设备型号:H3C MSR830;系统版本:H3C Comware Software, Version 7.1.064, Release 0605P18。
当前有一个分支已通过ikev1 ipsec拔号成功连入总部,总部属于固定ip,分支属于宽带ppoe拔号上网。另外有多个手机移动终端均已通过L2TP拔号VPN成功连接总部;目前需要新增移动终端通过 IKEv2/IPsec PSK拔入总部,具体配置如下所示:

设备型号:H3C MSR830;系统版本:H3C Comware Software, Version 7.1.064, Release 0605P18。
当前有一个分支已通过ikev1 ipsec拔号成功连入总部,总部属于固定ip,分支属于宽带ppoe拔号上网。另外有多个手机移动终端均已通过L2TP拔号VPN成功连接总部;目前需要新增移动终端通过 IKEv2/IPsec PSK拔入总部,具体配置如下所示:
<Router_ZHXXIE> dis cu
#
version 7.1.064, Release 0605P18
#
sysname Router_ZHXXIE
#
clock timezone Beijing add 08:00:00
clock protocol ntp
#
ip pool 1 192.168.100.10 192.168.100.25
ip pool 1 gateway 192.168.100.1
#
ip load-sharing mode per-flow src-ip global
#
dhcp enable
dhcp server always-broadcast
#
dns server 211.136.192.6
dns server 120.196.165.24
#
lldp global enable
#
password-recovery enable
#
vlan 1
#
vlan 10
name Link-to-LAN
#
interface Virtual-Template1
ppp authentication-mode chap domain zhie
ip address 192.168.100.1 255.255.255.0
#
interface NULL0
#
interface LoopBack0
ip address 10.10.10.1 255.255.255.255
#
interface Vlan-interface10
description Link-to-LAN
ip address 192.168.10.253 255.255.255.0
nat hairpin enable
#
interface GigabitEthernet0/0
port link-mode route
description Link-to-CMCC_ISP
ip address xx.xx.23.23 255.255.255.240
nat outbound 3000
nat server protocol tcp global xx.xx.23.23 25 inside 192.168.0.248 25
nat server protocol tcp global xx.xx.23.23 110 inside 192.168.0.248 110
nat server protocol tcp global xx.xx.23.23 143 inside 192.168.0.248 143
nat server protocol tcp global xx.xx.23.23 443 inside 192.168.0.249 443
nat server protocol tcp global xx.xx.23.23 4430 inside 192.168.0.248 443
ipsec apply policy ipsec
#
interface GigabitEthernet0/1
port link-mode route
#
interface GigabitEthernet0/2
port link-mode bridge
port access vlan 10
#
interface GigabitEthernet0/3
port link-mode bridge
description Link-to-Core_SW
port link-type trunk
port trunk permit vlan all
#
line vty 0 4
authentication-mode scheme
user-role network-operator
protocol inbound ssh
#
line vty 5 63
authentication-mode scheme
user-role network-operator
#
ip route-static 0.0.0.0 0 xx.xx.23.17
ip route-static 10.10.10.0 24 192.168.10.254
ip route-static 172.16.0.0 16 192.168.10.254
ip route-static 192.168.0.0 22 192.168.10.254
ip route-static 192.168.4.0 24 192.168.10.254
ip route-static 192.168.24.0 24 xx.xx.23.23
ip route-static 192.168.124.0 24 xx.xx.23.23
ip route-static 192.168.200.0 24 xx.xx.23.23
#
ssh server enable
sftp server enable
ssh user zhiexx service-type all authentication-type password
ssh server acl 2003
#
ntp-service enable
ntp-service unicast-server ***.***
#
acl basic 2003
description SSH_Server
rule 0 permit source 192.168.0.0 0.0.0.255
rule 1 permit source 192.168.1.0 0.0.0.255
rule 2 permit source 192.168.2.0 0.0.0.255
rule 3 permit source 192.168.3.0 0.0.0.255
rule 4 permit source 192.168.100.0 0.0.0.255
rule 5 permit source 192.168.124.0 0.0.0.255
rule 6 permit source 192.168.24.0 0.0.0.255
rule 7 permit source 192.168.10.0 0.0.0.255
#
acl advanced 3000
rule 0 deny ip source 192.168.0.0 0.0.0.255 destination 192.168.124.0 0.0.0.255
rule 1 deny ip source 192.168.1.0 0.0.0.255 destination 192.168.124.0 0.0.0.255
rule 2 deny ip source 192.168.2.0 0.0.0.255 destination 192.168.124.0 0.0.0.255
rule 3 deny ip source 192.168.3.0 0.0.0.255 destination 192.168.124.0 0.0.0.255
rule 4 deny ip source 192.168.0.0 0.0.0.255 destination 192.168.24.0 0.0.0.255
rule 5 deny ip source 192.168.10.0 0.0.0.255 destination 192.168.124.0 0.0.0.255
rule 6 deny ip source 192.168.10.0 0.0.0.255 destination 192.168.24.0 0.0.0.255
rule 7 deny ip source 172.16.0.0 0.0.255.255 destination 192.168.124.0 0.0.0.255
rule 8 deny ip source 172.16.0.0 0.0.255.255 destination 192.168.24.0 0.0.0.255
rule 9 deny ip source 192.168.100.0 0.0.0.255 destination 192.168.124.0 0.0.0.255
rule 10 deny ip source 192.168.200.0 0.0.0.255 destination 192.168.124.0 0.0.0.255
rule 11 deny ip source 192.168.0.0 0.0.0.255 destination 192.168.200.0 0.0.0.255
rule 12 deny ip source 192.168.10.0 0.0.0.255 destination 192.168.200.0 0.0.0.255
rule 35 permit ip source 192.168.0.0 0.0.255.255
rule 36 permit ip source 172.16.0.0 0.0.255.255
rule 37 permit ip source 10.10.0.0 0.0.255.255
#
acl advanced 3001
rule 0 permit ip source 192.168.0.0 0.0.0.255 destination 192.168.124.0 0.0.0.255
rule 1 permit ip source 192.168.124.0 0.0.0.255 destination 192.168.0.0 0.0.0.255
rule 2 permit ip source 192.168.1.0 0.0.0.255 destination 192.168.124.0 0.0.0.255
rule 3 permit ip source 192.168.124.0 0.0.0.255 destination 192.168.1.0 0.0.0.255
rule 4 permit ip source 192.168.2.0 0.0.0.255 destination 192.168.124.0 0.0.0.255
rule 5 permit ip source 192.168.124.0 0.0.0.255 destination 192.168.2.0 0.0.0.255
rule 6 permit ip source 192.168.3.0 0.0.0.255 destination 192.168.124.0 0.0.0.255
rule 7 permit ip source 192.168.124.0 0.0.0.255 destination 192.168.3.0 0.0.0.255
rule 8 permit ip source 192.168.10.0 0.0.0.255 destination 192.168.124.0 0.0.0.255
rule 9 permit ip source 192.168.124.0 0.0.0.255 destination 192.168.10.0 0.0.0.255
rule 10 permit ip source 192.168.124.0 0.0.0.255 destination 172.16.0.0 0.0.255.255
rule 11 permit ip source 172.16.0.0 0.0.255.255 destination 192.168.124.0 0.0.0.255
rule 12 permit ip source 192.168.124.0 0.0.0.255 destination 192.168.100.0 0.0.0.255
rule 13 permit ip source 192.168.100.0 0.0.0.255 destination 192.168.124.0 0.0.0.255
rule 14 permit ip source 192.168.124.0 0.0.0.255 destination 192.168.200.0 0.0.0.255
rule 15 permit ip source 192.168.200.0 0.0.0.255 destination 192.168.124.0 0.0.0.255
rule 16 permit ip source 192.168.0.0 0.0.0.255 destination 192.168.200.0 0.0.0.255
rule 17 permit ip source 192.168.10.0 0.0.0.255 destination 192.168.200.0 0.0.0.255
#
acl advanced 3002
rule 0 permit ip source 192.168.0.0 0.0.0.255 destination 192.168.200.0 0.0.0.255
rule 1 permit ip source 192.168.10.0 0.0.0.255 destination 192.168.200.0 0.0.0.255
rule 2 permit ip source 192.168.200.0 0.0.0.255 destination 192.168.124.0 0.0.0.255
rule 3 permit ip source 192.168.124.0 0.0.0.255 destination 192.168.200.0 0.0.0.255
#
domain mate80
authentication ike local
authorization ike local
#
domain system
#
domain zhie
authentication ppp local
authorization ppp local
#
domain default enable system
#
role name level-0
description Predefined level-0 role
#
role name mate80sslvpn
rule 1 permit command display
#
user-group system
#
local-user zhiexx class manage
password hash $h$6$SDoBI1UpONzFf6iX$G0qF21Y1XdHKRK2iT+3vNf54cdJm3EfCv9CD2s/36zTjsDk2E2P3Fo0E8LhIgHDTtutqTAgTgvVWbFOvz3f0JA==
service-type ftp
service-type ssh terminal https
authorization-attribute user-role network-admin
authorization-attribute user-role network-operator
#
local-user mate80user class network
password cipher $c$3$RGlVWU8FixsJvsUU2ZEzAF/iB52GvRlilJFefYI8FBvSeQ==
service-type ike
authorization-attribute user-role network-admin
authorization-attribute user-role network-operator
authorization-attribute ip-pool mate80
authorization-attribute primary-dns ip 223.5.5.5
#
local-user zhievpdn class network
password cipher $c$3$iwvU7SC7HDbeWZXNq8zhbnh+tVLUTP3Tszv5LZpMjw==
service-type ppp
authorization-attribute user-role network-operator
authorization-attribute ip-pool 1
#
ipsec logging packet enable
ipsec logging negotiation enable
#
ipsec transform-set 1
esp encryption-algorithm aes-cbc-256
esp authentication-algorithm sha256
#
ipsec transform-set mate80
encapsulation-mode transport
esp encryption-algorithm aes-cbc-256
esp authentication-algorithm sha256
pfs dh-group14
#
ipsec policy-template ipsec 1
transform-set 1
security acl 3001
ike-profile 1
sa duration time-based 3600
#
ipsec policy-template ipsec 5
transform-set mate80
security acl 3001 #注:当此ipsec策略应用上ACL3001,或者ACL3002后手机移动终端无法拔通ipsec vpn,当去掉此ACL后,即可拔号成功。
local-address xx.xx.23.23
ikev2-profile mate80
sa duration time-based 3600
#
ipsec policy ipsec 1 isakmp template ipsec
#
ipsec policy ipsec 5 isakmp template ipsec
#
l2tp-group 1 mode lns
allow l2tp virtual-template 1
undo tunnel authentication
tunnel name zhiexx
#
l2tp enable
#
ike profile 1
keychain 1
exchange-mode aggressive
local-identity address xx.xx.23.23
match remote identity address 0.0.0.0 0.0.0.0
proposal 1
#
ike proposal 1
encryption-algorithm aes-cbc-256
dh group14
authentication-algorithm sha256
#
ike keychain 1
pre-shared-key address 0.0.0.0 0.0.0.0 key cipher $c$3$mtADNWW1MGKl1aZS2k5Oopc86gv0PznH1yxd0dgrJA==
#
wlan global-configuration
control-address disable
#
wlan ap-group default-group
#
ikev2 address-group mate80 192.168.200.10 192.168.200.30 255.255.255.0
#
ikev2 keychain mate80
peer mate80
address 0.0.0.0 0.0.0.0
identity address 0.0.0.0
pre-shared-key ciphertext $c$3$5KNWaT7vDURLG5i0nLpTMN2CALiDzcuhtBZhw+Q=
#
ikev2 profile mate80
authentication-method local pre-share
authentication-method remote pre-share
keychain mate80
dpd interval 30 retry 2 on-demand
nat-keepalive 120
aaa authorization domain mate80 username mate80user
match local address xx.xx.23.23
match remote identity address 0.0.0.0 0.0.0.0
#
ikev2 proposal 10
encryption 3des-cbc aes-cbc-256 aes-cbc-128
integrity sha1 sha256
dh group2 group14 group5 group19
prf sha1 sha256
#
ikev2 policy 10
priority 1
proposal 10
#
return
================================ 以下为拔号后产生的相关信息 ============================
注:当此ipsec策略应用上ACL3001,或者ACL3002后手机移动终端无法拔通ipsec vpn,当去掉此ACL后,即可拔号成功。
拔号成功后debug信息如附件中的 log1.txt文件所示。
================= 在拔号 IKEv2/IPsec VPN 成功后通过查看 dis ipsec sa、dis ipsec sa brief 、dis ikev2 statistics、dis ikev2 sa verbose 如附件中的 log.txt文件所示。
================= 当去上述所说 ACL 3001或3002后,拔IKEv2/IPsec 失败后信息如附件中的 log2.txt文件所示。 ==============
<Router_ZHXXIE>dis ipsec sa
-------------------------------
Interface: GigabitEthernet0/0
-------------------------------
-----------------------------
IPsec policy: ipsec
Sequence number: 1
Mode: Template
-----------------------------
Tunnel id: 4
Encapsulation mode: tunnel
Perfect Forward Secrecy:
Inside VPN:
Extended Sequence Numbers enable: N
Traffic Flow Confidentiality enable: N
Path MTU: 1416
Tunnel:
local address: xx.xx.23.23
remote address: 183.53.159.64
Flow:
sour addr: 172.16.0.0/255.255.0.0 port: 0 protocol: ip
dest addr: 192.168.124.0/255.255.255.0 port: 0 protocol: ip
[Inbound ESP SAs]
SPI: 2692283454 (0xa078fc3e)
Connection ID: 80208514252809
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843199/1711
Max received sequence-number: 4
Anti-replay check enable: Y
Anti-replay window size: 64
UDP encapsulation used for NAT traversal: Y
Status: Active
[Outbound ESP SAs]
SPI: 3334702456 (0xc6c38578)
Connection ID: 42301132898306
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843200/1711
Max sent sequence-number: 0
UDP encapsulation used for NAT traversal: Y
Status: Active
-----------------------------
IPsec policy: ipsec
Sequence number: 1
Mode: Template
-----------------------------
Tunnel id: 4
Encapsulation mode: tunnel
Perfect Forward Secrecy:
Inside VPN:
Extended Sequence Numbers enable: N
Traffic Flow Confidentiality enable: N
Path MTU: 1416
Tunnel:
local address: xx.xx.23.23
remote address: 183.53.159.64
Flow:
sour addr: 172.16.0.0/255.255.0.0 port: 0 protocol: ip
dest addr: 192.168.124.0/255.255.255.0 port: 0 protocol: ip
[Inbound ESP SAs]
SPI: 2159187953 (0x80b297f1)
Connection ID: 53150220288015
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843200/32
Max received sequence-number: 0
Anti-replay check enable: Y
Anti-replay window size: 64
UDP encapsulation used for NAT traversal: Y
Status: Active
[Outbound ESP SAs]
SPI: 3264189540 (0xc28f9464)
Connection ID: 64557653426216
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843200/32
Max sent sequence-number: 0
UDP encapsulation used for NAT traversal: Y
Status: Active
-----------------------------
IPsec policy: ipsec
Sequence number: 1
Mode: Template
-----------------------------
Tunnel id: 9
Encapsulation mode: tunnel
Perfect Forward Secrecy:
Inside VPN:
Extended Sequence Numbers enable: N
Traffic Flow Confidentiality enable: N
Path MTU: 1416
Tunnel:
local address: xx.xx.23.23
remote address: 183.53.159.64
Flow:
sour addr: 192.168.2.0/255.255.255.0 port: 0 protocol: ip
dest addr: 192.168.124.0/255.255.255.0 port: 0 protocol: ip
[Inbound ESP SAs]
SPI: 1762093718 (0x69076a96)
Connection ID: 42722039693329
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843199/1712
Max received sequence-number: 7
Anti-replay check enable: Y
Anti-replay window size: 64
UDP encapsulation used for NAT traversal: Y
Status: Active
[Outbound ESP SAs]
SPI: 3297003091 (0xc4844653)
Connection ID: 16703127814190
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843200/1712
Max sent sequence-number: 0
UDP encapsulation used for NAT traversal: Y
Status: Active
-----------------------------
IPsec policy: ipsec
Sequence number: 1
Mode: Template
-----------------------------
Tunnel id: 13
Encapsulation mode: tunnel
Perfect Forward Secrecy:
Inside VPN:
Extended Sequence Numbers enable: N
Traffic Flow Confidentiality enable: N
Path MTU: 1416
Tunnel:
local address: xx.xx.23.23
remote address: 183.53.159.64
Flow:
sour addr: 192.168.1.0/255.255.255.0 port: 0 protocol: ip
dest addr: 192.168.124.0/255.255.255.0 port: 0 protocol: ip
[Inbound ESP SAs]
SPI: 1152928493 (0x44b84aed)
Connection ID: 41235981008916
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843194/1717
Max received sequence-number: 83
Anti-replay check enable: Y
Anti-replay window size: 64
UDP encapsulation used for NAT traversal: Y
Status: Active
[Outbound ESP SAs]
SPI: 3289096225 (0xc40ba021)
Connection ID: 31675383808033
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843200/1717
Max sent sequence-number: 0
UDP encapsulation used for NAT traversal: Y
Status: Active
-----------------------------
IPsec policy: ipsec
Sequence number: 1
Mode: Template
-----------------------------
Tunnel id: 3
Encapsulation mode: tunnel
Perfect Forward Secrecy:
Inside VPN:
Extended Sequence Numbers enable: N
Traffic Flow Confidentiality enable: N
Path MTU: 1416
Tunnel:
local address: xx.xx.23.23
remote address: 183.53.159.64
Flow:
sour addr: 192.168.3.0/255.255.255.0 port: 0 protocol: ip
dest addr: 192.168.124.0/255.255.255.0 port: 0 protocol: ip
[Inbound ESP SAs]
SPI: 1418951268 (0x54937a64)
Connection ID: 18232136171547
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843200/1714
Max received sequence-number: 0
Anti-replay check enable: Y
Anti-replay window size: 64
UDP encapsulation used for NAT traversal: Y
Status: Active
[Outbound ESP SAs]
SPI: 3314876307 (0xc594ff93)
Connection ID: 11119670329365
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843200/1714
Max sent sequence-number: 0
UDP encapsulation used for NAT traversal: Y
Status: Active
-----------------------------
IPsec policy: ipsec
Sequence number: 1
Mode: Template
-----------------------------
Tunnel id: 11
Encapsulation mode: tunnel
Perfect Forward Secrecy:
Inside VPN:
Extended Sequence Numbers enable: N
Traffic Flow Confidentiality enable: N
Path MTU: 1416
Tunnel:
local address: xx.xx.23.23
remote address: 183.53.159.64
Flow:
sour addr: 192.168.200.0/255.255.255.0 port: 0 protocol: ip
dest addr: 192.168.124.0/255.255.255.0 port: 0 protocol: ip
[Inbound ESP SAs]
SPI: 3903916156 (0xe8b1087c)
Connection ID: 56792352555038
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843200/1727
Max received sequence-number: 0
Anti-replay check enable: Y
Anti-replay window size: 64
UDP encapsulation used for NAT traversal: Y
Status: Active
[Outbound ESP SAs]
SPI: 3263915619 (0xc28b6663)
Connection ID: 70922794958862
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843200/1727
Max sent sequence-number: 0
UDP encapsulation used for NAT traversal: Y
Status: Active
-----------------------------
IPsec policy: ipsec
Sequence number: 1
Mode: Template
-----------------------------
Tunnel id: 9
Encapsulation mode: tunnel
Perfect Forward Secrecy:
Inside VPN:
Extended Sequence Numbers enable: N
Traffic Flow Confidentiality enable: N
Path MTU: 1416
Tunnel:
local address: xx.xx.23.23
remote address: 183.53.159.64
Flow:
sour addr: 192.168.2.0/255.255.255.0 port: 0 protocol: ip
dest addr: 192.168.124.0/255.255.255.0 port: 0 protocol: ip
[Inbound ESP SAs]
SPI: 3718746650 (0xdda7921a)
Connection ID: 61722975010850
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843200/33
Max received sequence-number: 0
Anti-replay check enable: Y
Anti-replay window size: 64
UDP encapsulation used for NAT traversal: Y
Status: Active
[Outbound ESP SAs]
SPI: 3441617739 (0xcd22eb4b)
Connection ID: 60151016980511
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843200/33
Max sent sequence-number: 0
UDP encapsulation used for NAT traversal: Y
Status: Active
-----------------------------
IPsec policy: ipsec
Sequence number: 1
Mode: Template
-----------------------------
Tunnel id: 3
Encapsulation mode: tunnel
Perfect Forward Secrecy:
Inside VPN:
Extended Sequence Numbers enable: N
Traffic Flow Confidentiality enable: N
Path MTU: 1416
Tunnel:
local address: xx.xx.23.23
remote address: 183.53.159.64
Flow:
sour addr: 192.168.3.0/255.255.255.0 port: 0 protocol: ip
dest addr: 192.168.124.0/255.255.255.0 port: 0 protocol: ip
[Inbound ESP SAs]
SPI: 3338863733 (0xc7030475)
Connection ID: 50882477555747
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843199/1725
Max received sequence-number: 8
Anti-replay check enable: Y
Anti-replay window size: 64
UDP encapsulation used for NAT traversal: Y
Status: Active
[Outbound ESP SAs]
SPI: 3245665530 (0xc174ecfa)
Connection ID: 39629663240214
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843200/1725
Max sent sequence-number: 0
UDP encapsulation used for NAT traversal: Y
Status: Active
-----------------------------
IPsec policy: ipsec
Sequence number: 1
Mode: Template
-----------------------------
Tunnel id: 10
Encapsulation mode: tunnel
Perfect Forward Secrecy:
Inside VPN:
Extended Sequence Numbers enable: N
Traffic Flow Confidentiality enable: N
Path MTU: 1416
Tunnel:
local address: xx.xx.23.23
remote address: 183.53.159.64
Flow:
sour addr: 192.168.10.0/255.255.255.0 port: 0 protocol: ip
dest addr: 192.168.124.0/255.255.255.0 port: 0 protocol: ip
[Inbound ESP SAs]
SPI: 1441691481 (0x55ee7759)
Connection ID: 88746909237289
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843200/50
Max received sequence-number: 0
Anti-replay check enable: Y
Anti-replay window size: 64
UDP encapsulation used for NAT traversal: Y
Status: Active
[Outbound ESP SAs]
SPI: 3403259268 (0xcad99d84)
Connection ID: 43340514983981
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843200/50
Max sent sequence-number: 0
UDP encapsulation used for NAT traversal: Y
Status: Active
-----------------------------
IPsec policy: ipsec
Sequence number: 1
Mode: Template
-----------------------------
Tunnel id: 13
Encapsulation mode: tunnel
Perfect Forward Secrecy:
Inside VPN:
Extended Sequence Numbers enable: N
Traffic Flow Confidentiality enable: N
Path MTU: 1416
Tunnel:
local address: xx.xx.23.23
remote address: 183.53.159.64
Flow:
sour addr: 192.168.1.0/255.255.255.0 port: 0 protocol: ip
dest addr: 192.168.124.0/255.255.255.0 port: 0 protocol: ip
[Inbound ESP SAs]
SPI: 3435079569 (0xccbf2791)
Connection ID: 55667071123505
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843200/48
Max received sequence-number: 0
Anti-replay check enable: Y
Anti-replay window size: 64
UDP encapsulation used for NAT traversal: Y
Status: Active
[Outbound ESP SAs]
SPI: 3221449975 (0xc0036cf7)
Connection ID: 40110699577381
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843200/48
Max sent sequence-number: 0
UDP encapsulation used for NAT traversal: Y
Status: Active
-----------------------------
IPsec policy: ipsec
Sequence number: 1
Mode: Template
-----------------------------
Tunnel id: 10
Encapsulation mode: tunnel
Perfect Forward Secrecy:
Inside VPN:
Extended Sequence Numbers enable: N
Traffic Flow Confidentiality enable: N
Path MTU: 1416
Tunnel:
local address: xx.xx.23.23
remote address: 183.53.159.64
Flow:
sour addr: 192.168.10.0/255.255.255.0 port: 0 protocol: ip
dest addr: 192.168.124.0/255.255.255.0 port: 0 protocol: ip
[Inbound ESP SAs]
SPI: 4035451580 (0xf0881abc)
Connection ID: 14005888352306
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843103/1722
Max received sequence-number: 1340
Anti-replay check enable: Y
Anti-replay window size: 64
UDP encapsulation used for NAT traversal: Y
Status: Active
[Outbound ESP SAs]
SPI: 3406119455 (0xcb05421f)
Connection ID: 26641682137107
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1842959/1722
Max sent sequence-number: 1623
UDP encapsulation used for NAT traversal: Y
Status: Active
-----------------------------
IPsec policy: ipsec
Sequence number: 1
Mode: Template
-----------------------------
Tunnel id: 7
Encapsulation mode: tunnel
Perfect Forward Secrecy:
Inside VPN:
Extended Sequence Numbers enable: N
Traffic Flow Confidentiality enable: N
Path MTU: 1416
Tunnel:
local address: xx.xx.23.23
remote address: 183.53.159.64
Flow:
sour addr: 192.168.0.0/255.255.255.0 port: 0 protocol: ip
dest addr: 192.168.124.0/255.255.255.0 port: 0 protocol: ip
[Inbound ESP SAs]
SPI: 4205294461 (0xfaa7b37d)
Connection ID: 48245367636019
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843178/1715
Max received sequence-number: 248
Anti-replay check enable: Y
Anti-replay window size: 64
UDP encapsulation used for NAT traversal: Y
Status: Active
[Outbound ESP SAs]
SPI: 3275007883 (0xc334a78b)
Connection ID: 5304284610614
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843200/1715
Max sent sequence-number: 0
UDP encapsulation used for NAT traversal: Y
Status: Active
-----------------------------
IPsec policy: ipsec
Sequence number: 1
Mode: Template
-----------------------------
Tunnel id: 7
Encapsulation mode: tunnel
Perfect Forward Secrecy:
Inside VPN:
Extended Sequence Numbers enable: N
Traffic Flow Confidentiality enable: N
Path MTU: 1416
Tunnel:
local address: xx.xx.23.23
remote address: 183.53.159.64
Flow:
sour addr: 192.168.0.0/255.255.255.0 port: 0 protocol: ip
dest addr: 192.168.124.0/255.255.255.0 port: 0 protocol: ip
[Inbound ESP SAs]
SPI: 3094393234 (0xb870b192)
Connection ID: 51793010622517
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843181/35
Max received sequence-number: 190
Anti-replay check enable: Y
Anti-replay window size: 64
UDP encapsulation used for NAT traversal: Y
Status: Active
[Outbound ESP SAs]
SPI: 3434450156 (0xccb58cec)
Connection ID: 51664161603641
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843199/35
Max sent sequence-number: 3
UDP encapsulation used for NAT traversal: Y
Status: Active
-----------------------------
IPsec policy: ipsec
Sequence number: 1
Mode: Template
-----------------------------
Tunnel id: 0
Encapsulation mode: tunnel
Perfect Forward Secrecy:
Inside VPN:
Extended Sequence Numbers enable: N
Traffic Flow Confidentiality enable: N
Path MTU: 1416
Tunnel:
local address: xx.xx.23.23
remote address: 183.53.159.64
Flow:
sour addr: 192.168.100.0/255.255.255.0 port: 0 protocol: ip
dest addr: 192.168.124.0/255.255.255.0 port: 0 protocol: ip
[Inbound ESP SAs]
SPI: 1969742862 (0x7567e40e)
Connection ID: 28488518074428
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843200/1726
Max received sequence-number: 0
Anti-replay check enable: Y
Anti-replay window size: 64
UDP encapsulation used for NAT traversal: Y
Status: Active
[Outbound ESP SAs]
SPI: 3384750586 (0xc9bf31fa)
Connection ID: 50796578209795
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843200/1726
Max sent sequence-number: 0
UDP encapsulation used for NAT traversal: Y
Status: Active
-----------------------------
IPsec policy: ipsec
Sequence number: 1
Mode: Template
-----------------------------
Tunnel id: 11
Encapsulation mode: tunnel
Perfect Forward Secrecy:
Inside VPN:
Extended Sequence Numbers enable: N
Traffic Flow Confidentiality enable: N
Path MTU: 1416
Tunnel:
local address: xx.xx.23.23
remote address: 183.53.159.64
Flow:
sour addr: 192.168.200.0/255.255.255.0 port: 0 protocol: ip
dest addr: 192.168.124.0/255.255.255.0 port: 0 protocol: ip
[Inbound ESP SAs]
SPI: 3924690711 (0xe9ee0717)
Connection ID: 45204530790464
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843200/1724
Max received sequence-number: 0
Anti-replay check enable: Y
Anti-replay window size: 64
UDP encapsulation used for NAT traversal: Y
Status: Active
[Outbound ESP SAs]
SPI: 3484947708 (0xcfb814fc)
Connection ID: 26229365276733
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843200/1724
Max sent sequence-number: 0
UDP encapsulation used for NAT traversal: Y
Status: Active
-----------------------------
IPsec policy: ipsec
Sequence number: 1
Mode: Template
-----------------------------
Tunnel id: 0
Encapsulation mode: tunnel
Perfect Forward Secrecy:
Inside VPN:
Extended Sequence Numbers enable: N
Traffic Flow Confidentiality enable: N
Path MTU: 1416
Tunnel:
local address: xx.xx.23.23
remote address: 183.53.159.64
Flow:
sour addr: 192.168.100.0/255.255.255.0 port: 0 protocol: ip
dest addr: 192.168.124.0/255.255.255.0 port: 0 protocol: ip
[Inbound ESP SAs]
SPI: 988930563 (0x3af1e203)
Connection ID: 32242319491137
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843200/1716
Max received sequence-number: 0
Anti-replay check enable: Y
Anti-replay window size: 64
UDP encapsulation used for NAT traversal: Y
Status: Active
[Outbound ESP SAs]
SPI: 3352878295 (0xc7d8dcd7)
Connection ID: 47145856008260
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843200/1716
Max sent sequence-number: 0
UDP encapsulation used for NAT traversal: Y
Status: Active
-----------------------------
IPsec policy: ipsec
Sequence number: 1
Mode: Template
-----------------------------
Tunnel id: 2
Encapsulation mode: tunnel
Perfect Forward Secrecy:
Inside VPN:
Extended Sequence Numbers enable: N
Traffic Flow Confidentiality enable: Y
Path MTU: 1416
Tunnel:
local address: xx.xx.23.23
remote address: 119.143.33.107
Flow:
sour addr: 0.0.0.0/0.0.0.0 port: 0 protocol: ip
dest addr: 0.0.0.0/0.0.0.0 port: 0 protocol: ip
[Inbound ESP SAs]
SPI: 3724202669 (0xddfad2ad)
Connection ID: 58115202482224
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843199/3512
Max received sequence-number: 13
Anti-replay check enable: Y
Anti-replay window size: 64
UDP encapsulation used for NAT traversal: Y
Status: Active
[Outbound ESP SAs]
SPI: 3243582611 (0xc1552493)
Connection ID: 49765786058810
Transform set: ESP-ENCRYPT-AES-CBC-256 ESP-AUTH-SHA256
SA duration (kilobytes/sec): 1843200/3600
SA remaining duration (kilobytes/sec): 1843116/3512
Max sent sequence-number: 318
UDP encapsulation used for NAT traversal: Y
Status: Active
<Router_ZHXXIE>dis ipsec sa ve
<Router_ZHXXIE>dis ipsec sa ?
> Redirect it to a file
>> Redirect it to a file in append mode
brief Display brief information about all IPsec SAs
count Display SA count
interface Specify an interface
ipv6-policy Specify an IPv6 IPsec policy
policy Specify an IPv4 IPsec policy
profile Specify an IPsec profile
remote Specify a remote peer
| Matching output
<cr>
<Router_ZHXXIE>dis ipsec sa bri
<Router_ZHXXIE>dis ipsec sa brief
-----------------------------------------------------------------------------
Interface/Global Dst Address SPI Protocol Status
-----------------------------------------------------------------------------
GE0/0 183.53.159.64 3334702456 ESP Active
GE0/0 xx.xx.23.23 2692283454 ESP Active
GE0/0 183.53.159.64 3264189540 ESP Active
GE0/0 xx.xx.23.23 2159187953 ESP Active
GE0/0 183.53.159.64 3297003091 ESP Active
GE0/0 xx.xx.23.23 1762093718 ESP Active
GE0/0 183.53.159.64 3289096225 ESP Active
GE0/0 xx.xx.23.23 1152928493 ESP Active
GE0/0 183.53.159.64 3314876307 ESP Active
GE0/0 xx.xx.23.23 1418951268 ESP Active
GE0/0 183.53.159.64 3263915619 ESP Active
GE0/0 xx.xx.23.23 3903916156 ESP Active
GE0/0 183.53.159.64 3441617739 ESP Active
GE0/0 xx.xx.23.23 3718746650 ESP Active
GE0/0 183.53.159.64 3245665530 ESP Active
GE0/0 xx.xx.23.23 3338863733 ESP Active
GE0/0 183.53.159.64 3403259268 ESP Active
GE0/0 xx.xx.23.23 1441691481 ESP Active
GE0/0 183.53.159.64 3221449975 ESP Active
GE0/0 xx.xx.23.23 3435079569 ESP Active
GE0/0 183.53.159.64 3406119455 ESP Active
GE0/0 xx.xx.23.23 4035451580 ESP Active
GE0/0 183.53.159.64 3275007883 ESP Active
GE0/0 xx.xx.23.23 4205294461 ESP Active
GE0/0 183.53.159.64 3434450156 ESP Active
GE0/0 xx.xx.23.23 3094393234 ESP Active
GE0/0 183.53.159.64 3384750586 ESP Active
GE0/0 xx.xx.23.23 1969742862 ESP Active
GE0/0 183.53.159.64 3484947708 ESP Active
GE0/0 xx.xx.23.23 3924690711 ESP Active
GE0/0 183.53.159.64 3352878295 ESP Active
GE0/0 xx.xx.23.23 988930563 ESP Active
GE0/0 119.143.33.107 3243582611 ESP Active
GE0/0 xx.xx.23.23 3724202669 ESP Active
<Router_ZHXXIE>dis ikev2 statistics
IKEv2 statistics:
Unsupported critical payload: 0
Invalid IKE SPI: 0
Invalid major version: 0
Invalid syntax: 1
Invalid message ID: 0
Invalid SPI: 0
No proposal chosen: 26
Invalid KE payload: 65
Authentication failed: 4
Single pair required: 0
TS unacceptable: 12
Invalid selectors: 0
Tempture failure: 0
No child SA: 0
Unknown other notify: 0
No enough resource: 0
Enqueue error: 0
No IKEv2 SA: 317
Packet error: 22
Other error: 13
Retransmit timeout: 1
DPD detect error: 3
Del child for IPsec message: 0
Del child for deleting IKEv2 SA: 19
Del child for receiving delete message: 0
<Router_ZHXXIE>dis ikev2 sa verbose
Tunnel ID: 441
Local IP/Port: xx.xx.23.23/4500
Remote IP/Port: 119.143.33.107/26156
Outside VRF: -
Inside VRF: -
Local SPI: 151da617d9731bb0
Remote SPI: 2cd80d53b3df181e
Local ID type: ID_IPV4_ADDR
Local ID: xx.xx.23.23
Remote ID type: ID_IPV4_ADDR
Remote ID: 10.35.108.58
Auth sign method: Pre-shared key
Auth verify method: Pre-shared key
Integrity algorithm: SHA256
PRF algorithm: SHA256
Encryption algorithm: AES-CBC-128
Life duration: 86400 secs
Remaining key duration: 86269 secs
Diffie-Hellman group: ECP256/Group19
NAT traversal: Detected
DPD: Interval 30 secs, retry interval 2 secs
Transmitting entity: Responder
Local window: 1
Remote window: 1
Local request message ID: 3
Remote request message ID: 2
Local next message ID: 3
Remote next message ID: 2
Assigned IP address: 192.168.200.10
======= 以下为 log1.txt ==============信息==========
<Router_ZHXXIE>*Jul 16 21:33:22:771 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Received packet from 119.143.33.107 source port 26149 destination port 500. *Jul 16 21:33:22:772 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 I-SPI: 823c79c1a5368eca R-SPI: 0000000000000000 Message ID: 0 Exchange type: SA_INIT Flags: REQUEST, INITIATOR Next payload: SA, Length: 1080. *Jul 16 21:33:22:772 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 (Tunnel ID 443): (R) Current State: IDLE. *Jul 16 21:33:22:772 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Payload contents: *Jul 16 21:33:22:772 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 SA Next payload: KE, Length: 856. *Jul 16 21:33:22:772 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last proposal: 0x2, Length: 360. *Jul 16 21:33:22:772 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Proposal: 1, Protocol: IKE, SPI size: 0, Transform number: 38. *Jul 16 21:33:22:772 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:773 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CBC. *Jul 16 21:33:22:773 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:33:22:773 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:773 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CBC. *Jul 16 21:33:22:773 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:33:22:773 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:773 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CBC. *Jul 16 21:33:22:773 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:33:22:773 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:773 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CTR. *Jul 16 21:33:22:774 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:33:22:774 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:774 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CTR. *Jul 16 21:33:22:774 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:33:22:774 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:774 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CTR. *Jul 16 21:33:22:775 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:33:22:775 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:775 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CBC. *Jul 16 21:33:22:775 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:33:22:775 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:775 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CBC. *Jul 16 21:33:22:775 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:33:22:775 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:775 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CBC. *Jul 16 21:33:22:775 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:33:22:775 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:775 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CTR. *Jul 16 21:33:22:776 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:33:22:776 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:776 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CTR. *Jul 16 21:33:22:776 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:33:22:776 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:776 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CTR. *Jul 16 21:33:22:776 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:33:22:776 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:776 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: 3DES-CBC. *Jul 16 21:33:22:776 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:777 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: INTEG, Transform ID: AUTH-HMAC-SHA256-128. *Jul 16 21:33:22:777 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:777 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: INTEG, Transform ID: AUTH-HMAC-SHA384-192. *Jul 16 21:33:22:777 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:778 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: INTEG, Transform ID: AUTH-HMAC-SHA512-256. *Jul 16 21:33:22:778 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:778 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: INTEG, Transform ID: AUTH-HMAC-SHA1-96. *Jul 16 21:33:22:778 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:778 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: INTEG, Transform ID: AUTH-AES-XCBC-96. *Jul 16 21:33:22:778 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:778 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: INTEG, Transform ID: AUTH-AES-CMAC-96. *Jul 16 21:33:22:778 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:779 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-HMAC-SHA256. *Jul 16 21:33:22:779 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:779 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-HMAC-SHA384. *Jul 16 21:33:22:779 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:779 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-HMAC-SHA512. *Jul 16 21:33:22:779 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:779 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-AES128-XCBC. *Jul 16 21:33:22:779 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:779 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-AES128-CMAC. *Jul 16 21:33:22:779 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:780 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-HMAC-SHA1. *Jul 16 21:33:22:780 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:780 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 256-bit ECP/Group 19. *Jul 16 21:33:22:780 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:780 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 384-bit ECP/Group 20. *Jul 16 21:33:22:780 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:780 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 512-bit ECP/Group 21. *Jul 16 21:33:22:781 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:781 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: Unknown. *Jul 16 21:33:22:781 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:781 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: Unknown. *Jul 16 21:33:22:781 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:781 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: Unknown. *Jul 16 21:33:22:781 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:782 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: Unknown. *Jul 16 21:33:22:782 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:782 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: Unknown. *Jul 16 21:33:22:782 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:782 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 3072-bit MODP/Group 15. *Jul 16 21:33:22:782 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:782 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 4096-bit MODP/Group 16. *Jul 16 21:33:22:783 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:783 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 6144-bit MODP/Group 17. *Jul 16 21:33:22:783 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:783 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 8192-bit MODP/Group 18. *Jul 16 21:33:22:783 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0, Length: 8. *Jul 16 21:33:22:783 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 2048-bit MODP/Group 14. *Jul 16 21:33:22:783 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last proposal: 0, Length: 492. *Jul 16 21:33:22:783 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Proposal: 2, Protocol: IKE, SPI size: 0, Transform number: 47. *Jul 16 21:33:22:783 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:783 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-GCM-16. *Jul 16 21:33:22:784 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:33:22:784 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:784 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-GCM-16. *Jul 16 21:33:22:784 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:33:22:784 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:784 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-GCM-16. *Jul 16 21:33:22:784 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:33:22:785 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:785 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CCM-16. *Jul 16 21:33:22:785 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:33:22:785 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:785 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CCM-16. *Jul 16 21:33:22:785 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:33:22:785 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:786 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CCM-16. *Jul 16 21:33:22:786 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:33:22:786 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:786 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: Unknown. *Jul 16 21:33:22:786 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:786 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CCM-16. *Jul 16 21:33:22:786 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:33:22:787 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:787 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CCM-16. *Jul 16 21:33:22:787 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:33:22:787 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:787 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CCM-16. *Jul 16 21:33:22:787 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:33:22:787 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:788 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-GCM-12. *Jul 16 21:33:22:788 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:33:22:788 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:788 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-GCM-12. *Jul 16 21:33:22:788 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:33:22:788 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:788 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-GCM-12. *Jul 16 21:33:22:789 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:33:22:789 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:789 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-GCM-8. *Jul 16 21:33:22:789 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:33:22:789 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:789 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-GCM-8. *Jul 16 21:33:22:789 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:33:22:789 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:790 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-GCM-8. *Jul 16 21:33:22:790 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:33:22:790 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:790 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CCM-12. *Jul 16 21:33:22:790 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:33:22:790 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:790 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CCM-12. *Jul 16 21:33:22:791 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:33:22:791 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:791 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CCM-12. *Jul 16 21:33:22:791 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:33:22:791 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:791 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CCM-8. *Jul 16 21:33:22:791 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:33:22:792 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:792 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CCM-8. *Jul 16 21:33:22:792 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:33:22:792 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:792 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CCM-8. *Jul 16 21:33:22:792 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:33:22:792 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:793 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CCM-8. *Jul 16 21:33:22:793 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:33:22:793 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:793 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CCM-8. *Jul 16 21:33:22:793 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:33:22:793 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:793 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CCM-8. *Jul 16 21:33:22:793 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:33:22:794 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:794 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CCM-12. *Jul 16 21:33:22:794 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:33:22:794 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:794 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CCM-12. *Jul 16 21:33:22:794 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:33:22:794 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:795 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CCM-12. *Jul 16 21:33:22:795 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:33:22:795 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:795 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-HMAC-SHA256. *Jul 16 21:33:22:795 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:795 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-HMAC-SHA384. *Jul 16 21:33:22:795 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:795 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-HMAC-SHA512. *Jul 16 21:33:22:796 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:796 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-AES128-XCBC. *Jul 16 21:33:22:796 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:796 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-AES128-CMAC. *Jul 16 21:33:22:796 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:796 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-HMAC-SHA1. *Jul 16 21:33:22:796 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:797 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 256-bit ECP/Group 19. *Jul 16 21:33:22:797 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:797 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 384-bit ECP/Group 20. *Jul 16 21:33:22:797 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:797 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 512-bit ECP/Group 21. *Jul 16 21:33:22:797 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:797 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: Unknown. *Jul 16 21:33:22:798 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:798 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: Unknown. *Jul 16 21:33:22:798 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:798 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: Unknown. *Jul 16 21:33:22:798 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:798 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: Unknown. *Jul 16 21:33:22:798 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:799 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: Unknown. *Jul 16 21:33:22:799 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:799 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 3072-bit MODP/Group 15. *Jul 16 21:33:22:799 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:799 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 4096-bit MODP/Group 16. *Jul 16 21:33:22:799 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:799 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 6144-bit MODP/Group 17. *Jul 16 21:33:22:799 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:800 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 8192-bit MODP/Group 18. *Jul 16 21:33:22:800 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0, Length: 8. *Jul 16 21:33:22:800 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 2048-bit MODP/Group 14. *Jul 16 21:33:22:800 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 KE Next payload: NONCE, Length: 72, DH: 256-bit ECP/Group 19. *Jul 16 21:33:22:800 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 NONCE Next payload: NOTIFY, Length: 36. *Jul 16 21:33:22:800 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 NOTIFY Next payload: NOTIFY, Length: 28, Type: NAT_DETECTION_SOURCE_IP, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:33:22:800 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 NOTIFY Next payload: NOTIFY, Length: 28, Type: NAT_DETECTION_DESTINATION_IP, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:33:22:801 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 NOTIFY Next payload: NOTIFY, Length: 8, Type: Unknown, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:33:22:801 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 NOTIFY Next payload: NOTIFY, Length: 16, Type: Unknown, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:33:22:801 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 NOTIFY Next payload: NO_PAYLOAD, Length: 8, Type: Unknown, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:33:22:801 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Request has message id 0, expected from (0 ~ 0). *Jul 16 21:33:22:801 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Search policy with vrf 0, local address xx.xx.23.23. *Jul 16 21:33:22:801 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Policy 10 matched. *Jul 16 21:33:22:802 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Process SA payload. *Jul 16 21:33:22:802 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Process KE payload. *Jul 16 21:33:22:802 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Process NAT discovery notify. *Jul 16 21:33:22:802 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Peer is behind NAT. *Jul 16 21:33:22:802 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 (Tunnel ID 443): (R) Current State: PROC_INIT. *Jul 16 21:33:22:802 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Search policy with vrf 0, local address xx.xx.23.23. *Jul 16 21:33:22:803 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Policy 10 matched. *Jul 16 21:33:22:803 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Construct SA payload. *Jul 16 21:33:22:803 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Proposal 1. *Jul 16 21:33:22:803 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Transform ENCR AES-CBC 128. *Jul 16 21:33:22:803 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Transform INTEG AUTH-HMAC-SHA256-128. *Jul 16 21:33:22:803 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Transform PRF PRF-HMAC-SHA256. *Jul 16 21:33:22:803 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Transform D-H 256-bit ECP/Group 19. *Jul 16 21:33:22:821 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Compute DH public key, use 256-bit ECP/Group 19. *Jul 16 21:33:22:821 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Construct KE payload. *Jul 16 21:33:22:822 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Construct NONCE payload. *Jul 16 21:33:22:822 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Construct NOTIFY payload: NAT_DETECTION_SOURCE_IP. *Jul 16 21:33:22:822 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Construct NOTIFY payload: NAT_DETECTION_DESTINATION_IP. *Jul 16 21:33:22:822 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Construct NOTIFY payload: HTTP_CERT_LOOKUP_SUPPORTED. *Jul 16 21:33:22:822 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Construct CERTREQ payload. *Jul 16 21:33:22:823 2026 Router_ZHXXIE IKEV2/7/ERROR: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Construct CERTREQ payload failed. *Jul 16 21:33:22:841 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Calculate SKEYSEED. *Jul 16 21:33:22:842 2026 Router_ZHXXIE IKEV2/7/TIMER: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Responder: start 30 secs wait auth timer. *Jul 16 21:33:22:842 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 (Tunnel ID 443): (R) Current State: BUILD_INIT. *Jul 16 21:33:22:842 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Payload contents: *Jul 16 21:33:22:842 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 SA Next payload: KE, Length: 48. *Jul 16 21:33:22:842 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last proposal: 0, Length: 44. *Jul 16 21:33:22:842 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Proposal: 1, Protocol: IKE, SPI size: 0, Transform number: 4. *Jul 16 21:33:22:843 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:843 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CBC. *Jul 16 21:33:22:843 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:33:22:843 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:843 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: INTEG, Transform ID: AUTH-HMAC-SHA256-128. *Jul 16 21:33:22:843 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:843 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-HMAC-SHA256. *Jul 16 21:33:22:843 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0, Length: 8. *Jul 16 21:33:22:844 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 256-bit ECP/Group 19. *Jul 16 21:33:22:844 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 KE Next payload: NONCE, Length: 72, DH: 256-bit ECP/Group 19. *Jul 16 21:33:22:844 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 NONCE Next payload: NOTIFY, Length: 36. *Jul 16 21:33:22:844 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 NOTIFY Next payload: NOTIFY, Length: 28, Type: NAT_DETECTION_SOURCE_IP, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:33:22:844 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 NOTIFY Next payload: NOTIFY, Length: 28, Type: NAT_DETECTION_DESTINATION_IP, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:33:22:844 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 NOTIFY Next payload: NO_PAYLOAD, Length: 8, Type: HTTP_CERT_LOOKUP_SUPPORTED, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:33:22:844 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Sending packet to 119.143.33.107 remote port 26149, local port 500. *Jul 16 21:33:22:845 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 I-SPI: 823c79c1a5368eca R-SPI: 9be149258ff9a4f2 Message ID: 0 Exchange type: SA_INIT Flags: RESPONSE Next payload: SA, Length: 248. *Jul 16 21:33:22:845 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Sending an IPv4 packet. *Jul 16 21:33:22:845 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Sent response with message id 0, requests can be accepted from (1 ~ 1). *Jul 16 21:33:22:911 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Received packet from 119.143.33.107 source port 26156 destination port 4500. *Jul 16 21:33:22:911 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 I-SPI: 823c79c1a5368eca R-SPI: 9be149258ff9a4f2 Message ID: 1 Exchange type: AUTH Flags: REQUEST, INITIATOR Next payload: ENCRYPTED, Length: 480. *Jul 16 21:33:22:911 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Payload contents: *Jul 16 21:33:22:911 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Parse the last payload (ENCRYPTED payload). *Jul 16 21:33:22:912 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Integrity check passed. *Jul 16 21:33:22:912 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 IDi Next payload: AUTH, Length: 12, Type: ID_IPV4_ADDR. *Jul 16 21:33:22:912 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 AUTH Next payload: CFG, Length: 40, Method: Pre-shared key. *Jul 16 21:33:22:912 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 CFG Next payload: SA, Length: 16, Type: CFG_REQUEST. *Jul 16 21:33:22:912 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type INTERNAL_IP4_ADDRESS, Length 0. *Jul 16 21:33:22:913 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type INTERNAL_IP4_DNS, Length 0. *Jul 16 21:33:22:913 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 SA Next payload: TSi, Length: 156. *Jul 16 21:33:22:913 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last proposal: 0x2, Length: 96. *Jul 16 21:33:22:913 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Proposal: 1, Protocol: ESP, SPI size: 4, Transform number: 9. *Jul 16 21:33:22:913 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:913 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: ENCR, Transform ID: AES-CBC. *Jul 16 21:33:22:914 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Key length: 128. *Jul 16 21:33:22:914 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:914 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: ENCR, Transform ID: AES-CBC. *Jul 16 21:33:22:914 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Key length: 192. *Jul 16 21:33:22:914 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:914 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: ENCR, Transform ID: AES-CBC. *Jul 16 21:33:22:914 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Key length: 256. *Jul 16 21:33:22:915 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:915 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: INTEG, Transform ID: AUTH-HMAC-SHA256-128. *Jul 16 21:33:22:915 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:915 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: INTEG, Transform ID: AUTH-HMAC-SHA384-192. *Jul 16 21:33:22:915 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:915 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: INTEG, Transform ID: AUTH-HMAC-SHA512-256. *Jul 16 21:33:22:915 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:916 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: INTEG, Transform ID: AUTH-HMAC-SHA1-96. *Jul 16 21:33:22:916 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:916 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: INTEG, Transform ID: AUTH-AES-XCBC-96. *Jul 16 21:33:22:916 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0, Length: 8. *Jul 16 21:33:22:916 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: ESN, Transform ID: NO ESN. *Jul 16 21:33:22:916 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last proposal: 0, Length: 56. *Jul 16 21:33:22:917 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Proposal: 2, Protocol: ESP, SPI size: 4, Transform number: 4. *Jul 16 21:33:22:917 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:921 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: ENCR, Transform ID: AES-GCM-16. *Jul 16 21:33:22:921 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Key length: 128. *Jul 16 21:33:22:922 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:924 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: ENCR, Transform ID: AES-GCM-16. *Jul 16 21:33:22:924 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Key length: 192. *Jul 16 21:33:22:925 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:926 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: ENCR, Transform ID: AES-GCM-16. *Jul 16 21:33:22:926 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Key length: 256. *Jul 16 21:33:22:926 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0, Length: 8. *Jul 16 21:33:22:926 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: ESN, Transform ID: NO ESN. *Jul 16 21:33:22:926 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 TSi Next payload: TSr, Length: 24, Selector number: 1. *Jul 16 21:33:22:927 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 TS type: TS_IPV4_ADDR_RANGE, IP protocol: 0, Length: 16. *Jul 16 21:33:22:928 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Start port: 0, end port: 65535. *Jul 16 21:33:22:929 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Start address: 0.0.0.0, End address: 255.255.255.255. *Jul 16 21:33:22:929 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 TSr Next payload: NOTIFY, Length: 24, Selector number: 1. *Jul 16 21:33:22:929 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 TS type: TS_IPV4_ADDR_RANGE, IP protocol: 0, Length: 16. *Jul 16 21:33:22:929 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Start port: 0, end port: 65535. *Jul 16 21:33:22:929 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Start address: 0.0.0.0, End address: 255.255.255.255. *Jul 16 21:33:22:930 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 NOTIFY Next payload: NOTIFY, Length: 8, Type: MOBIKE_SUPPORTED, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:33:22:931 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 NOTIFY Next payload: NOTIFY, Length: 12, Type: ADDITIONAL_IP4_ADDRESS, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:33:22:931 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 NOTIFY Next payload: NOTIFY, Length: 24, Type: ADDITIONAL_IP6_ADDRESS, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:33:22:931 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 NOTIFY Next payload: NOTIFY, Length: 24, Type: ADDITIONAL_IP6_ADDRESS, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:33:22:932 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 NOTIFY Next payload: NOTIFY, Length: 24, Type: ADDITIONAL_IP6_ADDRESS, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:33:22:933 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 NOTIFY Next payload: NOTIFY, Length: 24, Type: ADDITIONAL_IP6_ADDRESS, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:33:22:933 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 NOTIFY Next payload: NOTIFY, Length: 8, Type: Unknown, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:33:22:933 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 NOTIFY Next payload: NO_PAYLOAD, Length: 8, Type: IKEV2_MESSAGE_ID_SYNC_SUPPORTED, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:33:22:934 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Request has message id 1, expected from (1 ~ 1). *Jul 16 21:33:22:934 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 (Tunnel ID 443): (R) Current State: PROC_AUTH. *Jul 16 21:33:22:934 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Process ID payload. *Jul 16 21:33:22:934 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Searching profile based on peer"s identity ID_IPV4_ADDR of type 10.35.108.58. *Jul 16 21:33:22:935 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Found matching profile mate80. *Jul 16 21:33:22:935 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Getting pre-shared key from profile keychain mate80. *Jul 16 21:33:22:936 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Getting pre-shared key by identity ID_IPV4_ADDR of type 10.35.108.58. *Jul 16 21:33:22:938 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Getting pre-shared key by address 119.143.33.107. *Jul 16 21:33:22:941 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Peer mate80 matched. *Jul 16 21:33:22:942 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Verifing peer"s authentication data. *Jul 16 21:33:22:944 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Verify peer"s authentication data passed. *Jul 16 21:33:22:945 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 [IKE->AAA] Send authorization request. *Jul 16 21:33:22:948 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 [AAA->IKE] Get authorized data from AAA. *Jul 16 21:33:22:948 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 process CP payload: CFG_REQUEST. *Jul 16 21:33:22:949 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Process TSi payload. *Jul 16 21:33:22:950 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Process TSr payload. *Jul 16 21:33:22:950 2026 Router_ZHXXIE IKEV2/7/EVENT: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 [IKE->IPsec] Send get IPsec policy request. *Jul 16 21:33:22:953 2026 Router_ZHXXIE IKEV2/7/EVENT: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 [IPsec->IKE] Succeed to get IPsec policy. *Jul 16 21:33:22:954 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Process SA payload. *Jul 16 21:33:22:954 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Negotiate to use Tunnel mode. *Jul 16 21:33:22:954 2026 Router_ZHXXIE IKEV2/7/EVENT: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 [IKE->IPsec] Send get IPsec SPI request. *Jul 16 21:33:22:955 2026 Router_ZHXXIE IKEV2/7/EVENT: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 [IPsec->IKE] Succeed to get IPsec SPI. *Jul 16 21:33:22:956 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Compute IPsec key material. *Jul 16 21:33:22:959 2026 Router_ZHXXIE IKEV2/7/EVENT: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Protect flow: *Jul 16 21:33:22:959 2026 Router_ZHXXIE IKEV2/7/EVENT: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Inbound flow: 0.0.0.0/0->0.0.0.0/0. *Jul 16 21:33:22:960 2026 Router_ZHXXIE IKEV2/7/EVENT: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Outbound flow: 0.0.0.0/0->0.0.0.0/0. *Jul 16 21:33:22:960 2026 Router_ZHXXIE IKEV2/7/EVENT: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 [IKE->IPsec] Send install IPsec sa request. *Jul 16 21:33:22:962 2026 Router_ZHXXIE IKEV2/7/EVENT: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 [IPsec->IKE] Succeed to install IPsec SA. *Jul 16 21:33:22:963 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Construct IDr payload: xx.xx.23.23 of type ID_IPV4_ADDR. *Jul 16 21:33:22:964 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 My authentication method is Pre-shared key. Generate authentication data. *Jul 16 21:33:22:965 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Construct AUTH payload. *Jul 16 21:33:22:969 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Construct CP payload: CFG_REPLY. *Jul 16 21:33:22:969 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Assigned address 192.168.200.10 from pool mate80. *Jul 16 21:33:22:970 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Attribute type: INTERNAL_IP4_ADDRESS. *Jul 16 21:33:22:970 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Data: 192.168.200.10, Length: 4. *Jul 16 21:33:22:970 2026 Router_ZHXXIE IKEV2/7/ERROR: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Unsupported Configuration payload attibuite INTERNAL_IP4_DNS, ignore it. *Jul 16 21:33:22:970 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: CFG_REPLY, length: 16. *Jul 16 21:33:22:970 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Construct NOTIFY payload: IKEV2_MESSAGE_ID_SYNC_SUPPORTED. *Jul 16 21:33:22:970 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 (Tunnel ID 443): (R) Current State: BUILD_AUTH. *Jul 16 21:33:22:971 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Construct NOTIFY payload: ESP_TFC_PADDING_NOT_SUPPORTED. *Jul 16 21:33:22:972 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Construct NOTIFY payload: NON_FIRST_FRAGMENTS_ALSO. *Jul 16 21:33:22:973 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Construct SA payload. *Jul 16 21:33:22:973 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Construct TSi payload. *Jul 16 21:33:22:974 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Construct TSr payload. *Jul 16 21:33:22:974 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 (Tunnel ID 443): (R) Current State: ESTABLISHED. *Jul 16 21:33:22:974 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 (Tunnel ID 443): (R) Current State: CHILD_ESTABLISHED. *Jul 16 21:33:22:974 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 (Tunnel ID 443): (R) Current State: READY. *Jul 16 21:33:22:975 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Build packet for encryption. *Jul 16 21:33:22:975 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Payload contents: *Jul 16 21:33:22:976 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 IDr Next payload: AUTH, Length: 12, Type: ID_IPV4_ADDR. *Jul 16 21:33:22:977 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 AUTH Next payload: CFG, Length: 40, Method: Pre-shared key. *Jul 16 21:33:22:977 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 CFG Next payload: NOTIFY, Length: 16, Type: CFG_REPLY. *Jul 16 21:33:22:977 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type INTERNAL_IP4_ADDRESS, Length 4. *Jul 16 21:33:22:977 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 NOTIFY Next payload: NOTIFY, Length: 8, Type: IKEV2_MESSAGE_ID_SYNC_SUPPORTED, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:33:22:978 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 NOTIFY Next payload: NOTIFY, Length: 8, Type: ESP_TFC_PADDING_NOT_SUPPORTED, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:33:22:979 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 NOTIFY Next payload: SA, Length: 8, Type: NON_FIRST_FRAGMENTS_ALSO, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:33:22:979 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 SA Next payload: TSi, Length: 44. *Jul 16 21:33:22:979 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last proposal: 0, Length: 40. *Jul 16 21:33:22:980 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Proposal: 1, Protocol: ESP, SPI size: 4, Transform number: 3. *Jul 16 21:33:22:980 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 8. *Jul 16 21:33:22:980 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: INTEG, Transform ID: AUTH-HMAC-SHA256-128. *Jul 16 21:33:22:980 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 12. *Jul 16 21:33:22:980 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: ENCR, Transform ID: AES-CBC. *Jul 16 21:33:22:980 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Key length: 256. *Jul 16 21:33:22:980 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0, Length: 8. *Jul 16 21:33:22:981 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: ESN, Transform ID: NO ESN. *Jul 16 21:33:22:981 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 TSi Next payload: TSr, Length: 24, Selector number: 1. *Jul 16 21:33:22:981 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 TS type: TS_IPV4_ADDR_RANGE, IP protocol: 0, Length: 16. *Jul 16 21:33:22:981 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Start port: 0, end port: 65535. *Jul 16 21:33:22:981 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Start address: 0.0.0.0, End address: 255.255.255.255. *Jul 16 21:33:22:981 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 TSr Next payload: NO_PAYLOAD, Length: 24, Selector number: 1. *Jul 16 21:33:22:982 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 TS type: TS_IPV4_ADDR_RANGE, IP protocol: 0, Length: 16. *Jul 16 21:33:22:982 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Start port: 0, end port: 65535. *Jul 16 21:33:22:984 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Start address: 0.0.0.0, End address: 255.255.255.255. *Jul 16 21:33:22:985 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Sending packet to 119.143.33.107 remote port 26156, local port 4500. *Jul 16 21:33:22:985 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 I-SPI: 823c79c1a5368eca R-SPI: 9be149258ff9a4f2 Message ID: 1 Exchange type: AUTH Flags: RESPONSE Next payload: ENCRYPTED, Length: 256. *Jul 16 21:33:22:986 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Sending an IPv4 packet. *Jul 16 21:33:22:986 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Sent response with message id 1, requests can be accepted from (2 ~ 2). *Jul 16 21:33:22:987 2026 Router_ZHXXIE IKEV2/7/TIMER: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 (Tunnel ID 443): IKE SA lifetime timer (86400 secs) started. *Jul 16 21:33:22:988 2026 Router_ZHXXIE IKEV2/7/EVENT: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 [IKE->IPSEC] Send add DPD request. *Jul 16 21:33:22:992 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 (Tunnel ID 443): Deleting negotiation context. *Jul 16 21:33:22:993 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 No duplicate IKE SA found. *Jul 16 21:33:22:998 2026 Router_ZHXXIE IKEV2/7/EVENT: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 [IKE->IPsec] Send switch IPsec sa request. %Jul 16 21:33:22:998 2026 Router_ZHXXIE IPSEC/6/IPSEC_SA_ESTABLISH: Established IPsec SA. The SA"s source address is xx.xx.23.23, destination address is 119.143.33.107, protocol is ESP, and SPI is 27689150. %Jul 16 21:33:22:998 2026 Router_ZHXXIE IPSEC/6/IPSEC_SA_ESTABLISH: Established IPsec SA. The SA"s source address is xx.xx.23.23, destination address is 119.143.33.107, protocol is ESP, and SPI is 3407685790. <Router_ZHXXIE> <Router_ZHXXIE> <Router_ZHXXIE> <Router_ZHXXIE> <Router_ZHXXIE> <Router_ZHXXIE> <Router_ZHXXIE> <Router_ZHXXIE> <Router_ZHXXIE> <Router_ZHXXIE> <Router_ZHXXIE> <Router_ZHXXIE> <Router_ZHXXIE> <Router_ZHXXIE> <Router_ZHXXIE>*Jul 16 21:33:53:177 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 New request activated. *Jul 16 21:33:53:177 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 (Tunnel ID 443): (I) Current State: READY. *Jul 16 21:33:53:177 2026 Router_ZHXXIE IKEV2/7/DPD-MESSAGE: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Construct empty payload for liveness check request. *Jul 16 21:33:53:177 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 (Tunnel ID 443): (I) Current State: INFO_BUILD. *Jul 16 21:33:53:177 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Build packet for encryption. *Jul 16 21:33:53:177 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Payload contents: *Jul 16 21:33:53:178 2026 Router_ZHXXIE IKEV2/7/DPD-MESSAGE: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Sending packet to 119.143.33.107 remote port 26156, local port 4500. *Jul 16 21:33:53:178 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 I-SPI: 823c79c1a5368eca R-SPI: 9be149258ff9a4f2 Message ID: 0 Exchange type: INFORMATIONAL Flags: REQUEST Next payload: ENCRYPTED, Length: 80. *Jul 16 21:33:53:178 2026 Router_ZHXXIE IKEV2/7/DPD-MESSAGE: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Sending an IPv4 packet. *Jul 16 21:33:53:253 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Received packet from 119.143.33.107 source port 26156 destination port 4500. *Jul 16 21:33:53:253 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 I-SPI: 823c79c1a5368eca R-SPI: 9be149258ff9a4f2 Message ID: 0 Exchange type: INFORMATIONAL Flags: RESPONSE, INITIATOR Next payload: ENCRYPTED, Length: 80. *Jul 16 21:33:53:253 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Payload contents: *Jul 16 21:33:53:253 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Parse the last payload (ENCRYPTED payload). *Jul 16 21:33:53:253 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Integrity check passed. *Jul 16 21:33:53:254 2026 Router_ZHXXIE IKEV2/7/DPD-MESSAGE: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Received liveness check response. *Jul 16 21:33:53:254 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 (Tunnel ID 443): (I) Current State: INFO_PROC. *Jul 16 21:33:53:254 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 (Tunnel ID 443): (I) Current State: READY. *Jul 16 21:33:53:254 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Processed response with message id 0, requests can be sent from (1 ~ 1).
===================== 以下为 log2.txt 相关信息 =============================
*Jul 16 21:43:59:294 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Received packet from 119.143.33.107 source port 26149 destination port 500. *Jul 16 21:43:59:294 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 I-SPI: 6850f9687969a6bc R-SPI: 0000000000000000 Message ID: 0 Exchange type: SA_INIT Flags: REQUEST, INITIATOR Next payload: SA, Length: 1080. *Jul 16 21:43:59:294 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 (Tunnel ID 444): (R) Current State: IDLE. *Jul 16 21:43:59:294 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Payload contents: *Jul 16 21:43:59:294 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 SA Next payload: KE, Length: 856. *Jul 16 21:43:59:294 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last proposal: 0x2, Length: 360. *Jul 16 21:43:59:294 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Proposal: 1, Protocol: IKE, SPI size: 0, Transform number: 38. *Jul 16 21:43:59:295 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:295 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CBC. *Jul 16 21:43:59:295 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:43:59:295 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:295 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CBC. *Jul 16 21:43:59:295 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:43:59:295 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:295 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CBC. *Jul 16 21:43:59:295 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:43:59:295 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:295 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CTR. *Jul 16 21:43:59:296 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:43:59:296 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:296 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CTR. *Jul 16 21:43:59:296 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:43:59:296 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:296 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CTR. *Jul 16 21:43:59:296 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:43:59:297 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:297 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CBC. *Jul 16 21:43:59:297 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:43:59:297 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:297 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CBC. *Jul 16 21:43:59:297 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:43:59:298 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:298 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CBC. *Jul 16 21:43:59:298 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:43:59:298 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:298 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CTR. *Jul 16 21:43:59:298 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:43:59:298 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:299 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CTR. *Jul 16 21:43:59:299 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:43:59:299 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:299 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CTR. *Jul 16 21:43:59:299 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:43:59:299 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:299 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: 3DES-CBC. *Jul 16 21:43:59:300 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:300 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: INTEG, Transform ID: AUTH-HMAC-SHA256-128. *Jul 16 21:43:59:300 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:300 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: INTEG, Transform ID: AUTH-HMAC-SHA384-192. *Jul 16 21:43:59:300 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:300 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: INTEG, Transform ID: AUTH-HMAC-SHA512-256. *Jul 16 21:43:59:300 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:300 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: INTEG, Transform ID: AUTH-HMAC-SHA1-96. *Jul 16 21:43:59:301 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:301 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: INTEG, Transform ID: AUTH-AES-XCBC-96. *Jul 16 21:43:59:301 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:301 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: INTEG, Transform ID: AUTH-AES-CMAC-96. *Jul 16 21:43:59:301 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:301 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-HMAC-SHA256. *Jul 16 21:43:59:301 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:302 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-HMAC-SHA384. *Jul 16 21:43:59:302 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:302 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-HMAC-SHA512. *Jul 16 21:43:59:302 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:302 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-AES128-XCBC. *Jul 16 21:43:59:302 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:302 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-AES128-CMAC. *Jul 16 21:43:59:302 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:303 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-HMAC-SHA1. *Jul 16 21:43:59:303 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:303 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 256-bit ECP/Group 19. *Jul 16 21:43:59:303 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:303 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 384-bit ECP/Group 20. *Jul 16 21:43:59:303 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:303 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 512-bit ECP/Group 21. *Jul 16 21:43:59:304 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:304 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: Unknown. *Jul 16 21:43:59:304 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:304 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: Unknown. *Jul 16 21:43:59:304 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:304 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: Unknown. *Jul 16 21:43:59:304 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:304 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: Unknown. *Jul 16 21:43:59:305 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:305 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: Unknown. *Jul 16 21:43:59:305 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:305 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 3072-bit MODP/Group 15. *Jul 16 21:43:59:305 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:305 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 4096-bit MODP/Group 16. *Jul 16 21:43:59:305 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:306 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 6144-bit MODP/Group 17. *Jul 16 21:43:59:306 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:306 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 8192-bit MODP/Group 18. *Jul 16 21:43:59:306 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0, Length: 8. *Jul 16 21:43:59:306 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 2048-bit MODP/Group 14. *Jul 16 21:43:59:306 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last proposal: 0, Length: 492. *Jul 16 21:43:59:306 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Proposal: 2, Protocol: IKE, SPI size: 0, Transform number: 47. *Jul 16 21:43:59:307 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:307 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-GCM-16. *Jul 16 21:43:59:307 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:43:59:307 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:307 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-GCM-16. *Jul 16 21:43:59:307 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:43:59:307 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:308 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-GCM-16. *Jul 16 21:43:59:308 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:43:59:308 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:308 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CCM-16. *Jul 16 21:43:59:308 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:43:59:308 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:308 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CCM-16. *Jul 16 21:43:59:308 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:43:59:309 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:309 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CCM-16. *Jul 16 21:43:59:309 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:43:59:309 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:309 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: Unknown. *Jul 16 21:43:59:309 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:309 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CCM-16. *Jul 16 21:43:59:310 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:43:59:310 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:310 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CCM-16. *Jul 16 21:43:59:310 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:43:59:310 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:310 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CCM-16. *Jul 16 21:43:59:310 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:43:59:311 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:311 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-GCM-12. *Jul 16 21:43:59:311 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:43:59:311 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:311 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-GCM-12. *Jul 16 21:43:59:311 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:43:59:311 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:311 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-GCM-12. *Jul 16 21:43:59:312 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:43:59:312 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:312 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-GCM-8. *Jul 16 21:43:59:312 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:43:59:312 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:312 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-GCM-8. *Jul 16 21:43:59:312 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:43:59:313 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:313 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-GCM-8. *Jul 16 21:43:59:313 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:43:59:313 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:313 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CCM-12. *Jul 16 21:43:59:313 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:43:59:313 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:313 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CCM-12. *Jul 16 21:43:59:314 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:43:59:314 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:314 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CCM-12. *Jul 16 21:43:59:314 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:43:59:314 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:314 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CCM-8. *Jul 16 21:43:59:314 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:43:59:315 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:315 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CCM-8. *Jul 16 21:43:59:315 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:43:59:315 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:315 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CCM-8. *Jul 16 21:43:59:315 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:43:59:315 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:316 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CCM-8. *Jul 16 21:43:59:316 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:43:59:316 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:316 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CCM-8. *Jul 16 21:43:59:316 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:43:59:316 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:316 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CCM-8. *Jul 16 21:43:59:316 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:43:59:317 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:317 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CCM-12. *Jul 16 21:43:59:317 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:43:59:317 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:317 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CCM-12. *Jul 16 21:43:59:317 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:43:59:317 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:318 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CCM-12. *Jul 16 21:43:59:318 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:43:59:318 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:318 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-HMAC-SHA256. *Jul 16 21:43:59:318 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:318 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-HMAC-SHA384. *Jul 16 21:43:59:318 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:319 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-HMAC-SHA512. *Jul 16 21:43:59:319 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:319 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-AES128-XCBC. *Jul 16 21:43:59:319 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:319 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-AES128-CMAC. *Jul 16 21:43:59:319 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:319 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-HMAC-SHA1. *Jul 16 21:43:59:319 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:320 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 256-bit ECP/Group 19. *Jul 16 21:43:59:320 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:320 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 384-bit ECP/Group 20. *Jul 16 21:43:59:320 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:320 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 512-bit ECP/Group 21. *Jul 16 21:43:59:320 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:320 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: Unknown. *Jul 16 21:43:59:321 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:321 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: Unknown. *Jul 16 21:43:59:321 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:321 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: Unknown. *Jul 16 21:43:59:321 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:321 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: Unknown. *Jul 16 21:43:59:321 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:321 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: Unknown. *Jul 16 21:43:59:322 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:322 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 3072-bit MODP/Group 15. *Jul 16 21:43:59:322 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:322 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 4096-bit MODP/Group 16. *Jul 16 21:43:59:322 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:322 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 6144-bit MODP/Group 17. *Jul 16 21:43:59:322 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:323 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 8192-bit MODP/Group 18. *Jul 16 21:43:59:323 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0, Length: 8. *Jul 16 21:43:59:323 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 2048-bit MODP/Group 14. *Jul 16 21:43:59:323 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 KE Next payload: NONCE, Length: 72, DH: 256-bit ECP/Group 19. *Jul 16 21:43:59:334 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 NONCE Next payload: NOTIFY, Length: 36. *Jul 16 21:43:59:334 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 NOTIFY Next payload: NOTIFY, Length: 28, Type: NAT_DETECTION_SOURCE_IP, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:43:59:334 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 NOTIFY Next payload: NOTIFY, Length: 28, Type: NAT_DETECTION_DESTINATION_IP, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:43:59:335 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 NOTIFY Next payload: NOTIFY, Length: 8, Type: Unknown, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:43:59:335 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 NOTIFY Next payload: NOTIFY, Length: 16, Type: Unknown, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:43:59:335 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 NOTIFY Next payload: NO_PAYLOAD, Length: 8, Type: Unknown, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:43:59:335 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Request has message id 0, expected from (0 ~ 0). *Jul 16 21:43:59:336 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Search policy with vrf 0, local address xx.xx.23.23. *Jul 16 21:43:59:336 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Policy 10 matched. *Jul 16 21:43:59:336 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Process SA payload. *Jul 16 21:43:59:336 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Process KE payload. *Jul 16 21:43:59:337 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Process NAT discovery notify. *Jul 16 21:43:59:337 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Peer is behind NAT. *Jul 16 21:43:59:337 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 (Tunnel ID 444): (R) Current State: PROC_INIT. *Jul 16 21:43:59:337 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Search policy with vrf 0, local address xx.xx.23.23. *Jul 16 21:43:59:338 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Policy 10 matched. *Jul 16 21:43:59:339 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Construct SA payload. *Jul 16 21:43:59:339 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Proposal 1. *Jul 16 21:43:59:339 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Transform ENCR AES-CBC 128. *Jul 16 21:43:59:339 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Transform INTEG AUTH-HMAC-SHA256-128. *Jul 16 21:43:59:340 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Transform PRF PRF-HMAC-SHA256. *Jul 16 21:43:59:340 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Transform D-H 256-bit ECP/Group 19. *Jul 16 21:43:59:384 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Compute DH public key, use 256-bit ECP/Group 19. *Jul 16 21:43:59:385 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Construct KE payload. *Jul 16 21:43:59:385 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Construct NONCE payload. *Jul 16 21:43:59:385 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Construct NOTIFY payload: NAT_DETECTION_SOURCE_IP. *Jul 16 21:43:59:386 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Construct NOTIFY payload: NAT_DETECTION_DESTINATION_IP. *Jul 16 21:43:59:387 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Construct NOTIFY payload: HTTP_CERT_LOOKUP_SUPPORTED. *Jul 16 21:43:59:387 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Construct CERTREQ payload. *Jul 16 21:43:59:388 2026 Router_ZHXXIE IKEV2/7/ERROR: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Construct CERTREQ payload failed. *Jul 16 21:43:59:436 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Calculate SKEYSEED. *Jul 16 21:43:59:437 2026 Router_ZHXXIE IKEV2/7/TIMER: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Responder: start 30 secs wait auth timer. *Jul 16 21:43:59:437 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 (Tunnel ID 444): (R) Current State: BUILD_INIT. *Jul 16 21:43:59:437 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Payload contents: *Jul 16 21:43:59:438 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 SA Next payload: KE, Length: 48. *Jul 16 21:43:59:438 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last proposal: 0, Length: 44. *Jul 16 21:43:59:439 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Proposal: 1, Protocol: IKE, SPI size: 0, Transform number: 4. *Jul 16 21:43:59:440 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:440 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CBC. *Jul 16 21:43:59:441 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:43:59:441 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:441 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: INTEG, Transform ID: AUTH-HMAC-SHA256-128. *Jul 16 21:43:59:441 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:442 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-HMAC-SHA256. *Jul 16 21:43:59:443 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0, Length: 8. *Jul 16 21:43:59:443 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 256-bit ECP/Group 19. *Jul 16 21:43:59:444 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 KE Next payload: NONCE, Length: 72, DH: 256-bit ECP/Group 19. *Jul 16 21:43:59:445 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 NONCE Next payload: NOTIFY, Length: 36. *Jul 16 21:43:59:445 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 NOTIFY Next payload: NOTIFY, Length: 28, Type: NAT_DETECTION_SOURCE_IP, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:43:59:445 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 NOTIFY Next payload: NOTIFY, Length: 28, Type: NAT_DETECTION_DESTINATION_IP, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:43:59:445 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 NOTIFY Next payload: NO_PAYLOAD, Length: 8, Type: HTTP_CERT_LOOKUP_SUPPORTED, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:43:59:445 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Sending packet to 119.143.33.107 remote port 26149, local port 500. *Jul 16 21:43:59:446 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 I-SPI: 6850f9687969a6bc R-SPI: ea849a5f9427991c Message ID: 0 Exchange type: SA_INIT Flags: RESPONSE Next payload: SA, Length: 248. *Jul 16 21:43:59:447 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Sending an IPv4 packet. *Jul 16 21:43:59:447 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Sent response with message id 0, requests can be accepted from (1 ~ 1). *Jul 16 21:43:59:483 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Received packet from 119.143.33.107 source port 26156 destination port 4500. *Jul 16 21:43:59:483 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 I-SPI: 6850f9687969a6bc R-SPI: ea849a5f9427991c Message ID: 1 Exchange type: AUTH Flags: REQUEST, INITIATOR Next payload: ENCRYPTED, Length: 480. *Jul 16 21:43:59:484 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Payload contents: *Jul 16 21:43:59:484 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Parse the last payload (ENCRYPTED payload). *Jul 16 21:43:59:484 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Integrity check passed. *Jul 16 21:43:59:484 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 IDi Next payload: AUTH, Length: 12, Type: ID_IPV4_ADDR. *Jul 16 21:43:59:484 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 AUTH Next payload: CFG, Length: 40, Method: Pre-shared key. *Jul 16 21:43:59:485 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 CFG Next payload: SA, Length: 16, Type: CFG_REQUEST. *Jul 16 21:43:59:485 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type INTERNAL_IP4_ADDRESS, Length 0. *Jul 16 21:43:59:485 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type INTERNAL_IP4_DNS, Length 0. *Jul 16 21:43:59:485 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 SA Next payload: TSi, Length: 156. *Jul 16 21:43:59:485 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last proposal: 0x2, Length: 96. *Jul 16 21:43:59:485 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Proposal: 1, Protocol: ESP, SPI size: 4, Transform number: 9. *Jul 16 21:43:59:486 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:486 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: ENCR, Transform ID: AES-CBC. *Jul 16 21:43:59:486 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Key length: 128. *Jul 16 21:43:59:486 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:486 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: ENCR, Transform ID: AES-CBC. *Jul 16 21:43:59:486 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Key length: 192. *Jul 16 21:43:59:486 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:486 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: ENCR, Transform ID: AES-CBC. *Jul 16 21:43:59:486 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Key length: 256. *Jul 16 21:43:59:487 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:487 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: INTEG, Transform ID: AUTH-HMAC-SHA256-128. *Jul 16 21:43:59:487 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:487 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: INTEG, Transform ID: AUTH-HMAC-SHA384-192. *Jul 16 21:43:59:487 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:487 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: INTEG, Transform ID: AUTH-HMAC-SHA512-256. *Jul 16 21:43:59:487 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:488 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: INTEG, Transform ID: AUTH-HMAC-SHA1-96. *Jul 16 21:43:59:488 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 8. *Jul 16 21:43:59:488 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: INTEG, Transform ID: AUTH-AES-XCBC-96. *Jul 16 21:43:59:488 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0, Length: 8. *Jul 16 21:43:59:488 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: ESN, Transform ID: NO ESN. *Jul 16 21:43:59:488 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last proposal: 0, Length: 56. *Jul 16 21:43:59:488 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Proposal: 2, Protocol: ESP, SPI size: 4, Transform number: 4. *Jul 16 21:43:59:489 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:489 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: ENCR, Transform ID: AES-GCM-16. *Jul 16 21:43:59:489 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Key length: 128. *Jul 16 21:43:59:489 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:489 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: ENCR, Transform ID: AES-GCM-16. *Jul 16 21:43:59:489 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Key length: 192. *Jul 16 21:43:59:489 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 12. *Jul 16 21:43:59:490 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: ENCR, Transform ID: AES-GCM-16. *Jul 16 21:43:59:490 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Key length: 256. *Jul 16 21:43:59:490 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0, Length: 8. *Jul 16 21:43:59:490 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: ESN, Transform ID: NO ESN. *Jul 16 21:43:59:490 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 TSi Next payload: TSr, Length: 24, Selector number: 1. *Jul 16 21:43:59:490 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 TS type: TS_IPV4_ADDR_RANGE, IP protocol: 0, Length: 16. *Jul 16 21:43:59:490 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Start port: 0, end port: 65535. *Jul 16 21:43:59:491 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Start address: 0.0.0.0, End address: 255.255.255.255. *Jul 16 21:43:59:491 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 TSr Next payload: NOTIFY, Length: 24, Selector number: 1. *Jul 16 21:43:59:491 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 TS type: TS_IPV4_ADDR_RANGE, IP protocol: 0, Length: 16. *Jul 16 21:43:59:491 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Start port: 0, end port: 65535. *Jul 16 21:43:59:492 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Start address: 0.0.0.0, End address: 255.255.255.255. *Jul 16 21:43:59:493 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 NOTIFY Next payload: NOTIFY, Length: 8, Type: MOBIKE_SUPPORTED, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:43:59:494 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 NOTIFY Next payload: NOTIFY, Length: 12, Type: ADDITIONAL_IP4_ADDRESS, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:43:59:497 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 NOTIFY Next payload: NOTIFY, Length: 24, Type: ADDITIONAL_IP6_ADDRESS, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:43:59:498 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 NOTIFY Next payload: NOTIFY, Length: 24, Type: ADDITIONAL_IP6_ADDRESS, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:43:59:498 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 NOTIFY Next payload: NOTIFY, Length: 24, Type: ADDITIONAL_IP6_ADDRESS, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:43:59:498 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 NOTIFY Next payload: NOTIFY, Length: 24, Type: ADDITIONAL_IP6_ADDRESS, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:43:59:499 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 NOTIFY Next payload: NOTIFY, Length: 8, Type: Unknown, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:43:59:499 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 NOTIFY Next payload: NO_PAYLOAD, Length: 8, Type: IKEV2_MESSAGE_ID_SYNC_SUPPORTED, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:43:59:499 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Request has message id 1, expected from (1 ~ 1). *Jul 16 21:43:59:500 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 (Tunnel ID 444): (R) Current State: PROC_AUTH. *Jul 16 21:43:59:501 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Process ID payload. *Jul 16 21:43:59:503 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Searching profile based on peer"s identity ID_IPV4_ADDR of type 10.35.108.58. *Jul 16 21:43:59:505 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Found matching profile mate80. *Jul 16 21:43:59:506 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Getting pre-shared key from profile keychain mate80. *Jul 16 21:43:59:507 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Getting pre-shared key by identity ID_IPV4_ADDR of type 10.35.108.58. *Jul 16 21:43:59:508 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Getting pre-shared key by address 119.143.33.107. *Jul 16 21:43:59:509 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Peer mate80 matched. *Jul 16 21:43:59:510 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Verifing peer"s authentication data. *Jul 16 21:43:59:510 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Verify peer"s authentication data passed. *Jul 16 21:43:59:512 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 [IKE->AAA] Send authorization request. *Jul 16 21:43:59:516 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 [AAA->IKE] Get authorized data from AAA. *Jul 16 21:43:59:516 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 process CP payload: CFG_REQUEST. *Jul 16 21:43:59:518 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Process TSi payload. *Jul 16 21:43:59:518 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Process TSr payload. *Jul 16 21:43:59:518 2026 Router_ZHXXIE IKEV2/7/EVENT: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 [IKE->IPsec] Send get IPsec policy request. *Jul 16 21:43:59:526 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Construct NOTIFY payload: TS_UNACCEPTABLE. *Jul 16 21:43:59:527 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Construct IDr payload: xx.xx.23.23 of type ID_IPV4_ADDR. *Jul 16 21:43:59:528 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 My authentication method is Pre-shared key. Generate authentication data. *Jul 16 21:43:59:529 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Construct AUTH payload. *Jul 16 21:43:59:529 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Construct CP payload: CFG_REPLY. *Jul 16 21:43:59:529 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Assigned address 192.168.200.10 from pool mate80. *Jul 16 21:43:59:529 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Attribute type: INTERNAL_IP4_ADDRESS. *Jul 16 21:43:59:529 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Data: 192.168.200.10, Length: 4. *Jul 16 21:43:59:530 2026 Router_ZHXXIE IKEV2/7/ERROR: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Unsupported Configuration payload attibuite INTERNAL_IP4_DNS, ignore it. *Jul 16 21:43:59:530 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: CFG_REPLY, length: 16. *Jul 16 21:43:59:530 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Construct NOTIFY payload: IKEV2_MESSAGE_ID_SYNC_SUPPORTED. *Jul 16 21:43:59:530 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 (Tunnel ID 444): (R) Current State: BUILD_AUTH. *Jul 16 21:43:59:531 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 (Tunnel ID 444): (R) Current State: ESTABLISHED. *Jul 16 21:43:59:531 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 (Tunnel ID 444): (R) Current State: READY. *Jul 16 21:43:59:532 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Build packet for encryption. *Jul 16 21:43:59:533 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Payload contents: *Jul 16 21:43:59:534 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 NOTIFY Next payload: IDr, Length: 8, Type: TS_UNACCEPTABLE, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:43:59:534 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 IDr Next payload: AUTH, Length: 12, Type: ID_IPV4_ADDR. *Jul 16 21:43:59:534 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 AUTH Next payload: CFG, Length: 40, Method: Pre-shared key. *Jul 16 21:43:59:534 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 CFG Next payload: NOTIFY, Length: 16, Type: CFG_REPLY. *Jul 16 21:43:59:535 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type INTERNAL_IP4_ADDRESS, Length 4. *Jul 16 21:43:59:536 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 NOTIFY Next payload: NO_PAYLOAD, Length: 8, Type: IKEV2_MESSAGE_ID_SYNC_SUPPORTED, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:43:59:537 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Sending packet to 119.143.33.107 remote port 26156, local port 4500. *Jul 16 21:43:59:537 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 I-SPI: 6850f9687969a6bc R-SPI: ea849a5f9427991c Message ID: 1 Exchange type: AUTH Flags: RESPONSE Next payload: ENCRYPTED, Length: 160. *Jul 16 21:43:59:537 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Sending an IPv4 packet. *Jul 16 21:43:59:538 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Child SA(Msg ID 1) deleted. *Jul 16 21:43:59:541 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Sent response with message id 1, requests can be accepted from (2 ~ 2). *Jul 16 21:43:59:542 2026 Router_ZHXXIE IKEV2/7/TIMER: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 (Tunnel ID 444): IKE SA lifetime timer (86400 secs) started. *Jul 16 21:43:59:545 2026 Router_ZHXXIE IKEV2/7/EVENT: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 [IKE->IPSEC] Send add DPD request. *Jul 16 21:43:59:548 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 (Tunnel ID 444): Deleting negotiation context. *Jul 16 21:43:59:549 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 No duplicate IKE SA found. *Jul 16 21:43:59:831 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Received packet from 119.143.33.107 source port 26156 destination port 4500. *Jul 16 21:43:59:831 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 I-SPI: 6850f9687969a6bc R-SPI: ea849a5f9427991c Message ID: 2 Exchange type: INFORMATIONAL Flags: REQUEST, INITIATOR Next payload: ENCRYPTED, Length: 80. *Jul 16 21:43:59:831 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Payload contents: *Jul 16 21:43:59:832 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Parse the last payload (ENCRYPTED payload). *Jul 16 21:43:59:832 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Integrity check passed. *Jul 16 21:43:59:832 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 DELETE Next payload: NO_PAYLOAD, Length: 8, Protocol: IKE, SPI size: 0, SPI number: 0. *Jul 16 21:43:59:832 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Request has message id 2, expected from (2 ~ 2). *Jul 16 21:43:59:833 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 (Tunnel ID 444): (R) Current State: READY. *Jul 16 21:43:59:833 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Process Delete payload. *Jul 16 21:43:59:833 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 (Tunnel ID 444): (R) Current State: INFO_PROC. *Jul 16 21:43:59:833 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Construct DELETE payload. *Jul 16 21:43:59:833 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 (Tunnel ID 444): (R) Current State: INFO_BUILD. *Jul 16 21:43:59:833 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 (Tunnel ID 444): (R) Current State: READY. *Jul 16 21:43:59:833 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Build packet for encryption. *Jul 16 21:43:59:833 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Payload contents: *Jul 16 21:43:59:833 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 DELETE Next payload: NO_PAYLOAD, Length: 8, Protocol: IKE, SPI size: 0, SPI number: 0. *Jul 16 21:43:59:834 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Sending packet to 119.143.33.107 remote port 26156, local port 4500. *Jul 16 21:43:59:834 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 I-SPI: 6850f9687969a6bc R-SPI: ea849a5f9427991c Message ID: 2 Exchange type: INFORMATIONAL Flags: RESPONSE Next payload: ENCRYPTED, Length: 80. *Jul 16 21:43:59:834 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Sending an IPv4 packet. *Jul 16 21:43:59:836 2026 Router_ZHXXIE IKEV2/7/EVENT: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 [IKE->IPsec] Send delete DPD request. *Jul 16 21:43:59:838 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 (Tunnel ID 444): IKE SA deleted. <Router_ZHXXIE>%Jul 16 21:44:05:281 2026 Router_ZHXXIE IPSEC/6/IPSEC_SA_ESTABLISH: Established IPsec SA. The SA"s source address is xx.xx.23.23, destination address is 183.53.159.64, protocol is ESP, and SPI is 289483048. %Jul 16 21:44:05:281 2026 Router_ZHXXIE IPSEC/6/IPSEC_SA_ESTABLISH: Established IPsec SA. The SA"s source address is xx.xx.23.23, destination address is 183.53.159.64, protocol is ESP, and SPI is 3247963205. <Router_ZHXXIE>*Jul 16 21:44:12:974 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Received packet from 119.143.33.107 source port 26149 destination port 500. *Jul 16 21:44:12:974 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 I-SPI: 7f1e9500934ac323 R-SPI: 0000000000000000 Message ID: 0 Exchange type: SA_INIT Flags: REQUEST, INITIATOR Next payload: SA, Length: 1080. *Jul 16 21:44:12:974 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 (Tunnel ID 445): (R) Current State: IDLE. *Jul 16 21:44:12:975 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Payload contents: *Jul 16 21:44:12:975 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 SA Next payload: KE, Length: 856. *Jul 16 21:44:12:975 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last proposal: 0x2, Length: 360. *Jul 16 21:44:12:975 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Proposal: 1, Protocol: IKE, SPI size: 0, Transform number: 38. *Jul 16 21:44:12:975 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:975 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CBC. *Jul 16 21:44:12:975 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:44:12:975 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:975 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CBC. *Jul 16 21:44:12:975 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:44:12:975 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:976 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CBC. *Jul 16 21:44:12:976 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:44:12:976 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:976 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CTR. *Jul 16 21:44:12:976 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:44:12:976 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:976 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CTR. *Jul 16 21:44:12:977 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:44:12:977 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:977 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CTR. *Jul 16 21:44:12:977 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:44:12:977 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:977 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CBC. *Jul 16 21:44:12:978 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:44:12:978 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:978 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CBC. *Jul 16 21:44:12:978 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:44:12:978 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:978 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CBC. *Jul 16 21:44:12:978 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:44:12:979 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:979 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CTR. *Jul 16 21:44:12:979 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:44:12:979 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:979 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CTR. *Jul 16 21:44:12:979 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:44:12:979 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:979 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CTR. *Jul 16 21:44:12:980 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:44:12:980 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:12:980 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: 3DES-CBC. *Jul 16 21:44:12:980 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:12:980 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: INTEG, Transform ID: AUTH-HMAC-SHA256-128. *Jul 16 21:44:12:980 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:12:980 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: INTEG, Transform ID: AUTH-HMAC-SHA384-192. *Jul 16 21:44:12:981 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:12:981 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: INTEG, Transform ID: AUTH-HMAC-SHA512-256. *Jul 16 21:44:12:981 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:12:981 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: INTEG, Transform ID: AUTH-HMAC-SHA1-96. *Jul 16 21:44:12:981 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:12:981 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: INTEG, Transform ID: AUTH-AES-XCBC-96. *Jul 16 21:44:12:981 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:12:982 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: INTEG, Transform ID: AUTH-AES-CMAC-96. *Jul 16 21:44:12:982 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:12:982 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-HMAC-SHA256. *Jul 16 21:44:12:982 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:12:982 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-HMAC-SHA384. *Jul 16 21:44:12:982 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:12:982 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-HMAC-SHA512. *Jul 16 21:44:12:983 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:12:983 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-AES128-XCBC. *Jul 16 21:44:12:983 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:12:983 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-AES128-CMAC. *Jul 16 21:44:12:983 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:12:983 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-HMAC-SHA1. *Jul 16 21:44:12:983 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:12:984 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 256-bit ECP/Group 19. *Jul 16 21:44:12:984 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:12:984 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 384-bit ECP/Group 20. *Jul 16 21:44:12:984 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:12:984 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 512-bit ECP/Group 21. *Jul 16 21:44:12:984 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:12:984 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: Unknown. *Jul 16 21:44:12:984 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:12:985 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: Unknown. *Jul 16 21:44:12:985 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:12:985 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: Unknown. *Jul 16 21:44:12:985 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:12:985 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: Unknown. *Jul 16 21:44:12:985 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:12:986 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: Unknown. *Jul 16 21:44:12:986 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:12:986 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 3072-bit MODP/Group 15. *Jul 16 21:44:12:986 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:12:986 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 4096-bit MODP/Group 16. *Jul 16 21:44:12:986 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:12:986 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 6144-bit MODP/Group 17. *Jul 16 21:44:12:986 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:12:987 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 8192-bit MODP/Group 18. *Jul 16 21:44:12:987 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0, Length: 8. *Jul 16 21:44:12:987 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 2048-bit MODP/Group 14. *Jul 16 21:44:12:987 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last proposal: 0, Length: 492. *Jul 16 21:44:12:987 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Proposal: 2, Protocol: IKE, SPI size: 0, Transform number: 47. *Jul 16 21:44:12:987 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:987 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-GCM-16. *Jul 16 21:44:12:988 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:44:12:988 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:988 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-GCM-16. *Jul 16 21:44:12:988 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:44:12:988 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:988 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-GCM-16. *Jul 16 21:44:12:988 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:44:12:989 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:989 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CCM-16. *Jul 16 21:44:12:989 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:44:12:989 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:989 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CCM-16. *Jul 16 21:44:12:989 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:44:12:989 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:990 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CCM-16. *Jul 16 21:44:12:990 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:44:12:990 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:12:990 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: Unknown. *Jul 16 21:44:12:990 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:990 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CCM-16. *Jul 16 21:44:12:990 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:44:12:990 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:991 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CCM-16. *Jul 16 21:44:12:991 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:44:12:991 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:991 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CCM-16. *Jul 16 21:44:12:991 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:44:12:991 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:991 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-GCM-12. *Jul 16 21:44:12:992 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:44:12:992 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:992 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-GCM-12. *Jul 16 21:44:12:992 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:44:12:992 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:992 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-GCM-12. *Jul 16 21:44:12:992 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:44:12:993 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:993 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-GCM-8. *Jul 16 21:44:12:993 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:44:12:993 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:993 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-GCM-8. *Jul 16 21:44:12:993 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:44:12:993 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:993 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-GCM-8. *Jul 16 21:44:12:994 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:44:12:994 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:994 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CCM-12. *Jul 16 21:44:12:994 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:44:12:994 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:994 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CCM-12. *Jul 16 21:44:12:994 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:44:12:995 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:995 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CCM-12. *Jul 16 21:44:12:995 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:44:12:995 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:995 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CCM-8. *Jul 16 21:44:12:995 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:44:12:995 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:996 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CCM-8. *Jul 16 21:44:12:996 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:44:12:996 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:996 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CCM-8. *Jul 16 21:44:12:996 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:44:12:996 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:996 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CCM-8. *Jul 16 21:44:12:996 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:44:12:997 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:997 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CCM-8. *Jul 16 21:44:12:997 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:44:12:997 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:997 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CCM-8. *Jul 16 21:44:12:997 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:44:12:997 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:998 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CCM-12. *Jul 16 21:44:12:998 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:44:12:998 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:998 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CCM-12. *Jul 16 21:44:12:998 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 192. *Jul 16 21:44:12:998 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:12:998 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: CAMELLIA-CCM-12. *Jul 16 21:44:12:999 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 256. *Jul 16 21:44:12:999 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:12:999 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-HMAC-SHA256. *Jul 16 21:44:12:999 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:12:999 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-HMAC-SHA384. *Jul 16 21:44:12:999 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:12:999 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-HMAC-SHA512. *Jul 16 21:44:13:000 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:13:000 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-AES128-XCBC. *Jul 16 21:44:13:000 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:13:000 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-AES128-CMAC. *Jul 16 21:44:13:000 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:13:000 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-HMAC-SHA1. *Jul 16 21:44:13:000 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:13:000 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 256-bit ECP/Group 19. *Jul 16 21:44:13:001 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:13:001 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 384-bit ECP/Group 20. *Jul 16 21:44:13:001 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:13:001 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 512-bit ECP/Group 21. *Jul 16 21:44:13:001 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:13:001 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: Unknown. *Jul 16 21:44:13:001 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:13:002 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: Unknown. *Jul 16 21:44:13:002 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:13:002 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: Unknown. *Jul 16 21:44:13:002 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:13:002 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: Unknown. *Jul 16 21:44:13:002 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:13:002 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: Unknown. *Jul 16 21:44:13:003 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:13:003 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 3072-bit MODP/Group 15. *Jul 16 21:44:13:003 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:13:003 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 4096-bit MODP/Group 16. *Jul 16 21:44:13:003 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:13:003 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 6144-bit MODP/Group 17. *Jul 16 21:44:13:003 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:13:003 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 8192-bit MODP/Group 18. *Jul 16 21:44:13:004 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0, Length: 8. *Jul 16 21:44:13:004 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 2048-bit MODP/Group 14. *Jul 16 21:44:13:004 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 KE Next payload: NONCE, Length: 72, DH: 256-bit ECP/Group 19. *Jul 16 21:44:13:004 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 NONCE Next payload: NOTIFY, Length: 36. *Jul 16 21:44:13:004 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 NOTIFY Next payload: NOTIFY, Length: 28, Type: NAT_DETECTION_SOURCE_IP, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:44:13:004 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 NOTIFY Next payload: NOTIFY, Length: 28, Type: NAT_DETECTION_DESTINATION_IP, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:44:13:004 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 NOTIFY Next payload: NOTIFY, Length: 8, Type: Unknown, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:44:13:005 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 NOTIFY Next payload: NOTIFY, Length: 16, Type: Unknown, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:44:13:005 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 NOTIFY Next payload: NO_PAYLOAD, Length: 8, Type: Unknown, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:44:13:005 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Request has message id 0, expected from (0 ~ 0). *Jul 16 21:44:13:005 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Search policy with vrf 0, local address xx.xx.23.23. *Jul 16 21:44:13:005 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Policy 10 matched. *Jul 16 21:44:13:005 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Process SA payload. *Jul 16 21:44:13:006 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Process KE payload. *Jul 16 21:44:13:006 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Process NAT discovery notify. *Jul 16 21:44:13:006 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Peer is behind NAT. *Jul 16 21:44:13:006 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 (Tunnel ID 445): (R) Current State: PROC_INIT. *Jul 16 21:44:13:006 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Search policy with vrf 0, local address xx.xx.23.23. *Jul 16 21:44:13:006 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Policy 10 matched. *Jul 16 21:44:13:007 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Construct SA payload. *Jul 16 21:44:13:007 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Proposal 1. *Jul 16 21:44:13:007 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Transform ENCR AES-CBC 128. *Jul 16 21:44:13:007 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Transform INTEG AUTH-HMAC-SHA256-128. *Jul 16 21:44:13:007 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Transform PRF PRF-HMAC-SHA256. *Jul 16 21:44:13:007 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Transform D-H 256-bit ECP/Group 19. *Jul 16 21:44:13:024 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Compute DH public key, use 256-bit ECP/Group 19. *Jul 16 21:44:13:025 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Construct KE payload. *Jul 16 21:44:13:025 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Construct NONCE payload. *Jul 16 21:44:13:025 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Construct NOTIFY payload: NAT_DETECTION_SOURCE_IP. *Jul 16 21:44:13:025 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Construct NOTIFY payload: NAT_DETECTION_DESTINATION_IP. *Jul 16 21:44:13:025 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Construct NOTIFY payload: HTTP_CERT_LOOKUP_SUPPORTED. *Jul 16 21:44:13:026 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Construct CERTREQ payload. *Jul 16 21:44:13:026 2026 Router_ZHXXIE IKEV2/7/ERROR: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Construct CERTREQ payload failed. *Jul 16 21:44:13:044 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Calculate SKEYSEED. *Jul 16 21:44:13:044 2026 Router_ZHXXIE IKEV2/7/TIMER: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Responder: start 30 secs wait auth timer. *Jul 16 21:44:13:045 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 (Tunnel ID 445): (R) Current State: BUILD_INIT. *Jul 16 21:44:13:045 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Payload contents: *Jul 16 21:44:13:045 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 SA Next payload: KE, Length: 48. *Jul 16 21:44:13:045 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last proposal: 0, Length: 44. *Jul 16 21:44:13:045 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Proposal: 1, Protocol: IKE, SPI size: 0, Transform number: 4. *Jul 16 21:44:13:045 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 12. *Jul 16 21:44:13:045 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: ENCR, Transform ID: AES-CBC. *Jul 16 21:44:13:046 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Key length: 128. *Jul 16 21:44:13:046 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:13:046 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: INTEG, Transform ID: AUTH-HMAC-SHA256-128. *Jul 16 21:44:13:046 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0x3, Length: 8. *Jul 16 21:44:13:046 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: PRF, Transform ID: PRF-HMAC-SHA256. *Jul 16 21:44:13:046 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Last transform: 0, Length: 8. *Jul 16 21:44:13:047 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Type: D-H, Transform ID: 256-bit ECP/Group 19. *Jul 16 21:44:13:047 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 KE Next payload: NONCE, Length: 72, DH: 256-bit ECP/Group 19. *Jul 16 21:44:13:047 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 NONCE Next payload: NOTIFY, Length: 36. *Jul 16 21:44:13:047 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 NOTIFY Next payload: NOTIFY, Length: 28, Type: NAT_DETECTION_SOURCE_IP, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:44:13:047 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 NOTIFY Next payload: NOTIFY, Length: 28, Type: NAT_DETECTION_DESTINATION_IP, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:44:13:047 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 NOTIFY Next payload: NO_PAYLOAD, Length: 8, Type: HTTP_CERT_LOOKUP_SUPPORTED, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:44:13:048 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Sending packet to 119.143.33.107 remote port 26149, local port 500. *Jul 16 21:44:13:048 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 I-SPI: 7f1e9500934ac323 R-SPI: 6aeced1d6312bac5 Message ID: 0 Exchange type: SA_INIT Flags: RESPONSE Next payload: SA, Length: 248. *Jul 16 21:44:13:048 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Sending an IPv4 packet. *Jul 16 21:44:13:048 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Sent response with message id 0, requests can be accepted from (1 ~ 1). *Jul 16 21:44:13:243 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Received packet from 119.143.33.107 source port 26156 destination port 4500. *Jul 16 21:44:13:243 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 I-SPI: 7f1e9500934ac323 R-SPI: 6aeced1d6312bac5 Message ID: 1 Exchange type: AUTH Flags: REQUEST, INITIATOR Next payload: ENCRYPTED, Length: 480. *Jul 16 21:44:13:243 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Payload contents: *Jul 16 21:44:13:243 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Parse the last payload (ENCRYPTED payload). *Jul 16 21:44:13:244 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Integrity check passed. *Jul 16 21:44:13:244 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 IDi Next payload: AUTH, Length: 12, Type: ID_IPV4_ADDR. *Jul 16 21:44:13:244 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 AUTH Next payload: CFG, Length: 40, Method: Pre-shared key. *Jul 16 21:44:13:244 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 CFG Next payload: SA, Length: 16, Type: CFG_REQUEST. *Jul 16 21:44:13:244 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type INTERNAL_IP4_ADDRESS, Length 0. *Jul 16 21:44:13:244 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type INTERNAL_IP4_DNS, Length 0. *Jul 16 21:44:13:244 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 SA Next payload: TSi, Length: 156. *Jul 16 21:44:13:245 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last proposal: 0x2, Length: 96. *Jul 16 21:44:13:245 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Proposal: 1, Protocol: ESP, SPI size: 4, Transform number: 9. *Jul 16 21:44:13:245 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 12. *Jul 16 21:44:13:245 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: ENCR, Transform ID: AES-CBC. *Jul 16 21:44:13:245 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Key length: 128. *Jul 16 21:44:13:245 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 12. *Jul 16 21:44:13:245 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: ENCR, Transform ID: AES-CBC. *Jul 16 21:44:13:246 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Key length: 192. *Jul 16 21:44:13:246 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 12. *Jul 16 21:44:13:246 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: ENCR, Transform ID: AES-CBC. *Jul 16 21:44:13:246 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Key length: 256. *Jul 16 21:44:13:246 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 8. *Jul 16 21:44:13:246 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: INTEG, Transform ID: AUTH-HMAC-SHA256-128. *Jul 16 21:44:13:246 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 8. *Jul 16 21:44:13:247 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: INTEG, Transform ID: AUTH-HMAC-SHA384-192. *Jul 16 21:44:13:247 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 8. *Jul 16 21:44:13:247 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: INTEG, Transform ID: AUTH-HMAC-SHA512-256. *Jul 16 21:44:13:247 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 8. *Jul 16 21:44:13:247 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: INTEG, Transform ID: AUTH-HMAC-SHA1-96. *Jul 16 21:44:13:247 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 8. *Jul 16 21:44:13:247 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: INTEG, Transform ID: AUTH-AES-XCBC-96. *Jul 16 21:44:13:248 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0, Length: 8. *Jul 16 21:44:13:248 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: ESN, Transform ID: NO ESN. *Jul 16 21:44:13:248 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last proposal: 0, Length: 56. *Jul 16 21:44:13:248 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Proposal: 2, Protocol: ESP, SPI size: 4, Transform number: 4. *Jul 16 21:44:13:249 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 12. *Jul 16 21:44:13:249 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: ENCR, Transform ID: AES-GCM-16. *Jul 16 21:44:13:250 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Key length: 128. *Jul 16 21:44:13:250 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 12. *Jul 16 21:44:13:250 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: ENCR, Transform ID: AES-GCM-16. *Jul 16 21:44:13:250 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Key length: 192. *Jul 16 21:44:13:250 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0x3, Length: 12. *Jul 16 21:44:13:251 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: ENCR, Transform ID: AES-GCM-16. *Jul 16 21:44:13:252 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Key length: 256. *Jul 16 21:44:13:253 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Last transform: 0, Length: 8. *Jul 16 21:44:13:253 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: ESN, Transform ID: NO ESN. *Jul 16 21:44:13:253 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 TSi Next payload: TSr, Length: 24, Selector number: 1. *Jul 16 21:44:13:254 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 TS type: TS_IPV4_ADDR_RANGE, IP protocol: 0, Length: 16. *Jul 16 21:44:13:255 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Start port: 0, end port: 65535. *Jul 16 21:44:13:256 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Start address: 0.0.0.0, End address: 255.255.255.255. *Jul 16 21:44:13:256 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 TSr Next payload: NOTIFY, Length: 24, Selector number: 1. *Jul 16 21:44:13:256 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 TS type: TS_IPV4_ADDR_RANGE, IP protocol: 0, Length: 16. *Jul 16 21:44:13:257 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Start port: 0, end port: 65535. *Jul 16 21:44:13:257 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Start address: 0.0.0.0, End address: 255.255.255.255. *Jul 16 21:44:13:257 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 NOTIFY Next payload: NOTIFY, Length: 8, Type: MOBIKE_SUPPORTED, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:44:13:257 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 NOTIFY Next payload: NOTIFY, Length: 12, Type: ADDITIONAL_IP4_ADDRESS, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:44:13:257 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 NOTIFY Next payload: NOTIFY, Length: 24, Type: ADDITIONAL_IP6_ADDRESS, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:44:13:257 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 NOTIFY Next payload: NOTIFY, Length: 24, Type: ADDITIONAL_IP6_ADDRESS, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:44:13:258 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 NOTIFY Next payload: NOTIFY, Length: 24, Type: ADDITIONAL_IP6_ADDRESS, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:44:13:258 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 NOTIFY Next payload: NOTIFY, Length: 24, Type: ADDITIONAL_IP6_ADDRESS, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:44:13:258 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 NOTIFY Next payload: NOTIFY, Length: 8, Type: Unknown, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:44:13:258 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 NOTIFY Next payload: NO_PAYLOAD, Length: 8, Type: IKEV2_MESSAGE_ID_SYNC_SUPPORTED, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:44:13:258 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Request has message id 1, expected from (1 ~ 1). *Jul 16 21:44:13:258 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 (Tunnel ID 445): (R) Current State: PROC_AUTH. *Jul 16 21:44:13:259 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Process ID payload. *Jul 16 21:44:13:259 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Searching profile based on peer"s identity ID_IPV4_ADDR of type 10.35.108.58. *Jul 16 21:44:13:259 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Found matching profile mate80. *Jul 16 21:44:13:259 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Getting pre-shared key from profile keychain mate80. *Jul 16 21:44:13:259 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Getting pre-shared key by identity ID_IPV4_ADDR of type 10.35.108.58. *Jul 16 21:44:13:259 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Getting pre-shared key by address 119.143.33.107. *Jul 16 21:44:13:259 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Peer mate80 matched. *Jul 16 21:44:13:260 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Verifing peer"s authentication data. *Jul 16 21:44:13:260 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 Verify peer"s authentication data passed. *Jul 16 21:44:13:262 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 [IKE->AAA] Send authorization request. *Jul 16 21:44:13:267 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 [AAA->IKE] Get authorized data from AAA. *Jul 16 21:44:13:268 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26149 process CP payload: CFG_REQUEST. *Jul 16 21:44:13:268 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Process TSi payload. *Jul 16 21:44:13:270 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Process TSr payload. *Jul 16 21:44:13:270 2026 Router_ZHXXIE IKEV2/7/EVENT: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 [IKE->IPsec] Send get IPsec policy request. *Jul 16 21:44:13:273 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Construct NOTIFY payload: TS_UNACCEPTABLE. *Jul 16 21:44:13:274 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Construct IDr payload: xx.xx.23.23 of type ID_IPV4_ADDR. *Jul 16 21:44:13:274 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 My authentication method is Pre-shared key. Generate authentication data. *Jul 16 21:44:13:279 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Construct AUTH payload. *Jul 16 21:44:13:280 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Construct CP payload: CFG_REPLY. *Jul 16 21:44:13:280 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Assigned address 192.168.200.10 from pool mate80. *Jul 16 21:44:13:281 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Attribute type: INTERNAL_IP4_ADDRESS. *Jul 16 21:44:13:281 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Data: 192.168.200.10, Length: 4. *Jul 16 21:44:13:282 2026 Router_ZHXXIE IKEV2/7/ERROR: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Unsupported Configuration payload attibuite INTERNAL_IP4_DNS, ignore it. *Jul 16 21:44:13:283 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type: CFG_REPLY, length: 16. *Jul 16 21:44:13:284 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Construct NOTIFY payload: IKEV2_MESSAGE_ID_SYNC_SUPPORTED. *Jul 16 21:44:13:284 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 (Tunnel ID 445): (R) Current State: BUILD_AUTH. *Jul 16 21:44:13:284 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 (Tunnel ID 445): (R) Current State: ESTABLISHED. *Jul 16 21:44:13:285 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 (Tunnel ID 445): (R) Current State: READY. *Jul 16 21:44:13:285 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Build packet for encryption. *Jul 16 21:44:13:285 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Payload contents: *Jul 16 21:44:13:285 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 NOTIFY Next payload: IDr, Length: 8, Type: TS_UNACCEPTABLE, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:44:13:287 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 IDr Next payload: AUTH, Length: 12, Type: ID_IPV4_ADDR. *Jul 16 21:44:13:289 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 AUTH Next payload: CFG, Length: 40, Method: Pre-shared key. *Jul 16 21:44:13:290 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 CFG Next payload: NOTIFY, Length: 16, Type: CFG_REPLY. *Jul 16 21:44:13:294 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Type INTERNAL_IP4_ADDRESS, Length 4. *Jul 16 21:44:13:295 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 NOTIFY Next payload: NO_PAYLOAD, Length: 8, Type: IKEV2_MESSAGE_ID_SYNC_SUPPORTED, Protocol: NO PROTOCOL, SPI size: 0. *Jul 16 21:44:13:298 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Sending packet to 119.143.33.107 remote port 26156, local port 4500. *Jul 16 21:44:13:298 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 I-SPI: 7f1e9500934ac323 R-SPI: 6aeced1d6312bac5 Message ID: 1 Exchange type: AUTH Flags: RESPONSE Next payload: ENCRYPTED, Length: 160. *Jul 16 21:44:13:299 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Sending an IPv4 packet. *Jul 16 21:44:13:300 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Child SA(Msg ID 1) deleted. *Jul 16 21:44:13:300 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Sent response with message id 1, requests can be accepted from (2 ~ 2). *Jul 16 21:44:13:300 2026 Router_ZHXXIE IKEV2/7/TIMER: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 (Tunnel ID 445): IKE SA lifetime timer (86400 secs) started. *Jul 16 21:44:13:301 2026 Router_ZHXXIE IKEV2/7/EVENT: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 [IKE->IPSEC] Send add DPD request. *Jul 16 21:44:13:303 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 (Tunnel ID 445): Deleting negotiation context. *Jul 16 21:44:13:304 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 No duplicate IKE SA found. *Jul 16 21:44:13:596 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Received packet from 119.143.33.107 source port 26156 destination port 4500. *Jul 16 21:44:13:596 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 I-SPI: 7f1e9500934ac323 R-SPI: 6aeced1d6312bac5 Message ID: 2 Exchange type: INFORMATIONAL Flags: REQUEST, INITIATOR Next payload: ENCRYPTED, Length: 80. *Jul 16 21:44:13:596 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Payload contents: *Jul 16 21:44:13:596 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Parse the last payload (ENCRYPTED payload). *Jul 16 21:44:13:597 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Integrity check passed. *Jul 16 21:44:13:597 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 DELETE Next payload: NO_PAYLOAD, Length: 8, Protocol: IKE, SPI size: 0, SPI number: 0. *Jul 16 21:44:13:597 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Request has message id 2, expected from (2 ~ 2). *Jul 16 21:44:13:597 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 (Tunnel ID 445): (R) Current State: READY. *Jul 16 21:44:13:597 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Process Delete payload. *Jul 16 21:44:13:597 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 (Tunnel ID 445): (R) Current State: INFO_PROC. *Jul 16 21:44:13:597 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Construct DELETE payload. *Jul 16 21:44:13:597 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 (Tunnel ID 445): (R) Current State: INFO_BUILD. *Jul 16 21:44:13:597 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 (Tunnel ID 445): (R) Current State: READY. *Jul 16 21:44:13:598 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Build packet for encryption. *Jul 16 21:44:13:598 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Payload contents: *Jul 16 21:44:13:598 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 DELETE Next payload: NO_PAYLOAD, Length: 8, Protocol: IKE, SPI size: 0, SPI number: 0. *Jul 16 21:44:13:599 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Sending packet to 119.143.33.107 remote port 26156, local port 4500. *Jul 16 21:44:13:599 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 I-SPI: 7f1e9500934ac323 R-SPI: 6aeced1d6312bac5 Message ID: 2 Exchange type: INFORMATIONAL Flags: RESPONSE Next payload: ENCRYPTED, Length: 80. *Jul 16 21:44:13:599 2026 Router_ZHXXIE IKEV2/7/PACKET: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 Sending an IPv4 packet. *Jul 16 21:44:13:600 2026 Router_ZHXXIE IKEV2/7/EVENT: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 [IKE->IPsec] Send delete DPD request. *Jul 16 21:44:13:603 2026 Router_ZHXXIE IKEV2/7/FSM: vrf = 0, src = xx.xx.23.23, dst = 119.143.33.107/26156 (Tunnel ID 445): IKE SA deleted.
暂无评论
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
暂无评论