05-23-2002 09:02 PM - edited 02-21-2020 11:46 AM
We are having trouble getting the VPN client running on Windows 2000 Server. The client configuration is a Dell machine running Windows 2000 Server connected to the internet via 4-port Linksys wireless router. This same machine used to run WinME with ver 2.5 of the VPN dialer with no problems.
When I upgraded to 2000 Server and the client to 3.5.2, I can't get the secure link negotiated. The authentication works fine, but the dialer disconnects after that.
Thanks in advance,
John
-------------------------------------------------------------
361 00:52:56.414 05/24/02 Sev=Info/4 IKE/0x63000014
RECEIVING <<< ISAKMP OAK TRANS *(HASH, ) from X.X.X.X
362 00:52:56.414 05/24/02 Sev=Warning/3 IKE/0xA3000058
Received malformed message or negotiation no longer active (message id: 0xA576728B)
363 00:53:04.405 05/24/02 Sev=Info/5 IKE/0x6300002F
Received ISAKMP packet: peer = X.X.X.X
364 00:53:04.405 05/24/02 Sev=Info/4 IKE/0x63000014
RECEIVING <<< ISAKMP OAK TRANS *(HASH, ) from X.X.X.X
365 00:53:04.405 05/24/02 Sev=Warning/3 IKE/0xA3000058
Received malformed message or negotiation no longer active (message id: 0xA576728B)
366 00:53:04.405 05/24/02 Sev=Info/5 IKE/0x6300002F
Received ISAKMP packet: peer = X.X.X.X
367 00:53:04.405 05/24/02 Sev=Info/4 IKE/0x63000014
RECEIVING <<< ISAKMP OAK TRANS *(HASH, ) from X.X.X.X
368 00:53:04.405 05/24/02 Sev=Warning/3 IKE/0xA3000058
Received malformed message or negotiation no longer active (message id: 0xA576728B)
369 00:53:45.033 05/24/02 Sev=Info/5 IKE/0x6300002F
Received ISAKMP packet: peer = X.X.X.X
370 00:53:45.033 05/24/02 Sev=Info/4 IKE/0x63000014
RECEIVING <<< ISAKMP OAK INFO *(HASH, DEL) from X.X.X.X
371 00:53:45.033 05/24/02 Sev=Info/5 IKE/0x6300003C
Received a DELETE payload for IKE SA with Cookies = 3F7B0F5D04151D707AFACC5A419E37D3
372 00:53:45.033 05/24/02 Sev=Info/5 IKE/0x63000017
Marking IKE SA for deletion (COOKIES = 3F7B0F5D04151D70 7AFACC5A419E37D3) reason = DEL_REASON_PEER_DELETION
373 00:53:45.043 05/24/02 Sev=Info/5 IKE/0x6300005D
Client sending a firewall request to concentrator
374 00:53:45.043 05/24/02 Sev=Info/5 IKE/0x6300005C
Firewall Policy: Product=Cisco Integrated Client, Capability= (Centralized Policy Push).
375 00:53:45.043 05/24/02 Sev=Info/4 IKE/0x63000013
SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to X.X.X.X
376 00:53:45.043 05/24/02 Sev=Info/5 IKE/0x6300002F
Received ISAKMP packet: peer = X.X.X.X
377 00:53:45.043 05/24/02 Sev=Info/4 IKE/0x63000014
RECEIVING <<< ISAKMP OAK INFO *(HASH, DEL) from X.X.X.X
378 00:53:45.043 05/24/02 Sev=Info/4 IKE/0x63000057
Received an ISAKMP message for a non-active SA
379 00:53:45.084 05/24/02 Sev=Info/5 IKE/0x6300002F
Received ISAKMP packet: peer = X.X.X.X
380 00:53:45.084 05/24/02 Sev=Info/4 IKE/0x63000014
RECEIVING <<< ISAKMP OAK INFO (NOTIFY:INVALID_COOKIE) from X.X.X.X
381 00:53:45.084 05/24/02 Sev=Info/4 IKE/0x63000057
Received an ISAKMP message for a non-active SA
382 00:53:45.084 05/24/02 Sev=Info/5 IKE/0x6300002F
Received ISAKMP packet: peer = X.X.X.X
383 00:53:45.084 05/24/02 Sev=Info/4 IKE/0x63000014
RECEIVING <<< ISAKMP OAK INFO (Retransmission) from X.X.X.X
384 00:53:45.714 05/24/02 Sev=Info/4 CM/0x6310000F
Phase 1 SA deleted before Mode Config is completed cause by "DEL_REASON_PEER_DELETION". 0 Phase 1 SA currently in the system
385 00:53:45.714 05/24/02 Sev=Info/5 CM/0x63100029
Initializing CVPNDrv
386 00:53:45.764 05/24/02 Sev=Warning/3 DIALER/0xE3300015
GI VPN start callback failed "CM_IKE_RECEIVED_DELETE_NOTIFICATION" (15h).
387 00:53:45.764 05/24/02 Sev=Info/4 IPSEC/0x63700012
Delete all keys associated with peer X.X.X.X
388 00:53:45.764 05/24/02 Sev=Info/4 IPSEC/0x63700014
Deleted all keys
05-26-2002 11:29 PM
What is the other end of the device ? PIX ? VPN 3000 Concentrator ? IOS ?
It would be helpful to see the debugs of isakmp and ipsec from other side too.
05-28-2002 06:54 AM
Figured out the problem over the weekend. The Windows 2000 machine was using the Orinoco USB Client as the NIC. I found a laptop with the same configuration using the Orinoco PCMCIA nic. It worked fine. When I installed the USB nic, I couldn't connect with the VPN client.
Purchased the Linksys USB nic, installed on the original machine, and I was able to use the VPN dialer.
There is a compatibility problem with the Orinoco USB nic or drivers.
John
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide