topic Re: VPN termination errors in Network Security https://community.cisco.com/t5/network-security/vpn-termination-errors/m-p/1169773#M876736 <HTML><HEAD></HEAD><BODY><P>You need to get a vpn client to try to connect to your pix to generate debug logs</P></BODY></HTML> Thu, 12 Feb 2009 18:04:41 GMT Ivan Martinon 2009-02-12T18:04:41Z VPN termination errors https://community.cisco.com/t5/network-security/vpn-termination-errors/m-p/1169768#M876723 <P>Hopefully someone can help with a termination issue I'm having with a PIX-515e firewall; software version 6.3.4, pdm version 3.0.2.</P><P></P><P>We're getting constant vpn termination errors (reason 412 and 413) from a group of users at one location. I am by no means a pix guru, but I've verified that nat-t is configured. I can't figure out how to determine if there is a group policy set. I'd be happy to post or email the current config if that will help - it's about 150 lines long.</P><P></P> Mon, 11 Mar 2019 14:47:42 GMT https://community.cisco.com/t5/network-security/vpn-termination-errors/m-p/1169768#M876723 eriklozano 2019-03-11T14:47:42Z Re: VPN termination errors https://community.cisco.com/t5/network-security/vpn-termination-errors/m-p/1169769#M876725 <HTML><HEAD></HEAD><BODY><P>Go ahead and post it, we need to see if you are missing some lines there</P></BODY></HTML> Mon, 09 Feb 2009 22:24:44 GMT https://community.cisco.com/t5/network-security/vpn-termination-errors/m-p/1169769#M876725 Ivan Martinon 2009-02-09T22:24:44Z Re: VPN termination errors https://community.cisco.com/t5/network-security/vpn-termination-errors/m-p/1169770#M876730 <HTML><HEAD></HEAD><BODY><P>Config is attached. Let me know if I need to post it inline. Thanks.</P><P></P><P> </P><P></P></BODY></HTML> Tue, 10 Feb 2009 21:23:19 GMT https://community.cisco.com/t5/network-security/vpn-termination-errors/m-p/1169770#M876730 eriklozano 2009-02-10T21:23:19Z Re: VPN termination errors https://community.cisco.com/t5/network-security/vpn-termination-errors/m-p/1169771#M876732 <HTML><HEAD></HEAD><BODY><P>Well it all looks good on your config, can you turn on the following debugs?</P><P>debug crypto isakmp</P><P>debug crypto ipsec</P></BODY></HTML> Tue, 10 Feb 2009 21:32:10 GMT https://community.cisco.com/t5/network-security/vpn-termination-errors/m-p/1169771#M876732 Ivan Martinon 2009-02-10T21:32:10Z Re: VPN termination errors https://community.cisco.com/t5/network-security/vpn-termination-errors/m-p/1169772#M876734 <HTML><HEAD></HEAD><BODY><P>Using the CLI, I entered the two commands you listed. But, I'm not sure what to do next.</P></BODY></HTML> Thu, 12 Feb 2009 18:03:36 GMT https://community.cisco.com/t5/network-security/vpn-termination-errors/m-p/1169772#M876734 eriklozano 2009-02-12T18:03:36Z Re: VPN termination errors https://community.cisco.com/t5/network-security/vpn-termination-errors/m-p/1169773#M876736 <HTML><HEAD></HEAD><BODY><P>You need to get a vpn client to try to connect to your pix to generate debug logs</P></BODY></HTML> Thu, 12 Feb 2009 18:04:41 GMT https://community.cisco.com/t5/network-security/vpn-termination-errors/m-p/1169773#M876736 Ivan Martinon 2009-02-12T18:04:41Z Re: VPN termination errors https://community.cisco.com/t5/network-security/vpn-termination-errors/m-p/1169774#M876737 <HTML><HEAD></HEAD><BODY><P>Now that the debug logs have been enabled for several weeks, where do I find the log files?</P></BODY></HTML> Wed, 04 Mar 2009 13:53:27 GMT https://community.cisco.com/t5/network-security/vpn-termination-errors/m-p/1169774#M876737 eriklozano 2009-03-04T13:53:27Z Re: VPN termination errors https://community.cisco.com/t5/network-security/vpn-termination-errors/m-p/1169775#M876739 <HTML><HEAD></HEAD><BODY><P>If you did not set any syslog servers, you need to get the output of the show log, however this log is a circular buffer most likely some events have been overwritten.</P></BODY></HTML> Wed, 04 Mar 2009 14:56:07 GMT https://community.cisco.com/t5/network-security/vpn-termination-errors/m-p/1169775#M876739 Ivan Martinon 2009-03-04T14:56:07Z Re: VPN termination errors https://community.cisco.com/t5/network-security/vpn-termination-errors/m-p/1169776#M876740 <HTML><HEAD></HEAD><BODY><P>And how exactly do I get the output of the show log?</P></BODY></HTML> Wed, 04 Mar 2009 17:07:21 GMT https://community.cisco.com/t5/network-security/vpn-termination-errors/m-p/1169776#M876740 eriklozano 2009-03-04T17:07:21Z Re: VPN termination errors https://community.cisco.com/t5/network-security/vpn-termination-errors/m-p/1169777#M876741 <HTML><HEAD></HEAD><BODY><P>on CLI you type "show log"</P></BODY></HTML> Wed, 04 Mar 2009 17:11:21 GMT https://community.cisco.com/t5/network-security/vpn-termination-errors/m-p/1169777#M876741 Ivan Martinon 2009-03-04T17:11:21Z