Вот логи DI-804hv
Wednesday November 18, 2009 19:59:14 Send IKE (INFO) : delete [192.168.3.0|10.0.0.2]-->[10.0.0.10|192.168.1.0] phase 2
Wednesday November 18, 2009 19:59:14 IKE phase2 (IPSec SA) remove : 192.168.3.0 <-> 192.168.1.0
Wednesday November 18, 2009 19:59:14 inbound SPI = 0x300b811, outbound SPI = 0x436dc37b
Wednesday November 18, 2009 19:59:14 Send IKE (INFO) : delete 10.0.0.2 -> 10.0.0.10 phase 1
Wednesday November 18, 2009 19:59:14 IKE phase1 (ISAKMP SA) remove : 10.0.0.2 <-> 10.0.0.10
Wednesday November 18, 2009 19:59:14 Receive IKE M1(INIT) : 10.0.0.10 --> 10.0.0.2
Wednesday November 18, 2009 19:59:14 Try to match with ENC:DES AUTH:PSK HASH:MD5 Group:Group1
Wednesday November 18, 2009 19:59:14 Send IKE M2(RESP) : 10.0.0.2 --> 10.0.0.10
Wednesday November 18, 2009 19:59:15 Receive IKE M3(KEYINIT) : 10.0.0.10 --> 10.0.0.2
Wednesday November 18, 2009 19:59:15 Send IKE M4(KEYRESP) : 10.0.0.2 --> 10.0.0.10
Wednesday November 18, 2009 19:59:15 Receive IKE M5(IDINIT) : 10.0.0.10 --> 10.0.0.2
Wednesday November 18, 2009 19:59:15 Send IKE M6(IDRESP) : 10.0.0.2 --> 10.0.0.10
Wednesday November 18, 2009 19:59:15 IKE Phase1 (ISAKMP SA) established : 10.0.0.2 <-> 10.0.0.10
Wednesday November 18, 2009 19:59:15 Receive IKE Q1(QINIT) : [10.0.0.10]-->[10.0.0.2]
Wednesday November 18, 2009 19:59:15 Requested routing is [192.168.1.0|10.0.0.10]<->[10.0.0.2|192.168.3.0]
Wednesday November 18, 2009 19:59:15 Try to match AH with MODE:Tunnel PROTOCAL:AH-MD5 AUTH:MD5 HASH:Others PFS(Group):Group1
Wednesday November 18, 2009 19:59:15 Send IKE Q2(QRESP) : 192.168.3.0 --> 192.168.1.0
Wednesday November 18, 2009 19:59:16 Receive IKE Q3(QHASH) : [192.168.1.0|10.0.0.10]-->[10.0.0.2|192.168.3.0]
Wednesday November 18, 2009 19:59:16 IKE Phase2 (IPSEC SA) established : [192.168.1.0|10.0.0.10]<->[10.0.0.2|192.168.3.0]
Wednesday November 18, 2009 19:59:16 inbound SPI = 0x5002c1b, outbound SPI = 0x436dc37c
###Лог файл после того как IPSec уходит в даун и пытается восстановится
Wednesday November 18, 2009 19:59:02 Send IKE M1(INIT) : 10.0.0.2 --> 10.0.0.10
Wednesday November 18, 2009 19:59:02 Receive IKE M2(RESP) : 10.0.0.10 --> 10.0.0.2
Wednesday November 18, 2009 19:59:02 Try to match with ENC:DES AUTH:PSK HASH:MD5 Group:Group1
Wednesday November 18, 2009 19:59:02 Send IKE M3(KEYINIT) : 10.0.0.2 --> 10.0.0.10
Wednesday November 18, 2009 19:59:02 Receive IKE M4(KEYRESP) : 10.0.0.10 --> 10.0.0.2
Wednesday November 18, 2009 19:59:03 Send IKE M5(IDINIT) : 10.0.0.2 --> 10.0.0.10
Wednesday November 18, 2009 19:59:06 receiving a re-Tx MM msg, response the last msg
Wednesday November 18, 2009 19:59:06 IKED re-TX : MM to 10.0.0.10
Wednesday November 18, 2009 19:59:11 IKED re-TX : IDINIT to 10.0.0.10
Wednesday November 18, 2009 19:59:12 receiving a re-Tx MM msg, response the last msg
Wednesday November 18, 2009 19:59:12 IKED re-TX : MM to 10.0.0.10
Wednesday November 18, 2009 19:59:18 Receive IKE M1(INIT) : 10.0.0.10 --> 10.0.0.2
Wednesday November 18, 2009 19:59:18 Try to match with ENC:DES AUTH:PSK HASH:MD5 Group:Group1
Wednesday November 18, 2009 19:59:18 Send IKE M2(RESP) : 10.0.0.2 --> 10.0.0.10
Wednesday November 18, 2009 19:59:19 Receive IKE M3(KEYINIT) : 10.0.0.10 --> 10.0.0.2
Wednesday November 18, 2009 19:59:19 Send IKE M4(KEYRESP) : 10.0.0.2 --> 10.0.0.10
Wednesday November 18, 2009 19:59:19 Receive IKE M5(IDINIT) : 10.0.0.10 --> 10.0.0.2
Wednesday November 18, 2009 19:59:19 Send IKE M6(IDRESP) : 10.0.0.2 --> 10.0.0.10
Wednesday November 18, 2009 19:59:19 IKE Phase1 (ISAKMP SA) established : 10.0.0.2 <-> 10.0.0.10
Wednesday November 18, 2009 19:59:19 Receive IKE Q1(QINIT) : [10.0.0.10]-->[10.0.0.2]
Wednesday November 18, 2009 19:59:20 Receive IKE Q1(QINIT) : [10.0.0.10]-->[10.0.0.2]
Wednesday November 18, 2009 19:59:20 Requested routing is [192.168.1.0|10.0.0.10]<->[10.0.0.2|192.168.3.0]
Wednesday November 18, 2009 19:59:20 Try to match AH with MODE:Tunnel PROTOCAL:AH-MD5 AUTH:MD5 HASH:Others PFS(Group):Group1
Wednesday November 18, 2009 19:59:20 Send IKE Q2(QRESP) : 192.168.3.0 --> 192.168.1.0
Wednesday November 18, 2009 19:59:20 Receive IKE Q3(QHASH) : [192.168.1.0|10.0.0.10]-->[10.0.0.2|192.168.3.0]
Wednesday November 18, 2009 19:59:20 IKE Phase2 (IPSEC SA) established : [192.168.1.0|10.0.0.10]<->[10.0.0.2|192.168.3.0]
Wednesday November 18, 2009 19:59:20 inbound SPI = 0x300a911, outbound SPI = 0x436dc37d
Wednesday November 18, 2009 19:59:22 IKED re-TX : IDINIT to 10.0.0.10
Wednesday November 18, 2009 19:59:42 IKED re-TX : IDINIT to 10.0.0.10
Wednesday November 18, 2009 19:59:43 Send IKE (INFO) : delete 10.0.0.2 -> 10.0.0.10 phase 1
Wednesday November 18, 2009 19:59:43 IKE phase1 (ISAKMP SA) remove : 10.0.0.2 <-> 10.0.0.10
Меня смущает штамп времени, так как эти логи появились именно в том порядке в каком я их привел
|