--- west.console.txt 2019-08-24 18:12:56.225675617 +0000 +++ OUTPUT/west.console.txt 2019-08-26 13:31:59.904608584 +0000 @@ -27,57 +27,14 @@ 002 "westnet-eastnet-ipv4-psk-ikev2" #2: initiating a redirect to new gateway (address: 192.1.3.33) 002 "westnet-eastnet-ipv4-psk-ikev2" #3: initiating v2 parent SA 1v2 "westnet-eastnet-ipv4-psk-ikev2" #3: initiate -1v2 "westnet-eastnet-ipv4-psk-ikev2" #3: STATE_PARENT_I1: sent v2I1, expected v2R1 002 "westnet-eastnet-ipv4-psk-ikev2" #1: IKE SA expired (LATEST!) 002 "westnet-eastnet-ipv4-psk-ikev2" #2: deleting other state #2 (STATE_PARENT_I2) and NOT sending notification 002 "westnet-eastnet-ipv4-psk-ikev2" #1: deleting state (STATE_PARENT_I3) and sending notification -1v2 "westnet-eastnet-ipv4-psk-ikev2" #4: STATE_PARENT_I2: sent v2I2, expected v2R2 {auth=IKEv2 cipher=AES_GCM_16_256 integ=n/a prf=HMAC_SHA2_512 group=MODP2048} -002 "westnet-eastnet-ipv4-psk-ikev2" #4: IKEv2 mode peer ID is ID_FQDN: '@east' -003 "westnet-eastnet-ipv4-psk-ikev2" #4: Authenticated using authby=secret -002 "westnet-eastnet-ipv4-psk-ikev2" #4: initiating a redirect to new gateway (address: 192.1.2.23) -002 "westnet-eastnet-ipv4-psk-ikev2" #5: initiating v2 parent SA -1v2 "westnet-eastnet-ipv4-psk-ikev2" #5: initiate -1v2 "westnet-eastnet-ipv4-psk-ikev2" #5: STATE_PARENT_I1: sent v2I1, expected v2R1 -002 "westnet-eastnet-ipv4-psk-ikev2" #3: IKE SA expired (LATEST!) -002 "westnet-eastnet-ipv4-psk-ikev2" #4: deleting other state #4 (STATE_PARENT_I2) and NOT sending notification -002 "westnet-eastnet-ipv4-psk-ikev2" #3: deleting state (STATE_PARENT_I3) and sending notification -1v2 "westnet-eastnet-ipv4-psk-ikev2" #6: STATE_PARENT_I2: sent v2I2, expected v2R2 {auth=IKEv2 cipher=AES_GCM_16_256 integ=n/a prf=HMAC_SHA2_512 group=MODP2048} -002 "westnet-eastnet-ipv4-psk-ikev2" #6: IKEv2 mode peer ID is ID_FQDN: '@east' -003 "westnet-eastnet-ipv4-psk-ikev2" #6: Authenticated using authby=secret -002 "westnet-eastnet-ipv4-psk-ikev2" #6: initiating a redirect to new gateway (address: 192.1.3.33) -002 "westnet-eastnet-ipv4-psk-ikev2" #7: initiating v2 parent SA -1v2 "westnet-eastnet-ipv4-psk-ikev2" #7: initiate -1v2 "westnet-eastnet-ipv4-psk-ikev2" #7: STATE_PARENT_I1: sent v2I1, expected v2R1 -002 "westnet-eastnet-ipv4-psk-ikev2" #5: IKE SA expired (LATEST!) -002 "westnet-eastnet-ipv4-psk-ikev2" #6: deleting other state #6 (STATE_PARENT_I2) and NOT sending notification -002 "westnet-eastnet-ipv4-psk-ikev2" #5: deleting state (STATE_PARENT_I3) and sending notification -1v2 "westnet-eastnet-ipv4-psk-ikev2" #8: STATE_PARENT_I2: sent v2I2, expected v2R2 {auth=IKEv2 cipher=AES_GCM_16_256 integ=n/a prf=HMAC_SHA2_512 group=MODP2048} -002 "westnet-eastnet-ipv4-psk-ikev2" #8: IKEv2 mode peer ID is ID_FQDN: '@east' -003 "westnet-eastnet-ipv4-psk-ikev2" #8: Authenticated using authby=secret -002 "westnet-eastnet-ipv4-psk-ikev2" #8: initiating a redirect to new gateway (address: 192.1.2.23) -002 "westnet-eastnet-ipv4-psk-ikev2" #9: initiating v2 parent SA -1v2 "westnet-eastnet-ipv4-psk-ikev2" #9: initiate -1v2 "westnet-eastnet-ipv4-psk-ikev2" #9: STATE_PARENT_I1: sent v2I1, expected v2R1 -002 "westnet-eastnet-ipv4-psk-ikev2" #7: IKE SA expired (LATEST!) -002 "westnet-eastnet-ipv4-psk-ikev2" #8: deleting other state #8 (STATE_PARENT_I2) and NOT sending notification -002 "westnet-eastnet-ipv4-psk-ikev2" #7: deleting state (STATE_PARENT_I3) and sending notification -1v2 "westnet-eastnet-ipv4-psk-ikev2" #10: STATE_PARENT_I2: sent v2I2, expected v2R2 {auth=IKEv2 cipher=AES_GCM_16_256 integ=n/a prf=HMAC_SHA2_512 group=MODP2048} -002 "westnet-eastnet-ipv4-psk-ikev2" #10: IKEv2 mode peer ID is ID_FQDN: '@east' -003 "westnet-eastnet-ipv4-psk-ikev2" #10: Authenticated using authby=secret -002 "westnet-eastnet-ipv4-psk-ikev2" #10: initiating a redirect to new gateway (address: 192.1.3.33) -002 "westnet-eastnet-ipv4-psk-ikev2" #11: initiating v2 parent SA -1v2 "westnet-eastnet-ipv4-psk-ikev2" #11: initiate -1v2 "westnet-eastnet-ipv4-psk-ikev2" #11: STATE_PARENT_I1: sent v2I1, expected v2R1 -002 "westnet-eastnet-ipv4-psk-ikev2" #9: IKE SA expired (LATEST!) -002 "westnet-eastnet-ipv4-psk-ikev2" #10: deleting other state #10 (STATE_PARENT_I2) and NOT sending notification -002 "westnet-eastnet-ipv4-psk-ikev2" #9: deleting state (STATE_PARENT_I3) and sending notification -1v2 "westnet-eastnet-ipv4-psk-ikev2" #12: STATE_PARENT_I2: sent v2I2, expected v2R2 {auth=IKEv2 cipher=AES_GCM_16_256 integ=n/a prf=HMAC_SHA2_512 group=MODP2048} -002 "westnet-eastnet-ipv4-psk-ikev2" #12: IKEv2 mode peer ID is ID_FQDN: '@east' -003 "westnet-eastnet-ipv4-psk-ikev2" #12: Authenticated using authby=secret -003 "westnet-eastnet-ipv4-psk-ikev2" #12: redirect loop, stop initiating IKEv2 exchanges -002 "westnet-eastnet-ipv4-psk-ikev2" #11: IKE SA expired (LATEST!) -002 "westnet-eastnet-ipv4-psk-ikev2" #12: deleting other state #12 (STATE_PARENT_I2) and NOT sending notification -002 "westnet-eastnet-ipv4-psk-ikev2" #11: deleting state (STATE_PARENT_I3) and sending notification +1v2 "westnet-eastnet-ipv4-psk-ikev2" #3: STATE_PARENT_I1: sent v2I1, expected v2R1 +010 "westnet-eastnet-ipv4-psk-ikev2" #3: STATE_PARENT_I1: retransmission; will wait 15 seconds for response +010 "westnet-eastnet-ipv4-psk-ikev2" #3: STATE_PARENT_I1: retransmission; will wait 30 seconds for response +031 "westnet-eastnet-ipv4-psk-ikev2" #3: STATE_PARENT_I1: 60 second timeout exceeded after 2 retransmits. No response (or no acceptable response) to our first IKEv2 message +000 "westnet-eastnet-ipv4-psk-ikev2" #3: starting keying attempt 2 of an unlimited number, but releasing whack west # echo done done