I have seen this message flowating around, yet I could not find an answer. I am attempting to create a VPN connection from my Windows 2003 Server to my PIX 501 (v6.2) box. However, it times out with a "Reason 422". The log is shown below:
Cisco Systems VPN Client Version 4.6.02.0011
Copyright (C) 1998-2004 Cisco Systems, Inc. All Rights Reserved.
Client Type(s): Windows, WinNT
Running on: 5.2.3790
817 17:23:58.796 08/23/05 Sev=Info/4 CM/0x63100002
Begin connection process
818 17:23:58.812 08/23/05 Sev=Info/4 CM/0x63100004
Establish secure connection using Ethernet
819 17:23:58.812 08/23/05 Sev=Info/4 CM/0x63100024
Attempt connection with server "XX.XXX.XXX.XXX"
820 17:23:59.812 08/23/05 Sev=Info/4 IPSEC/0x63700008
IPSec driver successfully started
821 17:23:59.812 08/23/05 Sev=Info/4 IPSEC/0x63700014
Deleted all keys
822 17:24:00.906 08/23/05 Sev=Info/4 CM/0x6310000E
Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system
823 17:24:00.906 08/23/05 Sev=Info/4 CM/0x6310000E
Established Phase 1 SA. 1 Crypto Active IKE SA, 1 User Authenticated IKE SA in the system
824 17:24:00.953 08/23/05 Sev=Info/4 CM/0x63100019
Mode Config data received
825 17:24:02.656 08/23/05 Sev=Info/4 CM/0x63100034
The Virtual Adapter was enabled:
IP=192.168.2.1/255.255.255.0
DNS=XX.XXX.XXX.XX,XX.XXX.XXX.XX
WINS=0.0.0.0,0.0.0.0
Domain=
Split DNS Names=
826 17:24:02.671 08/23/05 Sev=Warning/2 CVPND/0xE3400013
AddRoute failed to add a route: code 87
Destination 192.168.1.255
Netmask 255.255.255.255
Gateway 255.255.255.255
Interface 192.168.2.1
827 17:24:02.671 08/23/05 Sev=Warning/2 CVPND/0xE3400013
AddRoute failed to add a route: code 87
Destination 192.168.1.0
Netmask 255.255.255.0
Gateway 255.255.255.255
Interface 192.168.2.1
828 17:24:02.671 08/23/05 Sev=Warning/3 CM/0xA310002C
Failed to add Split Tunnel route.
829 17:24:02.671 08/23/05 Sev=Info/6 CM/0x63100036
The routing table was updated for the Virtual Adapter
830 17:24:02.687 08/23/05 Sev=Info/4 CM/0x6310001A
One secure connection established
831 17:24:02.703 08/23/05 Sev=Info/4 CM/0x63100038
Address watch added for 192.168.1.100. Current hostname: myhost, Current address(es): 192.168.1.100.
832 17:24:02.703 08/23/05 Sev=Info/4 CM/0x63100038
Address watch added for 192.168.2.1. Current hostname: myhost, Current address(es): 192.168.1.100.
833 17:24:02.734 08/23/05 Sev=Info/4 IPSEC/0x63700014
Deleted all keys
834 17:24:02.734 08/23/05 Sev=Info/4 IPSEC/0x63700010
Created a new key structure
835 17:24:02.734 08/23/05 Sev=Info/4 IPSEC/0x6370000F
Added key with SPI=0x2e65cd94 into key list
836 17:24:02.734 08/23/05 Sev=Info/4 IPSEC/0x63700010
Created a new key structure
837 17:24:02.734 08/23/05 Sev=Info/4 IPSEC/0x6370000F
Added key with SPI=0x801f8c4e into key list
838 17:24:02.734 08/23/05 Sev=Info/4 IPSEC/0x6370002E
Assigned VA private interface addr 192.168.2.1
839 17:24:17.750 08/23/05 Sev=Warning/3 CM/0xA310002D
Adapter address changed from 192.168.2.1. Current address(es): 192.168.1.100.
840 17:24:17.750 08/23/05 Sev=Info/4 CM/0x63100013
Phase 1 SA deleted cause by DEL_REASON_ADDRESS_CHANGE. 0 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system
841 17:24:17.750 08/23/05 Sev=Info/5 CM/0x63100025
Initializing CVPNDrv
842 17:24:17.750 08/23/05 Sev=Info/6 CM/0x63100031
Tunnel to headend device 68.118.255.243 disconnected: duration: 0 days 0:0:15
843 17:24:17.765 08/23/05 Sev=Info/6 CM/0x63100037
The routing table was returned to orginal state prior to Virtual Adapter
844 17:24:32.796 08/23/05 Sev=Warning/2 CM/0xA310002F
Failed to disable the virtual adapter.
845 17:24:32.796 08/23/05 Sev=Info/5 CM/0x63100025
Initializing CVPNDrv
...
Anyone have a resolution? Thanks!
