---ttfn Simon Edelhaus Boston MA 2013
On Mar 28, 2013, at 6:06 PM, "Zweerde, Marcel van de" <[email protected]> wrote: > Hello, > > After changing to client version 2.2.0 rc1(Netgear router support and > without the new algo's) and lowering the clients phase 1&2 lifetimes so > that the client renews before the Netscreen does the connection is > pretty stable but there are still some disconnects: > > If anyone has an idea....thanks for your time! > > The latest logged disconnect: > > Remote client ip : 192.168.2.106 (virtualXP on win7) > Netscreen : 1.2.3.4 (well, something like that.) > Ip pool : 192.168.253 > > -snip- > 13/03/28 20:11:32 -> : send NAT-T:IKE packet 192.168.2.106:4500 -> > 1.2.3.4:4500 ( 124 bytes ) > 13/03/28 20:11:32 ii : DPD ARE-YOU-THERE sequence 332b8556 requested > 13/03/28 20:11:32 <- : recv NAT-T:IKE packet 1.2.3.4:4500 -> > 192.168.2.106:4500 ( 92 bytes ) > 13/03/28 20:11:32 DB : phase1 found > 13/03/28 20:11:32 ii : processing informational packet ( 92 bytes ) > 13/03/28 20:11:32 == : new informational iv ( 16 bytes ) > 13/03/28 20:11:32 =< : cookies 1e8058afeadeebec:ca7cd6a5585003b7 > 13/03/28 20:11:32 =< : message 0e8fb8d3 > 13/03/28 20:11:32 =< : decrypt iv ( 16 bytes ) > 13/03/28 20:11:32 == : decrypt packet ( 92 bytes ) > 13/03/28 20:11:32 <= : trimmed packet padding ( 12 bytes ) > 13/03/28 20:11:32 <= : stored iv ( 16 bytes ) > 13/03/28 20:11:32 << : hash payload > 13/03/28 20:11:32 << : notification payload > 13/03/28 20:11:32 == : informational hash_i ( computed ) ( 16 bytes ) > 13/03/28 20:11:32 == : informational hash_c ( received ) ( 16 bytes ) > 13/03/28 20:11:32 ii : informational hash verified > 13/03/28 20:11:32 ii : received peer DPDV1-R-U-THERE-ACK notification > 13/03/28 20:11:32 ii : - 1.2.3.4:4500 -> 192.168.2.106:4500 > 13/03/28 20:11:32 ii : - isakmp spi = 1e8058afeadeebec:ca7cd6a5585003b7 > 13/03/28 20:11:32 ii : - data size 4 > 13/03/28 20:11:32 ii : DPD ARE-YOU-THERE-ACK sequence 332b8556 accepted > 13/03/28 20:11:32 ii : next tunnel DPD request in 15 secs for peer > 1.2.3.4:4500 > 13/03/28 20:11:46 DB : phase1 found > 13/03/28 20:11:46 -> : send NAT-T:KEEP-ALIVE packet 192.168.2.106:4500 > -> 1.2.3.4:4500 > 13/03/28 20:11:46 !! : get_vfwd - failed to obtain valid route ( dest > 1.2.3.4 ) > 13/03/28 20:11:46 !! : no arp entry for dst : 1.2.3.4 > 13/03/28 20:11:47 DB : phase1 found > 13/03/28 20:11:47 ii : sending peer DPDV1-R-U-THERE notification > 13/03/28 20:11:47 ii : - 192.168.2.106:4500 -> 1.2.3.4:4500 > 13/03/28 20:11:47 ii : - isakmp spi = 1e8058afeadeebec:ca7cd6a5585003b7 > 13/03/28 20:11:47 ii : - data size 4 > 13/03/28 20:11:47 >> : hash payload > 13/03/28 20:11:47 >> : notification payload > 13/03/28 20:11:47 == : new informational hash ( 16 bytes ) > 13/03/28 20:11:47 == : new informational iv ( 16 bytes ) > 13/03/28 20:11:47 >= : cookies 1e8058afeadeebec:ca7cd6a5585003b7 > 13/03/28 20:11:47 >= : message 116ccc5a > 13/03/28 20:11:47 >= : encrypt iv ( 16 bytes ) > 13/03/28 20:11:47 == : encrypt packet ( 80 bytes ) > 13/03/28 20:11:47 == : stored iv ( 16 bytes ) > 13/03/28 20:11:47 -> : send NAT-T:IKE packet 192.168.2.106:4500 -> > 1.2.3.4:4500 ( 124 bytes ) > 13/03/28 20:11:47 !! : get_vfwd - failed to obtain valid route ( dest > 1.2.3.4 ) > 13/03/28 20:11:47 !! : no arp entry for dst : 1.2.3.4 > 13/03/28 20:11:47 ii : DPD ARE-YOU-THERE sequence 332b8557 requested > 13/03/28 20:11:47 DB : phase1 soft event canceled ( ref count = 3 ) > 13/03/28 20:11:47 DB : phase1 hard event canceled ( ref count = 2 ) > 13/03/28 20:11:47 DB : phase1 dead event canceled ( ref count = 1 ) > 13/03/28 20:11:47 ii : sending peer DELETE message > 13/03/28 20:11:47 ii : - 192.168.2.106:4500 -> 1.2.3.4:4500 > 13/03/28 20:11:47 ii : - isakmp spi = 1e8058afeadeebec:ca7cd6a5585003b7 > 13/03/28 20:11:47 ii : - data size 0 > 13/03/28 20:11:47 >> : hash payload > 13/03/28 20:11:47 >> : delete payload > 13/03/28 20:11:47 == : new informational hash ( 16 bytes ) > 13/03/28 20:11:47 == : new informational iv ( 16 bytes ) > 13/03/28 20:11:47 >= : cookies 1e8058afeadeebec:ca7cd6a5585003b7 > 13/03/28 20:11:47 >= : message 7254ea5c > 13/03/28 20:11:47 >= : encrypt iv ( 16 bytes ) > 13/03/28 20:11:47 == : encrypt packet ( 76 bytes ) > 13/03/28 20:11:47 == : stored iv ( 16 bytes ) > 13/03/28 20:11:47 -> : send NAT-T:IKE packet 192.168.2.106:4500 -> > 1.2.3.4:4500 ( 108 bytes ) > 13/03/28 20:11:47 !! : get_vfwd - failed to obtain valid route ( dest > 1.2.3.4 ) > 13/03/28 20:11:47 !! : no arp entry for dst : 1.2.3.4 > 13/03/28 20:11:47 DB : config deleted ( obj count = 0 ) > 13/03/28 20:11:47 ii : phase1 removal before expire time > 13/03/28 20:11:47 DB : phase1 deleted ( obj count = 0 ) > 13/03/28 20:11:47 DB : policy found > 13/03/28 20:11:47 ii : removing IPSEC INBOUND policy ANY:172.16.1.0/24:* > -> ANY:192.168.253.122:* > 13/03/28 20:11:47 K> : send pfkey X_SPDDELETE2 UNSPEC message > 13/03/28 20:11:47 K< : recv pfkey X_SPDDELETE2 UNSPEC message > 13/03/28 20:11:47 DB : policy found > 13/03/28 20:11:47 ii : removing IPSEC OUTBOUND policy > ANY:192.168.253.122:* -> ANY:172.16.1.0/24:* > 13/03/28 20:11:47 K> : send pfkey X_SPDDELETE2 UNSPEC message > 13/03/28 20:11:47 ii : removed IPSEC policy route for > ANY:172.16.1.0/24:* > 13/03/28 20:11:47 DB : policy found > 13/03/28 20:11:47 ii : removing NONE INBOUND policy ANY:1.2.3.4:* -> > ANY:192.168.2.106:* > 13/03/28 20:11:47 K> : send pfkey X_SPDDELETE2 UNSPEC message > 13/03/28 20:11:47 DB : policy found > 13/03/28 20:11:47 ii : removing NONE OUTBOUND policy ANY:192.168.2.106:* > -> ANY:1.2.3.4:* > 13/03/28 20:11:47 K> : send pfkey X_SPDDELETE2 UNSPEC message > 13/03/28 20:11:47 !! : failed to remove NONE policy route for > ANY:1.2.3.4:* > 13/03/28 20:11:47 DB : policy found > 13/03/28 20:11:47 DB : policy deleted ( obj count = 9 ) > 13/03/28 20:11:47 K< : recv pfkey X_SPDDELETE2 UNSPEC message > 13/03/28 20:11:47 DB : policy found > 13/03/28 20:11:47 DB : policy deleted ( obj count = 8 ) > 13/03/28 20:11:47 K< : recv pfkey X_SPDDELETE2 UNSPEC message > 13/03/28 20:11:47 DB : policy found > 13/03/28 20:11:47 DB : policy deleted ( obj count = 7 ) > 13/03/28 20:11:47 K< : recv pfkey X_SPDDELETE2 UNSPEC message > 13/03/28 20:11:47 DB : policy found > 13/03/28 20:11:47 DB : policy deleted ( obj count = 6 ) > 13/03/28 20:11:47 ii : disable adapter ROOT\VNET\0000 > 13/03/28 20:11:47 DB : tunnel dpd event canceled ( ref count = 4 ) > 13/03/28 20:11:47 DB : tunnel natt event canceled ( ref count = 3 ) > 13/03/28 20:11:47 DB : tunnel stats event canceled ( ref count = 2 ) > 13/03/28 20:11:47 DB : removing tunnel config references > 13/03/28 20:11:47 DB : removing tunnel phase2 references > 13/03/28 20:11:47 DB : phase2 soft event canceled ( ref count = 2 ) > 13/03/28 20:11:47 DB : phase2 hard event canceled ( ref count = 1 ) > 13/03/28 20:11:47 DB : phase1 not found > 13/03/28 20:11:47 K> : send pfkey DELETE ESP message > 13/03/28 20:11:47 K> : send pfkey DELETE ESP message > 13/03/28 20:11:47 ii : phase2 removal before expire time > 13/03/28 20:11:47 DB : phase2 deleted ( obj count = 0 ) > 13/03/28 20:11:47 DB : removing tunnel phase1 references > 13/03/28 20:11:47 DB : tunnel deleted ( obj count = 0 ) > 13/03/28 20:11:47 DB : removing all peer tunnel references > 13/03/28 20:11:47 DB : peer deleted ( obj count = 0 ) > 13/03/28 20:11:47 ii : ipc client process thread exit ... > 13/03/28 20:11:47 K< : recv pfkey DELETE ESP message > 13/03/28 20:11:47 K< : recv pfkey DELETE ESP message > -snip- > > > _______________________________________________ > vpn-help mailing list > [email protected] > https://lists.shrew.net/mailman/listinfo/vpn-help _______________________________________________ vpn-help mailing list [email protected] https://lists.shrew.net/mailman/listinfo/vpn-help
