Problem with ipsec tunnel - payload-malformed

[VEER]

# ike 0:SMS_VPN:5992: out 342E6F0B27AFEAA0D82BFE965E8C0E68051002010000000000000064D9F12BCED6F0ACE221A7391988A5F38E8115CAC54BED6219F3348EF3A91D6EAECB20F969755D914697C4D06B3354AB3A7072886F4542AE9308A9D15BA783751087D750FD92724A4C ike 0:SMS_VPN:5992: sent IKE msg (P1_RETRANSMIT): 200.7.150.150:500->200.2.166.167:500, len=100, id=342e6f0b27afeaa0/d82bfe965e8c0e68 ike 0:SMS_VPN:SMS_VPN: IPsec SA connect 6 200.7.150.150->200.2.166.167:0 ike 0:SMS_VPN:SMS_VPN: using existing connection ike 0:SMS_VPN:SMS_VPN: config found ike 0:SMS_VPN: request is on the queue ike 0:SMS_VPN:SMS_VPN: IPsec SA connect 6 200.7.150.150->200.2.166.167:0 ike 0:SMS_VPN:SMS_VPN: using existing connection ike 0:SMS_VPN:SMS_VPN: config found ike 0:SMS_VPN: request is on the queue ike 0:SMS_VPN:SMS_VPN: IPsec SA connect 6 200.7.150.150->200.2.166.167:0 ike 0:SMS_VPN:SMS_VPN: using existing connection ike 0:SMS_VPN:SMS_VPN: config found ike 0:SMS_VPN: request is on the queue ike 0:SMS_VPN:SMS_VPN: IPsec SA connect 6 200.7.150.150->200.2.166.167:0 ike 0:SMS_VPN:SMS_VPN: using existing connection ike 0:SMS_VPN:SMS_VPN: config found ike 0:SMS_VPN: request is on the queue ike 0:SMS_VPN:SMS_VPN: IPsec SA connect 6 200.7.150.150->200.2.166.167:0 ike 0:SMS_VPN:SMS_VPN: using existing connection ike 0:SMS_VPN:SMS_VPN: config found ike 0:SMS_VPN: request is on the queue ike 0:SMS_VPN:SMS_VPN: IPsec SA connect 6 200.7.150.150->200.2.166.167:0 ike 0:SMS_VPN:SMS_VPN: using existing connection ike 0:SMS_VPN:SMS_VPN: config found ike 0:SMS_VPN: request is on the queue ike 0:SMS_VPN:5992: out 342E6F0B27AFEAA0D82BFE965E8C0E68051002010000000000000064D9F12BCED6F0ACE221A7391988A5F38E8115CAC54BED6219F3348EF3A91D6EAECB20F969755D914697C4D06B3354AB3A7072886F4542AE9308A9D15BA783751087D750FD92724A4C ike 0:SMS_VPN:5992: sent IKE msg (P1_RETRANSMIT): 200.7.150.150:500->200.2.166.167:500, len=100, id=342e6f0b27afeaa0/d82bfe965e8c0e68 ike 0:SMS_VPN:SMS_VPN: IPsec SA connect 6 200.7.150.150->200.2.166.167:0 ike 0:SMS_VPN:SMS_VPN: using existing connection ike 0:SMS_VPN:SMS_VPN: config found ike 0:SMS_VPN: request is on the queue ike 0:SMS_VPN:SMS_VPN: IPsec SA connect 6 200.7.150.150->200.2.166.167:0 ike 0:SMS_VPN:SMS_VPN: using existing connection ike 0:SMS_VPN:SMS_VPN: config found ike 0:SMS_VPN: request is on the queue ike 0:SMS_VPN:SMS_VPN: IPsec SA connect 6 200.7.150.150->200.2.166.167:0 ike 0:SMS_VPN:SMS_VPN: using existing connection ike 0:SMS_VPN:SMS_VPN: config found ike 0:SMS_VPN: request is on the queue ike 0:SMS_VPN:SMS_VPN: IPsec SA connect 6 200.7.150.150->200.2.166.167:0 ike 0:SMS_VPN:SMS_VPN: using existing connection ike 0:SMS_VPN:SMS_VPN: config found ike 0:SMS_VPN: request is on the queue ike 0:SMS_VPN:5992: negotiation timeout, deleting ike 0:SMS_VPN: connection expiring due to phase1 down ike 0:SMS_VPN: deleting ike 0:SMS_VPN: deleted ike 0:SMS_VPN: schedule auto-negotiate ike 0:SMS_VPN:SMS_VPN: IPsec SA connect 6 200.7.150.150->200.2.166.167:0 ike 0:SMS_VPN:SMS_VPN: config found ike 0:SMS_VPN: created connection: 0x45f7d70 6 200.7.150.150->200.2.166.167:500. ike 0:SMS_VPN: IPsec SA connect 6 200.7.150.150->200.2.166.167:500 negotiating ike 0:SMS_VPN: no suitable ISAKMP SA, queuing quick-mode request and initiating ISAKMP SA negotiation ike 0:SMS_VPN:5993: initiator: main mode is sending 1st message... ike 0:SMS_VPN:5993: cookie 08576175255bd0df/0000000000000000 ike 0:SMS_VPN:5993: out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ike 0:SMS_VPN:5993: sent IKE msg (ident_i1send): 200.7.150.150:500->200.2.166.167:500, len=288, id=08576175255bd0df/0000000000000000 ike 0: comes 200.2.166.167:500->200.7.150.150:500,ifindex=6.... ike 0: IKEv1 exchange=Identity Protection id=08576175255bd0df/20adaa2f2bbe93d8 len=128 ike 0: in 08576175255BD0DF20ADAA2F2BBE93D80110020000000000000000800D00003800000001000000010000002C01010001000000240101000080010005800200028004000280030001800B0001000C0004000151800D0000144A131C81070358455C5728F20E95452F000000184048B7D56EBCE88525E7DE7F00D6C2D3C0000000 ike 0:SMS_VPN:5993: initiator: main mode get 1st response... ike 0:SMS_VPN:5993: VID RFC 3947 4A131C81070358455C5728F20E95452F ike 0:SMS_VPN:5993: VID FRAGMENTATION 4048B7D56EBCE88525E7DE7F00D6C2D3C0000000 ike 0:SMS_VPN:5993: selected NAT-T version: RFC 3947 ike 0:SMS_VPN:5993: negotiation result ike 0:SMS_VPN:5993: proposal id = 1: ike 0:SMS_VPN:5993: protocol id = ISAKMP: ike 0:SMS_VPN:5993: trans_id = KEY_IKE. ike 0:SMS_VPN:5993: encapsulation = IKE/none ike 0:SMS_VPN:5993: type=OAKLEY_ENCRYPT_ALG, val=3DES_CBC. ike 0:SMS_VPN:5993: type=OAKLEY_HASH_ALG, val=SHA. ike 0:SMS_VPN:5993: type=AUTH_METHOD, val=PRESHARED_KEY. ike 0:SMS_VPN:5993: type=OAKLEY_GROUP, val=MODP1024. ike 0:SMS_VPN:5993: ISAKMP SA lifetime=86400 ike 0:SMS_VPN:5993: out 08576175255BD0DF20ADAA2F2BBE93D80410020000000000000000E40A0000844BFF75B8A197C6B44769013E09052E8EAF934D2C889441E16D33EF2F563730ACA9B4DF6378E64A65C21176782DD166D599B12BD6D0702C83447B67ECFA15736E0ED7824477D1FC36A6135A9263AA6C07868FD7303811732053B4604480D1DE5E9EE745B03C75F3D8A0F0B870ECA9ABE186B61D65B8ABBEC35B9421BBC8C713D9140000146EEAC545C31824F811594CFE5D958D5B140000180C02426EB9D375D026EFD92F6B678D7DD41B4ED600000018C9B8C8A705DAE5A73F5CB416FE5F7B03A8DB3493 ike 0:SMS_VPN:5993: sent IKE msg (ident_i2send): 200.7.150.150:500->200.2.166.167:500, len=228, id=08576175255bd0df/20adaa2f2bbe93d8 ike 0: comes 200.2.166.167:500->200.7.150.150:500,ifindex=6.... ike 0: IKEv1 exchange=Identity Protection id=08576175255bd0df/20adaa2f2bbe93d8 len=304 ike 0: in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ike 0:SMS_VPN:5993: initiator: main mode get 2nd response... ike 0:SMS_VPN:5993: VID CISCO-UNITY 12F5F28C457168A9702D9FE274CC0100 ike 0:SMS_VPN:5993: peer supports UNITY ike 0:SMS_VPN:5993: VID draft-ietf-ipsra-isakmp-xauth-06.txt 09002689DFD6B712 ike 0:SMS_VPN:5993: VID unknown (16): 09002689DFD6B712 ike 0:SMS_VPN:5993: VID unknown (16): 09002689DFD6B712 ike 0:SMS_VPN:5993: received NAT-D payload type 20 ike 0:SMS_VPN:5993: received NAT-D payload type 20 ike 0:SMS_VPN:5993: NAT not detected ike 0:SMS_VPN:5993: ISAKMP SA 08576175255bd0df/20adaa2f2bbe93d8 key 24:9D87DDC6CD53C8336F754124A8DAE399DC267F241458A8CA ike 0:SMS_VPN:5993: add INITIAL-CONTACT ike 0:SMS_VPN:5993: enc 08576175255BD0DF20ADAA2F2BBE93D805100201000000000000005C0800000C01000000C80796960B000018A32E52B2408637079FB9D484E1A95A714AFEA2570000001C000000010110600208576175255BD0DF20ADAA2F2BBE93D8 ike 0:SMS_VPN:5993: out 08576175255BD0DF20ADAA2F2BBE93D80510020100000000000000648E21A86ACCD4475B6D7F4FDC954C533A89EB76CF3735EB7B90A0B8FAD8A1A9F57DB469F9B152B335AF479E14D4E1554C3CC30FD09D8447C275463A69871AB9BB6F9C5A5F05A4F35A ike 0:SMS_VPN:5993: sent IKE msg (ident_i3send): 200.7.150.150:500->200.2.166.167:500, len=100, id=08576175255bd0df/20adaa2f2bbe93d8 ike 0: comes 200.2.166.167:500->200.7.150.150:500,ifindex=6.... ike 0: IKEv1 exchange=Informational id=08576175255bd0df/20adaa2f2bbe93d8 len=112 ike 0: in 08576175255BD0DF20ADAA2F2BBE93D80B1005000000000000000070000000540000000100000010FF74BECF8AD6F9BBA968521D0094A0912D63ED50393EFFBCAD4F62F5DC2C2E77DED5AD930C1B75E0F9A0964B465E35499BF11DBD33E3A028C2F2BE2455B34A851EAC964C4D6DB5EC ike 0:SMS_VPN:5993: ignoring unencrypted PAYLOAD-MALFORMED message from 200.2.166.167:500. ike 0:SMS_VPN:5993: out 08576175255BD0DF20ADAA2F2BBE93D80510020100000000000000648E21A86ACCD4475B6D7F4FDC954C533A89EB76CF3735EB7B90A0B8FAD8A1A9F57DB469F9B152B335AF479E14D4E1554C3CC30FD09D8447C275463A69871AB9BB6F9C5A5F05A4F35A ike 0:SMS_VPN:5993: sent IKE msg (P1_RETRANSMIT): 200.7.150.150:500->200.2.166.167:500, len=100, id=08576175255bd0df/20adaa2f2bbe93d8 ike 0: comes 200.2.166.167:500->200.7.150.150:500,ifindex=6.... ike 0: IKEv1 exchange=Identity Protection id=08576175255bd0df/20adaa2f2bbe93d8 len=304 ike 0: in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ike 0:SMS_VPN:5993: retransmission, re-send last message ike 0:SMS_VPN:5993: out 08576175255BD0DF20ADAA2F2BBE93D80510020100000000000000648E21A86ACCD4475B6D7F4FDC954C533A89EB76CF3735EB7B90A0B8FAD8A1A9F57DB469F9B152B335AF479E14D4E1554C3CC30FD09D8447C275463A69871AB9BB6F9C5A5F05A4F35A ike 0:SMS_VPN:5993: sent IKE msg (retransmit): 200.7.150.150:500->200.2.166.167:500, len=100, id=08576175255bd0df/20adaa2f2bbe93d8 ike 0: comes 200.2.166.167:500->200.7.150.150:500,ifindex=6.... ike 0: IKEv1 exchange=Identity Protection id=08576175255bd0df/20adaa2f2bbe93d8 len=304 ike 0: in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ike 0:SMS_VPN:5993: retransmission, re-send last message ike 0:SMS_VPN:5993: out 08576175255BD0DF20ADAA2F2BBE93D80510020100000000000000648E21A86ACCD4475B6D7F4FDC954C533A89EB76CF3735EB7B90A0B8FAD8A1A9F57DB469F9B152B335AF479E14D4E1554C3CC30FD09D8447C275463A69871AB9BB6F9C5A5F05A4F35A ike 0:SMS_VPN:5993: sent IKE msg (retransmit): 200.7.150.150:500->200.2.166.167:500, len=100, id=08576175255bd0df/20adaa2f2bbe93d8 ike 0: comes 200.2.166.167:500->200.7.150.150:500,ifindex=6.... ike 0: IKEv1 exchange=Identity Protection id=08576175255bd0df/20adaa2f2bbe93d8 len=304 ike 0: in 08576175255BD0DF20ADAA2F2BBE93D80410020000000000000001300A00008402C7EF5140BE1F8F8936A58D529C7C1973FF905991DB810736EDB3B9CEE661FFEF34F5945ECBA792920FD95B1548FAC54A44BAA7E6225E07A6A7E48A0DD49BA57CA47F205030930F8C08A69D0B58CC4DEF63AA66E8AB9BC57BE70DECF06C9962DFFD84D354A38E3BEEEC46D7B8799E581C96F3669DA43FCB7E2294A69F1BF6D60D00001879F393DA26685AB32AEBF92F271AA5B9BC840E1F0D00001412F5F28C457168A9702D9FE274CC01000D00000C09002689DFD6B7120D000014D56A0D322BBF93D8D58788BABA20B1E2140000141F07F70EAA6514D3B0FA96542A50010014000018C9B8C8A705DAE5A73F5CB416FE5F7B03A8DB3493000000180C02426EB9D375D026EFD92F6B678D7DD41B4ED6 ike 0:SMS_VPN:5993: retransmission, re-send last message ike 0:SMS_VPN:5993: out 08576175255BD0DF20ADAA2F2BBE93D80510020100000000000000648E21A86ACCD4475B6D7F4FDC954C533A89EB76CF3735EB7B90A0B8FAD8A1A9F57DB469F9B152B335AF479E14D4E1554C3CC30FD09D8447C275463A69871AB9BB6F9C5A5F05A4F35A ike 0:SMS_VPN:5993: sent IKE msg (retransmit): 200.7.150.150:500->200.2.166.167:500, len=100, id=08576175255bd0df/20adaa2f2bbe93d8 ike 0: comes 200.2.166.167:500->200.7.150.150:500,ifindex=6.... ike 0: IKEv1 exchange=Informational id=08576175255bd0df/20adaa2f2bbe93d8:a773440a len=84 ike 0: in 08576175255BD0DF20ADAA2F2BBE93D808100501A773440A000000542D1A1F262F6434CFE0317673C9927C7DA1A3DC72BDEF7AE329F5D701AA8ADA2BD661B481AE5F2D288EE3C5DD5D8A322509707D8DF5F06660 ike 0:SMS_VPN:5993: dec 08576175255BD0DF20ADAA2F2BBE93D808100501A773440A00000054512FA71055C86DF8AA5C1BFDC2E4164ACF6E8C67EAFED8F9A3CDB44BDDEA34CECC68284693504AC99AF6E03A2801F2A7C2FAB62086BEE42D ike 0:SMS_VPN:SMS_VPN: IPsec SA connect 6 200.7.150.150->200.2.166.167:0 ike 0:SMS_VPN:SMS_VPN: using existing connection ike 0:SMS_VPN:SMS_VPN: config found ike 0:SMS_VPN: request is on the queue ike 0:SMS_VPN:5993: out 08576175255BD0DF20ADAA2F2BBE93D80510020100000000000000648E21A86ACCD4475B6D7F4FDC954C533A89EB76CF3735EB7B90A0B8FAD8A1A9F57DB469F9B152B335AF479E14D4E1554C3CC30FD09D8447C275463A69871AB9BB6F9C5A5F05A4F35A ike 0:SMS_VPN:5993: sent IKE msg (P1_RETRANSMIT): 200.7.150.150:500->200.2.166.167:500, len=100, id=08576175255bd0df/20adaa2f2bbe93d8 ike 0:SMS_VPN:SMS_VPN: IPsec SA connect 6 200.7.150.150->200.2.166.167:0 ike 0:SMS_VPN:SMS_VPN: using existing connection ike 0:SMS_VPN:SMS_VPN: config found ike 0:SMS_VPN: request is on the queue ike 0:SMS_VPN:SMS_VPN: IPsec SA connect 6 200.7.150.150->200.2.166.167:0 ike 0:SMS_VPN:SMS_VPN: using existing connection ike 0:SMS_VPN:SMS_VPN: config found ike 0:SMS_VPN: request is on the queue ike 0:SMS_VPN:SMS_VPN: IPsec SA connect 6 200.7.150.150->200.2.166.167:0 ike 0:SMS_VPN:SMS_VPN: using existing connection ike 0:SMS_VPN:SMS_VPN: config found ike 0:SMS_VPN: request is on the queue ike 0:SMS_VPN:5993: out 08576175255BD0DF20ADAA2F2BBE93D80510020100000000000000648E21A86ACCD4475B6D7F4FDC954C533A89EB76CF3735EB7B90A0B8FAD8A1A9F57DB469F9B152B335AF479E14D4E1554C3CC30FD09D8447C275463A69871AB9BB6F9C5A5F05A4F35A ike 0:SMS_VPN:5993: sent IKE msg (P1_RETRANSMIT): 200.7.150.150:500->200.2.166.167:500, len=100, id=08576175255bd0df/20adaa2f2bbe93d8 ike 0:SMS_VPN:SMS_VPN: IPsec SA connect 6 200.7.150.150->200.2.166.167:0 ike 0:SMS_VPN:SMS_VPN: using existing connection ike 0:SMS_VPN:SMS_VPN: config found ike 0:SMS_VPN: request is on the queue ike 0:SMS_VPN:SMS_VPN: IPsec SA connect 6 200.7.150.150->200.2.166.167:0 ike 0:SMS_VPN:SMS_VPN: using existing connection ike 0:SMS_VPN:SMS_VPN: config found ike 0:SMS_VPN: request is on the queue ike 0:SMS_VPN:5993: negotiation timeout, deleting ike 0:SMS_VPN: connection expiring due to phase1 down ike 0:SMS_VPN: deleting ike 0:SMS_VPN: deleted ike 0:SMS_VPN: schedule auto-negotiate ike 0:SMS_VPN: auto-negotiate connection ike 0:SMS_VPN: created connection: 0x45f7d70 6 200.7.150.150->200.2.166.167:500. ike 0:SMS_VPN:5994: initiator: main mode is sending 1st message... ike 0:SMS_VPN:5994: cookie 71cb93b551cc935b/0000000000000000 ike 0:SMS_VPN:5994: out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ike 0:SMS_VPN:5994: sent IKE msg (ident_i1send): 200.7.150.150:500->200.2.166.167:500, len=288, id=71cb93b551cc935b/0000000000000000 ike 0: comes 200.2.166.167:500->200.7.150.150:500,ifindex=6.... ike 0: IKEv1 exchange=Identity Protection id=71cb93b551cc935b/1c7cdef6894a96f0 len=128 ike 0: in 71CB93B551CC935B1C7CDEF6894A96F00110020000000000000000800D00003800000001000000010000002C01010001000000240101000080010005800200028004000280030001800B0001000C0004000151800D0000144A131C81070358455C5728F20E95452F000000184048B7D56EBCE88525E7DE7F00D6C2D3C0000000 ike 0:SMS_VPN:5994: initiator: main mode get 1st response... ike 0:SMS_VPN:5994: VID RFC 3947 4A131C81070358455C5728F20E95452F ike 0:SMS_VPN:5994: VID FRAGMENTATION 4048B7D56EBCE88525E7DE7F00D6C2D3C0000000 ike 0:SMS_VPN:5994: selected NAT-T version: RFC 3947 ike 0:SMS_VPN:5994: negotiation result ike 0:SMS_VPN:5994: proposal id = 1: ike 0:SMS_VPN:5994: protocol id = ISAKMP: ike 0:SMS_VPN:5994: trans_id = KEY_IKE. ike 0:SMS_VPN:5994: encapsulation = IKE/none ike 0:SMS_VPN:5994: type=OAKLEY_ENCRYPT_ALG, val=3DES_CBC. ike 0:SMS_VPN:5994: type=OAKLEY_HASH_ALG, val=SHA. ike 0:SMS_VPN:5994: type=AUTH_METHOD, val=PRESHARED_KEY. ike 0:SMS_VPN:5994: type=OAKLEY_GROUP, val=MODP1024. ike 0:SMS_VPN:5994: ISAKMP SA lifetime=86400 ike 0:SMS_VPN:5994: out 71CB93B551CC935B1C7CDEF6894A96F00410020000000000000000E40A0000849C2F1196ABB97CD127667A52705774B248C0711E92BBD1B80358D92410A78B51E06ACD3936012AE4D5B07551C30A1A8FED3BE987BB1030C6786A427DA360BE3EA146C4D2A301BDCA05E320FC163B8499A90C016D2EAF471F8CC472EE001AB691517D96AEBCD58773C7655EA683D57DECC859FFE151B5C05AE177A98C6A6DBBA914000014B3A5DB1B2A9D38811AC70E880273410D14000018E5404363AF699C5D190177C86DF499CEABE84C28000000185B39D6BEFED7F271FAC20E007A8644076B9B4B2C ike 0:SMS_VPN:5994: sent IKE msg (ident_i2send): 200.7.150.150:500->200.2.166.167:500, len=228, id=71cb93b551cc935b/1c7cdef6894a96f0 ike 0: comes 200.2.166.167:500->200.7.150.150:500,ifindex=6.... ike 0: IKEv1 exchange=Identity Protection id=71cb93b551cc935b/1c7cdef6894a96f0 len=304 ike 0: in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ike 0:SMS_VPN:5994: initiator: main mode get 2nd response... ike 0:SMS_VPN:5994: VID CISCO-UNITY 12F5F28C457168A9702D9FE274CC0100 ike 0:SMS_VPN:5994: peer supports UNITY ike 0:SMS_VPN:5994: VID draft-ietf-ipsra-isakmp-xauth-06.txt 09002689DFD6B712 ike 0:SMS_VPN:5994: VID unknown (16): 09002689DFD6B712 ike 0:SMS_VPN:5994: VID unknown (16): 09002689DFD6B712 ike 0:SMS_VPN:5994: received NAT-D payload type 20 ike 0:SMS_VPN:5994: received NAT-D payload type 20 ike 0:SMS_VPN:5994: NAT not detected ike 0:SMS_VPN:5994: ISAKMP SA 71cb93b551cc935b/1c7cdef6894a96f0 key 24:65DC9A35519F414E8612E0235A012008480485F094A5819D ike 0:SMS_VPN:5994: add INITIAL-CONTACT ike 0:SMS_VPN:5994: enc 71CB93B551CC935B1C7CDEF6894A96F005100201000000000000005C0800000C01000000C80796960B0000182A60C82AB2E9A0C9D18522467EB6999E396087700000001C000000010110600271CB93B551CC935B1C7CDEF6894A96F0 ike 0:SMS_VPN:5994: out 71CB93B551CC935B1C7CDEF6894A96F005100201000000000000006404C6EAE1FC44A002175A03176D5B2EBB9B355DB3048BF6834F59ADF6787B458B97CEB9D9E19B9CD630AAD30C4A9DA5746F141453311100261D771BB8C9A33B2AA5CA255CD4C6A823 ike 0:SMS_VPN:5994: sent IKE msg (ident_i3send): 200.7.150.150:500->200.2.166.167:500, len=100, id=71cb93b551cc935b/1c7cdef6894a96f0 ike 0: comes 200.2.166.167:500->200.7.150.150:500,ifindex=6.... ike 0: IKEv1 exchange=Informational id=71cb93b551cc935b/1c7cdef6894a96f0 len=112 ike 0: in 71CB93B551CC935B1C7CDEF6894A96F00B100500000000000000007000000054000000010000001012C5B3E464F29B0B120BE71133D7BB2D1C57C7DEBE7C13179B4F774A36DD833F11AD30D8C4FF5F476A9FFA0319290DE025BA253D9917F8564355F90C0BA90D1587BB3DDB4CE73E88 ike 0:SMS_VPN:5994: ignoring unencrypted PAYLOAD-MALFORMED message from 200.2.166.167:500. ike 0:SMS_VPN:5994: out 71CB93B551CC935B1C7CDEF6894A96F005100201000000000000006404C6EAE1FC44A002175A03176D5B2EBB9B355DB3048BF6834F59ADF6787B458B97CEB9D9E19B9CD630AAD30C4A9DA5746F141453311100261D771BB8C9A33B2AA5CA255CD4C6A823 ike 0:SMS_VPN:5994: sent IKE msg (P1_RETRANSMIT): 200.7.150.150:500->200.2.166.167:500, len=100, id=71cb93b551cc935b/1c7cdef6894a96f0 ike 0: comes 200.2.166.167:500->200.7.150.150:500,ifindex=6.... ike 0: IKEv1 exchange=Identity Protection id=71cb93b551cc935b/1c7cdef6894a96f0 len=304 ike 0: in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ike 0:SMS_VPN:5994: retransmission, re-send last message ike 0:SMS_VPN:5994: out 71CB93B551CC935B1C7CDEF6894A96F005100201000000000000006404C6EAE1FC44A002175A03176D5B2EBB9B355DB3048BF6834F59ADF6787B458B97CEB9D9E19B9CD630AAD30C4A9DA5746F141453311100261D771BB8C9A33B2AA5CA255CD4C6A823 ike 0:SMS_VPN:5994: sent IKE msg (retransmit): 200.7.150.150:500->200.2.166.167:500, len=100, id=71cb93b551cc935b/1c7cdef6894a96f0 ike 0: comes 200.2.166.167:500->200.7.150.150:500,ifindex=6.... ike 0: IKEv1 exchange=Identity Protection id=71cb93b551cc935b/1c7cdef6894a96f0 len=304 ike 0: in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ike 0:SMS_VPN:5994: retransmission, re-send last message ike 0:SMS_VPN:5994: out 71CB93B551CC935B1C7CDEF6894A96F005100201000000000000006404C6EAE1FC44A002175A03176D5B2EBB9B355DB3048BF6834F59ADF6787B458B97CEB9D9E19B9CD630AAD30C4A9DA5746F141453311100261D771BB8C9A33B2AA5CA255CD4C6A823 ike 0:SMS_VPN:5994: sent IKE msg (retransmit): 200.7.150.150:500->200.2.166.167:500, len=100, id=71cb93b551cc935b/1c7cdef6894a96f0 ike 0: comes 200.2.166.167:500->200.7.150.150:500,ifindex=6.... ike 0: IKEv1 exchange=Identity Protection id=71cb93b551cc935b/1c7cdef6894a96f0 len=304 ike 0: in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ike 0:SMS_VPN:5994: retransmission, re-send last message ike 0:SMS_VPN:5994: out 71CB93B551CC935B1C7CDEF6894A96F005100201000000000000006404C6EAE1FC44A002175A03176D5B2EBB9B355DB3048BF6834F59ADF6787B458B97CEB9D9E19B9CD630AAD30C4A9DA5746F141453311100261D771BB8C9A33B2AA5CA255CD4C6A823 ike 0:SMS_VPN:5994: sent IKE msg (retransmit): 200.7.150.150:500->200.2.166.167:500, len=100, id=71cb93b551cc935b/1c7cdef6894a96f0 ike 0: comes 200.2.166.167:500->200.7.150.150:500,ifindex=6.... ike 0: IKEv1 exchange=Informational id=71cb93b551cc935b/1c7cdef6894a96f0:cce0561a len=84 ike 0: in 71CB93B551CC935B1C7CDEF6894A96F008100501CCE0561A0000005487DE2FBC4425A418D20619B9A76B75BD18EC14A177D5DA88CAE207D0757B9A9A3236E6BB23D73A3C285834A702C6ACE4B6E7688F05112819 ike 0:SMS_VPN:5994: dec 71CB93B551CC935B1C7CDEF6894A96F008100501CCE0561A000000549BFE9B39E362402962DB7CBE85471B8F5BF91F8D164734F64AB7D343DC36244C0892F9E3252C82488BE2EBD7AD371EDBB2F774A4ADCB8FFB ike 0:SMS_VPN:SMS_VPN: IPsec SA connect 6 200.7.150.150->200.2.166.167:0 ike 0:SMS_VPN:SMS_VPN: using existing connection ike 0:SMS_VPN:SMS_VPN: config found ike 0:SMS_VPN:SMS_VPN: IPsec SA connect 6 200.7.150.150->200.2.166.167:500 negotiating ike 0:SMS_VPN:5994:SMS_VPN:405: ISAKMP SA still negotiating, queuing quick-mode request ike 0:SMS_VPN:SMS_VPN: IPsec SA connect 6 200.7.150.150->200.2.166.167:0 ike 0:SMS_VPN:SMS_VPN: using existing connection ike 0:SMS_VPN:SMS_VPN: config found ike 0:SMS_VPN: request is on the queue ike 0:SMS_VPN:5994: out 71CB93B551CC935B1C7CDEF6894A96F005100201000000000000006404C6EAE1FC44A002175A03176D5B2EBB9B355DB3048BF6834F59ADF6787B458B97CEB9D9E19B9CD630AAD30C4A9DA5746F141453311100261D771BB8C9A33B2AA5CA255CD4C6A823 ike 0:SMS_VPN:5994: sent IKE msg (P1_RETRANSMIT): 200.7.150.150:500->200.2.166.167:500, len=100, id=71cb93b551cc935b/1c7cdef6894a96f0 ike 0:SMS_VPN:SMS_VPN: IPsec SA connect 6 200.7.150.150->200.2.166.167:0 ike 0:SMS_VPN:SMS_VPN: using existing connection ike 0:SMS_VPN:SMS_VPN: config found ike 0:SMS_VPN: request is on the queue ike 0:SMS_VPN:SMS_VPN: IPsec SA connect 6 200.7.150.150->200.2.166.167:0 ike 0:SMS_VPN:SMS_VPN: using existing connection ike 0:SMS_VPN:SMS_VPN: config found ike 0:SMS_VPN: request is on the queue ike 0:SMS_VPN:5994: out 71CB93B551CC935B1C7CDEF6894A96F005100201000000000000006404C6EAE1FC44A002175A03176D5B2EBB9B355DB3048BF6834F59ADF6787B458B97CEB9D9E19B9CD630AAD30C4A9DA5746F141453311100261D771BB8C9A33B2AA5CA255CD4C6A823 ike 0:SMS_VPN:5994: sent IKE msg (P1_RETRANSMIT): 200.7.150.150:500->200.2.166.167:500, len=100, id=71cb93b551cc935b/1c7cdef6894a96f0 ike 0:SMS_VPN:SMS_VPN: IPsec SA connect 6 200.7.150.150->200.2.166.167:0 ike 0:SMS_VPN:SMS_VPN: using existing connection ike 0:SMS_VPN:SMS_VPN: config found ike 0:SMS_VPN: request is on the queue FGT90D3Z16005583 # diagike 0:SMS_VPN:SMS_VPN: IPsec SA connect 6 200.7.150.150->200.2.166.167:0 ike 0:SMS_VPN:SMS_VPN: using existing connection ike 0:SMS_VPN:SMS_VPN: config found ike 0:SMS_VPN: request is on the queue deb ike 0:SMS_VPN:5994: negotiation timeout, deleting ike 0:SMS_VPN: connection expiring due to phase1 down ike 0:SMS_VPN: deleting ike 0:SMS_VPN: deleted ike 0:SMS_VPN: schedule auto-negotiate dus command parse error before 'dus' Command fail. Return code -61 FGT90D3Z16005583 # ike 0:SMS_VPN: auto-negotiate connection ike 0:SMS_VPN: created connection: 0x45f7d70 6 200.7.150.150->200.2.166.167:500. ike 0:SMS_VPN:5995: initiator: main mode is sending 1st message... ike 0:SMS_VPN:5995: cookie 86e03764000fff97/0000000000000000 ike 0:SMS_VPN:5995: out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ike 0:SMS_VPN:5995: sent IKE msg (ident_i1send): 200.7.150.150:500->200.2.166.167:500, len=288, id=86e03764000fff97/0000000000000000 ike 0: comes 200.2.166.167:500->200.7.150.150:500,ifindex=6.... ike 0: IKEv1 exchange=Identity Protection id=86e03764000fff97/1e37f5a7cc58e454 len=128 ike 0: in 86E03764000FFF971E37F5A7CC58E4540110020000000000000000800D00003800000001000000010000002C01010001000000240101000080010005800200028004000280030001800B0001000C0004000151800D0000144A131C81070358455C5728F20E95452F000000184048B7D56EBCE88525E7DE7F00D6C2D3C0000000 ike 0:SMS_VPN:5995: initiator: main mode get 1st response... ike 0:SMS_VPN:5995: VID RFC 3947 4A131C81070358455C5728F20E95452F ike 0:SMS_VPN:5995: VID FRAGMENTATION 4048B7D56EBCE88525E7DE7F00D6C2D3C0000000 ike 0:SMS_VPN:5995: selected NAT-T version: RFC 3947 ike 0:SMS_VPN:5995: negotiation result ike 0:SMS_VPN:5995: proposal id = 1: ike 0:SMS_VPN:5995: protocol id = ISAKMP: ike 0:SMS_VPN:5995: trans_id = KEY_IKE. ike 0:SMS_VPN:5995: encapsulation = IKE/none ike 0:SMS_VPN:5995: type=OAKLEY_ENCRYPT_ALG, val=3DES_CBC. ike 0:SMS_VPN:5995: type=OAKLEY_HASH_ALG, val=SHA. ike 0:SMS_VPN:5995: type=AUTH_METHOD, val=PRESHARED_KEY. ike 0:SMS_VPN:5995: type=OAKLEY_GROUP, val=MODP1024. ike 0:SMS_VPN:5995: ISAKMP SA lifetime=86400 ike 0:SMS_VPN:5995: out 86E03764000FFF971E37F5A7CC58E4540410020000000000000000E40A00008406F89DA08113DB0CDCE6A5643624AB5CC8B76ABF38F8DBB6CCCC0174157F4682B16D24EF0ED252C91FFF2152061227F52A26A1ABBB8B7105BAA2527318C572470C0A94A6E35C24157EBF46609C0D9C850110888D7EA2C7DFCDD2412C181557CF8AC7FF21F5C4B26AA79510B8B84B98E6A1E9CCCF86E54E80A2343A304E3B495E140000148DE71A16F86AB2DA73F147FCD1EF0743140000185908E1630C2C2208B598CDFEA02B3D2C2AEBB0C6000000187426970FCF87A643D93642AA0F9A68A6E70C7BAB ike 0:SMS_VPN:5995: sent IKE msg (ident_i2send): 200.7.150.150:500->200.2.166.167:500, len=228, id=86e03764000fff97/1e37f5a7cc58e454 ike 0: comes 200.2.166.167:500->200.7.150.150:500,ifindex=6.... ike 0: IKEv1 exchange=Identity Protection id=86e03764000fff97/1e37f5a7cc58e454 len=304 ike 0: in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ike 0:SMS_VPN:5995: initiator: main mode get 2nd response... ike 0:SMS_VPN:5995: VID CISCO-UNITY 12F5F28C457168A9702D9FE274CC0100 ike 0:SMS_VPN:5995: peer supports UNITY ike 0:SMS_VPN:5995: VID draft-ietf-ipsra-isakmp-xauth-06.txt 09002689DFD6B712 ike 0:SMS_VPN:5995: VID unknown (16): 09002689DFD6B712 ike 0:SMS_VPN:5995: VID unknown (16): 09002689DFD6B712 ike 0:SMS_VPN:5995: received NAT-D payload type 20 ike 0:SMS_VPN:5995: received NAT-D payload type 20 ike 0:SMS_VPN:5995: NAT not detected ike 0:SMS_VPN:5995: ISAKMP SA 86e03764000fff97/1e37f5a7cc58e454 key 24:4D227D8989F45E4E2BFE0AA2D35A821CA358FAB4A030B3D1 ike 0:SMS_VPN:5995: add INITIAL-CONTACT ike 0:SMS_VPN:5995: enc 86E03764000FFF971E37F5A7CC58E45405100201000000000000005C0800000C01000000C80796960B000018933866DB9C724900CC5FCC2F5DD9B1A72075EE140000001C000000010110600286E03764000FFF971E37F5A7CC58E454 ike 0:SMS_VPN:5995: out 86E03764000FFF971E37F5A7CC58E4540510020100000000000000640A7C252C16D7BD9FA4384A747D64C1B4B78C00D71A0C6BE2B6F2CD4F0CA59E24C43D699FF74D7C3EDEDA38183FE270B7F6AB86A48CF01745649AB4C2D35143CF1C4497E3E92433CC ike 0:SMS_VPN:5995: sent IKE msg (ident_i3send): 200.7.150.150:500->200.2.166.167:500, len=100, id=86e03764000fff97/1e37f5a7cc58e454 ike 0: comes 200.2.166.167:500->200.7.150.150:500,ifindex=6.... ike 0: IKEv1 exchange=Informational id=86e03764000fff97/1e37f5a7cc58e454 len=112 ike 0: in 86E03764000FFF971E37F5A7CC58E4540B1005000000000000000070000000540000000100000010599537AFBC049E455704873C1784F8DDD6B2A86CCBBFC7BC4F84382F8EC2901C233BE7734801D437B80BC23334E1C1C7B2FD031817967BF0320F3899DEFB1FA1D489D72F2EF2B9C9 ike 0:SMS_VPN:5995: ignoring unencrypted PAYLOAD-MALFORMED message from 200.2.166.167:500.

[Iescudero · Accepted solution]

Hi there! Can you add the Phase1 and 2 IKE configuration? because of this: "..PAYLOAD-MALFORMED..", I think there´s a mismatch between both devices.

[Iescudero · Accepted solution]

Hi there! Can you add the Phase1 and 2 IKE configuration? because of this: "..PAYLOAD-MALFORMED..", I think there´s a mismatch between both devices.

[emnoc · Accepted solution]

Wrong peer address ?  Did  you validate all of the phase1/2 settings and the gateway address between peers? Also don't rule out IKE version mis-match either.

[VEER]

Hi guys, it seemed the other side had a wrong peer address configured. The tunnel is up for now. Thanks guys.