Hi;
Thanks for your answer. Can you tell me what is wrong? I have corrected the life time seconds. I forgot to paste it here.
Here is my debug output:
Dec 7 11:47:38 ike_free_negotiation: Start, nego = 1
Dec 7 11:47:38 ike_free_id_payload: Start, id type = 4
Dec 7 11:47:38 ike_free_id_payload: Start, id type = 4
Dec 7 11:47:38 ike_free_negotiation_qm: Start, nego = 2
Dec 7 11:47:38 ike_free_negotiation: Start, nego = 2
Dec 7 11:47:38 ike_free_id_payload: Start, id type = 4
Dec 7 11:47:38 ike_free_id_payload: Start, id type = 4
Dec 7 11:47:38 ike_free_negotiation_qm: Start, nego = 3
Dec 7 11:47:38 ike_free_negotiation: Start, nego = 3
Dec 7 11:47:38 ike_free_id_payload: Start, id type = 4
Dec 7 11:47:38 ike_free_id_payload: Start, id type = 4
Dec 7 11:47:38 ike_free_negotiation_isakmp: Start, nego = -1
Dec 7 11:47:38 ike_free_negotiation: Start, nego = -1
Dec 7 11:47:38 ike_free_id_payload: Start, id type = 1
Dec 7 11:47:38 ike_free_id_payload: Start, id type = 1
Dec 7 11:47:38 ike_free_sa: Start
Dec 7 11:47:39 ike_get_sa: Start, SA = { e75c4884 d53826b6 - 00000000 00000000 } / 00000000, remote = 1.1.1.1:500
Dec 7 11:47:39 ike_sa_allocate: Start, SA = { e75c4884 d53826b6 - d61035f1 8048caff }
Dec 7 11:47:39 ike_init_isakmp_sa: Start, remote = 1.1.1.1:500, initiator = 0
Dec 7 11:47:39 ike_decode_packet: Start
Dec 7 11:47:39 ike_decode_packet: Start, SA = { e75c4884 d53826b6 - d61035f1 8048caff} / 00000000, nego = -1
Dec 7 11:47:39 ike_decode_payload_sa: Start
Dec 7 11:47:39 ike_decode_payload_t: Start, # trans = 4
Dec 7 11:47:39 ike_st_i_vid: VID[0..16] = afcad713 68a1f1c9 ...
Dec 7 11:47:39 ike_st_i_vid: VID[0..16] = 4a131c81 07035845 ...
Dec 7 11:47:39 ike_st_i_vid: VID[0..16] = 7d9419a6 5310ca6f ...
Dec 7 11:47:39 The remote server at 1.1.1.1:500 is 'draft-ietf-ipsec-nat-t-ike-03'
Dec 7 11:47:39 ike_st_i_vid: VID[0..16] = cd604643 35df21f8 ...
Dec 7 11:47:39 The remote server at 1.1.1.1:500 is 'draft-ietf-ipsec-nat-t-ike-02'
Dec 7 11:47:39 ike_st_i_vid: VID[0..16] = 90cb8091 3ebb696e ...
Dec 7 11:47:39 The remote server at 1.1.1.1:500 is 'draft-ietf-ipsec-nat-t-ike-02'
Dec 7 11:47:39 ike_st_i_vid: VID[0..16] = 4485152d 18b6bbcd ...
Dec 7 11:47:39 The remote server at 1.1.1.1:500 is 'draft-ietf-ipsec-nat-t-ike-00'
Dec 7 11:47:39 ike_st_i_sa_proposal: Start
Dec 7 11:47:39 ike_isakmp_sa_reply: Start
Dec 7 11:47:39 ike_st_i_cr: Start
Dec 7 11:47:39 ike_st_i_cert: Start
Dec 7 11:47:39 ike_st_i_private: Start
Dec 7 11:47:39 ike_st_o_sa_values: Start
Dec 7 11:47:39 ike_policy_reply_isakmp_vendor_ids: Start
Dec 7 11:47:39 ike_st_o_private: Start
Dec 7 11:47:39 ike_policy_reply_private_payload_out: Start
Dec 7 11:47:39 ike_encode_packet: Start, SA = { 0xe75c4884 d53826b6 - d61035f1 8048caff } / 00000000, nego = -1
Dec 7 11:47:39 ike_send_packet: Start, send SA = { e75c4884 d53826b6 - d61035f1 8048caff}, nego = -1, src=2.2.2.2:500, dst = 1.1.1.1:500, routing table id = 0
Dec 7 11:47:39 ike_get_sa: Start, SA = { e75c4884 d53826b6 - d61035f1 8048caff } / 00000000, remote = 1.1.1.1:500
Dec 7 11:47:39 ike_sa_find: Found SA = { e75c4884 d53826b6 - d61035f1 8048caff }
Dec 7 11:47:39 ike_decode_packet: Start
Dec 7 11:47:39 ike_decode_packet: Start, SA = { e75c4884 d53826b6 - d61035f1 8048caff} / 00000000, nego = -1
Dec 7 11:47:39 ike_st_i_nonce: Start, nonce[0..16] = 963b2537 efffb858 ...
Dec 7 11:47:39 ike_st_i_ke: Ke[0..128] = 4d67ee00 71ce0738 ...
Dec 7 11:47:39 ike_st_i_cr: Start
Dec 7 11:47:39 ike_st_i_cert: Start
Dec 7 11:47:39 ike_st_i_private: Start
Dec 7 11:47:39 my_ipaddr_as_ike_id: add <2.2.2.2>
Dec 7 11:47:39 ike_st_o_ke: Start
Dec 7 11:47:39 ike_st_o_nonce: Start
Dec 7 11:47:39 ike_policy_reply_isakmp_nonce_data_len: Start
Dec 7 11:47:39 ike_find_pre_shared_key: Find pre shared key key for 2.2.2.2:500, id = No Id -> 1.1.1.1:500, id = No Id
Dec 7 11:47:39 ike_policy_reply_find_pre_shared_key: Start
Dec 7 11:47:39 ike_st_o_private: Start
Dec 7 11:47:39 ike_policy_reply_private_payload_out: Start
Dec 7 11:47:39 my_ipaddr_as_ike_id: add <2.2.2.2>
Dec 7 11:47:39 ike_policy_reply_private_payload_out: Start
Dec 7 11:47:39 ike_policy_reply_private_payload_out: Start
Dec 7 11:47:39 ike_st_o_calc_skeyid: Calculating skeyid
Dec 7 11:47:39 ike_find_pre_shared_key: Find pre shared key key for 2.2.2.2:500, id = No Id -> 1.1.1.1:500, id = No Id
Dec 7 11:47:39 ike_encode_packet: Start, SA = { 0xe75c4884 d53826b6 - d61035f1 8048caff } / 00000000, nego = -1
Dec 7 11:47:39 ike_send_packet: Start, send SA = { e75c4884 d53826b6 - d61035f1 8048caff}, nego = -1, src=2.2.2.2:500, dst = .1.1.1.1:500, routing table id = 0
Dec 7 11:47:39 ike_get_sa: Start, SA = { e75c4884 d53826b6 - d61035f1 8048caff } / 00000000, remote = 1.1.1.1:500
Dec 7 11:47:39 ike_sa_find: Found SA = { e75c4884 d53826b6 - d61035f1 8048caff }
Dec 7 11:47:39 ike_decode_packet: Start
Dec 7 11:47:39 ike_decode_packet: Start, SA = { e75c4884 d53826b6 - d61035f1 8048caff} / 00000000, nego = -1
Dec 7 11:47:39 ike_st_i_encrypt: Check that packet was encrypted succeeded
Dec 7 11:47:39 ike_st_i_id: Start
Dec 7 11:47:39 ike_st_i_hash: Start, hash[0..20] = 15f77f59 be331ec0 ...
Dec 7 11:47:39 ike_calc_mac: Start, initiator = false, local = false
Dec 7 11:47:39 ike_st_i_cert: Start
Dec 7 11:47:39 ike_st_i_private: Start
Dec 7 11:47:39 ike_st_o_id: Start
Dec 7 11:47:39 ike_policy_reply_isakmp_id: Start
Dec 7 11:47:39 ike_st_o_hash: Start
Dec 7 11:47:39 ike_calc_mac: Start, initiator = false, local = true
Dec 7 11:47:39 ike_st_o_status_n: Start
Dec 7 11:47:39 ike_st_o_private: Start
Dec 7 11:47:39 ike_policy_reply_private_payload_out: Start
Dec 7 11:47:39 ike_st_o_encrypt: Marking encryption for packet
Dec 7 11:47:39 ike_st_o_wait_done: Marking for waiting for done