cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
5594
Views
0
Helpful
4
Replies

issue with vpnclient 64bit for windows 2003 //442:failed to enable virtual adapter.

madhusudhan s
Level 1
Level 1

Hi ,

I need to know is below vpn client will work for windows 2003 64 bit , as per release notes i doubt it will work .

file name - vpnclient-winx64-msi-5.0.07.0290-k9.exe

release notes - http://www.cisco.com/en/US/docs/security/vpn_client/cisco_vpn_client/vpn_client5007/release/notes/vpnclient5007.html#wp63537

VA is taking the ip address but not connecting .Is it possible some configuration or image issue from ASA as its first time we are trying to use 64bit OS , vpn client for 32bit OS working fine .

on pc screen it says - reason -442:failed to enable virtual adapter.

Below are the logs from vpn clinet when i tried to connect ASA5520 . Version 7.0(8) -

Cisco Systems VPN Client Version 5.0.07.0290
Copyright (C) 1998-2010 Cisco Systems, Inc. All Rights Reserved.
Client Type(s): Windows, WinNT
Running on: 5.2.3790 Service Pack 2
Config file directory: C:\Program Files (x86)\Cisco Systems\VPN Client\

1      15:38:03.921  01/27/11  Sev=Info/4 CM/0x63100002

Begin connection process

2      15:38:03.937  01/27/11  Sev=Info/4 CM/0x63100004

Establish secure connection

3      15:38:03.937  01/27/11  Sev=Info/4 CM/0x63100024

Attempt connection with server "203.199.30.190"

4      15:38:04.125  01/27/11  Sev=Info/4 CM/0x6310000E

Established Phase 1 SA.  1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system

5      15:38:04.140  01/27/11  Sev=Info/4 CM/0x63100015

Launch xAuth application

6      15:38:09.515  01/27/11  Sev=Info/4 CM/0x63100017

xAuth application returned

7      15:38:09.515  01/27/11  Sev=Info/4 CM/0x6310000E

Established Phase 1 SA.  1 Crypto Active IKE SA, 1 User Authenticated IKE SA in the system

8      15:38:10.562  01/27/11  Sev=Info/4 CM/0x63100019

Mode Config data received

9      15:38:10.781  01/27/11  Sev=Warning/2 CVPND/0xE340002C

Unable to enable the 64-bit VA after timeout

10     15:38:10.781  01/27/11  Sev=Warning/3 CVPND/0xE3400029

The Client failed to enable the Virtual Adapter on 64-bit Windows

11     15:38:10.781  01/27/11  Sev=Warning/2 CM/0xE310000A

The virtual adapter failed to enable

12     15:38:10.781  01/27/11  Sev=Info/6 CM/0x6310003A

Unable to restore route changes from file.

13     15:38:10.781  01/27/11  Sev=Info/6 CM/0x63100037

The routing table was returned to original state prior to Virtual Adapter

14     15:38:10.859  01/27/11  Sev=Info/4 CM/0x63100035

The Virtual Adapter was disabled

15     15:38:10.859  01/27/11  Sev=Warning/2 IKE/0xE300009B

Failed to active IPSec SA: Unable to enable Virtual Adapter (NavigatorQM:936)

16     15:38:10.859  01/27/11  Sev=Warning/2 IKE/0xE30000A7

Unexpected SW error occurred while processing Quick Mode negotiator:(Navigator:2263)

17     15:38:11.546  01/27/11  Sev=Info/4 CM/0x63100012

Phase 1 SA deleted before first Phase 2 SA is up cause by "Unknown".  0 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system

18     15:38:11.546  01/27/11  Sev=Info/5 CM/0x63100025

Initializing CVPNDrv

19     15:38:11.578  01/27/11  Sev=Info/6 CM/0x63100046

Set tunnel established flag in registry to 0.

20     15:38:40.953  01/27/11  Sev=Info/4 CM/0x63100002

Begin connection process

21     15:38:40.953  01/27/11  Sev=Warning/2 CVPND/0xA3400019

Error binding socket: -21. (DRVIFACE:1234)

22     15:38:40.968  01/27/11  Sev=Info/4 CM/0x63100004

Establish secure connection

23     15:38:40.968  01/27/11  Sev=Info/4 CM/0x63100024

Attempt connection with server "203.199.30.190"

24     15:38:41.156  01/27/11  Sev=Info/4 CM/0x6310000E

Established Phase 1 SA.  1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system

25     15:38:41.171  01/27/11  Sev=Info/4 CM/0x63100015

Launch xAuth application

26     15:39:08.031  01/27/11  Sev=Info/4 CM/0x63100017

xAuth application returned

27     15:39:08.046  01/27/11  Sev=Info/4 CM/0x6310000E

Established Phase 1 SA.  1 Crypto Active IKE SA, 1 User Authenticated IKE SA in the system

28     15:39:09.093  01/27/11  Sev=Info/4 CM/0x63100019

Mode Config data received

29     15:39:09.312  01/27/11  Sev=Warning/2 CVPND/0xE340002C

Unable to disable the 64-bit VA after timeout

30     15:39:09.312  01/27/11  Sev=Warning/3 CVPND/0xE340002A

The Client failed to disable the Virtual Adapter on 64-bit Windows

31     15:39:19.937  01/27/11  Sev=Warning/3 CVPND/0xA340000D

The virtual adapter was not recognized by the operating system.

32     15:39:19.937  01/27/11  Sev=Warning/2 CM/0xE310000A

The virtual adapter failed to enable

33     15:39:19.937  01/27/11  Sev=Info/6 CM/0x6310003A

Unable to restore route changes from file.

34     15:39:19.937  01/27/11  Sev=Info/6 CM/0x63100037

The routing table was returned to original state prior to Virtual Adapter

35     15:39:20.109  01/27/11  Sev=Warning/2 CVPND/0xE340002C

Unable to disable the 64-bit VA after timeout

36     15:39:20.109  01/27/11  Sev=Warning/3 CVPND/0xE340002A

The Client failed to disable the Virtual Adapter on 64-bit Windows

37     15:39:20.281  01/27/11  Sev=Warning/2 CVPND/0xE340002C

Unable to disable the 64-bit VA after timeout

38     15:39:20.281  01/27/11  Sev=Warning/3 CVPND/0xE340002A

The Client failed to disable the Virtual Adapter on 64-bit Windows

39     15:39:20.578  01/27/11  Sev=Warning/2 CVPND/0xE340002C

Unable to disable the 64-bit VA after timeout

40     15:39:20.578  01/27/11  Sev=Warning/3 CVPND/0xE340002A

The Client failed to disable the Virtual Adapter on 64-bit Windows

41     15:39:20.953  01/27/11  Sev=Warning/2 CVPND/0xE340002C

Unable to disable the 64-bit VA after timeout

42     15:39:20.953  01/27/11  Sev=Warning/3 CVPND/0xE340002A

The Client failed to disable the Virtual Adapter on 64-bit Windows

43     15:39:21.437  01/27/11  Sev=Info/4 CM/0x63100035

The Virtual Adapter was disabled

44     15:39:21.437  01/27/11  Sev=Warning/2 IKE/0xE300009B

Failed to active IPSec SA: Unable to enable Virtual Adapter (NavigatorQM:936)

45     15:39:21.437  01/27/11  Sev=Warning/2 IKE/0xE30000A7

Unexpected SW error occurred while processing Quick Mode negotiator:(Navigator:2263)

46     15:39:22.046  01/27/11  Sev=Info/4 CM/0x63100012

Phase 1 SA deleted before first Phase 2 SA is up cause by "Unknown".  0 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system

47     15:39:22.046  01/27/11  Sev=Info/5 CM/0x63100025

Initializing CVPNDrv

48     15:39:22.062  01/27/11  Sev=Info/6 CM/0x63100046

Set tunnel established flag in registry to 0.

1 Accepted Solution

Accepted Solutions

And also you need to be in 8.0 code to run Anyconnect client.

--

Ramya

View solution in original post

4 Replies 4

ramds
Level 1
Level 1

Hello Madhu,

64 bit vpn client doesn't support windows 2003 x64. It will install but it ll not work. The error that you are getting is because of this compatibility reason and not any config issue.

--

Ramya.

-- Please rate the solutions.

HI Ramya ,

Can I use anyconnect vpn client here , I understand anyconnect required a license on ASA .

here is the show ver from asa , can you suggest me if i have this license .

--------

sh ver

Cisco Adaptive Security Appliance Software Version 7.0(8)
Device Manager Version 5.0(8)

Compiled on Sat 31-May-08 23:48 by builders
System image file is "disk0:/asa708-k8.bin"
Config file at boot was "startup-config"

HZL-ASA-Primary up 113 days 7 hours
failover cluster up 194 days 12 hours

Hardware:   ASA5520, 512 MB RAM, CPU Pentium 4 Celeron 2000 MHz
Internal ATA Compact Flash, 256MB
BIOS Flash M50FW080 @ 0xffe00000, 1024KB

Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0)
                             Boot microcode   : CNlite-MC-Boot-Cisco-1.2
                             SSL/IKE microcode: CNlite-MC-IPSEC-Admin-3.03
                             IPSec microcode  : CNlite-MC-IPSECm-MAIN-2.05
0: Ext: GigabitEthernet0/0  : address is 0024.97f0.6b32, irq 9
1: Ext: GigabitEthernet0/1  : address is 0024.97f0.6b33, irq 9
2: Ext: GigabitEthernet0/2  : address is 0024.97f0.6b34, irq 9
3: Ext: GigabitEthernet0/3  : address is 0024.97f0.6b35, irq 9
4: Ext: Management0/0       : address is 0024.97f0.6b31, irq 11
5: Int: Not used            : irq 11
6: Int: Not used            : irq 5

Licensed features for this platform:
Maximum Physical Interfaces : Unlimited
Maximum VLANs               : 100      
Inside Hosts                : Unlimited
Failover                    : Active/Active
VPN-DES                     : Enabled  
VPN-3DES-AES                : Enabled  
Security Contexts           : 2        
GTP/GPRS                    : Disabled 
VPN Peers                   : 750

This platform has an ASA 5520 VPN Plus license.

--------------

Thanx 4 ur reply .

Madhu,

You can test the anyconnect feature for 2 users since your license supports that. But in order to have more number of users, you need to get the anyconnect premium license.

And yes, you can use anyconnect. ;-)

--

Ramya

--Please rate the solutions.

And also you need to be in 8.0 code to run Anyconnect client.

--

Ramya