root@anacron:# ipsec up vpn1

002 "vpn1" #5: initiating Main Mode

104 "vpn1" #5: STATE_MAIN_I1: initiate

003 "vpn1" #5: ignoring Vendor ID payload [cd5792d4b70f0299a6a1373de236d2ac]

003 "vpn1" #5: ignoring Vendor ID payload [Cisco-Unity]

003 "vpn1" #5: received Vendor ID payload [XAUTH]

003 "vpn1" #5: received Vendor ID payload [Dead Peer Detection]

003 "vpn1" #5: received Vendor ID payload [RFC 3947]

002 "vpn1" #5: enabling possible NAT-traversal with method 3

106 "vpn1" #5: STATE_MAIN_I2: sent MI2, expecting MR2

003 "vpn1" #5: NAT-Traversal: Result using RFC 3947: no NAT detected

002 "vpn1" #5: we have a cert but are not sending it

108 "vpn1" #5: STATE_MAIN_I3: sent MI3, expecting MR3

002 "vpn1" #5: Peer ID is ID_DER_ASN1_DN: 'C=XX, ST=XXXXXXXXXX, L=XXXXXXXXXX, O=XXXXXXXXXX, CN=XXXXXXXXXX'

002 "vpn1" #5: ISAKMP SA established

004 "vpn1" #5: STATE_MAIN_I4: ISAKMP SA established

002 "vpn1" #6: initiating Quick Mode RSASIG+ENCRYPT+TUNNEL+PFS+UP {using isakmp#5}

112 "vpn1" #6: STATE_QUICK_I1: initiate

002 "vpn1" #6: up-client output: /usr/lib/ipsec/_updown: unknown parameters `iptables'

003 "vpn1" #6: up-client command exited with status 2

032 "vpn1" #6: STATE_QUICK_I1: internal error

010 "vpn1" #6: STATE_QUICK_I1: retransmission; will wait 20s for response

002 "vpn1" #6: up-client output: /usr/lib/ipsec/_updown: unknown parameters `iptables'

003 "vpn1" #6: up-client command exited with status 2

032 "vpn1" #6: STATE_QUICK_I1: internal error

010 "vpn1" #6: STATE_QUICK_I1: retransmission; will wait 40s for response

002 "vpn1" #6: up-client output: /usr/lib/ipsec/_updown: unknown parameters `iptables'

003 "vpn1" #6: up-client command exited with status 2

032 "vpn1" #6: STATE_QUICK_I1: internal error

031 "vpn1" #6: max number of retransmissions (2) reached STATE_QUICK_I1.  No acceptable response to our first Quick Mode message: perhaps peer likes no proposal

000 "vpn1" #6: starting keying attempt 2 of at most 3, but releasing whack

root@anacron:#