Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
2616
Views
0
Helpful
2
Replies

VPN client terminated randomly

jason.taylor
Level 1
Level 1

‎08-25-2011 05:23 AM

I provide desktop support for a remote office with around 100 users who use Cisco VPN client V 5.0.07.0290 to connect to our HQ network. I have one client who is continuosly terminated at random intervals. Sometimes 2 min, 5 min, 10 min etc after connecting to VPN.

I have checked the log and this is what it reports:

Cisco Systems VPN Client Version 5.0.07.0290

Copyright (C) 1998-2010 Cisco Systems, Inc. All Rights Reserved.

Client Type(s): Windows, WinNT

Running on: 6.1.7600

Config file directory: C:\Program Files (x86)\Cisco Systems\VPN Client\

1      14:37:05.219  08/23/11  Sev=Warning/2    CVPND/0xE3400013

AddRoute failed to add a route with metric of 0: code 160

    Destination    192.168.151.255

    Netmask    255.255.255.255

    Gateway    10.1.224.1

    Interface    10.1.226.247

2      14:37:05.219  08/23/11  Sev=Warning/2    CM/0xA3100024

Unable to add route. Network: c0a897ff, Netmask: ffffffff, Interface: a01e2f7, Gateway: a01e001.

3      14:37:08.532  08/23/11  Sev=Warning/3    IPSEC/0xA370001C

Bad cTCP trailer, Rsvd 52521, Magic# cef3563ch, trailer len 26, MajorVer 28, MinorVer 188

4      14:37:08.532  08/23/11  Sev=Warning/3    IKE/0xA3000056

Driver says we received a packet with invalid SPI (3461225765), sending INVALID-SPI notify.

5      14:37:10.049  08/23/11  Sev=Warning/2    IPSEC/0xE3700010

BSafe ESP Decrypt HMAC mismatch.

6      14:37:10.049  08/23/11  Sev=Warning/2    IPSEC/0xE3700003

Function BSafeESPDecrypt() failed with an error code of 0xFFFFFFFF (IpSecDrvTransform.c:1776)

7      14:37:11.580  08/23/11  Sev=Warning/3    IPSEC/0xA370001C

Bad cTCP trailer, Rsvd 63236, Magic# f830958eh, trailer len 99, MajorVer 169, MinorVer 59

8      14:37:11.580  08/23/11  Sev=Warning/3    IPSEC/0xA370001C

Bad cTCP trailer, Rsvd 12532, Magic# a2072a4ch, trailer len 234, MajorVer 9, MinorVer 224

9      14:37:11.580  08/23/11  Sev=Warning/3    IKE/0xA3000056

Driver says we received a packet with invalid SPI (2776370522), sending INVALID-SPI notify.

10     14:37:12.081  08/23/11  Sev=Warning/3    IKE/0xA3000056

Driver says we received a packet with invalid SPI (642552261), sending INVALID-SPI notify.

11     14:37:14.622  08/23/11  Sev=Warning/2    IPSEC/0xE3700010

BSafe ESP Decrypt HMAC mismatch.

12     14:37:14.622  08/23/11  Sev=Warning/2    IPSEC/0xE3700003

Function BSafeESPDecrypt() failed with an error code of 0xFFFFFFFF (IpSecDrvTransform.c:1776)

13     14:37:15.635  08/23/11  Sev=Warning/3    IPSEC/0xA370001C

Bad cTCP trailer, Rsvd 62031, Magic# 24131c42h, trailer len 25, MajorVer 236, MinorVer 243

14     14:37:15.635  08/23/11  Sev=Warning/3    IKE/0xA3000056

Driver says we received a packet with invalid SPI (2521114300), sending INVALID-SPI notify.

15     14:37:19.689  08/23/11  Sev=Warning/2    IPSEC/0xE3700010

BSafe ESP Decrypt HMAC mismatch.

16     14:37:19.689  08/23/11  Sev=Warning/2    IPSEC/0xE3700003

Function BSafeESPDecrypt() failed with an error code of 0xFFFFFFFF (IpSecDrvTransform.c:1776)

17     14:37:24.258  08/23/11  Sev=Warning/2    IPSEC/0xE3700010

BSafe ESP Decrypt HMAC mismatch.

18     14:37:24.258  08/23/11  Sev=Warning/2    IPSEC/0xE3700003

Function BSafeESPDecrypt() failed with an error code of 0xFFFFFFFF (IpSecDrvTransform.c:1776)

19     14:37:26.285  08/23/11  Sev=Warning/3    IPSEC/0xA370001C

Bad cTCP trailer, Rsvd 52589, Magic# 8e877adeh, trailer len 232, MajorVer 93, MinorVer 225

20     14:37:26.285  08/23/11  Sev=Warning/3    IKE/0xA3000056

Driver says we received a packet with invalid SPI (3524304067), sending INVALID-SPI notify.

21     14:37:27.298  08/23/11  Sev=Warning/3    IPSEC/0xA370001C

Bad cTCP trailer, Rsvd 26862, Magic# 820268b5h, trailer len 101, MajorVer 210, MinorVer 164

22     14:37:27.298  08/23/11  Sev=Warning/3    IKE/0xA3000056

Driver says we received a packet with invalid SPI (2019905518), sending INVALID-SPI notify.

23     14:37:28.312  08/23/11  Sev=Warning/3    IPSEC/0xA370001C

Bad cTCP trailer, Rsvd 3241, Magic# 7a645788h, trailer len 154, MajorVer 135, MinorVer 155

24     14:37:28.312  08/23/11  Sev=Warning/3    IKE/0xA3000056

Driver says we received a packet with invalid SPI (3793512680), sending INVALID-SPI notify.

25     14:37:29.325  08/23/11  Sev=Warning/3    IPSEC/0xA370001C

Bad cTCP trailer, Rsvd 25519, Magic# cbf66bebh, trailer len 235, MajorVer 2, MinorVer 141

26     14:37:29.325  08/23/11  Sev=Warning/3    IKE/0xA3000056

Driver says we received a packet with invalid SPI (1155752120), sending INVALID-SPI notify.

27     14:37:30.339  08/23/11  Sev=Warning/2    IPSEC/0xE3700010

BSafe ESP Decrypt HMAC mismatch.

28     14:37:30.339  08/23/11  Sev=Warning/2    IPSEC/0xE3700003

Function BSafeESPDecrypt() failed with an error code of 0xFFFFFFFF (IpSecDrvTransform.c:1776)

29     14:37:31.851  08/23/11  Sev=Warning/2    IPSEC/0xE3700010

BSafe ESP Decrypt HMAC mismatch.

30     14:37:31.851  08/23/11  Sev=Warning/2    IPSEC/0xE3700003

Function BSafeESPDecrypt() failed with an error code of 0xFFFFFFFF (IpSecDrvTransform.c:1776)

31     14:37:33.379  08/23/11  Sev=Warning/3    IPSEC/0xA370001C

Bad cTCP trailer, Rsvd 9083, Magic# 310e5ddch, trailer len 190, MajorVer 145, MinorVer 248

32     14:37:33.379  08/23/11  Sev=Warning/3    IPSEC/0xA370001C

Bad cTCP trailer, Rsvd 35626, Magic# a4da0525h, trailer len 17, MajorVer 206, MinorVer 133

33     14:37:33.379  08/23/11  Sev=Warning/3    IKE/0xA3000056

Driver says we received a packet with invalid SPI (1393108950), sending INVALID-SPI notify.

34     14:37:34.392  08/23/11  Sev=Warning/3    IKE/0xA3000056

Driver says we received a packet with invalid SPI (83375625), sending INVALID-SPI notify.

35     14:37:36.419  08/23/11  Sev=Warning/2    IPSEC/0xE3700010

BSafe ESP Decrypt HMAC mismatch.

36     14:37:36.419  08/23/11  Sev=Warning/2    IPSEC/0xE3700003

Function BSafeESPDecrypt() failed with an error code of 0xFFFFFFFF (IpSecDrvTransform.c:1776)

37     14:39:18.303  08/23/11  Sev=Warning/3    IKE/0xE3000066

Could not find an IKE SA for 10.1.11.2.  KEY_REQ aborted.

38     14:39:18.303  08/23/11  Sev=Warning/2    IKE/0xE300009B

Failed to initiate P2 rekey: Error dectected (Initiate:176)

39     14:39:18.303  08/23/11  Sev=Warning/2    IKE/0xE300009B

Unable to initiate QM (IKE_MAIN:463)

40     14:39:18.413  08/23/11  Sev=Warning/2    CVPND/0xA3400015

Error with call to IpHlpApi.DLL: CheckUpVASettings: Found IPADDR entry addr=10.1.226.247, error 0

Any ideas what might be causing this?

The problem happens in and outside of the office and no one else has reported the issue. It doesn't seem to be isolated soley to ethernet as it does it from wireless connection as well.

Thanks in advance.

Labels:
0 Helpful
2 Replies 2

Mario Mastromattei
Level 1
Level 1

‎08-25-2011 06:47 AM

It appears that they are losing connectivity with the VPN server. Is this happening only from one location or can you test from a different location to isolate whether its the WAN connection that is being lost.

0 Helpful

jason.taylor
Level 1
Level 1
In response to Mario Mastromattei

‎08-25-2011 07:08 AM

Yes it is happening outside of the local network. This user travels alot with her work and could be connecting from various ISP's all over North America. She has reported it happens wherever she connects from. We are running 100+ systems configured exactly the same with no issues reported. Many of these users travel as well and use Cisco VPN client - Same version - to connect wherever they go.

Do you think it is an issue stemming from her computer?

0 Helpful
Customers Also Viewed These Support Documents