Cisco ASR 1004 - Page 47

Page 47 of 72
Requirement
Auditable
Events
Additional Audit
Record Contents
Sample Record
Session
establishment
with peer
Entire packet
contents of packets
transmitted/receive
d during session
establishment
Jun 20 07:42:26.823: ISAKMP (0): received packet
from 100.1.1.5 dport 500 sport 500 Global (N) NEW
SA
Jun 20 07:42:26.823: ISAKMP: Created a peer struct
for 100.1.1.5, peer port 500
Jun 20 07:42:26.823: ISAKMP: New peer created
peer = 0x89C3879C peer_handle = 0x8000000C
Jun 20 07:42:26.823: ISAKMP: Locking peer struct
0x89C3879C, refcount 1 for
crypto_isakmp_process_block
Jun 20 07:42:26.823: ISAKMP: local port 500,
remote port 500
Jun 20 07:42:26.823: ISAKMP:(0):insert sa
successfully sa = 8C1C1FD4
Jun 20 07:42:26.823: ISAKMP:(0):Input =
IKE_MESG_FROM_PEER, IKE_MM_EXCH
Jun 20 07:42:26.823: ISAKMP:(0):Old State =
IKE_READY New State
= IKE_R_MM1 …
Jun 20 07:42:26.823: ISAKMP:(0):found peer pre-
shared key matching 100.1.1.5
Jun 20 07:42:26.823: ISAKMP:(0): local preshared
key found
Jun 20 07:42:26.823: ISAKMP : Scanning profiles
for xauth ...
Jun 20 07:42:26.823: ISAKMP:(0):Checking
ISAKMP transform 1 against priority 1 policy
Jun 20 07:42:26.827: ISAKMP: encryption AES-
CBC
Jun 20 07:42:26.827: ISAKMP: keylength of 128
Jun 20 07:42:26.827: ISAKMP: hash SHA
Jun 20 07:42:26.827: ISAKMP: default group 14
Jun 20 07:42:26.827: ISAKMP: auth pre-share…
Jun 20 07:42:26.843: ISAKMP (0): received packet
from 100.1.1.5 dport 500 sport 500 Global (R)
MM_SA_SETUP
Jun 20 07:42:26.843: ISAKMP:(0):Input =
IKE_MESG_FROM_PEER, IKE_MM_EXCH