A端：迪普防火墙（公网固定IP）--------------- B端：   F5（公网静态映射）-----F5010(私网地址)

F5010 与 迪普防火墙做IPSEC对接，使用野蛮模式对接

问题：IKE 建立不成功，IPSEC不成功

 # ipsec transform-set 4000_IPv4_1 

 esp encryption-algorithm 3des-cbc esp

 authentication-algorithm sha1

 # 

ipsec policy 4000 1 isakmp 

 transform-set 4000_IPv4_1 

 security acl 3000

 local-address 11.14.248.65

 remote-address 211.92.142.35 

 ike-profile 4000_IPv4_1 

# 

ike profile 4000_IPv4_1 

 keychain 4000_IPv4_1

 exchange-mode aggressive 

 local-identity address 222.85.230.63 

 match remote identity address 211.92.142.35 255.255.255.255 

 match local address 11.14.248.65

 proposal 1

 #

 ike proposal 1

 encryption-algorithm 3des-cbc

 dh group2 

# 

ike keychain 4000_IPv4_1 

 match local address Ten-GigabitEthernet1/0/24  

pre-shared-key address 211.92.142.35 255.255.255.255 key cipher $c$3$IQ/Snis4BtKAIAYoBlX02xCWWFq8LMTmvmBD 

 <GSH-BGHLW-VPN5010-01>res ike sa 

<GSH-BGHLW-VPN5010-01>dis ike sa Connection-ID Remote Flag DOI ------------------------------------------------------------------

 <GSH-BGHLW-VPN5010-01> 

<GSH-BGHLW-VPN5010-01>

 <GSH-BGHLW-VPN5010-01

dis ike sa Connection-ID Remote Flag DOI ------------------------------------------------------------------ 

<GSH-BGHLW-VPN5010-01>

 <GSH-BGHLW-VPN5010-01>

 <GSH-BGHLW-VPN5010-01>

 <GSH-BGHLW-VPN5010-01> 

<GSH-BGHLW-VPN5010-01> 

<GSH-BGHLW-VPN5010-01> 

<GSH-BGHLW-VPN5010-01>t m 

The current terminal is enabled to display logs. 

<GSH-BGHLW-VPN5010-01>*Jan 26 16:36:40:880 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Sent delete SA message to all nodes, message type is 0x16. *Jan 26 16:36:40:880 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; The SA doesn't exist in kernel. *Jan 26 16:36:41:344 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Can't find block-flow node. *Jan 26 16:36:41:344 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:36:41:344 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:36:41:344 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Sent SA-Acquire message : SP ID = 0 *Jan 26 16:36:41:344 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Received negotiatiate SA message from IPsec kernel. *Jan 26 16:36:41:344 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Got SA time-based soft lifetime settings when filling Sp data. Configured soft lifetime buffer : 0 seconds. Configured global soft lifetime buffer : 0 seconds. *Jan 26 16:36:41:345 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; Received message from ipsec, message type is 0. *Jan 26 16:36:41:345 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; Received SA acquire message from IPsec. *Jan 26 16:36:41:345 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; IKE thread 1099111125680 processes a job. *Jan 26 16:36:41:345 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; Received SA acquire message from IPsec. *Jan 26 16:36:41:345 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Set IPsec SA state to IKE_P2_STATE_INIT. *Jan 26 16:36:41:345 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; IKE SA not found. Initiate IKE SA negotiation. *Jan 26 16:36:41:345 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Obtained profile 4000_IPv4_1. *Jan 26 16:36:41:345 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Initiator created an SA for peer 211.92.142.35, local port 500, remote port 500. *Jan 26 16:36:41:345 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Set IKE SA state to IKE_P1_STATE_INIT. *Jan 26 16:36:41:345 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; IKE thread 1099111125680 processes a job. *Jan 26 16:36:41:345 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Begin Aggressive mode exchange. *Jan 26 16:36:41:346 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Found pre-shared key that matches address 211.92.142.35 in keychain 4000_IPv4_1. *Jan 26 16:36:41:346 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Encryption algorithm is 3DES-CBC. *Jan 26 16:36:41:346 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Hash algorithm is HMAC-SHA1. *Jan 26 16:36:41:346 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 DH group 2. *Jan 26 16:36:41:346 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Authentication method is Pre-shared key. *Jan 26 16:36:41:346 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Lifetime type is in seconds. *Jan 26 16:36:41:346 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Life duration is 86400. *Jan 26 16:36:41:346 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Construct transform payload for transform 1. *Jan 26 16:36:41:346 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Constructed SA payload. *Jan 26 16:36:41:347 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Construct KE payload. *Jan 26 16:36:41:347 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Construct NONCE payload. *Jan 26 16:36:41:347 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Local ID type: IPV4_ADDR (1). *Jan 26 16:36:41:347 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Local ID value: 222.85.230.63. *Jan 26 16:36:41:347 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Construct ID payload. *Jan 26 16:36:41:347 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Construct DPD vendor ID payload. *Jan 26 16:36:41:347 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Construct NAT-T rfc3947 vendor ID payload. *Jan 26 16:36:41:347 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Construct NAT-T draft3 vendor ID payload. *Jan 26 16:36:41:347 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Construct NAT-T draft2 vendor ID payload. *Jan 26 16:36:41:347 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Construct NAT-T draft1 vendor ID payload. *Jan 26 16:36:41:348 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Construct XAUTH Cisco Unity 1.0 vendor ID payload. *Jan 26 16:36:41:348 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Construct XAUTH draft6 vendor ID payload. *Jan 26 16:36:41:348 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 IKE SA state changed from IKE_P1_STATE_INIT to IKE_P1_STATE_SEND1. *Jan 26 16:36:41:348 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Sending packet to 211.92.142.35 remote port 500, local port 500. *Jan 26 16:36:41:348 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 I-COOKIE: 8c8e73324c770a69 R-COOKIE: 0000000000000000 next payload: SA version: ISAKMP Version 1.0 exchange mode: Aggressive flags: message ID: 0 length: 380 *Jan 26 16:36:41:348 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Sending an IPv4 packet. *Jan 26 16:36:41:348 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Sent data to socket successfully. *Jan 26 16:36:43:545 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:36:43:545 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:36:43:545 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:36:45:746 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:36:45:747 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:36:45:747 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:36:46:878 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Retransmit phase 1 packet. *Jan 26 16:36:46:879 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Sending packet to 211.92.142.35 remote port 500, local port 500. *Jan 26 16:36:46:879 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 I-COOKIE: 8c8e73324c770a69 R-COOKIE: 0000000000000000 next payload: SA version: ISAKMP Version 1.0 exchange mode: Aggressive flags: message ID: 0 length: 380 *Jan 26 16:36:46:879 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Sending an IPv4 packet. *Jan 26 16:36:46:879 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Sent data to socket successfully. *Jan 26 16:36:47:947 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:36:47:947 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:36:47:947 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:36:50:149 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:36:50:149 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:36:50:149 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:36:52:349 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:36:52:349 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:36:52:349 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:36:54:551 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:36:54:551 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:36:54:551 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:36:56:751 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:36:56:751 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:36:56:751 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:36:58:952 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:36:58:952 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:36:58:952 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:36:59:878 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Retransmit phase 1 packet. *Jan 26 16:36:59:879 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Sending packet to 211.92.142.35 remote port 500, local port 500. *Jan 26 16:36:59:879 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 I-COOKIE: 8c8e73324c770a69 R-COOKIE: 0000000000000000 next payload: SA version: ISAKMP Version 1.0 exchange mode: Aggressive flags: message ID: 0 length: 380 *Jan 26 16:36:59:879 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Sending an IPv4 packet. *Jan 26 16:36:59:879 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Sent data to socket successfully. *Jan 26 16:37:01:153 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:37:01:153 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:37:01:153 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:37:03:354 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:37:03:354 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:37:03:354 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:37:05:554 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:37:05:554 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:37:05:554 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:37:07:755 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:37:07:755 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:37:07:755 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:37:09:956 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:37:09:956 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:37:09:956 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:37:10:878 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Retransmit phase 1 packet. *Jan 26 16:37:10:879 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Sending packet to 211.92.142.35 remote port 500, local port 500. *Jan 26 16:37:10:879 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 I-COOKIE: 8c8e73324c770a69 R-COOKIE: 0000000000000000 next payload: SA version: ISAKMP Version 1.0 exchange mode: Aggressive flags: message ID: 0 length: 380 *Jan 26 16:37:10:879 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Sending an IPv4 packet. *Jan 26 16:37:10:879 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Sent data to socket successfully. *Jan 26 16:37:10:890 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; Received packet successfully. *Jan 26 16:37:10:890 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Received packet from 211.92.142.35 source port 500 destination port 500. *Jan 26 16:37:10:890 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 I-COOKIE: 8c8e73324c770a69 R-COOKIE: 2a2a2cfde7d3fd00 next payload: SA version: ISAKMP Version 1.0 exchange mode: Aggressive flags: message ID: 0 length: 472 *Jan 26 16:37:10:890 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; IKE thread 1099111125680 processes a job. *Jan 26 16:37:10:890 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; Phase1 process started. *Jan 26 16:37:10:890 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Received ISAKMP Security Association Payload. *Jan 26 16:37:10:890 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Received ISAKMP Key Exchange Payload. *Jan 26 16:37:10:890 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Received ISAKMP Nonce Payload. *Jan 26 16:37:10:890 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Received ISAKMP Identification Payload. *Jan 26 16:37:10:890 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Received ISAKMP Vendor ID Payload. *Jan 26 16:37:10:890 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Received ISAKMP Vendor ID Payload. *Jan 26 16:37:10:890 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Received ISAKMP NAT-D Payload. *Jan 26 16:37:10:890 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Received ISAKMP NAT-D Payload. *Jan 26 16:37:10:890 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Received ISAKMP Hash Payload. *Jan 26 16:37:10:890 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Process NONCE payload. *Jan 26 16:37:10:891 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Process KE payload. *Jan 26 16:37:10:891 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Process ID payload. *Jan 26 16:37:10:891 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Peer ID type: IPV4_ADDR (1). *Jan 26 16:37:10:891 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Peer ID value: address 211.92.142.35. *Jan 26 16:37:10:891 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Process SA payload. *Jan 26 16:37:10:891 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Check ISAKMP transform 1. *Jan 26 16:37:10:891 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Encryption algorithm is 3DES-CBC. *Jan 26 16:37:10:891 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 HASH algorithm is HMAC-SHA1. *Jan 26 16:37:10:891 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 DH group is 2. *Jan 26 16:37:10:891 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Authentication method is Pre-shared key. *Jan 26 16:37:10:891 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Lifetime type is 1. *Jan 26 16:37:10:891 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Life duration is 86400. *Jan 26 16:37:10:891 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; Found pre-shared key in keychain 4000_IPv4_1 matching address 211.92.142.35. *Jan 26 16:37:10:891 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Attributes is acceptable. *Jan 26 16:37:10:891 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; Oakley transform 1 is acceptable. *Jan 26 16:37:10:891 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Process vendor ID payload. *Jan 26 16:37:10:892 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; Vendor ID DPD is matched. *Jan 26 16:37:10:892 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; Vendor ID NAT-T rfc3947 is matched. *Jan 26 16:37:10:892 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Received 2 NAT-D payload. *Jan 26 16:37:10:892 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 I am behind NAT. *Jan 26 16:37:10:892 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/4500 Float port to local port 4500 and remote port 4500 *Jan 26 16:37:10:893 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/4500 Verify HASH payload. *Jan 26 16:37:10:893 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/4500 HASH: 826e469a 6bb3da6b 4b6a0de9 569e459a 412632e8 *Jan 26 16:37:10:893 2022 GSH-BGHLW-VPN5010-01 IKE/7/ERROR: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/4500 Failed to verify the peer HASH. *Jan 26 16:37:10:893 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/4500 Construct notification packet: AUTHENTICATION_FAILED. *Jan 26 16:37:10:893 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/4500 Sending packet to 211.92.142.35 remote port 4500, local port 4500. *Jan 26 16:37:10:893 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/4500 I-COOKIE: 8c8e73324c770a69 R-COOKIE: 2a2a2cfde7d3fd00 next payload: NOTIFY version: ISAKMP Version 1.0 exchange mode: Info flags: message ID: 0 length: 56 *Jan 26 16:37:10:893 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/4500 Sending an IPv4 packet. *Jan 26 16:37:10:893 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/4500 Sent data to socket successfully. *Jan 26 16:37:12:157 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:37:12:158 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:37:12:158 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:37:14:358 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:37:14:358 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:37:14:358 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:37:15:894 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; Received packet successfully. *Jan 26 16:37:15:894 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Received packet from 211.92.142.35 source port 500 destination port 500. *Jan 26 16:37:15:894 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 I-COOKIE: 8c8e73324c770a69 R-COOKIE: 2a2a2cfde7d3fd00 next payload: SA version: ISAKMP Version 1.0 exchange mode: Aggressive flags: message ID: 0 length: 472 *Jan 26 16:37:15:894 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; IKE thread 1099111125680 processes a job. *Jan 26 16:37:15:894 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; Phase1 process started. *Jan 26 16:37:15:894 2022 GSH-BGHLW-VPN5010-01 IKE/7/ERROR: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Can't find IKE SA. *Jan 26 16:37:16:559 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:37:16:559 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:37:16:559 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:37:18:759 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:37:18:759 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:37:18:759 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:37:20:032 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; Received packet successfully. *Jan 26 16:37:20:032 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Received packet from 211.92.142.35 source port 500 destination port 500. *Jan 26 16:37:20:032 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 I-COOKIE: 8c8e73324c770a69 R-COOKIE: 2a2a2cfde7d3fd00 next payload: SA version: ISAKMP Version 1.0 exchange mode: Aggressive flags: message ID: 0 length: 472 *Jan 26 16:37:20:033 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; IKE thread 1099111125680 processes a job. *Jan 26 16:37:20:033 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; Phase1 process started. *Jan 26 16:37:20:034 2022 GSH-BGHLW-VPN5010-01 IKE/7/ERROR: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Can't find IKE SA. *Jan 26 16:37:20:961 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:37:20:961 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:37:20:961 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:37:23:163 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:37:23:163 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:37:23:163 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:37:25:363 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:37:25:363 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:37:25:363 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:37:27:564 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:37:27:564 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:37:27:564 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:37:29:764 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:37:29:764 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:37:29:764 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:37:30:042 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; Received packet successfully. *Jan 26 16:37:30:042 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Received packet from 211.92.142.35 source port 500 destination port 500. *Jan 26 16:37:30:043 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 I-COOKIE: 8c8e73324c770a69 R-COOKIE: 2a2a2cfde7d3fd00 next payload: SA version: ISAKMP Version 1.0 exchange mode: Aggressive flags: message ID: 0 length: 472 *Jan 26 16:37:30:043 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; IKE thread 1099111125680 processes a job. *Jan 26 16:37:30:044 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; Phase1 process started. *Jan 26 16:37:30:044 2022 GSH-BGHLW-VPN5010-01 IKE/7/ERROR: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Can't find IKE SA. *Jan 26 16:37:31:966 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:37:31:966 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:37:31:966 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:37:34:166 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:37:34:166 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:37:34:166 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:37:36:367 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:37:36:367 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:37:36:367 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:37:38:568 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:37:38:568 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:37:38:568 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:37:40:706 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; Received packet successfully. *Jan 26 16:37:40:706 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Received packet from 211.92.142.35 source port 500 destination port 500. *Jan 26 16:37:40:706 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 I-COOKIE: 8c8e73324c770a69 R-COOKIE: 2a2a2cfde7d3fd00 next payload: SA version: ISAKMP Version 1.0 exchange mode: Aggressive flags: message ID: 0 length: 472 *Jan 26 16:37:40:707 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; IKE thread 1099111125680 processes a job. *Jan 26 16:37:40:707 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; Phase1 process started. *Jan 26 16:37:40:707 2022 GSH-BGHLW-VPN5010-01 IKE/7/ERROR: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Can't find IKE SA. *Jan 26 16:37:40:770 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:37:40:770 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:37:40:770 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:37:42:970 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:37:42:970 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:37:42:970 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:37:45:171 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:37:45:171 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:37:45:171 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:37:47:372 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:37:47:372 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:37:47:372 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:37:49:573 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:37:49:573 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:37:49:573 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:37:50:716 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; Received packet successfully. *Jan 26 16:37:50:716 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Received packet from 211.92.142.35 source port 500 destination port 500. *Jan 26 16:37:50:716 2022 GSH-BGHLW-VPN5010-01 IKE/7/PACKET: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 I-COOKIE: 8c8e73324c770a69 R-COOKIE: 2a2a2cfde7d3fd00 next payload: SA version: ISAKMP Version 1.0 exchange mode: Aggressive flags: message ID: 0 length: 472 *Jan 26 16:37:50:717 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; IKE thread 1099111125680 processes a job. *Jan 26 16:37:50:717 2022 GSH-BGHLW-VPN5010-01 IKE/7/EVENT: -COntext=1; Phase1 process started. *Jan 26 16:37:50:717 2022 GSH-BGHLW-VPN5010-01 IKE/7/ERROR: -COntext=1; vrf = 0, local = 11.14.248.65, remote = 211.92.142.35/500 Can't find IKE SA. *Jan 26 16:37:51:773 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:37:51:773 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:37:51:773 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:37:53:974 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:37:53:974 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:37:53:974 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:37:56:175 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:37:56:176 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:37:56:176 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:37:58:377 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:37:58:377 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:37:58:377 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:38:00:577 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:38:00:577 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:38:00:577 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:38:02:778 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:38:02:778 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:38:02:778 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. *Jan 26 16:38:04:978 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:38:04:978 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:38:04:978 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. <GSH-BGHLW-VPN5010-01> <GSH-BGHLW-VPN5010-01> <GSH-BGHLW-VPN5010-01>unt*Jan 26 16:38:07:180 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:38:07:180 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:38:07:180 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. o <GSH-BGHLW-VPN5010-01>unto t ^ % Unrecognized command found at '^' position. <GSH-BGHLW-VPN5010-01> <GSH-BGHLW-VPN5010-01>undo t *Jan 26 16:38:09:380 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:38:09:380 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:38:09:380 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. <GSH-BGHLW-VPN5010-01>undo t , ^ % Unrecognized command found at '^' position. <GSH-BGHLW-VPN5010-01>undo t *Jan 26 16:38:11:581 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/EVENT: -COntext=1; Found block-flow node. *Jan 26 16:38:11:581 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/PACKET: -COntext=1; Failed to find SA by SP, SP Index = 0, SP Convert-Seq = 65536. *Jan 26 16:38:11:581 2022 GSH-BGHLW-VPN5010-01 IPSEC/7/ERROR: -COntext=1; The reason of dropping packet is no available IPsec tunnel. <GSH-BGHLW-VPN5010-01>undo t m The current terminal is disabled to display logs.