VPN and Internet Connection Sharing

[jdeathwish]

We have a remote user trying to connect to a Cisco 3000. They are trying to share a dialup connection using a crossover cable. The computer acting as a gateway is the one that needs to access the 3000. It is running XP Pro with VPN version 3.5.2.

Here are the logs from two connection attempts:

1 14:11:29.378 01/16/03 Sev=Warning/3 IKE/0xE3000070

Cannot match Policy Entry:

local host=IP ADDR=0.0.0.0, lcl_port = 0

remote host=IP ADDR=0.0.0.0, dst_port = 0

2 14:11:29.378 01/16/03 Sev=Warning/3 IKE/0xA3000001

Failed to initiate negotiation.

3 14:11:29.378 01/16/03 Sev=Warning/3 IKE/0xE3000002

Function initialize_qm failed with an error code of 0x00000000(INITIATE:811)

4 14:27:18.425 01/16/03 Sev=Warning/3 IKE/0xE3000070

Cannot match Policy Entry:

local host=IP ADDR=0.0.0.0, lcl_port = 0

remote host=IP ADDR=0.0.0.0, dst_port = 0

5 14:27:18.425 01/16/03 Sev=Warning/3 IKE/0xA3000001

Failed to initiate negotiation.

6 14:27:18.425 01/16/03 Sev=Warning/3 IKE/0xE3000002

Function initialize_qm failed with an error code of 0x00000000(INITIATE:811)

7 14:27:26.410 01/16/03 Sev=Warning/3 IKE/0xA3000058

Received malformed message or negotiation no longer active (message id: 0x11F29E51)

8 14:27:34.410 01/16/03 Sev=Warning/3 IKE/0xA3000058

Received malformed message or negotiation no longer active (message id: 0x11F29E51)

9 14:27:44.378 01/16/03 Sev=Warning/3 DIALER/0xE3300015

GI VPN start callback failed "CM_IKE_RECEIVED_DELETE_NOTIFICATION" (15h).

Thanks

Johnny Deathwish

[gfullage]

The "Cannot match policy entry" log message is bug CSCdx88008, see the Bug Toolkit for details on how to resolve it (http://www.cisco.com/cgi-bin/Support/Bugtool/launch_bugtool.pl)

Having said that, ICS has never been supported with the VPN client, in fact later versions will detect that it's running and tell you to turn it off before continuing. I'd be surprised if you got it running properly. It does work from a device behind an ICS machine, but not from the ICS machine itself.

[jdeathwish]

The only thing I can find from searching Cisco and Google about CSCdx88008 says if your running XP see bug CSCdv23894. Unfortunately I am not priveledged enough to get to the link you have pasted there. I'm sure it would be what I need. If you could give me some info on bug CSCdv23894 it would be much appreciated.

Johnny Deathwish

[jdeathwish]

Come on. Somebody in here has to have some info on CSCdv23894. Any help would be greatly appreciated.