Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

VPN Client, RADIUS, fails several times then success

Exactly as it reads.

This is the "debug crypto isakmp 15"

Mar 28 20:58:54 [IKEv1]: IP = 80.176.83.55, IKE_DECODE RECEIVED Message (msgid=7935b7d0) with payloads : HDR + HASH (8) + ATTR (14) + NONE (0) total length : 60

Mar 28 20:58:54 [IKEv1 DEBUG]: Group = sicl, Username = ashleyw, IP = 80.176.83.55, process_attr(): Enter!

Mar 28 20:58:54 [IKEv1 DEBUG]: Group = sicl, Username = ashleyw, IP = 80.176.83.55, Processing cfg ACK attributes

Mar 28 20:58:54 [IKEv1]: IP = 80.176.83.55, IKE_DECODE RECEIVED Message (msgid=dc4fa5c2) with payloads : HDR + HASH (8) + ATTR (14) + NONE (0) total length : 194

Mar 28 20:58:54 [IKEv1 DEBUG]: Group = sicl, Username = ashleyw, IP = 80.176.83.55, IKE TM V6 FSM error history (struct &0x47eafd8) <state>, <event>: TM_DONE, EV_ERROR-->TM_WAIT_REQ, EV_HASH_FAIL-->TM_WAIT_REQ, NullEvent-->TM_WAIT_REQ, EV_COMP_HASH-->TM_WAIT_REQ, EV_VALIDATE_MSG-->TM_WAIT_REQ, EV_DECRYPT_OK-->TM_WAIT_REQ, NullEvent-->TM_WAIT_REQ, EV_DECRYPT_MSG

Mar 28 20:58:54 [IKEv1 DEBUG]: Group = sicl, Username = ashleyw, IP = 80.176.83.55, IKE AM Responder FSM error history (struct &0x4038a30) <state>, <event>: AM_DONE, EV_ERROR-->AM_TM_INIT_MODECFG_V6H, EV_TM_FAIL-->AM_TM_INIT_MODECFG_V6H, NullEvent-->AM_TM_INIT_MODECFG, EV_WAIT-->AM_TM_INIT_XAUTH_V6H, EV_CHECK_QM_MSG-->AM_TM_INIT_XAUTH_V6H, EV_TM_XAUTH_OK-->AM_TM_INIT_XAUTH_V6H, NullEvent-->AM_TM_INIT_XAUTH_V6H, EV_ACTIVATE_NEW_SA

Mar 28 20:58:54 [IKEv1 DEBUG]: Group = sicl, Username = ashleyw, IP = 80.176.83.55, IKE SA AM:ce508e9e terminating: flags 0x0105c001, refcnt 0, tuncnt 0

Mar 28 20:58:54 [IKEv1 DEBUG]: Group = sicl, Username = ashleyw, IP = 80.176.83.55, sending delete/delete with reason message

Mar 28 20:58:54 [IKEv1 DEBUG]: Group = sicl, Username = ashleyw, IP = 80.176.83.55, constructing blank hash payload

Mar 28 20:58:54 [IKEv1 DEBUG]: Group = sicl, Username = ashleyw, IP = 80.176.83.55, constructing IKE delete payload

Mar 28 20:58:54 [IKEv1 DEBUG]: Group = sicl, Username = ashleyw, IP = 80.176.83.55, constructing qm hash payload

Mar 28 20:58:54 [IKEv1]: IP = 80.176.83.55, IKE_DECODE SENDING Message (msgid=25e9caf5) with payloads : HDR + HASH (8) + DELETE (12) + NONE (0) total length : 80

Mar 28 20:58:54 [IKEv1]: Group = sicl, Username = ashleyw, IP = 80.176.83.55, Removing peer from peer table failed, no match!

Mar 28 20:58:54 [IKEv1]: Group = sicl, Username = ashleyw, IP = 80.176.83.55, Error: Unable to remove PeerTblEntry

The strange this is that the event log shows two log in attempts, the first fails the second sometimes succeeds.

Any ideas?

871
Views
0
Helpful
0
Replies
CreatePlease to create content