AE73A9BA7C569101BC4
7C59817F506C1DEC912A22A40D1EB463AFA9890E8C1C00B0C9324661766C01AEED6FC051D3971
2025-12-03 13:36:22.861688 ike V=root:0:MGMT_D_ISP2:118792: sent IKE msg (AUTH): 65.12.12.75:4500->61.238.5.138:4500, len=272, vrf=
1, id=fc1507345c5cadc2/9f3ac90e3391c6da:00000001, oif=23
2025-12-03 13:36:25.824041 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:36:25.824208 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: using existing connection
2025-12-03 13:36:25.824311 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:
0
2025-12-03 13:36:25.824474 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:36:25.824578 ike V=root:0:MGMT_D_ISP2: request is on the queue
2025-12-03 13:36:25.883214 ike 0:MGMT_D_ISP2:118792: out FC1507345C5CADC29F3AC90E3391C6DA2E2023080000000100000110230000F4CEF4B63B5B
50D0AC69852C9CC83B9BB569CBE870CA053CE03E89988C50A6F593B61D5ABF71E18D15282B88B39CA91B7C4C14AC262C462A8B87754B0762DF729D3229AAA152D85
6075342FE9543F7031FF83D4BA1744B8596273C922D3377BB8CBB86FEC7F978CF66699DE355582D9897AFA013F14890929562653F01AEB57F9CE053C38EBB7306DA
932D37BB7AC541B3A69913D92AE66EA961A70064D3AC5F49C487DDF936BAC9CC7FF0DCCF8F3FEA1F68C6E4759B03E97E45B3C6F109757CF4AE73A9BA7C569101BC4
7C59817F506C1DEC912A22A40D1EB463AFA9890E8C1C00B0C9324661766C01AEED6FC051D3971
2025-12-03 13:36:25.883647 ike V=root:0:MGMT_D_ISP2:118792: sent IKE msg (RETRANSMIT_AUTH): 65.12.12.75:4500->61.238.5.138:4500, le
n=272, vrf=1, id=fc1507345c5cadc2/9f3ac90e3391c6da:00000001, oif=23
2025-12-03 13:36:28.844027 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:36:28.844085 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: using existing connection
2025-12-03 13:36:28.844115 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:
0
2025-12-03 13:36:28.844143 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:36:28.844167 ike V=root:0:MGMT_D_ISP2: request is on the queue
2025-12-03 13:36:31.874060 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:36:31.874149 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: using existing connection
2025-12-03 13:36:31.874201 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:
0
2025-12-03 13:36:31.874239 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:36:31.874290 ike V=root:0:MGMT_D_ISP2: request is on the queue
2025-12-03 13:36:31.913231 ike 0:MGMT_D_ISP2:118792: out FC1507345C5CADC29F3AC90E3391C6DA2E2023080000000100000110230000F4CEF4B63B5B
50D0AC69852C9CC83B9BB569CBE870CA053CE03E89988C50A6F593B61D5ABF71E18D15282B88B39CA91B7C4C14AC262C462A8B87754B0762DF729D3229AAA152D85
6075342FE9543F7031FF83D4BA1744B8596273C922D3377BB8CBB86FEC7F978CF66699DE355582D9897AFA013F14890929562653F01AEB57F9CE053C38EBB7306DA
932D37BB7AC541B3A69913D92AE66EA961A70064D3AC5F49C487DDF936BAC9CC7FF0DCCF8F3FEA1F68C6E4759B03E97E45B3C6F109757CF4AE73A9BA7C569101BC4
7C59817F506C1DEC912A22A40D1EB463AFA9890E8C1C00B0C9324661766C01AEED6FC051D3971
2025-12-03 13:36:31.913414 ike V=root:0:MGMT_D_ISP2:118792: sent IKE msg (RETRANSMIT_AUTH): 65.12.12.75:4500->61.238.5.138:4500, le
n=272, vrf=1, id=fc1507345c5cadc2/9f3ac90e3391c6da:00000001, oif=23
2025-12-03 13:36:34.893923 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:36:34.894010 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: using existing connection
2025-12-03 13:36:34.894045 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:
0
2025-12-03 13:36:34.894076 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:36:34.894104 ike V=root:0:MGMT_D_ISP2: request is on the queue
2025-12-03 13:36:37.923980 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:36:37.924070 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: using existing connection
2025-12-03 13:36:37.924105 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:
0
2025-12-03 13:36:37.924136 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:36:37.924164 ike V=root:0:MGMT_D_ISP2: request is on the queue
2025-12-03 13:36:40.953853 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:36:40.953944 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: using existing connection
2025-12-03 13:36:40.953978 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:
0
2025-12-03 13:36:40.954010 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:36:40.954038 ike V=root:0:MGMT_D_ISP2: request is on the queue
2025-12-03 13:36:43.923267 ike 0:MGMT_D_ISP2:118792: out FC1507345C5CADC29F3AC90E3391C6DA2E2023080000000100000110230000F4CEF4B63B5B
50D0AC69852C9CC83B9BB569CBE870CA053CE03E89988C50A6F593B61D5ABF71E18D15282B88B39CA91B7C4C14AC262C462A8B87754B0762DF729D3229AAA152D85
6075342FE9543F7031FF83D4BA1744B8596273C922D3377BB8CBB86FEC7F978CF66699DE355582D9897AFA013F14890929562653F01AEB57F9CE053C38EBB7306DA
932D37BB7AC541B3A69913D92AE66EA961A70064D3AC5F49C487DDF936BAC9CC7FF0DCCF8F3FEA1F68C6E4759B03E97E45B3C6F109757CF4AE73A9BA7C569101BC4
7C59817F506C1DEC912A22A40D1EB463AFA9890E8C1C00B0C9324661766C01AEED6FC051D3971
2025-12-03 13:36:43.923419 ike V=root:0:MGMT_D_ISP2:118792: sent IKE msg (RETRANSMIT_AUTH): 65.12.12.75:4500->61.238.5.138:4500, le
n=272, vrf=1, id=fc1507345c5cadc2/9f3ac90e3391c6da:00000001, oif=23
2025-12-03 13:36:43.973997 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:36:43.974064 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: using existing connection
2025-12-03 13:36:43.974098 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:
0
2025-12-03 13:36:43.974129 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:36:43.974157 ike V=root:0:MGMT_D_ISP2: request is on the queue
2025-12-03 13:36:46.993911 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:36:46.993998 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: using existing connection
2025-12-03 13:36:46.994033 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:
0
2025-12-03 13:36:46.994064 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:36:46.994093 ike V=root:0:MGMT_D_ISP2: request is on the queue
2025-12-03 13:36:50.023887 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:36:50.023975 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: using existing connection
2025-12-03 13:36:50.024010 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:
0
2025-12-03 13:36:50.024041 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:36:50.024079 ike V=root:0:MGMT_D_ISP2: request is on the queue
2025-12-03 13:36:52.813211 ike V=root:0:MGMT_D_ISP2:118792: negotiation timeout, deleting
2025-12-03 13:36:52.813426 ike V=root:0:MGMT_D_ISP2: connection expiring due to phase1 down
2025-12-03 13:36:52.813460 ike V=root:0:MGMT_D_ISP2: going to be deleted
2025-12-03 13:36:53.033947 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:36:53.034002 ike V=root:0:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:0
2025-12-03 13:36:53.034035 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:36:53.034098 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: created connection: 0xa0c28a0 23 65.12.12.75->61.238.5.138:500.
2025-12-03 13:36:53.034146 ike V=root:0:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:500 negotiating
2025-12-03 13:36:53.034201 ike V=root:0:MGMT_D_ISP2: no suitable IKE_SA, queuing CHILD_SA request and initiating IKE_SA negotiation
2025-12-03 13:36:53.034253 ike V=root:0:MGMT_D_ISP2:118793: generate DH public value request queued
2025-12-03 13:36:53.034785 ike V=root:0:MGMT_D_ISP2:118793: create NAT-D hash local 65.12.12.75/500 remote 61.238.5.138/500
2025-12-03 13:36:53.034854 ike 0:MGMT_D_ISP2:118793: out C980445F6E0FC92B0000000000000000212022080000000000000155220000380000003401
0100050300000C01000014800E01000300000802000005030000080400000E030000080400001300000008040000152800008C0015000000FCB642E1C6141B9A81D
73F71CD9A05F655DE90FF5A0DB336ABE52CD61CDB3E7E4B124758F0347C0A6B77E317E647F497F05F7D89371FC0DAB1710ADBDC0DE309DA004279106822565A60F5
B1A69E2AAB5392A41A2905280D62698B9A499E6B1598B70DF1FE85F34055F3AABAD812C8F3075177BAC0BE019CBF6886C036E51AD7E6EE28290000242975FECA97A
2E446BBD16BABA9C7079E970EAE8EC514BAC439D4961CEFE66E912900001C00004004A5EF07009E801A75A5923CB28F5A293562D8B2B82900001C000040053729E4
6D0D0E5E95305D7AC47E96879E35033954290000080000402E290000090000F0500C000000080000F101
2025-12-03 13:36:53.034980 ike V=root:0:MGMT_D_ISP2:118793: sent IKE msg (SA_INIT): 65.12.12.75:500->61.238.5.138:500, len=341, vrf
=1, id=c980445f6e0fc92b/0000000000000000, oif=23
2025-12-03 13:36:53.080829 ike V=root:0: comes 61.238.5.138:500->65.12.12.75:500,ifindex=23,vrf=1,len=300....
2025-12-03 13:36:53.080909 ike V=root:0: IKEv2 exchange=SA_INIT_RESPONSE id=c980445f6e0fc92b/9408bad301f500ba len=300
2025-12-03 13:36:53.080943 ike 0: in C980445F6E0FC92B9408BAD301F500BA21202220000000000000012C2200002800000024010100030300000C010000
14800E0100030000080200000500000008040000152800008C0015000000C327B512ACFED788D7B8620E94671E4230BAB648063CCC18026AAD99605238A035AAC50
E9F6361F771B0BE4EC742286CC11ED9E768D819785ACE81E4CDED27781C01F03A32D8A24F4033F26086D229ACE7EA7DCCAB1FC67C5B4E633C818B4D7273BFFCECCB
E3F3DB470466AA3A44EBB416693813022FCDE5A8B589DAE9F7AC43BC54DA29000014D3BA2C5FABCEA7E2502738DD5F49B0CE2900001C0000400428ADB24C011FE51
0AC27F96F9422D6DA3AD7C4F22900001C000040050DFBCDFF9225A08BB3AB17227FFEAA7AA7129E55290000080000402E000000080000F101
2025-12-03 13:36:53.081000 ike V=root:0:MGMT_D_ISP2:118793: initiator received SA_INIT response
2025-12-03 13:36:53.081030 ike V=root:0:MGMT_D_ISP2:118793: processing notify type NAT_DETECTION_SOURCE_IP
2025-12-03 13:36:53.081114 ike V=root:0:MGMT_D_ISP2:118793: processing NAT-D payload
2025-12-03 13:36:53.081150 ike V=root:0:MGMT_D_ISP2:118793: NAT detected: PEER
2025-12-03 13:36:53.081179 ike V=root:0:MGMT_D_ISP2:118793: process NAT-D
2025-12-03 13:36:53.081205 ike V=root:0:MGMT_D_ISP2:118793: processing notify type NAT_DETECTION_DESTINATION_IP
2025-12-03 13:36:53.081264 ike V=root:0:MGMT_D_ISP2:118793: processing NAT-D payload
2025-12-03 13:36:53.081295 ike V=root:0:MGMT_D_ISP2:118793: NAT detected: PEER
2025-12-03 13:36:53.081322 ike V=root:0:MGMT_D_ISP2:118793: process NAT-D
2025-12-03 13:36:53.081349 ike V=root:0:MGMT_D_ISP2:118793: processing notify type FRAGMENTATION_SUPPORTED
2025-12-03 13:36:53.081408 ike V=root:0:MGMT_D_ISP2:118793: processing notify type EXCHANGE_INTF_IP
2025-12-03 13:36:53.081520 ike V=root:0:MGMT_D_ISP2:118793: incoming proposal:
2025-12-03 13:36:53.081551 ike V=root:0:MGMT_D_ISP2:118793: proposal id = 1:
2025-12-03 13:36:53.081579 ike V=root:0:MGMT_D_ISP2:118793: protocol = IKEv2:
2025-12-03 13:36:53.081605 ike V=root:0:MGMT_D_ISP2:118793: encapsulation = IKEv2/none
2025-12-03 13:36:53.081633 ike V=root:0:MGMT_D_ISP2:118793: type=ENCR, val=AES_GCM_16 (key_len = 256)
2025-12-03 13:36:53.081674 ike V=root:0:MGMT_D_ISP2:118793: type=PRF, val=PRF_HMAC_SHA2_256
2025-12-03 13:36:53.081698 ike V=root:0:MGMT_D_ISP2:118793: type=DH_GROUP, val=ECP521.
2025-12-03 13:36:53.081730 ike V=root:0:MGMT_D_ISP2:118793: matched proposal id 1
2025-12-03 13:36:53.081754 ike V=root:0:MGMT_D_ISP2:118793: proposal id = 1:
2025-12-03 13:36:53.081777 ike V=root:0:MGMT_D_ISP2:118793: protocol = IKEv2:
2025-12-03 13:36:53.081799 ike V=root:0:MGMT_D_ISP2:118793: encapsulation = IKEv2/none
2025-12-03 13:36:53.081823 ike V=root:0:MGMT_D_ISP2:118793: type=ENCR, val=AES_GCM_16 (key_len = 256)
2025-12-03 13:36:53.081848 ike V=root:0:MGMT_D_ISP2:118793: type=INTEGR, val=NONE
2025-12-03 13:36:53.081872 ike V=root:0:MGMT_D_ISP2:118793: type=PRF, val=PRF_HMAC_SHA2_256
2025-12-03 13:36:53.081894 ike V=root:0:MGMT_D_ISP2:118793: type=DH_GROUP, val=ECP521.
2025-12-03 13:36:53.081917 ike V=root:0:MGMT_D_ISP2:118793: lifetime=28800
2025-12-03 13:36:53.081950 ike V=root:0:MGMT_D_ISP2:118793: compute DH shared secret request queued
2025-12-03 13:36:53.100888 ike 0:MGMT_D_ISP2:118793: IKE SA c980445f6e0fc92b/9408bad301f500ba SK_ei 36:D0B3109BB839CCC16F68F979E9BA
34C99699D8FDF0AF5DD194F84E620E5681110F88814F
2025-12-03 13:36:53.100948 ike 0:MGMT_D_ISP2:118793: IKE SA c980445f6e0fc92b/9408bad301f500ba SK_er 36:D5F95D070DB278C6BE77ECCAC14B
750DC6B699151B0609CE4687EF1AAD32E6A51AF92702
2025-12-03 13:36:53.101036 ike V=root:0:MGMT_D_ISP2:118793: initiator preparing AUTH msg
2025-12-03 13:36:53.101115 ike V=root:0:MGMT_D_ISP2:118793: sending INITIAL-CONTACT
2025-12-03 13:36:53.101150 ike V=root:0:MGMT_D_ISP2:118793: add INTERFACE-ADDR4 101.102.12.201
2025-12-03 13:36:53.101215 ike 0:MGMT_D_ISP2:118793: enc 2900000B0200000050544F29000008000040002700000C0000F0F964670EE1290000280200
0000DACB053BAF818437D46256FE374F0683AAF65D5432E0C69DFCE8FADEBD6940C021000008000040242C00002400000020010304028D5371000300000C0100001
4800E010000000008050000002D00002802000000070000100000FFFF64670EE164670EE1070000100000FFFF00000000FFFFFFFF29000028020000000700001000
00FFFF64670E0064670E00070000100000FFFF00000000FFFFFFFF0000000C0000F051AC10C92D080706050403020108
2025-12-03 13:36:53.101305 ike V=root:0:MGMT_D_ISP2:118793: detected NAT
2025-12-03 13:36:53.101333 ike V=root:0:MGMT_D_ISP2:118793: NAT-T float port 4500
2025-12-03 13:36:53.101365 ike 0:MGMT_D_ISP2:118793: out C980445F6E0FC92B9408BAD301F500BA2E2023080000000100000110230000F46146561681
A923A75E557E6723F4B7DCBF9852D163FE8D653AF9A5DB0BBEC0A247091802BDA84861492E361A0AB64F64BC747E49C21804A71E29D59B4A265276B00F578B69A48
44FB96CAE50BE559DA9ACAF62A20844A3FE0F88A68DDFA6DCD1178E772B1A0B761ED48780A4E7E49C34F03FDE89BDD65F852A06B68995CEFE94A743AA2EFA271DBC
95C69A934437922222CA657DE3D99A7BF223B5EDAFB4D7B3AFFD7354275F5ACD46D84CB0CB3C29878FE6C7E9F06013F684F54B2664673E7AE8BC0A1FFEE234E167C
A05C8FB1218077B565417C0AE7987F63B46BD2B7E77B604B5DA021C1EE993A2E7372792882CF5
2025-12-03 13:36:53.101469 ike V=root:0:MGMT_D_ISP2:118793: sent IKE msg (AUTH): 65.12.12.75:4500->61.238.5.138:4500, len=272, vrf=
1, id=c980445f6e0fc92b/9408bad301f500ba:00000001, oif=23
2025-12-03 13:36:53.513311 ike :shrank heap by 159744 bytes
2025-12-03 13:36:56.044058 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:36:56.044122 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: using existing connection
2025-12-03 13:36:56.044153 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:
0
2025-12-03 13:36:56.044181 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:36:56.044206 ike V=root:0:MGMT_D_ISP2: request is on the queue
2025-12-03 13:36:56.113231 ike 0:MGMT_D_ISP2:118793: out C980445F6E0FC92B9408BAD301F500BA2E2023080000000100000110230000F46146561681
A923A75E557E6723F4B7DCBF9852D163FE8D653AF9A5DB0BBEC0A247091802BDA84861492E361A0AB64F64BC747E49C21804A71E29D59B4A265276B00F578B69A48
44FB96CAE50BE559DA9ACAF62A20844A3FE0F88A68DDFA6DCD1178E772B1A0B761ED48780A4E7E49C34F03FDE89BDD65F852A06B68995CEFE94A743AA2EFA271DBC
95C69A934437922222CA657DE3D99A7BF223B5EDAFB4D7B3AFFD7354275F5ACD46D84CB0CB3C29878FE6C7E9F06013F684F54B2664673E7AE8BC0A1FFEE234E167C
A05C8FB1218077B565417C0AE7987F63B46BD2B7E77B604B5DA021C1EE993A2E7372792882CF5
2025-12-03 13:36:56.113363 ike V=root:0:MGMT_D_ISP2:118793: sent IKE msg (RETRANSMIT_AUTH): 65.12.12.75:4500->61.238.5.138:4500, le
n=272, vrf=1, id=c980445f6e0fc92b/9408bad301f500ba:00000001, oif=23
2025-12-03 13:36:59.063907 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:36:59.063963 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: using existing connection
2025-12-03 13:36:59.063994 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:
0
2025-12-03 13:36:59.064021 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:36:59.064046 ike V=root:0:MGMT_D_ISP2: request is on the queue
2025-12-03 13:37:02.093957 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:37:02.094026 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: using existing connection
2025-12-03 13:37:02.094061 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:
0
2025-12-03 13:37:02.094093 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:37:02.094121 ike V=root:0:MGMT_D_ISP2: request is on the queue
2025-12-03 13:37:02.133241 ike 0:MGMT_D_ISP2:118793: out C980445F6E0FC92B9408BAD301F500BA2E2023080000000100000110230000F46146561681
A923A75E557E6723F4B7DCBF9852D163FE8D653AF9A5DB0BBEC0A247091802BDA84861492E361A0AB64F64BC747E49C21804A71E29D59B4A265276B00F578B69A48
44FB96CAE50BE559DA9ACAF62A20844A3FE0F88A68DDFA6DCD1178E772B1A0B761ED48780A4E7E49C34F03FDE89BDD65F852A06B68995CEFE94A743AA2EFA271DBC
95C69A934437922222CA657DE3D99A7BF223B5EDAFB4D7B3AFFD7354275F5ACD46D84CB0CB3C29878FE6C7E9F06013F684F54B2664673E7AE8BC0A1FFEE234E167C
A05C8FB1218077B565417C0AE7987F63B46BD2B7E77B604B5DA021C1EE993A2E7372792882CF5
2025-12-03 13:37:02.133405 ike V=root:0:MGMT_D_ISP2:118793: sent IKE msg (RETRANSMIT_AUTH): 65.12.12.75:4500->61.238.5.138:4500, le
n=272, vrf=1, id=c980445f6e0fc92b/9408bad301f500ba:00000001, oif=23
2025-12-03 13:37:05.123891 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:37:05.123979 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: using existing connection
2025-12-03 13:37:05.124013 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:
0
2025-12-03 13:37:05.124045 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:37:05.124073 ike V=root:0:MGMT_D_ISP2: request is on the queue
2025-12-03 13:37:08.153832 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:37:08.153923 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: using existing connection
2025-12-03 13:37:08.153958 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:
0
2025-12-03 13:37:08.153989 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:37:08.154018 ike V=root:0:MGMT_D_ISP2: request is on the queue
2025-12-03 13:37:11.173861 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:37:11.173948 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: using existing connection
2025-12-03 13:37:11.173984 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:
0
2025-12-03 13:37:11.174015 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:37:11.174044 ike V=root:0:MGMT_D_ISP2: request is on the queue
2025-12-03 13:37:14.153236 ike 0:MGMT_D_ISP2:118793: out C980445F6E0FC92B9408BAD301F500BA2E2023080000000100000110230000F46146561681
A923A75E557E6723F4B7DCBF9852D163FE8D653AF9A5DB0BBEC0A247091802BDA84861492E361A0AB64F64BC747E49C21804A71E29D59B4A265276B00F578B69A48
44FB96CAE50BE559DA9ACAF62A20844A3FE0F88A68DDFA6DCD1178E772B1A0B761ED48780A4E7E49C34F03FDE89BDD65F852A06B68995CEFE94A743AA2EFA271DBC
95C69A934437922222CA657DE3D99A7BF223B5EDAFB4D7B3AFFD7354275F5ACD46D84CB0CB3C29878FE6C7E9F06013F684F54B2664673E7AE8BC0A1FFEE234E167C
A05C8FB1218077B565417C0AE7987F63B46BD2B7E77B604B5DA021C1EE993A2E7372792882CF5
2025-12-03 13:37:14.153409 ike V=root:0:MGMT_D_ISP2:118793: sent IKE msg (RETRANSMIT_AUTH): 65.12.12.75:4500->61.238.5.138:4500, le
n=272, vrf=1, id=c980445f6e0fc92b/9408bad301f500ba:00000001, oif=23
2025-12-03 13:37:14.193830 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:37:14.193874 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: using existing connection
2025-12-03 13:37:14.193908 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:
0
2025-12-03 13:37:14.193939 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:37:14.193967 ike V=root:0:MGMT_D_ISP2: request is on the queue
2025-12-03 13:37:17.213966 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:37:17.214053 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: using existing connection
2025-12-03 13:37:17.214087 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:
0
2025-12-03 13:37:17.214118 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:37:17.214146 ike V=root:0:MGMT_D_ISP2: request is on the queue
2025-12-03 13:37:20.233837 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:37:20.233923 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: using existing connection
2025-12-03 13:37:20.233957 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:
0
2025-12-03 13:37:20.233988 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:37:20.234016 ike V=root:0:MGMT_D_ISP2: request is on the queue
2025-12-03 13:37:23.053212 ike V=root:0:MGMT_D_ISP2:118793: negotiation timeout, deleting
2025-12-03 13:37:23.053452 ike V=root:0:MGMT_D_ISP2: connection expiring due to phase1 down
2025-12-03 13:37:23.053486 ike V=root:0:MGMT_D_ISP2: going to be deleted
2025-12-03 13:37:23.253826 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:37:23.253893 ike V=root:0:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:0
2025-12-03 13:37:23.253927 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:37:23.253990 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: created connection: 0xa0c28a0 23 65.12.12.75->61.238.5.138:500.
2025-12-03 13:37:23.254039 ike V=root:0:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:500 negotiating
2025-12-03 13:37:23.254108 ike V=root:0:MGMT_D_ISP2: no suitable IKE_SA, queuing CHILD_SA request and initiating IKE_SA negotiation
2025-12-03 13:37:23.254175 ike V=root:0:MGMT_D_ISP2:118794: generate DH public value request queued
2025-12-03 13:37:23.254304 ike V=root:0:MGMT_D_ISP2:118794: create NAT-D hash local 65.12.12.75/500 remote 61.238.5.138/500
2025-12-03 13:37:23.254377 ike 0:MGMT_D_ISP2:118794: out 61A13266095437D70000000000000000212022080000000000000155220000380000003401
0100050300000C01000014800E01000300000802000005030000080400000E030000080400001300000008040000152800008C0015000000CD993B5EE3C3710173D
542AEAAB4FAF2945DB6581089281F087C5BB6D5CDD8945E78D6D784A81C4453FE760C2361E673271262D6DD24A89E9D6FF609E80ADCD4D600AB562D5A5FDE9C34C4
AF19EB8B978FC15D7CA8BDFB89840DB30439DD7485374B865EC32002245F369DF3C8E99C90C7B8704E4DA2716CC62BE9DF1A8B1F4AE235B029000024EAD4F00929D
70D7761E26BD84737BA25C07331299ACBF56BBEEEBCAB57B501DC2900001C00004004D9973A0CEC7B9BFB9249F93D3B57CC7A0B8CB23B2900001C00004005393015
337FCA70D2D203A2A28DCA8C9C021B3728290000080000402E290000090000F0500C000000080000F101
2025-12-03 13:37:23.254489 ike V=root:0:MGMT_D_ISP2:118794: sent IKE msg (SA_INIT): 65.12.12.75:500->61.238.5.138:500, len=341, vrf
=1, id=61a13266095437d7/0000000000000000, oif=23
2025-12-03 13:37:23.300597 ike V=root:0: comes 61.238.5.138:500->65.12.12.75:500,ifindex=23,vrf=1,len=300....
2025-12-03 13:37:23.300678 ike V=root:0: IKEv2 exchange=SA_INIT_RESPONSE id=61a13266095437d7/b34df62ebc3ea0c7 len=300
2025-12-03 13:37:23.300712 ike 0: in 61A13266095437D7B34DF62EBC3EA0C721202220000000000000012C2200002800000024010100030300000C010000
14800E0100030000080200000500000008040000152800008C0015000000F4BE89BBA5083DC7C46D030F32D8DDF279950F05037D6F31F9EA031796304DE210F6C98
D49E31AA551B0DD5DACDAF3A6D743D63C21A66E33DCB5912C7EC78B905A01EB3CB7A10CF256BAADCB1C8BCEBE1E613283F22289B245E6053BAE13200B5F3B23678B
3151F03C483530EC8CD14374E6B10B5C90267C9785ECDDB145F5C0CA0B98290000146553CA327EC262218E24A4C1B230867C2900001C00004004C2A1D49575E5A7D
DE4044ED71D23D60602B20E4E2900001C0000400510CEF62FE258A82EDE731021CFA76A33573045B0290000080000402E000000080000F101
2025-12-03 13:37:23.300772 ike V=root:0:MGMT_D_ISP2:118794: initiator received SA_INIT response
2025-12-03 13:37:23.300801 ike V=root:0:MGMT_D_ISP2:118794: processing notify type NAT_DETECTION_SOURCE_IP
2025-12-03 13:37:23.300890 ike V=root:0:MGMT_D_ISP2:118794: processing NAT-D payload
2025-12-03 13:37:23.300928 ike V=root:0:MGMT_D_ISP2:118794: NAT detected: PEER
2025-12-03 13:37:23.300956 ike V=root:0:MGMT_D_ISP2:118794: process NAT-D
2025-12-03 13:37:23.301021 ike V=root:0:MGMT_D_ISP2:118794: processing notify type NAT_DETECTION_DESTINATION_IP
2025-12-03 13:37:23.301089 ike V=root:0:MGMT_D_ISP2:118794: processing NAT-D payload
2025-12-03 13:37:23.301121 ike V=root:0:MGMT_D_ISP2:118794: NAT detected: PEER
2025-12-03 13:37:23.301149 ike V=root:0:MGMT_D_ISP2:118794: process NAT-D
2025-12-03 13:37:23.301174 ike V=root:0:MGMT_D_ISP2:118794: processing notify type FRAGMENTATION_SUPPORTED
2025-12-03 13:37:23.301235 ike V=root:0:MGMT_D_ISP2:118794: processing notify type EXCHANGE_INTF_IP
2025-12-03 13:37:23.301307 ike V=root:0:MGMT_D_ISP2:118794: incoming proposal:
2025-12-03 13:37:23.301336 ike V=root:0:MGMT_D_ISP2:118794: proposal id = 1:
2025-12-03 13:37:23.301363 ike V=root:0:MGMT_D_ISP2:118794: protocol = IKEv2:
2025-12-03 13:37:23.301388 ike V=root:0:MGMT_D_ISP2:118794: encapsulation = IKEv2/none
2025-12-03 13:37:23.301416 ike V=root:0:MGMT_D_ISP2:118794: type=ENCR, val=AES_GCM_16 (key_len = 256)
2025-12-03 13:37:23.301458 ike V=root:0:MGMT_D_ISP2:118794: type=PRF, val=PRF_HMAC_SHA2_256
2025-12-03 13:37:23.301483 ike V=root:0:MGMT_D_ISP2:118794: type=DH_GROUP, val=ECP521.
2025-12-03 13:37:23.301515 ike V=root:0:MGMT_D_ISP2:118794: matched proposal id 1
2025-12-03 13:37:23.301539 ike V=root:0:MGMT_D_ISP2:118794: proposal id = 1:
2025-12-03 13:37:23.301562 ike V=root:0:MGMT_D_ISP2:118794: protocol = IKEv2:
2025-12-03 13:37:23.301584 ike V=root:0:MGMT_D_ISP2:118794: encapsulation = IKEv2/none
2025-12-03 13:37:23.301607 ike V=root:0:MGMT_D_ISP2:118794: type=ENCR, val=AES_GCM_16 (key_len = 256)
2025-12-03 13:37:23.301633 ike V=root:0:MGMT_D_ISP2:118794: type=INTEGR, val=NONE
2025-12-03 13:37:23.301657 ike V=root:0:MGMT_D_ISP2:118794: type=PRF, val=PRF_HMAC_SHA2_256
2025-12-03 13:37:23.301680 ike V=root:0:MGMT_D_ISP2:118794: type=DH_GROUP, val=ECP521.
2025-12-03 13:37:23.301703 ike V=root:0:MGMT_D_ISP2:118794: lifetime=28800
2025-12-03 13:37:23.301737 ike V=root:0:MGMT_D_ISP2:118794: compute DH shared secret request queued
2025-12-03 13:37:23.320644 ike 0:MGMT_D_ISP2:118794: IKE SA 61a13266095437d7/b34df62ebc3ea0c7 SK_ei 36:BD81E1827944438CCB1544A8B310
1952D649972CBC51D21E96039DBEC6533AD5A10FD5E1
2025-12-03 13:37:23.320707 ike 0:MGMT_D_ISP2:118794: IKE SA 61a13266095437d7/b34df62ebc3ea0c7 SK_er 36:D1C67B3B3831610CAC66C3C2AD5A
3909B998350E3670112AAB8BD1DA9788E89F7EEA2EE9
2025-12-03 13:37:23.320803 ike V=root:0:MGMT_D_ISP2:118794: initiator preparing AUTH msg
2025-12-03 13:37:23.320884 ike V=root:0:MGMT_D_ISP2:118794: sending INITIAL-CONTACT
2025-12-03 13:37:23.320919 ike V=root:0:MGMT_D_ISP2:118794: add INTERFACE-ADDR4 101.102.12.201
2025-12-03 13:37:23.320981 ike 0:MGMT_D_ISP2:118794: enc 2900000B0200000050544F29000008000040002700000C0000F0F964670EE1290000280200
0000E0793FA9AF3E681FFA1D36C815B918069285A28B870139AE760624892E28A66B21000008000040242C00002400000020010304028D5371020300000C0100001
4800E010000000008050000002D00002802000000070000100000FFFF64670EE164670EE1070000100000FFFF00000000FFFFFFFF29000028020000000700001000
00FFFF64670E0064670E00070000100000FFFF00000000FFFFFFFF0000000C0000F051AC10C92D080706050403020108
2025-12-03 13:37:23.321069 ike V=root:0:MGMT_D_ISP2:118794: detected NAT
2025-12-03 13:37:23.321096 ike V=root:0:MGMT_D_ISP2:118794: NAT-T float port 4500
2025-12-03 13:37:23.321128 ike 0:MGMT_D_ISP2:118794: out 61A13266095437D7B34DF62EBC3EA0C72E2023080000000100000110230000F40F745D377E
B40B4903852E33C3E8F518C39F1B95207A6B991FE1B2351078A7CF0EFC1FC5CAB46A61130253DA657B5ABA9D0DC26F57C8EF320F95E9CEA1ED89C8A79B1AD598B17
B9385C897C0FED2D36369C34E46F689175B2613C08D6C33E6A40DB424F7ED6DD795DB843F0EE3518D545EAF4A61360104286BC65572477C418339FA24047A6BD14A
5CDA06566939B7B34C36BA2967E528419CBFDC7CFC08FA6343A3431BC1621F00ED49E7FC75496204F9F918B6C01C99B2929E5A65776630F4716CAA0B064D67512D2
1009027AABDD63C3458FF34F4C0D2B1DAEE3007F4E3B430D7959BDAF519C3F44E345936F8B2CD
2025-12-03 13:37:23.321233 ike V=root:0:MGMT_D_ISP2:118794: sent IKE msg (AUTH): 65.12.12.75:4500->61.238.5.138:4500, len=272, vrf=
1, id=61a13266095437d7/b34df62ebc3ea0c7:00000001, oif=23
2025-12-03 13:37:26.263971 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:37:26.264031 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: using existing connection
2025-12-03 13:37:26.264063 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:
0
2025-12-03 13:37:26.264090 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:37:26.264115 ike V=root:0:MGMT_D_ISP2: request is on the queue
2025-12-03 13:37:26.333260 ike 0:MGMT_D_ISP2:118794: out 61A13266095437D7B34DF62EBC3EA0C72E2023080000000100000110230000F40F745D377E
B40B4903852E33C3E8F518C39F1B95207A6B991FE1B2351078A7CF0EFC1FC5CAB46A61130253DA657B5ABA9D0DC26F57C8EF320F95E9CEA1ED89C8A79B1AD598B17
B9385C897C0FED2D36369C34E46F689175B2613C08D6C33E6A40DB424F7ED6DD795DB843F0EE3518D545EAF4A61360104286BC65572477C418339FA24047A6BD14A
5CDA06566939B7B34C36BA2967E528419CBFDC7CFC08FA6343A3431BC1621F00ED49E7FC75496204F9F918B6C01C99B2929E5A65776630F4716CAA0B064D67512D2
1009027AABDD63C3458FF34F4C0D2B1DAEE3007F4E3B430D7959BDAF519C3F44E345936F8B2CD
2025-12-03 13:37:26.333369 ike V=root:0:MGMT_D_ISP2:118794: sent IKE msg (RETRANSMIT_AUTH): 65.12.12.75:4500->61.238.5.138:4500, le
n=272, vrf=1, id=61a13266095437d7/b34df62ebc3ea0c7:00000001, oif=23
2025-12-03 13:37:29.293850 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:37:29.293919 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: using existing connection
2025-12-03 13:37:29.293951 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:
0
2025-12-03 13:37:29.293978 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:37:29.294003 ike V=root:0:MGMT_D_ISP2: request is on the queue
2025-12-03 13:37:32.313901 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:37:32.313973 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: using existing connection
2025-12-03 13:37:32.314007 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:
0
2025-12-03 13:37:32.314038 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:37:32.314066 ike V=root:0:MGMT_D_ISP2: request is on the queue
2025-12-03 13:37:32.363215 ike 0:MGMT_D_ISP2:118794: out 61A13266095437D7B34DF62EBC3EA0C72E2023080000000100000110230000F40F745D377E
B40B4903852E33C3E8F518C39F1B95207A6B991FE1B2351078A7CF0EFC1FC5CAB46A61130253DA657B5ABA9D0DC26F57C8EF320F95E9CEA1ED89C8A79B1AD598B17
B9385C897C0FED2D36369C34E46F689175B2613C08D6C33E6A40DB424F7ED6DD795DB843F0EE3518D545EAF4A61360104286BC65572477C418339FA24047A6BD14A
5CDA06566939B7B34C36BA2967E528419CBFDC7CFC08FA6343A3431BC1621F00ED49E7FC75496204F9F918B6C01C99B2929E5A65776630F4716CAA0B064D67512D2
1009027AABDD63C3458FF34F4C0D2B1DAEE3007F4E3B430D7959BDAF519C3F44E345936F8B2CD
2025-12-03 13:37:32.363352 ike V=root:0:MGMT_D_ISP2:118794: sent IKE msg (RETRANSMIT_AUTH): 65.12.12.75:4500->61.238.5.138:4500, le
n=272, vrf=1, id=61a13266095437d7/b34df62ebc3ea0c7:00000001, oif=23
2025-12-03 13:37:35.344442 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:37:35.344534 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: using existing connection
2025-12-03 13:37:35.344570 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:
0
2025-12-03 13:37:35.344601 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:37:35.344629 ike V=root:0:MGMT_D_ISP2: request is on the queue
2025-12-03 13:37:38.363912 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:37:38.364005 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: using existing connection
2025-12-03 13:37:38.364040 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:
0
2025-12-03 13:37:38.364071 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:37:38.364099 ike V=root:0:MGMT_D_ISP2: request is on the queue
2025-12-03 13:37:41.383807 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:37:41.383896 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: using existing connection
2025-12-03 13:37:41.383931 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:
0
2025-12-03 13:37:41.383962 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:37:41.383990 ike V=root:0:MGMT_D_ISP2: request is on the queue
2025-12-03 13:37:44.373235 ike 0:MGMT_D_ISP2:118794: out 61A13266095437D7B34DF62EBC3EA0C72E2023080000000100000110230000F40F745D377E
B40B4903852E33C3E8F518C39F1B95207A6B991FE1B2351078A7CF0EFC1FC5CAB46A61130253DA657B5ABA9D0DC26F57C8EF320F95E9CEA1ED89C8A79B1AD598B17
B9385C897C0FED2D36369C34E46F689175B2613C08D6C33E6A40DB424F7ED6DD795DB843F0EE3518D545EAF4A61360104286BC65572477C418339FA24047A6BD14A
5CDA06566939B7B34C36BA2967E528419CBFDC7CFC08FA6343A3431BC1621F00ED49E7FC75496204F9F918B6C01C99B2929E5A65776630F4716CAA0B064D67512D2
1009027AABDD63C3458FF34F4C0D2B1DAEE3007F4E3B430D7959BDAF519C3F44E345936F8B2CD
2025-12-03 13:37:44.373396 ike V=root:0:MGMT_D_ISP2:118794: sent IKE msg (RETRANSMIT_AUTH): 65.12.12.75:4500->61.238.5.138:4500, le
n=272, vrf=1, id=61a13266095437d7/b34df62ebc3ea0c7:00000001, oif=23
2025-12-03 13:37:44.403899 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:37:44.403964 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: using existing connection
2025-12-03 13:37:44.403999 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:
0
2025-12-03 13:37:44.404030 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:37:44.404058 ike V=root:0:MGMT_D_ISP2: request is on the queue
2025-12-03 13:37:47.433867 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:37:47.433954 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: using existing connection
2025-12-03 13:37:47.433989 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:
0
2025-12-03 13:37:47.434021 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:37:47.434050 ike V=root:0:MGMT_D_ISP2: request is on the queue
2025-12-03 13:37:50.463812 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:37:50.463899 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: using existing connection
2025-12-03 13:37:50.463933 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:
0
2025-12-03 13:37:50.463964 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:37:50.463992 ike V=root:0:MGMT_D_ISP2: request is on the queue
2025-12-03 13:37:53.273235 ike V=root:0:MGMT_D_ISP2:118794: negotiation timeout, deleting
2025-12-03 13:37:53.273500 ike V=root:0:MGMT_D_ISP2: connection expiring due to phase1 down
2025-12-03 13:37:53.273533 ike V=root:0:MGMT_D_ISP2: going to be deleted
2025-12-03 13:37:53.493839 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:37:53.493891 ike V=root:0:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:0
2025-12-03 13:37:53.493924 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:37:53.493981 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: created connection: 0xa0c28a0 23 65.12.12.75->61.238.5.138:500.
2025-12-03 13:37:53.494029 ike V=root:0:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:500 negotiating
2025-12-03 13:37:53.494083 ike V=root:0:MGMT_D_ISP2: no suitable IKE_SA, queuing CHILD_SA request and initiating IKE_SA negotiation
2025-12-03 13:37:53.494146 ike V=root:0:MGMT_D_ISP2:118795: generate DH public value request queued
2025-12-03 13:37:53.494404 ike V=root:0:MGMT_D_ISP2:118795: create NAT-D hash local 65.12.12.75/500 remote 61.238.5.138/500
2025-12-03 13:37:53.494479 ike 0:MGMT_D_ISP2:118795: out 60E8B170A59225D40000000000000000212022080000000000000155220000380000003401
0100050300000C01000014800E01000300000802000005030000080400000E030000080400001300000008040000152800008C001500000126A063DCEF1EC8F29F9
02B4EFD1D086C7D72F9C8620F25549E19E71B62086E491D568A10BB0D47F506A5F4B245E7E0E97FB644C5D3BC42C8BD542EAF0FE055518900EEC2A387EB80284F8C
7D6F7F7175B717B429BFC98528D367863116B3106B7F07B967135135553762289D81B4BFD9D7C142A4F88D497DB9AC8DA5DA0EDB3FEAB8E529000024538F4D8A361
D8C948A7564401C23072F869590F7D9B294061C57976AFEFEEA122900001C0000400444A70382C1D4E0FED3C0583A70043239136662B72900001C000040059B6C12
734E62E6037E2549E5188D9D69BF9546DF290000080000402E290000090000F0500C000000080000F101
2025-12-03 13:37:53.494609 ike V=root:0:MGMT_D_ISP2:118795: sent IKE msg (SA_INIT): 65.12.12.75:500->61.238.5.138:500, len=341, vrf
=1, id=60e8b170a59225d4/0000000000000000, oif=23
2025-12-03 13:37:53.540298 ike V=root:0: comes 61.238.5.138:500->65.12.12.75:500,ifindex=23,vrf=1,len=300....
2025-12-03 13:37:53.540380 ike V=root:0: IKEv2 exchange=SA_INIT_RESPONSE id=60e8b170a59225d4/b29a39eebc08a5d2 len=300
2025-12-03 13:37:53.540415 ike 0: in 60E8B170A59225D4B29A39EEBC08A5D221202220000000000000012C2200002800000024010100030300000C010000
14800E0100030000080200000500000008040000152800008C0015000001B3182B949D4FFBA99EC806149E0F8ED86F2E66B280C3AC3F61F712A4C02F393C62D7ADD
49DEB97F70CAB38212535D7EF87F2BAB0D88D45BAF0A73B9738C50FAF9C0168CB83A9515B2C845734CDABD492B50009769925C70EB918D8E42718E16D764D17CD85
37AF941FA9A147B4B456D899F8F99EA8786C50D078DDC82A6A66EA3A506329000014105FE99A8CA8EF14F765A486EC1CEAAC2900001C000040043F620661168694B
F5220D879825478EB14DE38B82900001C00004005B77E2A9637A0714AB893BCA16F7D02FD9E74BB80290000080000402E000000080000F101
2025-12-03 13:37:53.540475 ike V=root:0:MGMT_D_ISP2:118795: initiator received SA_INIT response
2025-12-03 13:37:53.540505 ike V=root:0:MGMT_D_ISP2:118795: processing notify type NAT_DETECTION_SOURCE_IP
2025-12-03 13:37:53.540589 ike V=root:0:MGMT_D_ISP2:118795: processing NAT-D payload
2025-12-03 13:37:53.540628 ike V=root:0:MGMT_D_ISP2:118795: NAT detected: PEER
2025-12-03 13:37:53.540656 ike V=root:0:MGMT_D_ISP2:118795: process NAT-D
2025-12-03 13:37:53.540683 ike V=root:0:MGMT_D_ISP2:118795: processing notify type NAT_DETECTION_DESTINATION_IP
2025-12-03 13:37:53.540745 ike V=root:0:MGMT_D_ISP2:118795: processing NAT-D payload
2025-12-03 13:37:53.540776 ike V=root:0:MGMT_D_ISP2:118795: NAT detected: PEER
2025-12-03 13:37:53.540803 ike V=root:0:MGMT_D_ISP2:118795: process NAT-D
2025-12-03 13:37:53.540829 ike V=root:0:MGMT_D_ISP2:118795: processing notify type FRAGMENTATION_SUPPORTED
2025-12-03 13:37:53.540891 ike V=root:0:MGMT_D_ISP2:118795: processing notify type EXCHANGE_INTF_IP
2025-12-03 13:37:53.540969 ike V=root:0:MGMT_D_ISP2:118795: incoming proposal:
2025-12-03 13:37:53.540999 ike V=root:0:MGMT_D_ISP2:118795: proposal id = 1:
2025-12-03 13:37:53.541027 ike V=root:0:MGMT_D_ISP2:118795: protocol = IKEv2:
2025-12-03 13:37:53.541053 ike V=root:0:MGMT_D_ISP2:118795: encapsulation = IKEv2/none
2025-12-03 13:37:53.541081 ike V=root:0:MGMT_D_ISP2:118795: type=ENCR, val=AES_GCM_16 (key_len = 256)
2025-12-03 13:37:53.541163 ike V=root:0:MGMT_D_ISP2:118795: type=PRF, val=PRF_HMAC_SHA2_256
2025-12-03 13:37:53.541190 ike V=root:0:MGMT_D_ISP2:118795: type=DH_GROUP, val=ECP521.
2025-12-03 13:37:53.541224 ike V=root:0:MGMT_D_ISP2:118795: matched proposal id 1
2025-12-03 13:37:53.541248 ike V=root:0:MGMT_D_ISP2:118795: proposal id = 1:
2025-12-03 13:37:53.541270 ike V=root:0:MGMT_D_ISP2:118795: protocol = IKEv2:
2025-12-03 13:37:53.541292 ike V=root:0:MGMT_D_ISP2:118795: encapsulation = IKEv2/none
2025-12-03 13:37:53.541316 ike V=root:0:MGMT_D_ISP2:118795: type=ENCR, val=AES_GCM_16 (key_len = 256)
2025-12-03 13:37:53.541341 ike V=root:0:MGMT_D_ISP2:118795: type=INTEGR, val=NONE
2025-12-03 13:37:53.541364 ike V=root:0:MGMT_D_ISP2:118795: type=PRF, val=PRF_HMAC_SHA2_256
2025-12-03 13:37:53.541387 ike V=root:0:MGMT_D_ISP2:118795: type=DH_GROUP, val=ECP521.
2025-12-03 13:37:53.541410 ike V=root:0:MGMT_D_ISP2:118795: lifetime=28800
2025-12-03 13:37:53.541444 ike V=root:0:MGMT_D_ISP2:118795: compute DH shared secret request queued
2025-12-03 13:37:53.560377 ike 0:MGMT_D_ISP2:118795: IKE SA 60e8b170a59225d4/b29a39eebc08a5d2 SK_ei 36:7815F7D863CF602E0637A4BC9545
5ACFC4C5AF295930D94BF8F510183EF6332B3F162E9B
2025-12-03 13:37:53.560424 ike 0:MGMT_D_ISP2:118795: IKE SA 60e8b170a59225d4/b29a39eebc08a5d2 SK_er 36:AEEAA3E19C83603B7589DD5B92FC
31D6354A655D691889BFBE73E55ACA0BD35BA20883BD
2025-12-03 13:37:53.560500 ike V=root:0:MGMT_D_ISP2:118795: initiator preparing AUTH msg
2025-12-03 13:37:53.560578 ike V=root:0:MGMT_D_ISP2:118795: sending INITIAL-CONTACT
2025-12-03 13:37:53.560613 ike V=root:0:MGMT_D_ISP2:118795: add INTERFACE-ADDR4 101.102.12.201
2025-12-03 13:37:53.560676 ike 0:MGMT_D_ISP2:118795: enc 2900000B0200000050544F29000008000040002700000C0000F0F964670EE1290000280200
000065A316780B13FAA186CF1289EB8ADBDCDB8F58E45516D945309D3264C75890FB21000008000040242C00002400000020010304028D5371030300000C0100001
4800E010000000008050000002D00002802000000070000100000FFFF64670EE164670EE1070000100000FFFF00000000FFFFFFFF29000028020000000700001000
00FFFF64670E0064670E00070000100000FFFF00000000FFFFFFFF0000000C0000F051AC10C92D080706050403020108
2025-12-03 13:37:53.560760 ike V=root:0:MGMT_D_ISP2:118795: detected NAT
2025-12-03 13:37:53.560786 ike V=root:0:MGMT_D_ISP2:118795: NAT-T float port 4500
2025-12-03 13:37:53.560818 ike 0:MGMT_D_ISP2:118795: out 60E8B170A59225D4B29A39EEBC08A5D22E2023080000000100000110230000F46B0B763865
82D8EFF2FB5208AFB98F37E82BDB88C889AF839426351F162C4F1671E5010D72C336999E247F6544FF7588D0F1482549AC53C2015E908793A21C60C0709B366730F
4B9F7EE9E13301673AD0346576D78B79C260717835D6061246A69FB95F85E5EDC106CF8A0D070B587D2D247C8F5AE0512C487BE3401F5546EB5B04E860ADA425080
B80F1144FAEC5DC48BC02AA891EE2ECD1E77E8699B60E776A39CA72EA8907C07A5C23DFA8C62BE051A4F8FC4D3EB2F1DC95CAB4C05DCBF17AC2AC8024980DE03380
F5689B76F41ACCCDA23E0232DF4B4331D36D5FF4CEEE50E1990714A0FABF059FCF913801938F8
2025-12-03 13:37:53.560930 ike V=root:0:MGMT_D_ISP2:118795: sent IKE msg (AUTH): 65.12.12.75:4500->61.238.5.138:4500, len=272, vrf=
1, id=60e8b170a59225d4/b29a39eebc08a5d2:00000001, oif=23
2025-12-03 13:37:56.523900 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:37:56.523957 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: using existing connection
2025-12-03 13:37:56.523988 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:
0
2025-12-03 13:37:56.524015 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:37:56.524040 ike V=root:0:MGMT_D_ISP2: request is on the queue
2025-12-03 13:37:56.583230 ike 0:MGMT_D_ISP2:118795: out 60E8B170A59225D4B29A39EEBC08A5D22E2023080000000100000110230000F46B0B763865
82D8EFF2FB5208AFB98F37E82BDB88C889AF839426351F162C4F1671E5010D72C336999E247F6544FF7588D0F1482549AC53C2015E908793A21C60C0709B366730F
4B9F7EE9E13301673AD0346576D78B79C260717835D6061246A69FB95F85E5EDC106CF8A0D070B587D2D247C8F5AE0512C487BE3401F5546EB5B04E860ADA425080
B80F1144FAEC5DC48BC02AA891EE2ECD1E77E8699B60E776A39CA72EA8907C07A5C23DFA8C62BE051A4F8FC4D3EB2F1DC95CAB4C05DCBF17AC2AC8024980DE03380
F5689B76F41ACCCDA23E0232DF4B4331D36D5FF4CEEE50E1990714A0FABF059FCF913801938F8
2025-12-03 13:37:56.583363 ike V=root:0:MGMT_D_ISP2:118795: sent IKE msg (RETRANSMIT_AUTH): 65.12.12.75:4500->61.238.5.138:4500, le
n=272, vrf=1, id=60e8b170a59225d4/b29a39eebc08a5d2:00000001, oif=23
2025-12-03 13:37:59.553888 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: IPsec SA connect 23 65.12.12.75->61.238.5.138:0
2025-12-03 13:37:59.553947 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: using existing connection
2025-12-03 13:37:59.553977 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: traffic triggered, serial=1 1:101.102.12.201:2048->1:101.111.11.0:
0
2025-12-03 13:37:59.554004 ike V=root:0:MGMT_D_ISP2:MGMT_D_ISP2: config found
2025-12-03 13:37:59.554028 ike V=root:0:MGMT_D_ISP2: request is on the queue
diagnose debug reset

@Jean-Philippe_P @msingh_FTNT @Anthony_E

funkylicious · ‎12-03-2025

L.E. nvm, ignore this comment.

"jack of all trades, master of none"

Dialup VPN IPSEC Tunnel flapped while ISP Stated Everything is looks Good at their end

Nominate a Forum Post for Knowledge Article Creation

You are leaving our website