Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
1103
Views
0
Helpful
1
Replies

Problem connectiong to Concentrator VPN3000

t-systems
Level 1
Level 1

‎06-07-2010 04:43 AM

Dear all,

since last week we are experiencing a strange problem with Remote Connection to a particular Group of our Cisco VPN 3000 Concentrator.

We have various group defined and since last week all was working fine.


Starting from Friday the users that try to connect to one of this group encounter this message after putting in user and password:

Reaseon403: Unable to contact the security gateway.

I make some debug both client side and concentrator side and it seem that there is a problem on Phase 2. Below some output of my debug:

Could you help me in order to fine the reason of this error? The name of the group is Marzotto Legacy.

Client Side (Cisco VPN Client):


Cisco Systems VPN Client Version 4.0.3 (A)
Copyright (C) 1998-2003 Cisco Systems, Inc. All Rights Reserved.
Client Type(s): Windows, WinNT
Running on: 5.1.2600

1      10:34:27.207  06/07/10  Sev=Info/4 CM/0x63100002
Begin connection process

2      10:34:27.207  06/07/10  Sev=Info/4 CVPND/0xE3400001
Microsoft IPSec Policy Agent service stopped successfully

3      10:34:27.207  06/07/10  Sev=Info/4 CM/0x63100004
Establish secure connection using Ethernet

4      10:34:27.207  06/07/10  Sev=Info/4 CM/0x63100024
Attempt connection with server "217.172.6.87"

5      10:34:28.208  06/07/10  Sev=Info/6 IKE/0x6300003B
Attempting to establish a connection with 217.172.6.87.

6      10:34:28.228  06/07/10  Sev=Info/4 IKE/0x63000013
SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Nat-T), VID(Frag), VID(Unity)) to 217.172.6.87

7      10:34:28.228  06/07/10  Sev=Info/4 IPSEC/0x63700008
IPSec driver successfully started

8      10:34:28.228  06/07/10  Sev=Info/4 IPSEC/0x63700014
Deleted all keys

9      10:34:30.011  06/07/10  Sev=Info/5 IKE/0x6300002F
Received ISAKMP packet: peer = 217.172.6.87

10     10:34:30.011  06/07/10  Sev=Info/4 IKE/0x63000014
RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(Unity), VID(Xauth), VID(dpd), VID(Frag), VID(?), VID(?)) from 217.172.6.87

11     10:34:30.011  06/07/10  Sev=Info/5 IKE/0x63000001
Peer is a Cisco-Unity compliant peer

12     10:34:30.011  06/07/10  Sev=Info/5 IKE/0x63000001
Peer supports XAUTH

13     10:34:30.011  06/07/10  Sev=Info/5 IKE/0x63000001
Peer supports DPD

14     10:34:30.011  06/07/10  Sev=Info/5 IKE/0x63000001
Peer supports IKE fragmentation payloads

15     10:34:30.011  06/07/10  Sev=Info/5 IKE/0x63000001
Peer supports DWR Code and DWR Text

16     10:34:30.031  06/07/10  Sev=Info/6 IKE/0x63000001
IOS Vendor ID Contruction successful

17     10:34:30.031  06/07/10  Sev=Info/4 IKE/0x63000013
SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 217.172.6.87

18     10:34:30.031  06/07/10  Sev=Info/4 IKE/0x63000082
IKE Port in use - Local Port =  0x01F4, Remote Port = 0x01F4

19     10:34:30.031  06/07/10  Sev=Info/4 CM/0x6310000E
Established Phase 1 SA.  1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system

20     10:34:30.171  06/07/10  Sev=Info/5 IKE/0x6300002F
Received ISAKMP packet: peer = 217.172.6.87

21     10:34:30.171  06/07/10  Sev=Info/4 IKE/0x63000014
RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 217.172.6.87

22     10:34:30.171  06/07/10  Sev=Info/4 CM/0x63100015
Launch xAuth application

23     10:34:31.252  06/07/10  Sev=Info/4 CM/0x63100017
xAuth application returned

24     10:34:31.252  06/07/10  Sev=Info/4 IKE/0x63000013
SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 217.172.6.87

25     10:34:31.252  06/07/10  Sev=Info/4 CM/0x63100018
User does not provide any authentication data

26     10:34:31.252  06/07/10  Sev=Info/4 IKE/0x63000001
IKE received signal to terminate VPN connection

27     10:34:31.252  06/07/10  Sev=Info/4 IKE/0x63000017
Marking IKE SA for deletion  (I_Cookie=562736D372986702 R_Cookie=3A04D89B7415BEF8) reason = DEL_REASON_RESET_SADB

28     10:34:31.252  06/07/10  Sev=Info/4 IKE/0x63000013
SENDING >>> ISAKMP OAK INFO *(HASH, DWR) to 217.172.6.87

29     10:34:31.252  06/07/10  Sev=Info/4 IKE/0x6300004A
Discarding IKE SA negotiation (I_Cookie=562736D372986702 R_Cookie=3A04D89B7415BEF8) reason = DEL_REASON_RESET_SADB

30     10:34:31.252  06/07/10  Sev=Info/5 CM/0x63100025
Initializing CVPNDrv

31     10:34:31.293  06/07/10  Sev=Info/4 IKE/0x63000085
Microsoft IPSec Policy Agent service started successfully

32     10:34:31.984  06/07/10  Sev=Info/4 IPSEC/0x63700014
Deleted all keys

33     10:34:31.984  06/07/10  Sev=Info/4 IPSEC/0x63700014
Deleted all keys

34     10:34:31.984  06/07/10  Sev=Info/4 IPSEC/0x63700014
Deleted all keys

35     10:34:31.984  06/07/10  Sev=Info/4 IPSEC/0x6370000A
IPSec driver successfully stopped

Concentrator Side (name of group MARZOTTOlegacy):


11153 06/07/2010 13:11:33.140 SEV=8 IKEDBG/81 RPT=1499 109.116.144.33
RECEIVED Message (msgid=90f215a1) with payloads :
HDR + HASH (8) + NOTIFY (11) + NONE (0)
total length : 76

11155 06/07/2010 13:11:33.140 SEV=9 IKEDBG/0 RPT=3047 109.116.144.33
Group [MARZOTTOlegacy]
processing hash

11156 06/07/2010 13:11:33.140 SEV=9 IKEDBG/0 RPT=3048 109.116.144.33
Group [MARZOTTOlegacy]
Processing Notify payload

11157 06/07/2010 13:11:33.140 SEV=9 IKEDBG/41 RPT=12 109.116.144.33
Group [MARZOTTOlegacy]
Received keep-alive of type Altiga keep-alive, not the negotiated type

11159 06/07/2010 13:11:34.020 SEV=8 IKEDBG/81 RPT=1500 109.116.144.33
RECEIVED Message (msgid=f117b9a4) with payloads :
HDR + HASH (8) + ATTR (14) + NONE (0)
total length : 89

11161 06/07/2010 13:11:34.020 SEV=9 IKEDBG/1 RPT=71
process_attr(): Enter!

11162 06/07/2010 13:11:34.020 SEV=9 IKEDBG/1 RPT=72
Processing MODE_CFG Reply attributes.

11163 06/07/2010 13:11:34.020 SEV=8 AUTHDBG/1 RPT=14
AUTH_Open() returns 112

11164 06/07/2010 13:11:34.020 SEV=8 AUTHDBG/3 RPT=22
AUTH_PutAttrTable(112, b490a4)

11165 06/07/2010 13:11:34.020 SEV=8 AUTHDBG/5 RPT=5
AUTH_Authenticate(112, 3204e14, 764594)

11166 06/07/2010 13:11:34.020 SEV=8 AUTHDBG/59 RPT=23
AUTH_BindServer(3cb3204, 0, 0)

11167 06/07/2010 13:11:34.020 SEV=9 AUTHDBG/69 RPT=22
Auth Server 1e96238 has been bound to ACB 3cb3204, sessions = 1

11168 06/07/2010 13:11:34.020 SEV=8 AUTHDBG/65 RPT=22
AUTH_CreateTimer(3cb3204, 0, 0)

11169 06/07/2010 13:11:34.020 SEV=9 AUTHDBG/72 RPT=22
Reply timer created: handle = 2AC0026

11170 06/07/2010 13:11:34.020 SEV=8 AUTHDBG/179 RPT=22
AUTH_SyncToServer(3cb3204, 0, 0)

11171 06/07/2010 13:11:34.020 SEV=8 AUTHDBG/180 RPT=22
AUTH_SendLockReq(3cb3204, 0, 0)

11172 06/07/2010 13:11:34.020 SEV=8 AUTHDBG/61 RPT=22
AUTH_BuildMsg(3cb3204, 0, 0)

11173 06/07/2010 13:11:34.020 SEV=8 AUTHDBG/27 RPT=6
Radius_Build(3cb3204)

11174 06/07/2010 13:11:34.040 SEV=8 AUTHDBG/64 RPT=24
AUTH_StartTimer(3cb3204, 0, 0)

11175 06/07/2010 13:11:34.040 SEV=9 AUTHDBG/73 RPT=24
Reply timer started: handle = 2AC0026, timestamp = 1494705, timeout = 4000

11176 06/07/2010 13:11:34.040 SEV=8 AUTHDBG/62 RPT=24
AUTH_SndRequest(3cb3204, 0, 0)

11177 06/07/2010 13:11:34.040 SEV=8 AUTHDBG/31 RPT=12
Radius_Decode(35b19f0, 124)

11178 06/07/2010 13:11:34.040 SEV=8 AUTHDBG/28 RPT=8
Radius_Xmt(3cb3204)

11179 06/07/2010 13:11:34.040 SEV=9 AUTHDBG/71 RPT=24
xmit_cnt = 1

11180 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/30 RPT=5
Radius_Match(3cb3204, 3204eb8), id = 0x17, rcvd = 0x17

11181 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/63 RPT=21
AUTH_RcvReply(3cb3204, 0, 0)

11182 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/31 RPT=13
Radius_Decode(3204eb8, 64)

11183 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/29 RPT=5
Radius_Rcv(3cb3204)

11184 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/66 RPT=22
AUTH_DeleteTimer(3cb3204, 0, 0)

11185 06/07/2010 13:11:34.140 SEV=9 AUTHDBG/74 RPT=22
Reply timer stopped: handle = 2AC0026, timestamp = 1494715

11186 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/58 RPT=23
AUTH_Callback(3cb3204, 0, 0)

11187 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/3 RPT=23
AUTH_PutAttrTable(112, 1f3e448)

11188 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/60 RPT=22
AUTH_UnbindServer(3cb3204, 0, 0)

11189 06/07/2010 13:11:34.140 SEV=9 AUTHDBG/70 RPT=22
Auth Server 1e96238 has been unbound from ACB 3cb3204, sessions = 0

11190 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/59 RPT=24
AUTH_BindServer(3cb3204, 0, 0)

11191 06/07/2010 13:11:34.140 SEV=9 AUTHDBG/69 RPT=23
Auth Server 1e948d8 has been bound to ACB 3cb3204, sessions = 1

11192 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/65 RPT=23
AUTH_CreateTimer(3cb3204, 0, 0)

11193 06/07/2010 13:11:34.140 SEV=9 AUTHDBG/72 RPT=23
Reply timer created: handle = 2AD0026

11194 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/179 RPT=23
AUTH_SyncToServer(3cb3204, 0, 0)

11195 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/180 RPT=23
AUTH_SendLockReq(3cb3204, 0, 0)

11196 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/61 RPT=23
AUTH_BuildMsg(3cb3204, 0, 0)

11197 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/64 RPT=25
AUTH_StartTimer(3cb3204, 0, 0)

11198 06/07/2010 13:11:34.140 SEV=9 AUTHDBG/73 RPT=25
Reply timer started: handle = 2AD0026, timestamp = 1494715, timeout = 30000

11199 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/62 RPT=25
AUTH_SndRequest(3cb3204, 0, 0)

11200 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/50 RPT=33
IntDB_Decode(2f547e4, 64)

11201 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/47 RPT=17
IntDB_Xmt(3cb3204)

11202 06/07/2010 13:11:34.140 SEV=9 AUTHDBG/71 RPT=25
xmit_cnt = 1

11203 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/182 RPT=17
IntDB_ServiceRequest(3cb3204)

11204 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/49 RPT=17
IntDB_Match(3cb3204, 3cbcf5c)

11205 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/63 RPT=22
AUTH_RcvReply(3cb3204, 0, 0)

11206 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/50 RPT=34
IntDB_Decode(3cbcf5c, 967)

11207 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/48 RPT=17
IntDB_Rcv(3cb3204)

11208 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/66 RPT=23
AUTH_DeleteTimer(3cb3204, 0, 0)

11209 06/07/2010 13:11:34.240 SEV=9 AUTHDBG/74 RPT=23
Reply timer stopped: handle = 2AD0026, timestamp = 1494725

11210 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/58 RPT=24
AUTH_Callback(3cb3204, 0, 0)

11211 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/3 RPT=24
AUTH_PutAttrTable(112, 1f3e448)

11212 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/60 RPT=23
AUTH_UnbindServer(3cb3204, 0, 0)

11213 06/07/2010 13:11:34.240 SEV=9 AUTHDBG/70 RPT=23
Auth Server 1e948d8 has been unbound from ACB 3cb3204, sessions = 0

11214 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/59 RPT=25
AUTH_BindServer(3cb3204, 0, 0)

11215 06/07/2010 13:11:34.240 SEV=9 AUTHDBG/69 RPT=24
Auth Server 1e948d8 has been bound to ACB 3cb3204, sessions = 1

11216 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/65 RPT=24
AUTH_CreateTimer(3cb3204, 0, 0)

11217 06/07/2010 13:11:34.240 SEV=9 AUTHDBG/72 RPT=24
Reply timer created: handle = 2AE0026

11218 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/179 RPT=24
AUTH_SyncToServer(3cb3204, 0, 0)

11219 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/180 RPT=24
AUTH_SendLockReq(3cb3204, 0, 0)

11220 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/61 RPT=24
AUTH_BuildMsg(3cb3204, 0, 0)

11221 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/64 RPT=26
AUTH_StartTimer(3cb3204, 0, 0)

11222 06/07/2010 13:11:34.240 SEV=9 AUTHDBG/73 RPT=26
Reply timer started: handle = 2AE0026, timestamp = 1494725, timeout = 30000

11223 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/62 RPT=26
AUTH_SndRequest(3cb3204, 0, 0)

11224 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/50 RPT=35
IntDB_Decode(2f545f0, 64)

11225 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/47 RPT=18
IntDB_Xmt(3cb3204)

11226 06/07/2010 13:11:34.240 SEV=9 AUTHDBG/71 RPT=26
xmit_cnt = 1

11227 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/182 RPT=18
IntDB_ServiceRequest(3cb3204)

11228 06/07/2010 13:11:34.340 SEV=8 AUTHDBG/49 RPT=18
IntDB_Match(3cb3204, 3cc6890)

11229 06/07/2010 13:11:34.340 SEV=8 AUTHDBG/63 RPT=23
AUTH_RcvReply(3cb3204, 0, 0)

11230 06/07/2010 13:11:34.340 SEV=8 AUTHDBG/50 RPT=36
IntDB_Decode(3cc6890, 967)

11231 06/07/2010 13:11:34.340 SEV=8 AUTHDBG/48 RPT=18
IntDB_Rcv(3cb3204)

11232 06/07/2010 13:11:34.340 SEV=8 AUTHDBG/66 RPT=24
AUTH_DeleteTimer(3cb3204, 0, 0)

11233 06/07/2010 13:11:34.340 SEV=9 AUTHDBG/74 RPT=24
Reply timer stopped: handle = 2AE0026, timestamp = 1494735

11234 06/07/2010 13:11:34.340 SEV=8 AUTHDBG/58 RPT=25
AUTH_Callback(3cb3204, 0, 0)

11235 06/07/2010 13:11:34.340 SEV=8 AUTHDBG/4 RPT=17
AUTH_GetAttrTable(112, b497f8)

11236 06/07/2010 13:11:34.340 SEV=8 AUTHDBG/4 RPT=18
AUTH_GetAttrTable(112, 235c0dc)

11237 06/07/2010 13:11:34.340 SEV=7 IKEDBG/14 RPT=15 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
Authentication configured for RADIUS

11238 06/07/2010 13:11:34.340 SEV=9 IKEDBG/19 RPT=106 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
IKEGetUserAttributes: primary DNS = 10.51.60.151

11240 06/07/2010 13:11:34.340 SEV=9 IKEDBG/19 RPT=107 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
IKEGetUserAttributes: secondary DNS = 10.51.60.152

11242 06/07/2010 13:11:34.340 SEV=9 IKEDBG/19 RPT=108 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
IKEGetUserAttributes: primary WINS = cleared

11244 06/07/2010 13:11:34.340 SEV=9 IKEDBG/19 RPT=109 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
IKEGetUserAttributes: secondary WINS = cleared

11246 06/07/2010 13:11:34.340 SEV=9 IKEDBG/19 RPT=110 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
IKEGetUserAttributes: split tunneling list = Marzotto-Legacy

11248 06/07/2010 13:11:34.340 SEV=9 IKEDBG/19 RPT=111 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
IKEGetUserAttributes: default domain = marzotto.it

11250 06/07/2010 13:11:34.340 SEV=9 IKEDBG/19 RPT=112 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
IKEGetUserAttributes: IP Compression = disabled

11252 06/07/2010 13:11:34.340 SEV=9 IKEDBG/19 RPT=113 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
IKEGetUserAttributes: Split Tunneling Policy = Split Network

11254 06/07/2010 13:11:34.340 SEV=9 IKEDBG/78 RPT=29 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
IKEGetUserAttributes: Browser Proxy Setting = 1

11256 06/07/2010 13:11:34.340 SEV=9 IKEDBG/78 RPT=30 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
IKEGetUserAttributes: Browser Proxy Bypass Local = 0

11258 06/07/2010 13:11:34.340 SEV=8 AUTHDBG/2 RPT=14
AUTH_Close(112)

11259 06/07/2010 13:11:34.340 SEV=4 IKE/52 RPT=34 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
User (TCS_test) authenticated.

11260 06/07/2010 13:11:34.350 SEV=9 IKEDBG/0 RPT=3049 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
constructing blank hash

11261 06/07/2010 13:11:34.350 SEV=9 IKEDBG/0 RPT=3050 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
constructing qm hash

11262 06/07/2010 13:11:34.350 SEV=8 IKEDBG/81 RPT=1501 109.116.144.33
SENDING Message (msgid=5e527d79) with payloads :
HDR + HASH (8) + ATTR (14)
total length : 60

11264 06/07/2010 13:11:34.350 SEV=8 AUTHDBG/60 RPT=24
AUTH_UnbindServer(3cb3204, 0, 0)

11265 06/07/2010 13:11:34.350 SEV=9 AUTHDBG/70 RPT=24
Auth Server 1e948d8 has been unbound from ACB 3cb3204, sessions = 0

11266 06/07/2010 13:11:34.350 SEV=8 AUTHDBG/10 RPT=14
AUTH_Int_FreeAuthCB(3cb3204)

11268 06/07/2010 13:11:34.470 SEV=8 IKEDBG/81 RPT=1502 109.116.144.33
RECEIVED Message (msgid=5e527d79) with payloads :
HDR + HASH (8) + ATTR (14) + NONE (0)
total length : 56

11270 06/07/2010 13:11:34.470 SEV=9 IKEDBG/1 RPT=73
process_attr(): Enter!

11271 06/07/2010 13:11:34.470 SEV=9 IKEDBG/1 RPT=74
Processing cfg ACK attributes

11272 06/07/2010 13:11:34.530 SEV=8 IKEDBG/81 RPT=1503 109.116.144.33
RECEIVED Message (msgid=bbcf4a02) with payloads :
HDR + HASH (8) + ATTR (14) + NONE (0)
total length : 182

11274 06/07/2010 13:11:34.530 SEV=9 IKEDBG/1 RPT=75
process_attr(): Enter!

11275 06/07/2010 13:11:34.530 SEV=9 IKEDBG/1 RPT=76
Processing cfg Request attributes

11276 06/07/2010 13:11:34.530 SEV=9 IKEDBG/53 RPT=76
MODE_CFG: Received request for IPV4 address!

11277 06/07/2010 13:11:34.530 SEV=9 IKEDBG/53 RPT=77
MODE_CFG: Received request for IPV4 net mask!

11278 06/07/2010 13:11:34.530 SEV=9 IKEDBG/53 RPT=78
MODE_CFG: Received request for DNS server address!

11279 06/07/2010 13:11:34.530 SEV=9 IKEDBG/53 RPT=79
MODE_CFG: Received request for WINS server address!

11280 06/07/2010 13:11:34.530 SEV=9 IKEDBG/53 RPT=80
MODE_CFG: Received request for Banner!

11281 06/07/2010 13:11:34.530 SEV=9 IKEDBG/53 RPT=81
MODE_CFG: Received request for Save PW setting!

11282 06/07/2010 13:11:34.530 SEV=9 IKEDBG/53 RPT=82
MODE_CFG: Received request for Default Domain Name!

11283 06/07/2010 13:11:34.530 SEV=9 IKEDBG/53 RPT=83
MODE_CFG: Received request for Split Tunnel List!

11284 06/07/2010 13:11:34.530 SEV=9 IKEDBG/53 RPT=84
MODE_CFG: Received request for Split DNS!

11285 06/07/2010 13:11:34.530 SEV=9 IKEDBG/53 RPT=85
MODE_CFG: Received request for PFS setting!

11286 06/07/2010 13:11:34.530 SEV=9 IKEDBG/53 RPT=86
MODE_CFG: Received request for backup ip-sec peer list!

11287 06/07/2010 13:11:34.530 SEV=9 IKEDBG/53 RPT=87
MODE_CFG: Received request for Application Version!

11288 06/07/2010 13:11:34.530 SEV=5 IKE/184 RPT=34 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
Client Type: WinNT
Client Application Version: 4.0.3 (A)

11290 06/07/2010 13:11:34.530 SEV=9 IKEDBG/53 RPT=88
MODE_CFG: Received request for FWTYPE!

11291 06/07/2010 13:11:34.530 SEV=9 IKEDBG/53 RPT=89
MODE_CFG: Received request for DHCP hostname for DDNS is: tsi01128pc!

11292 06/07/2010 13:11:34.530 SEV=9 IKEDBG/53 RPT=90
MODE_CFG: Received request for UDP Port!

11293 06/07/2010 13:11:37.360 SEV=9 IPSECDBG/17 RPT=1884
Received an IPSEC-over-UDP NAT keepalive packet

11294 06/07/2010 13:11:37.760 SEV=8 IKEDBG/81 RPT=1504 90.176.45.94
RECEIVED Message (msgid=b85f65f2) with payloads :
HDR + HASH (8) + NOTIFY (11) + NONE (0)
total length : 76
 
11298 06/07/2010 13:11:37.760 SEV=9 IPSECDBG/17 RPT=1885
Received an IPSEC-over-UDP NAT keepalive packet

11299 06/07/2010 13:11:38.220 SEV=8 IKEDBG/81 RPT=1505 88.38.161.22
RECEIVED Message (msgid=c19cc5e9) with payloads :
HDR + HASH (8) + NOTIFY (11) + NONE (0)
total length : 76

11301 06/07/2010 13:11:38.220 SEV=9 IKEDBG/0 RPT=3053 88.38.161.22
Group [FVas400] User [AG0007]
processing hash

11302 06/07/2010 13:11:38.220 SEV=9 IKEDBG/0 RPT=3054 88.38.161.22
Group [FVas400] User [AG0007]
Processing Notify payload

11303 06/07/2010 13:11:38.220 SEV=9 IPSECDBG/17 RPT=1886
Received an IPSEC-over-UDP NAT keepalive packet

11304 06/07/2010 13:11:43.030 SEV=8 IKEDBG/81 RPT=1506 212.253.250.156
RECEIVED Message (msgid=28585e4e) with payloads :
HDR + HASH (8) + NOTIFY (11) + NONE (0)
total length : 76

11306 06/07/2010 13:11:43.030 SEV=9 IKEDBG/0 RPT=3055 212.253.250.156
Group [FVas400] User [AG0073]
processing hash

11307 06/07/2010 13:11:43.030 SEV=9 IKEDBG/0 RPT=3056 212.253.250.156
Group [FVas400] User [AG0073]
Processing Notify payload

11308 06/07/2010 13:11:43.560 SEV=8 IKEDBG/81 RPT=1507 95.74.236.76
RECEIVED Message (msgid=99c1bbf5) with payloads :
HDR + HASH (8) + NOTIFY (11) + NONE (0)
total length : 76

11310 06/07/2010 13:11:43.560 SEV=9 IKEDBG/0 RPT=3057 95.74.236.76
Group [MARZOTTOuser] User [fiorenzo]
processing hash

11311 06/07/2010 13:11:43.560 SEV=9 IKEDBG/0 RPT=3058 95.74.236.76
Group [MARZOTTOuser] User [fiorenzo]
Processing Notify payload

11312 06/07/2010 13:11:43.630 SEV=9 IPSECDBG/17 RPT=1887
Received an IPSEC-over-UDP NAT keepalive packet

11313 06/07/2010 13:11:47.370 SEV=8 IKEDBG/81 RPT=1508 81.75.151.229
RECEIVED Message (msgid=bea0ee59) with payloads :
HDR + HASH (8) + NOTIFY (11) + NONE (0)
total length : 76

11315 06/07/2010 13:11:47.370 SEV=9 IKEDBG/0 RPT=3059 81.75.151.229
Group [FVas400] User [AG0024]
processing hash

11316 06/07/2010 13:11:47.370 SEV=9 IKEDBG/0 RPT=3060 81.75.151.229
Group [FVas400] User [AG0024]
Processing Notify payload

11317 06/07/2010 13:11:47.370 SEV=9 IPSECDBG/17 RPT=1888
Received an IPSEC-over-UDP NAT keepalive packet

11318 06/07/2010 13:11:47.760 SEV=9 IPSECDBG/17 RPT=1889
Received an IPSEC-over-UDP NAT keepalive packet

11319 06/07/2010 13:11:48.210 SEV=9 IPSECDBG/17 RPT=1890
Received an IPSEC-over-UDP NAT keepalive packet

11320 06/07/2010 13:11:53.030 SEV=9 IPSECDBG/17 RPT=1891
Received an IPSEC-over-UDP NAT keepalive packet

11321 06/07/2010 13:11:53.170 SEV=8 IKEDBG/81 RPT=1509 109.116.144.33
RECEIVED Message (msgid=f17aa8b4) with payloads :
HDR + HASH (8) + NOTIFY (11) + NONE (0)
total length : 76

11323 06/07/2010 13:11:53.170 SEV=9 IKEDBG/0 RPT=3061 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
processing hash

11324 06/07/2010 13:11:53.170 SEV=9 IKEDBG/0 RPT=3062 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
Processing Notify payload

11325 06/07/2010 13:11:53.170 SEV=9 IKEDBG/41 RPT=13 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
Received keep-alive of type Altiga keep-alive, not the negotiated type

11327 06/07/2010 13:11:53.440 SEV=9 IPSECDBG/17 RPT=1892
Received an IPSEC-over-UDP NAT keepalive packet

11328 06/07/2010 13:11:54.670 SEV=8 IKEDBG/81 RPT=1510 109.116.144.33
RECEIVED Message (msgid=e7683144) with payloads :
HDR + HASH (8) + NOTIFY (11) + NONE (0)
total length : 80

11330 06/07/2010 13:11:54.670 SEV=9 IKEDBG/0 RPT=3063 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
processing hash

11331 06/07/2010 13:11:54.670 SEV=9 IKEDBG/0 RPT=3064 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
Processing Notify payload

11332 06/07/2010 13:11:54.670 SEV=9 IKEDBG/41 RPT=14 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
Received keep-alive of type DPD R-U-THERE, not the negotiated type

11334 06/07/2010 13:11:54.700 SEV=8 IKEDBG/81 RPT=1511 109.116.144.33
RECEIVED Message (msgid=811a8e99) with payloads :
HDR + HASH (8) + DWR (129) + NONE (0)
total length : 80

11336 06/07/2010 13:11:54.700 SEV=9 IKEDBG/0 RPT=3065 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
processing hash

11337 06/07/2010 13:11:54.700 SEV=9 IKEDBG/0 RPT=3066
processing delete with reason payload

11338 06/07/2010 13:11:54.700 SEV=5 IKE/50 RPT=30 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
Connection terminated for peer TCS_test.
Reason: Peer Terminate, Administratively Disconnected.
Remote Proxy N/A, Local Proxy N/A

11342 06/07/2010 13:11:57.360 SEV=9 IPSECDBG/17 RPT=1893
Received an IPSEC-over-UDP NAT keepalive packet

11343 06/07/2010 13:11:57.760 SEV=8 IKEDBG/81 RPT=1512 90.176.45.94
RECEIVED Message (msgid=565a04e6) with payloads :
HDR + HASH (8) + NOTIFY (11) + NONE (0)
total length : 76

11345 06/07/2010 13:11:57.760 SEV=9 IKEDBG/0 RPT=3067 90.176.45.94
Group [MARZOTTOmaint] User [SHILL]
processing hash

11346 06/07/2010 13:11:57.760 SEV=9 IKEDBG/0 RPT=3068 90.176.45.94
Group [MARZOTTOmaint] User [SHILL]
Processing Notify payload

11347 06/07/2010 13:11:57.760 SEV=9 IPSECDBG/17 RPT=1894
Received an IPSEC-over-UDP NAT keepalive packet

11348 06/07/2010 13:11:58.220 SEV=8 IKEDBG/81 RPT=1513 88.38.161.22
RECEIVED Message (msgid=549edef0) with payloads :
HDR + HASH (8) + NOTIFY (11) + NONE (0)
total length : 76

11350 06/07/2010 13:11:58.220 SEV=9 IKEDBG/0 RPT=3069 88.38.161.22
Group [FVas400] User [AG0007]
processing hash

11351 06/07/2010 13:11:58.220 SEV=9 IKEDBG/0 RPT=3070 88.38.161.22
Group [FVas400] User [AG0007]
Processing Notify payload

11352 06/07/2010 13:11:58.220 SEV=9 IPSECDBG/17 RPT=1895
Received an IPSEC-over-UDP NAT keepalive packet

11353 06/07/2010 13:11:58.540 SEV=3 DHCPDBG/39 RPT=19
DHCP discover timeout: no response from polled servers (xid 1635577417)

11354 06/07/2010 13:11:58.540 SEV=9 IKEDBG/0 RPT=3071 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
IKE SA AM:f682f3fe terminating:
flags 0x0945c801, refcnt 0, tuncnt 0

11356 06/07/2010 13:12:03.030 SEV=8 IKEDBG/81 RPT=1514 212.253.250.156
RECEIVED Message (msgid=5b2cab90) with payloads :
HDR + HASH (8) + NOTIFY (11) + NONE (0)
total length : 76

11358 06/07/2010 13:12:03.030 SEV=9 IKEDBG/0 RPT=3072 212.253.250.156
Group [FVas400] User [AG0073]
processing hash

11359 06/07/2010 13:12:03.030 SEV=9 IKEDBG/0 RPT=3073 212.253.250.156
Group [FVas400] User [AG0073]
Processing Notify payload

11360 06/07/2010 13:12:03.030 SEV=9 IPSECDBG/17 RPT=1896
Received an IPSEC-over-UDP NAT keepalive packet

Labels:
0 Helpful
1 Reply 1

slmansfield
Level 4
Level 4

‎06-08-2010 09:15 AM

Did you make any changes to the RADIUS authentication server for this group?  The client is showing this message:

User does not provide any authentication data

This URL describes some troubleshooting steps, including some debugs that may help you isolate the problem.  I would not set these beyond level 5 intially.  HTH

http://www.cisco.com/application/pdf/paws/23840/vpn3k-conn.pdf

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents