VPN Client issue

[Scott Payne]

Hello everyone! Hope all is well.

I ran into a VPN issue today that has me confused.  The user tries to log on with the proper username and password. After three times, Reason 413 appears. I know it is generally a credential issue but it isn't that at all. SImply because it is doing it to all credentials. At first I thought it was a clock issue. That actually happened last night where the firewall and server times got off kilter. Easy fix though.  Anyway, I captured some logs and found the public ip of the computer (wireless card) with information that does not appear to be an error.

Here is the infromation:

%ASA-7-713236: IP = 75.199.x.y, IKE_DECODE RECEIVED Message (msgid=d9612d04) with payloads : HDR + HASH (8) + DELETE (12) + NONE (0) total length : 76

Why would this be happening?

[Federico Coto Fajardo · Accepted solution]

Hi Scott,

I don't think that message is a problem, it's merely information that IKE received a message with an 8-byte hash payload and other information.

What was done to fix the problem and allow everybody to connect again? (assuming everything is working fine now)?

Federico.

[Scott Payne]

That is what is confusing. It isn't an error, but it is the only information showing up in the logs regarding the computer trying to establish a

vpn connection. After three atempts with anyone's credentials it fails and give you the 413 error which of course, points heavily towards the end user.

Please help with this.

Just ran a nother set of logs.

Here they are:

%ASA-7-713236: IP = 75.x.x.74, IKE_DECODE RECEIVED Message (msgid=0) with payloads : HDR + SA (1) + KE (4) + NONCE (10) + ID (5) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 850

　

%ASA-7-715049: IP = 75.x.x.74, Received xauth V6 VID

Still get error 413

Thanks,

Scott

[Federico Coto Fajardo]

Can you get the output from the ASA for

debug cry isa 127

debug cry ips 127

when attempting the VPN connection?

Federico.