The OpenNET Project / Index page

[ новости /+++ | форум | wiki | теги | ]

форумы  помощь  поиск  регистрация  майллист  вход/выход  слежка  RSS
"Настройка шифрования на Cisco 881"
Вариант для распечатки  
Пред. тема | След. тема 
Форум Маршрутизаторы CISCO и др. оборудование. (Безопасность)
Изначальное сообщение [ Отслеживать ]

"Настройка шифрования на Cisco 881"  +/
Сообщение от KosbIga email(ok) on 22-Окт-11, 16:49 
*Oct 21 15:39:34.411: ISAKMP:(0):purging SA., sa=873F757C, delme=873F757C
*Oct 21 15:39:34.411: IPSEC(key_engine): request timer fired: count = 2,
  (identity) local= 192.168.0.56:0, remote= 62.117.68.59:0,
    local_proxy= 10.104.97.159/255.255.255.255/0/0 (type=1),
    remote_proxy= 192.168.60.14/255.255.255.255/0/0 (type=1)
*Oct 21 15:39:34.411: IPSEC(sa_request): ,
  (key eng. msg.) OUTBOUND local= 192.168.0.56:500, remote= 62.117.68.59:500,
    local_proxy= 10.104.97.159/255.255.255.255/0/0 (type=1),
    remote_proxy= 192.168.60.14/255.255.255.255/0/0 (type=1),
    protocol= ESP, transform= esp-3des esp-md5-hmac  (Tunnel),
    lifedur= 3600s and 4608000kb,
    spi= 0x0(0), conn_id= 0, keysize= 0, flags= 0x0
*Oct 21 15:39:34.411: ISAKMP: set new node 0 to QM_IDLE
*Oct 21 15:39:34.411: ISAKMP:(0):SA is still budding. Attached new ipsec request to it. (local 192.168.0.56, remote 62.117.68.59)
*Oct 21 15:39:34.411: ISAKMP: Error while processing SA reques: Failed to initialize SA
*Oct 21 15:39:34.411: ISAKMP: Error while processing KMI message 0, error 2.
*Oct 21 15:39:34.415: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
*Oct 21 15:39:34.415: ISAKMP:(0):peer does not do paranoid keepalives.

*Oct 21 15:39:34.415: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (I) MM_NO_STATE (peer 62.117.68.59)
*Oct 21 15:39:34.415: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (I) MM_NO_STATE (peer 62.117.68.59)
*Oct 21 15:39:34.415: ISAKMP: Unlocking peer struct 0x867D068C for isadb_mark_sa_deleted(), count 0
*Oct 21 15:39:34.415: ISAKMP: Deleting peer node by peer_reap for 62.117.68.59: 867D068C
*Oct 21 15:39:34.415: ISAKMP:(0):deleting node -1914830791 error FALSE reason "IKE deleted"
*Oct 21 15:39:34.415: ISAKMP:(0):deleting node 1775783979 error FALSE reason "IKE deleted"
*Oct 21 15:39:34.415: ISAKMP:(0):deleting node -788562899 error FALSE reason "IKE deleted"
*Oct 21 15:39:34.415: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
*Oct 21 15:39:34.415: ISAKMP:(0):Old State = IKE_I_MM1  New State = IKE_DEST_SA

*Oct 21 15:39:34.415: IPSEC(key_engine): got a queue event with 1 KMI message(s)
*Oct 21 15:39:57.503: IPSEC(key_engine): request timer fired: count = 1,
  (identity) local= 192.168.0.56:0, remote= 212.176.15.8:0,
    local_proxy= 10.104.97.159/255.255.255.255/0/0 (type=1),
    remote_proxy= 192.168.60.3/255.255.255.255/0/0 (type=1)
*Oct 21 15:39:57.503: IPSEC(sa_request): ,
  (key eng. msg.) OUTBOUND local= 192.168.0.56:500, remote= 212.176.15.8:500,
    local_proxy= 10.104.97.159/255.255.255.255/0/0 (type=1),
    remote_proxy= 192.168.60.3/255.255.255.255/0/0 (type=1),
    protocol= ESP, transform= esp-3des esp-md5-hmac  (Tunnel),
    lifedur= 3600s and 4608000kb,
    spi= 0x0(0), conn_id= 0, keysize= 0, flags= 0x0
*Oct 21 15:39:57.503: ISAKMP:(0): SA request profile is (NULL)
*Oct 21 15:39:57.503: ISAKMP: Created a peer struct for 212.176.15.8, peer port 500
*Oct 21 15:39:57.503: ISAKMP: New peer created peer = 0x867D04F4 peer_handle = 0x80000038
*Oct 21 15:39:57.503: ISAKMP: Locking peer struct 0x867D04F4, refcount 1 for isakmp_initiator
*Oct 21 15:39:57.503: ISAKMP: local port 500, remote port 500
*Oct 21 15:39:57.503: ISAKMP: set new node 0 to QM_IDLE
*Oct 21 15:39:57.503: ISAKMP: Find a dup sa in the avl tree during calling isadb_insert sa = 86BC60EC
*Oct 21 15:39:57.503: ISAKMP:(0):Can not start Aggressive mode, trying Main mode.
*Oct 21 15:39:57.503: ISAKMP:(0):found peer pre-shared key matching 212.176.15.8
*Oct 21 15:39:57.503: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID
*Oct 21 15:39:57.503: ISAKMP:(0): constructed NAT-T vendor-07 ID
*Oct 21 15:39:57.503: ISAKMP:(0): constructed NAT-T vendor-03 ID
*Oct 21 15:39:57.503: ISAKMP:(0): constructed NAT-T vendor-02 ID
*Oct 21 15:39:57.503: ISAKMP:(0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM
*Oct 21 15:39:57.503: ISAKMP:(0):Old State = IKE_READY  New State = IKE_I_MM1

*Oct 21 15:39:57.503: ISAKMP:(0): beginning Main Mode exchange
*Oct 21 15:39:57.503: ISAKMP:(0): sending packet to 212.176.15.8 my_port 500 peer_port 500 (I) MM_NO_STATE
*Oct 21 15:39:57.503: ISAKMP:(0):Sending an IKE IPv4 Packet.
*Oct 21 15:39:57.543: ISAKMP (0): received packet from 212.176.15.8 dport 500 sport 500 Global (I) MM_NO_STATE
*Oct 21 15:39:57.543: ISAKMP:(0):Notify has no hash. Rejected.
*Oct 21 15:39:57.543: ISAKMP (0): Unknown Input IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY:  state = IKE_I_MM1
*Oct 21 15:39:57.543: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY
*Oct 21 15:39:57.543: ISAKMP:(0):Old State = IKE_I_MM1  New State = IKE_I_MM1

*Oct 21 15:39:57.543: %CRYPTO-6-IKMP_MODE_FAILURE: Processing of Informational mode failed with peer at 212.176.15.8
*Oct 21 15:40:04.411: IPSEC(key_engine): request timer fired: count = 1,
  (identity) local= 192.168.0.56:0, remote= 62.117.68.59:0,
    local_proxy= 10.104.97.159/255.255.255.255/0/0 (type=1),
    remote_proxy= 192.168.60.14/255.255.255.255/0/0 (type=1)
*Oct 21 15:40:04.411: IPSEC(sa_request): ,
  (key eng. msg.) OUTBOUND local= 192.168.0.56:500, remote= 62.117.68.59:500,
    local_proxy= 10.104.97.159/255.255.255.255/0/0 (type=1),
    remote_proxy= 192.168.60.14/255.255.255.255/0/0 (type=1),
    protocol= ESP, transform= esp-3des esp-md5-hmac  (Tunnel),
    lifedur= 3600s and 4608000kb,
    spi= 0x0(0), conn_id= 0, keysize= 0, flags= 0x0
*Oct 21 15:40:04.411: ISAKMP:(0): SA request profile is (NULL)
*Oct 21 15:40:04.411: ISAKMP: Created a peer struct for 62.117.68.59, peer port 500
*Oct 21 15:40:04.411: ISAKMP: New peer created peer = 0x867D068C peer_handle = 0x80000039
*Oct 21 15:40:04.411: ISAKMP: Locking peer struct 0x867D068C, refcount 1 for isakmp_initiator
*Oct 21 15:40:04.411: ISAKMP: local port 500, remote port 500
*Oct 21 15:40:04.411: ISAKMP: set new node 0 to QM_IDLE
*Oct 21 15:40:04.411: ISAKMP: Find a dup sa in the avl tree during calling isadb_insert sa = 873F757C
*Oct 21 15:40:04.411: ISAKMP:(0):Can not start Aggressive mode, trying Main mode.
*Oct 21 15:40:04.411: ISAKMP:(0):found peer pre-shared key matching 62.117.68.59
*Oct 21 15:40:04.411: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID
*Oct 21 15:40:04.411: ISAKMP:(0): constructed NAT-T vendor-07 ID
*Oct 21 15:40:04.411: ISAKMP:(0): constructed NAT-T vendor-03 ID
*Oct 21 15:40:04.411: ISAKMP:(0): constructed NAT-T vendor-02 ID
*Oct 21 15:40:04.411: ISAKMP:(0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM
*Oct 21 15:40:04.411: ISAKMP:(0):Old State = IKE_READY  New State = IKE_I_MM1

*Oct 21 15:40:04.411: ISAKMP:(0): beginning Main Mode exchange
*Oct 21 15:40:04.411: ISAKMP:(0): sending packet to 62.117.68.59 my_port 500 peer_port 500 (I) MM_NO_STATE
*Oct 21 15:40:04.411: ISAKMP:(0):Sending an IKE IPv4 Packet.
*Oct 21 15:40:04.423: ISAKMP (0): received packet from 62.117.68.59 dport 500 sport 500 Global (I) MM_NO_STATE
*Oct 21 15:40:04.423: ISAKMP:(0):Notify has no hash. Rejected.
*Oct 21 15:40:04.423: ISAKMP (0): Unknown Input IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY:  state = IKE_I_MM1
*Oct 21 15:40:04.423: ISAKMP:(0):Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY
*Oct 21 15:40:04.423: ISAKMP:(0):Old State = IKE_I_MM1  New State = IKE_I_MM1

*Oct 21 15:40:07.503: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
*Oct 21 15:40:07.503: ISAKMP (0): incrementing error counter on sa, attempt 1 of 5: retransmit phase 1
*Oct 21 15:40:07.503: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
*Oct 21 15:40:07.503: ISAKMP:(0): sending packet to 212.176.15.8 my_port 500 peer_port 500 (I) MM_NO_STATE
*Oct 21 15:40:07.503: ISAKMP:(0):Sending an IKE IPv4 Packet.debug all

  n


*Oct 21 15:40:14.411: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
*Oct 21 15:40:14.411: ISAKMP (0): incrementing error counter on sa, attempt 1 of 5: retransmit phase 1
*Oct 21 15:40:14.411: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
*Oct 21 15:40:14.411: ISAKMP:(0): sending packet to 62.117.68.59 my_port 500 peer_port 500 (I) MM_NO_STATE
*Oct 21 15:40:14.411: ISAKMP:(0):Sending an IKE IPv4 Packet.
*Oct 21 15:40:17.503: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
*Oct 21 15:40:17.503: ISAKMP (0): incrementing error counter on sa, attempt 2 of 5: retransmit phase 1
*Oct 21 15:40:17.503: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
*Oct 21 15:40:17.503: ISAKMP:(0): sending packet to 212.176.15.8 my_port 500 peer_port 500 (I) MM_NO_STATE
*Oct 21 15:40:17.503: ISAKMP:(0):Sending an IKE IPv4 Packet.
*Oct 21 15:40:17.507: ISAKMP:(0):purging node 378674246
*Oct 21 15:40:17.507: ISAKMP:(0):purging node 870696701
*Oct 21 15:40:17.507: ISAKMP:(0):purging node 1675796306u all


*Oct 21 15:40:24.411: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
*Oct 21 15:40:24.411: ISAKMP (0): incrementing error counter on sa, attempt 2 of 5: retransmit phase 1
*Oct 21 15:40:24.411: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
*Oct 21 15:40:24.411: ISAKMP:(0): sending packet to 62.117.68.59 my_port 500 peer_port 500 (I) MM_NO_STATE
*Oct 21 15:40:24.411: ISAKMP:(0):Sending an IKE IPv4 Packet.
*Oct 21 15:40:24.415: ISAKMP:(0):purging node -1914830791
*Oct 21 15:40:24.415: ISAKMP:(0):purging node 1775783979
*Oct 21 15:40:24.415: ISAKMP:(0):purging node -788562899y

  y


*Oct 21 15:40:27.503: IPSEC(key_engine): request timer fired: count = 2,
  (identity) local= 192.168.0.56:0, remote= 212.176.15.8:0,
    local_proxy= 10.104.97.159/255.255.255.255/0/0 (type=1),
    remote_proxy= 192.168.60.3/255.255.255.255/0/0 (type=1)
*Oct 21 15:40:27.503: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
*Oct 21 15:40:27.503: ISAKMP (0): incrementing error counter on sa, attempt 3 of 5: retransmit phase 1
*Oct 21 15:40:27.503: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
*Oct 21 15:40:27.503: ISAKMP:(0): sending packet to 212.176.15.8 my_port 500 peer_port 500 (I) MM_NO_STATE
*Oct 21 15:40:27.503: ISAKMP:(0):Sending an IKE IPv4 Packet.
*Oct 21 15:40:27.503: IPSEC(sa_request): ,
  (key eng. msg.) OUTBOUND local= 192.168.0.56:500, remote= 212.176.15.8:500,
    local_proxy= 10.104.97.159/255.255.255.255/0/0 (type=1),
    remote_proxy= 192.168.60.3/255.255.255.255/0/0 (type=1),
    protocol= ESP, transform= esp-3des esp-md5-hmac  (Tunnel),
    li
ATM38301-BRS#
ATM38301-BRS#
ATM38301-BRS#
ATM38301-BRS#
ATM38301-BRS#fedur= 3600s and 4608000kb,
    spi= 0x0(0), conn_id= 0, keysize= 0, flags= 0x0
*Oct 21 15:40:27.503: ISAKMP: set new node 0 to QM_IDLE
*Oct 21 15:40:27.503: ISAKMP:(0):SA is still budding. Attached new ipsec request to it. (local 192.168.0.56, remote 212.176.15.8)
*Oct 21 15:40:27.503: ISAKMP: Error while processing SA request: Failed to initialize SA
*Oct 21 15:40:27.503: ISAKMP: Error while processing KMI message 0, error 2.
*Oct 21 15:40:27.507: ISAKMP:(0):purging SA., sa=8773A0F8, delme=8773A0F8
ATM38301-BRS#
*Oct 21 15:40:34.411: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
*Oct 21 15:40:34.411: ISAKMP (0): incrementing error counter on sa, attempt 3 of 5: retransmit phase 1
*Oct 21 15:40:34.411: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
*Oct 21 15:40:34.411: ISAKMP:(0): sending packet to 62.117.68.59 my_port 500 peer_port 500 (I) MM_NO_STATE
*Oct 21 15:40:34.411: ISAKMP:(0):Sending an IKE IPv4 Packet.
*Oct 21 15:40:34.411: IPSEC(key_engine): request timer fired: count = 2,
  (identity) local= 192.168.0.56:0, remote= 62.117.68.59:0,
    local_proxy= 10.104.97.159/255.255.255.255/0/0 (type=1),
    remote_proxy= 192.168.60.14/255.255.255.255/0/0 (type=1)
*Oct 21 15:40:34.411: IPSEC(sa_request): ,
  (key eng. msg.) OUTBOUND local= 192.168.0.56:500, remote= 62.117.68.59:500,
    local_proxy= 10.104.97.159/255.255.255.255/0/0 (type=1),
    remote_proxy= 192.168.60.14/255.255.255.255/0/0 (type=1),
    protocol= ESP, transform= esp-3des esp-md5-hmac  (Tunnel),
    lifedur= 3600s and 4608000kb,
    spi= 0x0(0), conn_id= 0, keysize= 0, flags= 0x0
*Oct 21 15:40:34.411: ISAKMP: set new node 0 to QM_IDLE
*Oct 21 15:40:34.411: ISAKMP:(0):SA is still budding. Attached new ipsec request to it. (local 192.168.0.56, remote 62.117.68.59)
*Oct 21 15:40:34.411: ISAKMP: Error while processing SA request: Failed to initialize SA
*Oct 21 15:40:34.411: ISAKMP: Error while processing KMI message 0, error 2.
*Oct 21 15:40:34.415: ISAKMP:(0):purging SA., sa=8733738C, delme=8733738Cdu all
              ^
% Invalid input detected at '^' marker.

ATM38301-BRS#
*Oct 21 15:40:37.503: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
*Oct 21 15:40:37.503: ISAKMP (0): incrementing error counter on sa, attempt 4 of 5: retransmit phase 1
*Oct 21 15:40:37.503: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
*Oct 21 15:40:37.503: ISAKMP:(0): sending packet to 212.176.15.8 my_port 500 peer_port 500 (I) MM_NO_STATE
*Oct 21 15:40:37.503: ISAKMP:(0):Sending an IKE IPv4 Packet.u all
All possible debugging has been turned off
ATM38301-BRS#
*Oct 21 15:41:04.427: %CRYPTO-6-IKMP_MODE_FAILURE: Processing of Informational mode failed with peer at 62.117.68.59
*Oct 21 15:42:27.539: %CRYPTO-6-IKMP_MODE_FAILURE: Processing of Informational mode failed with peer at 212.176.15.8

Ответить | Правка | Cообщить модератору

Оглавление

Сообщения по теме [Сортировка по времени | RSS]


1. "Настройка шифрования на Cisco 881"  +/
Сообщение от BJ (ok) on 22-Окт-11, 19:51 
Поверните ручку влево на пять делений.
Ответить | Правка | ^ к родителю #0 | Наверх | Cообщить модератору

2. "Настройка шифрования на Cisco 881"  +/
Сообщение от midori (ok) on 22-Окт-11, 20:55 
затем дождитесь щелчка в коробке (сделайте паузу 3−4 секунды!) и только потом запускайте сессию
Ответить | Правка | ^ к родителю #0 | Наверх | Cообщить модератору

3. "Настройка шифрования на Cisco 881"  +/
Сообщение от merko (ok) on 24-Окт-11, 11:41 
да ужж...)))

Ответить | Правка | ^ к родителю #2 | Наверх | Cообщить модератору

Архив | Удалить

Рекомендовать для помещения в FAQ | Индекс форумов | Темы | Пред. тема | След. тема




Спонсоры:
MIRhosting
Fornex
Hosting by Ihor
Хостинг:

Закладки на сайте
Проследить за страницей
Created 1996-2019 by Maxim Chirkov
Добавить, Поддержать, Вебмастеру