It means that the userid, password, or both, used to authenticate the vpn client user are invalid. How is the gateway setup to authenticate vpn users? SecureID/RSA, win domain/active directory authentication, AAA (tacplus, radius)?
Are you using vpngroups or certs as the method to authenticate the vpn profile info? This is not the same as user authentication, user auth is also known as xauth.
