cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1864
Views
0
Helpful
1
Replies

RV082 VPN logs looks like an attack

oliversl1
Beginner
Beginner

Hi,

I´m seeing this lines in the VPN Log of our RV082.

My questions are:

  • is if these are normal logs or if it could be an attack?
  • is there any exploit for RV082 that I should be aware of?
  • can I disable VPN completelly?

I'm not expeting any client connecting to the RV082.

My router: RV082 with firmware 2.0.0.19-tm

Here are the logs, the repeats every day, every few hours. Please note the same timestamp in some entries

Mar  5 08:25:21 2010    VPN Log   Received Vendor ID payload Type = [Dead Peer Detection]
Mar  5 08:25:21 2010    VPN  Log   [Tunnel Negotiation Info] <<< Responder  Received Main Mode 1st packet
Mar  5 08:25:21 2010    VPN  Log   (NATT)Initial Main Mode message received on MY_IP:500 but no connection has been authorized. Please check  your tunnel endpoint (gateway) setting
Mar  5 08:25:21 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Received Vendor ID payload Type = [Dead Peer Detection]
Mar  5 08:25:41 2010    VPN  Log   [Tunnel Negotiation Info] <<< Responder  Received Main Mode 1st packet
Mar  5 08:25:41 2010    VPN  Log   (NATT)Initial Main Mode message received on MY_IP :500 but no connection has been authorized. Please check  your tunnel endpoint (gateway) setting
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.

Many thanks

Oliver

http://tinymaillto.com/oliversl <-- my email after a captcha

1 Reply 1

oliversl1
Beginner
Beginner

The other side RV082 VPN Tunnel was not disabled, that was the cause :(

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers