VPN between two 100D FGT up but no traffic passing (phase 1 and success)

[sangomab]

Hi there,

[style="background-color: #33cccc;"]i need your help:[/style]

i have two 100D Fortigate (one v5.6.0, one v5.2.11) with Ipsec vpn working fine,

This morning the vpn is up th phase 1 and 2 are success but no traffic passing through

tracert is lost with * * * * in the two side

the diagnose sniffer parquet any "dst host 192.168.30.x" is showing that the traffic is redirected to the VPN

but from the other side (the second Fortigate) the diagnose sniffer parquet any "dst host 192.168.30.x" is not showing anything

1er FGT 100D v5.6.0

FGT-Enfidha (root) #
FGT-Enfidha (root) #
FGT-Enfidha (root) #
FGT-Enfidha (root) # diagnose debug disable

FGT-Enfidha (root) # diagnose debug reset

FGT-Enfidha (root) # diagnose vpn ike gateway clear

FGT-Enfidha (root) # diagnose vpn ike log filter name VPN_xXx

FGT-Enfidha (root) # diagnose debug application ike -1
Debug messages will be on for 30 minutes.

FGT-Enfidha (root) # diagnose debug enable

FGT-Enfidha (root) #
FGT-Enfidha (root) # ike 0: comes 197.14.12.221:500->197.13.0.211:500,ifindex=5. ...
ike 0: IKEv1 exchange=Identity Protection id=3166355b6310d5e4/6b2f94fc6d970ea2 l en=316
ike 0: in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
ike 0:VPN_xXx:4021142: responder:main mode get 2nd message...
ike 0:VPN_xXx:4021142: received NAT-D payload type 20
ike 0:VPN_xXx:4021142: received NAT-D payload type 20
ike 0:VPN_xXx:4021142: NAT not detected
ike 0:VPN_xXx:4021142: out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
ike 0:VPN_xXx:4021142: sent IKE msg (ident_r2send): 197.13.0.211:500->197.14.1 2.221:500, len=316, id=3166355b6310d5e4/6b2f94fc6d970ea2
ike 0:VPN_xXx:4021142: ISAKMP SA 3166355b6310d5e4/6b2f94fc6d970ea2 key 16:B8CC 9B72895C6A6683CAAFB7D4FA6129
ike 0: comes 197.14.12.221:500->197.13.0.211:500,ifindex=5....
ike 0: IKEv1 exchange=Identity Protection id=3166355b6310d5e4/6b2f94fc6d970ea2 l en=108
ike 0: in 3166355B6310D5E46B2F94FC6D970EA205100201000000000000006CA3805BB2CBB8CF 7BE2BCD6EC31AE58661234CA531F290444F4DD3A6D5F59971A9BC8E9977B5FD4F671FF155947486A DB373DE04C501F5018915ED4AF0CC9D6EF69B25066E74ADF6E9908F2FFF16A811B
ike 0:VPN_xXx:4021142: responder: main mode get 3rd message...
ike 0:VPN_xXx:4021142: dec 3166355B6310D5E46B2F94FC6D970EA20510020100000000000 0006C0800000C01000000C50E0CDD0B0000249F23029DC1526F3026D3523D5DA63FC232F7086EE73 277FC47DC37B6A252D70A0000001C00000001011060023166355B6310D5E46B2F94FC6D970EA2A3E 08503
ike 0:VPN_xXx:4021142: received p1 notify type INITIAL-CONTACT
ike 0:VPN_xXx:4021142: peer identifier IPV4_ADDR 197.14.12.221
ike 0:VPN_xXx:4021142: PSK authentication succeeded
ike 0:VPN_xXx:4021142: authentication OK
ike 0:VPN_xXx:4021142: enc 3166355B6310D5E46B2F94FC6D970EA20510020100000000000 0004C0800000C01000000C50D00D300000024527837FCB896A021CFF76924876EB6F4C5D2F4802F5 BBC5F13DA5BB7C21BA1A8
ike 0:VPN_xXx:4021142: established IKE SA 3166355b6310d5e4/6b2f94fc6d970ea2
ike 0:VPN_xXx:4021142: processing INITIAL-CONTACT
ike 0:VPN_xXx: flushing
ike 0:VPN_xXx: flushed
ike 0:VPN_xXx:4021142: processed INITIAL-CONTACT
ike 0:VPN_xXx: set oper up
ike 0:VPN_xXx:4021142: no pending Quick-Mode negotiations
ike 0:VPN_xXx:4021142: out 3166355B6310D5E46B2F94FC6D970EA20510020100000000000 0005C978053DF5195D940E7665563CA54D049754B827741BB5C24388345878A40527CA227FDCFDF3 17A64D9ECD7D21F14A310559FC3F37EBCE54D2FE4CA650A5B93A1
ike 0:VPN_xXx:4021142: sent IKE msg (ident_r3send): 197.13.0.211:500->197.14.1 2.221:500, len=92, id=3166355b6310d5e4/6b2f94fc6d970ea2
ike 0: comes 197.14.12.221:500->197.13.0.211:500,ifindex=5....
ike 0: IKEv1 exchange=Quick id=3166355b6310d5e4/6b2f94fc6d970ea2:e4b40680 len=57 2
ike 0: in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
ike 0:VPN_xXx:4021142:27353006: responder received first quick-mode message
ike 0:VPN_xXx:4021142: dec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
ike 0:VPN_xXx:4021142:27353006: peer proposal is: peer:0:192.168.100.0-192.168 .100.255:0, me:0:192.168.30.0-192.168.30.255:0
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: trying
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: matched phase2
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: autokey
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: my proposal:
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: proposal id = 1:
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: protocol id = IPSEC_ESP:
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: PFS DH group = 15
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: trans_id = ESP_3DES
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: encapsulation = ENCAPSULATION_M ODE_TUNNEL
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: type = AUTH_ALG, val=SHA1
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: incoming proposal:
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: proposal id = 1:
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: protocol id = IPSEC_ESP:
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: PFS DH group = 15
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: trans_id = ESP_3DES
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: encapsulation = ENCAPSULATION_M ODE_TUNNEL
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: type = AUTH_ALG, val=SHA1
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: negotiation result
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: proposal id = 1:
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: protocol id = IPSEC_ESP:
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: PFS DH group = 15
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: trans_id = ESP_3DES
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: encapsulation = ENCAPSULATION_M ODE_TUNNEL
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: type = AUTH_ALG, val=SHA1
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: set pfs=MODP3072
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: using tunnel mode.
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: replay protection enabled
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: SA life soft seconds=42930.
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: SA life hard seconds=43200.
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: IPsec SA selectors #src=1 #dst=1
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: src 0 7 0:192.168.30.0-192.168.30.25 5:0
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: dst 0 7 0:192.168.100.0-192.168.100. 255:0
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: add IPsec SA: SPIs=e74fe392/d5e6fc68
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: IPsec SA dec spi e74fe392 key 24:C56 33F657E78DEE6CF473AF0C092D728C76E6E7722DDF13C auth 20:8A78972699B3C27FD2C27148C9 DF2BAABF5E5DD1
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: IPsec SA enc spi d5e6fc68 key 24:FCD FD520CD01E25890FE9E3CAE1F0237AE0E4AF883A503D4 auth 20:F5B4DC0AF731BB9E17370A48B7 E64053A50EB6B6
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: added IPsec SA: SPIs=e74fe392/d5e6fc 68
ike 0:VPN_xXx:4021142:VPN_xXx:27353006: sending SNMP tunnel UP trap
ike 0:VPN_xXx:4021142: enc 3166355B6310D5E46B2F94FC6D970EA208102001E4B40680000 0022C0100002483F2674CBF4CE0E7855F0D5A8B31C4C891BBA9C38146066B447E89B4FADE37440A0 0003400000001000000010000002801030401E74FE3920000001C01030000800100018002A8C0800 40001800500028003000F04000014350B4163798D7EACA63A22A5A24FC01C05000184A33766611AD D93C0C77402B0AD8640C6A8E6F455787BA4836927F6EFA68158375A55371BC609C252723E5BB5206 84A1B63E1475D93AD9FD6A981FC503185460F48E6893D3E9457496569EB5BC8CADD6A4B422B24BD4 A4CD73F1EC495E2C9AD85F33C3662201032BA73A4475D7E2757F27995081D9FDD3DAEF411F761480 B91AD29CADD053CB928D8AE2547965FFBC7F69B1E815C2BB8D8C554A6BAF5E4444490F82830CB63F BB037FD7BA36EB75515AE9472FE97824DEF50F85A08AB6D0E65EC8230713A6147BED4CBACBCDCE34 24E952864EACA381AFB66DBD7562EB575C44B14027BA590E6C121625BA3C3FFBDEB67603EF6B1F01 58BAB199C299BBC8546D31FD7ECBFA43060941FAED1867DD0434C1BF4C5C0D5C6DBD15C1A28586F9 58BAD467BC26639E56E640913833232B0BD5EDE4D4D521DBAD3E557B65B6C19A96648C0036277822 468662DF58D2E0B1DA750F0FF6A14B1F1B958F2FB99561FF2C9D296252DA4EE58760EC8D561650F2 FBCFC11DC2F06CA7997CBF3B566FA79A4A36A0500001004000000C0A86400FFFFFF0000000010040 00000C0A81E00FFFFFF00
ike 0:VPN_xXx:4021142: out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
ike 0:VPN_xXx:4021142: sent IKE msg (quick_r1send): 197.13.0.211:500->197.14.1 2.221:500, len=572, id=3166355b6310d5e4/6b2f94fc6d970ea2:e4b40680
ike 0: comes 197.14.12.221:500->197.13.0.211:500,ifindex=5....
ike 0: IKEv1 exchange=Quick id=3166355b6310d5e4/6b2f94fc6d970ea2:e4b40680 len=76
ike 0: in 3166355B6310D5E46B2F94FC6D970EA208102001E4B406800000004CB7A4C4CBDFF1B2 B302F625180D71926FE6EE39A847567FBC4FC0FEBE2304C4F1BDBD3AECA58B7244F23B16561FC4DA 06
ike 0:VPN_xXx:4021142: dec 3166355B6310D5E46B2F94FC6D970EA208102001E4B40680000 0004C00000024822D29B6CC44987BF07E84803880197A5F78D57A36BDBBBF51BDC99AEBC2F068402 03F220EE88E8826F42B0B
ike 0:VPN_xXx:VPN_xXx:27353006: send SA_DONE SPI 0xd5e6fc68
ike 0: comes 197.14.12.221:500->197.13.0.211:500,ifindex=5....
ike 0: IKEv1 exchange=Informational id=3166355b6310d5e4/6b2f94fc6d970ea2:6a8569e2 len=108
ike 0: in 3166355B6310D5E46B2F94FC6D970EA2081005016A8569E20000006CE36AABFD2A915CBDF5FB6E8DC4E865D2934D985905D5EA974F82F445FAE9DDAE1F738031B97EB03B630FB782A803DC5747CDC7BE3EAFD4B3C4B45CD6559354AEBE493DBD489ED516D868F2B13507EFEE
ike 0:VPN_xXx:4021142: dec 3166355B6310D5E46B2F94FC6D970EA2081005016A8569E20000006C0B000024527041D16D27AD46C3718F193F89DEBB3A09D07BEA7C65F48BA78098C0C02AC0000000200000000101108D283166355B6310D5E46B2F94FC6D970EA2000032EF5AD3D3433560D9C6ED0A920B
ike 0:VPN_xXx:4021142: notify msg received: R-U-THERE
ike 0:VPN_xXx:4021142: enc 3166355B6310D5E46B2F94FC6D970EA2081005014077B9CF000000600B0000244438FC1487C1015B761EF14F24261ABADC53C16DEC5C5D82E05E3A2CA98CC9E7000000200000000101108D293166355B6310D5E46B2F94FC6D970EA2000032EF
ike 0:VPN_xXx:4021142: out 3166355B6310D5E46B2F94FC6D970EA2081005014077B9CF0000006CBF20596D6DDA15BE2F492FDA592FCA05F04930BFD7450C2E77CD35E7C0D7D54E5B97D0325358430684245840181648CE1AF4080A984C4512B9B46B5899C321399C787935E492F8F3E90A67FEBE0A80D3
ike 0:VPN_xXx:4021142: sent IKE msg (R-U-THERE-ACK): 197.13.0.211:500->197.14.12.221:500, len=108, id=3166355b6310d5e4/6b2f94fc6d970ea2:4077b9cf
ike 0: comes 197.14.12.221:500->197.13.0.211:500,ifindex=5....
ike 0: IKEv1 exchange=Informational id=3166355b6310d5e4/6b2f94fc6d970ea2:38502f3b len=108
ike 0: in 3166355B6310D5E46B2F94FC6D970EA20810050138502F3B0000006CAC846913C1A95A6CD2F1EF211EEB842617C6B209BC3D255175D6DFE2F67C9A7C028A046D09FB02648B52037974857692F9FC110A15DBA4178965510A07FF578CE461C81D6C75A92010147D3B5DD83BAB
ike 0:VPN_xXx:4021142: dec 3166355B6310D5E46B2F94FC6D970EA20810050138502F3B0000006C0B0000249ECFA2ECDE3B44F364EF411306408147AA00DB4D530D7CD17D8BD46324D56009000000200000000101108D283166355B6310D5E46B2F94FC6D970EA2000032F006206BB926CF2219CE1DD80B
ike 0:VPN_xXx:4021142: notify msg received: R-U-THERE
ike 0:VPN_xXx:4021142: enc 3166355B6310D5E46B2F94FC6D970EA20810050100382F01000000600B0000249822AB98BD3BE88C28894F6875DA23729DF3BEB6C80A6159E8668C629D1E37EC000000200000000101108D293166355B6310D5E46B2F94FC6D970EA2000032F0
ike 0:VPN_xXx:4021142: out 3166355B6310D5E46B2F94FC6D970EA20810050100382F010000006CF64CAD0858D61BFD84172600A13EF451CF4E3EF1239F117F1761CD5A32F94673E3245171D37DBD6DE88A4DC0269410BFF25F4AC21BBE0FCA14D5084682393F1D76EF0BCBBC55DDF4551A19915CCBA094
ike 0:VPN_xXx:4021142: sent IKE msg (R-U-THERE-ACK): 197.13.0.211:500->197.14.12.221:500, len=108, id=3166355b6310d5e4/6b2f94fc6d970ea2:00382f01
ike 0: comes 197.14.12.221:500->197.13.0.211:500,ifindex=5....
ike 0: IKEv1 exchange=Informational id=3166355b6310d5e4/6b2f94fc6d970ea2:78d63137 len=108
ike 0: in 3166355B6310D5E46B2F94FC6D970EA20810050178D631370000006CEAA46F1A10E097EB3D32EAEA4FE1BF0F52B882A7D5E26405B85BFA591FECBDC91837B34A0939D20EEC4CBE2893833847ADC5402AB372412208AD759DF7F18B912B47A3F53BE7D72D8F2125CB67D96B12
ike 0:VPN_xXx:4021142: dec 3166355B6310D5E46B2F94FC6D970EA20810050178D631370000006C0B000024327C5C2E61D0FE97C52D7416D840A29BB2F7E447FF354255939A05EAAF60F20A000000200000000101108D283166355B6310D5E46B2F94FC6D970EA2000032F15FBE911D378D21CF56CEDC0B
ike 0:VPN_xXx:4021142: notify msg received: R-U-THERE
ike 0:VPN_xXx:4021142: enc 3166355B6310D5E46B2F94FC6D970EA208100501E3412C35000000600B00002452BB62FAEFD868CB0405C510D23684878D23B312894F033BFBC14070A9663CC7000000200000000101108D293166355B6310D5E46B2F94FC6D970EA2000032F1
ike 0:VPN_xXx:4021142: out 3166355B6310D5E46B2F94FC6D970EA208100501E3412C350000006CA5B563AB1BBD8AC6761379A63B1576E71668D157C87671160F81A29349586A49F9D5993A991E21C2E2804810B7F94BA475765192A816133AC3274261CC57F2C09FE66E5EBA6BFF23AF9799CD9984EB0E
ike 0:VPN_xXx:4021142: sent IKE msg (R-U-THERE-ACK): 197.13.0.211:500->197.14.12.221:500, len=108, id=3166355b6310d5e4/6b2f94fc6d970ea2:e3412c35
ike 0: comes 197.14.12.221:500->197.13.0.211:500,ifindex=5....
ike 0: IKEv1 exchange=Informational id=3166355b6310d5e4/6b2f94fc6d970ea2:4e4cd443 len=108
ike 0: in 3166355B6310D5E46B2F94FC6D970EA2081005014E4CD4430000006C659B9052714DBE599ED20DA7E959281F0E195A368601D7BEA2F5F463EF64B56A09129D1B2A599050CC23E60D0A6683CCBA994AC80AA77D114AA7F6E83275ABAAF375ECBEE805534A8F3EC28573249047
ike 0:VPN_xXx:4021142: dec 3166355B6310D5E46B2F94FC6D970EA2081005014E4CD4430000006C0B0000249FF064D2D0B21745C0FDA493E9557F2BA2127DE5967968BAE9C683A2755A6DD6000000200000000101108D283166355B6310D5E46B2F94FC6D970EA2000032F2044B8CC84C77B103E261880B
ike 0:VPN_xXx:4021142: notify msg received: R-U-THERE
ike 0:VPN_xXx:4021142: enc 3166355B6310D5E46B2F94FC6D970EA2081005016350DD32000000600B0000249E2421F29FBBA58D48966E218E0D679DBBD88505653D9E3EDEB1691EFAAC1E31000000200000000101108D293166355B6310D5E46B2F94FC6D970EA2000032F2
ike 0:VPN_xXx:4021142: out 3166355B6310D5E46B2F94FC6D970EA2081005016350DD320000006C1548CDBCD6964B9EAB763E0F936B6F4AE8A26ABBE09F4D93C92757D9A3771BD16576B22B842F466D0C229EC339FA0767371212C5C616FBB33D42AE44C31DA9B54983DDA31A6CD88F638DA518849904D5
ike 0:VPN_xXx:4021142: sent IKE msg (R-U-THERE-ACK): 197.13.0.211:500->197.14.12.221:500, len=108, id=3166355b6310d5e4/6b2f94fc6d970ea2:6350dd32

FGT-Enfidha (root) #
FGT-Enfidha (root) #
FGT-Enfidha (root) #
FGT-Enfidha (root) #
FGT-Enfidha (root) #
FGT-Enfidha (root) # di de di

FGT-Enfidha (root) # execute ping-options source 192.168.30.254

FGT-Enfidha (root) # execute ping 192.168.100.31
PING 192.168.100.31 (192.168.100.31): 56 data bytes
^C
--- 192.168.100.31 ping statistics ---
5 packets transmitted, 0 packets received, 100% packet loss

FGT-Enfidha (root) # execute ping 192.168.100.31

the 2nd FGT 100D (5.2.11)

FGT_COMAF_PRI # 
FGT_COMAF_PRI # diagnose debug disable
 
FGT_COMAF_PRI # diagnose debug reset
 
FGT_COMAF_PRI # diagnose vpn ike gateway clear
 
FGT_COMAF_PRI # diagnose vpn ike log filter name VPN_yYy
 
FGT_COMAF_PRI # diagnose debug application ike -1
 
FGT_COMAF_PRI # diagnose debug enable
 
FGT_COMAF_PRI # ike 0: comes 197.13.0.211:500->197.14.12.221:500,ifindex=26....
ike 0: IKEv1 exchange=Quick id=76cc7f0cebd74b56/67c1c1cb3c0ac420:32d04944 len=572
ike 0: in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
ike 0:VPN_yYy:11: dec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
ike 0:VPN_yYy:11:VPN_yYy:14919: responder selectors 0:192.168.100.0/255.255.255.0:0->0:192.168.30.0/255.255.255.0:0
ike 0:VPN_yYy:11:VPN_yYy:14919: my proposal:
ike 0:VPN_yYy:11:VPN_yYy:14919: proposal id = 1:
ike 0:VPN_yYy:11:VPN_yYy:14919: protocol id = IPSEC_ESP:
ike 0:VPN_yYy:11:VPN_yYy:14919: PFS DH group = 15
ike 0:VPN_yYy:11:VPN_yYy:14919: trans_id = ESP_3DES
ike 0:VPN_yYy:11:VPN_yYy:14919: encapsulation = ENCAPSULATION_MODE_TUNNEL
ike 0:VPN_yYy:11:VPN_yYy:14919: type = AUTH_ALG, val=SHA1
ike 0:VPN_yYy:11:VPN_yYy:14919: incoming proposal:
ike 0:VPN_yYy:11:VPN_yYy:14919: proposal id = 1:
ike 0:VPN_yYy:11:VPN_yYy:14919: protocol id = IPSEC_ESP:
ike 0:VPN_yYy:11:VPN_yYy:14919: PFS DH group = 15
ike 0:VPN_yYy:11:VPN_yYy:14919: trans_id = ESP_3DES
ike 0:VPN_yYy:11:VPN_yYy:14919: encapsulation = ENCAPSULATION_MODE_TUNNEL
ike 0:VPN_yYy:11:VPN_yYy:14919: type = AUTH_ALG, val=SHA1
 
ike 0:VPN_yYy:11:VPN_yYy:14919: replay protection enabled
ike 0:VPN_yYy:11:VPN_yYy:14919: SA life soft seconds=43176.
ike 0:VPN_yYy:11:VPN_yYy:14919: SA life hard seconds=43200.
ike 0:VPN_yYy:11:VPN_yYy:14919: IPsec SA selectors #src=1 #dst=1
ike 0:VPN_yYy:11:VPN_yYy:14919: src 0 4 0:192.168.100.0/255.255.255.0:0
ike 0:VPN_yYy:11:VPN_yYy:14919: dst 0 4 0:192.168.30.0/255.255.255.0:0
ike 0:VPN_yYy:11:VPN_yYy:14919: add IPsec SA: SPIs=d5e6fc69/e74fe3b3
ike 0:VPN_yYy:11:VPN_yYy:14919: IPsec SA dec spi d5e6fc69 key 24:97E01566A44BA38057CC21E1D25BFEAFFAE7CCDFAFD1D37B auth 20:14BD4BB28E2D44E0354B971DEA086DEADCDF54D7
ike 0:VPN_yYy:11:VPN_yYy:14919: IPsec SA enc spi e74fe3b3 key 24:282BEEE0BEF100BA9C1572371E09025F5FC92D3897B2B6EA auth 20:00C184E48C04B8F5EFE4D5BA5C8CD02B2BA7D5E9
ike 0:VPN_yYy:11:VPN_yYy:14919: added IPsec SA: SPIs=d5e6fc69/e74fe3b3
ike 0:VPN_yYy:11:VPN_yYy:14919: sending SNMP tunnel UP trap
ike 0:VPN_yYy:11: enc 76CC7F0CEBD74B5667C1C1CB3C0AC4200810200132D0494400000040000000242ED3BF184EC995F42DD4CF332D8A44B108C23E95A517D16187CA75162ED66030
ike 0:VPN_yYy:11: out 76CC7F0CEBD74B5667C1C1CB3C0AC4200810200132D049440000004C367A4C7866E11FA00B9CE0E05C26607E8FBD85AD0245756E941F58DB43F9019747BB7641CB0B30CACC614435D060D6A1
ike 0:VPN_yYy:11: sent IKE msg (quick_i2send): 197.14.12.221:500->197.13.0.211:500, len=76, id=76cc7f0cebd74b56/67c1c1cb3c0ac420:32d04944
FGT_COMAF_PRI # ike 0:VPN_yYy: link is idle 26 197.14.12.221->197.13.0.211:0 dpd=1 seqno=3331
ike 0:VPN_yYy: link is idle 26 197.14.12.221->197.13.0.211:0 dpd=1 seqno=3332
ike 0:VPN_yYy:11: send IKEv1 DPD probe, seqno 13106
ike 0:VPN_yYy:11: enc 76CC7F0CEBD74B5667C1C1CB3C0AC42008100501982ACEC6000000600B000024D2FF0B6805940292CC6138658F8B93C7DE5DB75BF5F1438E47A2C4D42FBEF9BE000000200000000101108D2876CC7F0CEBD74B5667C1C1CB3C0AC42000003332
ike 0:VPN_yYy:11: out 76CC7F0CEBD74B5667C1C1CB3C0AC42008100501982ACEC60000006CB98DF07A0CEF7C6D97565C5DCFC34B2F9991E4281F0A863C1CCFCEE8F180FA635B78E6FCD25C876E3631A4F3FF6A1845A1AD820DD0415E0E57889029BC7598AF31A7850D4B4B00A78BD3CC6C23B4391F
ike 0:VPN_yYy:11: sent IKE msg (R-U-THERE): 197.14.12.221:500->197.13.0.211:500, len=108, id=76cc7f0cebd74b56/67c1c1cb3c0ac420:982acec6
ike 0: comes 197.13.0.211:500->197.14.12.221:500,ifindex=26....
ike 0: IKEv1 exchange=Informational id=76cc7f0cebd74b56/67c1c1cb3c0ac420:e4dce7ed len=108
ike 0: in 76CC7F0CEBD74B5667C1C1CB3C0AC42008100501E4DCE7ED0000006C0BA9BA297167CF496E09A92E86906F771F766B688E1C31658C79A5EBE5F30049E074E9B68FA0B0DAF8C752F01D27BC0A100FDD1B70C47BE7D4FFA9B245578CC38F94633346B1939B6E4DA9FDD8E3327E
ike 0:VPN_yYy:11: dec 76CC7F0CEBD74B5667C1C1CB3C0AC42008100501E4DCE7ED0000006C0B00002425E0B1698F0CBE32EF0CCB2021336970971D8253549CF339FBCE268E49321090000000200000000101108D2976CC7F0CEBD74B5667C1C1CB3C0AC42000003332D1652FD4CAC625149138380B
ike 0:VPN_yYy:11: notify msg received: R-U-THERE-ACK
ike 0:VPN_yYy: link is idle 26 197.14.12.221->197.13.0.211:0 dpd=1 seqno=3333
ike 0:VPN_yYy:11: send IKEv1 DPD probe, seqno 13107
ike 0:VPN_yYy:11: enc 76CC7F0CEBD74B5667C1C1CB3C0AC420081005012CED7663000000600B000024F7734E5B97FC22B2CA134B1F933A688C66BAF81672D97132A83D98F5E19C50F7000000200000000101108D2876CC7F0CEBD74B5667C1C1CB3C0AC42000003333
ike 0:VPN_yYy:11: out 76CC7F0CEBD74B5667C1C1CB3C0AC420081005012CED76630000006C5BB28EB789B32789C3FBF044750A7F8C4C5C34617225E85CB91F27F7D14939D58DD16FCD84164633585FAB1E44CFBC985050F1B49E773E7B1EBEE665E9088231ACD45FB6F454167673E1D8DB158FD3AC
ike 0:VPN_yYy:11: sent IKE msg (R-U-THERE): 197.14.12.221:500->197.13.0.211:500, len=108, id=76cc7f0cebd74b56/67c1c1cb3c0ac420:2ced7663
ike 0: comes 197.13.0.211:500->197.14.12.221:500,ifindex=26....
ike 0: IKEv1 exchange=Informational id=76cc7f0cebd74b56/67c1c1cb3c0ac420:2e138a9b len=108
ike 0: in 76CC7F0CEBD74B5667C1C1CB3C0AC420081005012E138A9B0000006C183BF10B391BD923966115293F4AC66DC6D4D48F9DC0DC8B14E74B8A38C469D0A5F8BE38FACD125080A4F72C193DE6A3663BA3D838EB0727F6206FA2E04E4941FCF04B9F913D3D1B4EEE855FF3A901D8
ike 0:VPN_yYy:11: dec 76CC7F0CEBD74B5667C1C1CB3C0AC420081005012E138A9B0000006C0B000024224D9B5619FC99093589FD48AB03F8A29F816757BECAF05D0317CCF5BDD017A1000000200000000101108D2976CC7F0CEBD74B5667C1C1CB3C0AC420000033334FA1DDA3891B1FD505C7F10B
ike 0:VPN_yYy:11: notify msg received: R-U-THERE-ACK
ike 0:VPN_yYy: link is idle 26 197.14.12.221->197.13.0.211:0 dpd=1 seqno=3334
ike 0:VPN_yYy:11: send IKEv1 DPD probe, seqno 13108
ike 0:VPN_yYy:11: enc 76CC7F0CEBD74B5667C1C1CB3C0AC42008100501E903A829000000600B0000247FDD592A693DA2714AF8DC5A5225E40123CA74A6E3B99C466AD573097672C099000000200000000101108D2876CC7F0CEBD74B5667C1C1CB3C0AC42000003334
ike 0:VPN_yYy:11: out 76CC7F0CEBD74B5667C1C1CB3C0AC42008100501E903A8290000006CFA4251F55F0588F879E1461D2825F0DBAB524F49FA30749FE6967F2AFAF825209F0DC58759A394C93C8F0FC97936D162637A75F77BEC655B3637099254CD1B10971BB242A2A7569F8B592DB7563EA0F5
ike 0:VPN_yYy:11: sent IKE msg (R-U-THERE): 197.14.12.221:500->197.13.0.211:500, len=108, id=76cc7f0cebd74b56/67c1c1cb3c0ac420:e903a829
ike 0: comes 197.13.0.211:500->197.14.12.221:500,ifindex=26....
ike 0: IKEv1 exchange=Informational id=76cc7f0cebd74b56/67c1c1cb3c0ac420:3a93e78e len=108
ike 0: in 76CC7F0CEBD74B5667C1C1CB3C0AC420081005013A93E78E0000006CBC61858341444F1534D66848C32CED08403226726B9B0999F68AE1613838429FE49B43C02B01DAF91607F6B8006694EC65C4DC88F1AAA41CCB8A96A0D541FB7E7050019F7BE05B02C3CBEE5A22CE9CB3
ike 0:VPN_yYy:11: dec 76CC7F0CEBD74B5667C1C1CB3C0AC420081005013A93E78E0000006C0B000024C67147452ABAAA5A96143B408448AF8EFE92ECD4B03BD14F128A521DAE022650000000200000000101108D2976CC7F0CEBD74B5667C1C1CB3C0AC42000003334EF930F062AC2D27DA6498A0B
ike 0:VPN_yYy:11: notify msg received: R-U-THERE-ACK
ike 0:VPN_yYy: link is idle 26 197.14.12.221->197.13.0.211:0 dpd=1 seqno=3335
ike 0:VPN_yYy:11: send IKEv1 DPD probe, seqno 13109
ike 0:VPN_yYy:11: enc 76CC7F0CEBD74B5667C1C1CB3C0AC420081005013CE2880F000000600B0000242566AE3F33E7B38CBD1ED1E5B0BCF3EA4AA5CE6E811BDF79B761D093A22A8E83000000200000000101108D2876CC7F0CEBD74B5667C1C1CB3C0AC42000003335
ike 0:VPN_yYy:11: out 76CC7F0CEBD74B5667C1C1CB3C0AC420081005013CE2880F0000006CAF088062DC231C8A185CFA8014EC40BDEA67CA5B1E005B94617CA64E87C27073272F5FA742FEEFA00BD1E8DA46925E05D7A55158FB1C1DD4189288F1B2CCC43AB0D4177051D4F6E05451835B7205D54C
ike 0:VPN_yYy:11: sent IKE msg (R-U-THERE): 197.14.12.221:500->197.13.0.211:500, len=108, id=76cc7f0cebd74b56/67c1c1cb3c0ac420:3ce2880f
ike 0: comes 197.13.0.211:500->197.14.12.221:500,ifindex=26....
ike 0: IKEv1 exchange=Informational id=76cc7f0cebd74b56/67c1c1cb3c0ac420:cd522911 len=108
ike 0: in 76CC7F0CEBD74B5667C1C1CB3C0AC42008100501CD5229110000006CA1737EDD061E134F64FA41C244B2B4EC9413CF764C5F79EC9B20ED311BCDADD9C258C5FA01AB05063E0B5AC539FC3C6D09FE16EEA5A227A7CA3A8400F560AA1B0B9E7473041310D3E1547A906022A557
ike 0:VPN_yYy:11: dec 76CC7F0CEBD74B5667C1C1CB3C0AC42008100501CD5229110000006C0B000024B77D248D9AE6889921B50255482120E751BF9178C4B253E010CFE90426783A7A000000200000000101108D2976CC7F0CEBD74B5667C1C1CB3C0AC42000003335464F0B9C4A307B6B53162B0B
ike 0:VPN_yYy:11: notify msg received: R-U-THERE-ACK
ike 0:VPN_yYy: link is idle 26 197.14.12.221->197.13.0.211:0 dpd=1 seqno=3336
ike 0:VPN_yYy:11: send IKEv1 DPD probe, seqno 13110
ike 0:VPN_yYy:11: enc 76CC7F0CEBD74B5667C1C1CB3C0AC42008100501F3580689000000600B0000249A23CC5BB35DB048460A808DC36806CA11EE4CE31A29291A0972E942E7E5065D000000200000000101108D2876CC7F0CEBD74B5667C1C1CB3C0AC42000003336
ike 0:VPN_yYy:11: out 76CC7F0CEBD74B5667C1C1CB3C0AC42008100501F35806890000006C02A323613259E88BFE2D10D74E4729997C41176F430BA8B92CF0588C4BB11C5D564C616F9C46A5F8F3168946BA9BF4B606B49A800F844EE3A0231037597B5205EBBB8C5DB4946FC947C17635F06EFCFF
ike 0:VPN_yYy:11: sent IKE msg (R-U-THERE): 197.14.12.221:500->197.13.0.211:500, len=108, id=76cc7f0cebd74b56/67c1c1cb3c0ac420:f3580689
ike 0: comes 197.13.0.211:500->197.14.12.221:500,ifindex=26....
ike 0: IKEv1 exchange=Informational id=76cc7f0cebd74b56/67c1c1cb3c0ac420:5766c93e len=108
ike 0: in 76CC7F0CEBD74B5667C1C1CB3C0AC420081005015766C93E0000006CA7DAE1D214E401A2CF7D3E3CF11DA5FE3D4B299F85272E269971980C8C1EBF9C88B1EFBB3F67721E185DFE8468D70A38C9E17B658C47E8E978D38BB272D7C83C28E51F24A8F96DF6F84304E0EDD2BD61
ike 0:VPN_yYy:11: dec 76CC7F0CEBD74B5667C1C1CB3C0AC420081005015766C93E0000006C0B000024797143A1D6701C2900DCF333ECB86EF278F1CB03D9F9471B126177753C990F7A000000200000000101108D2976CC7F0CEBD74B5667C1C1CB3C0AC42000003336151B2F2C5A96091152A9060B
ike 0:VPN_yYy:11: notify msg received: R-U-THERE-ACK
ike 0:VPN_yYy: link is idle 26 197.14.12.221->197.13.0.211:0 dpd=1 seqno=3337
ike 0:VPN_yYy:11: send IKEv1 DPD probe, seqno 13111
ike 0:VPN_yYy:11: enc 76CC7F0CEBD74B5667C1C1CB3C0AC42008100501684F6F69000000600B0000243C1F64A201E331D627907824558C0E4A21A19C550CCDDF9B7DF272DD37C3BC32000000200000000101108D2876CC7F0CEBD74B5667C1C1CB3C0AC42000003337
ike 0:VPN_yYy:11: out 76CC7F0CEBD74B5667C1C1CB3C0AC42008100501684F6F690000006CED9FF0B6093FD62DD35DE804D33931957962D5A209702FC869CA45E991D97347F632DDEDB2B09B68819E90BF33133C6D16BDB0CF78BBE9F704389DCBB4441A66FA368040414F6CC7AF8EFAC0EF846FD4
ike 0:VPN_yYy:11: sent IKE msg (R-U-THERE): 197.14.12.221:500->197.13.0.211:500, len=108, id=76cc7f0cebd74b56/67c1c1cb3c0ac420:684f6f69
ike 0: comes 197.13.0.211:500->197.14.12.221:500,ifindex=26....
ike 0: IKEv1 exchange=Informational id=76cc7f0cebd74b56/67c1c1cb3c0ac420:a244925a len=108
ike 0: in 76CC7F0CEBD74B5667C1C1CB3C0AC42008100501A244925A0000006C5D91844017B79079B7AD48C78F480F4D912FCFE55D63C194A5BDC43E0B2F08815C5E2D0F63FF86088DA6B24F229AF3321E68CF50ED448F36697F7505DBF31BB3798F45E27971CCEACA42C8DFCF68CBA0
ike 0:VPN_yYy:11: dec 76CC7F0CEBD74B5667C1C1CB3C0AC42008100501A244925A0000006C0B00002498CEBC3D99D98CE76144A89A9760BA4B5EB6EE229A4B46B2CDD0A2D9224532FF000000200000000101108D2976CC7F0CEBD74B5667C1C1CB3C0AC42000003337514461675295E7B99699F60B
ike 0:VPN_yYy:11: notify msg received: R-U-THERE-ACK
ike 0:VPN_yYy: link is idle 26 197.14.12.221->197.13.0.211:0 dpd=1 seqno=3338
ike 0:VPN_yYy:11: send IKEv1 DPD probe, seqno 13112
ike 0:VPN_yYy:11: enc 76CC7F0CEBD74B5667C1C1CB3C0AC420081005013349B7DE000000600B0000245483C89E38A22D62D3F2956F531AB5D5E57D0E87592AC65EF012DA48C0E36042000000200000000101108D2876CC7F0CEBD74B5667C1C1CB3C0AC42000003338
ike 0:VPN_yYy:11: out 76CC7F0CEBD74B5667C1C1CB3C0AC420081005013349B7DE0000006C67A93D66959DC8E67CCB33D7B2A42920C675730E1A4CC66B1D0FAB0EDE70602DCCF7ACF35E19B6D54D2B226FBD01428ACF1BE44D23509C36DBA703C10303BB19644073BA41551E2A3453304BD3D28F65
ike 0:VPN_yYy:11: sent IKE msg (R-U-THERE): 197.14.12.221:500->197.13.0.211:500, len=108, id=76cc7f0cebd74b56/67c1c1cb3c0ac420:3349b7de
ike 0: comes 197.13.0.211:500->197.14.12.221:500,ifindex=26....
ike 0: IKEv1 exchange=Informational id=76cc7f0cebd74b56/67c1c1cb3c0ac420:adeb58f4 len=108
ike 0: in 76CC7F0CEBD74B5667C1C1CB3C0AC42008100501ADEB58F40000006CCB91B40EDA3425333B1815291D22A228F45B47D3C5A787AB51C2B672228359D98F1ADE77659C2EB1B187E79FA2137EE385EE5D30E2ADD06EE08DC0D8F076C193667F2296C7D35DB51AA3715222308ADF
ike 0:VPN_yYy:11: dec 76CC7F0CEBD74B5667C1C1CB3C0AC42008100501ADEB58F40000006C0B000024D6F03F49417852A6219DFA668FAFEBA95D173094B2FBB30F027DB1D59DD7AB14000000200000000101108D2976CC7F0CEBD74B5667C1C1CB3C0AC420000033383504C1E2115081BA6DDBF90B
ike 0:VPN_yYy:11: notify msg received: R-U-THERE-ACK
ike 0:VPN_yYy: link is idle 26 197.14.12.221->197.13.0.211:0 dpd=1 seqno=3339
ike 0:VPN_yYy:11: send IKEv1 DPD probe, seqno 13113
ike 0:VPN_yYy:11: enc 76CC7F0CEBD74B5667C1C1CB3C0AC420081005010BC56D04000000600B000024A146FE4AE52E8611BC500F0588D7A1DAE40779D476C9CA5917BD3790EB10F952000000200000000101108D2876CC7F0CEBD74B5667C1C1CB3C0AC42000003339
ike 0:VPN_yYy:11: out 76CC7F0CEBD74B5667C1C1CB3C0AC420081005010BC56D040000006CBD317E48B7F2EB0FB31B14797863B8034E06E721E7115A8C76E09678E3332802893F3EF54AE2A3427E62DD99ED1B2A4F2305122048BCDA0A1795645A9001B67752D54CC99FA92C9B4A48B92F690BAA97
ike 0:VPN_yYy:11: sent IKE msg (R-U-THERE): 197.14.12.221:500->197.13.0.211:500, len=108, id=76cc7f0cebd74b56/67c1c1cb3c0ac420:0bc56d04
ike 0: comes 197.13.0.211:500->197.14.12.221:500,ifindex=26....
ike 0: IKEv1 exchange=Informational id=76cc7f0cebd74b56/67c1c1cb3c0ac420:46f17aba len=108
ike 0: in 76CC7F0CEBD74B5667C1C1CB3C0AC4200810050146F17ABA0000006C611C0A2572928C1BCB29C4C179B8EC222AD3B323EC19DAC5C3689DAA9B1F642E8F583430CC6E02693FC03C4F1BC14C4F870DB30A721826370D4241DC69AB33E28040A941BAFCEE3B0ED48A76180BFA00
ike 0:VPN_yYy:11: dec 76CC7F0CEBD74B5667C1C1CB3C0AC4200810050146F17ABA0000006C0B000024DA276F853C2A705324686B6583F03DF6248D64B9306142B11D57E0E9CEFF4509000000200000000101108D2976CC7F0CEBD74B5667C1C1CB3C0AC42000003339BEE1678227F15CC2D83EBA0B
ike 0:VPN_yYy:11: notify msg received: R-U-THERE-ACK
ike 0:VPN_yYy: link is idle 26 197.14.12.221->197.13.0.211:0 dpd=1 seqno=333a
ike 0:VPN_yYy:11: send IKEv1 DPD probe, seqno 13114
ike 0:VPN_yYy:11: enc 76CC7F0CEBD74B5667C1C1CB3C0AC42008100501F3BFD30A000000600B000024DD473AC5EB40CA8629CE56B914D5D632D57BE3F4D22C821BC4509D7A77AA3C76000000200000000101108D2876CC7F0CEBD74B5667C1C1CB3C0AC4200000333A
ike 0:VPN_yYy:11: out 76CC7F0CEBD74B5667C1C1CB3C0AC42008100501F3BFD30A0000006C053D6FF74A9372DE229F1EA21D3C22CD65F844D41CA2FAEF7ACAF42C7157F9A818EB79A1CA3BB14B4407D7EEB119F1A0B1D06953573C1FADCAA1D452F2F32E3FC1D591FDDC8D6CE3BDC7BC883723743D
ike 0:VPN_yYy:11: sent IKE msg (R-U-THERE): 197.14.12.221:500->197.13.0.211:500, len=108, id=76cc7f0cebd74b56/67c1c1cb3c0ac420:f3bfd30a
ike 0: comes 197.13.0.211:500->197.14.12.221:500,ifindex=26....
ike 0: IKEv1 exchange=Informational id=76cc7f0cebd74b56/67c1c1cb3c0ac420:efff5b9c len=108
ike 0: in 76CC7F0CEBD74B5667C1C1CB3C0AC42008100501EFFF5B9C0000006C6EC8ECF2E339A83AEDDCE78CD31266350ABD188B092F4EC2ED42A600C153190A50FB34954755F8AB2853886CF7AAC7D7B71CEABC99B5E99C77166997303B944206C3FF68AC8847EA909FD1F46B1454C9
ike 0:VPN_yYy:11: dec 76CC7F0CEBD74B5667C1C1CB3C0AC42008100501EFFF5B9C0000006C0B000024E3319A0D4456C0BAD42407C6AA6382236ABE94DBE3593A4CDB9382B0A36F62D5000000200000000101108D2976CC7F0CEBD74B5667C1C1CB3C0AC4200000333A22DE712F35529ED4C52B3F0B
ike 0:VPN_yYy:11: notify msg received: R-U-THERE-ACK
ike HA resync start
ike HA resync finish
ike 0:VPN_yYy: link is idle 26 197.14.12.221->197.13.0.211:0 dpd=1 seqno=333b
ike 0:VPN_yYy:11: send IKEv1 DPD probe, seqno 13115
ike 0:VPN_yYy:11: enc 76CC7F0CEBD74B5667C1C1CB3C0AC42008100501674B55F1000000600B000024EF1CF2BFB1BACB6BFB2500FBB394D11523841C7308329265B679E84BA288A60E000000200000000101108D2876CC7F0CEBD74B5667C1C1CB3C0AC4200000333B
ike 0:VPN_yYy:11: out 76CC7F0CEBD74B5667C1C1CB3C0AC42008100501674B55F10000006C63E9F75D6957E6D97F6ED65FFE81A99B8BBC6FC35C79CD31467C80A6C361276705570BA6EAB2B50F1B53A2CAD5CF2BC3669609274C1215461A46DA484BDBDDD655985044062EC18A7BC63D789A55B0CB
ike 0:VPN_yYy:11: sent IKE msg (R-U-THERE): 197.14.12.221:500->197.13.0.211:500, len=108, id=76cc7f0cebd74b56/67c1c1cb3c0ac420:674b55f1
ike 0: comes 197.13.0.211:500->197.14.12.221:500,ifindex=26....
ike 0: IKEv1 exchange=Informational id=76cc7f0cebd74b56/67c1c1cb3c0ac420:219a68ca len=108
ike 0: in 76CC7F0CEBD74B5667C1C1CB3C0AC42008100501219A68CA0000006C88EEB222A09EB5A432673430CCCABA37C6C64D67F73F5E1073E445F452D9A183FB3A1994AFD4E31CAAEA896BA008424400CDB60FEF4A58A13ADA8D26FF4314E8193036E3585BDFEA6FA2B1FBDE64B954
ike 0:VPN_yYy:11: dec 76CC7F0CEBD74B5667C1C1CB3C0AC42008100501219A68CA0000006C0B000024BDDC4E54157E0E1189C52EC49AE0CB7B215ABD2E3DF1E15789F3B11EA3968078000000200000000101108D2976CC7F0CEBD74B5667C1C1CB3C0AC4200000333B83313D7A278F146665CF900B
ike 0:VPN_yYy:11: notify msg received: R-U-THERE-ACK
ike 0:VPN_yYy: link is idle 26 197.14.12.221->197.13.0.211:0 dpd=1 seqno=333c
ike 0:VPN_yYy:11: send IKEv1 DPD probe, seqno 13116
ike 0:VPN_yYy:11: enc 76CC7F0CEBD74B5667C1C1CB3C0AC420081005019DFC2F87000000600B0000248DBAE478CA0C819F59281A8810C65E27962FEF32D30089D72B6642E44E753F8B000000200000000101108D2876CC7F0CEBD74B5667C1C1CB3C0AC4200000333C
ike 0:VPN_yYy:11: out 76CC7F0CEBD74B5667C1C1CB3C0AC420081005019DFC2F870000006C8055BDE042DFE52D3CC9A41C85C2FC449D2AF1EF334AC04BF600B95306A0E13AB2FFBD4F836928F04064904F8815F37A51E93A4E3E985181D554DF5EE6800B6FB7F44BF48B640D28BD299F0C26DFD701
ike 0:VPN_yYy:11: sent IKE msg (R-U-THERE): 197.14.12.221:500->197.13.0.211:500, len=108, id=76cc7f0cebd74b56/67c1c1cb3c0ac420:9dfc2f87
ike 0: comes 197.13.0.211:500->197.14.12.221:500,ifindex=26....
ike 0: IKEv1 exchange=Informational id=76cc7f0cebd74b56/67c1c1cb3c0ac420:c743e1a8 len=108
ike 0: in 76CC7F0CEBD74B5667C1C1CB3C0AC42008100501C743E1A80000006CECEF99B3997B5E73ED377BAD54405676CE4C33E30564D2705D394CC01CBBB0F1C53F3D345D74E536C0A977E63CAA32E45C2ED2B1AD03A1A714ABB66386595A449FB86174C588B9BC6182E040CDE08CFE
ike 0:VPN_yYy:11: dec 76CC7F0CEBD74B5667C1C1CB3C0AC42008100501C743E1A80000006C0B000024BF890842D46152AF40D7D48AE8044E3C5A13456D8CD670717F25E759B607432C000000200000000101108D2976CC7F0CEBD74B5667C1C1CB3C0AC4200000333C14B21EF6814F60DD734C3B0B
ike 0:VPN_yYy:11: notify msg received: R-U-THERE-ACK
ike 0:VPN_yYy: link is idle 26 197.14.12.221->197.13.0.211:0 dpd=1 seqno=333d
ike 0:VPN_yYy:11: send IKEv1 DPD probe, seqno 13117
ike 0:VPN_yYy:11: enc 76CC7F0CEBD74B5667C1C1CB3C0AC42008100501A9D7ADD5000000600B000024FEA4D52206E60687BC720088B79CBDB84F03142D9EF13E37FC9B7462359E9241000000200000000101108D2876CC7F0CEBD74B5667C1C1CB3C0AC4200000333D
ike 0:VPN_yYy:11: out 76CC7F0CEBD74B5667C1C1CB3C0AC42008100501A9D7ADD50000006C3D7820D349792190AB66A8FFFDE9E40CF1028EEF21D34F3D5F99CCA906A8439A615C0A0A201A2E0131F2C47539F96ED777DCF8F9F26B8EF081EAA8F400073B9951A8AC9A943A7C7216B38532C3DAE2F6
ike 0:VPN_yYy:11: sent IKE msg (R-U-THERE): 197.14.12.221:500->197.13.0.211:500, len=108, id=76cc7f0cebd74b56/67c1c1cb3c0ac420:a9d7add5
ike 0: comes 197.13.0.211:500->197.14.12.221:500,ifindex=26....
ike 0: IKEv1 exchange=Informational id=76cc7f0cebd74b56/67c1c1cb3c0ac420:ddc81788 len=108
ike 0: in 76CC7F0CEBD74B5667C1C1CB3C0AC42008100501DDC817880000006C2EC695B3EA6FD72212F4A5CB5A144D65BFC3FAEF2F3535599345096F3587C7B8C101A4C64FDD405C4C709A17153A5206FB30C97EE2D50C681234AA45B687BEEADF59ED36BE07F26F48DA16C42427F09D
ike 0:VPN_yYy:11: dec 76CC7F0CEBD74B5667C1C1CB3C0AC42008100501DDC817880000006C0B000024825AB728BE5B245C0D88C3A7EB3B8AD321B0C7EFD8B299D6D5D3089CEA4B6A3B000000200000000101108D2976CC7F0CEBD74B5667C1C1CB3C0AC4200000333D9AA25F8A4983EB3EAA30530B
ike 0:VPN_yYy:11: notify msg received: R-U-THERE-ACK
 
FGT_COMAF_PRI # 
FGT_COMAF_PRI # 
FGT_COMAF_PRI # di de di
 
FGT_COMAF_PRI # 

the two diagnose show all is ok

need an expert help

[style="background-color: #ff0000;"]thank you FGT people.[/style]

[Toshi_Esumi]

First, I wouldn't think anything has changed on IPsec, but suspecting routing got changed. As you noticed IPSec has been established normally and exchanging R-U-THERE/R-U-THERE-ACK.

The IKE debug you ran shows only IKE related messages, none of user packets through the tunnel would show up.

What you need to run is "diag sniffer" and then "flow debug" to see where those packets are routed/arrived and how they're processed on both sides (you can find those debugging methods everywhere).

Just remember to disable asic offloading on the policies to be able to see the activities in debugging by "set auto-asic-offload disable".