VPN 笔记

Apr 14 10:27:00.943: ISAKMP:(0): constructed NAT-T vendor-03 ID Apr 14 10:27:00.947: ISAKMP:(0): constructed NAT-T vendor-02 ID

Apr 14 10:27:00.947: ISAKMP:(0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM Apr 14 10:27:00.947: ISAKMP:(0):Old State = IKE_READY New State = IKE_I_MM1

Apr 14 10:27:00.947: ISAKMP:(0): beginning Main Mode exchange

Apr 14 10:27:00.951: ISAKMP:(0): sending packet to 23.1.1.3 my_port 500 peer_port 500 (I) MM_NO_STATE //第1个包

Apr 14 10:27:00.951: ISAKMP:(0):Sending an IKE IPv4 Packet.

Apr 14 10:27:01.487: ISAKMP (0:0): received packet from 23.1.1.3 dport 500 sport 500 Global (I) MM_NO_STATE //第2个包

Apr 14 10:27:01.491: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH Apr 14 10:27:01.491: ISAKMP:(0):Old State = IKE_I_MM1 New State = IKE_I_MM2

Apr 14 10:27:01.495: ISAKMP:(0): processing SA payload. message ID = 0 Apr 14 10:27.:01.495: ISAKMP:(0): processing vendor id payload

Apr 14 10:27:01.495: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch Apr 14 10:27:01.499: ISAKMP (0:0): vendor ID is NAT-T v7

Apr 14 10:27:01.499: ISAKMP:(0):found peer pre-shared key matching 23.1.1.3 Apr 14 10:27:01.499: ISAKMP:(0): local preshared key found Apr 14 10:27:01.499: ISAKMP : Scanning profiles for xauth ...

Apr 14 10:27:01.503: ISAKMP:(0):Checking ISAKMP transform 1 against priority 10 policy

Apr 14 10:27:01.503: ISAKMP: encryption AES-CBC Apr 14 10:27:01.503: ISAKMP: keylength of 128 Apr 14 10:27:01.503: ISAKMP: hash SHA Apr 14 10:27:01.503: ISAKMP: default group 2 Apr 14 10:27:01.503: ISAKMP: auth pre-share Apr 14 10:27:01.507: ISAKMP: life type in seconds

Apr 14 10:27:01.507: ISAKMP: life duration (VPI) of 0x0 0x1 0x51 0x80 Apr 14 10:27:01.507: ISAKMP:(0):atts are acceptable. Next payload is 0 //1-2个包成功

Apr 14 10:27:01.511: ISAKMP:(0): processing vendor id payload

Apr 14 10:27:01.511: ISAKMP:(0): vendor ID seems Unity/DPD but major 245 mismatch Apr 14 10:27:01.511: ISAKMP (0:0): vendor ID is NAT-T v7

Apr 14 10:27:01.515: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE Apr 14 10:27:01.515: ISAKMP:(0):Old State = IKE_I_MM2 New State = IKE_I_MM2

Apr 14 10:27:01.523: ISAKMP:(0): sending packet to 23.1.1.3 my_port 500 peer_port 500 (I) MM_SA_SETUP //第3个包

Apr 14 10:27:01.523: ISAKMP:(0):Sending an IKE IPv4 Packet.

Apr 14 10:27:01.527: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE Apr 14 10:27:01.527: ISAKMP:(0):Old State = IKE_I_MM2 New State = IKE_I_MM3

Apr 14 10:27:02.119: ISAKMP (0:0): received packet from 23.1.1.3 dport 500 sport 500 Global (I) MM_SA_SETUP //第4个包

Apr 14 10:27:02.123: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH Apr 14 10:27:02.123: ISAKMP:(0):Old State = IKE_I_MM3 New State = IKE_I_MM4

Apr 14 10:27:02.131: ISAKMP:(0): processing KE payload. message ID = 0 Apr 14 10:27:02.239: ISAKMP:(0): processing NONCE payload. message ID = 0 Apr 14 10:27:02.243: ISAKMP:(0):found peer pre-shared key matching 23.1.1.3 Apr 14 10:27:02.247: ISAKMP:(1002): processing vendor id payload Apr 14 10:27:02.247: ISAKMP:(1002): vendor ID is Unity

Apr 14 10:27:02.251: ISAKMP:(1002): processing vendor id payload Apr 14 10:27:02.251: ISAKMP:(1002): vendor ID is DPD

Apr 14 10:27:02.251: ISAKMP:(1002): processing vendor id payload Apr 14 10:27:02.255: ISAKMP:(1002): speaking to another IOS box! Apr 14 10:27:02.255: ISAKMP:(1002):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE

Apr 14 10:27:02.255: ISAKMP:(1002):Old State = IKE_I_MM4 New State = IKE_I_MM4

Apr 14 10:27:02.263: ISAKMP:(1002):Send initial contact

Apr 14 10:27:02.263: ISAKMP:(1002):SA is doing pre-shared key authentication using id type ID_IPV4_ADDR

Apr 14 10:27:02.263: ISAKMP (0:1002): ID payload next-payload : 8 type : 1 address : 12.1.1.1 protocol : 17 port : 500 length :12

Apr 14 10:27:02.267: ISAKMP:(1002):Total payload length: 12

Apr 14 10:27:02.271: ISAKMP:(1002): sending packet to 23.1.1.3 my_port 500 peer_port 500 (I) MM_KEY_EXCH //第5个包

Apr 14 10:27:02.271: ISAKMP:(1002):Sending an IKE IPv4 Packet.

Apr 14 10:27:02.275: ISAKMP:(1002):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE Apr 14 10:27:02.275: ISAKMP:(1002):Old State = IKE_I_MM4 New State = IKE_I_MM5

Apr 14 10:27:02.883: ISAKMP (0:1002): received packet from 23.1.1.3 dport 500 sport 500 Global (I) MM_KEY_EXCH //第6个包

Apr 14 10:27:02.887: ISAKMP:(1002): processing ID payload. message ID = 0 Apr 14 10:27:02.887: ISAKMP (0:1002): ID payload next-payload : 8 type : 1 address : 23.1.1.3 protocol : 17