cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
290
Views
0
Helpful
1
Replies

Blackberry Wireless Handheld connection problem

babylon5
Level 1
Level 1

I was successfully authenticating Handheld Wireless devices with my VPN 3060 Concentrator until I upgraded the code because a security alert to 4.1.7.F version. Since then, I have not been getting the devices to connect. Here are the debugs that I have gathered:

186 10/25/2005 12:02:02.940 SEV=7 IKEDBG/1 RPT=128 156.40.23.232

Group [BBHHwvpn] User [babylon5]

Client did not ACK all cfg sets!

187 10/25/2005 12:02:02.940 SEV=4 AUTH/22 RPT=11

User [babylon5] Group [BBHHwvpn] connected, Session Type: IPSec

188 10/25/2005 12:02:02.940 SEV=7 IKEDBG/22

RPT=7 156.40.23.232

Group [BBHHwvpn] User [babylon5]

Resume Quick Mode processing, Cert/Trans Exch/RM DSID completed

190 10/25/2005 12:02:02.940 SEV=4 IKE/119 RPT=10 156.40.23.232

Group [BBHHwvpn] User [babylon5]

PHASE 1 COMPLETED

191 10/25/2005 12:02:02.940 SEV=6 IKE/121 RPT=10 156.40.23.232

Keep-alive type for this connection: None

192 10/25/2005 12:02:02.940 SEV=6 IKE/122 RPT=6 156.40.23.232

Keep-alives configured on but peer does not support keep-alives (type = None)

193 10/25/2005 12:02:02.940 SEV=7 IKEDBG/82 RPT=7 156.40.23.232

Group [BBHHwvpn] User [babylon5]

Starting phase 1 rekey timer: 64800000 (ms)

194 10/25/2005 12:02:02.940 SEV=9 IKEDBG/0 RPT=578 156.40.23.232

Group [BBHHwvpn] User [babylon5]

sending notify message

195 10/25/2005 12:02:02.950 SEV=9 IKEDBG/0 RPT=579 156.40.23.232

Group [BBHHwvpn] User [babylon5]

constructing blank hash

196 10/25/2005 12:02:02.950 SEV=9 IKEDBG/0 RPT=580 156.40.23.232

Group [BBHHwvpn] User [babylon5]

constructing qm hash

197 10/25/2005 12:02:02.950 SEV=8 IKEDBG/81 RPT=216 156.40.23.232

SENDING Message (msgid=3a3ff127) with payloads :

HDR + HASH (8) + NOTIFY (11)

total length : 92

199 10/25/2005 12:02:02.950 SEV=9 IKEDBG/0 RPT=581 156.40.23.232

Group [BBHHwvpn] User [babylon5]

IKE SA AM:730a5f94 rcv'd Terminate: state AM_ACTIVE

flags 0x00413041, refcnt 1, tuncnt 1

202 10/25/2005 12:02:02.950 SEV=9 IKEDBG/0 RPT=582

sending delete/delete with reason message

10/25/2005 12:02:02.950 SEV=6 IKE/0 RPT=12 156.40.23.232

Group [BBHHwvpn] User [babylon5]

Removing peer from correlator table failed, no match!

205 10/25/2005 12:02:02.950 SEV=9 IKEDBG/0 RPT=583 156.40.23.232

Group [BBHHwvpn] User [babylon5]

IKE SA AM:730a5f94 terminating:

flags 0x01413001, refcnt 0, tuncnt 0

207 10/25/2005 12:02:02.950 SEV=9 IKEDBG/0 RPT=584

sending delete/delete with reason message

208 10/25/2005 12:02:02.950 SEV=9 IKEDBG/0 RPT=585 156.40.23.232

Group [BBHHwvpn] User [babylon5]

constructing blank hash

209 10/25/2005 12:02:02.950 SEV=9 IKEDBG/0 RPT=586

constructing IKE delete payload

210 10/25/2005 12:02:02.950 SEV=9 IKEDBG/0 RPT=587 156.40.23.232

Group [BBHHwvpn] User [babylon5]

constructing qm hash

211 10/25/2005 12:02:02.950 SEV=8 IKEDBG/81 RPT=217 156.40.23.232

SENDING Message (msgid=829cbd87) with payloads :

HDR + HASH (8) + DELETE (12)

total length : 80

213 10/25/2005 12:02:02.950 SEV=4 AUTH/23 RPT=7 156.40.23.232

User [babylon5] Group [BBHHwvpn] disconnected: duration: 0:00:00

1 Reply 1

babylon5
Level 1
Level 1

Here is the answer I got from the Cisco case that I opened.

====================================================

Steps to Take:

If no configuration changes were made to the concentrator and you only upgraded it from a different version to 4.1.7G you might be running in to bugs:

CSCsb39893: Movian client no longer connects to 4.1.7.F and 4.7.1

CSCsa65275: Can't connect with Movian client and 4.1.7 This is issue is actually a problem with all non-Unity clients. Movian has the ability to be either Unity or pre-Unity -- Unity work fine.

Both of them appear to be fixed on version 4.1.7G, you might want to move to this version and see if it makes a difference.

=====================================================

Ok, Everyone go back to what you were doing!