Running FreePBX 2.6.0.2 with Asterisk 1.4.23.1. Below is a sample of my secure log which I’m finding dificult to understand.
Any help would be appreciated.
Jun 14 10:22:09 server “my server ip@pluto[5539]: OCF support for IKE [disabled]
Jun 14 10:22:09 server “my server ip@pluto[5539]: SAref support [disabled]: Protocol not available
Jun 14 10:22:09 server “my server ip@pluto[5539]: SAbind support [disabled]: Protocol not available
Jun 14 10:22:09 server “my server ip@pluto[5539]: NSS support [enabled]
Jun 14 10:22:09 server “my server ip@pluto[5539]: HAVE_STATSD notification support not compiled in
Jun 14 10:22:09 server “my server ip@pluto[5539]: Setting NAT-Traversal port-4500 floating to on
Jun 14 10:22:09 server “my server ip@pluto[5539]: port floating activation criteria nat_t=1/port_float=1
Jun 14 10:22:09 server “my server ip@pluto[5539]: NAT-Traversal support [enabled]
Jun 14 10:22:09 server “my server ip@pluto[5539]: 1 bad entries in virtual_private - none loaded
Jun 14 10:22:09 server “my server ip@pluto[5539]: ike_alg_register_enc(): Activating OAKLEY_TWOFISH_CBC_SSH: Ok (ret=0)
Jun 14 10:22:09 server “my server ip@pluto[5539]: ike_alg_register_enc(): Activating OAKLEY_TWOFISH_CBC: Ok (ret=0)
Jun 14 10:22:09 server “my server ip@pluto[5539]: ike_alg_register_enc(): Activating OAKLEY_SERPENT_CBC: Ok (ret=0)
Jun 14 10:22:09 server “my server ip@pluto[5539]: ike_alg_register_enc(): Activating OAKLEY_AES_CBC: Ok (ret=0)
Jun 14 10:22:09 server “my server ip@pluto[5539]: ike_alg_register_enc(): Activating OAKLEY_BLOWFISH_CBC: Ok (ret=0)
Jun 14 10:22:09 server “my server ip@pluto[5539]: ike_alg_register_hash(): Activating OAKLEY_SHA2_512: Ok (ret=0)
Jun 14 10:22:09 server “my server ip@pluto[5539]: ike_alg_register_hash(): Activating OAKLEY_SHA2_256: Ok (ret=0)
Jun 14 10:22:09 server “my server ip@pluto[5539]: starting up 1 cryptographic helpers
Jun 14 10:22:09 server “my server ip@pluto[5539]: started helper (thread) pid=-1208976496 (fd:10)
Jun 14 10:22:09 server “my server ip@pluto[5539]: Using Linux 2.6 IPsec interface code on 2.6.18-194.3.1.el5 (experimental code)
Jun 14 10:22:09 server “my server ip@pluto[5539]: ike_alg_register_enc(): Activating aes_ccm_8: Ok (ret=0)
Jun 14 10:22:09 server “my server ip@pluto[5539]: ike_alg_add(): ERROR: Algorithm already exists
Jun 14 10:22:09 server “my server ip@pluto[5539]: ike_alg_register_enc(): Activating aes_ccm_12: FAILED (ret=-17)
Jun 14 10:22:09 server “my server ip@pluto[5539]: ike_alg_add(): ERROR: Algorithm already exists
Jun 14 10:22:09 server “my server ip@pluto[5539]: ike_alg_register_enc(): Activating aes_ccm_16: FAILED (ret=-17)
Jun 14 10:22:09 server “my server ip@pluto[5539]: ike_alg_add(): ERROR: Algorithm already exists
Jun 14 10:22:09 server “my server ip@pluto[5539]: ike_alg_register_enc(): Activating aes_gcm_8: FAILED (ret=-17)
Jun 14 10:22:09 server “my server ip@pluto[5539]: ike_alg_add(): ERROR: Algorithm already exists
Jun 14 10:22:09 server “my server ip@pluto[5539]: ike_alg_register_enc(): Activating aes_gcm_12: FAILED (ret=-17)
Jun 14 10:22:09 server “my server ip@pluto[5539]: ike_alg_add(): ERROR: Algorithm already exists
Jun 14 10:22:09 server “my server ip@pluto[5539]: ike_alg_register_enc(): Activating aes_gcm_16: FAILED (ret=-17)
Jun 14 10:22:09 server “my server ip@pluto[5539]: Could not change to directory ‘/etc/ipsec.d/cacerts’: /
Jun 14 10:22:09 server “my server ip@pluto[5539]: Could not change to directory ‘/etc/ipsec.d/aacerts’: /
Jun 14 10:22:09 server “my server ip@pluto[5539]: Could not change to directory ‘/etc/ipsec.d/ocspcerts’: /
Jun 14 10:22:09 server “my server ip@pluto[5539]: Could not change to directory '/etc/ipsec.d/crls’
Jun 14 10:22:09 server “my server ip@pluto[5539]: | selinux support is NOT enabled.
Jun 14 10:22:09 server “my server ip@pluto[5539]: listening for IKE messages
Jun 14 10:22:09 server