VPN Error - "unable to retrieve extended authentication parameters"

[mfluharty]

I have a user getting this error when they try to connect to the VPN client 3.6.1. Other users are not getting this error?

Any idea what this means?

[Nelson Rodrigues]

Mike, VPN 3.6.1 clients are connecting to what headend (VPN 3000, PIX) ?

1) If headend is VPN 3000 please enable events AUTH, IKE, IKEDBG- level 9 is OK.

2) If PIX headend turn on debugs:

debug crypto ipsec and debug crypto isakmp

3) turn on VPN Client Log events to High.

4) clear all logs ...and initiate the tunnel...

5) Please post the logs and any configs.

Thanks.

Nelson

[atortora]

Nelson, the VPN client are connected to PIX 515, i enable debug in the VPN client and the pix but the request to server in dmz is not displayed. my idea is if the request is over inside the next hop is the firewall and reroute to destination, but if the destination is dmz the pix don't respond and the pc find the network in the internet, and don't connect with real server

I test all posibles configuration in split and routing