Hi all,
I'm trying to configure Shrew and a NetScreen VPN in the following
manner: I want to use a static client configuration and XAuth
together.
Specifically I want to "Use a virtual adapter and assigned address" and
to NOT "Obtain Automatically". I want to specify the Address and
Netmask manually (DNS too, but that does not seem to be an issue).
However, I also want to use XAuth so that I can use an external
directory for the users and passwords. The NetScreen unfortunately
requires modecfg to be on when using XAuth, so I also have to set the
Auto Configuration in the Site config to "ike config push".
When I set this up, I cannot connect. It looks like Shrew does not
like it when the NetScreen wants to proceed with client configuration
despite the fact that Shrew is already configured with an IP address.
The Shrew IKE log reports "user <username> authentication failed":
11/01/04 10:18:05 <- : recv IKE packet x.x.x.x:500 -> y.y.y.y:500 ( 76
bytes ) 11/01/04 10:18:05 DB : phase1 found
11/01/04 10:18:05 DB : phase1 ref increment ( ref count = 4, obj count
= 1 ) 11/01/04 10:18:05 ii : processing config packet ( 76 bytes )
11/01/04 10:18:05 DB : config found
11/01/04 10:18:05 DB : config ref increment ( ref count = 2, obj count
= 1 ) 11/01/04 10:18:05 == : new config iv ( 16 bytes )
11/01/04 10:18:05 =< : cookies ed5ba4bd7d6e6dcd:ea9443aafff8c72b
11/01/04 10:18:05 =< : message 74e3fa6f
11/01/04 10:18:05 =< : decrypt iv ( 16 bytes )
11/01/04 10:18:05 == : decrypt packet ( 76 bytes )
11/01/04 10:18:05 <= : trimmed packet padding ( 16 bytes )
11/01/04 10:18:05 <= : stored iv ( 16 bytes )
11/01/04 10:18:05 << : hash payload
11/01/04 10:18:05 << : attribute payload
11/01/04 10:18:05 == : configure hash_i ( computed ) ( 16 bytes )
11/01/04 10:18:05 == : configure hash_c ( computed ) ( 16 bytes )
11/01/04 10:18:05 ii : configure hash verified
11/01/04 10:18:05 ii : received xauth result -
11/01/04 10:18:05 !! : user bobjones authentication failed
As soon as I change in the Site configuration to "Obtain Automatically"
the Address and Netmask things work fine. (The reason why I'm
configuring the clients manually is a long story and probably is not
relevant.)
Does anyone know a workaround or way to tell Shrew to simply ignore the
config parameters that the NetScreen is sending?
The Shrew client is 2.1.7 on WinXP SP3 and the NetScreen is running
6.2.0r7.
11/01/04 10:17:53 ## : IKE Daemon, ver 2.1.7
11/01/04 10:17:53 ## : Copyright 2010 Shrew Soft Inc.
11/01/04 10:17:53 ## : This product linked OpenSSL 0.9.8h 28 May 2008
11/01/04 10:17:53 ii : opened 'C:\Program Files\ShrewSoft\VPN Client\debug\iked.log'
11/01/04 10:17:53 ii : rebuilding vnet device list ...
11/01/04 10:17:53 ii : device ROOT\VNET\0000 disabled
11/01/04 10:17:53 ii : network process thread begin ...
11/01/04 10:17:53 ii : pfkey process thread begin ...
11/01/04 10:17:53 ii : ipc server process thread begin ...
11/01/04 10:18:05 ii : ipc client process thread begin ...
11/01/04 10:18:05 <A : peer config add message
11/01/04 10:18:05 DB : peer ref increment ( ref count = 1, obj count = 0 )
11/01/04 10:18:05 DB : peer added ( obj count = 1 )
11/01/04 10:18:05 ii : local address y.y.y.y selected for peer
11/01/04 10:18:05 DB : peer ref increment ( ref count = 2, obj count = 1 )
11/01/04 10:18:05 DB : tunnel ref increment ( ref count = 1, obj count = 0 )
11/01/04 10:18:05 DB : tunnel added ( obj count = 1 )
11/01/04 10:18:05 <A : proposal config message
11/01/04 10:18:05 <A : proposal config message
11/01/04 10:18:05 <A : client config message
11/01/04 10:18:05 <A : xauth username message
11/01/04 10:18:05 <A : xauth password message
11/01/04 10:18:05 <A : local id '[email protected]' message
11/01/04 10:18:05 <A : remote id 'x.x.x.x' message
11/01/04 10:18:05 <A : preshared key message
11/01/04 10:18:05 <A : remote resource message
11/01/04 10:18:05 <A : peer tunnel enable message
11/01/04 10:18:05 DB : tunnel ref increment ( ref count = 2, obj count = 1 )
11/01/04 10:18:05 DB : new phase1 ( ISAKMP initiator )
11/01/04 10:18:05 DB : exchange type is aggressive
11/01/04 10:18:05 DB : y.y.y.y:500 <-> x.x.x.x:500
11/01/04 10:18:05 DB : ed5ba4bd7d6e6dcd:0000000000000000
11/01/04 10:18:05 DB : phase1 ref increment ( ref count = 1, obj count = 0 )
11/01/04 10:18:05 DB : phase1 added ( obj count = 1 )
11/01/04 10:18:05 >> : security association payload
11/01/04 10:18:05 >> : - proposal #1 payload
11/01/04 10:18:05 >> : -- transform #1 payload
11/01/04 10:18:05 >> : -- transform #2 payload
11/01/04 10:18:05 >> : -- transform #3 payload
11/01/04 10:18:05 >> : -- transform #4 payload
11/01/04 10:18:05 >> : -- transform #5 payload
11/01/04 10:18:05 >> : -- transform #6 payload
11/01/04 10:18:05 >> : -- transform #7 payload
11/01/04 10:18:05 >> : -- transform #8 payload
11/01/04 10:18:05 >> : -- transform #9 payload
11/01/04 10:18:05 >> : -- transform #10 payload
11/01/04 10:18:05 >> : -- transform #11 payload
11/01/04 10:18:05 >> : -- transform #12 payload
11/01/04 10:18:05 >> : -- transform #13 payload
11/01/04 10:18:05 >> : -- transform #14 payload
11/01/04 10:18:05 >> : -- transform #15 payload
11/01/04 10:18:05 >> : -- transform #16 payload
11/01/04 10:18:05 >> : -- transform #17 payload
11/01/04 10:18:05 >> : -- transform #18 payload
11/01/04 10:18:05 >> : key exchange payload
11/01/04 10:18:05 >> : nonce payload
11/01/04 10:18:05 >> : identification payload
11/01/04 10:18:05 >> : vendor id payload
11/01/04 10:18:05 ii : local supports XAUTH
11/01/04 10:18:05 >> : vendor id payload
11/01/04 10:18:05 ii : local supports nat-t ( draft v00 )
11/01/04 10:18:05 >> : vendor id payload
11/01/04 10:18:05 ii : local supports nat-t ( draft v01 )
11/01/04 10:18:05 >> : vendor id payload
11/01/04 10:18:05 ii : local supports nat-t ( draft v02 )
11/01/04 10:18:05 >> : vendor id payload
11/01/04 10:18:05 ii : local supports nat-t ( draft v03 )
11/01/04 10:18:05 >> : vendor id payload
11/01/04 10:18:05 ii : local supports nat-t ( rfc )
11/01/04 10:18:05 >> : vendor id payload
11/01/04 10:18:05 ii : local supports FRAGMENTATION
11/01/04 10:18:05 >> : vendor id payload
11/01/04 10:18:05 ii : local supports DPDv1
11/01/04 10:18:05 >> : vendor id payload
11/01/04 10:18:05 ii : local is SHREW SOFT compatible
11/01/04 10:18:05 >> : vendor id payload
11/01/04 10:18:05 ii : local is NETSCREEN compatible
11/01/04 10:18:05 >> : vendor id payload
11/01/04 10:18:05 ii : local is SIDEWINDER compatible
11/01/04 10:18:05 >> : vendor id payload
11/01/04 10:18:05 ii : local is CISCO UNITY compatible
11/01/04 10:18:05 >= : cookies ed5ba4bd7d6e6dcd:0000000000000000
11/01/04 10:18:05 >= : message 00000000
11/01/04 10:18:05 -> : send IKE packet y.y.y.y:500 -> x.x.x.x:500 ( 1195 bytes )
11/01/04 10:18:05 DB : phase1 resend event scheduled ( ref count = 2 )
11/01/04 10:18:05 DB : phase1 ref decrement ( ref count = 1, obj count = 1 )
11/01/04 10:18:05 DB : tunnel ref increment ( ref count = 3, obj count = 1 )
11/01/04 10:18:05 <- : recv IKE packet x.x.x.x:500 -> y.y.y.y:500 ( 432 bytes )
11/01/04 10:18:05 DB : phase1 found
11/01/04 10:18:05 DB : phase1 ref increment ( ref count = 2, obj count = 1 )
11/01/04 10:18:05 ii : processing phase1 packet ( 432 bytes )
11/01/04 10:18:05 =< : cookies ed5ba4bd7d6e6dcd:ea9443aafff8c72b
11/01/04 10:18:05 =< : message 00000000
11/01/04 10:18:05 << : security association payload
11/01/04 10:18:05 << : - propsal #1 payload
11/01/04 10:18:05 << : -- transform #1 payload
11/01/04 10:18:05 ii : unmatched isakmp proposal/transform
11/01/04 10:18:05 ii : key length ( 128 != 256 )
11/01/04 10:18:05 ii : unmatched isakmp proposal/transform
11/01/04 10:18:05 ii : key length ( 128 != 256 )
11/01/04 10:18:05 ii : unmatched isakmp proposal/transform
11/01/04 10:18:05 ii : key length ( 128 != 192 )
11/01/04 10:18:05 ii : unmatched isakmp proposal/transform
11/01/04 10:18:05 ii : key length ( 128 != 192 )
11/01/04 10:18:05 !! : peer violates RFC, transform number mismatch ( 1 != 5 )
11/01/04 10:18:05 ii : matched isakmp proposal #1 transform #1
11/01/04 10:18:05 ii : - transform = ike
11/01/04 10:18:05 ii : - cipher type = aes
11/01/04 10:18:05 ii : - key length = 128 bits
11/01/04 10:18:05 ii : - hash type = md5
11/01/04 10:18:05 ii : - dh group = modp-1024
11/01/04 10:18:05 ii : - auth type = xauth-initiator-psk
11/01/04 10:18:05 ii : - life seconds = 28800
11/01/04 10:18:05 ii : - life kbytes = 0
11/01/04 10:18:05 << : vendor id payload
11/01/04 10:18:05 ii : unknown vendor id ( 28 bytes )
11/01/04 10:18:05 0x : 48a45f8a 629df213 29e84ed5 b051ef83 1b774644 0000000d 00000614
11/01/04 10:18:05 << : vendor id payload
11/01/04 10:18:05 ii : peer supports XAUTH
11/01/04 10:18:05 << : vendor id payload
11/01/04 10:18:05 ii : peer supports DPDv1
11/01/04 10:18:05 << : vendor id payload
11/01/04 10:18:05 ii : peer supports HEARTBEAT-NOTIFY
11/01/04 10:18:05 << : key exchange payload
11/01/04 10:18:05 << : nonce payload
11/01/04 10:18:05 << : identification payload
11/01/04 10:18:05 ii : phase1 id match ( natt prevents ip match )
11/01/04 10:18:05 ii : received = ipv4-host x.x.x.x
11/01/04 10:18:05 << : hash payload
11/01/04 10:18:05 << : vendor id payload
11/01/04 10:18:05 ii : peer supports nat-t ( draft v02 )
11/01/04 10:18:05 << : nat discovery payload
11/01/04 10:18:05 << : nat discovery payload
11/01/04 10:18:05 ii : disabled nat-t ( no nat detected )
11/01/04 10:18:05 == : DH shared secret ( 128 bytes )
11/01/04 10:18:05 == : SETKEYID ( 16 bytes )
11/01/04 10:18:05 == : SETKEYID_d ( 16 bytes )
11/01/04 10:18:05 == : SETKEYID_a ( 16 bytes )
11/01/04 10:18:05 == : SETKEYID_e ( 16 bytes )
11/01/04 10:18:05 == : cipher key ( 16 bytes )
11/01/04 10:18:05 == : cipher iv ( 16 bytes )
11/01/04 10:18:05 == : phase1 hash_i ( computed ) ( 16 bytes )
11/01/04 10:18:05 >> : hash payload
11/01/04 10:18:05 >> : nat discovery payload
11/01/04 10:18:05 >> : nat discovery payload
11/01/04 10:18:05 >= : cookies ed5ba4bd7d6e6dcd:ea9443aafff8c72b
11/01/04 10:18:05 >= : message 00000000
11/01/04 10:18:05 >= : encrypt iv ( 16 bytes )
11/01/04 10:18:05 == : encrypt packet ( 88 bytes )
11/01/04 10:18:05 == : stored iv ( 16 bytes )
11/01/04 10:18:05 DB : phase1 resend event canceled ( ref count = 1 )
11/01/04 10:18:05 -> : send IKE packet y.y.y.y:500 -> x.x.x.x:500 ( 120 bytes )
11/01/04 10:18:05 == : phase1 hash_r ( computed ) ( 16 bytes )
11/01/04 10:18:05 == : phase1 hash_r ( received ) ( 16 bytes )
11/01/04 10:18:05 ii : phase1 sa established
11/01/04 10:18:05 ii : x.x.x.x:500 <-> y.y.y.y:500
11/01/04 10:18:05 ii : ed5ba4bd7d6e6dcd:ea9443aafff8c72b
11/01/04 10:18:05 ii : sending peer INITIAL-CONTACT notification
11/01/04 10:18:05 ii : - y.y.y.y:500 -> x.x.x.x:500
11/01/04 10:18:05 ii : - isakmp spi = ed5ba4bd7d6e6dcd:ea9443aafff8c72b
11/01/04 10:18:05 ii : - data size 0
11/01/04 10:18:05 >> : hash payload
11/01/04 10:18:05 >> : notification payload
11/01/04 10:18:05 == : new informational hash ( 16 bytes )
11/01/04 10:18:05 == : new informational iv ( 16 bytes )
11/01/04 10:18:05 >= : cookies ed5ba4bd7d6e6dcd:ea9443aafff8c72b
11/01/04 10:18:05 >= : message e71af5b1
11/01/04 10:18:05 >= : encrypt iv ( 16 bytes )
11/01/04 10:18:05 == : encrypt packet ( 76 bytes )
11/01/04 10:18:05 == : stored iv ( 16 bytes )
11/01/04 10:18:05 -> : send IKE packet y.y.y.y:500 -> x.x.x.x:500 ( 104 bytes )
11/01/04 10:18:05 DB : tunnel ref increment ( ref count = 4, obj count = 1 )
11/01/04 10:18:05 DB : phase1 ref increment ( ref count = 2, obj count = 1 )
11/01/04 10:18:05 DB : phase1 ref increment ( ref count = 3, obj count = 1 )
11/01/04 10:18:05 DB : phase1 ref increment ( ref count = 4, obj count = 1 )
11/01/04 10:18:05 DB : phase2 not found
11/01/04 10:18:05 DB : phase1 ref decrement ( ref count = 3, obj count = 1 )
11/01/04 10:18:05 <- : recv IKE packet x.x.x.x:500 -> y.y.y.y:500 ( 76 bytes )
11/01/04 10:18:05 DB : phase1 found
11/01/04 10:18:05 DB : phase1 ref increment ( ref count = 4, obj count = 1 )
11/01/04 10:18:05 ii : processing config packet ( 76 bytes )
11/01/04 10:18:05 DB : config not found
11/01/04 10:18:05 DB : tunnel ref increment ( ref count = 5, obj count = 1 )
11/01/04 10:18:05 DB : config ref increment ( ref count = 1, obj count = 0 )
11/01/04 10:18:05 DB : config added ( obj count = 1 )
11/01/04 10:18:05 == : new config iv ( 16 bytes )
11/01/04 10:18:05 =< : cookies ed5ba4bd7d6e6dcd:ea9443aafff8c72b
11/01/04 10:18:05 =< : message be3653b2
11/01/04 10:18:05 =< : decrypt iv ( 16 bytes )
11/01/04 10:18:05 == : decrypt packet ( 76 bytes )
11/01/04 10:18:05 <= : trimmed packet padding ( 8 bytes )
11/01/04 10:18:05 <= : stored iv ( 16 bytes )
11/01/04 10:18:05 << : hash payload
11/01/04 10:18:05 << : attribute payload
11/01/04 10:18:05 == : configure hash_i ( computed ) ( 16 bytes )
11/01/04 10:18:05 == : configure hash_c ( computed ) ( 16 bytes )
11/01/04 10:18:05 ii : configure hash verified
11/01/04 10:18:05 ii : - xauth authentication type
11/01/04 10:18:05 ii : - xauth username
11/01/04 10:18:05 ii : - xauth password
11/01/04 10:18:05 ii : received basic xauth request -
11/01/04 10:18:05 ii : - standard xauth username
11/01/04 10:18:05 ii : - standard xauth password
11/01/04 10:18:05 ii : sending xauth response for bobjones
11/01/04 10:18:05 >> : hash payload
11/01/04 10:18:05 >> : attribute payload
11/01/04 10:18:05 == : new configure hash ( 16 bytes )
11/01/04 10:18:05 >= : cookies ed5ba4bd7d6e6dcd:ea9443aafff8c72b
11/01/04 10:18:05 >= : message be3653b2
11/01/04 10:18:05 >= : encrypt iv ( 16 bytes )
11/01/04 10:18:05 == : encrypt packet ( 83 bytes )
11/01/04 10:18:05 == : stored iv ( 16 bytes )
11/01/04 10:18:05 -> : send IKE packet y.y.y.y:500 -> x.x.x.x:500 ( 120 bytes )
11/01/04 10:18:05 DB : config resend event scheduled ( ref count = 2 )
11/01/04 10:18:05 DB : config ref decrement ( ref count = 1, obj count = 1 )
11/01/04 10:18:05 DB : phase1 ref decrement ( ref count = 3, obj count = 1 )
11/01/04 10:18:05 <- : recv IKE packet x.x.x.x:500 -> y.y.y.y:500 ( 92 bytes )
11/01/04 10:18:05 DB : phase1 found
11/01/04 10:18:05 DB : phase1 ref increment ( ref count = 4, obj count = 1 )
11/01/04 10:18:05 ii : processing config packet ( 92 bytes )
11/01/04 10:18:05 DB : config found
11/01/04 10:18:05 DB : config ref increment ( ref count = 2, obj count = 1 )
11/01/04 10:18:05 == : new config iv ( 16 bytes )
11/01/04 10:18:05 =< : cookies ed5ba4bd7d6e6dcd:ea9443aafff8c72b
11/01/04 10:18:05 =< : message c2d5e7af
11/01/04 10:18:05 =< : decrypt iv ( 16 bytes )
11/01/04 10:18:05 == : decrypt packet ( 92 bytes )
11/01/04 10:18:05 <= : trimmed packet padding ( 4 bytes )
11/01/04 10:18:05 <= : stored iv ( 16 bytes )
11/01/04 10:18:05 << : hash payload
11/01/04 10:18:05 << : attribute payload
11/01/04 10:18:05 == : configure hash_i ( computed ) ( 16 bytes )
11/01/04 10:18:05 == : configure hash_c ( computed ) ( 16 bytes )
11/01/04 10:18:05 ii : configure hash verified
11/01/04 10:18:05 ii : received config push request
11/01/04 10:18:05 ii : - IP4 Address
11/01/04 10:18:05 ii : - IP4 Netmask
11/01/04 10:18:05 ii : - IP4 DNS Server
11/01/04 10:18:05 ii : - IP4 DNS Server
11/01/04 10:18:05 ii : building config attribute list
11/01/04 10:18:05 ii : sending config push acknowledge
11/01/04 10:18:05 >> : hash payload
11/01/04 10:18:05 >> : attribute payload
11/01/04 10:18:05 == : new configure hash ( 16 bytes )
11/01/04 10:18:05 >= : cookies ed5ba4bd7d6e6dcd:ea9443aafff8c72b
11/01/04 10:18:05 >= : message c2d5e7af
11/01/04 10:18:05 >= : encrypt iv ( 16 bytes )
11/01/04 10:18:05 == : encrypt packet ( 56 bytes )
11/01/04 10:18:05 == : stored iv ( 16 bytes )
11/01/04 10:18:05 DB : config resend event canceled ( ref count = 1 )
11/01/04 10:18:05 -> : send IKE packet y.y.y.y:500 -> x.x.x.x:500 ( 88 bytes )
11/01/04 10:18:05 DB : config resend event scheduled ( ref count = 2 )
11/01/04 10:18:05 DB : config ref decrement ( ref count = 1, obj count = 1 )
11/01/04 10:18:05 DB : phase1 ref decrement ( ref count = 3, obj count = 1 )
11/01/04 10:18:05 <- : recv IKE packet x.x.x.x:500 -> y.y.y.y:500 ( 76 bytes )
11/01/04 10:18:05 DB : phase1 found
11/01/04 10:18:05 DB : phase1 ref increment ( ref count = 4, obj count = 1 )
11/01/04 10:18:05 ii : processing config packet ( 76 bytes )
11/01/04 10:18:05 DB : config found
11/01/04 10:18:05 DB : config ref increment ( ref count = 2, obj count = 1 )
11/01/04 10:18:05 == : new config iv ( 16 bytes )
11/01/04 10:18:05 =< : cookies ed5ba4bd7d6e6dcd:ea9443aafff8c72b
11/01/04 10:18:05 =< : message 74e3fa6f
11/01/04 10:18:05 =< : decrypt iv ( 16 bytes )
11/01/04 10:18:05 == : decrypt packet ( 76 bytes )
11/01/04 10:18:05 <= : trimmed packet padding ( 16 bytes )
11/01/04 10:18:05 <= : stored iv ( 16 bytes )
11/01/04 10:18:05 << : hash payload
11/01/04 10:18:05 << : attribute payload
11/01/04 10:18:05 == : configure hash_i ( computed ) ( 16 bytes )
11/01/04 10:18:05 == : configure hash_c ( computed ) ( 16 bytes )
11/01/04 10:18:05 ii : configure hash verified
11/01/04 10:18:05 ii : received xauth result -
11/01/04 10:18:05 !! : user bobjones authentication failed
11/01/04 10:18:05 DB : config ref decrement ( ref count = 1, obj count = 1 )
11/01/04 10:18:05 DB : phase1 soft event canceled ( ref count = 3 )
11/01/04 10:18:05 DB : phase1 hard event canceled ( ref count = 2 )
11/01/04 10:18:05 DB : phase1 dead event canceled ( ref count = 1 )
11/01/04 10:18:05 ii : sending peer DELETE message
11/01/04 10:18:05 ii : - y.y.y.y:500 -> x.x.x.x:500
11/01/04 10:18:05 ii : - isakmp spi = ed5ba4bd7d6e6dcd:ea9443aafff8c72b
11/01/04 10:18:05 ii : - data size 0
11/01/04 10:18:05 >> : hash payload
11/01/04 10:18:05 >> : delete payload
11/01/04 10:18:05 == : new informational hash ( 16 bytes )
11/01/04 10:18:05 == : new informational iv ( 16 bytes )
11/01/04 10:18:05 >= : cookies ed5ba4bd7d6e6dcd:ea9443aafff8c72b
11/01/04 10:18:05 >= : message f11753fa
11/01/04 10:18:05 >= : encrypt iv ( 16 bytes )
11/01/04 10:18:05 == : encrypt packet ( 76 bytes )
11/01/04 10:18:05 == : stored iv ( 16 bytes )
11/01/04 10:18:05 -> : send IKE packet y.y.y.y:500 -> x.x.x.x:500 ( 104 bytes )
11/01/04 10:18:05 DB : config ref increment ( ref count = 2, obj count = 1 )
11/01/04 10:18:05 DB : config resend event canceled ( ref count = 1 )
11/01/04 10:18:05 DB : config deleted ( obj count = 0 )
11/01/04 10:18:05 DB : tunnel ref decrement ( ref count = 4, obj count = 1 )
11/01/04 10:18:05 ii : phase1 removal before expire time
11/01/04 10:18:05 DB : phase1 deleted ( obj count = 0 )
11/01/04 10:18:05 DB : tunnel ref decrement ( ref count = 3, obj count = 1 )
11/01/04 10:18:05 DB : policy not found
11/01/04 10:18:05 DB : policy not found
11/01/04 10:18:05 DB : policy not found
11/01/04 10:18:05 DB : policy not found
11/01/04 10:18:05 DB : policy not found
11/01/04 10:18:05 DB : policy not found
11/01/04 10:18:05 DB : tunnel dpd event canceled ( ref count = 2 )
11/01/04 10:18:05 DB : tunnel stats event canceled ( ref count = 1 )
11/01/04 10:18:05 DB : removing tunnel config references
11/01/04 10:18:05 DB : removing tunnel phase2 references
11/01/04 10:18:05 DB : removing tunnel phase1 references
11/01/04 10:18:05 DB : tunnel deleted ( obj count = 0 )
11/01/04 10:18:05 DB : peer ref decrement ( ref count = 1, obj count = 1 )
11/01/04 10:18:05 DB : removing all peer tunnel refrences
11/01/04 10:18:05 DB : peer deleted ( obj count = 0 )
11/01/04 10:18:05 ii : ipc client process thread exit ...
11/01/04 10:18:09 ii : halt signal received, shutting down
11/01/04 10:18:09 ii : ipc server process thread exit ...
11/01/04 10:18:09 ii : pfkey process thread exit ...
11/01/04 10:18:09
_______________________________________________
vpn-help mailing list
[email protected]
http://lists.shrew.net/mailman/listinfo/vpn-help
