Categories

  • 436
    Topics
    1.4k
    Posts

    R

    @gigabitguru Pro tip - if you have an active tnsr software sub you should open a ticket. You can see, from the parent category, that there's not a lot of tnsr activity over here.

    I am not someone that can help you out -- but simply directing you to TAC if you need/want more responsive suggestions.

    Cheers.

  • 119.5k
    Topics
    756.0k
    Posts

    T

    @viragomann So I just caught it right as it happened, and here are the log files. it looks like I lost site to site ping at 18:31:19 (earliest reported at Site B) and it came back at 18:32:03 (also Site B). Not down for long, but that does cause the drop in phones and issues across the sites.

    Any ideas?

    Here are the logs:

    Site A (18:31:20 hours to 18:32:02) and here are the ipsec logs (Newest to Oldest)

    Apr 8 18:32:53 charon 25819 12[CFG] vici client 3498 disconnected Apr 8 18:32:53 charon 25819 12[CFG] vici client 3498 requests: list-sas Apr 8 18:32:53 charon 25819 12[CFG] vici client 3498 registered for: list-sa Apr 8 18:32:53 charon 25819 10[CFG] vici client 3498 connected Apr 8 18:32:47 charon 25819 10[CFG] vici client 3497 disconnected Apr 8 18:32:47 charon 25819 14[CFG] vici client 3497 requests: list-sas Apr 8 18:32:47 charon 25819 11[CFG] vici client 3497 registered for: list-sa Apr 8 18:32:47 charon 25819 11[CFG] vici client 3497 connected Apr 8 18:32:42 charon 25819 10[CFG] vici client 3496 disconnected Apr 8 18:32:42 charon 25819 11[CFG] vici client 3496 requests: list-sas Apr 8 18:32:42 charon 25819 11[CFG] vici client 3496 registered for: list-sa Apr 8 18:32:42 charon 25819 11[CFG] vici client 3496 connected Apr 8 18:32:39 charon 25819 07[IKE] <con1|1> nothing to initiate Apr 8 18:32:39 charon 25819 07[IKE] <con1|1> activating new tasks Apr 8 18:32:39 charon 25819 07[ENC] <con1|1> parsed INFORMATIONAL response 18 [ ] Apr 8 18:32:39 charon 25819 07[NET] <con1|1> received packet: from 75.61.85.193[500] to 207.162.137.151[500] (80 bytes) Apr 8 18:32:39 charon 25819 07[NET] <con1|1> sending packet: from 207.162.137.151[500] to 75.61.85.193[500] (80 bytes) Apr 8 18:32:39 charon 25819 07[ENC] <con1|1> generating INFORMATIONAL request 18 [ ] Apr 8 18:32:39 charon 25819 07[IKE] <con1|1> activating IKE_DPD task Apr 8 18:32:39 charon 25819 07[IKE] <con1|1> activating new tasks Apr 8 18:32:39 charon 25819 07[IKE] <con1|1> queueing IKE_DPD task Apr 8 18:32:39 charon 25819 07[IKE] <con1|1> sending DPD request Apr 8 18:32:37 charon 25819 07[CFG] vici client 3495 disconnected Apr 8 18:32:37 charon 25819 11[CFG] vici client 3495 requests: list-sas Apr 8 18:32:37 charon 25819 11[CFG] vici client 3495 registered for: list-sa Apr 8 18:32:37 charon 25819 07[CFG] vici client 3495 connected Apr 8 18:32:32 charon 25819 05[CFG] vici client 3494 disconnected Apr 8 18:32:32 charon 25819 11[CFG] vici client 3494 requests: list-sas Apr 8 18:32:32 charon 25819 11[CFG] vici client 3494 registered for: list-sa Apr 8 18:32:32 charon 25819 07[CFG] vici client 3494 connected Apr 8 18:32:29 charon 25819 11[IKE] <con1|1> nothing to initiate Apr 8 18:32:29 charon 25819 11[IKE] <con1|1> activating new tasks Apr 8 18:32:29 charon 25819 11[ENC] <con1|1> parsed INFORMATIONAL response 17 [ ] Apr 8 18:32:29 charon 25819 11[NET] <con1|1> received packet: from 75.61.85.193[500] to 207.162.137.151[500] (80 bytes) Apr 8 18:32:29 charon 25819 11[NET] <con1|1> sending packet: from 207.162.137.151[500] to 75.61.85.193[500] (80 bytes) Apr 8 18:32:29 charon 25819 11[ENC] <con1|1> generating INFORMATIONAL request 17 [ ] Apr 8 18:32:29 charon 25819 11[IKE] <con1|1> activating IKE_DPD task Apr 8 18:32:29 charon 25819 11[IKE] <con1|1> activating new tasks Apr 8 18:32:29 charon 25819 11[IKE] <con1|1> queueing IKE_DPD task Apr 8 18:32:29 charon 25819 11[IKE] <con1|1> sending DPD request Apr 8 18:32:27 charon 25819 11[CFG] vici client 3493 disconnected Apr 8 18:32:27 charon 25819 09[CFG] vici client 3493 requests: list-sas Apr 8 18:32:27 charon 25819 09[CFG] vici client 3493 registered for: list-sa Apr 8 18:32:27 charon 25819 07[CFG] vici client 3493 connected Apr 8 18:32:22 charon 25819 09[CFG] vici client 3492 disconnected Apr 8 18:32:22 charon 25819 07[CFG] vici client 3492 requests: list-sas Apr 8 18:32:22 charon 25819 16[CFG] vici client 3492 registered for: list-sa Apr 8 18:32:22 charon 25819 09[CFG] vici client 3492 connected Apr 8 18:32:19 charon 25819 16[IKE] <con1|1> nothing to initiate Apr 8 18:32:19 charon 25819 16[IKE] <con1|1> activating new tasks Apr 8 18:32:19 charon 25819 16[ENC] <con1|1> parsed INFORMATIONAL response 16 [ ] Apr 8 18:32:19 charon 25819 16[NET] <con1|1> received packet: from 75.61.85.193[500] to 207.162.137.151[500] (80 bytes) Apr 8 18:32:19 charon 25819 16[NET] <con1|1> sending packet: from 207.162.137.151[500] to 75.61.85.193[500] (80 bytes) Apr 8 18:32:19 charon 25819 16[ENC] <con1|1> generating INFORMATIONAL request 16 [ ] Apr 8 18:32:19 charon 25819 16[IKE] <con1|1> activating IKE_DPD task Apr 8 18:32:19 charon 25819 16[IKE] <con1|1> activating new tasks Apr 8 18:32:19 charon 25819 16[IKE] <con1|1> queueing IKE_DPD task Apr 8 18:32:19 charon 25819 16[IKE] <con1|1> sending DPD request Apr 8 18:32:16 charon 25819 16[CFG] vici client 3491 disconnected Apr 8 18:32:16 charon 25819 16[CFG] vici client 3491 requests: list-sas Apr 8 18:32:16 charon 25819 16[CFG] vici client 3491 registered for: list-sa Apr 8 18:32:16 charon 25819 16[CFG] vici client 3491 connected Apr 8 18:32:14 charon 25819 16[CFG] vici client 3490 disconnected Apr 8 18:32:14 charon 25819 13[CFG] vici client 3490 requests: list-sas Apr 8 18:32:14 charon 25819 13[CFG] vici client 3490 registered for: list-sa Apr 8 18:32:14 charon 25819 13[CFG] vici client 3490 connected Apr 8 18:32:11 charon 25819 15[CFG] vici client 3489 disconnected Apr 8 18:32:11 charon 25819 15[CFG] vici client 3489 requests: list-sas Apr 8 18:32:11 charon 25819 15[CFG] vici client 3489 registered for: list-sa Apr 8 18:32:11 charon 25819 13[CFG] vici client 3489 connected Apr 8 18:32:09 charon 25819 15[IKE] <con1|1> nothing to initiate Apr 8 18:32:09 charon 25819 15[IKE] <con1|1> activating new tasks Apr 8 18:32:09 charon 25819 15[ENC] <con1|1> parsed INFORMATIONAL response 15 [ ] Apr 8 18:32:09 charon 25819 15[NET] <con1|1> received packet: from 75.61.85.193[500] to 207.162.137.151[500] (80 bytes) Apr 8 18:32:09 charon 25819 15[NET] <con1|1> sending packet: from 207.162.137.151[500] to 75.61.85.193[500] (80 bytes) Apr 8 18:32:09 charon 25819 15[ENC] <con1|1> generating INFORMATIONAL request 15 [ ] Apr 8 18:32:09 charon 25819 15[IKE] <con1|1> activating IKE_DPD task Apr 8 18:32:09 charon 25819 15[IKE] <con1|1> activating new tasks Apr 8 18:32:09 charon 25819 15[IKE] <con1|1> queueing IKE_DPD task Apr 8 18:32:09 charon 25819 15[IKE] <con1|1> sending DPD request Apr 8 18:32:06 charon 25819 08[CFG] vici client 3488 disconnected Apr 8 18:32:06 charon 25819 15[CFG] vici client 3488 requests: list-sas Apr 8 18:32:06 charon 25819 15[CFG] vici client 3488 registered for: list-sa Apr 8 18:32:06 charon 25819 08[CFG] vici client 3488 connected Apr 8 18:32:04 charon 25819 15[IKE] <con1|1> nothing to initiate Apr 8 18:32:04 charon 25819 15[IKE] <con1|1> activating new tasks Apr 8 18:32:04 charon 25819 15[CHD] <con1|1> CHILD_SA con1{4} state change: DELETED => DESTROYING Apr 8 18:32:04 charon 25819 15[IKE] <con1|1> activating CHILD_DELETE task Apr 8 18:32:04 charon 25819 15[IKE] <con1|1> activating new tasks Apr 8 18:32:04 charon 25819 15[IKE] <con1|1> queueing CHILD_DELETE task Apr 8 18:32:01 charon 25819 06[CFG] vici client 3487 disconnected Apr 8 18:32:01 charon 25819 15[CFG] vici client 3487 requests: list-sas Apr 8 18:32:01 charon 25819 15[CFG] vici client 3487 registered for: list-sa Apr 8 18:32:01 charon 25819 08[CFG] vici client 3487 connected Apr 8 18:31:59 charon 25819 15[IKE] <con1|1> nothing to initiate Apr 8 18:31:59 charon 25819 15[IKE] <con1|1> activating new tasks Apr 8 18:31:59 charon 25819 15[CHD] <con1|1> CHILD_SA con1{4} state change: DELETING => DELETED Apr 8 18:31:59 charon 25819 15[IKE] <con1|1> CHILD_SA closed Apr 8 18:31:59 charon 25819 15[IKE] <con1|1> received DELETE for ESP CHILD_SA with SPI cd203610 Apr 8 18:31:59 charon 25819 15[ENC] <con1|1> parsed INFORMATIONAL response 14 [ D ] Apr 8 18:31:59 charon 25819 15[NET] <con1|1> received packet: from 75.61.85.193[500] to 207.162.137.151[500] (80 bytes) Apr 8 18:31:59 charon 25819 15[NET] <con1|1> sending packet: from 207.162.137.151[500] to 75.61.85.193[500] (80 bytes) Apr 8 18:31:59 charon 25819 15[ENC] <con1|1> generating INFORMATIONAL request 14 [ D ] Apr 8 18:31:59 charon 25819 15[CHD] <con1|1> CHILD_SA con1{4} state change: REKEYED => DELETING Apr 8 18:31:59 charon 25819 15[IKE] <con1|1> sending DELETE for ESP CHILD_SA with SPI c2676e62 Apr 8 18:31:59 charon 25819 15[IKE] <con1|1> closing CHILD_SA con1{4} with SPIs c2676e62_i (49700865 bytes) cd203610_o (76839736 bytes) and TS 10.1.0.0/16|/0 === 10.0.1.0/24|/0 10.2.0.0/16|/0 Apr 8 18:31:59 charon 25819 15[IKE] <con1|1> CHILD_REKEY task Apr 8 18:31:59 charon 25819 15[IKE] <con1|1> reinitiating already active tasks Apr 8 18:31:59 charon 25819 15[CHD] <con1|1> CHILD_SA con1{4} state change: REKEYING => REKEYED Apr 8 18:31:59 charon 25819 15[IKE] <con1|1> outbound CHILD_SA con1{5} established with SPIs c0473839_i c5258feb_o and TS 10.1.0.0/16|/0 === 10.0.1.0/24|/0 10.2.0.0/16|/0 Apr 8 18:31:59 charon 25819 15[CHD] <con1|1> SPI 0xc5258feb, src 207.162.137.151 dst 75.61.85.193 Apr 8 18:31:59 charon 25819 15[CHD] <con1|1> adding outbound ESP SA Apr 8 18:31:59 charon 25819 15[CHD] <con1|1> CHILD_SA con1{5} state change: INSTALLING => INSTALLED Apr 8 18:31:59 charon 25819 15[IKE] <con1|1> inbound CHILD_SA con1{5} established with SPIs c0473839_i c5258feb_o and TS 10.1.0.0/16|/0 === 10.0.1.0/24|/0 10.2.0.0/16|/0 Apr 8 18:31:59 charon 25819 15[CHD] <con1|1> SPI 0xc5258feb, src 207.162.137.151 dst 75.61.85.193 Apr 8 18:31:59 charon 25819 15[CHD] <con1|1> registering outbound ESP SA Apr 8 18:31:59 charon 25819 15[CHD] <con1|1> SPI 0xc0473839, src 75.61.85.193 dst 207.162.137.151 Apr 8 18:31:59 charon 25819 15[CHD] <con1|1> adding inbound ESP SA Apr 8 18:31:59 charon 25819 15[CHD] <con1|1> using HMAC_SHA2_256_128 for integrity Apr 8 18:31:59 charon 25819 15[CHD] <con1|1> using AES_CBC for encryption Apr 8 18:31:59 charon 25819 15[CHD] <con1|1> CHILD_SA con1{5} state change: CREATED => INSTALLING Apr 8 18:31:59 charon 25819 15[CFG] <con1|1> config: 10.0.1.0/24|/0, received: 10.0.1.0/24|/0 => match: 10.0.1.0/24|/0 Apr 8 18:31:59 charon 25819 15[CFG] <con1|1> config: 10.0.1.0/24|/0, received: 10.2.0.0/16|/0 => no match Apr 8 18:31:59 charon 25819 15[CFG] <con1|1> config: 10.2.0.0/16|/0, received: 10.0.1.0/24|/0 => no match Apr 8 18:31:59 charon 25819 15[CFG] <con1|1> config: 10.2.0.0/16|/0, received: 10.2.0.0/16|/0 => match: 10.2.0.0/16|/0 Apr 8 18:31:59 charon 25819 15[CFG] <con1|1> selecting traffic selectors for other: Apr 8 18:31:59 charon 25819 15[CFG] <con1|1> config: 10.1.0.0/16|/0, received: 10.1.0.0/16|/0 => match: 10.1.0.0/16|/0 Apr 8 18:31:59 charon 25819 15[CFG] <con1|1> config: 10.1.0.0/16|/0, received: 10.1.0.0/16|/0 => match: 10.1.0.0/16|/0 Apr 8 18:31:59 charon 25819 15[CFG] <con1|1> selecting traffic selectors for us: Apr 8 18:31:59 charon 25819 15[CFG] <con1|1> selected proposal: ESP:AES_CBC_256/HMAC_SHA2_256_128/MODP_2048/NO_EXT_SEQ Apr 8 18:31:59 charon 25819 15[CFG] <con1|1> configured proposals: ESP:AES_CBC_256/HMAC_SHA2_256_128/MODP_2048/NO_EXT_SEQ Apr 8 18:31:59 charon 25819 15[CFG] <con1|1> received proposals: ESP:AES_CBC_256/HMAC_SHA2_256_128/MODP_2048/NO_EXT_SEQ Apr 8 18:31:59 charon 25819 15[CFG] <con1|1> proposal matches Apr 8 18:31:59 charon 25819 15[CFG] <con1|1> selecting proposal: Apr 8 18:31:59 charon 25819 15[IKE] <con1|1> received ESP_TFC_PADDING_NOT_SUPPORTED, not using ESPv3 TFC padding Apr 8 18:31:59 charon 25819 15[IKE] <con1|1> received ESP_TFC_PADDING_NOT_SUPPORTED notify Apr 8 18:31:59 charon 25819 15[ENC] <con1|1> parsed CREATE_CHILD_SA response 13 [ N(ESP_TFC_PAD_N) SA No KE TSi TSr ] Apr 8 18:31:59 charon 25819 15[NET] <con1|1> received packet: from 75.61.85.193[500] to 207.162.137.151[500] (496 bytes) Apr 8 18:31:59 charon 25819 15[NET] <con1|1> sending packet: from 207.162.137.151[500] to 75.61.85.193[500] (512 bytes) Apr 8 18:31:59 charon 25819 15[ENC] <con1|1> generating CREATE_CHILD_SA request 13 [ N(REKEY_SA) N(ESP_TFC_PAD_N) SA No KE TSi TSr ] Apr 8 18:31:59 charon 25819 15[CHD] <con1|1> CHILD_SA con1{4} state change: INSTALLED => REKEYING Apr 8 18:31:59 charon 25819 15[IKE] <con1|1> establishing CHILD_SA con1{5} reqid 1 Apr 8 18:31:59 charon 25819 15[CFG] <con1|1> configured proposals: ESP:AES_CBC_256/HMAC_SHA2_256_128/MODP_2048/NO_EXT_SEQ Apr 8 18:31:59 charon 25819 15[CFG] <con1|1> 10.0.1.0/24|/0 Apr 8 18:31:59 charon 25819 15[CFG] <con1|1> 10.2.0.0/16|/0 Apr 8 18:31:59 charon 25819 15[CFG] <con1|1> proposing traffic selectors for other: Apr 8 18:31:59 charon 25819 15[CFG] <con1|1> 10.1.0.0/16|/0 Apr 8 18:31:59 charon 25819 15[CFG] <con1|1> 10.1.0.0/16|/0 Apr 8 18:31:59 charon 25819 15[CFG] <con1|1> proposing traffic selectors for us: Apr 8 18:31:59 charon 25819 15[IKE] <con1|1> activating CHILD_REKEY task Apr 8 18:31:59 charon 25819 15[IKE] <con1|1> activating new tasks Apr 8 18:31:59 charon 25819 15[IKE] <con1|1> queueing CHILD_REKEY task Apr 8 18:31:59 charon 25819 12[KNL] creating rekey job for CHILD_SA ESP/0xcd203610/75.61.85.193 Apr 8 18:31:56 charon 25819 12[CFG] vici client 3486 disconnected Apr 8 18:31:56 charon 25819 12[CFG] vici client 3486 requests: list-sas Apr 8 18:31:56 charon 25819 12[CFG] vici client 3486 registered for: list-sa Apr 8 18:31:56 charon 25819 12[CFG] vici client 3486 connected Apr 8 18:31:51 charon 25819 14[CFG] vici client 3485 disconnected Apr 8 18:31:51 charon 25819 12[CFG] vici client 3485 requests: list-sas Apr 8 18:31:51 charon 25819 12[CFG] vici client 3485 registered for: list-sa Apr 8 18:31:51 charon 25819 15[CFG] vici client 3485 connected Apr 8 18:31:46 charon 25819 12[CFG] vici client 3484 disconnected Apr 8 18:31:46 charon 25819 15[CFG] vici client 3484 requests: list-sas Apr 8 18:31:46 charon 25819 15[CFG] vici client 3484 registered for: list-sa Apr 8 18:31:46 charon 25819 10[CFG] vici client 3484 connected Apr 8 18:31:41 charon 25819 15[CFG] vici client 3483 disconnected Apr 8 18:31:41 charon 25819 15[CFG] vici client 3483 requests: list-sas Apr 8 18:31:41 charon 25819 15[CFG] vici client 3483 registered for: list-sa Apr 8 18:31:41 charon 25819 05[CFG] vici client 3483 connected Apr 8 18:31:36 charon 25819 15[CFG] vici client 3482 disconnected Apr 8 18:31:36 charon 25819 05[CFG] vici client 3482 requests: list-sas Apr 8 18:31:36 charon 25819 11[CFG] vici client 3482 registered for: list-sa Apr 8 18:31:36 charon 25819 05[CFG] vici client 3482 connected Apr 8 18:31:31 charon 25819 11[CFG] vici client 3481 disconnected Apr 8 18:31:31 charon 25819 05[CFG] vici client 3481 requests: list-sas Apr 8 18:31:31 charon 25819 05[CFG] vici client 3481 registered for: list-sa Apr 8 18:31:31 charon 25819 15[CFG] vici client 3481 connected Apr 8 18:31:25 charon 25819 07[CFG] vici client 3480 disconnected Apr 8 18:31:25 charon 25819 05[CFG] vici client 3480 requests: list-sas Apr 8 18:31:25 charon 25819 05[CFG] vici client 3480 registered for: list-sa Apr 8 18:31:25 charon 25819 05[CFG] vici client 3480 connected Apr 8 18:31:20 charon 25819 07[CFG] vici client 3479 disconnected Apr 8 18:31:20 charon 25819 16[CFG] vici client 3479 requests: list-sas Apr 8 18:31:20 charon 25819 05[CFG] vici client 3479 registered for: list-sa Apr 8 18:31:20 charon 25819 07[CFG] vici client 3479 connected Apr 8 18:31:15 charon 25819 05[CFG] vici client 3478 disconnected Apr 8 18:31:15 charon 25819 07[CFG] vici client 3478 requests: list-sas Apr 8 18:31:15 charon 25819 05[CFG] vici client 3478 registered for: list-sa Apr 8 18:31:15 charon 25819 05[CFG] vici client 3478 connected Apr 8 18:31:10 charon 25819 09[CFG] vici client 3477 disconnected Apr 8 18:31:10 charon 25819 05[CFG] vici client 3477 requests: list-sas Apr 8 18:31:10 charon 25819 05[CFG] vici client 3477 registered for: list-sa Apr 8 18:31:10 charon 25819 13[CFG] vici client 3477 connected Apr 8 18:31:05 charon 25819 05[CFG] vici client 3476 disconnected Apr 8 18:31:05 charon 25819 13[CFG] vici client 3476 requests: list-sas Apr 8 18:31:05 charon 25819 13[CFG] vici client 3476 registered for: list-sa Apr 8 18:31:05 charon 25819 13[CFG] vici client 3476 connected Apr 8 18:31:00 charon 25819 05[CFG] vici client 3475 disconnected Apr 8 18:31:00 charon 25819 05[CFG] vici client 3475 requests: list-sas Apr 8 18:31:00 charon 25819 05[CFG] vici client 3475 registered for: list-sa Apr 8 18:31:00 charon 25819 05[CFG] vici client 3475 connected

    Site B (18:31:19 hours to 18:32:03 Hours) and here are the ipsec logs (Newest to Oldest)

    Apr 8 18:32:53 charon 93875 07[CFG] vici client 3219 disconnected Apr 8 18:32:53 charon 93875 07[CFG] vici client 3219 requests: list-sas Apr 8 18:32:53 charon 93875 07[CFG] vici client 3219 registered for: list-sa Apr 8 18:32:53 charon 93875 06[CFG] vici client 3219 connected Apr 8 18:32:47 charon 93875 06[CFG] vici client 3218 disconnected Apr 8 18:32:47 charon 93875 06[CFG] vici client 3218 requests: list-sas Apr 8 18:32:47 charon 93875 06[CFG] vici client 3218 registered for: list-sa Apr 8 18:32:47 charon 93875 06[CFG] vici client 3218 connected Apr 8 18:32:41 charon 93875 06[CFG] vici client 3217 disconnected Apr 8 18:32:41 charon 93875 05[CFG] vici client 3217 requests: list-sas Apr 8 18:32:41 charon 93875 05[CFG] vici client 3217 registered for: list-sa Apr 8 18:32:41 charon 93875 06[CFG] vici client 3217 connected Apr 8 18:32:39 charon 93875 05[NET] <con1|1> sending packet: from 75.61.85.193[500] to 207.162.137.151[500] (80 bytes) Apr 8 18:32:39 charon 93875 05[ENC] <con1|1> generating INFORMATIONAL response 18 [ ] Apr 8 18:32:39 charon 93875 05[ENC] <con1|1> parsed INFORMATIONAL request 18 [ ] Apr 8 18:32:39 charon 93875 05[NET] <con1|1> received packet: from 207.162.137.151[500] to 75.61.85.193[500] (80 bytes) Apr 8 18:32:36 charon 93875 05[CFG] vici client 3216 disconnected Apr 8 18:32:36 charon 93875 15[CFG] vici client 3216 requests: list-sas Apr 8 18:32:36 charon 93875 15[CFG] vici client 3216 registered for: list-sa Apr 8 18:32:36 charon 93875 06[CFG] vici client 3216 connected Apr 8 18:32:31 charon 93875 15[CFG] vici client 3215 disconnected Apr 8 18:32:31 charon 93875 06[CFG] vici client 3215 requests: list-sas Apr 8 18:32:31 charon 93875 15[CFG] vici client 3215 registered for: list-sa Apr 8 18:32:31 charon 93875 13[CFG] vici client 3215 connected Apr 8 18:32:29 charon 93875 15[NET] <con1|1> sending packet: from 75.61.85.193[500] to 207.162.137.151[500] (80 bytes) Apr 8 18:32:29 charon 93875 15[ENC] <con1|1> generating INFORMATIONAL response 17 [ ] Apr 8 18:32:29 charon 93875 15[ENC] <con1|1> parsed INFORMATIONAL request 17 [ ] Apr 8 18:32:29 charon 93875 15[NET] <con1|1> received packet: from 207.162.137.151[500] to 75.61.85.193[500] (80 bytes) Apr 8 18:32:25 charon 93875 15[CFG] vici client 3214 disconnected Apr 8 18:32:25 charon 93875 13[CFG] vici client 3214 requests: list-sas Apr 8 18:32:25 charon 93875 13[CFG] vici client 3214 registered for: list-sa Apr 8 18:32:25 charon 93875 16[CFG] vici client 3214 connected Apr 8 18:32:20 charon 93875 13[CFG] vici client 3213 disconnected Apr 8 18:32:20 charon 93875 16[CFG] vici client 3213 requests: list-sas Apr 8 18:32:20 charon 93875 16[CFG] vici client 3213 registered for: list-sa Apr 8 18:32:20 charon 93875 15[CFG] vici client 3213 connected Apr 8 18:32:19 charon 93875 16[NET] <con1|1> sending packet: from 75.61.85.193[500] to 207.162.137.151[500] (80 bytes) Apr 8 18:32:19 charon 93875 16[ENC] <con1|1> generating INFORMATIONAL response 16 [ ] Apr 8 18:32:19 charon 93875 16[ENC] <con1|1> parsed INFORMATIONAL request 16 [ ] Apr 8 18:32:19 charon 93875 16[NET] <con1|1> received packet: from 207.162.137.151[500] to 75.61.85.193[500] (80 bytes) Apr 8 18:32:15 charon 93875 11[CFG] vici client 3212 disconnected Apr 8 18:32:15 charon 93875 11[CFG] vici client 3212 requests: list-sas Apr 8 18:32:15 charon 93875 11[CFG] vici client 3212 registered for: list-sa Apr 8 18:32:15 charon 93875 11[CFG] vici client 3212 connected Apr 8 18:32:10 charon 93875 11[CFG] vici client 3211 disconnected Apr 8 18:32:10 charon 93875 14[CFG] vici client 3211 requests: list-sas Apr 8 18:32:10 charon 93875 14[CFG] vici client 3211 registered for: list-sa Apr 8 18:32:10 charon 93875 14[CFG] vici client 3211 connected Apr 8 18:32:09 charon 93875 11[NET] <con1|1> sending packet: from 75.61.85.193[500] to 207.162.137.151[500] (80 bytes) Apr 8 18:32:09 charon 93875 11[ENC] <con1|1> generating INFORMATIONAL response 15 [ ] Apr 8 18:32:09 charon 93875 11[ENC] <con1|1> parsed INFORMATIONAL request 15 [ ] Apr 8 18:32:09 charon 93875 11[NET] <con1|1> received packet: from 207.162.137.151[500] to 75.61.85.193[500] (80 bytes) Apr 8 18:32:05 charon 93875 11[CFG] vici client 3210 disconnected Apr 8 18:32:05 charon 93875 11[CFG] vici client 3210 requests: list-sas Apr 8 18:32:05 charon 93875 11[CFG] vici client 3210 registered for: list-sa Apr 8 18:32:05 charon 93875 09[CFG] vici client 3210 connected Apr 8 18:32:04 charon 93875 09[IKE] <con1|1> nothing to initiate Apr 8 18:32:04 charon 93875 09[IKE] <con1|1> activating new tasks Apr 8 18:32:04 charon 93875 09[CHD] <con1|1> CHILD_SA con1{4} state change: DELETED => DESTROYING Apr 8 18:32:04 charon 93875 09[IKE] <con1|1> activating CHILD_DELETE task Apr 8 18:32:04 charon 93875 09[IKE] <con1|1> activating new tasks Apr 8 18:32:04 charon 93875 09[IKE] <con1|1> queueing CHILD_DELETE task Apr 8 18:32:00 charon 93875 09[CFG] vici client 3209 disconnected Apr 8 18:32:00 charon 93875 09[CFG] vici client 3209 requests: list-sas Apr 8 18:32:00 charon 93875 09[CFG] vici client 3209 registered for: list-sa Apr 8 18:32:00 charon 93875 08[CFG] vici client 3209 connected Apr 8 18:31:59 charon 93875 09[NET] <con1|1> sending packet: from 75.61.85.193[500] to 207.162.137.151[500] (80 bytes) Apr 8 18:31:59 charon 93875 09[ENC] <con1|1> generating INFORMATIONAL response 14 [ D ] Apr 8 18:31:59 charon 93875 09[IKE] <con1|1> outbound CHILD_SA con1{5} established with SPIs c5258feb_i c0473839_o and TS 10.0.1.0/24|/0 10.2.0.0/16|/0 === 10.1.0.0/16|/0 Apr 8 18:31:59 charon 93875 09[CHD] <con1|1> SPI 0xc0473839, src 75.61.85.193 dst 207.162.137.151 Apr 8 18:31:59 charon 93875 09[CHD] <con1|1> adding outbound ESP SA Apr 8 18:31:59 charon 93875 09[CHD] <con1|1> CHILD_SA con1{4} state change: DELETING => DELETED Apr 8 18:31:59 charon 93875 09[IKE] <con1|1> CHILD_SA closed Apr 8 18:31:59 charon 93875 09[CHD] <con1|1> CHILD_SA con1{4} state change: REKEYED => DELETING Apr 8 18:31:59 charon 93875 09[IKE] <con1|1> sending DELETE for ESP CHILD_SA with SPI cd203610 Apr 8 18:31:59 charon 93875 09[IKE] <con1|1> closing CHILD_SA con1{4} with SPIs cd203610_i (54453700 bytes) c2676e62_o (70115700 bytes) and TS 10.0.1.0/24|/0 10.2.0.0/16|/0 === 10.1.0.0/16|/0 Apr 8 18:31:59 charon 93875 09[IKE] <con1|1> received DELETE for ESP CHILD_SA with SPI c2676e62 Apr 8 18:31:59 charon 93875 09[ENC] <con1|1> parsed INFORMATIONAL request 14 [ D ] Apr 8 18:31:59 charon 93875 09[NET] <con1|1> received packet: from 207.162.137.151[500] to 75.61.85.193[500] (80 bytes) Apr 8 18:31:59 charon 93875 09[NET] <con1|1> sending packet: from 75.61.85.193[500] to 207.162.137.151[500] (496 bytes) Apr 8 18:31:59 charon 93875 09[ENC] <con1|1> generating CREATE_CHILD_SA response 13 [ N(ESP_TFC_PAD_N) SA No KE TSi TSr ] Apr 8 18:31:59 charon 93875 09[CHD] <con1|1> CHILD_SA con1{4} state change: REKEYING => REKEYED Apr 8 18:31:59 charon 93875 09[CHD] <con1|1> CHILD_SA con1{4} state change: INSTALLED => REKEYING Apr 8 18:31:59 charon 93875 09[CHD] <con1|1> CHILD_SA con1{5} state change: INSTALLING => INSTALLED Apr 8 18:31:59 charon 93875 09[IKE] <con1|1> inbound CHILD_SA con1{5} established with SPIs c5258feb_i c0473839_o and TS 10.0.1.0/24|/0 10.2.0.0/16|/0 === 10.1.0.0/16|/0 Apr 8 18:31:59 charon 93875 09[CHD] <con1|1> SPI 0xc0473839, src 75.61.85.193 dst 207.162.137.151 Apr 8 18:31:59 charon 93875 09[CHD] <con1|1> registering outbound ESP SA Apr 8 18:31:59 charon 93875 09[CHD] <con1|1> SPI 0xc5258feb, src 207.162.137.151 dst 75.61.85.193 Apr 8 18:31:59 charon 93875 09[CHD] <con1|1> adding inbound ESP SA Apr 8 18:31:59 charon 93875 09[CHD] <con1|1> using HMAC_SHA2_256_128 for integrity Apr 8 18:31:59 charon 93875 09[CHD] <con1|1> using AES_CBC for encryption Apr 8 18:31:59 charon 93875 09[CHD] <con1|1> CHILD_SA con1{5} state change: CREATED => INSTALLING Apr 8 18:31:59 charon 93875 09[CFG] <con1|1> config: 10.1.0.0/16|/0, received: 10.1.0.0/16|/0 => match: 10.1.0.0/16|/0 Apr 8 18:31:59 charon 93875 09[CFG] <con1|1> config: 10.1.0.0/16|/0, received: 10.1.0.0/16|/0 => match: 10.1.0.0/16|/0 Apr 8 18:31:59 charon 93875 09[CFG] <con1|1> selecting traffic selectors for other: Apr 8 18:31:59 charon 93875 09[CFG] <con1|1> config: 10.0.1.0/24|/0, received: 10.0.1.0/24|/0 => match: 10.0.1.0/24|/0 Apr 8 18:31:59 charon 93875 09[CFG] <con1|1> config: 10.0.1.0/24|/0, received: 10.2.0.0/16|/0 => no match Apr 8 18:31:59 charon 93875 09[CFG] <con1|1> config: 10.2.0.0/16|/0, received: 10.0.1.0/24|/0 => no match Apr 8 18:31:59 charon 93875 09[CFG] <con1|1> config: 10.2.0.0/16|/0, received: 10.2.0.0/16|/0 => match: 10.2.0.0/16|/0 Apr 8 18:31:59 charon 93875 09[CFG] <con1|1> selecting traffic selectors for us: Apr 8 18:31:59 charon 93875 09[CFG] <con1|1> selected proposal: ESP:AES_CBC_256/HMAC_SHA2_256_128/MODP_2048/NO_EXT_SEQ Apr 8 18:31:59 charon 93875 09[CFG] <con1|1> configured proposals: ESP:AES_CBC_256/HMAC_SHA2_256_128/MODP_2048/NO_EXT_SEQ Apr 8 18:31:59 charon 93875 09[CFG] <con1|1> received proposals: ESP:AES_CBC_256/HMAC_SHA2_256_128/MODP_2048/NO_EXT_SEQ Apr 8 18:31:59 charon 93875 09[CFG] <con1|1> proposal matches Apr 8 18:31:59 charon 93875 09[CFG] <con1|1> selecting proposal: Apr 8 18:31:59 charon 93875 09[IKE] <con1|1> received ESP_TFC_PADDING_NOT_SUPPORTED, not using ESPv3 TFC padding Apr 8 18:31:59 charon 93875 09[ENC] <con1|1> parsed CREATE_CHILD_SA request 13 [ N(REKEY_SA) N(ESP_TFC_PAD_N) SA No KE TSi TSr ] Apr 8 18:31:59 charon 93875 09[NET] <con1|1> received packet: from 207.162.137.151[500] to 75.61.85.193[500] (512 bytes) Apr 8 18:31:55 charon 93875 09[CFG] vici client 3208 disconnected Apr 8 18:31:55 charon 93875 12[CFG] vici client 3208 requests: list-sas Apr 8 18:31:55 charon 93875 08[CFG] vici client 3208 registered for: list-sa Apr 8 18:31:55 charon 93875 08[CFG] vici client 3208 connected Apr 8 18:31:49 charon 93875 08[CFG] vici client 3207 disconnected Apr 8 18:31:49 charon 93875 12[CFG] vici client 3207 requests: list-sas Apr 8 18:31:49 charon 93875 08[CFG] vici client 3207 registered for: list-sa Apr 8 18:31:49 charon 93875 07[CFG] vici client 3207 connected Apr 8 18:31:44 charon 93875 08[CFG] vici client 3206 disconnected Apr 8 18:31:44 charon 93875 08[CFG] vici client 3206 requests: list-sas Apr 8 18:31:44 charon 93875 08[CFG] vici client 3206 registered for: list-sa Apr 8 18:31:44 charon 93875 08[CFG] vici client 3206 connected Apr 8 18:31:39 charon 93875 08[CFG] vici client 3205 disconnected Apr 8 18:31:39 charon 93875 10[CFG] vici client 3205 requests: list-sas Apr 8 18:31:39 charon 93875 10[CFG] vici client 3205 registered for: list-sa Apr 8 18:31:39 charon 93875 10[CFG] vici client 3205 connected Apr 8 18:31:34 charon 93875 07[CFG] vici client 3204 disconnected Apr 8 18:31:34 charon 93875 07[CFG] vici client 3204 requests: list-sas Apr 8 18:31:34 charon 93875 07[CFG] vici client 3204 registered for: list-sa Apr 8 18:31:34 charon 93875 05[CFG] vici client 3204 connected Apr 8 18:31:29 charon 93875 07[CFG] vici client 3203 disconnected Apr 8 18:31:29 charon 93875 07[CFG] vici client 3203 requests: list-sas Apr 8 18:31:29 charon 93875 05[CFG] vici client 3203 registered for: list-sa Apr 8 18:31:29 charon 93875 06[CFG] vici client 3203 connected Apr 8 18:31:24 charon 93875 06[CFG] vici client 3202 disconnected Apr 8 18:31:24 charon 93875 06[CFG] vici client 3202 requests: list-sas Apr 8 18:31:24 charon 93875 06[CFG] vici client 3202 registered for: list-sa Apr 8 18:31:24 charon 93875 13[CFG] vici client 3202 connected Apr 8 18:31:19 charon 93875 06[CFG] vici client 3201 disconnected Apr 8 18:31:19 charon 93875 06[CFG] vici client 3201 requests: list-sas Apr 8 18:31:19 charon 93875 06[CFG] vici client 3201 registered for: list-sa Apr 8 18:31:19 charon 93875 13[CFG] vici client 3201 connected Apr 8 18:31:14 charon 93875 15[CFG] vici client 3200 disconnected Apr 8 18:31:14 charon 93875 06[CFG] vici client 3200 requests: list-sas Apr 8 18:31:14 charon 93875 06[CFG] vici client 3200 registered for: list-sa Apr 8 18:31:14 charon 93875 06[CFG] vici client 3200 connected Apr 8 18:31:08 charon 93875 06[CFG] vici client 3199 disconnected Apr 8 18:31:08 charon 93875 15[CFG] vici client 3199 requests: list-sas Apr 8 18:31:08 charon 93875 15[CFG] vici client 3199 registered for: list-sa Apr 8 18:31:08 charon 93875 06[CFG] vici client 3199 connected Apr 8 18:31:03 charon 93875 15[CFG] vici client 3198 disconnected Apr 8 18:31:03 charon 93875 15[CFG] vici client 3198 requests: list-sas Apr 8 18:31:03 charon 93875 06[CFG] vici client 3198 registered for: list-sa Apr 8 18:31:03 charon 93875 14[CFG] vici client 3198 connected

  • Discussions about pfSense software packages

    Cache/Proxy IDS/IPS Traffic Monitoring pfBlockerNG UPS Tools ACME FRR Tailscale WireGuard
    20.1k
    Topics
    126.7k
    Posts

    GertjanG

    @manval said in pfBlockerNG blocks Greek IPs from StarLink as IP located in North America:

    I disabled cron in pfBlogerNG and it is still running !

    The cron task handles also the max log file sizes :

    8a399f8d-98e1-4e53-9c3b-1249432f5ceb-image.png

    so, imho, if set to disabled, it will still keep care of these files by rotating them.
    Not doing so will fill up the disk.

  • 42.5k
    Topics
    266.6k
    Posts

    C

    Savez vous ou se trouve l'option ALG SIP sur la version 2.7.2?

    Je fais de la Vowifi et ca bloque.

    Par avance merci

  • Information about hardware available from Netgate

    2.5k
    Topics
    20.0k
    Posts

    S

    @andrew_cb said in Another Netgate with storage failure, 6 in total so far:

    For example, if a log file is written every 1 second, then in the span of 5 seconds there could be 640 KB (5 x 128 KB blocks) of data to write, just for that single log file.

    Maybe, but it could also be one block if all updates fit into the one block. (there is also compression)

    Note the amount of metadata changes with recordsize (there are more blocks per file), as do things like write speed.

    It stands to reason though most of the writing on pfSense is log files, or periodic file updates like pfBlocker feeds.

  • Information about hardware available from Netgate

    44
    Topics
    211
    Posts

    AriKellyA

    It looks like unified web management could be coming soon. It would be great if it means easier control and management of all web services in one place. Let's see if any companies announce more details about it!

  • Feel free to talk about anything and everything here

    Forum Feedback Community Job Board
    3.5k
    Topics
    18.7k
    Posts

    stephenw10S

    It's fine as long as the AI is translating accurately.

    The problem is that spammers are increasingly using AI tools to generate generic content for replies that appear legit if you don't look too hard. 😉

Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.