Buy or Renew
Buy or Renew
Cisco + Splunk: It’s a new day for your data. Learn more.
 
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
1973
Views
0
Helpful
1
Replies

RV082 VPN logs looks like an attack

oliversl1
Level 1
Level 1

‎03-05-2010 07:30 AM

Hi,

I´m seeing this lines in the VPN Log of our RV082.

My questions are:

  • is if these are normal logs or if it could be an attack?
  • is there any exploit for RV082 that I should be aware of?
  • can I disable VPN completelly?

I'm not expeting any client connecting to the RV082.

My router: RV082 with firmware 2.0.0.19-tm

Here are the logs, the repeats every day, every few hours. Please note the same timestamp in some entries

Mar  5 08:25:21 2010    VPN Log   Received Vendor ID payload Type = [Dead Peer Detection]
Mar  5 08:25:21 2010    VPN  Log   [Tunnel Negotiation Info] <<< Responder  Received Main Mode 1st packet
Mar  5 08:25:21 2010    VPN  Log   (NATT)Initial Main Mode message received on MY_IP:500 but no connection has been authorized. Please check  your tunnel endpoint (gateway) setting
Mar  5 08:25:21 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Received Vendor ID payload Type = [Dead Peer Detection]
Mar  5 08:25:41 2010    VPN  Log   [Tunnel Negotiation Info] <<< Responder  Received Main Mode 1st packet
Mar  5 08:25:41 2010    VPN  Log   (NATT)Initial Main Mode message received on MY_IP :500 but no connection has been authorized. Please check  your tunnel endpoint (gateway) setting
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.

Many thanks

Oliver

http://tinymaillto.com/oliversl <-- my email after a captcha

Labels:
0 Helpful
1 Reply 1

oliversl1
Level 1
Level 1

‎03-06-2010 06:40 AM

The other side RV082 VPN Tunnel was not disabled, that was the cause :(

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents