10-25-2005 10:36 AM - edited 03-09-2019 12:49 PM
I was successfully authenticating Handheld Wireless devices with my VPN 3060 Concentrator until I upgraded the code because a security alert to 4.1.7.F version. Since then, I have not been getting the devices to connect. Here are the debugs that I have gathered:
186 10/25/2005 12:02:02.940 SEV=7 IKEDBG/1 RPT=128 156.40.23.232
Group [BBHHwvpn] User [babylon5]
Client did not ACK all cfg sets!
187 10/25/2005 12:02:02.940 SEV=4 AUTH/22 RPT=11
User [babylon5] Group [BBHHwvpn] connected, Session Type: IPSec
188 10/25/2005 12:02:02.940 SEV=7 IKEDBG/22
RPT=7 156.40.23.232
Group [BBHHwvpn] User [babylon5]
Resume Quick Mode processing, Cert/Trans Exch/RM DSID completed
190 10/25/2005 12:02:02.940 SEV=4 IKE/119 RPT=10 156.40.23.232
Group [BBHHwvpn] User [babylon5]
PHASE 1 COMPLETED
191 10/25/2005 12:02:02.940 SEV=6 IKE/121 RPT=10 156.40.23.232
Keep-alive type for this connection: None
192 10/25/2005 12:02:02.940 SEV=6 IKE/122 RPT=6 156.40.23.232
Keep-alives configured on but peer does not support keep-alives (type = None)
193 10/25/2005 12:02:02.940 SEV=7 IKEDBG/82 RPT=7 156.40.23.232
Group [BBHHwvpn] User [babylon5]
Starting phase 1 rekey timer: 64800000 (ms)
194 10/25/2005 12:02:02.940 SEV=9 IKEDBG/0 RPT=578 156.40.23.232
Group [BBHHwvpn] User [babylon5]
sending notify message
195 10/25/2005 12:02:02.950 SEV=9 IKEDBG/0 RPT=579 156.40.23.232
Group [BBHHwvpn] User [babylon5]
constructing blank hash
196 10/25/2005 12:02:02.950 SEV=9 IKEDBG/0 RPT=580 156.40.23.232
Group [BBHHwvpn] User [babylon5]
constructing qm hash
197 10/25/2005 12:02:02.950 SEV=8 IKEDBG/81 RPT=216 156.40.23.232
SENDING Message (msgid=3a3ff127) with payloads :
HDR + HASH (8) + NOTIFY (11)
total length : 92
199 10/25/2005 12:02:02.950 SEV=9 IKEDBG/0 RPT=581 156.40.23.232
Group [BBHHwvpn] User [babylon5]
IKE SA AM:730a5f94 rcv'd Terminate: state AM_ACTIVE
flags 0x00413041, refcnt 1, tuncnt 1
202 10/25/2005 12:02:02.950 SEV=9 IKEDBG/0 RPT=582
sending delete/delete with reason message
10/25/2005 12:02:02.950 SEV=6 IKE/0 RPT=12 156.40.23.232
Group [BBHHwvpn] User [babylon5]
Removing peer from correlator table failed, no match!
205 10/25/2005 12:02:02.950 SEV=9 IKEDBG/0 RPT=583 156.40.23.232
Group [BBHHwvpn] User [babylon5]
IKE SA AM:730a5f94 terminating:
flags 0x01413001, refcnt 0, tuncnt 0
207 10/25/2005 12:02:02.950 SEV=9 IKEDBG/0 RPT=584
sending delete/delete with reason message
208 10/25/2005 12:02:02.950 SEV=9 IKEDBG/0 RPT=585 156.40.23.232
Group [BBHHwvpn] User [babylon5]
constructing blank hash
209 10/25/2005 12:02:02.950 SEV=9 IKEDBG/0 RPT=586
constructing IKE delete payload
210 10/25/2005 12:02:02.950 SEV=9 IKEDBG/0 RPT=587 156.40.23.232
Group [BBHHwvpn] User [babylon5]
constructing qm hash
211 10/25/2005 12:02:02.950 SEV=8 IKEDBG/81 RPT=217 156.40.23.232
SENDING Message (msgid=829cbd87) with payloads :
HDR + HASH (8) + DELETE (12)
total length : 80
213 10/25/2005 12:02:02.950 SEV=4 AUTH/23 RPT=7 156.40.23.232
User [babylon5] Group [BBHHwvpn] disconnected: duration: 0:00:00
10-25-2005 11:34 AM
Here is the answer I got from the Cisco case that I opened.
====================================================
Steps to Take:
If no configuration changes were made to the concentrator and you only upgraded it from a different version to 4.1.7G you might be running in to bugs:
CSCsb39893: Movian client no longer connects to 4.1.7.F and 4.7.1
CSCsa65275: Can't connect with Movian client and 4.1.7 This is issue is actually a problem with all non-Unity clients. Movian has the ability to be either Unity or pre-Unity -- Unity work fine.
Both of them appear to be fixed on version 4.1.7G, you might want to move to this version and see if it makes a difference.
=====================================================
Ok, Everyone go back to what you were doing!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide