topic Re: VPN Client issue in Network Security

VPN Client issue

Scott Payne — Mon, 11 Mar 2019 19:36:22 GMT

Hello everyone! Hope all is well.

I ran into a VPN issue today that has me confused. The user tries to log on with the proper username and password. After three times, Reason 413 appears. I know it is generally a credential issue but it isn't that at all. SImply because it is doing it to all credentials. At first I thought it was a clock issue. That actually happened last night where the firewall and server times got off kilter. Easy fix though. Anyway, I captured some logs and found the public ip of the computer (wireless card) with information that does not appear to be an error.

Here is the infromation:

%ASA-7-713236: IP = 75.199.x.y, IKE_DECODE RECEIVED Message (msgid=d9612d04) with payloads : HDR + HASH (8) + DELETE (12) + NONE (0) total length : 76

Why would this be happening?

Re: VPN Client issue

Federico Coto Fajardo — Mon, 17 Jan 2011 20:46:57 GMT

Hi Scott,

I don't think that message is a problem, it's merely information that IKE received a message with an 8-byte hash payload and other information.

What was done to fix the problem and allow everybody to connect again? (assuming everything is working fine now)?

Federico.

Re: VPN Client issue

Scott Payne — Mon, 17 Jan 2011 21:20:28 GMT

That is what is confusing. It isn't an error, but it is the only information showing up in the logs regarding the computer trying to establish a

vpn connection. After three atempts with anyone's credentials it fails and give you the 413 error which of course, points heavily towards the end user.

Please help with this.

Just ran a nother set of logs.

Here they are:

%ASA-7-713236: IP = 75.x.x.74, IKE_DECODE RECEIVED Message (msgid=0) with payloads : HDR + SA (1) + KE (4) + NONCE (10) + ID (5) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 850

%ASA-7-715049: IP = 75.x.x.74, Received xauth V6 VID

Still get error 413

Thanks,

Scott

Re: VPN Client issue

Federico Coto Fajardo — Mon, 17 Jan 2011 21:32:07 GMT

Can you get the output from the ASA for

debug cry isa 127

debug cry ips 127

when attempting the VPN connection?

Federico.