06-07-2010 04:43 AM
Dear all,
since last week we are experiencing a strange problem with Remote Connection to a particular Group of our Cisco VPN 3000 Concentrator.
We have various group defined and since last week all was working fine.
Starting from Friday the users that try to connect to one of this group encounter this message after putting in user and password:
Reaseon403: Unable to contact the security gateway.
I make some debug both client side and concentrator side and it seem that there is a problem on Phase 2. Below some output of my debug:
Could you help me in order to fine the reason of this error? The name of the group is Marzotto Legacy.
Client Side (Cisco VPN Client):
Cisco Systems VPN Client Version 4.0.3 (A)
Copyright (C) 1998-2003 Cisco Systems, Inc. All Rights Reserved.
Client Type(s): Windows, WinNT
Running on: 5.1.2600
1 10:34:27.207 06/07/10 Sev=Info/4 CM/0x63100002
Begin connection process
2 10:34:27.207 06/07/10 Sev=Info/4 CVPND/0xE3400001
Microsoft IPSec Policy Agent service stopped successfully
3 10:34:27.207 06/07/10 Sev=Info/4 CM/0x63100004
Establish secure connection using Ethernet
4 10:34:27.207 06/07/10 Sev=Info/4 CM/0x63100024
Attempt connection with server "217.172.6.87"
5 10:34:28.208 06/07/10 Sev=Info/6 IKE/0x6300003B
Attempting to establish a connection with 217.172.6.87.
6 10:34:28.228 06/07/10 Sev=Info/4 IKE/0x63000013
SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Nat-T), VID(Frag), VID(Unity)) to 217.172.6.87
7 10:34:28.228 06/07/10 Sev=Info/4 IPSEC/0x63700008
IPSec driver successfully started
8 10:34:28.228 06/07/10 Sev=Info/4 IPSEC/0x63700014
Deleted all keys
9 10:34:30.011 06/07/10 Sev=Info/5 IKE/0x6300002F
Received ISAKMP packet: peer = 217.172.6.87
10 10:34:30.011 06/07/10 Sev=Info/4 IKE/0x63000014
RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(Unity), VID(Xauth), VID(dpd), VID(Frag), VID(?), VID(?)) from 217.172.6.87
11 10:34:30.011 06/07/10 Sev=Info/5 IKE/0x63000001
Peer is a Cisco-Unity compliant peer
12 10:34:30.011 06/07/10 Sev=Info/5 IKE/0x63000001
Peer supports XAUTH
13 10:34:30.011 06/07/10 Sev=Info/5 IKE/0x63000001
Peer supports DPD
14 10:34:30.011 06/07/10 Sev=Info/5 IKE/0x63000001
Peer supports IKE fragmentation payloads
15 10:34:30.011 06/07/10 Sev=Info/5 IKE/0x63000001
Peer supports DWR Code and DWR Text
16 10:34:30.031 06/07/10 Sev=Info/6 IKE/0x63000001
IOS Vendor ID Contruction successful
17 10:34:30.031 06/07/10 Sev=Info/4 IKE/0x63000013
SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 217.172.6.87
18 10:34:30.031 06/07/10 Sev=Info/4 IKE/0x63000082
IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4
19 10:34:30.031 06/07/10 Sev=Info/4 CM/0x6310000E
Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system
20 10:34:30.171 06/07/10 Sev=Info/5 IKE/0x6300002F
Received ISAKMP packet: peer = 217.172.6.87
21 10:34:30.171 06/07/10 Sev=Info/4 IKE/0x63000014
RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 217.172.6.87
22 10:34:30.171 06/07/10 Sev=Info/4 CM/0x63100015
Launch xAuth application
23 10:34:31.252 06/07/10 Sev=Info/4 CM/0x63100017
xAuth application returned
24 10:34:31.252 06/07/10 Sev=Info/4 IKE/0x63000013
SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 217.172.6.87
25 10:34:31.252 06/07/10 Sev=Info/4 CM/0x63100018
User does not provide any authentication data
26 10:34:31.252 06/07/10 Sev=Info/4 IKE/0x63000001
IKE received signal to terminate VPN connection
27 10:34:31.252 06/07/10 Sev=Info/4 IKE/0x63000017
Marking IKE SA for deletion (I_Cookie=562736D372986702 R_Cookie=3A04D89B7415BEF8) reason = DEL_REASON_RESET_SADB
28 10:34:31.252 06/07/10 Sev=Info/4 IKE/0x63000013
SENDING >>> ISAKMP OAK INFO *(HASH, DWR) to 217.172.6.87
29 10:34:31.252 06/07/10 Sev=Info/4 IKE/0x6300004A
Discarding IKE SA negotiation (I_Cookie=562736D372986702 R_Cookie=3A04D89B7415BEF8) reason = DEL_REASON_RESET_SADB
30 10:34:31.252 06/07/10 Sev=Info/5 CM/0x63100025
Initializing CVPNDrv
31 10:34:31.293 06/07/10 Sev=Info/4 IKE/0x63000085
Microsoft IPSec Policy Agent service started successfully
32 10:34:31.984 06/07/10 Sev=Info/4 IPSEC/0x63700014
Deleted all keys
33 10:34:31.984 06/07/10 Sev=Info/4 IPSEC/0x63700014
Deleted all keys
34 10:34:31.984 06/07/10 Sev=Info/4 IPSEC/0x63700014
Deleted all keys
35 10:34:31.984 06/07/10 Sev=Info/4 IPSEC/0x6370000A
IPSec driver successfully stopped
Concentrator Side (name of group MARZOTTOlegacy):
11153 06/07/2010 13:11:33.140 SEV=8 IKEDBG/81 RPT=1499 109.116.144.33
RECEIVED Message (msgid=90f215a1) with payloads :
HDR + HASH (8) + NOTIFY (11) + NONE (0)
total length : 76
11155 06/07/2010 13:11:33.140 SEV=9 IKEDBG/0 RPT=3047 109.116.144.33
Group [MARZOTTOlegacy]
processing hash
11156 06/07/2010 13:11:33.140 SEV=9 IKEDBG/0 RPT=3048 109.116.144.33
Group [MARZOTTOlegacy]
Processing Notify payload
11157 06/07/2010 13:11:33.140 SEV=9 IKEDBG/41 RPT=12 109.116.144.33
Group [MARZOTTOlegacy]
Received keep-alive of type Altiga keep-alive, not the negotiated type
11159 06/07/2010 13:11:34.020 SEV=8 IKEDBG/81 RPT=1500 109.116.144.33
RECEIVED Message (msgid=f117b9a4) with payloads :
HDR + HASH (8) + ATTR (14) + NONE (0)
total length : 89
11161 06/07/2010 13:11:34.020 SEV=9 IKEDBG/1 RPT=71
process_attr(): Enter!
11162 06/07/2010 13:11:34.020 SEV=9 IKEDBG/1 RPT=72
Processing MODE_CFG Reply attributes.
11163 06/07/2010 13:11:34.020 SEV=8 AUTHDBG/1 RPT=14
AUTH_Open() returns 112
11164 06/07/2010 13:11:34.020 SEV=8 AUTHDBG/3 RPT=22
AUTH_PutAttrTable(112, b490a4)
11165 06/07/2010 13:11:34.020 SEV=8 AUTHDBG/5 RPT=5
AUTH_Authenticate(112, 3204e14, 764594)
11166 06/07/2010 13:11:34.020 SEV=8 AUTHDBG/59 RPT=23
AUTH_BindServer(3cb3204, 0, 0)
11167 06/07/2010 13:11:34.020 SEV=9 AUTHDBG/69 RPT=22
Auth Server 1e96238 has been bound to ACB 3cb3204, sessions = 1
11168 06/07/2010 13:11:34.020 SEV=8 AUTHDBG/65 RPT=22
AUTH_CreateTimer(3cb3204, 0, 0)
11169 06/07/2010 13:11:34.020 SEV=9 AUTHDBG/72 RPT=22
Reply timer created: handle = 2AC0026
11170 06/07/2010 13:11:34.020 SEV=8 AUTHDBG/179 RPT=22
AUTH_SyncToServer(3cb3204, 0, 0)
11171 06/07/2010 13:11:34.020 SEV=8 AUTHDBG/180 RPT=22
AUTH_SendLockReq(3cb3204, 0, 0)
11172 06/07/2010 13:11:34.020 SEV=8 AUTHDBG/61 RPT=22
AUTH_BuildMsg(3cb3204, 0, 0)
11173 06/07/2010 13:11:34.020 SEV=8 AUTHDBG/27 RPT=6
Radius_Build(3cb3204)
11174 06/07/2010 13:11:34.040 SEV=8 AUTHDBG/64 RPT=24
AUTH_StartTimer(3cb3204, 0, 0)
11175 06/07/2010 13:11:34.040 SEV=9 AUTHDBG/73 RPT=24
Reply timer started: handle = 2AC0026, timestamp = 1494705, timeout = 4000
11176 06/07/2010 13:11:34.040 SEV=8 AUTHDBG/62 RPT=24
AUTH_SndRequest(3cb3204, 0, 0)
11177 06/07/2010 13:11:34.040 SEV=8 AUTHDBG/31 RPT=12
Radius_Decode(35b19f0, 124)
11178 06/07/2010 13:11:34.040 SEV=8 AUTHDBG/28 RPT=8
Radius_Xmt(3cb3204)
11179 06/07/2010 13:11:34.040 SEV=9 AUTHDBG/71 RPT=24
xmit_cnt = 1
11180 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/30 RPT=5
Radius_Match(3cb3204, 3204eb8), id = 0x17, rcvd = 0x17
11181 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/63 RPT=21
AUTH_RcvReply(3cb3204, 0, 0)
11182 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/31 RPT=13
Radius_Decode(3204eb8, 64)
11183 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/29 RPT=5
Radius_Rcv(3cb3204)
11184 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/66 RPT=22
AUTH_DeleteTimer(3cb3204, 0, 0)
11185 06/07/2010 13:11:34.140 SEV=9 AUTHDBG/74 RPT=22
Reply timer stopped: handle = 2AC0026, timestamp = 1494715
11186 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/58 RPT=23
AUTH_Callback(3cb3204, 0, 0)
11187 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/3 RPT=23
AUTH_PutAttrTable(112, 1f3e448)
11188 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/60 RPT=22
AUTH_UnbindServer(3cb3204, 0, 0)
11189 06/07/2010 13:11:34.140 SEV=9 AUTHDBG/70 RPT=22
Auth Server 1e96238 has been unbound from ACB 3cb3204, sessions = 0
11190 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/59 RPT=24
AUTH_BindServer(3cb3204, 0, 0)
11191 06/07/2010 13:11:34.140 SEV=9 AUTHDBG/69 RPT=23
Auth Server 1e948d8 has been bound to ACB 3cb3204, sessions = 1
11192 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/65 RPT=23
AUTH_CreateTimer(3cb3204, 0, 0)
11193 06/07/2010 13:11:34.140 SEV=9 AUTHDBG/72 RPT=23
Reply timer created: handle = 2AD0026
11194 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/179 RPT=23
AUTH_SyncToServer(3cb3204, 0, 0)
11195 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/180 RPT=23
AUTH_SendLockReq(3cb3204, 0, 0)
11196 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/61 RPT=23
AUTH_BuildMsg(3cb3204, 0, 0)
11197 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/64 RPT=25
AUTH_StartTimer(3cb3204, 0, 0)
11198 06/07/2010 13:11:34.140 SEV=9 AUTHDBG/73 RPT=25
Reply timer started: handle = 2AD0026, timestamp = 1494715, timeout = 30000
11199 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/62 RPT=25
AUTH_SndRequest(3cb3204, 0, 0)
11200 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/50 RPT=33
IntDB_Decode(2f547e4, 64)
11201 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/47 RPT=17
IntDB_Xmt(3cb3204)
11202 06/07/2010 13:11:34.140 SEV=9 AUTHDBG/71 RPT=25
xmit_cnt = 1
11203 06/07/2010 13:11:34.140 SEV=8 AUTHDBG/182 RPT=17
IntDB_ServiceRequest(3cb3204)
11204 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/49 RPT=17
IntDB_Match(3cb3204, 3cbcf5c)
11205 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/63 RPT=22
AUTH_RcvReply(3cb3204, 0, 0)
11206 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/50 RPT=34
IntDB_Decode(3cbcf5c, 967)
11207 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/48 RPT=17
IntDB_Rcv(3cb3204)
11208 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/66 RPT=23
AUTH_DeleteTimer(3cb3204, 0, 0)
11209 06/07/2010 13:11:34.240 SEV=9 AUTHDBG/74 RPT=23
Reply timer stopped: handle = 2AD0026, timestamp = 1494725
11210 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/58 RPT=24
AUTH_Callback(3cb3204, 0, 0)
11211 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/3 RPT=24
AUTH_PutAttrTable(112, 1f3e448)
11212 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/60 RPT=23
AUTH_UnbindServer(3cb3204, 0, 0)
11213 06/07/2010 13:11:34.240 SEV=9 AUTHDBG/70 RPT=23
Auth Server 1e948d8 has been unbound from ACB 3cb3204, sessions = 0
11214 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/59 RPT=25
AUTH_BindServer(3cb3204, 0, 0)
11215 06/07/2010 13:11:34.240 SEV=9 AUTHDBG/69 RPT=24
Auth Server 1e948d8 has been bound to ACB 3cb3204, sessions = 1
11216 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/65 RPT=24
AUTH_CreateTimer(3cb3204, 0, 0)
11217 06/07/2010 13:11:34.240 SEV=9 AUTHDBG/72 RPT=24
Reply timer created: handle = 2AE0026
11218 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/179 RPT=24
AUTH_SyncToServer(3cb3204, 0, 0)
11219 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/180 RPT=24
AUTH_SendLockReq(3cb3204, 0, 0)
11220 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/61 RPT=24
AUTH_BuildMsg(3cb3204, 0, 0)
11221 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/64 RPT=26
AUTH_StartTimer(3cb3204, 0, 0)
11222 06/07/2010 13:11:34.240 SEV=9 AUTHDBG/73 RPT=26
Reply timer started: handle = 2AE0026, timestamp = 1494725, timeout = 30000
11223 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/62 RPT=26
AUTH_SndRequest(3cb3204, 0, 0)
11224 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/50 RPT=35
IntDB_Decode(2f545f0, 64)
11225 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/47 RPT=18
IntDB_Xmt(3cb3204)
11226 06/07/2010 13:11:34.240 SEV=9 AUTHDBG/71 RPT=26
xmit_cnt = 1
11227 06/07/2010 13:11:34.240 SEV=8 AUTHDBG/182 RPT=18
IntDB_ServiceRequest(3cb3204)
11228 06/07/2010 13:11:34.340 SEV=8 AUTHDBG/49 RPT=18
IntDB_Match(3cb3204, 3cc6890)
11229 06/07/2010 13:11:34.340 SEV=8 AUTHDBG/63 RPT=23
AUTH_RcvReply(3cb3204, 0, 0)
11230 06/07/2010 13:11:34.340 SEV=8 AUTHDBG/50 RPT=36
IntDB_Decode(3cc6890, 967)
11231 06/07/2010 13:11:34.340 SEV=8 AUTHDBG/48 RPT=18
IntDB_Rcv(3cb3204)
11232 06/07/2010 13:11:34.340 SEV=8 AUTHDBG/66 RPT=24
AUTH_DeleteTimer(3cb3204, 0, 0)
11233 06/07/2010 13:11:34.340 SEV=9 AUTHDBG/74 RPT=24
Reply timer stopped: handle = 2AE0026, timestamp = 1494735
11234 06/07/2010 13:11:34.340 SEV=8 AUTHDBG/58 RPT=25
AUTH_Callback(3cb3204, 0, 0)
11235 06/07/2010 13:11:34.340 SEV=8 AUTHDBG/4 RPT=17
AUTH_GetAttrTable(112, b497f8)
11236 06/07/2010 13:11:34.340 SEV=8 AUTHDBG/4 RPT=18
AUTH_GetAttrTable(112, 235c0dc)
11237 06/07/2010 13:11:34.340 SEV=7 IKEDBG/14 RPT=15 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
Authentication configured for RADIUS
11238 06/07/2010 13:11:34.340 SEV=9 IKEDBG/19 RPT=106 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
IKEGetUserAttributes: primary DNS = 10.51.60.151
11240 06/07/2010 13:11:34.340 SEV=9 IKEDBG/19 RPT=107 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
IKEGetUserAttributes: secondary DNS = 10.51.60.152
11242 06/07/2010 13:11:34.340 SEV=9 IKEDBG/19 RPT=108 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
IKEGetUserAttributes: primary WINS = cleared
11244 06/07/2010 13:11:34.340 SEV=9 IKEDBG/19 RPT=109 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
IKEGetUserAttributes: secondary WINS = cleared
11246 06/07/2010 13:11:34.340 SEV=9 IKEDBG/19 RPT=110 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
IKEGetUserAttributes: split tunneling list = Marzotto-Legacy
11248 06/07/2010 13:11:34.340 SEV=9 IKEDBG/19 RPT=111 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
IKEGetUserAttributes: default domain = marzotto.it
11250 06/07/2010 13:11:34.340 SEV=9 IKEDBG/19 RPT=112 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
IKEGetUserAttributes: IP Compression = disabled
11252 06/07/2010 13:11:34.340 SEV=9 IKEDBG/19 RPT=113 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
IKEGetUserAttributes: Split Tunneling Policy = Split Network
11254 06/07/2010 13:11:34.340 SEV=9 IKEDBG/78 RPT=29 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
IKEGetUserAttributes: Browser Proxy Setting = 1
11256 06/07/2010 13:11:34.340 SEV=9 IKEDBG/78 RPT=30 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
IKEGetUserAttributes: Browser Proxy Bypass Local = 0
11258 06/07/2010 13:11:34.340 SEV=8 AUTHDBG/2 RPT=14
AUTH_Close(112)
11259 06/07/2010 13:11:34.340 SEV=4 IKE/52 RPT=34 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
User (TCS_test) authenticated.
11260 06/07/2010 13:11:34.350 SEV=9 IKEDBG/0 RPT=3049 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
constructing blank hash
11261 06/07/2010 13:11:34.350 SEV=9 IKEDBG/0 RPT=3050 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
constructing qm hash
11262 06/07/2010 13:11:34.350 SEV=8 IKEDBG/81 RPT=1501 109.116.144.33
SENDING Message (msgid=5e527d79) with payloads :
HDR + HASH (8) + ATTR (14)
total length : 60
11264 06/07/2010 13:11:34.350 SEV=8 AUTHDBG/60 RPT=24
AUTH_UnbindServer(3cb3204, 0, 0)
11265 06/07/2010 13:11:34.350 SEV=9 AUTHDBG/70 RPT=24
Auth Server 1e948d8 has been unbound from ACB 3cb3204, sessions = 0
11266 06/07/2010 13:11:34.350 SEV=8 AUTHDBG/10 RPT=14
AUTH_Int_FreeAuthCB(3cb3204)
11268 06/07/2010 13:11:34.470 SEV=8 IKEDBG/81 RPT=1502 109.116.144.33
RECEIVED Message (msgid=5e527d79) with payloads :
HDR + HASH (8) + ATTR (14) + NONE (0)
total length : 56
11270 06/07/2010 13:11:34.470 SEV=9 IKEDBG/1 RPT=73
process_attr(): Enter!
11271 06/07/2010 13:11:34.470 SEV=9 IKEDBG/1 RPT=74
Processing cfg ACK attributes
11272 06/07/2010 13:11:34.530 SEV=8 IKEDBG/81 RPT=1503 109.116.144.33
RECEIVED Message (msgid=bbcf4a02) with payloads :
HDR + HASH (8) + ATTR (14) + NONE (0)
total length : 182
11274 06/07/2010 13:11:34.530 SEV=9 IKEDBG/1 RPT=75
process_attr(): Enter!
11275 06/07/2010 13:11:34.530 SEV=9 IKEDBG/1 RPT=76
Processing cfg Request attributes
11276 06/07/2010 13:11:34.530 SEV=9 IKEDBG/53 RPT=76
MODE_CFG: Received request for IPV4 address!
11277 06/07/2010 13:11:34.530 SEV=9 IKEDBG/53 RPT=77
MODE_CFG: Received request for IPV4 net mask!
11278 06/07/2010 13:11:34.530 SEV=9 IKEDBG/53 RPT=78
MODE_CFG: Received request for DNS server address!
11279 06/07/2010 13:11:34.530 SEV=9 IKEDBG/53 RPT=79
MODE_CFG: Received request for WINS server address!
11280 06/07/2010 13:11:34.530 SEV=9 IKEDBG/53 RPT=80
MODE_CFG: Received request for Banner!
11281 06/07/2010 13:11:34.530 SEV=9 IKEDBG/53 RPT=81
MODE_CFG: Received request for Save PW setting!
11282 06/07/2010 13:11:34.530 SEV=9 IKEDBG/53 RPT=82
MODE_CFG: Received request for Default Domain Name!
11283 06/07/2010 13:11:34.530 SEV=9 IKEDBG/53 RPT=83
MODE_CFG: Received request for Split Tunnel List!
11284 06/07/2010 13:11:34.530 SEV=9 IKEDBG/53 RPT=84
MODE_CFG: Received request for Split DNS!
11285 06/07/2010 13:11:34.530 SEV=9 IKEDBG/53 RPT=85
MODE_CFG: Received request for PFS setting!
11286 06/07/2010 13:11:34.530 SEV=9 IKEDBG/53 RPT=86
MODE_CFG: Received request for backup ip-sec peer list!
11287 06/07/2010 13:11:34.530 SEV=9 IKEDBG/53 RPT=87
MODE_CFG: Received request for Application Version!
11288 06/07/2010 13:11:34.530 SEV=5 IKE/184 RPT=34 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
Client Type: WinNT
Client Application Version: 4.0.3 (A)
11290 06/07/2010 13:11:34.530 SEV=9 IKEDBG/53 RPT=88
MODE_CFG: Received request for FWTYPE!
11291 06/07/2010 13:11:34.530 SEV=9 IKEDBG/53 RPT=89
MODE_CFG: Received request for DHCP hostname for DDNS is: tsi01128pc!
11292 06/07/2010 13:11:34.530 SEV=9 IKEDBG/53 RPT=90
MODE_CFG: Received request for UDP Port!
11293 06/07/2010 13:11:37.360 SEV=9 IPSECDBG/17 RPT=1884
Received an IPSEC-over-UDP NAT keepalive packet
11294 06/07/2010 13:11:37.760 SEV=8 IKEDBG/81 RPT=1504 90.176.45.94
RECEIVED Message (msgid=b85f65f2) with payloads :
HDR + HASH (8) + NOTIFY (11) + NONE (0)
total length : 76
11298 06/07/2010 13:11:37.760 SEV=9 IPSECDBG/17 RPT=1885
Received an IPSEC-over-UDP NAT keepalive packet
11299 06/07/2010 13:11:38.220 SEV=8 IKEDBG/81 RPT=1505 88.38.161.22
RECEIVED Message (msgid=c19cc5e9) with payloads :
HDR + HASH (8) + NOTIFY (11) + NONE (0)
total length : 76
11301 06/07/2010 13:11:38.220 SEV=9 IKEDBG/0 RPT=3053 88.38.161.22
Group [FVas400] User [AG0007]
processing hash
11302 06/07/2010 13:11:38.220 SEV=9 IKEDBG/0 RPT=3054 88.38.161.22
Group [FVas400] User [AG0007]
Processing Notify payload
11303 06/07/2010 13:11:38.220 SEV=9 IPSECDBG/17 RPT=1886
Received an IPSEC-over-UDP NAT keepalive packet
11304 06/07/2010 13:11:43.030 SEV=8 IKEDBG/81 RPT=1506 212.253.250.156
RECEIVED Message (msgid=28585e4e) with payloads :
HDR + HASH (8) + NOTIFY (11) + NONE (0)
total length : 76
11306 06/07/2010 13:11:43.030 SEV=9 IKEDBG/0 RPT=3055 212.253.250.156
Group [FVas400] User [AG0073]
processing hash
11307 06/07/2010 13:11:43.030 SEV=9 IKEDBG/0 RPT=3056 212.253.250.156
Group [FVas400] User [AG0073]
Processing Notify payload
11308 06/07/2010 13:11:43.560 SEV=8 IKEDBG/81 RPT=1507 95.74.236.76
RECEIVED Message (msgid=99c1bbf5) with payloads :
HDR + HASH (8) + NOTIFY (11) + NONE (0)
total length : 76
11310 06/07/2010 13:11:43.560 SEV=9 IKEDBG/0 RPT=3057 95.74.236.76
Group [MARZOTTOuser] User [fiorenzo]
processing hash
11311 06/07/2010 13:11:43.560 SEV=9 IKEDBG/0 RPT=3058 95.74.236.76
Group [MARZOTTOuser] User [fiorenzo]
Processing Notify payload
11312 06/07/2010 13:11:43.630 SEV=9 IPSECDBG/17 RPT=1887
Received an IPSEC-over-UDP NAT keepalive packet
11313 06/07/2010 13:11:47.370 SEV=8 IKEDBG/81 RPT=1508 81.75.151.229
RECEIVED Message (msgid=bea0ee59) with payloads :
HDR + HASH (8) + NOTIFY (11) + NONE (0)
total length : 76
11315 06/07/2010 13:11:47.370 SEV=9 IKEDBG/0 RPT=3059 81.75.151.229
Group [FVas400] User [AG0024]
processing hash
11316 06/07/2010 13:11:47.370 SEV=9 IKEDBG/0 RPT=3060 81.75.151.229
Group [FVas400] User [AG0024]
Processing Notify payload
11317 06/07/2010 13:11:47.370 SEV=9 IPSECDBG/17 RPT=1888
Received an IPSEC-over-UDP NAT keepalive packet
11318 06/07/2010 13:11:47.760 SEV=9 IPSECDBG/17 RPT=1889
Received an IPSEC-over-UDP NAT keepalive packet
11319 06/07/2010 13:11:48.210 SEV=9 IPSECDBG/17 RPT=1890
Received an IPSEC-over-UDP NAT keepalive packet
11320 06/07/2010 13:11:53.030 SEV=9 IPSECDBG/17 RPT=1891
Received an IPSEC-over-UDP NAT keepalive packet
11321 06/07/2010 13:11:53.170 SEV=8 IKEDBG/81 RPT=1509 109.116.144.33
RECEIVED Message (msgid=f17aa8b4) with payloads :
HDR + HASH (8) + NOTIFY (11) + NONE (0)
total length : 76
11323 06/07/2010 13:11:53.170 SEV=9 IKEDBG/0 RPT=3061 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
processing hash
11324 06/07/2010 13:11:53.170 SEV=9 IKEDBG/0 RPT=3062 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
Processing Notify payload
11325 06/07/2010 13:11:53.170 SEV=9 IKEDBG/41 RPT=13 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
Received keep-alive of type Altiga keep-alive, not the negotiated type
11327 06/07/2010 13:11:53.440 SEV=9 IPSECDBG/17 RPT=1892
Received an IPSEC-over-UDP NAT keepalive packet
11328 06/07/2010 13:11:54.670 SEV=8 IKEDBG/81 RPT=1510 109.116.144.33
RECEIVED Message (msgid=e7683144) with payloads :
HDR + HASH (8) + NOTIFY (11) + NONE (0)
total length : 80
11330 06/07/2010 13:11:54.670 SEV=9 IKEDBG/0 RPT=3063 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
processing hash
11331 06/07/2010 13:11:54.670 SEV=9 IKEDBG/0 RPT=3064 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
Processing Notify payload
11332 06/07/2010 13:11:54.670 SEV=9 IKEDBG/41 RPT=14 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
Received keep-alive of type DPD R-U-THERE, not the negotiated type
11334 06/07/2010 13:11:54.700 SEV=8 IKEDBG/81 RPT=1511 109.116.144.33
RECEIVED Message (msgid=811a8e99) with payloads :
HDR + HASH (8) + DWR (129) + NONE (0)
total length : 80
11336 06/07/2010 13:11:54.700 SEV=9 IKEDBG/0 RPT=3065 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
processing hash
11337 06/07/2010 13:11:54.700 SEV=9 IKEDBG/0 RPT=3066
processing delete with reason payload
11338 06/07/2010 13:11:54.700 SEV=5 IKE/50 RPT=30 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
Connection terminated for peer TCS_test.
Reason: Peer Terminate, Administratively Disconnected.
Remote Proxy N/A, Local Proxy N/A
11342 06/07/2010 13:11:57.360 SEV=9 IPSECDBG/17 RPT=1893
Received an IPSEC-over-UDP NAT keepalive packet
11343 06/07/2010 13:11:57.760 SEV=8 IKEDBG/81 RPT=1512 90.176.45.94
RECEIVED Message (msgid=565a04e6) with payloads :
HDR + HASH (8) + NOTIFY (11) + NONE (0)
total length : 76
11345 06/07/2010 13:11:57.760 SEV=9 IKEDBG/0 RPT=3067 90.176.45.94
Group [MARZOTTOmaint] User [SHILL]
processing hash
11346 06/07/2010 13:11:57.760 SEV=9 IKEDBG/0 RPT=3068 90.176.45.94
Group [MARZOTTOmaint] User [SHILL]
Processing Notify payload
11347 06/07/2010 13:11:57.760 SEV=9 IPSECDBG/17 RPT=1894
Received an IPSEC-over-UDP NAT keepalive packet
11348 06/07/2010 13:11:58.220 SEV=8 IKEDBG/81 RPT=1513 88.38.161.22
RECEIVED Message (msgid=549edef0) with payloads :
HDR + HASH (8) + NOTIFY (11) + NONE (0)
total length : 76
11350 06/07/2010 13:11:58.220 SEV=9 IKEDBG/0 RPT=3069 88.38.161.22
Group [FVas400] User [AG0007]
processing hash
11351 06/07/2010 13:11:58.220 SEV=9 IKEDBG/0 RPT=3070 88.38.161.22
Group [FVas400] User [AG0007]
Processing Notify payload
11352 06/07/2010 13:11:58.220 SEV=9 IPSECDBG/17 RPT=1895
Received an IPSEC-over-UDP NAT keepalive packet
11353 06/07/2010 13:11:58.540 SEV=3 DHCPDBG/39 RPT=19
DHCP discover timeout: no response from polled servers (xid 1635577417)
11354 06/07/2010 13:11:58.540 SEV=9 IKEDBG/0 RPT=3071 109.116.144.33
Group [MARZOTTOlegacy] User [TCS_test]
IKE SA AM:f682f3fe terminating:
flags 0x0945c801, refcnt 0, tuncnt 0
11356 06/07/2010 13:12:03.030 SEV=8 IKEDBG/81 RPT=1514 212.253.250.156
RECEIVED Message (msgid=5b2cab90) with payloads :
HDR + HASH (8) + NOTIFY (11) + NONE (0)
total length : 76
11358 06/07/2010 13:12:03.030 SEV=9 IKEDBG/0 RPT=3072 212.253.250.156
Group [FVas400] User [AG0073]
processing hash
11359 06/07/2010 13:12:03.030 SEV=9 IKEDBG/0 RPT=3073 212.253.250.156
Group [FVas400] User [AG0073]
Processing Notify payload
11360 06/07/2010 13:12:03.030 SEV=9 IPSECDBG/17 RPT=1896
Received an IPSEC-over-UDP NAT keepalive packet
06-08-2010 09:15 AM
Did you make any changes to the RADIUS authentication server for this group? The client is showing this message:
User does not provide any authentication data
This URL describes some troubleshooting steps, including some debugs that may help you isolate the problem. I would not set these beyond level 5 intially. HTH
http://www.cisco.com/application/pdf/paws/23840/vpn3k-conn.pdf
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide