Re: VPN Client V.3.6.3 on Windows 98 Problem.

sgozio · ‎07-25-2003

Hi, I have one problem:

I install VPN Client 3.6.3 on Windows 98, I configure it but when I try to connect I receive this message:

"Contacting the gateway at xxx.yyy.www.zzz"

"Remote peer is not longer responding"

The log windows contains this two entry:

"Sev=Warning/2 IKE/0xE300007C

Exceeded 3IKE SA negotiation retransmits... peer is not responding"

"Sev=Warning/3 DIALER/0xE300008

GI VPNStart callback failed CM_PEER_NOT_RESPONDING (16h)"

NOTE: if I ping the xxx.yyy.www.zzz address (VPN terminatin address)it respond to ping.

The same installation and configuration on Windows XP work correctly.

Tanks for answers.

tvanginneken · ‎07-25-2003

Hi,

is it possible to enable isakmp and ipsec debugging on the pix?

To enable it, use these commands:

debug crypto isakmp

debug crypto ipsec

If the pix receives a VPN session from the client, some information will appear on the pix console.

Kind Regards,

Tom

sgozio · ‎07-25-2003

Tks for support...

Now I enable debug but how to view related informations?

My PC in now connect to PIX by Console cable and I have 1 Hyper terminal session open on pix but when I try to connect Windows 98 nothing appears;

wen I connect Windows XP (the connection go ready) I obtain informations on console.

tvanginneken · ‎07-25-2003

If I understand it correctly, nothing appears on the console of the pix when you use the win98 client. This means that the client doesn't send anything to the pix and so it is a client problem.

Maybe you could try the newer version (v4) of the VPN Client and see what happens. Or maybe try to install the software on another win98 pc to make sure that the problem is not related to that specific pc.

Kind Regards,

Tom

sgozio · ‎07-25-2003

Yes, you understand correctly, if I use XP Client I obtain many information on console and connection works fine. When I use Win 98 nothing appears on console and connection don't works.

The ping to VPN Terminaton address works fine but the lan trafic appears don't come trough remote access connection.

I have this problem on four Win 98 PC.

TKS.

tvanginneken · ‎07-25-2003

I would suggest to download the latest version of the VPN client (version 4). It seems to be an incompatibility between win98 (or an application running on it) and the current version of your VPN client software.

Regards,

Tom

sgozio · ‎07-25-2003

OK I try newest version on Monday.

Tks for interesting and golden tips.

Bye.

sgozio · ‎07-25-2003

I Find ver.4.02 and install it.

The results is the same.

This is the detailed LOG.

Cisco Systems VPN Client Version 4.0.2 (Rel)

Client Type(s): Windows, Win9x

Running on: 4.10.67766446

1 20:56:59.010 07/25/03 Sev=Info/4 CM/0x63100002

Begin connection process

2 20:56:59.070 07/25/03 Sev=Info/4 CM/0x63100004

Establish secure connection using Ethernet

3 20:56:59.070 07/25/03 Sev=Info/4 CM/0x63100024

Attempt connection with server "81.116.177.114"

4 20:56:59.070 07/25/03 Sev=Info/6 IKE/0x6300003B

Attempting to establish a connection with 81.116.177.114.

5 20:56:59.120 07/25/03 Sev=Info/4 IKE/0x63000013

SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Nat-T), VID(Frag), VID(Unity)) to 81.116.177.114

6 20:56:59.120 07/25/03 Sev=Info/4 IPSEC/0x63700008

IPSec driver successfully started

7 20:56:59.120 07/25/03 Sev=Info/4 IPSEC/0x63700014

Deleted all keys

8 20:57:04.560 07/25/03 Sev=Info/4 IKE/0x63000021

Retransmitting last packet!

9 20:57:04.560 07/25/03 Sev=Info/4 IKE/0x63000013

SENDING >>> ISAKMP OAK AG (Retransmission) to 81.116.177.114

10 20:57:10.000 07/25/03 Sev=Info/4 IKE/0x63000021

Retransmitting last packet!

11 20:57:10.000 07/25/03 Sev=Info/4 IKE/0x63000013

SENDING >>> ISAKMP OAK AG (Retransmission) to 81.116.177.114

12 20:57:15.000 07/25/03 Sev=Info/4 IKE/0x63000021

Retransmitting last packet!

13 20:57:15.000 07/25/03 Sev=Info/4 IKE/0x63000013

SENDING >>> ISAKMP OAK AG (Retransmission) to 81.116.177.114

14 20:57:20.540 07/25/03 Sev=Info/4 IKE/0x63000017

Marking IKE SA for deletion (I_Cookie=2E44288F30607443 R_Cookie=0000000000000000) reason = DEL_REASON_PEER_NOT_RESPONDING

15 20:57:21.090 07/25/03 Sev=Info/4 IKE/0x6300004A

Discarding IKE SA negotiation (I_Cookie=2E44288F30607443 R_Cookie=0000000000000000) reason = DEL_REASON_PEER_NOT_RESPONDING

16 20:57:21.090 07/25/03 Sev=Info/4 CM/0x63100014

Unable to establish Phase 1 SA with server "81.116.177.114" because of "DEL_REASON_PEER_NOT_RESPONDING"

17 20:57:21.090 07/25/03 Sev=Info/5 CM/0x63100025

Initializing CVPNDrv

18 20:57:21.090 07/25/03 Sev=Info/4 IKE/0x63000001

IKE received signal to terminate VPN connection

19 20:57:22.190 07/25/03 Sev=Info/4 IPSEC/0x63700014

Deleted all keys

20 20:57:22.190 07/25/03 Sev=Info/4 IPSEC/0x63700014

Deleted all keys

21 20:57:22.190 07/25/03 Sev=Info/4 IPSEC/0x63700014

Deleted all keys

22 20:57:22.190 07/25/03 Sev=Info/4 IPSEC/0x6370000A

IPSec driver successfully stopped

Nothing appears come on RAS.

tvanginneken · ‎07-28-2003

Are you able to ping the pix form the vpn client?

Did you turn on debug crypto ipsec and debug crypto isakmp on the pix to see if anything happens?

Is isakmp enabled on the outside of the fix? (isakmp enable outside).

If your answer to all these questions is yes, try to install a sniffer to see if there is actually traffic originating from the win98 client. Ethereal is a free sniffer you can use.

Regards,

Tom