Cisco SRP500 Руководство по конфигурации - Страница 6
Просмотреть онлайн или скачать pdf Руководство по конфигурации для Сетевой маршрутизатор Cisco SRP500. Cisco SRP500 9 страниц. Small business managed router feature site to site ipsec vpns
Печатать страницу
#######
Site 2 SRP500 Initiates the connection here using the status page
ISAKMP (0): received packet from 192.168.200.162 dport 500 sport 500 Global (N) NEW SA
ISAKMP: Created a peer struct for 192.168.200.162, peer port 500
ISAKMP: New peer created peer = 0x83952688 peer_handle = 0x8000001E
ISAKMP: Locking peer struct 0x83952688, refcount 1 for crypto_isakmp_process_block
ISAKMP: local port 500, remote port 500
ISAKMP: Find a dup sa in the avl tree during calling isadb_insert sa = 83953838
ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
ISAKMP:(0):Old State = IKE_READY
ISAKMP:(0): processing SA payload. message ID = 0
ISAKMP:(0): processing vendor id payload
ISAKMP:(0): vendor ID seems Unity/DPD but major 0 mismatch
ISAKMP:(0): processing vendor id payload
ISAKMP:(0): vendor ID is DPD
ISAKMP:(0):found peer pre-shared key matching 192.168.200.162
ISAKMP:(0): local preshared key found
ISAKMP : Scanning profiles for xauth ...
ISAKMP:(0):Checking ISAKMP transform 0 against priority 1 policy
ISAKMP:
life type in seconds
ISAKMP:
life duration (VPI) of
ISAKMP:
encryption 3DES-CBC
ISAKMP:
hash SHA
ISAKMP:
auth pre-share
ISAKMP:
default group 2
ISAKMP:(0):atts are acceptable. Next payload is 0
ISAKMP:(0):Acceptable atts:actual life: 28800
ISAKMP:(0):Acceptable atts:life: 0
ISAKMP:(0):Fill atts in sa vpi_length:4
ISAKMP:(0):Fill atts in sa life_in_seconds:86355
ISAKMP:(0):Returning Actual lifetime: 28800
ISAKMP:(0)::Started lifetime timer: 28800.
ISAKMP:(0): processing vendor id payload
ISAKMP:(0): vendor ID seems Unity/DPD but major 0 mismatch
ISAKMP:(0): processing vendor id payload
ISAKMP:(0): vendor ID is DPD
ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
ISAKMP:(0):Old State = IKE_R_MM1
ISAKMP:(0): sending packet to 192.168.200.162 my_port 500 peer_port 500 (R) MM_SA_SETUP
ISAKMP:(0):Sending an IKE IPv4 Packet.
ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
ISAKMP:(0):Old State = IKE_R_MM1
ISAKMP (0): received packet from 192.168.200.162 dport 500 sport 500 Global (R)
MM_SA_SETUP
ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
ISAKMP:(0):Old State = IKE_R_MM2
ISAKMP:(0): processing KE payload. message ID = 0
ISAKMP:(0): processing NONCE payload. message ID = 0
ISAKMP:(0):found peer pre-shared key matching 192.168.200.162
ISAKMP:(2026):Input = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
ISAKMP:(2026):Old State = IKE_R_MM3
ISAKMP:(2026): sending packet to 192.168.200.162 my_port 500 peer_port 500 (R)
MM_KEY_EXCH
ISAKMP:(2026):Sending an IKE IPv4 Packet.
ISAKMP:(2026):Input = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
ISAKMP:(2026):Old State = IKE_R_MM3
ISAKMP (2026): received packet from 192.168.200.162 dport 500 sport 500 Global (R)
MM_KEY_EXCH
ISAKMP:(2026):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH
ISAKMP:(2026):Old State = IKE_R_MM4
All contents are Copyright © 1992-2011 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.
Page 6 of 9
New State = IKE_R_MM1
0x0 0x1 0x51 0x53
New State = IKE_R_MM1
New State = IKE_R_MM2
New State = IKE_R_MM3
New State = IKE_R_MM3
New State = IKE_R_MM4
New State = IKE_R_MM5