ISSUES WITH SITE TO SITE IPSEC (Juniper-Fortigate)

[VEER]

FGT90D********** # ike 0:Juniper:Juniper: IPsec SA connect 5 200.2.185.178->194.209.69.10:0 ike 0:Juniper:Juniper: using existing connection ike 0:Juniper:Juniper: config found ike 0:Juniper: request is on the queue ike 0:Juniper:11: out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ike 0:Juniper:11: sent IKE msg (P2_RETRANSMIT): 200.2.185.178:500->194.209.69.10:500, len=588, id=30bdb4cb6c55c10e/564db28f86a3a614:d436c4a7 ike 0:Juniper:Juniper: IPsec SA connect 5 200.2.185.178->194.209.69.10:0 ike 0:Juniper:Juniper: using existing connection ike 0:Juniper:Juniper: config found ike 0:Juniper: request is on the queue ike shrank heap by 131072 bytes ike 0: comes 200.7.151.56:4500->200.2.185.178:4500,ifindex=5.... ike 0: IKEv1 exchange=Informational id=65079dbeb9b2b5ce/fea0a1649873ed54:f2fc165d len=108 ike 0: in 65079DBEB9B2B5CEFEA0A1649873ED5408100501F2FC165D0000006C608E931ED6C28708EE877F84168655A71269FBD672A3E6BDD9B1534E07D36F1242D25A321CA748B55E552A6498528A762ABF0BB9F086D41834187B82F984508D1FDFC3E29286C8FF49833A845494C43E ike 0:Juniper:Juniper: IPsec SA connect 5 200.2.185.178->194.209.69.10:0 ike 0:Juniper:Juniper: using existing connection ike 0:Juniper:Juniper: config found ike 0:Juniper: request is on the queue ike 0: comes 200.7.151.56:4500->200.2.185.178:4500,ifindex=5.... ike 0: IKEv1 exchange=Informational id=65079dbeb9b2b5ce/fea0a1649873ed54:c8e874bf len=108 ike 0: in 65079DBEB9B2B5CEFEA0A1649873ED5408100501C8E874BF0000006CD709C506F0FAAABB211579956670410497C573EA264B26EC99B6DAF8B85C0B31F12B62D960F22C2DA7BC2B71F6A5DCE0103F8D4645CE1EE3BBDBE21E229FA67DE0C40D1F195EA5862DE64AF858979BF0 ike 0:Juniper:Juniper: IPsec SA connect 5 200.2.185.178->194.209.69.10:0 ike 0:Juniper:Juniper: using existing connection ike 0:Juniper:Juniper: config found ike 0:Juniper: request is on the queue ike 0: comes 200.7.151.56:4500->200.2.185.178:4500,ifindex=5.... ike 0: IKEv1 exchange=Informational id=65079dbeb9b2b5ce/fea0a1649873ed54:a9176244 len=108 ike 0: in 65079DBEB9B2B5CEFEA0A1649873ED5408100501A91762440000006CD824CC96BC61146A03108ECE7EF1A01BB12B943425FD16093FB304AC61937AA80BD4C52486662A1B0878633E36E7262639609BD63D313745075C9B709C88276E6F36484482680092F50163046F3219EA ike 0:Juniper:11: out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ike 0:Juniper:11: sent IKE msg (P2_RETRANSMIT): 200.2.185.178:500->194.209.69.10:500, len=588, id=30bdb4cb6c55c10e/564db28f86a3a614:d436c4a7 ike 0:Juniper:Juniper: IPsec SA connect 5 200.2.185.178->194.209.69.10:0 ike 0:Juniper:Juniper: using existing connection ike 0:Juniper:Juniper: config found ike 0:Juniper: request is on the queue ike 0: comes 200.7.151.56:4500->200.2.185.178:4500,ifindex=5.... ike 0: IKEv1 exchange=Informational id=65079dbeb9b2b5ce/fea0a1649873ed54:8819efdd len=108 ike 0: in 65079DBEB9B2B5CEFEA0A1649873ED54081005018819EFDD0000006CC2B94059F8504D637FB6BB38D91A844B8EFBFA71FA15049F76A20AD2DEB82319E9ACF98089814C6E514F10B1645F8F9A3D5378949C6DA40DE8449787C1D0343AB4F94508BA42F16AD2315C7ABAFAB24B ike 0:Juniper:Juniper: IPsec SA connect 5 200.2.185.178->194.209.69.10:0 ike 0:Juniper:Juniper: using existing connection ike 0:Juniper:Juniper: config found ike 0:Juniper: request is on the queue ike 0: comes 200.7.151.56:4500->200.2.185.178:4500,ifindex=5.... ike 0: IKEv1 exchange=Informational id=65079dbeb9b2b5ce/fea0a1649873ed54:ea92acaf len=108 ike 0: in 65079DBEB9B2B5CEFEA0A1649873ED5408100501EA92ACAF0000006CD71E739B9B9310D3E6409152A3CFEC12FCE982E24485B5730E996DCC422121F286D58BF8E85594550C956121B9CF9A66740008ABC61AF06BA97DF27CC9780354A88E1677F8980D2CE5193FB0444224D4 ike 0:Juniper:Juniper: IPsec SA connect 5 200.2.185.178->194.209.69.10:0 ike 0:Juniper:Juniper: using existing connection ike 0:Juniper:Juniper: config found ike 0:Juniper: request is on the queue ike 0: comes 200.7.151.56:4500->200.2.185.178:4500,ifindex=5.... ike 0: IKEv1 exchange=Informational id=65079dbeb9b2b5ce/fea0a1649873ed54:8bbb3f20 len=108 ike 0: in 65079DBEB9B2B5CEFEA0A1649873ED54081005018BBB3F200000006C7F9F49C880E33EF4C3B9D87CAEA5E7BEA1C4134D8D4F7BE4759783E41AE31228609F5B428AA54F7F3E633260322F7CA7A2E3360C8FE4E81A6ABB95F158FB297FAE0CE9D1252AC5C1F64215097C315BBB ike 0:Juniper:Juniper: IPsec SA connect 5 200.2.185.178->194.209.69.10:0 ike 0:Juniper:Juniper: using existing connection ike 0:Juniper:Juniper: config found ike 0:Juniper: request is on the queue ike 0: comes 200.7.151.56:4500->200.2.185.178:4500,ifindex=5.... ike 0: IKEv1 exchange=Informational id=65079dbeb9b2b5ce/fea0a1649873ed54:df8a0b7b len=108 ike 0: in 65079DBEB9B2B5CEFEA0A1649873ED5408100501DF8A0B7B0000006CA4B04EE408C7D2A76FF0DDEE6C786A7C787AFC0320D2330C13DFA3A53C84331BE0B27319AB1F97CA7DB01167ED5278DA8E71C696F556A51CDC55DCA79934F00F9E440724FCDF94FF5F3D17EBC9C918AD ike 0:Juniper:Juniper: IPsec SA connect 5 200.2.185.178->194.209.69.10:0 ike 0:Juniper:Juniper: using existing connection ike 0:Juniper:Juniper: config found ike 0:Juniper: request is on the queue ike 0: comes 200.7.151.56:4500->200.2.185.178:4500,ifindex=5.... ike 0: IKEv1 exchange=Informational id=65079dbeb9b2b5ce/fea0a1649873ed54:c8733472 len=108 ike 0: in 65079DBEB9B2B5CEFEA0A1649873ED5408100501C87334720000006C67EA9BB0F032AF6B80F70737F92591AA7AB2BA8E8A95A79430066BDDA55244C023EEE3AC40C00657EA3300C05153B9082192CBCFDEB98EDD3DE06FC57C6B6164939BC4A1B5F84E969CC57C9F00FF2475 ike 0:Juniper:Juniper: IPsec SA connect 5 200.2.185.178->194.209.69.10:0 ike 0:Juniper:Juniper: using existing connection ike 0:Juniper:Juniper: config found ike 0:Juniper: request is on the queue ike 0: comes 200.7.151.56:4500->200.2.185.178:4500,ifindex=5.... ike 0: IKEv1 exchange=Informational id=65079dbeb9b2b5ce/fea0a1649873ed54:f20aee82 len=108 ike 0: in 65079DBEB9B2B5CEFEA0A1649873ED5408100501F20AEE820000006C8619B0F0052DD5B6C2F83A5C59F761768A76CA6E5ACE847CC4F3B90F1A8EBBC0A1F253F78B3B686A1BD58389BC00D4F3B36EDF95EBED34F5E648B0319B7788413F3E6FEDE5507F792F4797087CC6DA50 ike 0:Juniper:Juniper: IPsec SA connect 5 200.2.185.178->194.209.69.10:0 ike 0:Juniper:Juniper: using existing connection ike 0:Juniper:Juniper: config found ike 0:Juniper: request is on the queue ike 0:Juniper:11:Juniper:372: quick-mode negotiation failed due to retry timeout ike 0:Juniper:11: send IKE SA delete 30bdb4cb6c55c10e/564db28f86a3a614 ike 0:Juniper:11: enc 30BDB4CB6C55C10E564DB28F86A3A614081005016E30915F0000005C0C000024C2EF0C0962CA77CB2D7AAC92203CC60AA7FC774D5E3E2F75E0603C07375F382B0000001C000000010110000130BDB4CB6C55C10E564DB28F86A3A614 ike 0:Juniper:11: out 30BDB4CB6C55C10E564DB28F86A3A614081005016E30915F0000006CFC262C17120382566159B3EA3FE79529806C927EB03C814162B0E35B9C965657674936A4F8B4174ED8D6C13F7F081CAF9F860E980278EB7736B4FF21EB2FB76FCC1CC0248BB5F68C155E2239FB3E333A ike 0:Juniper:11: sent IKE msg (ISAKMP SA DELETE-NOTIFY): 200.2.185.178:500->194.209.69.10:500, len=108, id=30bdb4cb6c55c10e/564db28f86a3a614:6e30915f ike 0:Juniper: connection expiring due to phase1 down ike 0:Juniper: deleting ike 0:Juniper: deleted ike 0:Juniper: set oper down ike 0:Juniper: schedule auto-negotiate ike 0:Juniper: carrier down ike 0:Juniper: auto-negotiate connection ike 0:Juniper: created connection: 0x453aa68 5 200.2.185.178->194.209.69.10:500. ike 0:Juniper:12: initiator: main mode is sending 1st message... ike 0:Juniper:12: cookie 3f7d9722aafb75a5/0000000000000000 ike 0:Juniper:12: out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ike 0:Juniper:12: sent IKE msg (ident_i1send): 200.2.185.178:500->194.209.69.10:500, len=716, id=3f7d9722aafb75a5/0000000000000000 ike 0: comes 200.7.151.56:4500->200.2.185.178:4500,ifindex=5.... ike 0: IKEv1 exchange=Informational id=65079dbeb9b2b5ce/fea0a1649873ed54:dec255db len=108 ike 0: in 65079DBEB9B2B5CEFEA0A1649873ED5408100501DEC255DB0000006C140B855E67238C902804EDC21B761BCD288A0195676A30AE40064FCAE3DFA52BF5D590FD3BB9AF2D79F0B4917438E7AE23A468C6CDF0A1617E68D051B999826EC9605AF038E9EDBFF55DEA2DEE06D69E ike 0:Juniper:Juniper: IPsec SA connect 5 200.2.185.178->194.209.69.10:0 ike 0:Juniper:Juniper: using existing connection ike 0:Juniper:Juniper: config found ike 0:Juniper:Juniper: IPsec SA connect 5 200.2.185.178->194.209.69.10:500 negotiating ike 0:Juniper:12:Juniper:388: ISAKMP SA still negotiating, queuing quick-mode request ike 0:Juniper:12: out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ike 0:Juniper:12: sent IKE msg (P1_RETRANSMIT): 200.2.185.178:500->194.209.69.10:500, len=716, id=3f7d9722aafb75a5/0000000000000000 ike 0: comes 194.209.69.10:500->200.2.185.178:500,ifindex=5.... ike 0: IKEv1 exchange=Identity Protection id=3f7d9722aafb75a5/f4ecf1b1757c3a8c len=164 ike 0: in 3F7D9722AAFB75A5F4ECF1B1757C3A8C0110020000000000000000A40D00003C00000001000000010000003001010001000000280101000080010007800200048004000E80030001800E0100800B0001000C0004000151800D000020C3289F97EADC9D4F2A9E7A818F1E2AFEC752B352180000001E0600000D000014AFCAD71368A1F1C96B8696FC77570100000000184865617274426561745F4E6F74696679386B0100 ike 0:Juniper:12: initiator: main mode get 1st response... ike 0:Juniper:12: VID unknown (28): 8 ike 0:Juniper:12: VID DPD AFCAD71368A1F1C96B8696FC77570100 ike 0:Juniper:12: DPD negotiated ike 0:Juniper:12: VID unknown (20): AFCAD71368A1F1C96B8696FC77570100 ike 0:Juniper:12: negotiation result ike 0:Juniper:12: proposal id = 1: ike 0:Juniper:12: protocol id = ISAKMP: ike 0:Juniper:12: trans_id = KEY_IKE. ike 0:Juniper:12: encapsulation = IKE/none ike 0:Juniper:12: type=OAKLEY_ENCRYPT_ALG, val=AES_CBC, key-len=256 ike 0:Juniper:12: type=OAKLEY_HASH_ALG, val=SHA2_256. ike 0:Juniper:12: type=AUTH_METHOD, val=PRESHARED_KEY. ike 0:Juniper:12: type=OAKLEY_GROUP, val=MODP2048. ike 0:Juniper:12: ISAKMP SA lifetime=86400 ike 0:Juniper:12: out 3F7D9722AAFB75A5F4ECF1B1757C3A8C0410020000000000000001340A0001041ABB2D64C2F05AD8EFCE3410A21FBD030AE5CC7145243B3050ECC6AF9A5C29AD37A732125BD825318F09D79CD308F2F1215FD653C8A902A38D169667231FDF4B95D90142047061ACBEA819399BA281D5364BD0C9DB1981BDA1DFB60C66AE9854F1AD95A05CCF811CE3F1F2B8D7BCA099098167C334F6D9A0357A12EBA0C6EEF400F90DD4D437B2207D7E936B0BC9321C0CF78154EB0580FF9BAE4A183A64F4D97051916620CD1E7073AE2E7A3FB040B0474BA0C424802463C7E332FF3BE51C8EC6C509B5164187EFABE919B1A08BC27872D0A9F92330E0DF4C341EC41C162F03DDD43A2D8F0ACF89E5B9C5800C144541C0B6605F66F01710940FBAA43ED9A9CD00000014DA5554928A285EC98EF97B9D92AE681A ike 0:Juniper:12: sent IKE msg (ident_i2send): 200.2.185.178:500->194.209.69.10:500, len=308, id=3f7d9722aafb75a5/f4ecf1b1757c3a8c ike 0: comes 194.209.69.10:500->200.2.185.178:500,ifindex=5.... ike 0: IKEv1 exchange=Identity Protection id=3f7d9722aafb75a5/f4ecf1b1757c3a8c len=324 ike 0: in 3F7D9722AAFB75A5F4ECF1B1757C3A8C0410020000000000000001440A0001046D289DDF16EA413567846F3991F487799A18049C420CE017DFFD242008FAF2E6BE2B473BEBA9DA2D0B702EC012F64AE0409D743A1EFEFC52FA1E43F50FAB525A23C235A84FCAA8CFB4D454DB4896CAD4D711653C16047502A953974A8DE9C166A179F89E2834C9DF37A62096A5FABAB43848B8D901819C8F2A6AF107CD10C149003042E3B2F4933013F7D83534F1E6C922FB567DB8C86CF61595CC3D877DD33AF2AAF65E2A975857088632621A77636CA73F54600265167D3407C076212FAA861B766C70A7EAF1CF55C44CF4EBDFE8D632383718E49966BE0D428DA43EEBFD6C717D99F4164AFE58D017EAD8BB0B4E49D06D3893E798583158FEF25CB80C6CCD0000002497EFDCBF40623EE8810BE30ADB7155D61F03090B37013D926DB4784D97BFF8D9 ike 0:Juniper:12: initiator: main mode get 2nd response... ike 0:Juniper:12: nat unavailable ike 0:Juniper:12: ISAKMP SA 3f7d9722aafb75a5/f4ecf1b1757c3a8c key 32:8F87B528B652DFAB8D4334072F5B6D69A847793080971B75722164F4E07AE25C ike 0:Juniper:12: add INITIAL-CONTACT ike 0:Juniper:12: enc 3F7D9722AAFB75A5F4ECF1B1757C3A8C0510020100000000000000680800000C01000000C802B9B20B000024C2FEFC2B89797BB1B82E0AE6E283F1D840C0FF9A191BC82129DB7FCAFCD214F70000001C00000001011060023F7D9722AAFB75A5F4ECF1B1757C3A8C ike 0:Juniper:12: out 3F7D9722AAFB75A5F4ECF1B1757C3A8C05100201000000000000006CF7F62E9F781F759494A0EAFAC1D30DBD6A922E60D21FF1362916DB92D8A12714C076E7293F247EB7254619EEB5BB9BE7B122FB6157D96250146330C2243EF260926FC94E2116ACD3553D3C5DBDFB7201 ike 0:Juniper:12: sent IKE msg (ident_i3send): 200.2.185.178:500->194.209.69.10:500, len=108, id=3f7d9722aafb75a5/f4ecf1b1757c3a8c ike 0: comes 194.209.69.10:500->200.2.185.178:500,ifindex=5.... ike 0: IKEv1 exchange=Identity Protection id=3f7d9722aafb75a5/f4ecf1b1757c3a8c len=92 ike 0: in 3F7D9722AAFB75A5F4ECF1B1757C3A8C05100201000000000000005CEC4AAC90DD4B01FE9CBD4E1425490CFE6DCF4B403AD4424095298BEBD34D08EF9EE85D46ED5829D3F5D99D96DEE0ED757D3C9EDE7153D55063EBC7ACD9315164 ike 0:Juniper:12: initiator: main mode get 3rd response... ike 0:Juniper:12: dec 3F7D9722AAFB75A5F4ECF1B1757C3A8C05100201000000000000005C0800000C011101F4C2D1450A00000024DC4FA5796E02D61FB56BF5D12739AA2A5A7E55A6D8047128E07B936C1DBF550C00000000000000000000000000000000 ike 0:Juniper:12: peer identifier IPV4_ADDR 194.209.69.10 ike 0:Juniper:12: PSK authentication succeeded ike 0:Juniper:12: authentication OK ike 0:Juniper:12: established IKE SA 3f7d9722aafb75a5/f4ecf1b1757c3a8c ike 0:Juniper: set oper up ike 0:Juniper: schedule auto-negotiate ike 0:Juniper:12: initiating pending Quick-Mode negotiations ike 0:Juniper:12: cookie 3f7d9722aafb75a5/f4ecf1b1757c3a8c:db7735a9 ike 0:Juniper:12:Juniper:388: initiator selectors 0 0:10.60.0.0/255.255.0.0:0:0->0:194.209.69.0/255.255.255.0:0:0 ike 0:Juniper:12: enc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ike 0:Juniper:12: out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ike 0:Juniper:12: sent IKE msg (quick_i1send): 200.2.185.178:500->194.209.69.10:500, len=524, id=3f7d9722aafb75a5/f4ecf1b1757c3a8c:db7735a9 ike 0:Juniper: carrier up ike 0: comes 200.7.151.56:4500->200.2.185.178:4500,ifindex=5.... ike 0: IKEv1 exchange=Informational id=65079dbeb9b2b5ce/fea0a1649873ed54:ce8198dd len=108 ike 0: in 65079DBEB9B2B5CEFEA0A1649873ED5408100501CE8198DD0000006C79BC0BDBB8BAB2571B63CB9D784ACBE4FB0EBD0A8E960AEFA1646BCF351735F971618D71504C4CB806B8C423B692A7BD6A862D32C205407FB77BD7D6F5D8D841C9D3B8D920C38C3400E3F7E504D4DEE1 ike 0:Juniper:12: out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ike 0:Juniper:12: sent IKE msg (P2_RETRANSMIT): 200.2.185.178:500->194.209.69.10:500, len=524, id=3f7d9722aafb75a5/f4ecf1b1757c3a8c:db7735a9 ike 0:Juniper:Juniper: IPsec SA connect 5 200.2.185.178->194.209.69.10:0 ike 0:Juniper:Juniper: using existing connection ike 0:Juniper:Juniper: config found ike 0:Juniper: request is on the queue ike 0:Juniper:12: out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ike 0:Juniper:12: sent IKE msg (P2_RETRANSMIT): 200.2.185.178:500->194.209.69.10:500, len=524, id=3f7d9722aafb75a5/f4ecf1b1757c3a8c:db7735a9 ike 0: comes 200.7.151.56:4500->200.2.185.178:4500,ifindex=5.... ike 0: IKEv1 exchange=Informational id=65079dbeb9b2b5ce/fea0a1649873ed54:faeccf72 len=108 ike 0: in 65079DBEB9B2B5CEFEA0A1649873ED5408100501FAECCF720000006C868D4DBFC69A241C5053E4E36EA534FC49A31E1DD69367E54555BDCCA23ADC841AF33B51F69B5C16FAF358BB6C5B45C68689B73167655B1345AD0363CCC7C4A4998012434F2B124A26A6FDADB13C3DAE ike 0:Juniper:Juniper: IPsec SA connect 5 200.2.185.178->194.209.69.10:0 ike 0:Juniper:Juniper: using existing connection ike 0:Juniper:Juniper: config found ike 0:Juniper: request is on the queue ike 0: comes 200.7.151.56:4500->200.2.185.178:4500,ifindex=5.... ike 0: IKEv1 exchange=Informational id=65079dbeb9b2b5ce/fea0a1649873ed54:d61ae11a len=108 ike 0: in 65079DBEB9B2B5CEFEA0A1649873ED5408100501D61AE11A0000006CC7DC8A522E226823C01BC1CF52901E83EA162B1E0A4B0406173C5E2CE84F60C655A6D0155E8416B5B6F81FB1B013050F192FE93BFC97EF0E929E2AC42B24B1D75286503D8E534F7CDF6C1CE65BE75F2E ike 0:Juniper:Juniper: IPsec SA connect 5 200.2.185.178->194.209.69.10:0 ike 0:Juniper:Juniper: using existing connection ike 0:Juniper:Juniper: config found ike 0:Juniper: request is on the queue ike 0:Juniper:12: out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ike 0:Juniper:12: sent IKE msg (P2_RETRANSMIT): 200.2.185.178:500->194.209.69.10:500, len=524, id=3f7d9722aafb75a5/f4ecf1b1757c3a8c:db7735a9 ike 0: comes 200.7.151.56:4500->200.2.185.178:4500,ifindex=5.... ike 0: IKEv1 exchange=Informational id=65079dbeb9b2b5ce/fea0a1649873ed54:b8131dc6 len=108 ike 0: in 65079DBEB9B2B5CEFEA0A1649873ED5408100501B8131DC60000006CD06EC7B8A1FBDE0E6412EA6011265282FC90FCBE21F9F22FB80946E63517B98752C5A05D711FD00306A2F3FB983410E8B823953BA755E669B71BD507854C990BF3749416768FEB21CCADB31B8DC7130A ike 0:Juniper:Juniper: IPsec SA connect 5 200.2.185.178->194.209.69.10:0 ike 0:Juniper:Juniper: using existing connection ike 0:Juniper:Juniper: config found ike 0:Juniper: request is on the queue ike 0: comes 200.7.151.56:4500->200.2.185.178:4500,ifindex=5.... ike 0: IKEv1 exchange=Informational id=65079dbeb9b2b5ce/fea0a1649873ed54:ed2420f8 len=108 ike 0: in 65079DBEB9B2B5CEFEA0A1649873ED5408100501ED2420F80000006C105A2297A30DB2976C421A8F5D711F2F4B2E4AC2D6466C23EA5F7A0FF2737B0C1AF9C870444F6898AF3B13FF6E3D0ADAD4521850C1E7EF464EBE983D99FB94DAF6A8CF7FAD14D00F8D19EE063725C743 ike 0:Juniper:Juniper: IPsec SA connect 5 200.2.185.178->194.209.69.10:0 ike 0:Juniper:Juniper: using existing connection ike 0:Juniper:Juniper: config found ike 0:Juniper: request is on the queue ike 0: comes 200.7.151.56:4500->200.2.185.178:4500,ifindex=5.... ike 0: IKEv1 exchange=Informational id=65079dbeb9b2b5ce/fea0a1649873ed54:ed5d4583 len=108 ike 0: in 65079DBEB9B2B5CEFEA0A1649873ED5408100501ED5D45830000006CF533E29D26F5AA91766B1216A9F4687E8AAC398D2FE53190EEB714B27DF1F8BF40BDF2124328D72EB0AE8C6A3E8F7B7191CAE30777E390F8ABD81D515C6B1CDCF91928C11A6F907F6AD0D49E69626087 ike 0:Juniper:Juniper: IPsec SA connect 5 200.2.185.178->194.209.69.10:0 ike 0:Juniper:Juniper: using existing connection ike 0:Juniper:Juniper: config found ike 0:Juniper: request is on the queue ike 0:Juniper:12: out 3F7D9722AAFB75A5F4ECF1B1757C3A8C08102001DB7735A90000020C4D34364098ED4E4262851D25958198B3E153636649D86DB3A56ED97CCB9447A3C342334F879B67DE8CE97346F633A2A4192CA571564387B0A139BD896DF8DDD845C26FD581A6C22A0CCE782CC9C1C3E6DF288AE18F46F662FAA642A9E21429A76272E7E32C4A5ADC62D73A3C92C10EED92C15FC76D2CD01B2E2190EC442D4959A06EE3E027284B75A20645D860D8B39AF0CB6156C1D649C5ED6F48556BC93D8AB1610D0E1090927FD40225AFCE21609E568B1A2C90ED9B4A374789BD7BA0D008655E88C78352C0C063DBFF9DB2C75AF9E4B70B245BBF6C03DCA1C9B599DA2105A8453F059C1BF372485F12365982E1E02D5ACD026966117FB560CBA63C18845951CD07B0BFE5AFD7AB5F74953EBE656B453B19A158093D6A1B29657C529D6D7976544E578B79F0C96F3D410640E1E2392282911A4DEC05BA95F63936F16E9FBF9CD2F06773384C2BA0276E1D72523772B3D1BC270377C62BFF531DE0BA5811ACDD3A09387E75AE1666EFF5E349F416CD31005CE04EC5C7857E4124D0CF382860B17658797672D1B59369CB2A6CAF6834E17A89CC0AD2FE6FD3AD34E6B3ECEE68ADE8DCF9990F9EDEA9AF150CF93AAF6FCC7FB0D67D0A941381A2E6CAF9D7C1DA9EB46196979EE2CC9448A64C2F5BDDEB68FB1F0845EF39BAC1A990DDC7258C1D41A22E73FC79E5BCCB55D67BD3CB243D ike 0:Juniper:12: sent IKE msg (P2_RETRANSMIT): 200.2.185.178:500->194.209.69.10:500, len=524, id=3f7d9722aafb75a5/f4ecf1b1757c3a8c:db7735a9 ike 0:Juniper:Juniper: IPsec SA connect 5 200.2.185.178->194.209.69.10:0 ike 0:Juniper:Juniper: using existing connection ike 0:Juniper:Juniper: config found ike 0:Juniper: request is on the queue ike 0: comes 200.7.151.56:4500->200.2.185.178:4500,ifindex=5.... ike 0: IKEv1 exchange=Informational id=65079dbeb9b2b5ce/fea0a1649873ed54:d22dfbb3 len=108 ike 0: in 65079DBEB9B2B5CEFEA0A1649873ED5408100501D22DFBB30000006C746CBBEE404A23AD2A59498BF4AF58843F8213A6EA25AD12C602E55FC177506638D77BEF4E9B0C01ABECC123350D1051B01168B26CF75EDF955B724B81405A39ABACF3B16F3EC4459EE995E0FFFEB296 ike 0:Juniper:Juniper: IPsec SA connect 5 200.2.185.178->194.209.69.10:0 ike 0:Juniper:Juniper: using existing connection ike 0:Juniper:Juniper: config found ike 0:Juniper: request is on the queue ike 0: comes 200.7.151.56:4500->200.2.185.178:4500,ifindex=5.... ike 0: IKEv1 exchange=Informational id=65079dbeb9b2b5ce/fea0a1649873ed54:f168e286 len=108 ike 0: in 65079DBEB9B2B5CEFEA0A1649873ED5408100501F168E2860000006C2C3FEB87DCCC969357B3E834A1F983B6A8350794564E8F7DF12380C611AF8070A346E84682DA89CC4C70B87ADA91ACE79DBDBF1E54F2BE65A65B124EF10B357B1115AB2CCE3EC28229A0FFE6D5927F1E ike 0:Juniper:Juniper: IPsec SA connect 5 200.2.185.178->194.209.69.10:0 ike 0:Juniper:Juniper: using existing connection ike 0:Juniper:Juniper: config found ike 0:Juniper: request is on the queue ike 0: comes 200.7.151.56:4500->200.2.185.178:4500,ifindex=5.... ike 0: IKEv1 exchange=Informational id=65079dbeb9b2b5ce/fea0a1649873ed54:d1e5513d len=108 ike 0: in 65079DBEB9B2B5CEFEA0A1649873ED5408100501D1E5513D0000006CF712842816DDAFDBF229159F2655DE68E653FE746CA7DA649F07584E973B30B88558687CDAE1461B25A0A431E27195FC5BDCC370E2CD51FD892D8217E70F842664C32C5F9A2BD21957B3163561D4F6C6 ike 0:Juniper:Juniper: IPsec SA connect 5 200.2.185.178->194.209.69.10:0 ike 0:Juniper:Juniper: using existing connection ike 0:Juniper:Juniper: config found ike 0:Juniper: request is on the queue ike 0: comes 200.7.151.56:4500->200.2.185.178:4500,ifindex=5.... ike 0: IKEv1 exchange=Informational id=65079dbeb9b2b5ce/fea0a1649873ed54:95e2a398 len=108 ike 0: in 65079DBEB9B2B5CEFEA0A1649873ED540810050195E2A3980000006C03A257C7FCC1F2A561E60FF0BD8FD3A9EBAE132342727A20DBA5926489BBED34B40073D78AD11E50BC94CACC35B4FD01E8404C18BD3328C2480BA29CBF7DA7A5C4B9480BB61505673926EB572688C401 ike 0:Juniper:Juniper: IPsec SA connect 5 200.2.185.178->194.209.69.10:0 ike 0:Juniper:Juniper: using existing connection ike 0:Juniper:Juniper: config found ike 0:Juniper: request is on the queue ike 0: comes 200.7.151.56:4500->200.2.185.178:4500,ifindex=5.... ike 0: IKEv1 exchange=Informational id=65079dbeb9b2b5ce/fea0a1649873ed54:af7a507e len=108 ike 0: in 65079DBEB9B2B5CEFEA0A1649873ED5408100501AF7A507E0000006C7FC4A4BEF76504ADA3F954B18B3294AA84338AFEA9DA518D275AE94818E6FDCA9FF83AE788C22A24656C9ED94723C364F89B2F1D593B9B01FC8868F6EEDB096A6AA8BD80C913B2D0319F8C4D12FD7343 ike 0:Juniper:Juniper: IPsec SA connect 5 200.2.185.178->194.209.69.10:0 ike 0:Juniper:Juniper: using existing connection ike 0:Juniper:Juniper: config found ike 0:Juniper: request is on the queue ike 0: comes 200.7.151.56:4500->200.2.185.178:4500,ifindex=5.... ike 0: IKEv1 exchange=Informational id=65079dbeb9b2b5ce/fea0a1649873ed54:cf612130 len=108 ike 0: in 65079DBEB9B2B5CEFEA0A1649873ED5408100501CF6121300000006CABA94404892187FDBD3A999D3F0A21E58DFE74C67AD30D16E63A1E9E2C7F76F9AC25416278B6A660017DBF2EBA379539F157B33284A3EEE1A5DD07F33BC3FFCB4745BAD0C8E5E8CACAEA2BF30BA354F3 ike 0:Juniper:12:Juniper:388: quick-mode negotiation failed due to retry timeout ike 0:Juniper:12: send IKE SA delete 3f7d9722aafb75a5/f4ecf1b1757c3a8c ike 0:Juniper:12: enc 3F7D9722AAFB75A5F4ECF1B1757C3A8C08100501E3D3A5120000005C0C00002409F89274501622951EAEFA139734E3631C32948D21118F3FE1CFD1A73339842D0000001C00000001011000013F7D9722AAFB75A5F4ECF1B1757C3A8C ike 0:Juniper:12: out 3F7D9722AAFB75A5F4ECF1B1757C3A8C08100501E3D3A5120000006CA38FBD44A2278E8ABA4C329D12164224239F2DC3A6191D9C84B04E63E918C58D3AE470F34B41FCA1CBD836EBDE7376CE3B53BFEA673D95AE69081AADB2E075229F95B90E50762D64E1A7C96AFD698817 ike 0:Juniper:12: sent IKE msg (ISAKMP SA DELETE-NOTIFY): 200.2.185.178:500->194.209.69.10:500, len=108, id=3f7d9722aafb75a5/f4ecf1b1757c3a8c:e3d3a512 ike 0:Juniper: connection expiring due to phase1 down ike 0:Juniper: deleting ike 0:Juniper: deleted ike 0:Juniper: set oper down ike 0:Juniper: schedule auto-negotiate ike 0:Juniper: carrier down ike 0:Juniper:Juniper: IPsec SA connect 5 200.2.185.178->194.209.69.10:0 ike 0:Juniper:Juniper: config found ike 0:Juniper: created connection: 0x453aa68 5 200.2.185.178->194.209.69.10:500. ike 0:Juniper: IPsec SA connect 5 200.2.185.178->194.209.69.10:500 negotiating ike 0:Juniper: no suitable ISAKMP SA, queuing quick-mode request and initiating ISAKMP SA negotiation ike 0:Juniper:13: initiator: main mode is sending 1st message... ike 0:Juniper:13: cookie d3210a6aefd4c784/0000000000000000 ike 0:Juniper:13: out D3210A6AEFD4C78400000000000000000110020000000000000002CC0D0001E40000000100000001000001D80101000C0300002801010000800B0001000C00040001518080010007800E008080030001800200048004000E0300002802010000800B0001000C00040001518080010007800E00808003000180020004800400050300002803010000800B0001000C00040001518080010007800E010080030001800200048004000E0300002804010000800B0001000C00040001518080010007800E01008003000180020004800400050300002405010000800B0001000C0004000151808001000580030001800200048004000E0300002406010000800B0001000C000400015180800100058003000180020004800400050300002807010000800B0001000C00040001518080010007800E008080030001800200028004000E0300002808010000800B0001000C00040001518080010007800E00808003000180020002800400050300002809010000800B0001000C00040001518080010007800E010080030001800200028004000E030000280A010000800B0001000C00040001518080010007800E0100800300018002000280040005030000240B010000800B0001000C0004000151808001000580030001800200028004000E000000240C010000800B0001000C000400015180800100058003000180020002800400050D0000144A131C81070358455C5728F20E95452F0D0000147D9419A65310CA6F2C179D9215529D560D000014CD60464335DF21F87CFDB2FC68B6A4480D00001490CB80913EBB696E086381B5EC427B1F0D00001416F6CA16E4A4066D83821A0F0AEAA8620D0000144485152D18B6BBCD0BE8A8469579DDCC0D000014AFCAD71368A1F1C96B8696FC775701000D0000144048B7D56EBCE88525E7DE7F00D6C2D30D0000184048B7D56EBCE88525E7DE7F00D6C2D3C0000000000000148299031757A36082C6A621DE00000000 ike 0:Juniper:13: sent IKE msg (ident_i1send): 200.2.185.178:500->194.209.69.10:500, len=716, id=d3210a6aefd4c784/0000000000000000 ike 0: comes 194.209.69.10:500->200.2.185.178:500,ifindex=5.... ike 0: IKEv1 exchange=Identity Protection id=d3210a6aefd4c784/27ee74e4af85b328 len=164 ike 0: in D3210A6AEFD4C78427EE74E4AF85B3280110020000000000000000A40D00003C00000001000000010000003001010001000000280101000080010007800200048004000E80030001800E0100800B0001000C0004000151800D000020C3289F97EADC9D4F2A9E7A818F1E2AFEC752B352180000001E0600000D000014AFCAD71368A1F1C96B8696FC77570100000000184865617274426561745F4E6F74696679386B0100 ike 0:Juniper:13: initiator: main mode get 1st response... ike 0:Juniper:13: VID unknown (28): 8 ike 0:Juniper:13: VID DPD AFCAD71368A1F1C96B8696FC77570100 ike 0:Juniper:13: DPD negotiated ike 0:Juniper:13: VID unknown (20): AFCAD71368A1F1C96B8696FC77570100 ike 0:Juniper:13: negotiation result ike 0:Juniper:13: proposal id = 1: ike 0:Juniper:13: protocol id = ISAKMP: ike 0:Juniper:13: trans_id = KEY_IKE. ike 0:Juniper:13: encapsulation = IKE/none ike 0:Juniper:13: type=OAKLEY_ENCRYPT_ALG, val=AES_CBC, key-len=256 ike 0:Juniper:13: type=OAKLEY_HASH_ALG, val=SHA2_256. ike 0:Juniper:13: type=AUTH_METHOD, val=PRESHARED_KEY. ike 0:Juniper:13: type=OAKLEY_GROUP, val=MODP2048. ike 0:Juniper:13: ISAKMP SA lifetime=86400 ike 0:Juniper:13: out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ike 0:Juniper:13: sent IKE msg (ident_i2send): 200.2.185.178:500->194.209.69.10:500, len=308, id=d3210a6aefd4c784/27ee74e4af85b328 ike 0: comes 194.209.69.10:500->200.2.185.178:500,ifindex=5.... ike 0: IKEv1 exchange=Identity Protection id=d3210a6aefd4c784/27ee74e4af85b328 len=324 ike 0: in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ike 0:Juniper:13: initiator: main mode get 2nd response... ike 0:Juniper:13: nat unavailable ike 0:Juniper:13: ISAKMP SA d3210a6aefd4c784/27ee74e4af85b328 key 32:CF1BD16629FE12AB1AD4148343EC5BCA2EC756921CE6A47E72D63A70C3E0F593 ike 0:Juniper:13: add INITIAL-CONTACT ike 0:Juniper:13: enc D3210A6AEFD4C78427EE74E4AF85B3280510020100000000000000680800000C01000000C802B9B20B000024F0C1A6F39DD8F9E37C5DB94D4994B497B34BD4E9AFED6D7C859CE854F334CEE80000001C0000000101106002D3210A6AEFD4C78427EE74E4AF85B328 ike 0:Juniper:13: out D3210A6AEFD4C78427EE74E4AF85B32805100201000000000000006C0878E70B2E2296530DF139CB6BFE575284723E3DA65678004BF4418A569CC1CC7E6A6A3307BD5F79BBB479DDEFC35626E87E5E422CCADBAD97087F79A1352341F98DF78BDD44254E307478DBDBC7DB83 ike 0:Juniper:13: sent IKE msg (ident_i3send): 200.2.185.178:500->194.209.69.10:500, len=108, id=d3210a6aefd4c784/27ee74e4af85b328 ike 0: comes 194.209.69.10:500->200.2.185.178:500,ifindex=5.... ike 0: IKEv1 exchange=Identity Protection id=d3210a6aefd4c784/27ee74e4af85b328 len=92 ike 0: in D3210A6AEFD4C78427EE74E4AF85B32805100201000000000000005CE8AF25839109D804170D4B25F824C1E35B527C2080A79F938BFF27E2243AE4CBA559BB4B2FD5D2FCB498170A6BF0621CD57BC8CA7052F5E29882CBC3CE199A7E ike 0:Juniper:13: initiator: main mode get 3rd response... ike 0:Juniper:13: dec D3210A6AEFD4C78427EE74E4AF85B32805100201000000000000005C0800000C011101F4C2D1450A00000024BBB7AD18DB08100E11DFEA539B960AA0BC7DAE256B8716C748965357C2A1398300000000000000000000000000000000 ike 0:Juniper:13: peer identifier IPV4_ADDR 194.209.69.10 ike 0:Juniper:13: PSK authentication succeeded ike 0:Juniper:13: authentication OK ike 0:Juniper:13: established IKE SA d3210a6aefd4c784/27ee74e4af85b328 ike 0:Juniper: set oper up ike 0:Juniper:13: initiating pending Quick-Mode negotiations ike 0:Juniper:13: cookie d3210a6aefd4c784/27ee74e4af85b328:2f8e848d ike 0:Juniper:13:Juniper:402: initiator selectors 0 0:10.60.0.0/255.255.0.0:0:0->0:194.209.69.0/255.255.255.0:0:0 ike 0:Juniper:13: enc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ike 0:Juniper:13: out D3210A6AEFD4C78427EE74E4AF85B328081020012F8E848D0000024C9B033F4E46C08300DE20B7201F8F42EC69B9E5187748A7D6244307299B811D8F8698CE7C409C9FD897FDF37D5FC70EE34B59E04241997C0ECC6EF4BA24BB9348F985955F0A69FC6D224F2964678A0F8B4A4A6920DE6CA6B949F004B45A441CC1D85D882ACBB3E67E70063552F2AAAF369854BE8262E7AD14A7668E3F623DF3E4AF8C6F920B945EE0B3DE4ED56AC70629796ED50AE7F5B8812D194128030ACD9C53D7E477EB86AD41AC09F7F14CA40233D50EABF41AB2EDEE25EC8D7EBB6EADE9C630BAE93E0F18A0F3E56932AB90E7ACA8C23B2390D80257B6FB414C6A5FD70BCFE4E174AB1895CD5CBA6BA250D56CEDF7368A2FFE0A28467B1FF2B98129BF8820FF3556AFC092C7359728237B35C7DEAE594BBCBBCAA6A4E1BA2389489FF5FADB455CFCB40A3F4FF881FDE4FFF43FAFE2ACA09E6D04312B1F3D990DA1A4B241623079C07ADD548D6B3C5A52647CF5981A1A2B9A7E45AEA0B56BA6A6FE7668F78CB169C662D5B53AB8CD1E3339B2E025001E885F2A1FBD1D9B9816B57932B019339ECD24E300F41A9CC0D47C4CDEEB7C801365028F2E7884B5D32BCE9BB667EB9A69701F8765CD8BFBDCB8021A4E8F61DEF6E312D90D5C920E635C20A70BAAF1CA48431835412308D2F36A3BB38D7AEED17FE9E296B7B5387FA62B4BF9F71A0FE1ABDBAD876FE217B5CCB651DEC47CB3656C74501A8D1FCEC4B9C1C8AC06C5883A50DD6775D1336F29F17DEF596C6918717181F74A58AFBE693F35978107A8176849C48EEE22610612758889B2F48579 ike 0:Juniper:13: sent IKE msg (quick_i1send): 200.2.185.178:500->194.209.69.10:500, len=588, id=d3210a6aefd4c784/27ee74e4af85b328:2f8e848d ike 0:Juniper: carrier up ike 0: comes 200.7.151.56:4500->200.2.185.178:4500,ifindex=5.... ike 0: IKEv1 exchange=Informational id=65079dbeb9b2b5ce/fea0a1649873ed54:963ca2d1 len=108 ike 0: in 65079DBEB9B2B5CEFEA0A1649873ED5408100501963CA2D10000006CE33435B52232A8AB1D05CD4EB4834FB45163B77F44A9A3B3727BA666F4D3976C3A1AFC1DC956F839586AE3BD53F95D41DEDFCE28C651D36761010362F4228CB27B37430F32439C522451E48B9E25C59E ike 0:Juniper:13: out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ike 0:Juniper:13: sent IKE msg (P2_RETRANSMIT): 200.2.185.178:500->194.209.69.10:500, len=588, id=d3210a6aefd4c784/27ee74e4af85b328:2f8e848d ike 0:Juniper:Juniper: IPsec SA connect 5 200.2.185.178->194.209.69.10:0 ike 0:Juniper:Juniper: using existing connection ike 0:Juniper:Juniper: config found ike 0:Juniper: request is on the queue ike 0:Juniper:13: out D3210A6AEFD4C78427EE74E4AF85B328081020012F8E848D0000024C9B033F4E46C08300DE20B7201F8F42EC69B9E5187748A7D6244307299B811D8F8698CE7C409C9FD897FDF37D5FC70EE34B59E04241997C0ECC6EF4BA24BB9348F985955F0A69FC6D224F2964678A0F8B4A4A6920DE6CA6B949F004B45A441CC1D85D882ACBB3E67E70063552F2AAAF369854BE8262E7AD14A7668E3F623DF3E4AF8C6F920B945EE0B3DE4ED56AC70629796ED50AE7F5B8812D194128030ACD9C53D7E477EB86AD41AC09F7F14CA40233D50EABF41AB2EDEE25EC8D7EBB6EADE9C630BAE93E0F18A0F3E56932AB90E7ACA8C23B2390D80257B6FB414C6A5FD70BCFE4E174AB1895CD5CBA6BA250D56CEDF7368A2FFE0A28467B1FF2B98129BF8820FF3556AFC092C7359728237B35C7DEAE594BBCBBCAA6A4E1BA2389489FF5FADB455CFCB40A3F4FF881FDE4FFF43FAFE2ACA09E6D04312B1F3D990DA1A4B241623079C07ADD548D6B3C5A52647CF5981A1A2B9A7E45AEA0B56BA6A6FE7668F78CB169C662D5B53AB8CD1E3339B2E025001E885F2A1FBD1D9B9816B57932B019339ECD24E300F41A9CC0D47C4CDEEB7C801365028F2E7884B5D32BCE9BB667EB9A69701F8765CD8BFBDCB8021A4E8F61DEF6E312D90D5C920E635C20A70BAAF1CA48431835412308D2F36A3BB38D7AEED17FE9E296B7B5387FA62B4BF9F71A0FE1ABDBAD876FE217B5CCB651DEC47CB3656C74501A8D1FCEC4B9C1C8AC06C5883A50DD6775D1336F29F17DEF596C6918717181F74A58AFBE693F35978107A8176849C48EEE22610612758889B2F48579 ike 0:Juniper:13: sent IKE msg (P2_RETRANSMIT): 200.2.185.178:500->194.209.69.10:500, len=588, id=d3210a6aefd4c784/27ee74e4af85b328:2f8e848d ike 0: comes 200.7.151.56:4500->200.2.185.178:4500,ifindex=5.... ike 0: IKEv1 exchange=Informational id=65079dbeb9b2b5ce/fea0a1649873ed54:c70543ff len=108 ike 0: in 65079DBEB9B2B5CEFEA0A1649873ED5408100501C70543FF0000006C73A81875EEA0D94CAE4D056DCEA8CE73E7696CA3703EF11CB8D5954E3CDFBB37A8FCBA9F959640A0313C8E57C1FE8ADC897F3E9CA4C58D3B3B504F16DA292E61BF060655C64945F6E309500872D2DB25 ike 0:Juniper:Juniper: IPsec SA connect 5 200.2.185.178->194.209.69.10:0 ike 0:Juniper:Juniper: using existing connection ike 0:Juniper:Juniper: config found ike 0:Juniper: request is on the queue ike 0: comes 200.7.151.56:4500->200.2.185.178:4500,ifindex=5.... ike 0: IKEv1 exchange=Informational id=65079dbeb9b2b5ce/fea0a1649873ed54:9f585dc3 len=108 ike 0: in 65079DBEB9B2B5CEFEA0A1649873ED54081005019F585DC30000006CA2B21DC850B0DFCAB96F90FD77B0DBC33AB95E5814230D3527B27E096BEA9F7332E284ACC99DC117CCB1F795D108AA0D260AAEA38D6472A87677125B6E6208D99D759ADA12900519C8C4E3E69EAC8681 ike 0:Juniper:13: out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ike 0:Juniper:13: sent IKE msg (P2_RETRANSMIT): 200.2.185.178:500->194.209.69.10:500, len=588, id=d3210a6aefd4c784/27ee74e4af85b328:2f8e848d ike 0:Juniper:Juniper: IPsec SA connect 5 200.2.185.178->194.209.69.10:0 ike 0:Juniper:Juniper: using existing connection ike 0:Juniper:Juniper: config found ike 0:Juniper: request is on the queue

[Toshi_Esumi · Accepted solution]

It's just saying Phase1 negotiation was competed successfully, but FG can't get any response back from Juniper for phase2/Quick mode negotiation. Check phase2 config on both sides (if SRX under [security ipsec vpn] for Juniper side).

[Toshi_Esumi · Accepted solution]

It's just saying Phase1 negotiation was competed successfully, but FG can't get any response back from Juniper for phase2/Quick mode negotiation. Check phase2 config on both sides (if SRX under [security ipsec vpn] for Juniper side).

[rwpatterson · Accepted solution]

Since this is a public forum, you should obfuscate the Fortigate serial number from your post.

[emnoc]

OP, here's a IKEv2 to FGT  http://socpuppet.blogspot.com/2013/09/vpn-ikev2-juniper-to-fortigate-routevpn.html

You can change this to IKEv1 pretty easily. Your logs doesn't tell  us to much. The  RT-base-vpn is pretty easy.

[VEER]

Hi guys, a mismatch in phase2 configurations on both sides resulted in this issue. The juniper side of the tunnel had the wrong remote address configured.

[emnoc]

hint:   if you set  the   phase2  proxy-id to 0.0.0.0/0 for a route-base on the SRX and FGT  it will negotiate and the phase2 tunnel   ipsec SAs will establish. The 0.0.0.0/0 works in FGT and in the SRX the same way.

ken

[VEER]

Thanks for the hint, but I didn't have any access to the SRX.

There seems to be an issue still. The tunnel is Up and active, however I am not able to access the environment behind the SRX. I am able to ping from the FGT to the destination, but unable to ping from a PC behind the FGT to the destination. Any clues as to what might be causing this issue?

[saneeshpv_FTNT]

1.) Check for Firewall Policy allow traffic from Inside to VPN interface

2.) Check for routes to Destination using the Tunnel Interface configured correctly

3.) Take the debug flow and make sure packet enter the IPSEC tunnel successfully or not.

# diag debug reset

   # diag debug disable

   # diag debug flow show console en

   # diag debug flow show function en

   # diag debug console timestamp en

   # diag debug flow filter daddr <Destination-IP>

   # diag debug flow trace start 1000

   # diag debug enable

To disable

   # diag debug reset

   # diag debug disable

4.) Also check the VPN statistics  to make sure traffic is getting Encrypted on the Fortigate.

# diagnose vpn tunnel list name <Tunnel-Name>

Above steps will help you ensure traffic is entering the IPSEC Tunnel or not. If everything is fine here check on the Juniper.

If you don't see any traffic being encrypted and send to the tunnel please open ticket for assistance.

Regards

Saneesh