Are you sure that the server at work is running IKEv2? IKE (aka IKEv1, as supported by isakmpd) is far more common.
On 2014-05-20, Martijn van Duren <[email protected]> wrote: > ping? > > On 05/08/14 14:07, Martijn van Duren wrote: >> Hello misc, >> >> I'm currently trying to set up an ipsec connection from my laptop to the >> vpn at my work. I'm new to ipsec, so my apologies if I missed something >> obvious. >> >> When setting up the connection I do see my requests go to the server, >> but I never get a reply. My colleagues use an ipsec connection from the >> same network, so it should not be a network issue. I have pf on my >> laptop disabled for this test. >> >> Below are the system settings as used, both on the vpn-server as on my >> machine. I would like to know if someone could tell me what I'm doing >> wrong or whether this is a bug. >> >> server: >> - system: Sophos UTM 9 >> - daemon: Pluto (strongSwan 4.4.1git20100610 THREADS VENDORID >> CISCO_QUIRKS) >> - ip: aa.bb.cc.dd >> - config (the required information as far as I can see): >> Compression off, not using strict policy. >> IKE Settings: AES 256 / SHA1 / Group 2: MODP 1024 Lifetime: 36000 >> seconds >> IPsec Settings: AES 256 / SHA1 / Group 2: MODP 1024 Lifetime: 36000 >> seconds >> VPN ID: vpn01.company.tld >> >> client: >> - system: see dmesg below >> - network: In a NAT network, with public ip ee.ff.gg.hh >> - config: >> - initial: >> ikev2 "company" active esp \ >> from any to any \ >> peer vpn01.company.tld \ >> ikesa auth hmac-sha1 prf hmac-sha1 group modp1024 \ >> childsa auth hmac-sha1 enc aes-256 group modp1024 \ >> dstid vpn01.company.tld \ >> lifetime 36000 \ >> eap "mschap-v2" >> - 2nd (more basic? config): >> ikev2 active esp from any to any peer vpn01.company.tld >> >> When starting the iked it sends its IKE_SA_INIT, but I never get a >> reply: >> ca_privkey_serialize: type RSA_KEY length 1192 >> ca_pubkey_serialize: type RSA_KEY length 270 >> ca_reload: local cert type RSA_KEY >> ikev2_dispatch_cert: updated local CERTREQ type RSA_KEY length 0 >> /etc/iked.conf: loaded 1 configuration rules >> config_getocsp: ocsp_url none >> config_getpolicy: received policy >> ikev2 "policy1" active esp inet from any to any local any peer >> aa.bb.cc.dd ikesa enc aes-256,aes-192,aes-128,3des prf >> hmac-sha2-256,hmac-sha1,hmac-md5 auth hmac-sha2-256,hmac-sha1,hmac-md5 >> group modp2048-256,modp2048,modp1536,modp1024 childsa enc >> aes-256,aes-192,aes-128 auth hmac-sha2-256,hmac-sha1 lifetime 10800 >> bytes 536870912 rsa >> config_getpfkey: received pfkey fd 4 >> config_getcompile: compilation done >> config_getsocket: received socket fd 11 >> config_getsocket: received socket fd 12 >> config_getsocket: received socket fd 14 >> config_getsocket: received socket fd 20 >> ikev2_init_ike_sa: initiating "policy1" >> ikev2_policy2id: srcid FQDN/loki.my.domain length 18 >> ikev2_add_proposals: length 132 >> ikev2_next_payload: length 136 nextpayload KE >> ikev2_next_payload: length 264 nextpayload NONCE >> ikev2_next_payload: length 36 nextpayload NOTIFY >> ikev2_nat_detection: local source 0x20ca1a29b41bb241 0x0000000000000000 >> 0.0.0.0:500 >> ikev2_next_payload: length 28 nextpayload NOTIFY >> ikev2_nat_detection: local destination 0x20ca1a29b41bb241 >> 0x0000000000000000 87.233.176.10:500 >> ikev2_next_payload: length 28 nextpayload NONE >> ikev2_pld_parse: header ispi 0x20ca1a29b41bb241 rspi 0x0000000000000000 >> nextpayload SA version 0x20 exchange IKE_SA_INIT flags 0x08 msgid 0 >> length 520 response 0 >> ikev2_pld_payloads: payload SA nextpayload KE critical 0x00 length 136 >> ikev2_pld_sa: more 0 reserved 0 length 132 proposal #1 protoid IKE >> spisize 0 xforms 14 spi 0 >> ikev2_pld_xform: more 3 reserved 0 length 12 type ENCR id AES_CBC >> ikev2_pld_attr: attribute type KEY_LENGTH length 256 total 4 >> ikev2_pld_xform: more 3 reserved 0 length 12 type ENCR id AES_CBC >> ikev2_pld_attr: attribute type KEY_LENGTH length 192 total 4 >> ikev2_pld_xform: more 3 reserved 0 length 12 type ENCR id AES_CBC >> ikev2_pld_attr: attribute type KEY_LENGTH length 128 total 4 >> ikev2_pld_xform: more 3 reserved 0 length 8 type ENCR id 3DES >> ikev2_pld_xform: more 3 reserved 0 length 8 type PRF id HMAC_SHA2_256 >> ikev2_pld_xform: more 3 reserved 0 length 8 type PRF id HMAC_SHA1 >> ikev2_pld_xform: more 3 reserved 0 length 8 type PRF id HMAC_MD5 >> ikev2_pld_xform: more 3 reserved 0 length 8 type INTEGR id >> HMAC_SHA2_256_128 >> ikev2_pld_xform: more 3 reserved 0 length 8 type INTEGR id HMAC_SHA1_96 >> ikev2_pld_xform: more 3 reserved 0 length 8 type INTEGR id HMAC_MD5_96 >> ikev2_pld_xform: more 3 reserved 0 length 8 type DH id MODP_2048_256 >> ikev2_pld_xform: more 3 reserved 0 length 8 type DH id MODP_2048 >> ikev2_pld_xform: more 3 reserved 0 length 8 type DH id MODP_1536 >> ikev2_pld_xform: more 0 reserved 0 length 8 type DH id MODP_1024 >> ikev2_pld_payloads: payload KE nextpayload NONCE critical 0x00 length >> 264 >> ikev2_pld_ke: dh group MODP_2048_256 reserved 0 >> ikev2_pld_payloads: payload NONCE nextpayload NOTIFY critical 0x00 >> length 36 >> ikev2_pld_payloads: payload NOTIFY nextpayload NOTIFY critical 0x00 >> length 28 >> ikev2_pld_notify: protoid NONE spisize 0 type NAT_DETECTION_SOURCE_IP >> ikev2_pld_payloads: payload NOTIFY nextpayload NONE critical 0x00 length >> 28 >> ikev2_pld_notify: protoid NONE spisize 0 type >> NAT_DETECTION_DESTINATION_IP >> ikev2_msg_send: IKE_SA_INIT from 0.0.0.0:500 to 87.233.176.10:500, 520 >> bytes >> sa_state: INIT -> SA_INIT >> ikev2 exiting >> ca exiting >> ikev1 exiting >> parent terminating >> >> $ sudo tcpdump -nnvvXSs 1514 -i athn0 port 500 or port 4500 >> tcpdump: listening on athn0, link-type EN10MB >> 10:05:53.215049 192.168.3.16.500 > aa.bb.cc.dd.500: [udp sum ok] isakmp >> v2.0 exchange IKE_SA_INIT >> cookie: bdbf68e1b497a803->0000000000000000 msgid: 00000000 len: >> 520 >> payload: SA len: 136 >> payload: KE len: 264 >> payload: NONCE len: 36 >> payload: N len: 28 >> payload: N len: 28 (ttl 64, id 38155, len 548) >> 0000: 4500 0224 950b 0000 4011 1812 c0a8 0310 E..$....@....... >> 0010: 57e9 b00a 01f4 01f4 0210 c53b bdbf 68e1 W..........;..h. >> 0020: b497 a803 0000 0000 0000 0000 2120 2208 ............! ". >> 0030: 0000 0000 0000 0208 2200 0088 0000 0084 ........"....... >> 0040: 0101 000e 0300 000c 0100 000c 800e 0100 ................ >> 0050: 0300 000c 0100 000c 800e 00c0 0300 000c ................ >> 0060: 0100 000c 800e 0080 0300 0008 0100 0003 ................ >> 0070: 0300 0008 0200 0005 0300 0008 0200 0002 ................ >> 0080: 0300 0008 0200 0001 0300 0008 0300 000c ................ >> 0090: 0300 0008 0300 0002 0300 0008 0300 0001 ................ >> 00a0: 0300 0008 0400 0018 0300 0008 0400 000e ................ >> 00b0: 0300 0008 0400 0005 0000 0008 0400 0002 ................ >> 00c0: 2800 0108 0018 0000 0b52 5851 ba0e 17f3 (........RXQ.... >> 00d0: 03f3 41fc af8c f8dc 7880 c937 cbb9 67fa ..A.....x..7..g. >> 00e0: 49ce d744 3f44 7334 fdbc da6f a24b 8322 I..D?Ds4...o.K." >> 00f0: 21c2 949b 4bbe 1cd4 41e8 4fdb 2a26 3259 !...K...A.O.*&2Y >> 0100: b286 621f a74d 72c7 c6db 876a 77d8 dc8d ..b..Mr....jw... >> 0110: cc7a 1a4d d8db f64e e734 bc27 c690 54eb .z.M...N.4.'..T. >> 0120: 551f 0492 a9af 9a92 7c2a 4a0f c7f7 9ae5 U.......|*J..... >> 0130: 092c 53ca 926f e01c bfb7 59e3 b03b 2362 .,S..o....Y..;#b >> 0140: 1b0c 629e dd3a bced 41b1 75a5 1e83 961f ..b..:..A.u..... >> 0150: 16f4 5921 4ca8 47d6 887a bf44 fc55 d028 ..Y!L.G..z.D.U.( >> 0160: 6be9 5c66 e1af d0a9 df71 3dfd 7879 4669 k.\f.....q=.xyFi >> 0170: 0636 22c1 f211 94ef 6323 2b65 3bac e37f .6".....c#+e;... >> 0180: 7231 b158 ef5c b931 5f7a 6875 58ef 1fed r1.X.\.1_zhuX... >> 0190: 1db8 1155 dece 7c78 c3ea 7c9c 94b9 b42e ...U..|x..|..... >> 01a0: d763 5727 3c42 905d 9ef2 d92e 79d2 1920 .cW'<B.]....y.. >> 01b0: dc95 1c27 1a11 89b9 bff1 6ec6 a570 dc36 ...'......n..p.6 >> 01c0: fabe 0d96 6565 6d22 2900 0024 f716 7ccf ....eem")..$..|. >> 01d0: 88dc 63e7 089b 85d6 1454 b511 7da9 0c69 ..c......T..}..i >> 01e0: 50a2 9150 bbfc b166 e58d 109b 2900 001c P..P...f....)... >> 01f0: 0000 4004 dc2d 49a9 4146 cec3 2551 5832 [email protected]..%QX2 >> 0200: 1a0f d403 6ab9 db77 0000 001c 0000 4005 ....j..w......@. >> 0210: ba18 d8b2 880d 01dc 3ff9 df82 9a73 2971 ........?....s)q >> 0220: fe06 6212 ..b. >> >> 10:05:55.195727 192.168.3.16.500 > aa.bb.cc.dd.500: [udp sum ok] isakmp >> v2.0 exchange IKE_SA_INIT >> cookie: bdbf68e1b497a803->0000000000000000 msgid: 00000000 len: >> 520 >> payload: SA len: 136 >> payload: KE len: 264 >> payload: NONCE len: 36 >> payload: N len: 28 >> payload: N len: 28 (ttl 64, id 5276, len 548) >> 0000: 4500 0224 149c 0000 4011 9881 c0a8 0310 E..$....@....... >> 0010: 57e9 b00a 01f4 01f4 0210 c53b bdbf 68e1 W..........;..h. >> 0020: b497 a803 0000 0000 0000 0000 2120 2208 ............! ". >> 0030: 0000 0000 0000 0208 2200 0088 0000 0084 ........"....... >> 0040: 0101 000e 0300 000c 0100 000c 800e 0100 ................ >> 0050: 0300 000c 0100 000c 800e 00c0 0300 000c ................ >> 0060: 0100 000c 800e 0080 0300 0008 0100 0003 ................ >> 0070: 0300 0008 0200 0005 0300 0008 0200 0002 ................ >> 0080: 0300 0008 0200 0001 0300 0008 0300 000c ................ >> 0090: 0300 0008 0300 0002 0300 0008 0300 0001 ................ >> 00a0: 0300 0008 0400 0018 0300 0008 0400 000e ................ >> 00b0: 0300 0008 0400 0005 0000 0008 0400 0002 ................ >> 00c0: 2800 0108 0018 0000 0b52 5851 ba0e 17f3 (........RXQ.... >> 00d0: 03f3 41fc af8c f8dc 7880 c937 cbb9 67fa ..A.....x..7..g. >> 00e0: 49ce d744 3f44 7334 fdbc da6f a24b 8322 I..D?Ds4...o.K." >> 00f0: 21c2 949b 4bbe 1cd4 41e8 4fdb 2a26 3259 !...K...A.O.*&2Y >> 0100: b286 621f a74d 72c7 c6db 876a 77d8 dc8d ..b..Mr....jw... >> 0110: cc7a 1a4d d8db f64e e734 bc27 c690 54eb .z.M...N.4.'..T. >> 0120: 551f 0492 a9af 9a92 7c2a 4a0f c7f7 9ae5 U.......|*J..... >> 0130: 092c 53ca 926f e01c bfb7 59e3 b03b 2362 .,S..o....Y..;#b >> 0140: 1b0c 629e dd3a bced 41b1 75a5 1e83 961f ..b..:..A.u..... >> 0150: 16f4 5921 4ca8 47d6 887a bf44 fc55 d028 ..Y!L.G..z.D.U.( >> 0160: 6be9 5c66 e1af d0a9 df71 3dfd 7879 4669 k.\f.....q=.xyFi >> 0170: 0636 22c1 f211 94ef 6323 2b65 3bac e37f .6".....c#+e;... >> 0180: 7231 b158 ef5c b931 5f7a 6875 58ef 1fed r1.X.\.1_zhuX... >> 0190: 1db8 1155 dece 7c78 c3ea 7c9c 94b9 b42e ...U..|x..|..... >> 01a0: d763 5727 3c42 905d 9ef2 d92e 79d2 1920 .cW'<B.]....y.. >> 01b0: dc95 1c27 1a11 89b9 bff1 6ec6 a570 dc36 ...'......n..p.6 >> 01c0: fabe 0d96 6565 6d22 2900 0024 f716 7ccf ....eem")..$..|. >> 01d0: 88dc 63e7 089b 85d6 1454 b511 7da9 0c69 ..c......T..}..i >> 01e0: 50a2 9150 bbfc b166 e58d 109b 2900 001c P..P...f....)... >> 01f0: 0000 4004 dc2d 49a9 4146 cec3 2551 5832 [email protected]..%QX2 >> 0200: 1a0f d403 6ab9 db77 0000 001c 0000 4005 ....j..w......@. >> 0210: ba18 d8b2 880d 01dc 3ff9 df82 9a73 2971 ........?....s)q >> 0220: fe06 6212 ..b. >> >> The server logs just show me the following: >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | *received 520 bytes from >> 213.206.219.203:21346 on eth0 >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | 7f 07 3a c5 84 63 ed ec 00 00 >> 00 00 00 00 00 00 >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | 21 20 22 08 00 00 00 00 00 00 >> 02 08 22 00 00 88 >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | 00 00 00 84 01 01 00 0e 03 00 >> 00 0c 01 00 00 0c >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | 80 0e 01 00 03 00 00 0c 01 00 >> 00 0c 80 0e 00 c0 >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | 03 00 00 0c 01 00 00 0c 80 0e >> 00 80 03 00 00 08 >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | 01 00 00 03 03 00 00 08 02 00 >> 00 05 03 00 00 08 >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | 02 00 00 02 03 00 00 08 02 00 >> 00 01 03 00 00 08 >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | 03 00 00 0c 03 00 00 08 03 00 >> 00 02 03 00 00 08 >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | 03 00 00 01 03 00 00 08 04 00 >> 00 18 03 00 00 08 >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | 04 00 00 0e 03 00 00 08 04 00 >> 00 05 00 00 00 08 >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | 04 00 00 02 28 00 01 08 00 18 >> 00 00 04 4d 0e a3 >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | 1f 14 b9 93 dc 8b 0f b0 a2 10 >> f8 33 27 ff 61 6e >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | d7 9b dd b3 0b 6d 5b 34 fd 74 >> 06 72 6a 97 6a 59 >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | 8c 8e 04 32 38 be 36 1f 92 31 >> c4 6c 95 7d 1f ed >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | a1 f7 81 69 61 46 63 61 4c 2a >> 78 8f 5a 24 b7 d0 >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | 6c 7c 80 3d 0d e3 57 a6 c1 f3 >> 92 37 f6 3d 1f ef >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | 05 96 9a f8 3d e8 55 fc 29 61 >> 6d a1 a5 c9 ea d7 >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | 55 e6 25 e6 8e e6 af 2b d6 d0 >> 33 61 d9 ef 02 29 >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | 62 d8 4f db de 50 ce 6a ab 43 >> 0c 04 66 46 33 05 >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | 9e 6a 85 18 11 29 f7 70 c4 8d >> a9 f8 d5 15 e9 1c >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | 26 df c4 aa 5d dd e4 85 ce 7f >> ef f1 a6 b1 d0 e3 >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | bc c7 39 e3 a4 ea 97 ba 6e 31 >> d4 72 8a 13 df 3f >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | 9b 90 57 00 a9 b8 0a a8 04 d2 >> 4a 0f f6 02 80 8b >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | 51 85 ef e2 51 fa 16 be 06 78 >> 13 fe 9a f6 b8 bc >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | 55 9b b8 2e 45 7e 1a 21 3d 7b >> 47 24 ed ed a8 d2 >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | 11 10 6e 19 1f 3b 67 44 f1 ec >> 76 4f db b7 ff 3e >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | 1e 9d 86 bd 70 43 5c 93 73 72 >> 09 a1 29 00 00 24 >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | 7f 6a e2 d9 3a c5 db 06 8d 6e >> 9b 12 72 ba b1 2f >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | 29 7e 9d a5 36 3b 44 18 8d 58 >> f4 30 6a a2 54 55 >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | 29 00 00 1c 00 00 40 04 c6 bf >> 23 7e 8e d6 94 b3 >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | 14 6f f7 09 9d 87 d2 e9 a7 1f >> ba 8b 00 00 00 1c >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | 00 00 40 05 01 56 23 3b da 1b >> ae 70 81 95 05 cc >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | ca 30 ee 1a 3f 8d 48 cc >> 2014:05:08-10:21:13 vpn01-1 pluto[6184]: | next event >> EVENT_REINIT_SECRET in 2223 seconds >> >> OpenBSD 5.5-current (GENERIC.MP) #24: Wed Apr 2 12:13:58 MDT 2014 >> [email protected]:/usr/src/sys/arch/i386/compile/GENERIC.MP >> cpu0: Intel(R) Atom(TM) CPU N450 @ 1.66GHz ("GenuineIntel" 686-class) >> 1.67 GHz >> cpu0: >> FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,NXE,LONG,SSE3,DTES64,MWAIT,DS-CPL,EST,TM2,SSSE3,CX16,xTPR,PDCM,MOVBE,LAHF,PERF >> real mem = 1063350272 (1014MB) >> avail mem = 1033506816 (985MB) >> mpath0 at root >> scsibus0 at mpath0: 256 targets >> mainbus0 at root >> bios0 at mainbus0: AT/286+ BIOS, date 03/18/10, BIOS32 rev. 0 @ 0xf0010, >> SMBIOS rev. 2.6 @ 0xf0760 (31 entries) >> bios0: vendor American Megatrends Inc. version "1003" date 03/18/2010 >> bios0: ASUSTeK Computer INC. 1005PE >> acpi0 at bios0: rev 2 >> acpi0: sleep states S0 S3 S4 S5 >> acpi0: tables DSDT FACP APIC MCFG ECDT OEMB HPET GSCI SSDT SLIC >> acpi0: wakeup devices P0P1(S4) P0P4(S4) P0P5(S4) P0P6(S4) P0P7(S4) >> acpitimer0 at acpi0: 3579545 Hz, 24 bits >> acpimadt0 at acpi0 addr 0xfee00000: PC-AT compat >> cpu0 at mainbus0: apid 0 (boot processor) >> mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges >> cpu0: apic clock running at 166MHz >> cpu0: mwait min=22785, max=32960 >> cpu1 at mainbus0: apid 1 (application processor) >> cpu1: Intel(R) Atom(TM) CPU N450 @ 1.66GHz ("GenuineIntel" 686-class) >> 1.67 GHz >> cpu1: >> FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,NXE,LONG,SSE3,DTES64,MWAIT,DS-CPL,EST,TM2,SSSE3,CX16,xTPR,PDCM,MOVBE,LAHF,PERF >> ioapic0 at mainbus0: apid 2 pa 0xfec00000, version 20, 24 pins >> ioapic0: misconfigured as apic 1, remapped to apid 2 >> acpimcfg0 at acpi0 addr 0xe0000000, bus 0-255 >> acpiec0 at acpi0 >> acpihpet0 at acpi0: 14318179 Hz >> acpiprt0 at acpi0: bus 0 (PCI0) >> acpiprt1 at acpi0: bus 4 (P0P4) >> acpiprt2 at acpi0: bus 2 (P0P5) >> acpiprt3 at acpi0: bus -1 (P0P6) >> acpiprt4 at acpi0: bus 1 (P0P7) >> acpicpu0 at acpi0: C3, C2, C1, PSS >> acpicpu1 at acpi0: C3, C2, C1, PSS >> acpitz0 at acpi0: critical temperature is 98 degC >> acpibat0 at acpi0: BAT0 model "1005P" serial type LION oem "ASUS" >> acpiac0 at acpi0: AC unit offline >> acpiasus0 at acpi0 >> acpibtn0 at acpi0: LID_ >> acpibtn1 at acpi0: SLPB >> acpibtn2 at acpi0: PWRB >> bios0: ROM list: 0xc0000/0xda00! >> cpu0: Enhanced SpeedStep 1667 MHz: speeds: 1667, 1333, 1000 MHz >> pci0 at mainbus0 bus 0: configuration mode 1 (bios) >> pchb0 at pci0 dev 0 function 0 "Intel Pineview DMI" rev 0x00 >> vga1 at pci0 dev 2 function 0 "Intel Pineview Video" rev 0x00 >> intagp0 at vga1 >> agp0 at intagp0: aperture at 0xd0000000, size 0x10000000 >> inteldrm0 at vga1 >> drm0 at inteldrm0 >> composite sync not supported >> composite sync not supported >> inteldrm0: 1024x600 >> wsdisplay0 at vga1 mux 1: console (std, vt100 emulation) >> wsdisplay0: screen 1-5 added (std, vt100 emulation) >> "Intel Pineview Video" rev 0x00 at pci0 dev 2 function 1 not configured >> azalia0 at pci0 dev 27 function 0 "Intel 82801GB HD Audio" rev 0x02: msi >> azalia0: codecs: Realtek ALC269 >> audio0 at azalia0 >> ppb0 at pci0 dev 28 function 0 "Intel 82801GB PCIE" rev 0x02: apic 2 int >> 16 >> pci1 at ppb0 bus 4 >> ppb1 at pci0 dev 28 function 1 "Intel 82801GB PCIE" rev 0x02: apic 2 int >> 17 >> pci2 at ppb1 bus 2 >> athn0 at pci2 dev 0 function 0 "Atheros AR9285" rev 0x01: apic 2 int 17 >> athn0: AR9285 rev 2 (1T1R), ROM rev 13, address 00:25:d3:f6:28:7a >> ppb2 at pci0 dev 28 function 3 "Intel 82801GB PCIE" rev 0x02: apic 2 int >> 19 >> pci3 at ppb2 bus 1 >> alc0 at pci3 dev 0 function 0 "Attansic Technology L2C" rev 0xc0: msi, >> address e0:cb:4e:9e:6c:12 >> atphy0 at alc0 phy 0: F1 10/100/1000 PHY, rev. 11 >> uhci0 at pci0 dev 29 function 0 "Intel 82801GB USB" rev 0x02: apic 2 int >> 23 >> uhci1 at pci0 dev 29 function 1 "Intel 82801GB USB" rev 0x02: apic 2 int >> 19 >> uhci2 at pci0 dev 29 function 2 "Intel 82801GB USB" rev 0x02: apic 2 int >> 18 >> uhci3 at pci0 dev 29 function 3 "Intel 82801GB USB" rev 0x02: apic 2 int >> 16 >> ehci0 at pci0 dev 29 function 7 "Intel 82801GB USB" rev 0x02: apic 2 int >> 23 >> usb0 at ehci0: USB revision 2.0 >> uhub0 at usb0 "Intel EHCI root hub" rev 2.00/1.00 addr 1 >> ppb3 at pci0 dev 30 function 0 "Intel 82801BAM Hub-to-PCI" rev 0xe2 >> pci4 at ppb3 bus 5 >> pcib0 at pci0 dev 31 function 0 "Intel NM10 LPC" rev 0x02 >> ahci0 at pci0 dev 31 function 2 "Intel 82801GR AHCI" rev 0x02: msi, AHCI >> 1.1 >> scsibus1 at ahci0: 32 targets >> sd0 at scsibus1 targ 0 lun 0: <ATA, Hitachi HTS54502, PB2O> SCSI3 >> 0/direct fixed naa.5000cca5e7d7c675 >> sd0: 238475MB, 512 bytes/sector, 488397168 sectors >> ichiic0 at pci0 dev 31 function 3 "Intel 82801GB SMBus" rev 0x02: apic 2 >> int 21 >> iic0 at ichiic0 >> spdmem0 at iic0 addr 0x50: 1GB DDR2 SDRAM non-parity PC2-6400CL5 SO-DIMM >> usb1 at uhci0: USB revision 1.0 >> uhub1 at usb1 "Intel UHCI root hub" rev 1.00/1.00 addr 1 >> usb2 at uhci1: USB revision 1.0 >> uhub2 at usb2 "Intel UHCI root hub" rev 1.00/1.00 addr 1 >> usb3 at uhci2: USB revision 1.0 >> uhub3 at usb3 "Intel UHCI root hub" rev 1.00/1.00 addr 1 >> usb4 at uhci3: USB revision 1.0 >> uhub4 at usb4 "Intel UHCI root hub" rev 1.00/1.00 addr 1 >> isa0 at pcib0 >> isadma0 at isa0 >> pckbc0 at isa0 port 0x60/5 >> pckbd0 at pckbc0 (kbd slot) >> pckbc0: using irq 1 for kbd slot >> wskbd0 at pckbd0: console keyboard, using wsdisplay0 >> pms0 at pckbc0 (aux slot) >> pckbc0: using irq 12 for aux slot >> wsmouse0 at pms0 mux 0 >> pms0: Synaptics touchpad, firmware 7.2 >> pcppi0 at isa0 port 0x61 >> spkr0 at pcppi0 >> npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16 >> uvideo0 at uhub0 port 6 configuration 1 interface 0 "Image Processor >> USB2.0 UVC VGA WebCam" rev 2.00/9.17 addr 2 >> video0 at uvideo0 >> ugen0 at uhub4 port 1 "Broadcom Corp BT-270" rev 2.00/2.54 addr 2 >> vscsi0 at root >> scsibus2 at vscsi0: 256 targets >> softraid0 at root >> scsibus3 at softraid0: 256 targets >> sd1 at scsibus3 targ 1 lun 0: <OPENBSD, SR CRYPTO, 005> SCSI2 0/direct >> fixed >> sd1: 238472MB, 512 bytes/sector, 488391473 sectors >> root on sd1a (0852968529be5f56.a) swap on sd1b dump on sd1b

