I'm trying to configure a new site-to-site VPN connection. I've follwed
the example in Craig Johnson's book and think I've done everything
correctly, but I must've missed something. When I go into CSaudit, I see
the same messages repeated over and over. They are:

PFS NOT ENABLED: deleting all IPSEC SA
Notify recieved: Deleting IKE SA and related QM SAS
Received notify of message type IPSEC_CONTACT 24578 from <master IP>
parsing Certificate: alternative subject name of type 4 not supported
received mm ID type: 9 Protocol; 0 portions; 0 length 50
IKE SA negotioation - peer lifetime is 28800 my lifetime is 28800

and then it repeats. What am I missing here?