Agree ... View more

Hi thanks very much for the reply.i have configured as per the mail.But i am not able to connect to ezvpn server.could you please check the logs and tell me where is the problem. *May 26 04:32:17.727: ISAKMP:(0): SA request profile is (NULL) *May 26 04:32:17.727: ISAKMP: Created a peer struct for 207.108.46.194, peer port 500 *May 26 04:32:17.727: ISAKMP: New peer created peer = 0x84FD9F98 peer_handle = 0x80000047 *May 26 04:32:17.727: ISAKMP: Locking peer struct 0x84FD9F98, refcount 1 for isakmp_initiator *May 26 04:32:17.727: ISAKMP:(0):Setting client config settings 839FFAF0 *May 26 04:32:17.727: ISAKMP: local port 500, remote port 500 *May 26 04:32:17.727: ISAKMP: Find a dup sa in the avl tree during calling isadb_insert sa = 83A1C820 *May 26 04:32:17.727: ISAKMP:(0): client mode configured. *May 26 04:32:17.731: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID *May 26 04:32:17.731: ISAKMP:(0): constructed NAT-T vendor-07 ID *May 26 04:32:17.731: ISAKMP:(0): constructed NAT-T vendor-03 ID *May 26 04:32:17.731: ISAKMP:(0): constructed NAT-T vendor-02 ID *May 26 04:32:17.731: ISKAMP: growing send buffer from 1024 to 3072 *May 26 04:32:17.731: ISAKMP:(0):SA is doing pre-shared key authentication plus XAUTH using id type ID_KEY_ID *May 26 04:32:17.731: ISAKMP (0): ID payload next-payload : 13 type : 11 group id : EasyVPN protocol : 17 port : 0 length : 15 *May 26 04:32:17.731: ISAKMP:(0):Total payload length: 15 *May 26 04:32:17.731: ISAKMP:(0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_AM CCC-UAE-Router# CCC-UAE-Router# *May 26 04:32:17.731: ISAKMP:(0):Old State = IKE_READY New State = IKE_I_AM1 *May 26 04:32:17.731: ISAKMP:(0): beginning Aggressive Mode exchange *May 26 04:32:17.731: ISAKMP:(0): sending packet to 207.108.46.194 my_port 500 peer_port 500 (I) AG_INIT_EXCH *May 26 04:32:17.731: ISAKMP:(0):Sending an IKE IPv4 Packet. *May 26 04:32:17.795: ISAKMP:(2051):purging node 774194125 *May 26 04:32:17.795: ISAKMP:(2051):purging node 702397046 *May 26 04:32:18.011: ISAKMP (0): received packet from 207.108.46.194 dport 500 sport 500 Global (I) AG_INIT_EXCH *May 26 04:32:18.011: ISAKMP:(0): processing SA payload. message ID = 0 *May 26 04:32:18.011: ISAKMP:(0): processing ID payload. message ID = 0 *May 26 04:32:18.011: ISAKMP (0): ID payload next-payload : 8 type : 1 address : 207.108.46.194 protocol : 17 port : 0 length : 12 *May 26 04:32:18.011: ISAKMP:(0):: peer matches *none* of the profiles *May 26 04:32:18.011: ISAKMP:(0): processing vendor id payload *May 26 04:32:18.011: ISAKMP:(0): vendor ID is Unity *May 26 04:32:18.011: ISAKMP:(0): processing vendor id payload *May 26 04:32:18.011: ISAKMP:(0): vendor ID seems Unity/DPD but major 215 mismatch *May 26 04:32:18.011: ISAKMP:(0): vendor ID is XAUTH *May 26 04:32:18.011: ISAKMP:(0): processing vendor id payload *May 26 04:32:18.011: ISAKMP:(0): vendor ID is DPD *May 26 04:32:18.011: ISAKMP:(0): local preshared key found *May 26 04:32:18.011: ISAKMP : Scanning profiles for xauth ... *May 26 04:32:18.011: ISAKMP:(0): Authentication by xauth preshared *May 26 04:32:18.015: ISAKMP:(0):Checking ISAKMP transform 13 against priority 65515 policy *May 26 04:32:18.015: ISAKMP: encryption 3DES-CBC *May 26 04:32:18.015: ISAKMP: hash SHA *May 26 04:32:18.015: ISAKMP: default group 2 *May 26 04:32:18.015: ISAKMP: auth XAUTHInitPreShared *May 26 04:32:18.015: ISAKMP: life type in seconds *May 26 04:32:18.015: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B *May 26 04:32:18.015: ISAKMP:(0):Encryption algorithm offered does not match policy! *May 26 04:32:18.015: ISAKMP:(0):atts are not acceptable. Next payload is 0 *May 26 04:32:18.015: ISAKMP:(0):Checking ISAKMP transform 13 against priority 65516 policy *May 26 04:32:18.015: ISAKMP: encryption 3DES-CBC *May 26 04:32:18.015: ISAKMP: hash SHA *May 26 04:32:18.015: ISAKMP: default group 2 *May 26 04:32:18.015: ISAKMP: auth XAUTHInitPreShared *May 26 04:32:18.015: ISAKMP: life type in seconds *May 26 04:32:18.015: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B *May 26 04:32:18.015: ISAKMP:(0):Encryption algorithm offered does not match policy! *May 26 04:32:18.015: ISAKMP:(0):atts are not acceptable. Next payload is 0 *May 26 04:32:18.015: ISAKMP:(0):Checking ISAKMP transform 13 against priority 65517 policy *May 26 04:32:18.015: ISAKMP: encryption 3DES-CBC *May 26 04:32:18.015: ISAKMP: hash SHA *May 26 04:32:18.015: ISAKMP: default group 2 *May 26 04:32:18.015: ISAKMP: auth XAUTHInitPreShared *May 26 04:32:18.015: ISAKMP: life type in seconds *May 26 04:32:18.015: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B *May 26 04:32:18.015: ISAKMP:(0):Encryption algorithm offered does not match policy! *May 26 04:32:18.015: ISAKMP:(0):atts are not acceptable. Next payload is 0 *May 26 04:32:18.015: ISAKMP:(0):Checking ISAKMP transform 13 against priority 65518 policy *May 26 04:32:18.019: ISAKMP: encryption 3DES-CBC *May 26 04:32:18.019: ISAKMP: hash SHA *May 26 04:32:18.019: ISAKMP: default group 2 *May 26 04:32:18.019: ISAKMP: auth XAUTHInitPreShared *May 26 04:32:18.019: ISAKMP: life type in seconds *May 26 04:32:18.019: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B *May 26 04:32:18.019: ISAKMP:(0):Encryption algorithm offered does not match policy! *May 26 04:32:18.019: ISAKMP:(0):atts are not acceptable. Next payload is 0 *May 26 04:32:18.019: ISAKMP:(0):Checking ISAKMP transform 13 against priority 65519 policy *May 26 04:32:18.019: ISAKMP: encryption 3DES-CBC *May 26 04:32:18.019: ISAKMP: hash SHA *May 26 04:32:18.019: ISAKMP: default group 2 *May 26 04:32:18.019: ISAKMP: auth XAUTHInitPreShared *May 26 04:32:18.019: ISAKMP: life type in seconds *May 26 04:32:18.019: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B *May 26 04:32:18.019: ISAKMP:(0):Encryption algorithm offered does not match policy! *May 26 04:32:18.019: ISAKMP:(0):atts are not acceptable. Next payload is 0 *May 26 04:32:18.019: ISAKMP:(0):Checking ISAKMP transform 13 against priority 65520 policy *May 26 04:32:18.019: ISAKMP: encryption 3DES-CBC *May 26 04:32:18.019: ISAKMP: hash SHA *May 26 04:32:18.019: ISAKMP: default group 2 *May 26 04:32:18.019: ISAKMP: auth XAUTHInitPreShared *May 26 04:32:18.019: ISAKMP: life type in seconds *May 26 04:32:18.019: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B *May 26 04:32:18.019: ISAKMP:(0):Encryption algorithm offered does not match policy! *May 26 04:32:18.019: ISAKMP:(0):atts are not acceptable. Next payload is 0 *May 26 04:32:18.019: ISAKMP:(0):Checking ISAKMP transform 13 against priority 65521 policy *May 26 04:32:18.019: ISAKMP: encryption 3DES-CBC *May 26 04:32:18.019: ISAKMP: hash SHA *May 26 04:32:18.023: ISAKMP: default group 2 *May 26 04:32:18.023: ISAKMP: auth XAUTHInitPreShared *May 26 04:32:18.023: ISAKMP: life type in seconds *May 26 04:32:18.023: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B *May 26 04:32:18.023: ISAKMP:(0):Encryption algorithm offered does not match policy! *May 26 04:32:18.023: ISAKMP:(0):atts are not acceptable. Next payload is 0 *May 26 04:32:18.023: ISAKMP:(0):Checking ISAKMP transform 13 against priority 65522 policy *May 26 04:32:18.023: ISAKMP: encryption 3DES-CBC *May 26 04:32:18.023: ISAKMP: hash SHA *May 26 04:32:18.023: ISAKMP: default group 2 *May 26 04:32:18.023: ISAKMP: auth XAUTHInitPreShared *May 26 04:32:18.023: ISAKMP: life type in seconds *May 26 04:32:18.023: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B *May 26 04:32:18.023: ISAKMP:(0):Encryption algorithm offered does not match policy! *May 26 04:32:18.023: ISAKMP:(0):atts are not acceptable. Next payload is 0 *May 26 04:32:18.023: ISAKMP:(0):Checking ISAKMP transform 13 against priority 65523 policy *May 26 04:32:18.023: ISAKMP: encryption 3DES-CBC *May 26 04:32:18.023: ISAKMP: hash SHA *May 26 04:32:18.023: ISAKMP: default group 2 *May 26 04:32:18.023: ISAKMP: auth XAUTHInitPreShared *May 26 04:32:18.023: ISAKMP: life type in seconds *May 26 04:32:18.023: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B *May 26 04:32:18.023: ISAKMP:(0):Encryption algorithm offered does not match policy! *May 26 04:32:18.023: ISAKMP:(0):atts are not acceptable. Next payload is 0 *May 26 04:32:18.023: ISAKMP:(0):Checking ISAKMP transform 13 against priority 65524 policy *May 26 04:32:18.023: ISAKMP: encryption 3DES-CBC *May 26 04:32:18.023: ISAKMP: hash SHA *May 26 04:32:18.023: ISAKMP: default group 2 *May 26 04:32:18.023: ISAKMP: auth XAUTHInitPreShared *May 26 04:32:18.023: ISAKMP: life type in seconds *May 26 04:32:18.023: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B *May 26 04:32:18.023: ISAKMP:(0):Encryption algorithm offered does not match policy! *May 26 04:32:18.023: ISAKMP:(0):atts are not acceptable. Next payload is 0 *May 26 04:32:18.023: ISAKMP:(0):Checking ISAKMP transform 13 against priority 65525 policy *May 26 04:32:18.027: ISAKMP: encryption 3DES-CBC *May 26 04:32:18.027: ISAKMP: hash SHA *May 26 04:32:18.027: ISAKMP: default group 2 *May 26 04:32:18.027: ISAKMP: auth XAUTHInitPreShared *May 26 04:32:18.027: ISAKMP: life type in seconds *May 26 04:32:18.027: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B *May 26 04:32:18.027: ISAKMP:(0):Encryption algorithm offered does not match policy! *May 26 04:32:18.027: ISAKMP:(0):atts are not acceptable. Next payload is 0 *May 26 04:32:18.027: ISAKMP:(0):Checking ISAKMP transform 13 against priority 65526 policy *May 26 04:32:18.027: ISAKMP: encryption 3DES-CBC *May 26 04:32:18.027: ISAKMP: hash SHA *May 26 04:32:18.027: ISAKMP: default group 2 *May 26 04:32:18.027: ISAKMP: auth XAUTHInitPreShared *May 26 04:32:18.027: ISAKMP: life type in seconds *May 26 04:32:18.027: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B *May 26 04:32:18.027: ISAKMP:(0):Encryption algorithm offered does not match policy! *May 26 04:32:18.027: ISAKMP:(0):atts are not acceptable. Next payload is 0 *May 26 04:32:18.027: ISAKMP:(0):Checking ISAKMP transform 13 against priority 65527 policy *May 26 04:32:18.027: ISAKMP: encryption 3DES-CBC *May 26 04:32:18.027: ISAKMP: hash SHA *May 26 04:32:18.027: ISAKMP: default group 2 *May 26 04:32:18.027: ISAKMP: auth XAUTHInitPreShared *May 26 04:32:18.027: ISAKMP: life type in seconds *May 26 04:32:18.027: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B *May 26 04:32:18.027: ISAKMP:(0):atts are acceptable. Next payload is 0 *May 26 04:32:18.027: ISAKMP:(0):Acceptable atts:actual life: 2147483 *May 26 04:32:18.027: ISAKMP:(0):Acceptable atts:life: 0 *May 26 04:32:18.027: ISAKMP:(0):Fill atts in sa vpi_length:4 *May 26 04:32:18.027: ISAKMP:(0):Fill atts in sa life_in_seconds:2147483 *May 26 04:32:18.027: ISAKMP:(0):Returning Actual lifetime: 2147483 *May 26 04:32:18.027: ISAKMP:(0)::Started lifetime timer: 2147483. *May 26 04:32:18.027: ISAKMP:(0): processing KE payload. message ID = 0 *May 26 04:32:18.071: ISAKMP:(0): processing NONCE payload. message ID = 0 *May 26 04:32:18.075: ISAKMP:(2070): processing HASH payload. message ID = 0 *May 26 04:32:18.075: ISAKMP:(2070): vendor ID is NAT-T v2 *May 26 04:32:18.075: ISAKMP:received payload type 20 *May 26 04:32:18.075: ISAKMP (2070): His hash no match - this node outside NAT *May 26 04:32:18.075: ISAKMP:received payload type 20 *May 26 04:32:18.075: ISAKMP (2070): No NAT Found for self or peer *May 26 04:32:18.075: ISAKMP:(2070):SA authentication status: authenticated *May 26 04:32:18.075: ISAKMP:(2070):SA has been authenticated with 207.108.46.194 *May 26 04:32:18.075: ISAKMP: Trying to insert a peer 83.110.17.112/207.108.46.194/500/, and inserted successfully 84FD9F98. *May 26 04:32:18.075: ISAKMP:(2070):Send initial contact *May 26 04:32:18.075: ISAKMP:(2070): sending packet to 207.108.46.194 my_port 500 peer_port 500 (I) AG_INIT_EXCH *May 26 04:32:18.075: ISAKMP:(2070):Sending an IKE IPv4 Packet. *May 26 04:32:18.079: ISAKMP:(2070):Input = IKE_MESG_FROM_PEER, IKE_AM_EXCH *May 26 04:32:18.079: ISAKMP:(2070):Old State = IKE_I_AM1 New State = IKE_P1_COMPLETE *May 26 04:32:18.079: ISAKMP:(2070):Need XAUTH *May 26 04:32:18.079: ISAKMP:(2070):Input = IKE_MESG_INTERNAL, IKE_PHASE1_COMPLETE *May 26 04:32:18.079: ISAKMP:(2070):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE *May 26 04:32:18.331: ISAKMP (2070): received packet from 207.108.46.194 dport 500 sport 500 Global (I) CONF_XAUTH *May 26 04:32:18.331: ISAKMP: set new node 647142033 to CONF_XAUTH *May 26 04:32:18.331: ISAKMP:(2070):processing transaction payload from 207.108.46.194. message ID = 647142033 *May 26 04:32:18.331: ISAKMP: Config payload REQUEST *May 26 04:32:18.331: ISAKMP:(2070):checking request: *May 26 04:32:18.331: ISAKMP: XAUTH_TYPE_V2 *May 26 04:32:18.331: ISAKMP: XAUTH_USER_NAME_V2 *May 26 04:32:18.331: ISAKMP: XAUTH_USER_PASSWORD_V2 *May 26 04:32:18.331: ISAKMP:(2070):Xauth process request *May 26 04:32:18.331: ISAKMP:(2070):Input = IKE_MESG_FROM_PEER, IKE_CFG_REQUEST *May 26 04:32:18.331: ISAKMP:(2070):Old State = IKE_P1_COMPLETE New State = IKE_XAUTH_REPLY_AWAIT *May 26 04:32:18.335: xauth-type: 0 *May 26 04:32:18.335: username: abudhabi *May 26 04:32:18.335: password: *May 26 04:32:18.335: ISAKMP:(2070): responding to peer config from 207.108.46.194. ID = 647142033 *May 26 04:32:18.335: ISAKMP: Marking node 647142033 for late deletion *May 26 04:32:18.335: ISAKMP:(2070): sending packet to 207.108.46.194 my_port 500 peer_port 500 (I) CONF_XAUTH *May 26 04:32:18.335: ISAKMP:(2070):Sending an IKE IPv4 Packet. *May 26 04:32:18.335: ISAKMP:(2070):Input = IKE_MESG_INTERNAL, IKE_XAUTH_REPLY_ATTR *May 26 04:32:18.335: ISAKMP:(2070):Old State = IKE_XAUTH_REPLY_AWAIT New State = IKE_XAUTH_REPLY_SENT *May 26 04:32:18.587: ISAKMP (2070): received packet from 207.108.46.194 dport 500 sport 500 Global (I) CONF_XAUTH *May 26 04:32:18.587: ISAKMP: set new node 853802324 to CONF_XAUTH *May 26 04:32:18.587: ISAKMP:(2070):processing transaction payload from 207.108.46.194. message ID = 853802324 *May 26 04:32:18.587: ISAKMP: Config payload SET *May 26 04:32:18.587: ISAKMP:(2070):Xauth process set, status = 1 *May 26 04:32:18.587: ISAKMP:(2070):checking SET: *May 26 04:32:18.591: ISAKMP: XAUTH_STATUS_V2 XAUTH-OK *May 26 04:32:18.591: ISAKMP:(2070):attributes sent in message: *May 26 04:32:18.591: Status: 1 *May 26 04:32:18.591: ISAKMP:(2070):deleting node 647142033 error FALSE reason "Done with xauth request/reply exchange" *May 26 04:32:18.591: ISAKMP:(2070): sending packet to 207.108.46.194 my_port 500 peer_port 500 (I) CONF_XAUTH *May 26 04:32:18.591: ISAKMP:(2070):Sending an IKE IPv4 Packet. *May 26 04:32:18.591: ISAKMP:(2070):deleting node 853802324 error FALSE reason "No Error" *May 26 04:32:18.591: ISAKMP:(2070):Input = IKE_MESG_FROM_PEER, IKE_CFG_SET *May 26 04:32:18.591: ISAKMP:(2070):Old State = IKE_XAUTH_REPLY_SENT New State = IKE_P1_COMPLETE *May 26 04:32:18.591: ISAKMP:(2070):Need config/address *May 26 04:32:18.591: ISAKMP: set new node -2094112617 to CONF_ADDR *May 26 04:32:18.595: ISAKMP: Sending APPLICATION_VERSION string: Cisco IOS Software, C870 Software (C870-ADVSECURITYK9-M), Version 12.4(24)T, RELEASE SOFTWARE (fc1) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2009 by Cisco Systems, Inc. Compiled Thu 26-Feb-09 07:56 by prod_rel_team *May 26 04:32:18.595: ISAKMP:(2070): initiating peer config to 207.108.46.194. ID = -2094112617 *May 26 04:32:18.595: ISAKMP:(2070): sending packet to 207.108.46.194 my_port 500 peer_port 500 (I) CONF_ADDR *May 26 04:32:18.595: ISAKMP:(2070):Sending an IKE IPv4 Packet. *May 26 04:32:18.595: ISAKMP:(2070):Input = IKE_MESG_INTERNAL, IKE_PHASE1_COMPLETE *May 26 04:32:18.595: ISAKMP:(2070):Old State = IKE_P1_COMPLETE New State = IKE_CONFIG_MODE_REQ_SENT *May 26 04:32:18.851: ISAKMP (2070): received packet from 207.108.46.194 dport 500 sport 500 Global (I) CONF_ADDR *May 26 04:32:18.851: ISAKMP: set new node 261168798 to CONF_ADDR *May 26 04:32:18.851: ISAKMP:(2070): processing HASH payload. message ID = 261168798 *May 26 04:32:18.851: ISAKMP:(2070): processing DELETE payload. message ID = 261168798 *May 26 04:32:18.851: ISAKMP:(2070):peer does not do paranoid keepalives. *May 26 04:32:18.851: ISAKMP:(2070):deleting SA reason "No reason" state (I) CONF_ADDR (peer 207.108.46.194) *May 26 04:32:18.851: ISAKMP:(2070):deleting node 261168798 error FALSE reason "Informational (in) state 1" *May 26 04:32:18.855: ISAKMP: set new node 181196255 to CONF_ADDR *May 26 04:32:18.855: ISAKMP:(2070): sending packet to 207.108.46.194 my_port 500 peer_port 500 (I) CONF_ADDR *May 26 04:32:18.855: ISAKMP:(2070):Sending an IKE IPv4 Packet. *May 26 04:32:18.855: ISAKMP:(2070):purging node 181196255 *May 26 04:32:18.855: ISAKMP:(2070):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL *May 26 04:32:18.855: ISAKMP:(2070):Old State = IKE_CONFIG_MODE_REQ_SENT New State = IKE_DEST_SA *May 26 04:32:18.855: ISAKMP:(2070):deleting SA reason "No reason" state (I) CONF_ADDR (peer 207.108.46.194) *May 26 04:32:18.855: ISAKMP:(0):Can't decrement IKE Call Admission Control stat outgoing_active since it's already 0. *May 26 04:32:18.859: ISAKMP: Unlocking peer struct 0x84FD9F98 for isadb_mark_sa_deleted(), count 0 *May 26 04:32:18.859: ISAKMP: Deferring peer node 84FD9F98 deletion, by peer_reap as there are other users 4 *May 26 04:32:18.859: ISAKMP:(2070):deleting node -2094112617 error FALSE reason "IKE deleted" *May 26 04:32:18.859: ISAKMP:(2070):Input = IKE_MESG_FROM_PEER, IKE_MM_EXCH *May 26 04:32:18.859: ISAKMP:(2070):Old State = IKE_DEST_SA New State = IKE_DEST_SA *May 26 04:32:18.859: ISAKMP: Deleting peer node by peer_reap for 207.108.46.194: 84FD9F98 *May 26 04:32:18.859: %CRYPTO-6-EZVPN_CONNECTION_DOWN: (Client) User=abudhabi Group=EasyVPN Client_public_addr=83.110.17.112 Server_public_addr=207.108.46.194 *May 26 04:32:18.863: ISAKMP:(2070):peer does not do paranoid keepalives. CCC-UAE-Router# *May 26 04:33:55.003: EZVPN(ez): New State: CONNECT_REQUIRED *May 26 04:33:55.003: EZVPN(ez): Current State: CONNECT_REQUIRED *May 26 04:33:55.003: EZVPN(ez): Event: CONNECT *May 26 04:33:55.007: EZVPN(ez): ezvpn_connect_request *May 26 04:33:55.007: EZVPN(ez): Found valid peer 207.108.46.194 *May 26 04:33:55.007: EZVPN(ez): Added PSK for address 207.108.46.194 ... View more