Cisco 2800 Series Manual page 182

Troubleshoot
Jul 29 16:06:33.651 PDT: ISAKMP:(0:2:SW:1): sending packet to 10.32.150.46 my_port 500
peer_port 500 (I) QM_IDLE
Jul 29 16:06:33.651 PDT: ISAKMP:(0:2:SW:1):Node 159862783, Input = IKE_MESG_INTERNAL,
IKE_INIT_QM
Jul 29 16:06:33.651 PDT: ISAKMP:(0:2:SW:1):Old State = IKE_QM_READY
IKE_QM_I_QM1
Jul 29 16:06:33.651 PDT: ISAKMP:(0:2:SW:1):Input = IKE_MESG_INTERNAL, IKE_PHASE1_COMPLETE
Jul 29 16:06:33.651 PDT: ISAKMP:(0:2:SW:1):Old State = IKE_P1_COMPLETE
IKE_P1_COMPLETE
Jul 29 16:06:33.923 PDT: ISAKMP (0:134217730): received packet from 10.32.150.46 dport 500
sport 500 Global (I) QM_IDLE
Jul 29 16:06:33.923 PDT: ISAKMP:(0:2:SW:1): processing HASH payload. message ID =
159862783
Jul 29 16:06:33.923 PDT: ISAKMP:(0:2:SW:1): processing SA payload. message ID = 159862783
Jul 29 16:06:33.923 PDT: ISAKMP:(0:2:SW:1):Checking IPSec proposal 1
Jul 29 16:06:33.923 PDT: ISAKMP: transform 1, ESP_3DES
Jul 29 16:06:33.923 PDT: ISAKMP:
Jul 29 16:06:33.923 PDT: ISAKMP:
Jul 29 16:06:33.923 PDT: ISAKMP:
Jul 29 16:06:33.923 PDT: ISAKMP:
Jul 29 16:06:33.923 PDT: ISAKMP:
Jul 29 16:06:33.923 PDT: ISAKMP:
Jul 29 16:06:33.923 PDT: ISAKMP:
Jul 29 16:06:33.923 PDT: ISAKMP:
! A PROPOSAL IS FOUND THAT IS COMPATIBLE IN THE NEXT LINE.
Jul 29 16:06:33.923 PDT: ISAKMP:(0:2:SW:1):atts are acceptable.
Jul 29 16:06:33.923 PDT: IPSEC(validate_proposal_request): proposal part #1,
(key eng. msg.) INBOUND local= 10.32.152.26, remote= 10.32.150.46,
local_proxy= 10.32.152.26/255.255.255.255/47/0 (type=1),
remote_proxy= 10.32.150.46/255.255.255.255/47/0 (type=1),
protocol= ESP, transform= esp-3des esp-sha-hmac
lifedur= 0s and 0kb,
spi= 0x0(0), conn_id= 0, keysize= 0, flags= 0x12
Jul 29 16:06:33.923 PDT: Crypto mapdb : proxy_match
Jul 29 16:06:33.923 PDT: ISAKMP:(0:2:SW:1): processing NONCE payload. message ID =
159862783
Jul 29 16:06:33.923 PDT: ISAKMP:(0:2:SW:1): processing KE payload. message ID = 159862783
Jul 29 16:06:33.931 PDT: ISAKMP:(0:2:SW:1): processing ID payload. message ID = 159862783
Jul 29 16:06:33.931 PDT: ISAKMP:(0:2:SW:1): processing ID payload. message ID = 159862783
Jul 29 16:06:33.931 PDT: ISAKMP: Locking peer struct 0x6635AA1C, IPSEC refcount 1 for for
stuff_ke
Jul 29 16:06:33.931 PDT: ISAKMP:(0:2:SW:1): Creating IPSec SAs
Jul 29 16:06:33.931 PDT:
Jul 29 16:06:33.931 PDT:
Jul 29 16:06:33.931 PDT:
Jul 29 16:06:33.931 PDT:
Jul 29 16:06:33.931 PDT:
Jul 29 16:06:33.931 PDT:
Jul 29 16:06:33.931 PDT:
Jul 29 16:06:33.931 PDT:
Jul 29 16:06:33.931 PDT:
Jul 29 16:06:33.931 PDT:
Jul 29 16:06:33.931 PDT: ISAKMP:(0:2:SW:1): sending packet to 10.32.150.46 my_port 500
peer_port 500 (I) QM_IDLE
Jul 29 16:06:33.935 PDT: ISAKMP:(0:2:SW:1):deleting node 159862783 error FALSE reason "No
Error"
OL-6573-01
42
src addr : 10.32.152.26
dst addr : 10.32.150.46
protocol : 47
src port : 0
dst port : 0
(proxy 10.32.150.46 to 10.32.152.26)
(proxy 10.32.152.26 to 10.32.150.46)
Hoot and Holler over V3PN Configuration Example
attributes in transform:
encaps is 1 (Tunnel)
SA life type in seconds
SA life duration (basic) of 3600
SA life type in kilobytes
SA life duration (VPI) of
authenticator is HMAC-SHA
group is 1
(Tunnel),
inbound SA from 10.32.150.46 to 10.32.152.26 (f/i)
has spi 0x1442EBFC and conn_id 0 and flags 13
lifetime of 3600 seconds
lifetime of 4608000 kilobytes
has client flags 0x0
outbound SA from 10.32.152.26 to 10.32.150.46 (f/i) 0/0
has spi -2093906224 and conn_id 0 and flags 1B
lifetime of 3600 seconds
lifetime of 4608000 kilobytes
has client flags 0x0
New State =
New State =
0x0 0x46 0x50 0x0
0/ 0