Hi, I have a VPN which would fail every 8 hours or so, at the time of phase 1 IKE expiration. Here is the config file: config setup protostack=netkey plutodebug=none listen=xxx.xxx.xxx.20 conn conn_vpn-1200910-tunnel authby=secret left=xxx.xxx.xxx.20 right=yyy.yyy.yyy.100 ike=aes128-sha1;modp1536 phase2alg=aes128-sha1 ikelifetime=28800s salifetime=3600s pfs=no conn conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0 also=conn_vpn-1200910-tunnel leftsubnet=172.19.0.0/20 rightsubnet=0.0.0.0/0 type=tunnel auto=start conn vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0 also=conn_vpn-1200910-tunnel leftsubnet=172.19.0.0/20 rightsubnet=vnet:%v4:0.0.0.0/0 type=tunnel auto=start I'm including logs from an incident happened at Sept 27th 1:20pm - 1:26pm UTC (13:20 UTC). Not sure it this is related to the fact that we have rightsubnet=vnet:%v4:0.0.0.0/0. This is used to serve the case that remote end requests subsetsto subnet 0.0.0.0/0 (i.e. not an exact match). Please let me know if you see any abnormal.
Thanks, Xinwei logs: ---------------- 2018-09-27T13:13:56.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2501] yyy.yyy.yyy.100 #78569: deleting state (STATE_QUICK_R2) 2018-09-27T13:13:56.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2501] yyy.yyy.yyy.100 #78569: ESP traffic information: in=0B out=0B 2018-09-27T13:14:28.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2495] yyy.yyy.yyy.100 #78585: STATE_QUICK_I2: sent QI2, IPsec SA established tunnel mode {ESP=>0x0be8ccd8 <0x041f728d xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive} 2018-09-27T13:14:28.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2495] yyy.yyy.yyy.100 #78585: transition from state STATE_QUICK_I1 to state STATE_QUICK_I2 2018-09-27T13:14:28.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2495] yyy.yyy.yyy.100 #78585: initiating Quick Mode PSK+ENCRYPT+TUNNEL+IKEV1_ALLOW+IKEV2_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO to replace #78572 {using isakmp#78508 msgid:6251d8e7 proposal=AES(12)_128-SHA1(2) pfsgroup=no-pfs} 2018-09-27T13:15:57.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2497] yyy.yyy.yyy.100 #78586: initiating Quick Mode PSK+ENCRYPT+TUNNEL+IKEV1_ALLOW+IKEV2_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO to replace #78575 {using isakmp#78508 msgid:c0d4641e proposal=AES(12)_128-SHA1(2) pfsgroup=no-pfs} 2018-09-27T13:15:57.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2497] yyy.yyy.yyy.100 #78586: transition from state STATE_QUICK_I1 to state STATE_QUICK_I2 2018-09-27T13:15:57.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2497] yyy.yyy.yyy.100 #78586: STATE_QUICK_I2: sent QI2, IPsec SA established tunnel mode {ESP=>0xdaf3457d <0xe6be7501 xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive} 2018-09-27T13:16:16.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2496] yyy.yyy.yyy.100 #78587: initiating Quick Mode PSK+ENCRYPT+TUNNEL+IKEV1_ALLOW+IKEV2_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO to replace #78574 {using isakmp#78508 msgid:273cbaa8 proposal=AES(12)_128-SHA1(2) pfsgroup=no-pfs} 2018-09-27T13:16:16.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2496] yyy.yyy.yyy.100 #78587: transition from state STATE_QUICK_I1 to state STATE_QUICK_I2 2018-09-27T13:16:16.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2496] yyy.yyy.yyy.100 #78587: STATE_QUICK_I2: sent QI2, IPsec SA established tunnel mode {ESP=>0x6acd9118 <0x5959613b xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive} 2018-09-27T13:19:06.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2494] yyy.yyy.yyy.100 #78570: ESP traffic information: in=0B out=0B 2018-09-27T13:19:06.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2494] yyy.yyy.yyy.100 #78570: deleting state (STATE_QUICK_I2) 2018-09-27T13:20:24.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78571: ESP traffic information: in=0B out=0B 2018-09-27T13:20:24.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78571: deleting state (STATE_QUICK_I2) 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: did not find old IKE state to mark for suppressing delete 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78576: deleting state (STATE_QUICK_R2) 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78578: ESP traffic information: in=0B out=0B 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78581: ESP traffic information: in=0B out=0B 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78587: ESP traffic information: in=0B out=0B 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: did not find old IKE state to mark for suppressing delete 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: deleting connection "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2499] yyy.yyy.yyy.100 instance with peer yyy.yyy.yyy.100 {isakmp=#0/ipsec=#78579} 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: deleting connection "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2497] yyy.yyy.yyy.100 instance with peer yyy.yyy.yyy.100 {isakmp=#0/ipsec=#78586} 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: did not find old IKE state to mark for suppressing delete 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: deleting connection "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2495] yyy.yyy.yyy.100 instance with peer yyy.yyy.yyy.100 {isakmp=#0/ipsec=#78585} 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: transition from state STATE_MAIN_I3 to state STATE_MAIN_I4 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: STATE_MAIN_I4: ISAKMP SA established {auth=PRESHARED_KEY cipher=aes_128 integ=sha group=MODP1536} 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: deleting connection "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2502] yyy.yyy.yyy.100 instance with peer yyy.yyy.yyy.100 {isakmp=#0/ipsec=#78576} 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78580: ESP traffic information: in=0B out=0B 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: transition from state STATE_MAIN_I2 to state STATE_MAIN_I3 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: STATE_MAIN_I3: sent MI3, expecting MR3 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: deleting connection "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2496] yyy.yyy.yyy.100 instance with peer yyy.yyy.yyy.100 {isakmp=#0/ipsec=#78587} 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78586: deleting state (STATE_QUICK_I2) 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: did not find old IKE state to mark for suppressing delete 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78575: ESP traffic information: in=0B out=0B 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78583: deleting state (STATE_QUICK_I2) 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78585: deleting state (STATE_QUICK_I2) 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: STATE_MAIN_I2: sent MI2, expecting MR2 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: Main mode peer ID is ID_IPV4_ADDR: 'yyy.yyy.yyy.100' 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78577: deleting state (STATE_QUICK_I2) 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: did not find old IKE state to mark for suppressing delete 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78572: deleting state (STATE_QUICK_I2) 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78574: deleting state (STATE_QUICK_I2) 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: deleting connection "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2494] yyy.yyy.yyy.100 instance with peer yyy.yyy.yyy.100 {isakmp=#0/ipsec=#78581} 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: did not find old IKE state to mark for suppressing delete 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78580: deleting state (STATE_QUICK_R2) 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78583: ESP traffic information: in=0B out=0B 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78581: deleting state (STATE_QUICK_I2) 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: initiating Main Mode to replace #78508 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78579: deleting state (STATE_QUICK_I2) 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78574: ESP traffic information: in=0B out=0B 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78579: ESP traffic information: in=0B out=0B 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: did not find old IKE state to mark for suppressing delete 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78585: ESP traffic information: in=0B out=0B 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: deleting connection "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2503] yyy.yyy.yyy.100 instance with peer yyy.yyy.yyy.100 {isakmp=#0/ipsec=#78580} 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78578: deleting state (STATE_QUICK_I2) 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: did not find old IKE state to mark for suppressing delete 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: deleting connection "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2498] yyy.yyy.yyy.100 instance with peer yyy.yyy.yyy.100 {isakmp=#0/ipsec=#78577} 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78577: ESP traffic information: in=0B out=0B 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78575: deleting state (STATE_QUICK_I2) 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: did not find old IKE state to mark for suppressing delete 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78576: ESP traffic information: in=0B out=0B 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78586: ESP traffic information: in=0B out=0B 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: deleting connection "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2500] yyy.yyy.yyy.100 instance with peer yyy.yyy.yyy.100 {isakmp=#0/ipsec=#78578} 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: transition from state STATE_MAIN_I1 to state STATE_MAIN_I2 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78587: deleting state (STATE_QUICK_I2) 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78572: ESP traffic information: in=0B out=0B 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: did not find old IKE state to mark for suppressing delete 2018-09-27T13:20:50.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: deleting connection "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2501] yyy.yyy.yyy.100 instance with peer yyy.yyy.yyy.100 {isakmp=#0/ipsec=#78583} 2018-09-27T13:20:52.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: discarding duplicate packet; already STATE_MAIN_I4 2018-09-27T13:20:54.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: discarding duplicate packet; already STATE_MAIN_I4 2018-09-27T13:20:56.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: discarding duplicate packet; already STATE_MAIN_I4 2018-09-27T13:20:58.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: discarding duplicate packet; already STATE_MAIN_I4 2018-09-27T13:21:00.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: discarding duplicate packet; already STATE_MAIN_I4 2018-09-27T13:21:02.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: discarding duplicate packet; already STATE_MAIN_I4 2018-09-27T13:21:06.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: discarding duplicate packet; already STATE_MAIN_I4 2018-09-27T13:21:10.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: discarding duplicate packet; already STATE_MAIN_I4 2018-09-27T13:21:14.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: discarding duplicate packet; already STATE_MAIN_I4 2018-09-27T13:21:18.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: discarding duplicate packet; already STATE_MAIN_I4 2018-09-27T13:21:22.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78588: discarding duplicate packet; already STATE_MAIN_I4 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78591: STATE_QUICK_R2: IPsec SA established tunnel mode {ESP=>0x1f2173f1 <0xbd994c4c xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive} 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2506] yyy.yyy.yyy.100 #78593: STATE_QUICK_R2: IPsec SA established tunnel mode {ESP=>0xa87a306c <0xe73175bd xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive} 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2505] yyy.yyy.yyy.100 #78592: discarding duplicate packet; already STATE_QUICK_R2 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2504] yyy.yyy.yyy.100 #78590: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2 tunnel mode {ESP=>0x243eba5f <0x1972fcda xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive} 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2505] yyy.yyy.yyy.100 #78592: them: yyy.yyy.yyy.100<yyy.yyy.yyy.100>=== 10.6.0.0/16 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2504] yyy.yyy.yyy.100 #78590: responding to Quick Mode proposal {msgid:ac8afca3} 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2504] yyy.yyy.yyy.100 #78590: discarding duplicate packet; already STATE_QUICK_R2 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78591: discarding duplicate packet; already STATE_QUICK_R2 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2504] yyy.yyy.yyy.100 #78590: us: 172.19.0.0/20===xxx.xxx.xxx.20 <xxx.xxx.xxx.20> 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78508: deleting state (STATE_MAIN_R3) 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78589: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2506] yyy.yyy.yyy.100 #78593: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2 tunnel mode {ESP=>0xa87a306c <0xe73175bd xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive} 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2504] yyy.yyy.yyy.100 #78590: discarding duplicate packet; already STATE_QUICK_R2 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2504] yyy.yyy.yyy.100 #78590: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78589: the peer proposed: 172.19.0.0/20:0/0 -> 192.168.44.0/22:0/0 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78589: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78591: us: 172.19.0.0/20===xxx.xxx.xxx.20<xxx.xxx.xxx.20> 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78591: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78591: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2 tunnel mode {ESP=>0x1f2173f1 <0xbd994c4c xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive} 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78589: STATE_MAIN_R1: sent MR1, expecting MI2 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2505] yyy.yyy.yyy.100 #78592: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2 tunnel mode {ESP=>0x8d1c260e <0x51c7ff57 xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive} 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78589: the peer proposed: 172.19.0.0/20:0/0 -> 0.0.0.0/0:0/0 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2506] yyy.yyy.yyy.100 #78593: them: yyy.yyy.yyy.100<yyy.yyy.yyy.100>=== 192.168.44.0/22 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2506] yyy.yyy.yyy.100 #78593: us: 172.19.0.0/20===xxx.xxx.xxx.20 <xxx.xxx.xxx.20> 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78589: responding to Main Mode from unknown peer yyy.yyy.yyy.100 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78589: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: packet from yyy.yyy.yyy.100:500: ignoring unknown Vendor ID payload [f4ed19e0c114eb516faaac0ee37daf2807b4381f000000010000138d5bacda40...] 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78589: STATE_MAIN_R2: sent MR2, expecting MI3 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78591: keeping refhim=0 during rekey 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78591: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78589: the peer proposed: 172.19.0.0/20:0/0 -> 10.6.0.0/16:0/0 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2506] yyy.yyy.yyy.100 #78593: discarding duplicate packet; already STATE_QUICK_R2 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2506] yyy.yyy.yyy.100 #78593: responding to Quick Mode proposal {msgid:d98457de} 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2506] yyy.yyy.yyy.100 #78593: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78591: them: yyy.yyy.yyy.100<yyy.yyy.yyy.100>===0.0.0.0/0 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2505] yyy.yyy.yyy.100 #78592: us: 172.19.0.0/20===xxx.xxx.xxx.20 <xxx.xxx.xxx.20> 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2505] yyy.yyy.yyy.100 #78592: responding to Quick Mode proposal {msgid:264c16e9} 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2505] yyy.yyy.yyy.100 #78592: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2505] yyy.yyy.yyy.100 #78592: STATE_QUICK_R2: IPsec SA established tunnel mode {ESP=>0x8d1c260e <0x51c7ff57 xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive} 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2504] yyy.yyy.yyy.100 #78590: STATE_QUICK_R2: IPsec SA established tunnel mode {ESP=>0x243eba5f <0x1972fcda xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive} 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2506] yyy.yyy.yyy.100 #78593: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2504] yyy.yyy.yyy.100 #78590: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2505] yyy.yyy.yyy.100 #78592: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78589: the peer proposed: 172.19.0.0/20:0/0 -> 192.168.0.0/17:0/0 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2505] yyy.yyy.yyy.100 #78592: discarding duplicate packet; already STATE_QUICK_R2 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78591: discarding duplicate packet; already STATE_QUICK_R2 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78589: Main mode peer ID is ID_IPV4_ADDR: 'yyy.yyy.yyy.100' 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78589: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=PRESHARED_KEY cipher=aes_128 integ=sha group=MODP1536} 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0" #78591: responding to Quick Mode proposal {msgid:f4c8601b} 2018-09-27T13:25:20.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2504] yyy.yyy.yyy.100 #78590: them: yyy.yyy.yyy.100<yyy.yyy.yyy.100>=== 192.168.0.0/17 2018-09-27T13:25:21.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2506] yyy.yyy.yyy.100 #78593: discarding duplicate packet; already STATE_QUICK_R2 2018-09-27T13:25:22.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2507] yyy.yyy.yyy.100 #78594: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1 2018-09-27T13:25:22.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2507] yyy.yyy.yyy.100 #78594: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2 2018-09-27T13:25:22.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2507] yyy.yyy.yyy.100 #78594: us: 172.19.0.0/20===xxx.xxx.xxx.20 <xxx.xxx.xxx.20> 2018-09-27T13:25:22.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2507] yyy.yyy.yyy.100 #78594: them: yyy.yyy.yyy.100<yyy.yyy.yyy.100>=== 192.168.199.0/24 2018-09-27T13:25:22.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2507] yyy.yyy.yyy.100 #78594: STATE_QUICK_R2: IPsec SA established tunnel mode {ESP=>0xd2f1f1c1 <0x97efc89a xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive} 2018-09-27T13:25:22.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2507] yyy.yyy.yyy.100 #78594: discarding duplicate packet; already STATE_QUICK_R2 2018-09-27T13:25:22.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2507] yyy.yyy.yyy.100 #78594: responding to Quick Mode proposal {msgid:dffd069d} 2018-09-27T13:25:22.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2507] yyy.yyy.yyy.100 #78594: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2 tunnel mode {ESP=>0xd2f1f1c1 <0x97efc89a xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive} 2018-09-27T13:25:22.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78589: the peer proposed: 172.19.0.0/20:0/0 -> 192.168.199.0/24:0/0 2018-09-27T13:25:22.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2507] yyy.yyy.yyy.100 #78594: discarding duplicate packet; already STATE_QUICK_R2 2018-09-27T13:25:25.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2508] yyy.yyy.yyy.100 #78595: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2 2018-09-27T13:25:25.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2508] yyy.yyy.yyy.100 #78595: STATE_QUICK_R2: IPsec SA established tunnel mode {ESP=>0xb6606a5a <0xac894363 xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive} 2018-09-27T13:25:25.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2508] yyy.yyy.yyy.100 #78595: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1 2018-09-27T13:25:25.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78589: the peer proposed: 172.19.0.0/20:0/0 -> 192.168.96.0/19:0/0 2018-09-27T13:25:25.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2508] yyy.yyy.yyy.100 #78595: them: yyy.yyy.yyy.100<yyy.yyy.yyy.100>=== 192.168.96.0/19 2018-09-27T13:25:25.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2508] yyy.yyy.yyy.100 #78595: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2 tunnel mode {ESP=>0xb6606a5a <0xac894363 xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive} 2018-09-27T13:25:25.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2508] yyy.yyy.yyy.100 #78595: us: 172.19.0.0/20===xxx.xxx.xxx.20 <xxx.xxx.xxx.20> 2018-09-27T13:25:25.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2508] yyy.yyy.yyy.100 #78595: responding to Quick Mode proposal {msgid:f52d52ac} 2018-09-27T13:25:26.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2508] yyy.yyy.yyy.100 #78595: discarding duplicate packet; already STATE_QUICK_R2 2018-09-27T13:25:26.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2508] yyy.yyy.yyy.100 #78595: discarding duplicate packet; already STATE_QUICK_R2 2018-09-27T13:25:55.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2509] yyy.yyy.yyy.100 #78596: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1 2018-09-27T13:25:55.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2509] yyy.yyy.yyy.100 #78596: discarding duplicate packet; already STATE_QUICK_R2 2018-09-27T13:25:55.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2509] yyy.yyy.yyy.100 #78596: STATE_QUICK_R2: IPsec SA established tunnel mode {ESP=>0x6e8659a9 <0x9607fcf4 xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive} 2018-09-27T13:25:55.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2509] yyy.yyy.yyy.100 #78596: them: yyy.yyy.yyy.100<yyy.yyy.yyy.100>=== 192.168.128.0/18 2018-09-27T13:25:55.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78589: the peer proposed: 172.19.0.0/20:0/0 -> 192.168.128.0/18:0/0 2018-09-27T13:25:55.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2509] yyy.yyy.yyy.100 #78596: us: 172.19.0.0/20===xxx.xxx.xxx.20 <xxx.xxx.xxx.20> 2018-09-27T13:25:55.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2509] yyy.yyy.yyy.100 #78596: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2 tunnel mode {ESP=>0x6e8659a9 <0x9607fcf4 xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive} 2018-09-27T13:25:55.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2509] yyy.yyy.yyy.100 #78596: responding to Quick Mode proposal {msgid:2fb25a7b} 2018-09-27T13:25:55.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2509] yyy.yyy.yyy.100 #78596: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2 2018-09-27T13:25:56.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2509] yyy.yyy.yyy.100 #78596: discarding duplicate packet; already STATE_QUICK_R2 2018-09-27T13:26:18.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78573: ESP traffic information: in=0B out=0B 2018-09-27T13:26:18.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78573: deleting state (STATE_QUICK_I2) 2018-09-27T13:26:54.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78597: us: 172.19.0.0/20===xxx.xxx.xxx.20 <xxx.xxx.xxx.20> 2018-09-27T13:26:54.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78597: discarding duplicate packet; already STATE_QUICK_R2 2018-09-27T13:26:54.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78597: STATE_QUICK_R2: IPsec SA established tunnel mode {ESP=>0x0ea77ddd <0xab1f88f4 xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive} 2018-09-27T13:26:54.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78597: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2 tunnel mode {ESP=>0x0ea77ddd <0xab1f88f4 xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive} 2018-09-27T13:26:54.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78597: responding to Quick Mode proposal {msgid:658f95c0} 2018-09-27T13:26:54.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78597: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1 2018-09-27T13:26:54.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78597: discarding duplicate packet; already STATE_QUICK_R2 2018-09-27T13:26:54.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78597: keeping refhim=0 during rekey 2018-09-27T13:26:54.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78597: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2 2018-09-27T13:26:54.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78589: the peer proposed: 172.19.0.0/20:0/0 -> 172.31.0.0/16:0/0 2018-09-27T13:26:54.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78597: them: yyy.yyy.yyy.100<yyy.yyy.yyy.100>=== 172.31.0.0/16 2018-09-27T13:27:45.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2510] yyy.yyy.yyy.100 #78598: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1 2018-09-27T13:27:45.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2510] yyy.yyy.yyy.100 #78598: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2 2018-09-27T13:27:45.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2510] yyy.yyy.yyy.100 #78598: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2 tunnel mode {ESP=>0xcdcd6086 <0x45ac0bc5 xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive} 2018-09-27T13:27:45.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2510] yyy.yyy.yyy.100 #78598: discarding duplicate packet; already STATE_QUICK_R2 2018-09-27T13:27:45.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2510] yyy.yyy.yyy.100 #78598: STATE_QUICK_R2: IPsec SA established tunnel mode {ESP=>0xcdcd6086 <0x45ac0bc5 xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive} 2018-09-27T13:27:45.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2510] yyy.yyy.yyy.100 #78598: discarding duplicate packet; already STATE_QUICK_R2 2018-09-27T13:27:45.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2510] yyy.yyy.yyy.100 #78598: responding to Quick Mode proposal {msgid:d84fc63d} 2018-09-27T13:27:45.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78589: the peer proposed: 172.19.0.0/20:0/0 -> 192.168.195.0/24:0/0 2018-09-27T13:27:45.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2510] yyy.yyy.yyy.100 #78598: us: 172.19.0.0/20===xxx.xxx.xxx.20 <xxx.xxx.xxx.20> 2018-09-27T13:27:45.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2510] yyy.yyy.yyy.100 #78598: them: yyy.yyy.yyy.100<yyy.yyy.yyy.100>=== 192.168.195.0/24 2018-09-27T13:28:26.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2511] yyy.yyy.yyy.100 #78599: them: yyy.yyy.yyy.100<yyy.yyy.yyy.100>=== 192.168.4.0/24 2018-09-27T13:28:26.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2511] yyy.yyy.yyy.100 #78599: discarding duplicate packet; already STATE_QUICK_R2 2018-09-27T13:28:26.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2511] yyy.yyy.yyy.100 #78599: discarding duplicate packet; already STATE_QUICK_R2 2018-09-27T13:28:26.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2511] yyy.yyy.yyy.100 #78599: us: 172.19.0.0/20===xxx.xxx.xxx.20 <xxx.xxx.xxx.20> 2018-09-27T13:28:26.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2511] yyy.yyy.yyy.100 #78599: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1 2018-09-27T13:28:26.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2511] yyy.yyy.yyy.100 #78599: STATE_QUICK_R2: IPsec SA established tunnel mode {ESP=>0xeab5d10d <0x8534c885 xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive} 2018-09-27T13:28:26.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78589: the peer proposed: 172.19.0.0/20:0/0 -> 192.168.4.0/24:0/0 2018-09-27T13:28:26.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2511] yyy.yyy.yyy.100 #78599: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2 tunnel mode {ESP=>0xeab5d10d <0x8534c885 xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive} 2018-09-27T13:28:26.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2511] yyy.yyy.yyy.100 #78599: responding to Quick Mode proposal {msgid:4d291c84} 2018-09-27T13:28:26.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2511] yyy.yyy.yyy.100 #78599: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2 2018-09-27T13:31:00.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2512] yyy.yyy.yyy.100 #78600: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2 tunnel mode {ESP=>0xe7817cd0 <0xda032f20 xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive} 2018-09-27T13:31:00.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2468] yyy.yyy.yyy.100 #78589: the peer proposed: 172.19.0.0/20:0/0 -> 192.168.90.0/23:0/0 2018-09-27T13:31:00.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2512] yyy.yyy.yyy.100 #78600: responding to Quick Mode proposal {msgid:25e8f20a} 2018-09-27T13:31:00.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2512] yyy.yyy.yyy.100 #78600: us: 172.19.0.0/20===xxx.xxx.xxx.20 <xxx.xxx.xxx.20> 2018-09-27T13:31:00.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2512] yyy.yyy.yyy.100 #78600: them: yyy.yyy.yyy.100<yyy.yyy.yyy.100>=== 192.168.90.0/23 2018-09-27T13:31:00.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2512] yyy.yyy.yyy.100 #78600: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1 2018-09-27T13:31:01.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2512] yyy.yyy.yyy.100 #78600: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2 2018-09-27T13:31:01.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2512] yyy.yyy.yyy.100 #78600: STATE_QUICK_R2: IPsec SA established tunnel mode {ESP=>0xe7817cd0 <0xda032f20 xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=passive} 2018-09-27T13:31:01.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2512] yyy.yyy.yyy.100 #78600: discarding duplicate packet; already STATE_QUICK_R2 2018-09-27T13:31:01.000Z tuk1r1:10.9.255.2 pluto warn - - - vpn-1200910: "vnet_conn_vpn-1200910-tunnel-VPNRemoteRoutedSubnet-tunnel-0.0.0.0/0"[2512] yyy.yyy.yyy.100 #78600: discarding duplicate packet; already STATE_QUICK_R2
_______________________________________________ Swan mailing list Swan@lists.libreswan.org https://lists.libreswan.org/mailman/listinfo/swan