rb750up+cisco

Обсуждение ПО и его настройки
webmins
Сообщения: 8
Зарегистрирован: 30 июл 2013, 11:24

Итак, после перепрошивки на 6.1 дело сдвинулось. А именно, первая фаза прошла успешно. Вторая в виде есп пакета на удалённую циску не устанавливается.
Товарищи подскажите что забыл?

привожу кусочек лога.
Jan/02/1970 03:00:19 memory ipsec, debug This product is linked with OpenSSL
Jan/02/1970 03:00:20 memory ipsec, debug q.w.e.r[500] used as isakmp port (fd=18)
Jan/02/1970 03:00:20 memory ipsec, debug 10.255.100.1[500] used as isakmp port (fd=19)
Jan/02/1970 03:00:21 memory interface, info ether1-gateway link up (speed 100M, full duplex)
Jan/02/1970 03:00:21 memory interface, info ether2-master-local link up (speed 100M, full duplex)
Jul/31/2013 12:55:39 memory system, info router rebooted
Jul/31/2013 14:15:16 memory system, error, critical login failure for user admin from 10.255.100.96 via web
Jul/31/2013 14:15:22 memory system, info, account user admin logged in from 10.255.100.96 via web

Jul/31/2013 14:39:49 memory ipsec, debug, packet 0138295b 255344bc 81398493 80f511f6 8b985dbc 1a82cdc0 34e70265 6430d837
Jul/31/2013 14:39:49 memory ipsec, debug, packet 123a2600 008e017e 05455d1b e8b9f008 c5d7e799 e1f1a2a0 a49c0fcb c439d653
Jul/31/2013 14:39:49 memory ipsec, debug, packet 1318c32d 79fcb076 88f92adf 5b3c1810 2a01ac4b a52da811 f9484901 d2ba4bb5
Jul/31/2013 14:39:49 memory ipsec, debug, packet d131846a a1b7cc86 7ca39658 345db612 1bf0c73a 66e12023 4e60e251 67dba482
Jul/31/2013 14:39:49 memory ipsec, debug, packet 6c6eb197 1d2eeb4d 87c2af18 82d13b45 d4dc0747 d8ba91d1 db26e248 2a263958
Jul/31/2013 14:39:49 memory ipsec, debug, packet aca97311 2357166f b2ea9346 849d3e52 35223abf 9b065118 9424a532 89a03503
Jul/31/2013 14:39:49 memory ipsec, debug, packet 9ab237b5 299e81fb 49523088 9a6c1133 bbb3fa9e 90170855 0a07e9ec 16c2818e
Jul/31/2013 14:39:49 memory ipsec, debug, packet 0f144611 d4a5b77a 57efa04f 7d95a7f7 5ee05418 79c1b0c3 a81b7cd1 e2418799
Jul/31/2013 14:39:49 memory ipsec, debug, packet a5977786 1f513dc0 011a15c4 81b23bea 00000001 00000001 00000034 01010001
Jul/31/2013 14:39:49 memory ipsec, debug, packet 0000002c 01010000 800b0001 800c0e10 800b0002 000c0004 10000000 80010005
Jul/31/2013 14:39:49 memory ipsec, debug, packet 80030001 80020002 80040002 011101f4 c2557eaa
Jul/31/2013 14:39:49 memory ipsec, debug, packet hmac(hmac_sha1)
Jul/31/2013 14:39:49 memory ipsec, debug, packet HASH computed:
Jul/31/2013 14:39:49 memory ipsec, debug, packet c74b2785 05118b9d c5c1c1b7 c0acf4df 4eba30b3
Jul/31/2013 14:39:49 memory ipsec, debug, packet HASH for PSK validated.
Jul/31/2013 14:39:49 memory ipsec, debug, packet peer's ID:
Jul/31/2013 14:39:49 memory ipsec, debug, packet 011101f4 c2557eaa
Jul/31/2013 14:39:49 memory ipsec, debug, packet ===
Jul/31/2013 14:39:49 memory ipsec, debug, packet compute IV for phase2
Jul/31/2013 14:39:49 memory ipsec, debug, packet phase1 last IV:
Jul/31/2013 14:39:49 memory ipsec, debug, packet 5a76ed09 3aa2b9aa aca35778
Jul/31/2013 14:39:49 memory ipsec, debug, packet hash(sha1)
Jul/31/2013 14:39:49 memory ipsec, debug, packet encryption(3des)
Jul/31/2013 14:39:49 memory ipsec, debug, packet phase2 IV computed:
Jul/31/2013 14:39:49 memory ipsec, debug, packet bb00cf66 9eb8f792
Jul/31/2013 14:39:49 memory ipsec, debug, packet HASH with:
Jul/31/2013 14:39:49 memory ipsec, debug, packet aca35778 0000001c 00000001 01106002 011a15c4 81b23bea a5977786 1f513dc0
Jul/31/2013 14:39:49 memory ipsec, debug, packet hmac(hmac_sha1)
Jul/31/2013 14:39:49 memory ipsec, debug, packet HASH computed:
Jul/31/2013 14:39:49 memory ipsec, debug, packet e403e138 351e4abf 80fe5273 bec0fa68 f563cf2e
Jul/31/2013 14:39:49 memory ipsec, debug, packet begin encryption.
Jul/31/2013 14:39:49 memory ipsec, debug, packet encryption(3des)
Jul/31/2013 14:39:49 memory ipsec, debug, packet pad length = 4
Jul/31/2013 14:39:49 memory ipsec, debug, packet 0b000018 e403e138 351e4abf 80fe5273 bec0fa68 f563cf2e 0000001c 00000001
Jul/31/2013 14:39:49 memory ipsec, debug, packet 01106002 011a15c4 81b23bea a5977786 1f513dc0 89f46503
Jul/31/2013 14:39:49 memory ipsec, debug, packet encryption(3des)
Jul/31/2013 14:39:49 memory ipsec, debug, packet with key:
Jul/31/2013 14:39:49 memory ipsec, debug, packet cf9d5328 e2cbad0b 6a415404 6a83d1c3 9282574b c3e2de3a
Jul/31/2013 14:39:49 memory ipsec, debug, packet encrypted payload by IV:
Jul/31/2013 14:39:49 memory ipsec, debug, packet bb00cf66 9eb8f792
Jul/31/2013 14:39:49 memory ipsec, debug, packet save IV for next:
Jul/31/2013 14:39:49 memory ipsec, debug, packet fb51359e 8cf38a4e
Jul/31/2013 14:39:49 memory ipsec, debug, packet encrypted.
Jul/31/2013 14:39:49 memory ipsec, debug, packet 84 bytes from q.w.e.r[500] to z.x.c.v[500]
Jul/31/2013 14:39:49 memory ipsec, debug, packet sockname q.w.e.r[500]
Jul/31/2013 14:39:49 memory ipsec, debug, packet send packet from q.w.e.r[500]
Jul/31/2013 14:39:49 memory ipsec, debug, packet send packet to z.x.c.v[500]
Jul/31/2013 14:39:49 memory ipsec, debug, packet src4 q.w.e.r[500]
Jul/31/2013 14:39:49 memory ipsec, debug, packet dst4 z.x.c.v[500]
Jul/31/2013 14:39:49 memory ipsec, debug, packet 1 times of 84 bytes message will be sent to z.x.c.v[500]
Jul/31/2013 14:39:49 memory ipsec, debug, packet 011a15c4 81b23bea a5977786 1f513dc0 08100501 aca35778 00000054 aac78e3f
Jul/31/2013 14:39:49 memory ipsec, debug, packet fefc1138 26dfce0d fb3294b3 d532fb14 4e711c2a f4cb7a60 0da65224 da1fdd8b
Jul/31/2013 14:39:49 memory ipsec, debug, packet b8162811 03d0f442 6340bf86 fb51359e 8cf38a4e
Jul/31/2013 14:39:49 memory ipsec, debug, packet sendto Information notify.
Jul/31/2013 14:39:49 memory ipsec, debug ISAKMP-SA established q.w.e.r[500]-z.x.c.v[500] spi:011a15c481b23bea:a59777861f513dc0
Jul/31/2013 14:39:49 memory ipsec, debug, packet ===
Jul/31/2013 14:39:49 memory ipsec, debug, packet ==========
Jul/31/2013 14:39:49 memory ipsec, debug, packet 92 bytes message received from z.x.c.v[500] to q.w.e.r[500]
Jul/31/2013 14:39:49 memory ipsec, debug, packet 011a15c4 81b23bea a5977786 1f513dc0 08100501 8cb494f0 0000005c 4635bb75
Jul/31/2013 14:39:49 memory ipsec, debug, packet b0099b68 8292724b 67bdd98b 1a39ad3a 767d7839 cca1ec97 0eda02dc 355c5057
Jul/31/2013 14:39:49 memory ipsec, debug, packet 16d916be 21faf3b6 e2aeb956 ac2bd21c 73ae3219 8dc21d68 c3b599f2
Jul/31/2013 14:39:49 memory ipsec, debug, packet receive Information.
Jul/31/2013 14:39:49 memory ipsec, debug, packet compute IV for phase2
Jul/31/2013 14:39:49 memory ipsec, debug, packet phase1 last IV:
Jul/31/2013 14:39:49 memory ipsec, debug, packet 5a76ed09 3aa2b9aa 8cb494f0
Jul/31/2013 14:39:49 memory ipsec, debug, packet hash(sha1)
Jul/31/2013 14:39:49 memory ipsec, debug, packet encryption(3des)
Jul/31/2013 14:39:49 memory ipsec, debug, packet phase2 IV computed:
Jul/31/2013 14:39:49 memory ipsec, debug, packet 02fcf78d 6ea662b5
Jul/31/2013 14:39:49 memory ipsec, debug, packet encryption(3des)
Jul/31/2013 14:39:49 memory ipsec, debug, packet IV was saved for next processing:
Jul/31/2013 14:39:49 memory ipsec, debug, packet 8dc21d68 c3b599f2
Jul/31/2013 14:39:49 memory ipsec, debug, packet encryption(3des)
Jul/31/2013 14:39:49 memory ipsec, debug, packet with key:
Jul/31/2013 14:39:49 memory ipsec, debug, packet cf9d5328 e2cbad0b 6a415404 6a83d1c3 9282574b c3e2de3a
Jul/31/2013 14:39:49 memory ipsec, debug, packet decrypted payload by IV:
Jul/31/2013 14:39:49 memory ipsec, debug, packet 02fcf78d 6ea662b5
Jul/31/2013 14:39:49 memory ipsec, debug, packet decrypted payload, but not trimed.
Jul/31/2013 14:39:49 memory ipsec, debug, packet 0b000018 5cd143f8 b1da6c99 483776bf 81a1fdeb 7f2ad1cc 00000024 00000001
Jul/31/2013 14:39:49 memory ipsec, debug, packet 01106000 011a15c4 81b23bea a5977786 1f513dc0 800b0001 800c0e10 00000000
Jul/31/2013 14:39:49 memory ipsec, debug, packet padding len=1
Jul/31/2013 14:39:49 memory ipsec, debug, packet skip to trim padding.
Jul/31/2013 14:39:49 memory ipsec, debug, packet decrypted.
Jul/31/2013 14:39:49 memory ipsec, debug, packet 011a15c4 81b23bea a5977786 1f513dc0 08100501 8cb494f0 0000005c 0b000018
Jul/31/2013 14:39:49 memory ipsec, debug, packet 5cd143f8 b1da6c99 483776bf 81a1fdeb 7f2ad1cc 00000024 00000001 01106000
Jul/31/2013 14:39:49 memory ipsec, debug, packet 011a15c4 81b23bea a5977786 1f513dc0 800b0001 800c0e10 00000000
Jul/31/2013 14:39:49 memory ipsec, debug, packet HASH with:
Jul/31/2013 14:39:49 memory ipsec, debug, packet 8cb494f0 00000024 00000001 01106000 011a15c4 81b23bea a5977786 1f513dc0
Jul/31/2013 14:39:49 memory ipsec, debug, packet 800b0001 800c0e10
Jul/31/2013 14:39:49 memory ipsec, debug, packet hmac(hmac_sha1)
Jul/31/2013 14:39:49 memory ipsec, debug, packet HASH computed:
Jul/31/2013 14:39:49 memory ipsec, debug, packet 5cd143f8 b1da6c99 483776bf 81a1fdeb 7f2ad1cc
Jul/31/2013 14:39:49 memory ipsec, debug, packet hash validated.
Jul/31/2013 14:39:49 memory ipsec, debug, packet begin.
Jul/31/2013 14:39:49 memory ipsec, debug, packet seen nptype=8(hash)
Jul/31/2013 14:39:49 memory ipsec, debug, packet seen nptype=11(notify)
Jul/31/2013 14:39:49 memory ipsec, debug, packet succeed.
Jul/31/2013 14:39:49 memory ipsec, debug, packet notification message 24576:RESPONDER-LIFETIME, doi=1 proto_id=1 spi=011a15c481b23bea a59777861f513dc0 (size=16).
Jul/31/2013 14:39:58 memory system, error, critical login failure for user admin from 10.255.100.96 via web
Jul/31/2013 14:40:04 memory system, info, account user admin logged in from 10.255.100.96 via web


Собственно, ещё листинг



Jul/31/2013 14:50:05 memory ipsec, debug, packet skip to trim padding.
Jul/31/2013 14:50:05 memory ipsec, debug, packet decrypted.
Jul/31/2013 14:50:05 memory ipsec, debug, packet 8e78d683 24d96f4a a5977786 65dd393c 08100501 7137e654 0000005c 0b000018
Jul/31/2013 14:50:05 memory ipsec, debug, packet a566107c 895ccc17 a8e856e7 76efd689 d93bd0b5 00000024 00000001 01106000
Jul/31/2013 14:50:05 memory ipsec, debug, packet 8e78d683 24d96f4a a5977786 65dd393c 800b0001 800c0e10 00000000
Jul/31/2013 14:50:05 memory ipsec, debug, packet HASH with:
Jul/31/2013 14:50:05 memory ipsec, debug, packet 7137e654 00000024 00000001 01106000 8e78d683 24d96f4a a5977786 65dd393c
Jul/31/2013 14:50:05 memory ipsec, debug, packet 800b0001 800c0e10
Jul/31/2013 14:50:05 memory ipsec, debug, packet hmac(hmac_sha1)
Jul/31/2013 14:50:05 memory ipsec, debug, packet HASH computed:
Jul/31/2013 14:50:05 memory ipsec, debug, packet a566107c 895ccc17 a8e856e7 76efd689 d93bd0b5
Jul/31/2013 14:50:05 memory ipsec, debug, packet hash validated.
Jul/31/2013 14:50:05 memory ipsec, debug, packet begin.
Jul/31/2013 14:50:05 memory ipsec, debug, packet seen nptype=8(hash)
Jul/31/2013 14:50:05 memory ipsec, debug, packet seen nptype=11(notify)
Jul/31/2013 14:50:05 memory ipsec, debug, packet succeed.
Jul/31/2013 14:50:05 memory ipsec, debug, packet notification message 24576:RESPONDER-LIFETIME, doi=1 proto_id=1 spi=8e78d68324d96f4a a597778665dd393c (size=16).
Jul/31/2013 14:52:05 memory ipsec, debug, packet DPD monitoring....
Jul/31/2013 14:52:05 memory ipsec, debug, packet compute IV for phase2
Jul/31/2013 14:52:05 memory ipsec, debug, packet phase1 last IV:
Jul/31/2013 14:52:05 memory ipsec, debug, packet 2d9c6576 5625afe2 bb8a2657
Jul/31/2013 14:52:05 memory ipsec, debug, packet hash(sha1)
Jul/31/2013 14:52:05 memory ipsec, debug, packet encryption(3des)
Jul/31/2013 14:52:05 memory ipsec, debug, packet phase2 IV computed:
Jul/31/2013 14:52:05 memory ipsec, debug, packet 233f4a65 80b8595c
Jul/31/2013 14:52:05 memory ipsec, debug, packet HASH with:
Jul/31/2013 14:52:05 memory ipsec, debug, packet bb8a2657 00000020 00000001 01108d28 8e78d683 24d96f4a a5977786 65dd393c
Jul/31/2013 14:52:05 memory ipsec, debug, packet 00000a12
Jul/31/2013 14:52:05 memory ipsec, debug, packet hmac(hmac_sha1)
Jul/31/2013 14:52:05 memory ipsec, debug, packet HASH computed:
Jul/31/2013 14:52:05 memory ipsec, debug, packet 6aa12773 c4737719 a7574eda 7a5279ce 3d985f7d
Jul/31/2013 14:52:05 memory ipsec, debug, packet begin encryption.
Jul/31/2013 14:52:05 memory ipsec, debug, packet encryption(3des)
Jul/31/2013 14:52:05 memory ipsec, debug, packet pad length = 8
Jul/31/2013 14:52:05 memory ipsec, debug, packet 0b000018 6aa12773 c4737719 a7574eda 7a5279ce 3d985f7d 00000020 00000001
Jul/31/2013 14:52:05 memory ipsec, debug, packet 01108d28 8e78d683 24d96f4a a5977786 65dd393c 00000a12 2b3b0839 f2a16f07
Jul/31/2013 14:52:05 memory ipsec, debug, packet encryption(3des)
Jul/31/2013 14:52:05 memory ipsec, debug, packet with key:
Jul/31/2013 14:52:05 memory ipsec, debug, packet 197f3e73 32a083b7 c26cf6ab 62e8844a e4f2dd77 5029b75e
Jul/31/2013 14:52:05 memory ipsec, debug, packet encrypted payload by IV:
Jul/31/2013 14:52:05 memory ipsec, debug, packet 233f4a65 80b8595c
Jul/31/2013 14:52:05 memory ipsec, debug, packet save IV for next:
Jul/31/2013 14:52:05 memory ipsec, debug, packet 7278832a 3149ceb9
Jul/31/2013 14:52:05 memory ipsec, debug, packet encrypted.
Jul/31/2013 14:52:05 memory ipsec, debug, packet 92 bytes from q.w.e.r[500] to z.x.c.v[500]
Jul/31/2013 14:52:05 memory ipsec, debug, packet sockname q.w.e.r[500]
Jul/31/2013 14:52:05 memory ipsec, debug, packet send packet from q.w.e.r[500]
Jul/31/2013 14:52:05 memory ipsec, debug, packet send packet to z.x.c.v[500]
Jul/31/2013 14:52:05 memory ipsec, debug, packet src4 q.w.e.r[500]
Jul/31/2013 14:52:05 memory ipsec, debug, packet dst4 z.x.c.v[500]
Jul/31/2013 14:52:05 memory ipsec, debug, packet 1 times of 92 bytes message will be sent to z.x.c.v[500]
Jul/31/2013 14:52:05 memory ipsec, debug, packet 8e78d683 24d96f4a a5977786 65dd393c 08100501 bb8a2657 0000005c a5592938
Jul/31/2013 14:52:05 memory ipsec, debug, packet 5a386c1e fb2a09d5 2c9fb75d 7d13c984 5b72d1a1 7317576d d2a6bbd7 8ca25e7a
Jul/31/2013 14:52:05 memory ipsec, debug, packet 741c5013 6a068ca1 5269da19 b1777f17 18847a45 7278832a 3149ceb9
Jul/31/2013 14:52:05 memory ipsec, debug, packet sendto Information notify.
Jul/31/2013 14:52:05 memory ipsec, debug, packet DPD R-U-There sent (0)
Jul/31/2013 14:52:05 memory ipsec, debug, packet rescheduling send_r_u (10).
Jul/31/2013 14:52:06 memory ipsec, debug, packet ==========
Jul/31/2013 14:52:06 memory ipsec, debug, packet 92 bytes message received from z.x.c.v[500] to q.w.e.r[500]
Jul/31/2013 14:52:06 memory ipsec, debug, packet 8e78d683 24d96f4a a5977786 65dd393c 08100501 ec8ebf56 0000005c e628ac45
Jul/31/2013 14:52:06 memory ipsec, debug, packet 46c2e540 b939df9d e77dfeb8 a2190ce4 6a360165 3c854ecd 914a21fd 5e2688f2
Jul/31/2013 14:52:06 memory ipsec, debug, packet f2c103d5 45571aab a6b44095 391dedcd ad88a2a8 36ba5faf d42c4024
Jul/31/2013 14:52:06 memory ipsec, debug, packet receive Information.
Jul/31/2013 14:52:06 memory ipsec, debug, packet compute IV for phase2
Jul/31/2013 14:52:06 memory ipsec, debug, packet phase1 last IV:
Jul/31/2013 14:52:06 memory ipsec, debug, packet 2d9c6576 5625afe2 ec8ebf56
Jul/31/2013 14:52:06 memory ipsec, debug, packet hash(sha1)
Jul/31/2013 14:52:06 memory ipsec, debug, packet encryption(3des)
Jul/31/2013 14:52:06 memory ipsec, debug, packet phase2 IV computed:
Jul/31/2013 14:52:06 memory ipsec, debug, packet 8f89fcca 60a80a2d
Jul/31/2013 14:52:06 memory ipsec, debug, packet encryption(3des)
Jul/31/2013 14:52:06 memory ipsec, debug, packet IV was saved for next processing:
Jul/31/2013 14:52:06 memory ipsec, debug, packet 36ba5faf d42c4024
Jul/31/2013 14:52:06 memory ipsec, debug, packet encryption(3des)
Jul/31/2013 14:52:06 memory ipsec, debug, packet with key:
Jul/31/2013 14:52:06 memory ipsec, debug, packet 197f3e73 32a083b7 c26cf6ab 62e8844a e4f2dd77 5029b75e
Jul/31/2013 14:52:06 memory ipsec, debug, packet decrypted payload by IV:
Jul/31/2013 14:52:06 memory ipsec, debug, packet 8f89fcca 60a80a2d
Jul/31/2013 14:52:06 memory ipsec, debug, packet decrypted payload, but not trimed.
Jul/31/2013 14:52:06 memory ipsec, debug, packet 0b000018 a4c18ff4 79145727 c1ffd36a 25eea03f c6afffec 00000020 00000001
Jul/31/2013 14:52:06 memory ipsec, debug, packet 01108d29 8e78d683 24d96f4a a5977786 65dd393c 00000a12 00000000 00000000
Jul/31/2013 14:52:06 memory ipsec, debug, packet padding len=1
Jul/31/2013 14:52:06 memory ipsec, debug, packet skip to trim padding.
Jul/31/2013 14:52:06 memory ipsec, debug, packet decrypted.
Jul/31/2013 14:52:06 memory ipsec, debug, packet 8e78d683 24d96f4a a5977786 65dd393c 08100501 ec8ebf56 0000005c 0b000018
Jul/31/2013 14:52:06 memory ipsec, debug, packet a4c18ff4 79145727 c1ffd36a 25eea03f c6afffec 00000020 00000001 01108d29
Jul/31/2013 14:52:06 memory ipsec, debug, packet 8e78d683 24d96f4a a5977786 65dd393c 00000a12 00000000 00000000
Jul/31/2013 14:52:06 memory ipsec, debug, packet HASH with:
Jul/31/2013 14:52:06 memory ipsec, debug, packet ec8ebf56 00000020 00000001 01108d29 8e78d683 24d96f4a a5977786 65dd393c
Jul/31/2013 14:52:06 memory ipsec, debug, packet 00000a12
Jul/31/2013 14:52:06 memory ipsec, debug, packet hmac(hmac_sha1)
Jul/31/2013 14:52:06 memory ipsec, debug, packet HASH computed:
Jul/31/2013 14:52:06 memory ipsec, debug, packet a4c18ff4 79145727 c1ffd36a 25eea03f c6afffec
Jul/31/2013 14:52:06 memory ipsec, debug, packet hash validated.
Jul/31/2013 14:52:06 memory ipsec, debug, packet begin.
Jul/31/2013 14:52:06 memory ipsec, debug, packet seen nptype=8(hash)
Jul/31/2013 14:52:06 memory ipsec, debug, packet seen nptype=11(notify)
Jul/31/2013 14:52:06 memory ipsec, debug, packet succeed.
Jul/31/2013 14:52:06 memory ipsec, debug, packet DPD R-U-There-Ack received
Jul/31/2013 14:52:06 memory ipsec, debug, packet received an R-U-THERE-ACK


Аватара пользователя
simpl3x
Модератор
Сообщения: 1532
Зарегистрирован: 19 апр 2012, 14:03

а попробуйте 5.25, я не удивлюсь что микротик опять что то "улучшил" в новой версии =)
к сожалению опыта с ipsec не было.


Ответить