cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
355
Views
0
Helpful
2
Replies

Trouble Connecting VPN Client 3.5.2 running on Windows 2000 Server

jpc
Level 1
Level 1

We are having trouble getting the VPN client running on Windows 2000 Server. The client configuration is a Dell machine running Windows 2000 Server connected to the internet via 4-port Linksys wireless router. This same machine used to run WinME with ver 2.5 of the VPN dialer with no problems.

When I upgraded to 2000 Server and the client to 3.5.2, I can't get the secure link negotiated. The authentication works fine, but the dialer disconnects after that.

Thanks in advance,

John

-------------------------------------------------------------

361 00:52:56.414 05/24/02 Sev=Info/4 IKE/0x63000014

RECEIVING <<< ISAKMP OAK TRANS *(HASH, ) from X.X.X.X

362 00:52:56.414 05/24/02 Sev=Warning/3 IKE/0xA3000058

Received malformed message or negotiation no longer active (message id: 0xA576728B)

363 00:53:04.405 05/24/02 Sev=Info/5 IKE/0x6300002F

Received ISAKMP packet: peer = X.X.X.X

364 00:53:04.405 05/24/02 Sev=Info/4 IKE/0x63000014

RECEIVING <<< ISAKMP OAK TRANS *(HASH, ) from X.X.X.X

365 00:53:04.405 05/24/02 Sev=Warning/3 IKE/0xA3000058

Received malformed message or negotiation no longer active (message id: 0xA576728B)

366 00:53:04.405 05/24/02 Sev=Info/5 IKE/0x6300002F

Received ISAKMP packet: peer = X.X.X.X

367 00:53:04.405 05/24/02 Sev=Info/4 IKE/0x63000014

RECEIVING <<< ISAKMP OAK TRANS *(HASH, ) from X.X.X.X

368 00:53:04.405 05/24/02 Sev=Warning/3 IKE/0xA3000058

Received malformed message or negotiation no longer active (message id: 0xA576728B)

369 00:53:45.033 05/24/02 Sev=Info/5 IKE/0x6300002F

Received ISAKMP packet: peer = X.X.X.X

370 00:53:45.033 05/24/02 Sev=Info/4 IKE/0x63000014

RECEIVING <<< ISAKMP OAK INFO *(HASH, DEL) from X.X.X.X

371 00:53:45.033 05/24/02 Sev=Info/5 IKE/0x6300003C

Received a DELETE payload for IKE SA with Cookies = 3F7B0F5D04151D707AFACC5A419E37D3

372 00:53:45.033 05/24/02 Sev=Info/5 IKE/0x63000017

Marking IKE SA for deletion (COOKIES = 3F7B0F5D04151D70 7AFACC5A419E37D3) reason = DEL_REASON_PEER_DELETION

373 00:53:45.043 05/24/02 Sev=Info/5 IKE/0x6300005D

Client sending a firewall request to concentrator

374 00:53:45.043 05/24/02 Sev=Info/5 IKE/0x6300005C

Firewall Policy: Product=Cisco Integrated Client, Capability= (Centralized Policy Push).

375 00:53:45.043 05/24/02 Sev=Info/4 IKE/0x63000013

SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to X.X.X.X

376 00:53:45.043 05/24/02 Sev=Info/5 IKE/0x6300002F

Received ISAKMP packet: peer = X.X.X.X

377 00:53:45.043 05/24/02 Sev=Info/4 IKE/0x63000014

RECEIVING <<< ISAKMP OAK INFO *(HASH, DEL) from X.X.X.X

378 00:53:45.043 05/24/02 Sev=Info/4 IKE/0x63000057

Received an ISAKMP message for a non-active SA

379 00:53:45.084 05/24/02 Sev=Info/5 IKE/0x6300002F

Received ISAKMP packet: peer = X.X.X.X

380 00:53:45.084 05/24/02 Sev=Info/4 IKE/0x63000014

RECEIVING <<< ISAKMP OAK INFO (NOTIFY:INVALID_COOKIE) from X.X.X.X

381 00:53:45.084 05/24/02 Sev=Info/4 IKE/0x63000057

Received an ISAKMP message for a non-active SA

382 00:53:45.084 05/24/02 Sev=Info/5 IKE/0x6300002F

Received ISAKMP packet: peer = X.X.X.X

383 00:53:45.084 05/24/02 Sev=Info/4 IKE/0x63000014

RECEIVING <<< ISAKMP OAK INFO (Retransmission) from X.X.X.X

384 00:53:45.714 05/24/02 Sev=Info/4 CM/0x6310000F

Phase 1 SA deleted before Mode Config is completed cause by "DEL_REASON_PEER_DELETION". 0 Phase 1 SA currently in the system

385 00:53:45.714 05/24/02 Sev=Info/5 CM/0x63100029

Initializing CVPNDrv

386 00:53:45.764 05/24/02 Sev=Warning/3 DIALER/0xE3300015

GI VPN start callback failed "CM_IKE_RECEIVED_DELETE_NOTIFICATION" (15h).

387 00:53:45.764 05/24/02 Sev=Info/4 IPSEC/0x63700012

Delete all keys associated with peer X.X.X.X

388 00:53:45.764 05/24/02 Sev=Info/4 IPSEC/0x63700014

Deleted all keys

2 Replies 2

vijkrish
Cisco Employee
Cisco Employee

What is the other end of the device ? PIX ? VPN 3000 Concentrator ? IOS ?

It would be helpful to see the debugs of isakmp and ipsec from other side too.

Figured out the problem over the weekend. The Windows 2000 machine was using the Orinoco USB Client as the NIC. I found a laptop with the same configuration using the Orinoco PCMCIA nic. It worked fine. When I installed the USB nic, I couldn't connect with the VPN client.

Purchased the Linksys USB nic, installed on the original machine, and I was able to use the VPN dialer.

There is a compatibility problem with the Orinoco USB nic or drivers.

John

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: