Windows IKEv2 native VPN with Signature, Public Wildcard Certificate, MS-CHAPv2, Duo and NPS

[it_starlite]

I am attempting to setup an ipsec Ikev2 VPN using the Windows Native Client.

The attempt to connect fails immediately with the "IKE authentication credentials are unacceptable" error. I have found this article: https://community.fortinet.com/t5/FortiGate/Technical-Tip-IKE-authentication-credentials-are-unacceptable/ta-p/382297. However, I am using our publicly signed Wildcard certificate, so  should not need to upload the CA certificate to the client as stated in the article.

I have also found this article which is a similar but not exact configuration: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Configure-IKEv2-IPsec-VPN-MS-CHAPv2-with-W....

This video is also similar but not exact: https://www.youtube.com/watch?v=a0W-NyI6m10

Lastly this is an official guide from FortiGate that's also similar: https://docs.fortinet.com/document/fortigate/7.6.3/administration-guide/726232/windows-ikev2-native-...

I am coming from a Watchguard firewall that creates a PowerShell script and batch file to run on the windows client to install their certificate and setup the VPN. I'd like a setup as similar to that on my new FortiGate to minimize changes for the clients.

My Windows client is setup with MS-CHAP v2 as the authentication method and the client has both computer and user certificates with "client authentication" as one of the intended purposes pushed out via group policy auto-enrollment from my local CA.

I have uploaded the CA from my local CA to the FortiGate and am using that as the peer certificate. The user group is tied to radius which goes to my Duo Athentication proxy and then hits my NPS server. If I test the radius server in the Radius setup of the FortiGate, the test is successful as long as the NPS server has MS-CHAPv2 enabled under "less secure methods". I also have PEAP with the certifcate issued by the local CA to the NPS server and the EAP Type as Secured Password EAP-MSCHAPv2.

When I attempt the connection, nothing at all is logged on the NPS server, so I believe the connection is failing before it even attempts to connect to the NPS server.

Here is my configuration:

edit "Windows VPN"
set type dynamic
set interface "wan1"
set ike-version 2
set authmethod signature
set net-device disable
set mode-cfg enable
set ipv4-dns-server1 mydnsserver
set proposal aes256-sha1 3des-sha1 aes256-sha256 aes128-sha256 aes128-sha1
set comments "VPN: Windows VPN -- Created by VPN wizard"
set dhgrp 14 5 2
set eap enable
set eap-identity send-request
set wizard-type dialup-windows
set authusrgrp "IKEv2-Users"
set transport auto
set certificate "*.mycompany.com"
set peer "mycompany.local CA"
set ipv4-start-ip 192.168.114.0
set ipv4-end-ip 192.168.114.255
set ipv4-split-include "Trusted_Subnet"
next
end

[Markus_M]

Hi there,

I'm not sure about the client certificate and MSCHAPv2. Happy for correction, but I expect MSCHAPv2 to be transporting passwords, not certificates. So this isn't to be mixed.

The FortiGate can verify the certificate it receives with a peer configuration (referring to an object in "config user peer"). The RADIUS messages would be sent via the authusrgrp, that must have a group that points to that RADIUS server, NPS. I recommend removing the authusrgrp, and putting it instead on the firewall policies.

To get a better idea who complains about what unacceptable credentials, run debug where possible. On FortiGate I recommend a RADIUS packet capture in direction of the NPS server to see what is sent (if anything).
diag sniffer packet any 'port 1812 and host <NPS-IP> 6 0 a
This is convertable to a PCAP for Wireshark analysis (if there is output).
Take a second shell to FortiGate and run the following debug:

diag debug console timestamp enable
diag debug app ike -1
diag debug app eap_proxy -1
diag debug app fnbamd -1
diag debug enable
Make sure the FortiGate system time is correct and then establish the VPN connection to reproduce that issue. The timestamps may help to match an attempt if there are multiple at the same time for some reason.
fnbamd handles certificates and RADIUS (+LDAP,+TACACS) messages, eap_proxy is needed for ikev2 and ike is the general IPSec debug.

[it_starlite]

I ran the debug and this was the result:

2025-08-21 22:37:25.858204 ike V=root:0: comes <My_Client_IP>:14217-><My_Public_IP>:500,ifindex=3,vrf=0,len=1104....
2025-08-21 22:37:25.858247 ike V=root:0: IKEv2 exchange=SA_INIT id=88cfd576bcc6be41/0000000000000000 len=1104
2025-08-21 22:37:25.858269 ike 0: in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
2025-08-21 22:37:25.858335 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: responder received SA_INIT msg
2025-08-21 22:37:25.858351 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: received notify type FRAGMENTATION_SUPPORTED
2025-08-21 22:37:25.858365 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: received notify type NAT_DETECTION_SOURCE_IP
2025-08-21 22:37:25.858376 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: received notify type NAT_DETECTION_DESTINATION_IP
2025-08-21 22:37:25.858390 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: VID MS NT5 ISAKMPOAKLEY 1E2B516905991C7D7C96FCBFB587E46100000009
2025-08-21 22:37:25.858403 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: VID unknown (16): FB1DE3CDF341B7EA16B7E5BE0855F120
2025-08-21 22:37:25.858416 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: VID unknown (16): 26244D38EDDB61B3172A36E3D0CFB819
2025-08-21 22:37:25.858436 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: VID unknown (20): 01528BBBC00696121849AB9A1C5B2A5100000002
2025-08-21 22:37:25.858467 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: incoming proposal:
2025-08-21 22:37:25.858479 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: proposal id = 1:
2025-08-21 22:37:25.858489 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: protocol = IKEv2:
2025-08-21 22:37:25.858498 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: encapsulation = IKEv2/none
2025-08-21 22:37:25.858508 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=ENCR, val=3DES_CBC
2025-08-21 22:37:25.858517 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=INTEGR, val=AUTH_HMAC_SHA_96
2025-08-21 22:37:25.858533 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=PRF, val=PRF_HMAC_SHA
2025-08-21 22:37:25.858542 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=DH_GROUP, val=MODP1024.
2025-08-21 22:37:25.858553 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: proposal id = 2:
2025-08-21 22:37:25.858561 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: protocol = IKEv2:
2025-08-21 22:37:25.858568 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: encapsulation = IKEv2/none
2025-08-21 22:37:25.858576 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=ENCR, val=3DES_CBC
2025-08-21 22:37:25.858584 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=INTEGR, val=AUTH_HMAC_SHA2_256_128
2025-08-21 22:37:25.858592 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=PRF, val=PRF_HMAC_SHA2_256
2025-08-21 22:37:25.858599 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=DH_GROUP, val=MODP1024.
2025-08-21 22:37:25.858610 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: proposal id = 3:
2025-08-21 22:37:25.858622 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: protocol = IKEv2:
2025-08-21 22:37:25.858629 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: encapsulation = IKEv2/none
2025-08-21 22:37:25.858637 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=ENCR, val=3DES_CBC
2025-08-21 22:37:25.858645 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=INTEGR, val=AUTH_HMAC_SHA2_384_192
2025-08-21 22:37:25.858653 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=PRF, val=PRF_HMAC_SHA2_384
2025-08-21 22:37:25.858661 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=DH_GROUP, val=MODP1024.
2025-08-21 22:37:25.858671 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: proposal id = 4:
2025-08-21 22:37:25.858679 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: protocol = IKEv2:
2025-08-21 22:37:25.858686 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: encapsulation = IKEv2/none
2025-08-21 22:37:25.858694 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=ENCR, val=AES_CBC (key_len = 128)
2025-08-21 22:37:25.858702 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=INTEGR, val=AUTH_HMAC_SHA_96
2025-08-21 22:37:25.858710 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=PRF, val=PRF_HMAC_SHA
2025-08-21 22:37:25.858718 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=DH_GROUP, val=MODP1024.
2025-08-21 22:37:25.858728 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: proposal id = 5:
2025-08-21 22:37:25.858736 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: protocol = IKEv2:
2025-08-21 22:37:25.858743 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: encapsulation = IKEv2/none
2025-08-21 22:37:25.858751 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=ENCR, val=AES_CBC (key_len = 128)
2025-08-21 22:37:25.858759 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=INTEGR, val=AUTH_HMAC_SHA2_256_128
2025-08-21 22:37:25.858766 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=PRF, val=PRF_HMAC_SHA2_256
2025-08-21 22:37:25.858774 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=DH_GROUP, val=MODP1024.
2025-08-21 22:37:25.858784 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: proposal id = 6:
2025-08-21 22:37:25.858792 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: protocol = IKEv2:
2025-08-21 22:37:25.858799 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: encapsulation = IKEv2/none
2025-08-21 22:37:25.858807 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=ENCR, val=AES_CBC (key_len = 128)
2025-08-21 22:37:25.858815 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=INTEGR, val=AUTH_HMAC_SHA2_384_192
2025-08-21 22:37:25.858822 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=PRF, val=PRF_HMAC_SHA2_384
2025-08-21 22:37:25.858830 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=DH_GROUP, val=MODP1024.
2025-08-21 22:37:25.858840 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: proposal id = 7:
2025-08-21 22:37:25.858848 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: protocol = IKEv2:
2025-08-21 22:37:25.858856 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: encapsulation = IKEv2/none
2025-08-21 22:37:25.858865 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=ENCR, val=AES_CBC (key_len = 192)
2025-08-21 22:37:25.858872 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=INTEGR, val=AUTH_HMAC_SHA_96
2025-08-21 22:37:25.858879 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=PRF, val=PRF_HMAC_SHA
2025-08-21 22:37:25.858887 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=DH_GROUP, val=MODP1024.
2025-08-21 22:37:25.858897 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: proposal id = 8:
2025-08-21 22:37:25.858904 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: protocol = IKEv2:
2025-08-21 22:37:25.858911 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: encapsulation = IKEv2/none
2025-08-21 22:37:25.858919 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=ENCR, val=AES_CBC (key_len = 192)
2025-08-21 22:37:25.858927 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=INTEGR, val=AUTH_HMAC_SHA2_256_128
2025-08-21 22:37:25.858934 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=PRF, val=PRF_HMAC_SHA2_256
2025-08-21 22:37:25.858942 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=DH_GROUP, val=MODP1024.
2025-08-21 22:37:25.858951 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: proposal id = 9:
2025-08-21 22:37:25.858961 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: protocol = IKEv2:
2025-08-21 22:37:25.858968 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: encapsulation = IKEv2/none
2025-08-21 22:37:25.858976 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=ENCR, val=AES_CBC (key_len = 192)
2025-08-21 22:37:25.858983 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=INTEGR, val=AUTH_HMAC_SHA2_384_192
2025-08-21 22:37:25.858991 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=PRF, val=PRF_HMAC_SHA2_384
2025-08-21 22:37:25.858998 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=DH_GROUP, val=MODP1024.
2025-08-21 22:37:25.859008 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: proposal id = 10:
2025-08-21 22:37:25.859016 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: protocol = IKEv2:
2025-08-21 22:37:25.859023 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: encapsulation = IKEv2/none
2025-08-21 22:37:25.859030 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=ENCR, val=AES_CBC (key_len = 256)
2025-08-21 22:37:25.859038 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=INTEGR, val=AUTH_HMAC_SHA_96
2025-08-21 22:37:25.859046 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=PRF, val=PRF_HMAC_SHA
2025-08-21 22:37:25.859053 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=DH_GROUP, val=MODP1024.
2025-08-21 22:37:25.859063 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: proposal id = 11:
2025-08-21 22:37:25.859071 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: protocol = IKEv2:
2025-08-21 22:37:25.859078 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: encapsulation = IKEv2/none
2025-08-21 22:37:25.859086 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=ENCR, val=AES_CBC (key_len = 256)
2025-08-21 22:37:25.859093 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=INTEGR, val=AUTH_HMAC_SHA2_256_128
2025-08-21 22:37:25.859100 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=PRF, val=PRF_HMAC_SHA2_256
2025-08-21 22:37:25.859108 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=DH_GROUP, val=MODP1024.
2025-08-21 22:37:25.859117 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: proposal id = 12:
2025-08-21 22:37:25.859125 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: protocol = IKEv2:
2025-08-21 22:37:25.859132 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: encapsulation = IKEv2/none
2025-08-21 22:37:25.859140 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=ENCR, val=AES_CBC (key_len = 256)
2025-08-21 22:37:25.859147 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=INTEGR, val=AUTH_HMAC_SHA2_384_192
2025-08-21 22:37:25.859154 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=PRF, val=PRF_HMAC_SHA2_384
2025-08-21 22:37:25.859164 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=DH_GROUP, val=MODP1024.
2025-08-21 22:37:25.859174 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: proposal id = 13:
2025-08-21 22:37:25.859182 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: protocol = IKEv2:
2025-08-21 22:37:25.859189 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: encapsulation = IKEv2/none
2025-08-21 22:37:25.859197 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=ENCR, val=AES_GCM_16 (key_len = 128)
2025-08-21 22:37:25.859205 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=PRF, val=PRF_HMAC_SHA
2025-08-21 22:37:25.859212 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=DH_GROUP, val=MODP1024.
2025-08-21 22:37:25.859222 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: proposal id = 14:
2025-08-21 22:37:25.859229 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: protocol = IKEv2:
2025-08-21 22:37:25.859236 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: encapsulation = IKEv2/none
2025-08-21 22:37:25.859243 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=ENCR, val=AES_GCM_16 (key_len = 128)
2025-08-21 22:37:25.859251 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=PRF, val=PRF_HMAC_SHA2_256
2025-08-21 22:37:25.859258 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=DH_GROUP, val=MODP1024.
2025-08-21 22:37:25.859268 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: proposal id = 15:
2025-08-21 22:37:25.859276 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: protocol = IKEv2:
2025-08-21 22:37:25.859283 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: encapsulation = IKEv2/none
2025-08-21 22:37:25.859290 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=ENCR, val=AES_GCM_16 (key_len = 128)
2025-08-21 22:37:25.859298 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=PRF, val=PRF_HMAC_SHA2_384
2025-08-21 22:37:25.859305 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=DH_GROUP, val=MODP1024.
2025-08-21 22:37:25.859315 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: proposal id = 16:
2025-08-21 22:37:25.859323 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: protocol = IKEv2:
2025-08-21 22:37:25.859331 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: encapsulation = IKEv2/none
2025-08-21 22:37:25.859342 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=ENCR, val=AES_GCM_16 (key_len = 256)
2025-08-21 22:37:25.859353 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=PRF, val=PRF_HMAC_SHA
2025-08-21 22:37:25.859362 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=DH_GROUP, val=MODP1024.
2025-08-21 22:37:25.859372 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: proposal id = 17:
2025-08-21 22:37:25.859379 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: protocol = IKEv2:
2025-08-21 22:37:25.859386 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: encapsulation = IKEv2/none
2025-08-21 22:37:25.859394 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=ENCR, val=AES_GCM_16 (key_len = 256)
2025-08-21 22:37:25.859401 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=PRF, val=PRF_HMAC_SHA2_256
2025-08-21 22:37:25.859408 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=DH_GROUP, val=MODP1024.
2025-08-21 22:37:25.859418 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: proposal id = 18:
2025-08-21 22:37:25.859431 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: protocol = IKEv2:
2025-08-21 22:37:25.859438 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: encapsulation = IKEv2/none
2025-08-21 22:37:25.859445 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=ENCR, val=AES_GCM_16 (key_len = 256)
2025-08-21 22:37:25.859453 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=PRF, val=PRF_HMAC_SHA2_384
2025-08-21 22:37:25.859462 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=DH_GROUP, val=MODP1024.
2025-08-21 22:37:25.859484 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: matched proposal id 10
2025-08-21 22:37:25.859495 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: proposal id = 10:
2025-08-21 22:37:25.859502 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: protocol = IKEv2:
2025-08-21 22:37:25.859509 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: encapsulation = IKEv2/none
2025-08-21 22:37:25.859516 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=ENCR, val=AES_CBC (key_len = 256)
2025-08-21 22:37:25.859523 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=INTEGR, val=AUTH_HMAC_SHA_96
2025-08-21 22:37:25.859530 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=PRF, val=PRF_HMAC_SHA
2025-08-21 22:37:25.859538 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: type=DH_GROUP, val=MODP1024.
2025-08-21 22:37:25.859544 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: lifetime=86400
2025-08-21 22:37:25.859555 ike V=root:0:88cfd576bcc6be41/0000000000000000:113: SA proposal chosen, matched gateway Windows VPN
2025-08-21 22:37:25.859573 ike V=root:0:Windows VPN:Windows VPN: created connection: 0x3a9f0990 3 <My_Public_IP>-><My_Client_IP>:14217.
2025-08-21 22:37:25.859593 ike V=root:0:Windows VPN:113: processing notify type NAT_DETECTION_SOURCE_IP
2025-08-21 22:37:25.859622 ike V=root:0:Windows VPN:113: processing NAT-D payload
2025-08-21 22:37:25.859633 ike V=root:0:Windows VPN:113: NAT detected: PEER
2025-08-21 22:37:25.859641 ike V=root:0:Windows VPN:113: process NAT-D
2025-08-21 22:37:25.859648 ike V=root:0:Windows VPN:113: processing notify type NAT_DETECTION_DESTINATION_IP
2025-08-21 22:37:25.859664 ike V=root:0:Windows VPN:113: processing NAT-D payload
2025-08-21 22:37:25.859671 ike V=root:0:Windows VPN:113: NAT detected: PEER
2025-08-21 22:37:25.859678 ike V=root:0:Windows VPN:113: process NAT-D
2025-08-21 22:37:25.859685 ike V=root:0:Windows VPN:113: processing notify type FRAGMENTATION_SUPPORTED
2025-08-21 22:37:25.859723 ike V=root:0:Windows VPN:113: responder preparing SA_INIT msg
2025-08-21 22:37:25.859755 ike V=root:0:Windows VPN:113: generate DH public value request pending
2025-08-21 22:37:25.859802 ike V=root:0:Windows VPN:113: responder preparing SA_INIT msg
2025-08-21 22:37:25.859815 ike V=root:0:Windows VPN:113: compute DH shared secret request queued
2025-08-21 22:37:25.860575 ike V=root:0:Windows VPN:113: responder preparing SA_INIT msg
2025-08-21 22:37:25.860591 ike V=root:0:Windows VPN:113: create NAT-D hash local <My_Public_IP>/500 remote <My_Client_IP>/14217
2025-08-21 22:37:25.860603 ike V=root:0:Windows VPN:113: sending CERTREQ payload (len=21)
2025-08-21 22:37:25.860610 ike V=root:0:Windows VPN:113: certreq[0]: '8BEA4AA62308E46585C94C8073CB09328EFE5A7C'
2025-08-21 22:37:25.860622 ike 0:Windows VPN:113: out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
2025-08-21 22:37:25.860658 ike V=root:0:Windows VPN:113: sent IKE msg (SA_INIT_RESPONSE): <My_Public_IP>:500-><My_Client_IP>:14217, len=321, vrf=0, id=88cfd576bcc6be41/6de14ae6e3c7d204, oif=3
2025-08-21 22:37:25.860723 ike 0:Windows VPN:113: IKE SA 88cfd576bcc6be41/6de14ae6e3c7d204 SK_ei 32:740E6C21E529D35BCCC64E2FE8837A52B6CCCB77BB43476EC379B51F16D9744E
2025-08-21 22:37:25.860736 ike 0:Windows VPN:113: IKE SA 88cfd576bcc6be41/6de14ae6e3c7d204 SK_er 32:6935E4EF1158111D416A6D1C97822B4E12FADBF986A222C718012A8B98493138
2025-08-21 22:37:25.860746 ike 0:Windows VPN:113: IKE SA 88cfd576bcc6be41/6de14ae6e3c7d204 SK_ai 20:C75CC6256FC5CAF4169EA210D8384429F9A8BFA0
2025-08-21 22:37:25.860755 ike 0:Windows VPN:113: IKE SA 88cfd576bcc6be41/6de14ae6e3c7d204 SK_ar 20:7C8BEB55101B073FF62631FD28FE49E0E73C8AD9
2025-08-21 22:37:26.251360 ike V=root:0: comes <My_Client_IP>:14218-><My_Public_IP>:4500,ifindex=3,vrf=0,len=580....
2025-08-21 22:37:26.251391 ike V=root:0: IKEv2 exchange=AUTH id=88cfd576bcc6be41/6de14ae6e3c7d204:00000001 len=576
2025-08-21 22:37:26.251410 ike 0: in 88CFD576BCC6BE416DE14AE6E3C7D204352023080000000100000240230002240001000526BE3819F67DDF27DA96533760FC03BE6CFC9626DC4D6CC1EDB26D8F778F351DFAF6D41B391738C7EC0098E32DCED8D77BEB724AECDF05E0211DB8B099D99CA15E4FC85FAD7B92B7B76EFA09558A3283FC145A27F71C89743893DDE4D1FE9240AC0D56247C2AF137EA0698E5409D76EB222B74D42720C37A1D03FEA07E2E3414800D5F2AE05F35A89D84C689CAE66B9088469AE2672F664522EFA7E1E31FA79E4A378A0948A46A783B655880905F23003BE74E00E7103BE67DAD1D8BE8CD2CD451CD9B43070D103E8710693D8473B97C25CAAECCB51793A59A78B6FE364377489B9F0754F965B9D1FC1E6D36D87772557C02ED4FF9B17B16732F758C2081E34B1DF9712A598872EE27F107F5EBE70F462A336524095280A3703159D5D0A5D2A8A3CCA6B721142E236AED15AD3B937365916DE557D92178B1FB571BC73E745FE3724D720458C39794AFF74A021D74FDB1E5807DF57DEE582DAC8E5A4E8BF6BD0F486314AED7890443487E8032D553325F3649E5097133208D781379858F673C7208EE3E4FC2ED57C26340F76A79BA5831FF0EB4615C729A4DBA364B26B3FA0B452801ACF2297F564A454122B2ACB7AA6DE3D0ADE022F415C9D93969DDA30B9C3A4AEEF2D78BE9B193510A2AEA0F1FD6D44FAB51DEA87594C0F1097CA08AA0ED58D94D3BDC009DD579D43DD3E5B1D7164CCF3CCDAF72BD8FA34329F8CCD4181CCA293DED4E54BB2980AE63E5486918F7ABC7C029ACADE32E552164ABB3
2025-08-21 22:37:26.251462 ike V=root:0:Windows VPN:113: encrypted fragment 1 of 5 queued
2025-08-21 22:37:26.251529 ike V=root:0: comes <My_Client_IP>:14218-><My_Public_IP>:4500,ifindex=3,vrf=0,len=580....
2025-08-21 22:37:26.251540 ike V=root:0: IKEv2 exchange=AUTH id=88cfd576bcc6be41/6de14ae6e3c7d204:00000001 len=576
2025-08-21 22:37:26.251554 ike 0: in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
2025-08-21 22:37:26.251582 ike V=root:0:Windows VPN:113: encrypted fragment 2 of 5 queued
2025-08-21 22:37:26.251594 ike V=root:0: comes <My_Client_IP>:14218-><My_Public_IP>:4500,ifindex=3,vrf=0,len=580....
2025-08-21 22:37:26.251605 ike V=root:0: IKEv2 exchange=AUTH id=88cfd576bcc6be41/6de14ae6e3c7d204:00000001 len=576
2025-08-21 22:37:26.251614 ike 0: in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
2025-08-21 22:37:26.251642 ike V=root:0:Windows VPN:113: encrypted fragment 3 of 5 queued
2025-08-21 22:37:26.251652 ike V=root:0: comes <My_Client_IP>:14218-><My_Public_IP>:4500,ifindex=3,vrf=0,len=580....
2025-08-21 22:37:26.251663 ike V=root:0: IKEv2 exchange=AUTH id=88cfd576bcc6be41/6de14ae6e3c7d204:00000001 len=576
2025-08-21 22:37:26.251673 ike 0: in 88CFD576BCC6BE416DE14AE6E3C7D204352023080000000100000240000002240004000502F5F21D53AD3056F45C31DBC1E3EC4AB5BC0FD1B99A81828B1E40DAF031FF5288F831D3F4C2DE6CCF9DDA2BB14DCC99E2DB7B49DBF67EF8E566232F8D436F5F868F5DF1BF5201F5F1BBE6936DCCF9BECEB286F39BF715DC994001A03B5A3C1639CD47956BCA0EE92D86725D044CC35C1F3842B50CC20D4AEFF8FCA1D8922C044BB33722F3509031BDB06978C3C9A7C5EF9D5236FE67AD702230951F2DF90AC1D5745BFF1CD5156FBA7A35A1EB61F60336D0237587B28CBD859F24B90EBD6D3F4011CD8EC08CE0BC9EDE0CA0F0ED3BF9D5070121EBAC25B2ED953088DC81897B046D547D5D7E13445459CDBD63DD3AC530445CA0F38BB6EB1CC3FCD2C65407FEAC1AF0D990C3F760803E61F0E5201BDFF61574B3FC4E384B90652AC695373A8F5FCAE83CB1DF997908432B8D750639434CAF3C996DD611EF9A2EF404CA096E048AC2B9B5C64228AD50A0012ED9A94550238402ED18E9A0E5F1451BC65C7D6E1D607400778938B7721F4143EA33A2D885503E5CB351F666CEE0D90455F77439D8AD2BBB342DC374FBECDF8D3721510D1B3EB56C00C181E7F88DA03BFB8880B09C3A1FF08738575823FC70F62C6047945E6E205BF287B159DD15B7A0D85EB92E40D80540C9CBCDD607684B30789B67F1B32BEB436C0A30C1894F5299589BC3FD8A896ED05A4B49C22A9C932C601F6507CD02A9D651C6DFAC2D0B0EB61A1E142C4029333C90E68124806F2699A7A36F7B303594A32B9C40D9AD8E4A4C6D
2025-08-21 22:37:26.251699 ike V=root:0:Windows VPN:113: encrypted fragment 4 of 5 queued
2025-08-21 22:37:26.251709 ike V=root:0: comes <My_Client_IP>:14218-><My_Public_IP>:4500,ifindex=3,vrf=0,len=116....
2025-08-21 22:37:26.251719 ike V=root:0: IKEv2 exchange=AUTH id=88cfd576bcc6be41/6de14ae6e3c7d204:00000001 len=112
2025-08-21 22:37:26.251728 ike 0: in 88CFD576BCC6BE416DE14AE6E3C7D2043520230800000001000000700000005400050005E92F3D35FCA5A9163B251B8D2ECD5772EC3CB25DADE3E19B47B6D566FD915475AF77A85E6C35842D797F86374D6557ECE11DA591DA656C1E6AF4BFFE3023B833E6FB2D585B9F6C3D25432E97
2025-08-21 22:37:26.251742 ike V=root:0:Windows VPN:113: encrypted fragment 5 of 5 queued
2025-08-21 22:37:26.251766 ike 0:Windows VPN:113: dec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
2025-08-21 22:37:26.251793 ike 0:Windows VPN:113: dec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
2025-08-21 22:37:26.251818 ike 0:Windows VPN:113: dec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
2025-08-21 22:37:26.251845 ike 0:Windows VPN:113: dec 88CFD576BCC6BE416DE14AE6E3C7D20435202308000000010000021400000008000400054E6C5D2CB1B33B3652B09A8DA43035AA8E91CB19FAD073E07D77C8ED9D6AC4987E859493A0F5B9E84A65234B1C938D36D1463B2E8BCB81569B3F2620711857CDFCD82CF6305FFAB63AD7E4A45989F1CF0FB7A233BB25EB61C02D78B3E4FDD1EECB9824EB85E10F878AFF2534CE463B2E8BCB81569B3F2620711857CDFCD82CF6308BEA4AA62308E46585C94C8073CB09328EFE5A7C85DF234B46EE44B424093DF98BBBD87A68B589EF2F0000080000400C21000024010000000001000000030000000400005BA0000000080000000A00005BA100002C0000C00200002801030403853613520300000C0100000C800E0100030000080300000200000008050000000200002802030403853613520300000C0100000C800E008003000008030000020000000805000000020000240303040385361352030000080100000303000008030000020000000805000000020000240403040385361352030000080100000203000008030000020000000805000000000000240503040385361352030000080100000B030000080300000200000008050000002D00004002000000070000100000FFFF00000000FFFFFFFF080000280000FFFF00000000000000000000000000000000FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF0000004002000000070000100000FFFF00000000FFFFFFFF080000
2025-08-21 22:37:26.251868 ike 0:Windows VPN:113: dec 88CFD576BCC6BE416DE14AE6E3C7D2043520230800000001000000490000000800050005280000FFFF00000000000000000000000000000000FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
2025-08-21 22:37:26.251877 ike V=root:0:Windows VPN:113: reassembled fragmented message
2025-08-21 22:37:26.251886 ike V=root:0:Windows VPN:113: responder received AUTH msg
2025-08-21 22:37:26.251895 ike V=root:0:Windows VPN:113: processing notify type MOBIKE_SUPPORTED
2025-08-21 22:37:26.251925 ike V=root:0:Windows VPN:113: peer identifier IPV4_ADDR <IP_Address>
2025-08-21 22:37:26.251934 ike V=root:0:Windows VPN:113: re-validate gw ID
2025-08-21 22:37:26.251952 ike V=root:0:Windows VPN:113: gw validation OK
2025-08-21 22:37:26.251961 ike V=root:0:Windows VPN:113: received peer certreq '5E8C531822601D5671D66AA0CC64A0600743D5A8'
2025-08-21 22:37:26.251969 ike V=root:0:Windows VPN:113: received peer certreq '575EE536F71C8F532F82E7260AE2BC7B0BE6A87F'
2025-08-21 22:37:26.251976 ike V=root:0:Windows VPN:113: received peer certreq '0EAC826040562797E52513FC2AE10A539559E4A4'
2025-08-21 22:37:26.251983 ike V=root:0:Windows VPN:113: received peer certreq 'DDBCBD869C3F07ED40E31B08EFCEC4D188CD3B15'
2025-08-21 22:37:26.251991 ike V=root:0:Windows VPN:113: received peer certreq 'B2578CA77A7A8A19A50AA4BEC44C4B64B2DED48D'
2025-08-21 22:37:26.251998 ike V=root:0:Windows VPN:113: received peer certreq '4A5C7522AA46BFA4089D39974EBDB4A360F7A01D'
2025-08-21 22:37:26.252005 ike V=root:0:Windows VPN:113: received peer certreq '5CB869FE8DEFC1ED6627EEB2120F721BB80A0E04'
2025-08-21 22:37:26.252012 ike V=root:0:Windows VPN:113: received peer certreq '6A47A267C92E2F19688B9B86616695EDC12C1300'
2025-08-21 22:37:26.252018 ike V=root:0:Windows VPN:113: received peer certreq '01F0334C1AA1D9EE5B7BA9DE43BC027D570933FB'
2025-08-21 22:37:26.252025 ike V=root:0:Windows VPN:113: received peer certreq '83317E62854253D6D7783190EC919056E991B9E3'
2025-08-21 22:37:26.252032 ike V=root:0:Windows VPN:113: received peer certreq '7B52E0ADD98A49A13912199D6FDBDC85E60C05F6'
2025-08-21 22:37:26.252039 ike V=root:0:Windows VPN:113: received peer certreq '88A95AEFC084FC1374416BB16332C2CF9259BB3B'
2025-08-21 22:37:26.252046 ike V=root:0:Windows VPN:113: received peer certreq 'F927B61B0A37F3C31AFA17EC2D461716129D0C0E'
2025-08-21 22:37:26.252053 ike V=root:0:Windows VPN:113: received peer certreq '344F302D25693191EAF7735CABF5868D378240EC'
2025-08-21 22:37:26.252059 ike V=root:0:Windows VPN:113: received peer certreq '3EDF290CC1F5CC732CEB3D24E17E52DABD27E2F0'
2025-08-21 22:37:26.252066 ike V=root:0:Windows VPN:113: received peer certreq '7C32D485FD890A66B597CE86F4D526A92107E83E'
2025-08-21 22:37:26.252074 ike V=root:0:Windows VPN:113: received peer certreq '68330E61358521592983A3C8D2D2E1406E7AB3C1'
2025-08-21 22:37:26.252081 ike V=root:0:Windows VPN:113: received peer certreq '641DF8D50E2331C229B250CB32F56DF55C8E00FA'
2025-08-21 22:37:26.252088 ike V=root:0:Windows VPN:113: received peer certreq 'B386367DBCE5F84EE28C153781B21DF53D2C15CD'
2025-08-21 22:37:26.252095 ike V=root:0:Windows VPN:113: received peer certreq 'BF9EA8468328C1DBA829EE35CB8BA85F52F085D1'
2025-08-21 22:37:26.252102 ike V=root:0:Windows VPN:113: received peer certreq 'E1A05A95347578A7FF4DCF32525DF2F82C1AE115'
2025-08-21 22:37:26.252109 ike V=root:0:Windows VPN:113: received peer certreq 'DAED6474149C143CABDD99A9BD5B284D8B3CC9D8'
2025-08-21 22:37:26.252115 ike V=root:0:Windows VPN:113: received peer certreq '87E3BF322427C1405D2736C381E01D1A71D4A039'
2025-08-21 22:37:26.252122 ike V=root:0:Windows VPN:113: received peer certreq '8626CB1BC554B39FBD6BED637FB989A980F1F48A'
2025-08-21 22:37:26.252129 ike V=root:0:Windows VPN:113: received peer certreq 'C07A98688D89FBAB05640C117DAA7D65B8CACC4E'
2025-08-21 22:37:26.252136 ike V=root:0:Windows VPN:113: received peer certreq 'ED0DC8D62CD31329D882FE2DC3FCC510D34DBB14'
2025-08-21 22:37:26.252143 ike V=root:0:Windows VPN:113: received peer certreq 'A8E3029670A68B57EBECEFCC294E91749AD49238'
2025-08-21 22:37:26.252149 ike V=root:0:Windows VPN:113: received peer certreq 'F79319EFDFC1F520FBAC85552CF2D28F5AB9CA0B'
2025-08-21 22:37:26.252156 ike V=root:0:Windows VPN:113: received peer certreq '30A4E64FDE768AFCED5A9084283046792C291570'
2025-08-21 22:37:26.252163 ike V=root:0:Windows VPN:113: received peer certreq 'EFE7122486FBA28408E284B17A991D0E550572F9'
2025-08-21 22:37:26.252171 ike V=root:0:Windows VPN:113: received peer certreq 'C43028C5D3E3080C10448B2C77BA24539760BBF9'
2025-08-21 22:37:26.252178 ike V=root:0:Windows VPN:113: received peer certreq 'A2AF240ADAE86779C8A850B3C746EED9F71B1678'
2025-08-21 22:37:26.252184 ike V=root:0:Windows VPN:113: received peer certreq 'F816513CFD1B449F2E6B28A197221FB81F514E3C'
2025-08-21 22:37:26.252191 ike V=root:0:Windows VPN:113: received peer certreq '739782EAB404166E25D4823C37DBF8A812FBCF26'
2025-08-21 22:37:26.252198 ike V=root:0:Windows VPN:113: received peer certreq '9B10827A95032AB26B73C82F18C92ECAE568C208'
2025-08-21 22:37:26.252204 ike V=root:0:Windows VPN:113: received peer certreq '69C427DB5969681847E252170AE0E57FAB9DEF0F'
2025-08-21 22:37:26.252211 ike V=root:0:Windows VPN:113: received peer certreq 'BA42B0818853881D8663BD4CC05E08FEEA6EBB77'
2025-08-21 22:37:26.252217 ike V=root:0:Windows VPN:113: received peer certreq '87DBD45FB0928D4E1DF81567E7F2ABAFD62B6775'
2025-08-21 22:37:26.252224 ike V=root:0:Windows VPN:113: received peer certreq '6E584E3375BD57F6D5421B1601C2D8C0F53A9F6E'
2025-08-21 22:37:26.252231 ike V=root:0:Windows VPN:113: received peer certreq '4A810CDEF0C0900F1906423135A2A28DD344FD08'
2025-08-21 22:37:26.252237 ike V=root:0:Windows VPN:113: received peer certreq 'D52E13C1ABE349DAE8B49594EF7C3843606466BD'
2025-08-21 22:37:26.252243 ike V=root:0:Windows VPN:113: received peer certreq '8DF00AAD7C3F4CF34275E2EC19BDF328E2246922'
2025-08-21 22:37:26.252249 ike V=root:0:Windows VPN:113: received peer certreq '6CCABD7DB47E94A5759901B6A7DFD45D1C091CCC'
2025-08-21 22:37:26.252255 ike V=root:0:Windows VPN:113: received peer certreq 'AB30D3AF4BD8F16B5869EE456929DA84B8739488'
2025-08-21 22:37:26.252261 ike V=root:0:Windows VPN:113: received peer certreq '4232B616FA04FDFE5D4B7AC3FDF74C401D5A43AF'
2025-08-21 22:37:26.252267 ike V=root:0:Windows VPN:113: received peer certreq '1A21B4952B6293CE18B365EC9C0E934CB381E6D4'
2025-08-21 22:37:26.252273 ike V=root:0:Windows VPN:113: received peer certreq '687421E97DCF229A80282DDF9720B6749B1668BC'
2025-08-21 22:37:26.252279 ike V=root:0:Windows VPN:113: received peer certreq 'A59DBF9015D9F1F5A8D8C01D14E6F1D8C4FE5717'
2025-08-21 22:37:26.252285 ike V=root:0:Windows VPN:113: received peer certreq 'A5068A78CF84BD7432DD58F965EB3A55E7C780DC'
2025-08-21 22:37:26.252291 ike V=root:0:Windows VPN:113: received peer certreq '07DAA7378C513B15AD74036A652E2E29206E21B7'
2025-08-21 22:37:26.252299 ike V=root:0:Windows VPN:113: received peer certreq 'E27F7BD877D5DF9E0A3F9EB4CB0E2EA9EFDB6977'
2025-08-21 22:37:26.252306 ike V=root:0:Windows VPN:113: received peer certreq '7ADD9381569EE04137127BACAA16F0635BC37F3D'
2025-08-21 22:37:26.252312 ike V=root:0:Windows VPN:113: received peer certreq '5FF3246C8F9124AF9B5F3EB0346AF42D5CA85DCC'
2025-08-21 22:37:26.252320 ike V=root:0:Windows VPN:113: received peer certreq '6DAA9B0987C4D0D422ED4007374D19F191FFDED3'
2025-08-21 22:37:26.252326 ike V=root:0:Windows VPN:113: received peer certreq '3B37C0C5473DFC5B9A0D015B123B53CCADB75466'
2025-08-21 22:37:26.252333 ike V=root:0:Windows VPN:113: received peer certreq '70C72F89D8E3B1A6E5DECC3DFF5F2AA122052877'
2025-08-21 22:37:26.252340 ike V=root:0:Windows VPN:113: received peer certreq '7E959FED828E2AEDC37C0D054631EF5397CD4849'
2025-08-21 22:37:26.252347 ike V=root:0:Windows VPN:113: received peer certreq '3E22D42C1F0244B8041065617CC76BAEDA87299C'
2025-08-21 22:37:26.252354 ike V=root:0:Windows VPN:113: received peer certreq '55E481D11180BED889B908A331F9A1240916B970'
2025-08-21 22:37:26.252360 ike V=root:0:Windows VPN:113: received peer certreq '740B0CD21BE6A5015E0242A40BE7F1B7BCBD4293'
2025-08-21 22:37:26.252367 ike V=root:0:Windows VPN:113: received peer certreq 'B181081A19A4C0941FFAE89528C124C99B34ACC7'
2025-08-21 22:37:26.252375 ike V=root:0:Windows VPN:113: received peer certreq '210F2C89F7C4CD5D1B825E38D6C6593BA69375AE'
2025-08-21 22:37:26.252382 ike V=root:0:Windows VPN:113: received peer certreq 'E6FFC394E838597F51D48042197627CFDB948EC6'
2025-08-21 22:37:26.252389 ike V=root:0:Windows VPN:113: received peer certreq 'BBC23E290BB328771DAD3EA24DBDF423BD06B03D'
2025-08-21 22:37:26.252415 ike V=root:0:Windows VPN:113: received peer certreq 'C89513680197280A2C55C3FCD390F53A053BC9FB'
2025-08-21 22:37:26.252422 ike V=root:0:Windows VPN:113: received peer certreq 'CD2FA354F5C22BAEB68A480ABBDF9153EC50D9EC'
2025-08-21 22:37:26.252429 ike V=root:0:Windows VPN:113: received peer certreq 'EEE59F1E2AA544C3CB2543A69A5BD46A25BCBB8E'
2025-08-21 22:37:26.252436 ike V=root:0:Windows VPN:113: received peer certreq '902F82A37C4797011E0F4BA5AF1313C2111347EA'
2025-08-21 22:37:26.252443 ike V=root:0:Windows VPN:113: received peer certreq '07232D456587B9D7B1D97DD1C5FB65C589BF9296'
2025-08-21 22:37:26.252450 ike V=root:0:Windows VPN:113: received peer certreq '4C75D4858062AAA9449C66151E6C5813053A9C72'
2025-08-21 22:37:26.252457 ike V=root:0:Windows VPN:113: received peer certreq 'B367675AFA621DC17A6CF4E1B7BB9460CF03BF2F'
2025-08-21 22:37:26.252463 ike V=root:0:Windows VPN:113: received peer certreq '174AB82B5FFB05677527AD495A4A5DC422CCEA4E'
2025-08-21 22:37:26.252471 ike V=root:0:Windows VPN:113: received peer certreq '4F9C7D21799CAD0ED8B90C579F1A0299E790F387'
2025-08-21 22:37:26.252478 ike V=root:0:Windows VPN:113: received peer certreq '5156A6A755E50F34C41AF44E6C5D2CB1B33B3652'
2025-08-21 22:37:26.252485 ike V=root:0:Windows VPN:113: received peer certreq 'B09A8DA43035AA8E91CB19FAD073E07D77C8ED9D'
2025-08-21 22:37:26.252492 ike V=root:0:Windows VPN:113: received peer certreq '6AC4987E859493A0F5B9E84A65234B1C938D36D1'
2025-08-21 22:37:26.252502 ike V=root:0:Windows VPN:113: received peer certreq '463B2E8BCB81569B3F2620711857CDFCD82CF630'
2025-08-21 22:37:26.252509 ike V=root:0:Windows VPN:113: received peer certreq '5FFAB63AD7E4A45989F1CF0FB7A233BB25EB61C0'
2025-08-21 22:37:26.252516 ike V=root:0:Windows VPN:113: received peer certreq '2D78B3E4FDD1EECB9824EB85E10F878AFF2534CE'
2025-08-21 22:37:26.252523 ike V=root:0:Windows VPN:113: received peer certreq '463B2E8BCB81569B3F2620711857CDFCD82CF630'
2025-08-21 22:37:26.252530 ike V=root:0:Windows VPN:113: received peer certreq '8BEA4AA62308E46585C94C8073CB09328EFE5A7C'
2025-08-21 22:37:26.252537 ike V=root:0:Windows VPN:113: received peer certreq '85DF234B46EE44B424093DF98BBBD87A68B589EF'
2025-08-21 22:37:26.252547 ike V=root:0:Windows VPN:113: responder preparing EAP identity request
2025-08-21 22:37:26.258288 ike V=root:0:Windows VPN:113: local cert, subject='*.mycompany.com', issuer='Starfield Secure Certificate Authority - G2'
2025-08-21 22:37:26.258322 ike V=root:0:Windows VPN:113: splitting payload len=2040 into 2 fragments
2025-08-21 22:37:26.258351 ike 0:Windows VPN:113: enc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
2025-08-21 22:37:26.258414 ike 0:Windows VPN:113: enc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
2025-08-21 22:37:26.258464 ike V=root:0:Windows VPN:113: remote port change 14217 -> 14218
2025-08-21 22:37:26.258480 ike 0:Windows VPN:113: out 88CFD576BCC6BE416DE14AE6E3C7D20435202320000000010000047024000454000100025B58488F102BD82CAE0CA115CCB1E01C739F2FA4DA187E6C4133F6687544E2B7F88544FDB7D83EE16279C09FDA357B8872668EB9126F25515125131CD8C4C56AE15BB96EF172C29E769ACD01CB7B91D8533A57FAED6C886418981AA602541BEFC8FB11CD26FE397AADBC9ED674820247161785A54E1566644EFE70FAE9D4CFB56275404585BC701BFB2B6DE27FC82D3722179B638CB92CAA32B2BA647654691227B8E0DF3F3AAAA0FAFED29F5ACC26A6D661619CE327AFCD8DC161A5F3AB65B48CF4617199DE329B0C3CA31100A73E17E019331F59CF0DA2D2A43672484B45CD5A33A74822D56FE5D04B68FB71A030A91F17160B7DF886AE86AF04DBFC13540DD608C161132149FCAB8A2505DE193108B70B567E03B768AEC2A0EEFED248E5BE6FFD712E7A976EA9D636E4A740DEC478192F847DFD980AFAE0609664E0D59EB56EF0EADE60E9CC942AFC13A1E74EA48C432DDC13588C44DA21F190EA3E7E2F56DEA78849307155537D1AEAE7175CDD83F3E67BF51F3056C2A227FF97400FC892742620213659C1C892751D45F4C487AE1952770BB37600EC0B5650A8D23DAB68782CE4D17EB883F94CF17D5BDB4CE75DBE8B381E5144EFD6724F3216008473047A20C5A6284FC23DEB209000C477F2DD38E366A1D6C18F9B6E8A4FC1EC31B6E0F36D7574BDD199378DECC7EABE9755D597308189C55A55EB99E6262997733D20AE2CE2D32108063A991B231A2CC10728F33AC6CE2C53B914C204E2E94D72C6158BFCAC5483E4435F2A4DD9AD066D421B787BACD1391FB2773F33AB7B3173CD537FF7CC2C4A231424915AEDB3C55A139259F0A38089F0C1315ACD24EB56255BA07B42D5DA87C1A084DB681F2BEE70220B0C0FE46E02E1E68C662F9D421E229E8B47978A97F4588CD2ACB97FF80D645D5D8920974450B4AE3AABC21A1E05493B468996F9E3EFA1250B495932DC196997ACC357E24C3D98EE3918C74F4F620E11E085257E343979F3524581722A7C8185E515B09A9CF93C62F294A277CAE019425AF7F1523025C82EAF05770AB5E738F9327A947B2818CAACC4A7A4ABFBE5CBE0A2529067A2DFAADF578B545F8ADAD8C0DAA91DCBC2B31FFCA1893E13ED5634FFA8C562151C539D67B93816BA09387CCF8452F74BFA6EC8E74120A98C909A8774C3E5EFFE160F8D3B35579B02F9EEBF344E1F26E7B34BCF7D28FC2758A5228799FC9242B2F909B3C63A74DD0016E39801375B896B363E362B613FD63E1ACAA3D5DACFB1547A61BFBBF9405FE9EC1F4128FCA3A1AC5FBC5B94B74F071CC46BD0A4DD2CAC64852C82F6410E2F1E8FED1BDC7FC57128007364828ADCC6D8C4B8BFDED560B978BE856784067744DD34FF3C2C6DAF8D3466925BF598C7056631B3C2E81C388ED74C6EF57F720C80848B03745A4B25E21A0CE2D97A94062B71F261B8223AEFF2E4153323564C496B7DDB3F5364711A6CFA5AEE078ACECC677A1532A959BFFD1C23B094739677FA3C883C4AEC850366F9D1F6C2F42A71449898614FFC0CE2967712095C7447CE340882D4
2025-08-21 22:37:26.258538 ike V=root:0:Windows VPN:113: sent IKE msg (AUTH_RESPONSE): <My_Public_IP>:4500-><My_Client_IP>:14218, len=1136, vrf=0, id=88cfd576bcc6be41/6de14ae6e3c7d204:00000001, oif=3
2025-08-21 22:37:26.258552 ike 0:Windows VPN:113: out 88CFD576BCC6BE416DE14AE6E3C7D20435202320000000010000042000000404000200025CDD85BFB8AA3955C80563626A590D5B2C6BE14BDD8879EC233CAEE28A3A964425080A21BDBFD18DFC65C9A5B1C19495DB11744183A0E0FF537F8B463F3CBB6899CC2E8030D551EF2376758A6BA427B5A5391F2895E88D4B229C198766F4E14A2B7575F39BF2EEB7D21103DDC66432D68AA627CE29065557C3EDEA388AA57730BFF8A0DDF2D104BDC5B8C432F52D6058E3CD8916934B63DE4A02BC72F8B4923D58ABCA3F4FA2AE3BDFCF72DA883687300D4C3C962AB4E380A90535200AE20277D76EBDB7E1A10A0C068AC980374BEB7A46C9F029CD5C0F6A2D6642112BC91BEC13A625A5FF4DAE18DD2479FD87038EC209C57EF2DBEB8E79939C2D2C59CA43B90BDAB12BCF51DE445590A20E57E252E2F1416A995B483302823BF9B71C7BE68115B7CBB5B2F2741BC8603EF03E25AAA2CD01A10D83018260C4A805F9E3643193E738BF7C271E3C64CDA459D9642026ACCC264D0B624C5BF49D1AA42B77842AA01ADF570D70BC0468FD3FDAFA85C2B99532439B5A6B307044757399F36CEA1A296164D3F169DD85115E57935FA748702DF4084AEB11458BFE4CAF4561A6D2FE1AC8505EC2E18F6D7B954524FAB84F27ADDF057CD5BB92E01D85CA379B16F98403627671CF39F46508CA61623B74B025FC54F0285E8B77A524B24A278FB9F663F754F1AC0E68BBBFC7E2224D3B834C8541DE64B3123DA8C9CC98B0466C8AFAD50681B2D1625A657104E62E8E5686DCAF0E634673712B75BB773110EE386F0588073BC9339A92AB906D6FB097C0228E7D9956285617F9D1BC4FAE5ECC778D95FB957291F182C7F929BC870F49B96FB9C7A5FCFE5C2E33CF202ED29B80BAF40A1998A4F21A126EF7F7A002DF2B4654BE61BE99B9638BC85FC80A54CEF1941421799300DE0DDB7207255650661EA666896758580EE4309ED34AEB2052B094C53935B9865BA7606F55BB5C8AFEE66980F0E0749521C96C442E3FEB31F6C4098DE3982AA868136404B85DF5C36A8D17B6E4E202E1C3E2F1495A910E3DDC57F2C308FF45F9F2F6291FF7242E8CE358E516B117836F65F04C9B5016799B5724A6726BBADC480C35918EB6BAE2C18D8E61A6DF5ED700911AFAED436731C1A1D74845F98F9F3367C52B607EA8728DCD77BBFBA38743FAD61797C93F846122A5E4995EF1965D750B7B4BB041FE7FC260C5A10C70B4FCD3732D7BEB3727372E3188F3786142191AC66F29BCC5EE42E328AA83011C3E70DE7E07E19E9E129F14EBE6BD54DAC3847D61DCDA46EBE6F0D0C5B37F133DECA6D87C2054FC8577CBF7AED5F8607F105B08628D6570D82748AC702034A063487F5EF2F15E912F4445B23D09418E2A7034316446D0BD93AE5D22DA8779DC40E3CC35D4AAF8EDC52630F748028EEC1E0E9C3824504C14DB6D4A9E44F0D1C4038759C883B010B681919DB3C9FD81
2025-08-21 22:37:26.258596 ike V=root:0:Windows VPN:113: sent IKE msg (AUTH_RESPONSE): <My_Public_IP>:4500-><My_Client_IP>:14218, len=1056, vrf=0, id=88cfd576bcc6be41/6de14ae6e3c7d204:00000001, oif=3

[Markus_M]

Not sure where it ends, the debug ran only for one second and the phase1 comes up, there is further negotiation, no packet loss etc.. Cert auth seems to work as well.

I would see to do a packet capture for RADIUS then.

[it_starlite]

I tried this again and did a packet capture on radius and there was no traffic captured. I have followed this guide almost exactly: https://docs.fortinet.com/document/fortigate/7.6.4/administration-guide/726232 with the only differences being that I have the Duo authentication proxy sitting between the fortigate and the NPS server and I am using my publicly signed (Starfield - GoDaddy) wildcard certificate as the VPN certificate.

[Markus_M]

- Where did you do the packet capture?

- Are you sure it is RADIUS from FortiGate towards DUO (it can do LDAP too what I read from its docs)?

- Is the packet capture port for RADIUS correct (there are two, depends on configuration, 1812 or 1645)

[it_starlite]

I did the packet capture on port 1812 from Fortigate to Dup and there was no traffic. If I run the same packet capture and use the test connection and test credentials in the Radius setup. I see traffic and get the Duo push and can approve it. 

I reviewed this article step-by-step again to confirm my settings were correct:

https://docs.fortinet.com/document/fortigate/7.6.4/administration-guide/726232

I did another debug and still have the failure almost immediately:

Debug messages will be on for 18 minutes.

FortiGate-90G # ike :shrank heap by 1175552 bytes
ike V=root:0: comes <vpn_client_ip>:36722-><fortigate_wan_ip>:500,ifindex=3,vrf=0,len=1104....
ike V=root:0: IKEv2 exchange=SA_INIT id=0593f4db6a5c84f5/0000000000000000 len=1104
ike 0: in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
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: responder received SA_INIT msg
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: received notify type FRAGMENTATION_SUPPORTED
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: received notify type NAT_DETECTION_SOURCE_IP
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: received notify type NAT_DETECTION_DESTINATION_IP
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: VID MS NT5 ISAKMPOAKLEY 1E2B516905991C7D7C96FCBFB587E46100000009
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: VID unknown (16): FB1DE3CDF341B7EA16B7E5BE0855F120
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: VID unknown (16): 26244D38EDDB61B3172A36E3D0CFB819
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: VID unknown (20): 01528BBBC00696121849AB9A1C5B2A5100000002
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: incoming proposal:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: proposal id = 1:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: protocol = IKEv2:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: encapsulation = IKEv2/none
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=ENCR, val=3DES_CBC
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=INTEGR, val=AUTH_HMAC_SHA_96
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=PRF, val=PRF_HMAC_SHA
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=DH_GROUP, val=MODP1024.
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: proposal id = 2:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: protocol = IKEv2:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: encapsulation = IKEv2/none
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=ENCR, val=3DES_CBC
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=INTEGR, val=AUTH_HMAC_SHA2_256_128
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=PRF, val=PRF_HMAC_SHA2_256
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=DH_GROUP, val=MODP1024.
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: proposal id = 3:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: protocol = IKEv2:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: encapsulation = IKEv2/none
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=ENCR, val=3DES_CBC
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=INTEGR, val=AUTH_HMAC_SHA2_384_192
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=PRF, val=PRF_HMAC_SHA2_384
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=DH_GROUP, val=MODP1024.
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: proposal id = 4:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: protocol = IKEv2:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: encapsulation = IKEv2/none
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=ENCR, val=AES_CBC (key_len = 128)
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=INTEGR, val=AUTH_HMAC_SHA_96
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=PRF, val=PRF_HMAC_SHA
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=DH_GROUP, val=MODP1024.
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: proposal id = 5:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: protocol = IKEv2:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: encapsulation = IKEv2/none
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=ENCR, val=AES_CBC (key_len = 128)
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=INTEGR, val=AUTH_HMAC_SHA2_256_128
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=PRF, val=PRF_HMAC_SHA2_256
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=DH_GROUP, val=MODP1024.
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: proposal id = 6:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: protocol = IKEv2:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: encapsulation = IKEv2/none
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=ENCR, val=AES_CBC (key_len = 128)
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=INTEGR, val=AUTH_HMAC_SHA2_384_192
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=PRF, val=PRF_HMAC_SHA2_384
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=DH_GROUP, val=MODP1024.
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: proposal id = 7:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: protocol = IKEv2:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: encapsulation = IKEv2/none
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=ENCR, val=AES_CBC (key_len = 192)
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=INTEGR, val=AUTH_HMAC_SHA_96
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=PRF, val=PRF_HMAC_SHA
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=DH_GROUP, val=MODP1024.
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: proposal id = 8:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: protocol = IKEv2:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: encapsulation = IKEv2/none
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=ENCR, val=AES_CBC (key_len = 192)
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=INTEGR, val=AUTH_HMAC_SHA2_256_128
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=PRF, val=PRF_HMAC_SHA2_256
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=DH_GROUP, val=MODP1024.
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: proposal id = 9:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: protocol = IKEv2:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: encapsulation = IKEv2/none
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=ENCR, val=AES_CBC (key_len = 192)
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=INTEGR, val=AUTH_HMAC_SHA2_384_192
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=PRF, val=PRF_HMAC_SHA2_384
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=DH_GROUP, val=MODP1024.
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: proposal id = 10:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: protocol = IKEv2:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: encapsulation = IKEv2/none
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=ENCR, val=AES_CBC (key_len = 256)
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=INTEGR, val=AUTH_HMAC_SHA_96
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=PRF, val=PRF_HMAC_SHA
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=DH_GROUP, val=MODP1024.
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: proposal id = 11:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: protocol = IKEv2:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: encapsulation = IKEv2/none
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=ENCR, val=AES_CBC (key_len = 256)
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=INTEGR, val=AUTH_HMAC_SHA2_256_128
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=PRF, val=PRF_HMAC_SHA2_256
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=DH_GROUP, val=MODP1024.
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: proposal id = 12:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: protocol = IKEv2:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: encapsulation = IKEv2/none
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=ENCR, val=AES_CBC (key_len = 256)
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=INTEGR, val=AUTH_HMAC_SHA2_384_192
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=PRF, val=PRF_HMAC_SHA2_384
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=DH_GROUP, val=MODP1024.
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: proposal id = 13:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: protocol = IKEv2:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: encapsulation = IKEv2/none
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=ENCR, val=AES_GCM_16 (key_len = 128)
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=PRF, val=PRF_HMAC_SHA
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=DH_GROUP, val=MODP1024.
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: proposal id = 14:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: protocol = IKEv2:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: encapsulation = IKEv2/none
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=ENCR, val=AES_GCM_16 (key_len = 128)
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=PRF, val=PRF_HMAC_SHA2_256
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=DH_GROUP, val=MODP1024.
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: proposal id = 15:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: protocol = IKEv2:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: encapsulation = IKEv2/none
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=ENCR, val=AES_GCM_16 (key_len = 128)
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=PRF, val=PRF_HMAC_SHA2_384
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=DH_GROUP, val=MODP1024.
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: proposal id = 16:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: protocol = IKEv2:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: encapsulation = IKEv2/none
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=ENCR, val=AES_GCM_16 (key_len = 256)
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=PRF, val=PRF_HMAC_SHA
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=DH_GROUP, val=MODP1024.
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: proposal id = 17:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: protocol = IKEv2:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: encapsulation = IKEv2/none
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=ENCR, val=AES_GCM_16 (key_len = 256)
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=PRF, val=PRF_HMAC_SHA2_256
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=DH_GROUP, val=MODP1024.
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: proposal id = 18:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: protocol = IKEv2:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: encapsulation = IKEv2/none
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=ENCR, val=AES_GCM_16 (key_len = 256)
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=PRF, val=PRF_HMAC_SHA2_384
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=DH_GROUP, val=MODP1024.
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: matched proposal id 11
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: proposal id = 11:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: protocol = IKEv2:
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: encapsulation = IKEv2/none
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=ENCR, val=AES_CBC (key_len = 256)
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=INTEGR, val=AUTH_HMAC_SHA2_256_128
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=PRF, val=PRF_HMAC_SHA2_256
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: type=DH_GROUP, val=MODP1024.
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: lifetime=86400
ike V=root:0:0593f4db6a5c84f5/0000000000000000:81: SA proposal chosen, matched gateway Windows VPN
ike V=root:0: found Windows VPN <fortigate_wan_ip> 3 -> <vpn_client_ip>:36722
ike V=root:0:Windows VPN:81: processing notify type NAT_DETECTION_SOURCE_IP
ike V=root:0:Windows VPN:81: processing NAT-D payload
ike V=root:0:Windows VPN:81: NAT detected: PEER
ike V=root:0:Windows VPN:81: process NAT-D
ike V=root:0:Windows VPN:81: processing notify type NAT_DETECTION_DESTINATION_IP
ike V=root:0:Windows VPN:81: processing NAT-D payload
ike V=root:0:Windows VPN:81: NAT detected: PEER
ike V=root:0:Windows VPN:81: process NAT-D
ike V=root:0:Windows VPN:81: processing notify type FRAGMENTATION_SUPPORTED
ike V=root:0:Windows VPN:81: responder preparing SA_INIT msg
ike V=root:0:Windows VPN:81: generate DH public value request pending
ike V=root:0:Windows VPN:81: responder preparing SA_INIT msg
ike V=root:0:Windows VPN:81: compute DH shared secret request queued
ike V=root:0:Windows VPN:81: responder preparing SA_INIT msg
ike V=root:0:Windows VPN:81: create NAT-D hash local <fortigate_wan_ip>/500 remote <vpn_client_ip>/36722
ike 0:Windows VPN:81: out 0593F4DB6A5C84F58C11A4DEAF50DE1E212022200000000000000128220000300000002C0B0100040300000C0100000C800E01000300000802000005030000080300000C00000008040000022800008800020000209FDB621FBCBFB9E1D775651B78791920F3D9FD6265AA3B6B4B17F0272626C50455DFCF4FF0F384F99F2DD273E95854DBD204D4FD6085C0E41B59C5B510B2E7CA59320D296C57CDFE80853869A3E5FD5AA6D5AC43937D1BF6159DDAE334729873DED45E8D897C426FDE82FAB39D2D404E2ACB726C3E16350DD41DDFF0B403A6290000144D70A48906702406F214A71F900272F62900001C00004004AD21EA6667A89B1E222E2E1E508E4553F619E7942900001C00004005767FCD0A203AB04833D16B6905D40543AB7A016C000000080000402E
ike V=root:0:Windows VPN:81: sent IKE msg (SA_INIT_RESPONSE): <fortigate_wan_ip>:500-><vpn_client_ip>:36722, len=296, vrf=0, id=0593f4db6a5c84f5/8c11a4deaf50de1e, oif=3
ike 0:Windows VPN:81: IKE SA 0593f4db6a5c84f5/8c11a4deaf50de1e SK_ei 32:BD7ADAA2B0B64D32A439F0596343BF42B51E875852CE6496032ED21BB47D7FA1
ike 0:Windows VPN:81: IKE SA 0593f4db6a5c84f5/8c11a4deaf50de1e SK_er 32:CE825F9FF42D5C4105566F2372F9AC80D1B1D167AC66E34BB83E8DA395EBFF8E
ike 0:Windows VPN:81: IKE SA 0593f4db6a5c84f5/8c11a4deaf50de1e SK_ai 32:E777EF5BF25626B2799FF62F623644B70BE950B5B81F0A1A03E435824739ED4B
ike 0:Windows VPN:81: IKE SA 0593f4db6a5c84f5/8c11a4deaf50de1e SK_ar 32:FA08D1866B8CAC3DBF34B47A6DD3DF7003281E0B6EFB4D67D9DB4DAA6D6AC47E
ike V=root:0: comes <vpn_client_ip>:36725-><fortigate_wan_ip>:4500,ifindex=3,vrf=0,len=584....
ike V=root:0: IKEv2 exchange=AUTH id=0593f4db6a5c84f5/8c11a4deaf50de1e:00000001 len=580
ike 0: in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
ike V=root:0:Windows VPN:81: encrypted fragment 1 of 5 queued
ike V=root:0: comes <vpn_client_ip>:36725-><fortigate_wan_ip>:4500,ifindex=3,vrf=0,len=584....
ike V=root:0: IKEv2 exchange=AUTH id=0593f4db6a5c84f5/8c11a4deaf50de1e:00000001 len=580
ike 0: in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
ike V=root:0:Windows VPN:81: encrypted fragment 2 of 5 queued
ike V=root:0: comes <vpn_client_ip>:36725-><fortigate_wan_ip>:4500,ifindex=3,vrf=0,len=584....
ike V=root:0: IKEv2 exchange=AUTH id=0593f4db6a5c84f5/8c11a4deaf50de1e:00000001 len=580
ike 0: in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
ike V=root:0:Windows VPN:81: encrypted fragment 3 of 5 queued
ike V=root:0: comes <vpn_client_ip>:36725-><fortigate_wan_ip>:4500,ifindex=3,vrf=0,len=584....
ike V=root:0: IKEv2 exchange=AUTH id=0593f4db6a5c84f5/8c11a4deaf50de1e:00000001 len=580
ike 0: in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
ike V=root:0:Windows VPN:81: encrypted fragment 4 of 5 queued
ike V=root:0: comes <vpn_client_ip>:36725-><fortigate_wan_ip>:4500,ifindex=3,vrf=0,len=120....
ike V=root:0: IKEv2 exchange=AUTH id=0593f4db6a5c84f5/8c11a4deaf50de1e:00000001 len=116
ike 0: in 0593F4DB6A5C84F58C11A4DEAF50DE1E35202308000000010000007400000058000500054253D10AA3D30D187EF65721B6544AB673DD8B4F85BA0706A7B40D9C5837BB5556A456AD5D47EFC1396DCE51FA3CCCC467B8C2FD3BE09ED73E37F3B93209E4DC45201CC92D8413486D7AA75970D30987
ike V=root:0:Windows VPN:81: encrypted fragment 5 of 5 queued
ike 0:Windows VPN:81: dec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
ike 0:Windows VPN:81: dec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
ike 0:Windows VPN:81: dec 0593F4DB6A5C84F58C11A4DEAF50DE1E352023080000000100000214000000080003000555E7C780DC07DAA7378C513B15AD74036A652E2E29206E21B7E27F7BD877D5DF9E0A3F9EB4CB0E2EA9EFDB69777ADD9381569EE04137127BACAA16F0635BC37F3D5FF3246C8F9124AF9B5F3EB0346AF42D5CA85DCC6DAA9B0987C4D0D422ED4007374D19F191FFDED33B37C0C5473DFC5B9A0D015B123B53CCADB7546670C72F89D8E3B1A6E5DECC3DFF5F2AA1220528777E959FED828E2AEDC37C0D054631EF5397CD48493E22D42C1F0244B8041065617CC76BAEDA87299C55E481D11180BED889B908A331F9A1240916B970740B0CD21BE6A5015E0242A40BE7F1B7BCBD4293B181081A19A4C0941FFAE89528C124C99B34ACC7210F2C89F7C4CD5D1B825E38D6C6593BA69375AEE6FFC394E838597F51D48042197627CFDB948EC6BBC23E290BB328771DAD3EA24DBDF423BD06B03DC89513680197280A2C55C3FCD390F53A053BC9FBCD2FA354F5C22BAEB68A480ABBDF9153EC50D9ECEEE59F1E2AA544C3CB2543A69A5BD46A25BCBB8E902F82A37C4797011E0F4BA5AF1313C2111347EA07232D456587B9D7B1D97DD1C5FB65C589BF92964C75D4858062AAA9449C66151E6C5813053A9C72B367675AFA621DC17A6CF4E1B7BB9460CF03BF2F174AB82B5FFB05677527AD495A4A5DC422CCEA4E4F9C7D21799CAD0ED8B90C579F1A0299E790F3875156A6A755E50F34C41AF4
ike 0:Windows VPN:81: dec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
ike 0:Windows VPN:81: dec 0593F4DB6A5C84F58C11A4DEAF50DE1E3520230800000001000000490000000800050005280000FFFF00000000000000000000000000000000FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
ike V=root:0:Windows VPN:81: reassembled fragmented message
ike V=root:0:Windows VPN:81: responder received AUTH msg
ike V=root:0:Windows VPN:81: processing notify type MOBIKE_SUPPORTED
ike V=root:0:Windows VPN:81: peer identifier IPV4_ADDR 172.20.10.3
ike V=root:0:Windows VPN:81: re-validate gw ID
ike V=root:0:Windows VPN:81: gw validation OK
ike V=root:0:Windows VPN:81: received peer certreq '5E8C531822601D5671D66AA0CC64A0600743D5A8'
ike V=root:0:Windows VPN:81: received peer certreq '575EE536F71C8F532F82E7260AE2BC7B0BE6A87F'
ike V=root:0:Windows VPN:81: received peer certreq '0EAC826040562797E52513FC2AE10A539559E4A4'
ike V=root:0:Windows VPN:81: received peer certreq 'DDBCBD869C3F07ED40E31B08EFCEC4D188CD3B15'
ike V=root:0:Windows VPN:81: received peer certreq 'B2578CA77A7A8A19A50AA4BEC44C4B64B2DED48D'
ike V=root:0:Windows VPN:81: received peer certreq '4A5C7522AA46BFA4089D39974EBDB4A360F7A01D'
ike V=root:0:Windows VPN:81: received peer certreq '5CB869FE8DEFC1ED6627EEB2120F721BB80A0E04'
ike V=root:0:Windows VPN:81: received peer certreq '6A47A267C92E2F19688B9B86616695EDC12C1300'
ike V=root:0:Windows VPN:81: received peer certreq '01F0334C1AA1D9EE5B7BA9DE43BC027D570933FB'
ike V=root:0:Windows VPN:81: received peer certreq '83317E62854253D6D7783190EC919056E991B9E3'
ike V=root:0:Windows VPN:81: received peer certreq '7B52E0ADD98A49A13912199D6FDBDC85E60C05F6'
ike V=root:0:Windows VPN:81: received peer certreq '88A95AEFC084FC1374416BB16332C2CF9259BB3B'
ike V=root:0:Windows VPN:81: received peer certreq 'F927B61B0A37F3C31AFA17EC2D461716129D0C0E'
ike V=root:0:Windows VPN:81: received peer certreq '344F302D25693191EAF7735CABF5868D378240EC'
ike V=root:0:Windows VPN:81: received peer certreq '3EDF290CC1F5CC732CEB3D24E17E52DABD27E2F0'
ike V=root:0:Windows VPN:81: received peer certreq '7C32D485FD890A66B597CE86F4D526A92107E83E'
ike V=root:0:Windows VPN:81: received peer certreq '68330E61358521592983A3C8D2D2E1406E7AB3C1'
ike V=root:0:Windows VPN:81: received peer certreq '641DF8D50E2331C229B250CB32F56DF55C8E00FA'
ike V=root:0:Windows VPN:81: received peer certreq 'B386367DBCE5F84EE28C153781B21DF53D2C15CD'
ike V=root:0:Windows VPN:81: received peer certreq 'BF9EA8468328C1DBA829EE35CB8BA85F52F085D1'
ike V=root:0:Windows VPN:81: received peer certreq 'E1A05A95347578A7FF4DCF32525DF2F82C1AE115'
ike V=root:0:Windows VPN:81: received peer certreq 'DAED6474149C143CABDD99A9BD5B284D8B3CC9D8'
ike V=root:0:Windows VPN:81: received peer certreq '87E3BF322427C1405D2736C381E01D1A71D4A039'
ike V=root:0:Windows VPN:81: received peer certreq '8626CB1BC554B39FBD6BED637FB989A980F1F48A'
ike V=root:0:Windows VPN:81: received peer certreq 'C07A98688D89FBAB05640C117DAA7D65B8CACC4E'
ike V=root:0:Windows VPN:81: received peer certreq 'ED0DC8D62CD31329D882FE2DC3FCC510D34DBB14'
ike V=root:0:Windows VPN:81: received peer certreq 'A8E3029670A68B57EBECEFCC294E91749AD49238'
ike V=root:0:Windows VPN:81: received peer certreq 'F79319EFDFC1F520FBAC85552CF2D28F5AB9CA0B'
ike V=root:0:Windows VPN:81: received peer certreq '30A4E64FDE768AFCED5A9084283046792C291570'
ike V=root:0:Windows VPN:81: received peer certreq 'EFE7122486FBA28408E284B17A991D0E550572F9'
ike V=root:0:Windows VPN:81: received peer certreq 'C43028C5D3E3080C10448B2C77BA24539760BBF9'
ike V=root:0:Windows VPN:81: received peer certreq 'A2AF240ADAE86779C8A850B3C746EED9F71B1678'
ike V=root:0:Windows VPN:81: received peer certreq 'F816513CFD1B449F2E6B28A197221FB81F514E3C'
ike V=root:0:Windows VPN:81: received peer certreq '739782EAB404166E25D4823C37DBF8A812FBCF26'
ike V=root:0:Windows VPN:81: received peer certreq '9B10827A95032AB26B73C82F18C92ECAE568C208'
ike V=root:0:Windows VPN:81: received peer certreq '69C427DB5969681847E252170AE0E57FAB9DEF0F'
ike V=root:0:Windows VPN:81: received peer certreq 'BA42B0818853881D8663BD4CC05E08FEEA6EBB77'
ike V=root:0:Windows VPN:81: received peer certreq '87DBD45FB0928D4E1DF81567E7F2ABAFD62B6775'
ike V=root:0:Windows VPN:81: received peer certreq '6E584E3375BD57F6D5421B1601C2D8C0F53A9F6E'
ike V=root:0:Windows VPN:81: received peer certreq '4A810CDEF0C0900F1906423135A2A28DD344FD08'
ike V=root:0:Windows VPN:81: received peer certreq 'D52E13C1ABE349DAE8B49594EF7C3843606466BD'
ike V=root:0:Windows VPN:81: received peer certreq '8DF00AAD7C3F4CF34275E2EC19BDF328E2246922'
ike V=root:0:Windows VPN:81: received peer certreq '6CCABD7DB47E94A5759901B6A7DFD45D1C091CCC'
ike V=root:0:Windows VPN:81: received peer certreq 'AB30D3AF4BD8F16B5869EE456929DA84B8739488'
ike V=root:0:Windows VPN:81: received peer certreq '4232B616FA04FDFE5D4B7AC3FDF74C401D5A43AF'
ike V=root:0:Windows VPN:81: received peer certreq '1A21B4952B6293CE18B365EC9C0E934CB381E6D4'
ike V=root:0:Windows VPN:81: received peer certreq '687421E97DCF229A80282DDF9720B6749B1668BC'
ike V=root:0:Windows VPN:81: received peer certreq 'A59DBF9015D9F1F5A8D8C01D14E6F1D8C4FE5717'
ike V=root:0:Windows VPN:81: received peer certreq 'A5068A78CF84BD7432DD58F965EB3A55E7C780DC'
ike V=root:0:Windows VPN:81: received peer certreq '07DAA7378C513B15AD74036A652E2E29206E21B7'
ike V=root:0:Windows VPN:81: received peer certreq 'E27F7BD877D5DF9E0A3F9EB4CB0E2EA9EFDB6977'
ike V=root:0:Windows VPN:81: received peer certreq '7ADD9381569EE04137127BACAA16F0635BC37F3D'
ike V=root:0:Windows VPN:81: received peer certreq '5FF3246C8F9124AF9B5F3EB0346AF42D5CA85DCC'
ike V=root:0:Windows VPN:81: received peer certreq '6DAA9B0987C4D0D422ED4007374D19F191FFDED3'
ike V=root:0:Windows VPN:81: received peer certreq '3B37C0C5473DFC5B9A0D015B123B53CCADB75466'
ike V=root:0:Windows VPN:81: received peer certreq '70C72F89D8E3B1A6E5DECC3DFF5F2AA122052877'
ike V=root:0:Windows VPN:81: received peer certreq '7E959FED828E2AEDC37C0D054631EF5397CD4849'
ike V=root:0:Windows VPN:81: received peer certreq '3E22D42C1F0244B8041065617CC76BAEDA87299C'
ike V=root:0:Windows VPN:81: received peer certreq '55E481D11180BED889B908A331F9A1240916B970'
ike V=root:0:Windows VPN:81: received peer certreq '740B0CD21BE6A5015E0242A40BE7F1B7BCBD4293'
ike V=root:0:Windows VPN:81: received peer certreq 'B181081A19A4C0941FFAE89528C124C99B34ACC7'
ike V=root:0:Windows VPN:81: received peer certreq '210F2C89F7C4CD5D1B825E38D6C6593BA69375AE'
ike V=root:0:Windows VPN:81: received peer certreq 'E6FFC394E838597F51D48042197627CFDB948EC6'
ike V=root:0:Windows VPN:81: received peer certreq 'BBC23E290BB328771DAD3EA24DBDF423BD06B03D'
ike V=root:0:Windows VPN:81: received peer certreq 'C89513680197280A2C55C3FCD390F53A053BC9FB'
ike V=root:0:Windows VPN:81: received peer certreq 'CD2FA354F5C22BAEB68A480ABBDF9153EC50D9EC'
ike V=root:0:Windows VPN:81: received peer certreq 'EEE59F1E2AA544C3CB2543A69A5BD46A25BCBB8E'
ike V=root:0:Windows VPN:81: received peer certreq '902F82A37C4797011E0F4BA5AF1313C2111347EA'
ike V=root:0:Windows VPN:81: received peer certreq '07232D456587B9D7B1D97DD1C5FB65C589BF9296'
ike V=root:0:Windows VPN:81: received peer certreq '4C75D4858062AAA9449C66151E6C5813053A9C72'
ike V=root:0:Windows VPN:81: received peer certreq 'B367675AFA621DC17A6CF4E1B7BB9460CF03BF2F'
ike V=root:0:Windows VPN:81: received peer certreq '174AB82B5FFB05677527AD495A4A5DC422CCEA4E'
ike V=root:0:Windows VPN:81: received peer certreq '4F9C7D21799CAD0ED8B90C579F1A0299E790F387'
ike V=root:0:Windows VPN:81: received peer certreq '5156A6A755E50F34C41AF44E6C5D2CB1B33B3652'
ike V=root:0:Windows VPN:81: received peer certreq 'B09A8DA43035AA8E91CB19FAD073E07D77C8ED9D'
ike V=root:0:Windows VPN:81: received peer certreq '6AC4987E859493A0F5B9E84A65234B1C938D36D1'
ike V=root:0:Windows VPN:81: received peer certreq '463B2E8BCB81569B3F2620711857CDFCD82CF630'
ike V=root:0:Windows VPN:81: received peer certreq '5FFAB63AD7E4A45989F1CF0FB7A233BB25EB61C0'
ike V=root:0:Windows VPN:81: received peer certreq '2D78B3E4FDD1EECB9824EB85E10F878AFF2534CE'
ike V=root:0:Windows VPN:81: received peer certreq '463B2E8BCB81569B3F2620711857CDFCD82CF630'
ike V=root:0:Windows VPN:81: received peer certreq '8BEA4AA62308E46585C94C8073CB09328EFE5A7C'
ike V=root:0:Windows VPN:81: received peer certreq '85DF234B46EE44B424093DF98BBBD87A68B589EF'
ike V=root:0:Windows VPN:81: responder preparing EAP identity request
ike V=root:0:Windows VPN:81: local cert, subject='*.mycompany.com', issuer='Starfield Secure Certificate Authority - G2'
ike V=root:0:Windows VPN:81: splitting payload len=2040 into 2 fragments
ike 0:Windows VPN:81: enc 250000230900000030193117301506035504030C0E2A2E737461726C6974652E636F6D270006C404308206BB308205A3A0030201020209008E2C8F371AFACE26300D06092A864886F70D01010B05003081C6310B30090603550406130255533110300E060355040813074172697A6F6E61311330110603550407130A53636F74747364616C6531253023060355040A131C537461726669656C6420546563686E6F6C6F676965732C20496E632E31333031060355040B132A687474703A2F2F63657274732E737461726669656C64746563682E636F6D2F7265706F7369746F72792F313430320603550403132B537461726669656C642053656375726520436572746966696361746520417574686F72697479202D204732301E170D3235303730313230303835335A170D3236303630333231323734315A30193117301506035504030C0E2A2E737461726C6974652E636F6D30820122300D06092A864886F70D01010105000382010F003082010A0282010100BF455F54376CAFD9354CFA83A173CE58A0CBC30F31205A89C1E4CD8E966E8953F2FE80B27F523F8373E6A85C565B34C8830C8575BC4F2122FCBFFA06407E340F499BF547EC6979804773D1F372106AF6750702F9F3ACC62B8A60856A1C45C9E9DD8B91E5F181833140DABB7C6F52A23699A59CE0FC558D76E1E48554E736EE1B08D43F894581EDA0AD9300DFACAE8CF0ACC6E76F66BD790657CDDD8660FC68C433E54A67D94AD694AC91DB6F9216820B6637349648D4D29D49C996C02F6F892A5C1AB2FA9DBB1EB40EF95089AF2A04CFFCEAF16F1CA45B99F799276D976370437197040FB5320B8B12F9A788BFBD83A7004F89E4FE6063D35527357D623D68B90203010001A382035630820352300C0603551D130101FF04023000301D0603551D250416301406082B0601050507030106082B06010505070302300E0603551D0F0101FF0404030205A0303D0603551D1F043630343032A030A02E862C687474703A2F2F63726C2E737461726669656C64746563682E636F6D2F736669673273312D3837302E63726C30630603551D20045C305A304E060B6086480186FD6E01071701303F303D06082B060105050702011631687474703A2F2F6365727469666963617465732E737461726669656C64746563682E636F6D2F7265706F7369746F72792F3008060667810C01020130818206082B0601050507010104763074302A06082B06010505073001861E687474703A2F2F6F6373702E737461726669656C64746563682E636F6D2F304606082B06010505073002863A687474703A2F2F6365727469666963617465732E737461726669656C64746563682E636F6D2F7265706F7369746F72792F73666967322E637274301F0603551D23041830168014254581685026383D3B2D2CBECD6AD9B63DB3666330270603551D110420301E820E2A2E737461726C69020102
ike 0:Windows VPN:81: enc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
ike V=root:0:Windows VPN:81: remote port change 36722 -> 36725
ike 0:Windows VPN:81: out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
ike V=root:0:Windows VPN:81: sent IKE msg (AUTH_RESPONSE): <fortigate_wan_ip>:4500-><vpn_client_ip>:36725, len=1124, vrf=0, id=0593f4db6a5c84f5/8c11a4deaf50de1e:00000001, oif=3
ike 0:Windows VPN:81: out 0593F4DB6A5C84F58C11A4DEAF50DE1E352023200000000100000424000004080002000233941192F9C57B39B9B8B4613A11FFE8ED16A487385A9129EC50D53C72D4B80BBA83B521D08785C9215C8F36EA25BDD8D40D11D52DACC41952067B25207F54AA21FB688C63967FCC05056C7265B248A56DD726802F9F5141F7F5F6085396A66ED07F240D54B1665D59F3E348C81E0170C59C2B89D5C0094F9B1219FECB7C437263D048CF0F50FD67233357B95E8ADB6C982B5F56412ED35AFB9072BFCE9EB9950655FF6542E6728BDB3B3AD4D47074F757CF2D4AD527866DC9F74EDD5020A3FE413E92DE057CCFC3561C95D48BB087D46F2E3E64FBB4C915D69EDBAF25235A8E19FCA6BCEC554396191D13C0D5A454CE12DBB31B0D5C90CEB9E3BFDC48BA5831DAB0A8E998C7F838BC1CC3BCD5EBEFD9F1C816E523515FF1038369F84AD37AE0B0637A6E8B8E5B6D53D08F508ADA4758AF2692935EB59B3FC09E1CC600DB93A21BDE700198157CF9E37B5AEA1D6F18AC30EEA22A078B2289DBFCEEE48939A52387E34D3AAFD7C4A6FEC95CA98EFFCCE58FF16DB6DE11055AD1C29BA326E9BA1E8F40C6C680BB408E00039DA5C2B79D8756D10736EDE524FCB7A9F3CE9CF623E76CC603E8BFCA87EC36AB92CC5238556C9CAE2E2125108B469253D9422DC9F4F6801E25F7ACFCC5ED6CAC54E24B58D0F2393C8F9C671ED57B9DC527E371B083C38E8300934AC08F60741541F4AA685D55F01481C9D9E9D1B4B6145CC07FFA011EFE2649EE182B0B84F85F98661B1FEC1125D3BC33DFDD5DE049F8926DACF7632A3F16520139CA0E4E5AC7CD0E5CA8FEE4F2DD8C0B593077AC79096C9C8395D0DFF09881616A1F030A44FD997EA51CC88FD64CBD50136D1B9DF15FC2767D81A6A04972763E27434B930C4515FBBF9A622F28CEBC52DEF657542DD7533FDC26B86C05C4F0809601CB1CEE0B8911C42EC351F159E801F9666F55B3325226BFC4AE11EE666E6D14895FF9B7FDC4E8AA743E3B535767F5458A71176B862077569F3F5751728E5D7A42AF0BF70243C7EE9A5DF876A4773EDF1277128853A155ADB3411824A25066C9CE844989666B523940D2952FD5673638ED9418324225641D137DAB929591845494394374455F9C4C3A1B4C0A210F7DAA67C985A832EF3575B29E2CEA27E69C721DFE6D5EE0265C4156BFBBE848E3DD4D766C138B94C1234033855A390E0754A38E059AB524CC58A0B5F16B8C1389E76194EA691B52D2A74BCEF012402E30F7E812623359D80E2AB17047CA65C675BF976E51D425F7A73A9043BD251032BAD344469677F369EF35643F7C0EF1E24E25C9778C7DB416E843EBDA1266CA8CB3B929450CB088F1B7E0FC8312AC8530E43E5DDC851658FFDAF223EED45B07569A3F5F9B7D147658FF3E49E7D9E6C9CD7D50B0D326E65FAB1CE4F91F90387684F81FD0CE6B04F3F1E4F73619DD2AE6601D105CE97DBA9D34490409C72B0E
ike V=root:0:Windows VPN:81: sent IKE msg (AUTH_RESPONSE): <fortigate_wan_ip>:4500-><vpn_client_ip>:36725, len=1060, vrf=0, id=0593f4db6a5c84f5/8c11a4deaf50de1e:00000001, oif=3
ike V=root:0:Windows VPN:79: negotiation timeout, deleting
ike V=root:Windows VPN Negotiate SA Error: ike negotiation timeout
ike :shrank heap by 57344 bytes
ike V=root:0:Windows VPN:80: negotiation timeout, deleting
ike V=root:Windows VPN Negotiate SA Error: ike negotiation timeout
ike V=root:0:Windows VPN:81: negotiation timeout, deleting
ike V=root:Windows VPN Negotiate SA Error: ike negotiation timeout
ike V=root:0:Windows VPN: connection expiring due to phase1 down