IPsec VPN Tunnel not coming up

HamB · ‎07-30-2014

Hi, We are currently trying to establish a site to site VPN with a partner. The partner is using a Cisco ASA. He sent us the configuration parameters which we configured, but the VPN tunnel is still not coming up. I think the phase 1 is ok, the problem is with phase2. Here' s the logs from the fortigate:

 FGT60D4614014009 # ike 0: comes 41.224.14.131:500->41.224.244.77:500,ifindex=50....
 ike 0: IKEv1 exchange=Identity Protection id=474981673aaface9/d0216ed361a1081d len=108
 ike 0: in 474981673AAFACE9D0216ED361A1081D01100200000000000000006C0D00003800000001000000010000002C01010001000000240101000080010007800E0080800200028004000280030001800B0001800C7080000000184048B7D56EBCE88525E7DE7F00D6C2D3C0000000
 ike 0:VPN TTN:16877: initiator: main mode get 1st response...
 ike 0:VPN TTN:16877: VID FRAGMENTATION 4048B7D56EBCE88525E7DE7F00D6C2D3C0000000
 ike 0:VPN TTN:16877: negotiation result
 ike 0:VPN TTN:16877: proposal id = 1:
 ike 0:VPN TTN:16877:   protocol id = ISAKMP:
 ike 0:VPN TTN:16877:      trans_id = KEY_IKE.
 ike 0:VPN TTN:16877:      encapsulation = IKE/none
 ike 0:VPN TTN:16877:         type=OAKLEY_ENCRYPT_ALG, val=AES_CBC.
 ike 0:VPN TTN:16877:         type=OAKLEY_HASH_ALG, val=SHA.
 ike 0:VPN TTN:16877:         type=AUTH_METHOD, val=PRESHARED_KEY.
 ike 0:VPN TTN:16877:         type=OAKLEY_GROUP, val=1024.
 ike 0:VPN TTN:16877: ISAKMP SA lifetime=28800
 ike 0:VPN TTN:16877: out 474981673AAFACE9D0216ED361A1081D0410020000000000000000B40A0000842E7F83A440CB00F255BBD6C47713FDD938590D9E4D2F567F7CFE340490E9F70446C920A9D80E135641AC79B8C630D887DCD5530DF892B2D67E0C5F803E966BA6E5C1EC935D227D89EFBE53D27BD012736FF126EF86B92801DFA55B1A19AF71EF8E923F00BEDF1BD1DA76A5AF12129809A4886AD2DB9CB08021E62E0276D91C8C00000014DABD5FD2B9237F18E6924F26AC5BB2AF
 ike 0:VPN TTN:16877: sent IKE msg (ident_i2send): 41.224.244.77:500->41.224.14.131:500, len=180, id=474981673aaface9/d0216ed361a1081d
 ike 0: comes 41.224.14.131:500->41.224.244.77:500,ifindex=50....
 ike 0: IKEv1 exchange=Identity Protection id=474981673aaface9/d0216ed361a1081d len=256
 ike 0: in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
 ike 0:VPN TTN:16877: initiator: main mode get 2nd response...
 ike 0:VPN TTN:16877: VID CISCO-UNITY 12F5F28C457168A9702D9FE274CC0100
 ike 0:VPN TTN:16877: peer supports UNITY
 ike 0:VPN TTN:16877: VID draft-ietf-ipsra-isakmp-xauth-06.txt 09002689DFD6B712
 ike 0:VPN TTN:16877: VID unknown (16): 25E6C9CE61A0081DB8BA401A26766C19
 ike 0:VPN TTN:16877: VID unknown (16): 1F07F70EAA6514D3B0FA96542A500100
 ike 0:VPN TTN:16877: ISAKMP SA 474981673aaface9/d0216ed361a1081d key 16:1A654307DCAE4ECA1FB1916AE40067D8
 ike 0:VPN TTN:16877: add INITIAL-CONTACT
 ike 0:VPN TTN:16877: enc 474981673AAFACE9D0216ED361A1081D05100201000000000000005C0800000C0100000029E0F44D0B00001866B94E83B6DE51DF6BD6AD5B584364C9F61D2E970000001C0000000101106002474981673AAFACE9D0216ED361A1081D
 ike 0:VPN TTN:16877: out 474981673AAFACE9D0216ED361A1081D05100201000000000000006C338C4B9F667E7DC90860B2541F716F185CF7E6B42813D02B34C11EFD6B7530644B6D91E5685CA6D1609DFDE30FEE4108D130782677BC3B12A27E544C7E11D2EA89BB51401C1919352C6A93D5CBEB590B
 ike 0:VPN TTN:16877: sent IKE msg (ident_i3send): 41.224.244.77:500->41.224.14.131:500, len=108, id=474981673aaface9/d0216ed361a1081d
 ike 0: comes 41.224.14.131:500->41.224.244.77:500,ifindex=50....
 ike 0: IKEv1 exchange=Informational id=474981673aaface9/d0216ed361a1081d len=120
 ike 0: in 474981673AAFACE9D0216ED361A1081D0B10050000000000000000780000005C0000000100000010E2B2FCD2B86DA6ABB47555516F800C4E70A7F72E126060531517E54363552E459FE4BB9BB60902F10F1E614CC4ECEA8B33A3EA63D6FB2D783F480BD3E8D2D2BC2FECE4E794D2B8937258BE9FB21D02CD
 ike 0:VPN TTN:16877: ignoring unencrypted PAYLOAD-MALFORMED message from 41.224.14.131:500.
 ike 0:VPN TTN:VPN TTN P2: IPsec SA connect 50 41.224.244.77->41.224.14.131:0
 ike 0:VPN TTN:VPN TTN P2: using existing connection
 ike 0:VPN TTN:VPN TTN P2: config found
 ike 0:VPN TTN:VPN TTN P2: IPsec SA connect 50 41.224.244.77->41.224.14.131:500 negotiating
 ike 0:VPN TTN:16877:VPN TTN P2:17015: ISAKMP SA still negotiating, queuing quick-mode request
 ike 0:VPN TTN:16877: out 474981673AAFACE9D0216ED361A1081D05100201000000000000006C338C4B9F667E7DC90860B2541F716F185CF7E6B42813D02B34C11EFD6B7530644B6D91E5685CA6D1609DFDE30FEE4108D130782677BC3B12A27E544C7E11D2EA89BB51401C1919352C6A93D5CBEB590B
 ike 0:VPN TTN:16877: sent IKE msg (P1_RETRANSMIT): 41.224.244.77:500->41.224.14.131:500, len=108, id=474981673aaface9/d0216ed361a1081d
 ike 0: comes 41.224.14.131:500->41.224.244.77:500,ifindex=50....
 ike 0: IKEv1 exchange=Identity Protection id=474981673aaface9/d0216ed361a1081d len=256
 ike 0: in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
 ike 0:VPN TTN:16877: retransmission, re-send last message
 ike 0:VPN TTN:16877: out 474981673AAFACE9D0216ED361A1081D05100201000000000000006C338C4B9F667E7DC90860B2541F716F185CF7E6B42813D02B34C11EFD6B7530644B6D91E5685CA6D1609DFDE30FEE4108D130782677BC3B12A27E544C7E11D2EA89BB51401C1919352C6A93D5CBEB590B
 ike 0:VPN TTN:16877: sent IKE msg (retransmit): 41.224.244.77:500->41.224.14.131:500, len=108, id=474981673aaface9/d0216ed361a1081d
 ike 0: comes 41.224.14.131:500->41.224.244.77:500,ifindex=50....
 ike 0: IKEv1 exchange=Identity Protection id=474981673aaface9/d0216ed361a1081d len=256
 ike 0: in 474981673AAFACE9D0216ED361A1081D0410020000000000000001000A00008408413E837E46626B7A07879E99EC6B73BF71A99C00F3AF2A0B68B526FD2D3EBDC7AF274255283369206E877CA0EBB0A62257AF229F0600D85C90BF266C8852B2336E9CAFE8F0E7EF63E57CD1E28647A049BF6D1DFCD45C6C23B3F92A95B1EC29A0F9992FC4D78EB018DC54C903339121BCD535F9C9246BD2E62A787466485D980D000018C30B61834BB43EBC5839BC3F53695599BF7DCA4C0D00001412F5F28C457168A9702D9FE274CC01000D00000C09002689DFD6B7120D00001425E6C9CE61A0081DB8BA401A26766C19000000141F07F70EAA6514D3B0FA96542A500100
 ike 0:VPN TTN:16877: retransmission, re-send last message
 ike 0:VPN TTN:16877: out 474981673AAFACE9D0216ED361A1081D05100201000000000000006C338C4B9F667E7DC90860B2541F716F185CF7E6B42813D02B34C11EFD6B7530644B6D91E5685CA6D1609DFDE30FEE4108D130782677BC3B12A27E544C7E11D2EA89BB51401C1919352C6A93D5CBEB590B
 ike 0:VPN TTN:16877: sent IKE msg (retransmit): 41.224.244.77:500->41.224.14.131:500, len=108, id=474981673aaface9/d0216ed361a1081d
 ike 0: comes 41.224.14.131:500->41.224.244.77:500,ifindex=50....
 ike 0: IKEv1 exchange=Identity Protection id=474981673aaface9/d0216ed361a1081d len=256
 ike 0: in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
 ike 0:VPN TTN:16877: retransmission, re-send last message
 ike 0:VPN TTN:16877: out 474981673AAFACE9D0216ED361A1081D05100201000000000000006C338C4B9F667E7DC90860B2541F716F185CF7E6B42813D02B34C11EFD6B7530644B6D91E5685CA6D1609DFDE30FEE4108D130782677BC3B12A27E544C7E11D2EA89BB51401C1919352C6A93D5CBEB590B
 ike 0:VPN TTN:16877: sent IKE msg (retransmit): 41.224.244.77:500->41.224.14.131:500, len=108, id=474981673aaface9/d0216ed361a1081d
 ike 0: comes 41.224.14.131:500->41.224.244.77:500,ifindex=50....
 ike 0: IKEv1 exchange=Informational id=474981673aaface9/d0216ed361a1081d:c9012dbd len=92
 ike 0: in 474981673AAFACE9D0216ED361A1081D08100501C9012DBD0000005CE123C367CE145EF13100ED8CF12C8DBB52DB236F140033E2256EE2353C0CD1EE27EAEADC7DDC3D9D96978AFEB49007492BF5CC77CE7A1A1B4953609CD8EF0869
 ike 0:VPN TTN:VPN TTN P2: IPsec SA connect 50 41.224.244.77->41.224.14.131:0
 ike 0:VPN TTN:VPN TTN P2: using existing connection
 ike 0:VPN TTN:VPN TTN P2: config found
 ike 0:VPN TTN: request is on the queue
 ike 0:VPN TTN:VPN TTN P2: IPsec SA connect 50 41.224.244.77->41.224.14.131:0
 ike 0:VPN TTN:VPN TTN P2: using existing connection
 ike 0:VPN TTN:VPN TTN P2: config found
 ike 0:VPN TTN: request is on the queue
 ike 0:VPN TTN:VPN TTN P2: IPsec SA connect 50 41.224.244.77->41.224.14.131:0
 ike 0:VPN TTN:VPN TTN P2: using existing connection
 ike 0:VPN TTN:VPN TTN P2: config found
 ike 0:VPN TTN: request is on the queue
 ike 0:VPN TTN:16877: out 474981673AAFACE9D0216ED361A1081D05100201000000000000006C338C4B9F667E7DC90860B2541F716F185CF7E6B42813D02B34C11EFD6B7530644B6D91E5685CA6D1609DFDE30FEE4108D130782677BC3B12A27E544C7E11D2EA89BB51401C1919352C6A93D5CBEB590B
 ike 0:VPN TTN:16877: sent IKE msg (P1_RETRANSMIT): 41.224.244.77:500->41.224.14.131:500, len=108, id=474981673aaface9/d0216ed361a1081d
 ike 0:VPN TTN:VPN TTN P2: IPsec SA connect 50 41.224.244.77->41.224.14.131:0
 ike 0:VPN TTN:VPN TTN P2: using existing connection
 ike 0:VPN TTN:VPN TTN P2: config found
 ike 0:VPN TTN: request is on the queue
 ike 0:VPN TTN:VPN TTN P2: IPsec SA connect 50 41.224.244.77->41.224.14.131:0
 ike 0:VPN TTN:VPN TTN P2: using existing connection
 ike 0:VPN TTN:VPN TTN P2: config found
 ike 0:VPN TTN: request is on the queue
 ike 0:VPN TTN:16877: negotiation timeout, deleting
 ike 0:VPN TTN: connection expiring due to phase1 down
 ike 0:VPN TTN: deleting
 ike 0:VPN TTN: flushing
 ike 0:VPN TTN: flushed
 ike 0:VPN TTN: deleted
 ike 0:VPN TTN: schedule auto-negotiate
 ike 0:VPN TTN: auto-negotiate connection
 ike 0:VPN TTN: created connection: 0x2671788 50 41.224.244.77->41.224.14.131:500.
 ike 0:VPN TTN:16878: initiator: main mode is sending 1st message...
 ike 0:VPN TTN:16878: cookie 10a08ae40831be4e/0000000000000000
 ike 0:VPN TTN:16878: out 10A08AE40831BE4E00000000000000000110020000000000000000900D00003800000001000000010000002C010100010000002401010000800B0001800C708080010007800E00808003000180020002800400020D000014AFCAD71368A1F1C96B8696FC775701000D0000144048B7D56EBCE88525E7DE7F00D6C2D3000000148299031757A36082C6A621DE0005116B
 ike 0:VPN TTN:16878: sent IKE msg (ident_i1send): 41.224.244.77:500->41.224.14.131:500, len=144, id=10a08ae40831be4e/0000000000000000
 ike 0: comes 41.224.14.131:500->41.224.244.77:500,ifindex=50....
 ike 0: IKEv1 exchange=Identity Protection id=10a08ae40831be4e/b19a8bb09836f679 len=108
 ike 0: in 10A08AE40831BE4EB19A8BB09836F67901100200000000000000006C0D00003800000001000000010000002C01010001000000240101000080010007800E0080800200028004000280030001800B0001800C7080000000184048B7D56EBCE88525E7DE7F00D6C2D3C0000000
 ike 0:VPN TTN:16878: initiator: main mode get 1st response...
 ike 0:VPN TTN:16878: VID FRAGMENTATION 4048B7D56EBCE88525E7DE7F00D6C2D3C0000000
 ike 0:VPN TTN:16878: negotiation result
 ike 0:VPN TTN:16878: proposal id = 1:
 ike 0:VPN TTN:16878:   protocol id = ISAKMP:
 ike 0:VPN TTN:16878:      trans_id = KEY_IKE.
 ike 0:VPN TTN:16878:      encapsulation = IKE/none
 ike 0:VPN TTN:16878:         type=OAKLEY_ENCRYPT_ALG, val=AES_CBC.
 ike 0:VPN TTN:16878:         type=OAKLEY_HASH_ALG, val=SHA.
 ike 0:VPN TTN:16878:         type=AUTH_METHOD, val=PRESHARED_KEY.
 ike 0:VPN TTN:16878:         type=OAKLEY_GROUP, val=1024.
 ike 0:VPN TTN:16878: ISAKMP SA lifetime=28800
 ike 0:VPN TTN:16878: out 10A08AE40831BE4EB19A8BB09836F6790410020000000000000000B40A00008491B98E92359D07E6AA8F39EE71B174EC4BF7C3B1EB12DB26928116A45E15EAA463646CE3043B05224D8A84883E9B611F302320365DC8C5654061861CE61B2318A1766BF9E724EABEF605E65999CC3DE7AB77C001C8A9BC12E7AAE772344229B352CF397730823DBDE2376044F7DFB5C94918415E59E21F3001DDD24A3CA7132900000014DCBB0AD01A226EA3D688FCA4F14F6A12
 ike 0:VPN TTN:16878: sent IKE msg (ident_i2send): 41.224.244.77:500->41.224.14.131:500, len=180, id=10a08ae40831be4e/b19a8bb09836f679
 ike 0: comes 41.224.14.131:500->41.224.244.77:500,ifindex=50....
 ike 0: IKEv1 exchange=Identity Protection id=10a08ae40831be4e/b19a8bb09836f679 len=256
 ike 0: in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
 ike 0:VPN TTN:16878: initiator: main mode get 2nd response...
 ike 0:VPN TTN:16878: VID CISCO-UNITY 12F5F28C457168A9702D9FE274CC0100
 ike 0:VPN TTN:16878: peer supports UNITY
 ike 0:VPN TTN:16878: VID draft-ietf-ipsra-isakmp-xauth-06.txt 09002689DFD6B712
 ike 0:VPN TTN:16878: VID unknown (16): 445D2CAD9837F679D21BE1F2D14B2A26
 ike 0:VPN TTN:16878: VID unknown (16): 1F07F70EAA6514D3B0FA96542A500100
 ike 0:VPN TTN:16878: ISAKMP SA 10a08ae40831be4e/b19a8bb09836f679 key 16:3073720308C6AD414A34139ACCE24F8B
 ike 0:VPN TTN:16878: add INITIAL-CONTACT
 ike 0:VPN TTN:16878: enc 10A08AE40831BE4EB19A8BB09836F67905100201000000000000005C0800000C0100000029E0F44D0B000018CDCCA89184A06EB2B8CD3433557E3548B899F4380000001C000000010110600210A08AE40831BE4EB19A8BB09836F679
 ike 0:VPN TTN:16878: out 10A08AE40831BE4EB19A8BB09836F67905100201000000000000006CB8AAD0AE1C47D86C7A3C61736FE0F4B901EBEE78ACD2E61D2B8E9C12CA68C93B81A9267976DA120F5226F453D3C4C3AE0508604CE7A1558C010401DC29D4A4BAFC892C24CE84AFD004E0CC590A40F04B
 ike 0:VPN TTN:16878: sent IKE msg (ident_i3send): 41.224.244.77:500->41.224.14.131:500, len=108, id=10a08ae40831be4e/b19a8bb09836f679
 ike 0: comes 41.224.14.131:500->41.224.244.77:500,ifindex=50....
 ike 0: IKEv1 exchange=Informational id=10a08ae40831be4e/b19a8bb09836f679 len=120
 ike 0: in 10A08AE40831BE4EB19A8BB09836F6790B10050000000000000000780000005C0000000100000010D42EB0E7F217E9563094ADDA9A8C5EFC8FCE0D460CEC3FECEC595F92B844CC378FDF807FA1281DD6B95E815A0390C1D0DB89C96B3518F7EE31516F0142E5F344A2E212F1196527569E7E6A21534339DB
 ike 0:VPN TTN:16878: ignoring unencrypted PAYLOAD-MALFORMED message from 41.224.14.131:500.
 ike 0:VPN TTN:VPN TTN P2: IPsec SA connect 50 41.224.244.77->41.224.14.131:0
 ike 0:VPN TTN:VPN TTN P2: using existing connection
 ike 0:VPN TTN:VPN TTN P2: config found
 ike 0:VPN TTN:VPN TTN P2: IPsec SA connect 50 41.224.244.77->41.224.14.131:500 negotiating
 ike 0:VPN TTN:16878:VPN TTN P2:17016: ISAKMP SA still negotiating, queuing quick-mode request
 diike 0:VPN TTN:VPN TTN P2: IPsec SA connect 50 41.224.244.77->41.224.14.131:0
 ike 0:VPN TTN:VPN TTN P2: using existing connection
 ike 0:VPN TTN:VPN TTN P2: config found
 ike 0:VPN TTN: request is on the queue
 ike 0:VPN TTN:16878: out 10A08AE40831BE4EB19A8BB09836F67905100201000000000000006CB8AAD0AE1C47D86C7A3C61736FE0F4B901EBEE78ACD2E61D2B8E9C12CA68C93B81A9267976DA120F5226F453D3C4C3AE0508604CE7A1558C010401DC29D4A4BAFC892C24CE84AFD004E0CC590A40F04B
 ike 0:VPN TTN:16878: sent IKE msg (P1_RETRANSMIT): 41.224.244.77:500->41.224.14.131:500, len=108, id=10a08ae40831be4e/b19a8bb09836f679
 ike 0: comes 41.224.14.131:500->41.224.244.77:500,ifindex=50....
 ike 0: IKEv1 exchange=Identity Protection id=10a08ae40831be4e/b19a8bb09836f679 len=256
 ike 0: in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
 ike 0:VPN TTN:16878: retransmission, re-send last message
 ike 0:VPN TTN:16878: out 10A08AE40831BE4EB19A8BB09836F67905100201000000000000006CB8AAD0AE1C47D86C7A3C61736FE0F4B901EBEE78ACD2E61D2B8E9C12CA68C93B81A9267976DA120F5226F453D3C4C3AE0508604CE7A1558C010401DC29D4A4BAFC892C24CE84AFD004E0CC590A40F04B
 ike 0:VPN TTN:16878: sent IKE msg (retransmit): 41.224.244.77:500->41.224.14.131:500, len=108, id=10a08ae40831be4e/b19a8bb09836f679
 ike 0: comes 41.224.14.131:500->41.224.244.77:500,ifindex=50....
 ike 0: IKEv1 exchange=Identity Protection id=10a08ae40831be4e/b19a8bb09836f679 len=256
 ike 0: in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
 ike 0:VPN TTN:16878: retransmission, re-send last message
 ike 0:VPN TTN:16878: out 10A08AE40831BE4EB19A8BB09836F67905100201000000000000006CB8AAD0AE1C47D86C7A3C61736FE0F4B901EBEE78ACD2E61D2B8E9C12CA68C93B81A9267976DA120F5226F453D3C4C3AE0508604CE7A1558C010401DC29D4A4BAFC892C24CE84AFD004E0CC590A40F04B
 ike 0:VPN TTN:16878: sent IKE msg (retransmit): 41.224.244.77:500->41.224.14.131:500, len=108, id=10a08ae40831be4e/b19a8bb09836f679
 ike 0: comes 41.224.14.131:500->41.224.244.77:500,ifindex=50....
 ike 0: IKEv1 exchange=Identity Protection id=10a08ae40831be4e/b19a8bb09836f679 len=256
 ike 0: in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
 ike 0:VPN TTN:16878: retransmission, re-send last message
 ike 0:VPN TTN:16878: out 10A08AE40831BE4EB19A8BB09836F67905100201000000000000006CB8AAD0AE1C47D86C7A3C61736FE0F4B901EBEE78ACD2E61D2B8E9C12CA68C93B81A9267976DA120F5226F453D3C4C3AE0508604CE7A1558C010401DC29D4A4BAFC892C24CE84AFD004E0CC590A40F04B
 ike 0:VPN TTN:16878: sent IKE msg (retransmit): 41.224.244.77:500->41.224.14.131:500, len=108, id=10a08ae40831be4e/b19a8bb09836f679
 ike 0: comes 41.224.14.131:500->41.224.244.77:500,ifindex=50....
 ike 0: IKEv1 exchange=Informational id=10a08ae40831be4e/b19a8bb09836f679:1b0fe195 len=92
 ike 0: in 10A08AE40831BE4EB19A8BB09836F679081005011B0FE1950000005CA2741524454FAFB1752D7D40F94938C595307ABAE3E568DEE5FEBDD74107F073E0D3E4B984C58B5ACB315BAC4F8D769F39C28CE0A0ED66F60F1D19BACDD36600
 ag debug disable

Can you help me please? Thanks

emnoc · ‎07-30-2014

With out seeing your configuration it' s hard to make a proper diagnostic. Can you post the cisco/fgt side of things? Your failing at IKE so it could be alot of things.

PCNSE

NSE

StrongSwan

Nihas · ‎08-07-2014

I had a similar log few months back. But the other end had one sonicwall. It was a configuration mismatch in my case, pfs was not enabled on Sonicwall Not sure about your case, Cross check all the parameters ..

Nihas [\b]

Warren_Olson_FTNT · ‎08-07-2014

ignoring unencrypted PAYLOAD-MALFORMED message

This is almost always the phase1 algorithms not matching up.