CHECKPOINT=IP of Check Point firewall + name of VPN profile (group) on ASA 192.168.200.10/24 = Cisco ASA outside interface 172.22.154.128/27 = Cisco ASA inside network 172.22.157.0/24 = Network on our Check Point firewall hspa-asa# term mon hspa-asa# debug crypto ikev1 200 Nov 16 13:56:59 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:56:59 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Duplicate Phase 1 packet detected. Retransmitting last packet. Nov 16 13:56:59 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, P1 Retransmit msg dispatched to MM FSM Nov 16 13:57:01 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:01 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:57:01 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:57:01 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:01 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Duplicate Phase 1 packet detected. Retransmitting last packet. Nov 16 13:57:01 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, P1 Retransmit msg dispatched to MM FSM Nov 16 13:57:01 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, IKE MM Initiator FSM error history (struct &0x00007f391cbd4f10) , : MM_DONE, EV_ERROR-->MM_WAIT_MSG6, EV_PROB_AUTH_FAIL-->MM_WAIT_MSG6, EV_RESEND_MSG-->MM_WAIT_MSG6, NullEvent-->MM_SND_MSG5, EV_SND_MSG-->MM_SND_MSG5, EV_START_TMR-->MM_SND_MSG5, EV_RESEND_MSG-->MM_WAIT_MSG6, EV_RESEND_MSG Nov 16 13:57:01 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, IKE SA MM:381c1904 terminating: flags 0x01000022, refcnt 0, tuncnt 0 Nov 16 13:57:01 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, sending delete/delete with reason message Nov 16 13:57:01 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing blank hash payload Nov 16 13:57:01 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing IKE delete payload Nov 16 13:57:01 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing qm hash payload Nov 16 13:57:01 [IKEv1]IP = CHECKPOINT, IKE_DECODE SENDING Message (msgid=557224de) with payloads : HDR + HASH (8) + DELETE (12) + NONE (0) total length : 80 Nov 16 13:57:03 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:03 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:57:03 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:57:05 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:05 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:57:05 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:57:05 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:05 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:57:05 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:57:09 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:09 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:57:09 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:57:09 [IKEv1 DEBUG]Pitcher: received a key acquire message, spi 0x0 Nov 16 13:57:09 [IKEv1]IP = CHECKPOINT, IKE Initiator: New Phase 1, Intf NP Identity Ifc, IKE Peer CHECKPOINT local Proxy Address 172.22.154.128, remote Proxy Address 172.22.157.0, Crypto map (outside_map0) Nov 16 13:57:09 [IKEv1 DEBUG]IP = CHECKPOINT, constructing ISAKMP SA payload Nov 16 13:57:09 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Traversal VID ver 02 payload Nov 16 13:57:09 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Traversal VID ver 03 payload Nov 16 13:57:09 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Traversal VID ver RFC payload Nov 16 13:57:09 [IKEv1 DEBUG]IP = CHECKPOINT, constructing Fragmentation VID + extended capabilities payload Nov 16 13:57:09 [IKEv1]IP = CHECKPOINT, IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 324 Nov 16 13:57:09 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:09 [IKEv1]IP = CHECKPOINT, IKE_DECODE RECEIVED Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 128 Nov 16 13:57:09 [IKEv1 DEBUG]IP = CHECKPOINT, processing SA payload Nov 16 13:57:09 [IKEv1 DEBUG]IP = CHECKPOINT, Oakley proposal is acceptable Nov 16 13:57:09 [IKEv1 DEBUG]IP = CHECKPOINT, processing VID payload Nov 16 13:57:09 [IKEv1 DEBUG]IP = CHECKPOINT, Received Fragmentation VID Nov 16 13:57:09 [IKEv1 DEBUG]IP = CHECKPOINT, processing VID payload Nov 16 13:57:09 [IKEv1 DEBUG]IP = CHECKPOINT, Received NAT-Traversal RFC VID Nov 16 13:57:09 [IKEv1 DEBUG]IP = CHECKPOINT, constructing ke payload Nov 16 13:57:09 [IKEv1 DEBUG]IP = CHECKPOINT, constructing nonce payload Nov 16 13:57:09 [IKEv1 DEBUG]IP = CHECKPOINT, constructing Cisco Unity VID payload Nov 16 13:57:09 [IKEv1 DEBUG]IP = CHECKPOINT, constructing xauth V6 VID payload Nov 16 13:57:09 [IKEv1 DEBUG]IP = CHECKPOINT, Send IOS VID Nov 16 13:57:09 [IKEv1 DEBUG]IP = CHECKPOINT, Constructing ASA spoofing IOS Vendor ID payload (version: 1.0.0, capabilities: 20000001) Nov 16 13:57:09 [IKEv1 DEBUG]IP = CHECKPOINT, constructing VID payload Nov 16 13:57:09 [IKEv1 DEBUG]IP = CHECKPOINT, Send Altiga/Cisco VPN3000/Cisco ASA GW VID Nov 16 13:57:09 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Discovery payload Nov 16 13:57:09 [IKEv1 DEBUG]IP = CHECKPOINT, computing NAT Discovery hash Nov 16 13:57:09 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Discovery payload Nov 16 13:57:09 [IKEv1 DEBUG]IP = CHECKPOINT, computing NAT Discovery hash Nov 16 13:57:09 [IKEv1]IP = CHECKPOINT, IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + KE (4) + NONCE (10) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + NAT-D (20) + NAT-D (20) + NONE (0) total length : 304 Nov 16 13:57:09 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:09 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:57:09 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:57:09 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:09 [IKEv1]IP = CHECKPOINT, IKE_DECODE RECEIVED Message (msgid=0) with payloads : HDR + KE (4) + NONCE (10) + NAT-D (20) + NAT-D (20) + NONE (0) total length : 232 Nov 16 13:57:09 [IKEv1 DEBUG]IP = CHECKPOINT, processing ke payload Nov 16 13:57:09 [IKEv1 DEBUG]IP = CHECKPOINT, processing ISA_KE payload Nov 16 13:57:09 [IKEv1 DEBUG]IP = CHECKPOINT, processing nonce payload Nov 16 13:57:09 [IKEv1 DEBUG]IP = CHECKPOINT, processing NAT-Discovery payload Nov 16 13:57:09 [IKEv1 DEBUG]IP = CHECKPOINT, computing NAT Discovery hash Nov 16 13:57:09 [IKEv1 DEBUG]IP = CHECKPOINT, processing NAT-Discovery payload Nov 16 13:57:09 [IKEv1 DEBUG]IP = CHECKPOINT, computing NAT Discovery hash Nov 16 13:57:09 [IKEv1]IP = CHECKPOINT, Connection landed on tunnel_group CHECKPOINT Nov 16 13:57:09 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, Generating keys for Initiator... Nov 16 13:57:09 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing ID payload Nov 16 13:57:09 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing hash payload Nov 16 13:57:09 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, Computing hash for ISAKMP Nov 16 13:57:09 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing dpd vid payload Nov 16 13:57:09 [IKEv1]IP = CHECKPOINT, IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + ID (5) + HASH (8) + VENDOR (13) + NONE (0) total length : 84 Nov 16 13:57:09 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Automatic NAT Detection Status: Remote end is NOT behind a NAT device This end IS behind a NAT device Nov 16 13:57:09 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Floating NAT-T to port 4500 Nov 16 13:57:11 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:11 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Duplicate Phase 1 packet detected. Retransmitting last packet. Nov 16 13:57:11 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, P1 Retransmit msg dispatched to MM FSM Nov 16 13:57:13 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:13 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:57:13 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:57:13 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:13 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Duplicate Phase 1 packet detected. Retransmitting last packet. Nov 16 13:57:13 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, P1 Retransmit msg dispatched to MM FSM Nov 16 13:57:15 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:15 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Duplicate Phase 1 packet detected. Retransmitting last packet. Nov 16 13:57:15 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, P1 Retransmit msg dispatched to MM FSM Nov 16 13:57:17 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:17 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Duplicate Phase 1 packet detected. Retransmitting last packet. Nov 16 13:57:17 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, P1 Retransmit msg dispatched to MM FSM Nov 16 13:57:17 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, IKE MM Initiator FSM error history (struct &0x00007f391cbd4f10) , : MM_DONE, EV_ERROR-->MM_WAIT_MSG6, EV_PROB_AUTH_FAIL-->MM_WAIT_MSG6, EV_RESEND_MSG-->MM_WAIT_MSG6, NullEvent-->MM_SND_MSG5, EV_SND_MSG-->MM_SND_MSG5, EV_START_TMR-->MM_SND_MSG5, EV_RESEND_MSG-->MM_WAIT_MSG6, EV_RESEND_MSG Nov 16 13:57:17 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, IKE SA MM:b04be21d terminating: flags 0x01000022, refcnt 0, tuncnt 0 Nov 16 13:57:17 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, sending delete/delete with reason message Nov 16 13:57:17 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing blank hash payload Nov 16 13:57:17 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing IKE delete payload Nov 16 13:57:17 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing qm hash payload Nov 16 13:57:17 [IKEv1]IP = CHECKPOINT, IKE_DECODE SENDING Message (msgid=fcbd38b3) with payloads : HDR + HASH (8) + DELETE (12) + NONE (0) total length : 80 Nov 16 13:57:17 [IKEv1 DEBUG]Pitcher: received a key acquire message, spi 0x0 Nov 16 13:57:17 [IKEv1]IP = CHECKPOINT, IKE Initiator: New Phase 1, Intf NP Identity Ifc, IKE Peer CHECKPOINT local Proxy Address 172.22.154.128, remote Proxy Address 172.22.157.0, Crypto map (outside_map0) Nov 16 13:57:17 [IKEv1 DEBUG]IP = CHECKPOINT, constructing ISAKMP SA payload Nov 16 13:57:17 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Traversal VID ver 02 payload Nov 16 13:57:17 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Traversal VID ver 03 payload Nov 16 13:57:17 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Traversal VID ver RFC payload Nov 16 13:57:17 [IKEv1 DEBUG]IP = CHECKPOINT, constructing Fragmentation VID + extended capabilities payload Nov 16 13:57:17 [IKEv1]IP = CHECKPOINT, IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 324 Nov 16 13:57:18 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:18 [IKEv1]IP = CHECKPOINT, IKE_DECODE RECEIVED Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 128 Nov 16 13:57:18 [IKEv1 DEBUG]IP = CHECKPOINT, processing SA payload Nov 16 13:57:18 [IKEv1 DEBUG]IP = CHECKPOINT, Oakley proposal is acceptable Nov 16 13:57:18 [IKEv1 DEBUG]IP = CHECKPOINT, processing VID payload Nov 16 13:57:18 [IKEv1 DEBUG]IP = CHECKPOINT, Received Fragmentation VID Nov 16 13:57:18 [IKEv1 DEBUG]IP = CHECKPOINT, processing VID payload Nov 16 13:57:18 [IKEv1 DEBUG]IP = CHECKPOINT, Received NAT-Traversal RFC VID Nov 16 13:57:18 [IKEv1 DEBUG]IP = CHECKPOINT, constructing ke payload Nov 16 13:57:18 [IKEv1 DEBUG]IP = CHECKPOINT, constructing nonce payload Nov 16 13:57:18 [IKEv1 DEBUG]IP = CHECKPOINT, constructing Cisco Unity VID payload Nov 16 13:57:18 [IKEv1 DEBUG]IP = CHECKPOINT, constructing xauth V6 VID payload Nov 16 13:57:18 [IKEv1 DEBUG]IP = CHECKPOINT, Send IOS VID Nov 16 13:57:18 [IKEv1 DEBUG]IP = CHECKPOINT, Constructing ASA spoofing IOS Vendor ID payload (version: 1.0.0, capabilities: 20000001) Nov 16 13:57:18 [IKEv1 DEBUG]IP = CHECKPOINT, constructing VID payload Nov 16 13:57:18 [IKEv1 DEBUG]IP = CHECKPOINT, Send Altiga/Cisco VPN3000/Cisco ASA GW VID Nov 16 13:57:18 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Discovery payload Nov 16 13:57:18 [IKEv1 DEBUG]IP = CHECKPOINT, computing NAT Discovery hash Nov 16 13:57:18 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Discovery payload Nov 16 13:57:18 [IKEv1 DEBUG]IP = CHECKPOINT, computing NAT Discovery hash Nov 16 13:57:18 [IKEv1]IP = CHECKPOINT, IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + KE (4) + NONCE (10) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + NAT-D (20) + NAT-D (20) + NONE (0) total length : 304 Nov 16 13:57:18 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:18 [IKEv1]IP = CHECKPOINT, IKE_DECODE RECEIVED Message (msgid=0) with payloads : HDR + KE (4) + NONCE (10) + NAT-D (20) + NAT-D (20) + NONE (0) total length : 232 Nov 16 13:57:18 [IKEv1 DEBUG]IP = CHECKPOINT, processing ke payload Nov 16 13:57:18 [IKEv1 DEBUG]IP = CHECKPOINT, processing ISA_KE payload Nov 16 13:57:18 [IKEv1 DEBUG]IP = CHECKPOINT, processing nonce payload Nov 16 13:57:18 [IKEv1 DEBUG]IP = CHECKPOINT, processing NAT-Discovery payload Nov 16 13:57:18 [IKEv1 DEBUG]IP = CHECKPOINT, computing NAT Discovery hash Nov 16 13:57:18 [IKEv1 DEBUG]IP = CHECKPOINT, processing NAT-Discovery payload Nov 16 13:57:18 [IKEv1 DEBUG]IP = CHECKPOINT, computing NAT Discovery hash Nov 16 13:57:18 [IKEv1]IP = CHECKPOINT, Connection landed on tunnel_group CHECKPOINT Nov 16 13:57:18 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, Generating keys for Initiator... Nov 16 13:57:18 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing ID payload Nov 16 13:57:18 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing hash payload Nov 16 13:57:18 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, Computing hash for ISAKMP Nov 16 13:57:18 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing dpd vid payload Nov 16 13:57:18 [IKEv1]IP = CHECKPOINT, IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + ID (5) + HASH (8) + VENDOR (13) + NONE (0) total length : 84 Nov 16 13:57:18 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Automatic NAT Detection Status: Remote end is NOT behind a NAT device This end IS behind a NAT device Nov 16 13:57:18 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Floating NAT-T to port 4500 Nov 16 13:57:19 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:19 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:57:19 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:57:20 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:20 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Duplicate Phase 1 packet detected. Retransmitting last packet. Nov 16 13:57:20 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, P1 Retransmit msg dispatched to MM FSM Nov 16 13:57:21 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:21 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:57:21 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:57:21 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:21 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:57:21 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:57:22 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:22 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Duplicate Phase 1 packet detected. Retransmitting last packet. Nov 16 13:57:22 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, P1 Retransmit msg dispatched to MM FSM Nov 16 13:57:24 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:24 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Duplicate Phase 1 packet detected. Retransmitting last packet. Nov 16 13:57:24 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, P1 Retransmit msg dispatched to MM FSM Nov 16 13:57:25 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:25 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:57:25 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:57:25 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:25 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:57:25 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:57:26 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:26 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Duplicate Phase 1 packet detected. Retransmitting last packet. Nov 16 13:57:26 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, P1 Retransmit msg dispatched to MM FSM Nov 16 13:57:26 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, IKE MM Initiator FSM error history (struct &0x00007f391cbbf900) , : MM_DONE, EV_ERROR-->MM_WAIT_MSG6, EV_PROB_AUTH_FAIL-->MM_WAIT_MSG6, EV_RESEND_MSG-->MM_WAIT_MSG6, NullEvent-->MM_SND_MSG5, EV_SND_MSG-->MM_SND_MSG5, EV_START_TMR-->MM_SND_MSG5, EV_RESEND_MSG-->MM_WAIT_MSG6, EV_RESEND_MSG Nov 16 13:57:26 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, IKE SA MM:251c8871 terminating: flags 0x01000022, refcnt 0, tuncnt 0 Nov 16 13:57:26 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, sending delete/delete with reason message Nov 16 13:57:26 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing blank hash payload Nov 16 13:57:26 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing IKE delete payload Nov 16 13:57:26 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing qm hash payload Nov 16 13:57:26 [IKEv1]IP = CHECKPOINT, IKE_DECODE SENDING Message (msgid=6714e4fc) with payloads : HDR + HASH (8) + DELETE (12) + NONE (0) total length : 80 Nov 16 13:57:28 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:28 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:57:28 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:57:29 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:29 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:57:29 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:57:30 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:30 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:57:30 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:57:30 [IKEv1 DEBUG]Pitcher: received a key acquire message, spi 0x0 Nov 16 13:57:30 [IKEv1]IP = CHECKPOINT, IKE Initiator: New Phase 1, Intf NP Identity Ifc, IKE Peer CHECKPOINT local Proxy Address 172.22.154.128, remote Proxy Address 172.22.157.0, Crypto map (outside_map0) Nov 16 13:57:30 [IKEv1 DEBUG]IP = CHECKPOINT, constructing ISAKMP SA payload Nov 16 13:57:30 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Traversal VID ver 02 payload Nov 16 13:57:30 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Traversal VID ver 03 payload Nov 16 13:57:30 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Traversal VID ver RFC payload Nov 16 13:57:30 [IKEv1 DEBUG]IP = CHECKPOINT, constructing Fragmentation VID + extended capabilities payload Nov 16 13:57:30 [IKEv1]IP = CHECKPOINT, IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 324 Nov 16 13:57:30 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:30 [IKEv1]IP = CHECKPOINT, IKE_DECODE RECEIVED Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 128 Nov 16 13:57:30 [IKEv1 DEBUG]IP = CHECKPOINT, processing SA payload Nov 16 13:57:30 [IKEv1 DEBUG]IP = CHECKPOINT, Oakley proposal is acceptable Nov 16 13:57:30 [IKEv1 DEBUG]IP = CHECKPOINT, processing VID payload Nov 16 13:57:30 [IKEv1 DEBUG]IP = CHECKPOINT, Received Fragmentation VID Nov 16 13:57:30 [IKEv1 DEBUG]IP = CHECKPOINT, processing VID payload Nov 16 13:57:30 [IKEv1 DEBUG]IP = CHECKPOINT, Received NAT-Traversal RFC VID Nov 16 13:57:30 [IKEv1 DEBUG]IP = CHECKPOINT, constructing ke payload Nov 16 13:57:30 [IKEv1 DEBUG]IP = CHECKPOINT, constructing nonce payload Nov 16 13:57:30 [IKEv1 DEBUG]IP = CHECKPOINT, constructing Cisco Unity VID payload Nov 16 13:57:30 [IKEv1 DEBUG]IP = CHECKPOINT, constructing xauth V6 VID payload Nov 16 13:57:30 [IKEv1 DEBUG]IP = CHECKPOINT, Send IOS VID Nov 16 13:57:30 [IKEv1 DEBUG]IP = CHECKPOINT, Constructing ASA spoofing IOS Vendor ID payload (version: 1.0.0, capabilities: 20000001) Nov 16 13:57:30 [IKEv1 DEBUG]IP = CHECKPOINT, constructing VID payload Nov 16 13:57:30 [IKEv1 DEBUG]IP = CHECKPOINT, Send Altiga/Cisco VPN3000/Cisco ASA GW VID Nov 16 13:57:30 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Discovery payload Nov 16 13:57:30 [IKEv1 DEBUG]IP = CHECKPOINT, computing NAT Discovery hash Nov 16 13:57:30 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Discovery payload Nov 16 13:57:30 [IKEv1 DEBUG]IP = CHECKPOINT, computing NAT Discovery hash Nov 16 13:57:30 [IKEv1]IP = CHECKPOINT, IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + KE (4) + NONCE (10) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + NAT-D (20) + NAT-D (20) + NONE (0) total length : 304 Nov 16 13:57:30 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:30 [IKEv1]IP = CHECKPOINT, IKE_DECODE RECEIVED Message (msgid=0) with payloads : HDR + KE (4) + NONCE (10) + NAT-D (20) + NAT-D (20) + NONE (0) total length : 232 Nov 16 13:57:30 [IKEv1 DEBUG]IP = CHECKPOINT, processing ke payload Nov 16 13:57:30 [IKEv1 DEBUG]IP = CHECKPOINT, processing ISA_KE payload Nov 16 13:57:30 [IKEv1 DEBUG]IP = CHECKPOINT, processing nonce payload Nov 16 13:57:30 [IKEv1 DEBUG]IP = CHECKPOINT, processing NAT-Discovery payload Nov 16 13:57:30 [IKEv1 DEBUG]IP = CHECKPOINT, computing NAT Discovery hash Nov 16 13:57:30 [IKEv1 DEBUG]IP = CHECKPOINT, processing NAT-Discovery payload Nov 16 13:57:30 [IKEv1 DEBUG]IP = CHECKPOINT, computing NAT Discovery hash Nov 16 13:57:30 [IKEv1]IP = CHECKPOINT, Connection landed on tunnel_group CHECKPOINT Nov 16 13:57:30 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, Generating keys for Initiator... Nov 16 13:57:30 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing ID payload Nov 16 13:57:30 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing hash payload Nov 16 13:57:30 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, Computing hash for ISAKMP Nov 16 13:57:30 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing dpd vid payload Nov 16 13:57:30 [IKEv1]IP = CHECKPOINT, IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + ID (5) + HASH (8) + VENDOR (13) + NONE (0) total length : 84 Nov 16 13:57:30 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Automatic NAT Detection Status: Remote end is NOT behind a NAT device This end IS behind a NAT device Nov 16 13:57:30 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Floating NAT-T to port 4500 Nov 16 13:57:32 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:32 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Duplicate Phase 1 packet detected. Retransmitting last packet. Nov 16 13:57:32 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, P1 Retransmit msg dispatched to MM FSM Nov 16 13:57:33 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:33 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:57:33 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:57:34 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:34 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:57:34 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:57:34 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:34 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Duplicate Phase 1 packet detected. Retransmitting last packet. Nov 16 13:57:34 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, P1 Retransmit msg dispatched to MM FSM Nov 16 13:57:36 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:36 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Duplicate Phase 1 packet detected. Retransmitting last packet. Nov 16 13:57:36 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, P1 Retransmit msg dispatched to MM FSM Nov 16 13:57:37 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:37 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:57:37 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:57:38 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:38 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:57:38 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:57:38 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:38 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Duplicate Phase 1 packet detected. Retransmitting last packet. Nov 16 13:57:38 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, P1 Retransmit msg dispatched to MM FSM Nov 16 13:57:38 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, IKE MM Initiator FSM error history (struct &0x00007f391cbd4f10) , : MM_DONE, EV_ERROR-->MM_WAIT_MSG6, EV_PROB_AUTH_FAIL-->MM_WAIT_MSG6, EV_RESEND_MSG-->MM_WAIT_MSG6, NullEvent-->MM_SND_MSG5, EV_SND_MSG-->MM_SND_MSG5, EV_START_TMR-->MM_SND_MSG5, EV_RESEND_MSG-->MM_WAIT_MSG6, EV_RESEND_MSG Nov 16 13:57:38 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, IKE SA MM:158355df terminating: flags 0x01000022, refcnt 0, tuncnt 0 Nov 16 13:57:38 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, sending delete/delete with reason message Nov 16 13:57:38 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing blank hash payload Nov 16 13:57:38 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing IKE delete payload Nov 16 13:57:38 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing qm hash payload Nov 16 13:57:38 [IKEv1]IP = CHECKPOINT, IKE_DECODE SENDING Message (msgid=86451a50) with payloads : HDR + HASH (8) + DELETE (12) + NONE (0) total length : 80 Nov 16 13:57:40 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:40 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:57:40 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:57:41 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:41 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:57:41 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:57:42 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:42 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:57:42 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:57:42 [IKEv1 DEBUG]Pitcher: received a key acquire message, spi 0x0 Nov 16 13:57:42 [IKEv1]IP = CHECKPOINT, IKE Initiator: New Phase 1, Intf NP Identity Ifc, IKE Peer CHECKPOINT local Proxy Address 172.22.154.128, remote Proxy Address 172.22.157.0, Crypto map (outside_map0) Nov 16 13:57:42 [IKEv1 DEBUG]IP = CHECKPOINT, constructing ISAKMP SA payload Nov 16 13:57:42 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Traversal VID ver 02 payload Nov 16 13:57:42 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Traversal VID ver 03 payload Nov 16 13:57:42 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Traversal VID ver RFC payload Nov 16 13:57:42 [IKEv1 DEBUG]IP = CHECKPOINT, constructing Fragmentation VID + extended capabilities payload Nov 16 13:57:42 [IKEv1]IP = CHECKPOINT, IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 324 Nov 16 13:57:42 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:42 [IKEv1]IP = CHECKPOINT, IKE_DECODE RECEIVED Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 128 Nov 16 13:57:42 [IKEv1 DEBUG]IP = CHECKPOINT, processing SA payload Nov 16 13:57:42 [IKEv1 DEBUG]IP = CHECKPOINT, Oakley proposal is acceptable Nov 16 13:57:42 [IKEv1 DEBUG]IP = CHECKPOINT, processing VID payload Nov 16 13:57:42 [IKEv1 DEBUG]IP = CHECKPOINT, Received Fragmentation VID Nov 16 13:57:42 [IKEv1 DEBUG]IP = CHECKPOINT, processing VID payload Nov 16 13:57:42 [IKEv1 DEBUG]IP = CHECKPOINT, Received NAT-Traversal RFC VID Nov 16 13:57:42 [IKEv1 DEBUG]IP = CHECKPOINT, constructing ke payload Nov 16 13:57:42 [IKEv1 DEBUG]IP = CHECKPOINT, constructing nonce payload Nov 16 13:57:42 [IKEv1 DEBUG]IP = CHECKPOINT, constructing Cisco Unity VID payload Nov 16 13:57:42 [IKEv1 DEBUG]IP = CHECKPOINT, constructing xauth V6 VID payload Nov 16 13:57:42 [IKEv1 DEBUG]IP = CHECKPOINT, Send IOS VID Nov 16 13:57:42 [IKEv1 DEBUG]IP = CHECKPOINT, Constructing ASA spoofing IOS Vendor ID payload (version: 1.0.0, capabilities: 20000001) Nov 16 13:57:42 [IKEv1 DEBUG]IP = CHECKPOINT, constructing VID payload Nov 16 13:57:42 [IKEv1 DEBUG]IP = CHECKPOINT, Send Altiga/Cisco VPN3000/Cisco ASA GW VID Nov 16 13:57:42 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Discovery payload Nov 16 13:57:42 [IKEv1 DEBUG]IP = CHECKPOINT, computing NAT Discovery hash Nov 16 13:57:42 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Discovery payload Nov 16 13:57:42 [IKEv1 DEBUG]IP = CHECKPOINT, computing NAT Discovery hash Nov 16 13:57:42 [IKEv1]IP = CHECKPOINT, IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + KE (4) + NONCE (10) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + NAT-D (20) + NAT-D (20) + NONE (0) total length : 304 Nov 16 13:57:42 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:42 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:57:42 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:57:42 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:42 [IKEv1]IP = CHECKPOINT, IKE_DECODE RECEIVED Message (msgid=0) with payloads : HDR + KE (4) + NONCE (10) + NAT-D (20) + NAT-D (20) + NONE (0) total length : 232 Nov 16 13:57:42 [IKEv1 DEBUG]IP = CHECKPOINT, processing ke payload Nov 16 13:57:42 [IKEv1 DEBUG]IP = CHECKPOINT, processing ISA_KE payload Nov 16 13:57:42 [IKEv1 DEBUG]IP = CHECKPOINT, processing nonce payload Nov 16 13:57:42 [IKEv1 DEBUG]IP = CHECKPOINT, processing NAT-Discovery payload Nov 16 13:57:42 [IKEv1 DEBUG]IP = CHECKPOINT, computing NAT Discovery hash Nov 16 13:57:42 [IKEv1 DEBUG]IP = CHECKPOINT, processing NAT-Discovery payload Nov 16 13:57:42 [IKEv1 DEBUG]IP = CHECKPOINT, computing NAT Discovery hash Nov 16 13:57:42 [IKEv1]IP = CHECKPOINT, Connection landed on tunnel_group CHECKPOINT Nov 16 13:57:42 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, Generating keys for Initiator... Nov 16 13:57:42 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing ID payload Nov 16 13:57:42 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing hash payload Nov 16 13:57:42 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, Computing hash for ISAKMP Nov 16 13:57:42 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing dpd vid payload Nov 16 13:57:42 [IKEv1]IP = CHECKPOINT, IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + ID (5) + HASH (8) + VENDOR (13) + NONE (0) total length : 84 Nov 16 13:57:42 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Automatic NAT Detection Status: Remote end is NOT behind a NAT device This end IS behind a NAT device Nov 16 13:57:42 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Floating NAT-T to port 4500 Nov 16 13:57:44 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:44 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Duplicate Phase 1 packet detected. Retransmitting last packet. Nov 16 13:57:44 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, P1 Retransmit msg dispatched to MM FSM Nov 16 13:57:46 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:46 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:57:46 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:57:46 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:46 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:57:46 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:57:46 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:46 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Duplicate Phase 1 packet detected. Retransmitting last packet. Nov 16 13:57:46 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, P1 Retransmit msg dispatched to MM FSM Nov 16 13:57:48 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:48 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Duplicate Phase 1 packet detected. Retransmitting last packet. Nov 16 13:57:48 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, P1 Retransmit msg dispatched to MM FSM Nov 16 13:57:50 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:50 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:57:50 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:57:50 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:50 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:57:50 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:57:50 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:50 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Duplicate Phase 1 packet detected. Retransmitting last packet. Nov 16 13:57:50 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, P1 Retransmit msg dispatched to MM FSM Nov 16 13:57:50 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, IKE MM Initiator FSM error history (struct &0x00007f391cbd4f10) , : MM_DONE, EV_ERROR-->MM_WAIT_MSG6, EV_PROB_AUTH_FAIL-->MM_WAIT_MSG6, EV_RESEND_MSG-->MM_WAIT_MSG6, NullEvent-->MM_SND_MSG5, EV_SND_MSG-->MM_SND_MSG5, EV_START_TMR-->MM_SND_MSG5, EV_RESEND_MSG-->MM_WAIT_MSG6, EV_RESEND_MSG Nov 16 13:57:50 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, IKE SA MM:73f2ea8e terminating: flags 0x01000022, refcnt 0, tuncnt 0 Nov 16 13:57:50 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, sending delete/delete with reason message Nov 16 13:57:50 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing blank hash payload Nov 16 13:57:50 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing IKE delete payload Nov 16 13:57:50 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing qm hash payload Nov 16 13:57:50 [IKEv1]IP = CHECKPOINT, IKE_DECODE SENDING Message (msgid=eed5b3fd) with payloads : HDR + HASH (8) + DELETE (12) + NONE (0) total length : 80 Nov 16 13:57:52 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:52 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:57:52 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:57:54 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:54 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:57:54 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:57:54 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:54 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:57:54 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:57:58 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:58 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:57:58 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:57:58 [IKEv1 DEBUG]Pitcher: received a key acquire message, spi 0x0 Nov 16 13:57:58 [IKEv1]IP = CHECKPOINT, IKE Initiator: New Phase 1, Intf NP Identity Ifc, IKE Peer CHECKPOINT local Proxy Address 172.22.154.128, remote Proxy Address 172.22.157.0, Crypto map (outside_map0) Nov 16 13:57:58 [IKEv1 DEBUG]IP = CHECKPOINT, constructing ISAKMP SA payload Nov 16 13:57:58 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Traversal VID ver 02 payload Nov 16 13:57:58 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Traversal VID ver 03 payload Nov 16 13:57:58 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Traversal VID ver RFC payload Nov 16 13:57:58 [IKEv1 DEBUG]IP = CHECKPOINT, constructing Fragmentation VID + extended capabilities payload Nov 16 13:57:58 [IKEv1]IP = CHECKPOINT, IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 324 Nov 16 13:57:58 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:58 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:57:58 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:57:58 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:58 [IKEv1]IP = CHECKPOINT, IKE_DECODE RECEIVED Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 128 Nov 16 13:57:58 [IKEv1 DEBUG]IP = CHECKPOINT, processing SA payload Nov 16 13:57:58 [IKEv1 DEBUG]IP = CHECKPOINT, Oakley proposal is acceptable Nov 16 13:57:58 [IKEv1 DEBUG]IP = CHECKPOINT, processing VID payload Nov 16 13:57:58 [IKEv1 DEBUG]IP = CHECKPOINT, Received Fragmentation VID Nov 16 13:57:58 [IKEv1 DEBUG]IP = CHECKPOINT, processing VID payload Nov 16 13:57:58 [IKEv1 DEBUG]IP = CHECKPOINT, Received NAT-Traversal RFC VID Nov 16 13:57:58 [IKEv1 DEBUG]IP = CHECKPOINT, constructing ke payload Nov 16 13:57:58 [IKEv1 DEBUG]IP = CHECKPOINT, constructing nonce payload Nov 16 13:57:58 [IKEv1 DEBUG]IP = CHECKPOINT, constructing Cisco Unity VID payload Nov 16 13:57:58 [IKEv1 DEBUG]IP = CHECKPOINT, constructing xauth V6 VID payload Nov 16 13:57:58 [IKEv1 DEBUG]IP = CHECKPOINT, Send IOS VID Nov 16 13:57:58 [IKEv1 DEBUG]IP = CHECKPOINT, Constructing ASA spoofing IOS Vendor ID payload (version: 1.0.0, capabilities: 20000001) Nov 16 13:57:58 [IKEv1 DEBUG]IP = CHECKPOINT, constructing VID payload Nov 16 13:57:58 [IKEv1 DEBUG]IP = CHECKPOINT, Send Altiga/Cisco VPN3000/Cisco ASA GW VID Nov 16 13:57:58 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Discovery payload Nov 16 13:57:58 [IKEv1 DEBUG]IP = CHECKPOINT, computing NAT Discovery hash Nov 16 13:57:58 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Discovery payload Nov 16 13:57:58 [IKEv1 DEBUG]IP = CHECKPOINT, computing NAT Discovery hash Nov 16 13:57:58 [IKEv1]IP = CHECKPOINT, IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + KE (4) + NONCE (10) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + NAT-D (20) + NAT-D (20) + NONE (0) total length : 304 Nov 16 13:57:58 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:57:58 [IKEv1]IP = CHECKPOINT, IKE_DECODE RECEIVED Message (msgid=0) with payloads : HDR + KE (4) + NONCE (10) + NAT-D (20) + NAT-D (20) + NONE (0) total length : 232 Nov 16 13:57:58 [IKEv1 DEBUG]IP = CHECKPOINT, processing ke payload Nov 16 13:57:58 [IKEv1 DEBUG]IP = CHECKPOINT, processing ISA_KE payload Nov 16 13:57:58 [IKEv1 DEBUG]IP = CHECKPOINT, processing nonce payload Nov 16 13:57:58 [IKEv1 DEBUG]IP = CHECKPOINT, processing NAT-Discovery payload Nov 16 13:57:58 [IKEv1 DEBUG]IP = CHECKPOINT, computing NAT Discovery hash Nov 16 13:57:58 [IKEv1 DEBUG]IP = CHECKPOINT, processing NAT-Discovery payload Nov 16 13:57:58 [IKEv1 DEBUG]IP = CHECKPOINT, computing NAT Discovery hash Nov 16 13:57:58 [IKEv1]IP = CHECKPOINT, Connection landed on tunnel_group CHECKPOINT Nov 16 13:57:58 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, Generating keys for Initiator... Nov 16 13:57:58 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing ID payload Nov 16 13:57:58 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing hash payload Nov 16 13:57:58 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, Computing hash for ISAKMP Nov 16 13:57:58 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing dpd vid payload Nov 16 13:57:58 [IKEv1]IP = CHECKPOINT, IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + ID (5) + HASH (8) + VENDOR (13) + NONE (0) total length : 84 Nov 16 13:57:58 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Automatic NAT Detection Status: Remote end is NOT behind a NAT device This end IS behind a NAT device Nov 16 13:57:58 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Floating NAT-T to port 4500 Nov 16 13:58:00 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:58:00 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Duplicate Phase 1 packet detected. Retransmitting last packet. Nov 16 13:58:00 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, P1 Retransmit msg dispatched to MM FSM Nov 16 13:58:02 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:58:02 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:58:02 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:58:02 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:58:02 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:58:02 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:58:02 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:58:02 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Duplicate Phase 1 packet detected. Retransmitting last packet. Nov 16 13:58:02 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, P1 Retransmit msg dispatched to MM FSM Nov 16 13:58:04 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:58:04 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Duplicate Phase 1 packet detected. Retransmitting last packet. Nov 16 13:58:04 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, P1 Retransmit msg dispatched to MM FSM Nov 16 13:58:06 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:58:06 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:58:06 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:58:06 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:58:06 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Duplicate Phase 1 packet detected. Retransmitting last packet. Nov 16 13:58:06 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, P1 Retransmit msg dispatched to MM FSM Nov 16 13:58:06 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, IKE MM Initiator FSM error history (struct &0x00007f391cbd4f10) , : MM_DONE, EV_ERROR-->MM_WAIT_MSG6, EV_PROB_AUTH_FAIL-->MM_WAIT_MSG6, EV_RESEND_MSG-->MM_WAIT_MSG6, NullEvent-->MM_SND_MSG5, EV_SND_MSG-->MM_SND_MSG5, EV_START_TMR-->MM_SND_MSG5, EV_RESEND_MSG-->MM_WAIT_MSG6, EV_RESEND_MSG Nov 16 13:58:06 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, IKE SA MM:a8de61e8 terminating: flags 0x01000022, refcnt 0, tuncnt 0 Nov 16 13:58:06 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, sending delete/delete with reason message Nov 16 13:58:06 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing blank hash payload Nov 16 13:58:06 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing IKE delete payload Nov 16 13:58:06 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing qm hash payload Nov 16 13:58:06 [IKEv1]IP = CHECKPOINT, IKE_DECODE SENDING Message (msgid=2d476c7f) with payloads : HDR + HASH (8) + DELETE (12) + NONE (0) total length : 80 Nov 16 13:58:08 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:58:08 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:58:08 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:58:10 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:58:10 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:58:10 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:58:10 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:58:10 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:58:10 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:58:14 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:58:14 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:58:14 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:58:14 [IKEv1 DEBUG]Pitcher: received a key acquire message, spi 0x0 Nov 16 13:58:14 [IKEv1]IP = CHECKPOINT, IKE Initiator: New Phase 1, Intf NP Identity Ifc, IKE Peer CHECKPOINT local Proxy Address 172.22.154.128, remote Proxy Address 172.22.157.0, Crypto map (outside_map0) Nov 16 13:58:14 [IKEv1 DEBUG]IP = CHECKPOINT, constructing ISAKMP SA payload Nov 16 13:58:14 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Traversal VID ver 02 payload Nov 16 13:58:14 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Traversal VID ver 03 payload Nov 16 13:58:14 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Traversal VID ver RFC payload Nov 16 13:58:14 [IKEv1 DEBUG]IP = CHECKPOINT, constructing Fragmentation VID + extended capabilities payload Nov 16 13:58:14 [IKEv1]IP = CHECKPOINT, IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 324 Nov 16 13:58:14 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:58:14 [IKEv1]IP = CHECKPOINT, IKE_DECODE RECEIVED Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 128 Nov 16 13:58:14 [IKEv1 DEBUG]IP = CHECKPOINT, processing SA payload Nov 16 13:58:14 [IKEv1 DEBUG]IP = CHECKPOINT, Oakley proposal is acceptable Nov 16 13:58:14 [IKEv1 DEBUG]IP = CHECKPOINT, processing VID payload Nov 16 13:58:14 [IKEv1 DEBUG]IP = CHECKPOINT, Received Fragmentation VID Nov 16 13:58:14 [IKEv1 DEBUG]IP = CHECKPOINT, processing VID payload Nov 16 13:58:14 [IKEv1 DEBUG]IP = CHECKPOINT, Received NAT-Traversal RFC VID Nov 16 13:58:14 [IKEv1 DEBUG]IP = CHECKPOINT, constructing ke payload Nov 16 13:58:14 [IKEv1 DEBUG]IP = CHECKPOINT, constructing nonce payload Nov 16 13:58:14 [IKEv1 DEBUG]IP = CHECKPOINT, constructing Cisco Unity VID payload Nov 16 13:58:14 [IKEv1 DEBUG]IP = CHECKPOINT, constructing xauth V6 VID payload Nov 16 13:58:14 [IKEv1 DEBUG]IP = CHECKPOINT, Send IOS VID Nov 16 13:58:14 [IKEv1 DEBUG]IP = CHECKPOINT, Constructing ASA spoofing IOS Vendor ID payload (version: 1.0.0, capabilities: 20000001) Nov 16 13:58:14 [IKEv1 DEBUG]IP = CHECKPOINT, constructing VID payload Nov 16 13:58:14 [IKEv1 DEBUG]IP = CHECKPOINT, Send Altiga/Cisco VPN3000/Cisco ASA GW VID Nov 16 13:58:14 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Discovery payload Nov 16 13:58:14 [IKEv1 DEBUG]IP = CHECKPOINT, computing NAT Discovery hash Nov 16 13:58:14 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Discovery payload Nov 16 13:58:14 [IKEv1 DEBUG]IP = CHECKPOINT, computing NAT Discovery hash Nov 16 13:58:14 [IKEv1]IP = CHECKPOINT, IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + KE (4) + NONCE (10) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + NAT-D (20) + NAT-D (20) + NONE (0) total length : 304 Nov 16 13:58:14 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:58:14 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:58:14 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:58:14 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:58:14 [IKEv1]IP = CHECKPOINT, IKE_DECODE RECEIVED Message (msgid=0) with payloads : HDR + KE (4) + NONCE (10) + NAT-D (20) + NAT-D (20) + NONE (0) total length : 232 Nov 16 13:58:14 [IKEv1 DEBUG]IP = CHECKPOINT, processing ke payload Nov 16 13:58:14 [IKEv1 DEBUG]IP = CHECKPOINT, processing ISA_KE payload Nov 16 13:58:14 [IKEv1 DEBUG]IP = CHECKPOINT, processing nonce payload Nov 16 13:58:14 [IKEv1 DEBUG]IP = CHECKPOINT, processing NAT-Discovery payload Nov 16 13:58:14 [IKEv1 DEBUG]IP = CHECKPOINT, computing NAT Discovery hash Nov 16 13:58:14 [IKEv1 DEBUG]IP = CHECKPOINT, processing NAT-Discovery payload Nov 16 13:58:14 [IKEv1 DEBUG]IP = CHECKPOINT, computing NAT Discovery hash Nov 16 13:58:14 [IKEv1]IP = CHECKPOINT, Connection landed on tunnel_group CHECKPOINT Nov 16 13:58:14 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, Generating keys for Initiator... Nov 16 13:58:14 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing ID payload Nov 16 13:58:14 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing hash payload Nov 16 13:58:14 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, Computing hash for ISAKMP Nov 16 13:58:14 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing dpd vid payload Nov 16 13:58:14 [IKEv1]IP = CHECKPOINT, IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + ID (5) + HASH (8) + VENDOR (13) + NONE (0) total length : 84 Nov 16 13:58:14 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Automatic NAT Detection Status: Remote end is NOT behind a NAT device This end IS behind a NAT device Nov 16 13:58:14 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Floating NAT-T to port 4500 Nov 16 13:58:16 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:58:16 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Duplicate Phase 1 packet detected. Retransmitting last packet. Nov 16 13:58:16 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, P1 Retransmit msg dispatched to MM FSM Nov 16 13:58:18 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:58:18 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:58:18 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:58:18 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:58:18 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Duplicate Phase 1 packet detected. Retransmitting last packet. Nov 16 13:58:18 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, P1 Retransmit msg dispatched to MM FSM Nov 16 13:58:20 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:58:20 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Duplicate Phase 1 packet detected. Retransmitting last packet. Nov 16 13:58:20 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, P1 Retransmit msg dispatched to MM FSM Nov 16 13:58:22 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:58:22 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:58:22 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:58:22 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:58:22 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Duplicate Phase 1 packet detected. Retransmitting last packet. Nov 16 13:58:22 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, P1 Retransmit msg dispatched to MM FSM Nov 16 13:58:22 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, IKE MM Initiator FSM error history (struct &0x00007f391cbd4f10) , : MM_DONE, EV_ERROR-->MM_WAIT_MSG6, EV_PROB_AUTH_FAIL-->MM_WAIT_MSG6, EV_RESEND_MSG-->MM_WAIT_MSG6, NullEvent-->MM_SND_MSG5, EV_SND_MSG-->MM_SND_MSG5, EV_START_TMR-->MM_SND_MSG5, EV_RESEND_MSG-->MM_WAIT_MSG6, EV_RESEND_MSG Nov 16 13:58:22 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, IKE SA MM:6c24879c terminating: flags 0x01000022, refcnt 0, tuncnt 0 Nov 16 13:58:22 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, sending delete/delete with reason message Nov 16 13:58:22 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing blank hash payload Nov 16 13:58:22 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing IKE delete payload Nov 16 13:58:22 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing qm hash payload Nov 16 13:58:22 [IKEv1]IP = CHECKPOINT, IKE_DECODE SENDING Message (msgid=58e04a65) with payloads : HDR + HASH (8) + DELETE (12) + NONE (0) total length : 80 Nov 16 13:58:24 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:58:24 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:58:24 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:58:27 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:58:27 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:58:27 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:58:27 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:58:27 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:58:27 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:58:27 [IKEv1 DEBUG]Pitcher: received a key acquire message, spi 0x0 Nov 16 13:58:27 [IKEv1]IP = CHECKPOINT, IKE Initiator: New Phase 1, Intf NP Identity Ifc, IKE Peer CHECKPOINT local Proxy Address 172.22.154.128, remote Proxy Address 172.22.157.0, Crypto map (outside_map0) Nov 16 13:58:27 [IKEv1 DEBUG]IP = CHECKPOINT, constructing ISAKMP SA payload Nov 16 13:58:27 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Traversal VID ver 02 payload Nov 16 13:58:27 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Traversal VID ver 03 payload Nov 16 13:58:27 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Traversal VID ver RFC payload Nov 16 13:58:27 [IKEv1 DEBUG]IP = CHECKPOINT, constructing Fragmentation VID + extended capabilities payload Nov 16 13:58:27 [IKEv1]IP = CHECKPOINT, IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 324 Nov 16 13:58:27 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:58:27 [IKEv1]IP = CHECKPOINT, IKE_DECODE RECEIVED Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 128 Nov 16 13:58:27 [IKEv1 DEBUG]IP = CHECKPOINT, processing SA payload Nov 16 13:58:27 [IKEv1 DEBUG]IP = CHECKPOINT, Oakley proposal is acceptable Nov 16 13:58:27 [IKEv1 DEBUG]IP = CHECKPOINT, processing VID payload Nov 16 13:58:27 [IKEv1 DEBUG]IP = CHECKPOINT, Received Fragmentation VID Nov 16 13:58:27 [IKEv1 DEBUG]IP = CHECKPOINT, processing VID payload Nov 16 13:58:27 [IKEv1 DEBUG]IP = CHECKPOINT, Received NAT-Traversal RFC VID Nov 16 13:58:27 [IKEv1 DEBUG]IP = CHECKPOINT, constructing ke payload Nov 16 13:58:27 [IKEv1 DEBUG]IP = CHECKPOINT, constructing nonce payload Nov 16 13:58:27 [IKEv1 DEBUG]IP = CHECKPOINT, constructing Cisco Unity VID payload Nov 16 13:58:27 [IKEv1 DEBUG]IP = CHECKPOINT, constructing xauth V6 VID payload Nov 16 13:58:27 [IKEv1 DEBUG]IP = CHECKPOINT, Send IOS VID Nov 16 13:58:27 [IKEv1 DEBUG]IP = CHECKPOINT, Constructing ASA spoofing IOS Vendor ID payload (version: 1.0.0, capabilities: 20000001) Nov 16 13:58:27 [IKEv1 DEBUG]IP = CHECKPOINT, constructing VID payload Nov 16 13:58:27 [IKEv1 DEBUG]IP = CHECKPOINT, Send Altiga/Cisco VPN3000/Cisco ASA GW VID Nov 16 13:58:27 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Discovery payload Nov 16 13:58:27 [IKEv1 DEBUG]IP = CHECKPOINT, computing NAT Discovery hash Nov 16 13:58:27 [IKEv1 DEBUG]IP = CHECKPOINT, constructing NAT-Discovery payload Nov 16 13:58:27 [IKEv1 DEBUG]IP = CHECKPOINT, computing NAT Discovery hash Nov 16 13:58:27 [IKEv1]IP = CHECKPOINT, IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + KE (4) + NONCE (10) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + NAT-D (20) + NAT-D (20) + NONE (0) total length : 304 Nov 16 13:58:28 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:58:28 [IKEv1]IP = CHECKPOINT, IKE_DECODE RECEIVED Message (msgid=0) with payloads : HDR + KE (4) + NONCE (10) + NAT-D (20) + NAT-D (20) + NONE (0) total length : 232 Nov 16 13:58:28 [IKEv1 DEBUG]IP = CHECKPOINT, processing ke payload Nov 16 13:58:28 [IKEv1 DEBUG]IP = CHECKPOINT, processing ISA_KE payload Nov 16 13:58:28 [IKEv1 DEBUG]IP = CHECKPOINT, processing nonce payload Nov 16 13:58:28 [IKEv1 DEBUG]IP = CHECKPOINT, processing NAT-Discovery payload Nov 16 13:58:28 [IKEv1 DEBUG]IP = CHECKPOINT, computing NAT Discovery hash Nov 16 13:58:28 [IKEv1 DEBUG]IP = CHECKPOINT, processing NAT-Discovery payload Nov 16 13:58:28 [IKEv1 DEBUG]IP = CHECKPOINT, computing NAT Discovery hash Nov 16 13:58:28 [IKEv1]IP = CHECKPOINT, Connection landed on tunnel_group CHECKPOINT Nov 16 13:58:28 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, Generating keys for Initiator... Nov 16 13:58:28 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing ID payload Nov 16 13:58:28 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing hash payload Nov 16 13:58:28 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, Computing hash for ISAKMP Nov 16 13:58:28 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing dpd vid payload Nov 16 13:58:28 [IKEv1]IP = CHECKPOINT, IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + ID (5) + HASH (8) + VENDOR (13) + NONE (0) total length : 84 Nov 16 13:58:28 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Automatic NAT Detection Status: Remote end is NOT behind a NAT device This end IS behind a NAT device Nov 16 13:58:28 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Floating NAT-T to port 4500 Nov 16 13:58:30 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:58:30 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Duplicate Phase 1 packet detected. Retransmitting last packet. Nov 16 13:58:30 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, P1 Retransmit msg dispatched to MM FSM Nov 16 13:58:30 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:58:30 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:58:30 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:58:30 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:58:30 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:58:30 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 Nov 16 13:58:32 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:58:32 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Duplicate Phase 1 packet detected. Retransmitting last packet. Nov 16 13:58:32 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, P1 Retransmit msg dispatched to MM FSM Nov 16 13:58:34 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:58:34 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Duplicate Phase 1 packet detected. Retransmitting last packet. Nov 16 13:58:34 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, P1 Retransmit msg dispatched to MM FSM Nov 16 13:58:34 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:58:34 [IKEv1]IP = CHECKPOINT, Header invalid, missing SA payload! (next payload = 4) Nov 16 13:58:34 [IKEv1]IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 68 debug crypto ikev1 200 Nov 16 13:58:36 [IKEv1]IKE Receiver: Packet received on 192.168.200.10:500 from CHECKPOINT:500 Nov 16 13:58:36 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, Duplicate Phase 1 packet detected. Retransmitting last packet. Nov 16 13:58:36 [IKEv1]Group = CHECKPOINT, IP = CHECKPOINT, P1 Retransmit msg dispatched to MM FSM Nov 16 13:58:36 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, IKE MM Initiator FSM error history (struct &0x00007f391cbd4f10) , : MM_DONE, EV_ERROR-->MM_WAIT_MSG6, EV_PROB_AUTH_FAIL-->MM_WAIT_MSG6, EV_RESEND_MSG-->MM_WAIT_MSG6, NullEvent-->MM_SND_MSG5, EV_SND_MSG-->MM_SND_MSG5, EV_START_TMR-->MM_SND_MSG5, EV_RESEND_MSG-->MM_WAIT_MSG6, EV_RESEND_MSG Nov 16 13:58:36 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, IKE SA MM:14b4c37d terminating: flags 0x01000022, refcnt 0, tuncnt 0 Nov 16 13:58:36 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, sending delete/delete with reason message Nov 16 13:58:36 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing blank hash payload Nov 16 13:58:36 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing IKE delete payload Nov 16 13:58:36 [IKEv1 DEBUG]Group = CHECKPOINT, IP = CHECKPOINT, constructing qm hash payload Nov 16 13:58:36 [IKEv1]IP = CHECKPOINT, IKE_DECODE SENDING Message (msgid=420a4730) with payloads : HDR + HASH (8) + DELETE (12) + NONE (0) total length : 80