Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

VPN client 4.03 ...can't form VPN network

I have install the new VPN client (V4.03) with our XP notebook

When I try to form a VPN nework with my PIX(515), it fails.

When i use VPN client v3.52b to form VPN network, it's ok!

Do I need to do some config in our PIX for new version VPN client??

VPN client Log:

Cisco Systems VPN Client Version 4.0.3 (D)

Copyright (C) 1998-2003 Cisco Systems, Inc. All Rights Reserved.

Client Type(s): Windows, WinNT

Running on: 5.1.2600

1 12:03:40.464 02/17/04 Sev=Info/4 CM/0x63100002

Begin connection process

2 12:03:40.605 02/17/04 Sev=Info/4 CM/0x63100004

Establish secure connection using Ethernet

3 12:03:40.605 02/17/04 Sev=Info/4 CM/0x63100024

Attempt connection with server "192.168.1.100"

4 12:03:40.615 02/17/04 Sev=Info/6 IKE/0x6300003B

Attempting to establish a connection with 192.168.1.100.

5 12:03:40.715 02/17/04 Sev=Info/4 IKE/0x63000013

SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Nat-T), VID(Frag), VID(Unity)) to 192.168.1.100

6 12:03:40.865 02/17/04 Sev=Info/4 IPSEC/0x63700008

IPSec driver successfully started

7 12:03:40.865 02/17/04 Sev=Info/4 IPSEC/0x63700014

Deleted all keys

8 12:03:41.145 02/17/04 Sev=Info/5 IKE/0x6300002F

Received ISAKMP packet: peer = 192.168.1.100

9 12:03:41.145 02/17/04 Sev=Warning/2 IKE/0xE3000099

Invalid SPI size (PayloadNotify:116)

10 12:03:41.145 02/17/04 Sev=Info/4 IKE/0xE30000A4

Invalid payload: Stated payload length, 568, is not sufficient for Notification:(PayloadList:148)

11 12:03:41.145 02/17/04 Sev=Warning/3 IKE/0xA3000058

Received malformed message or negotiation no longer active (message id: 0x00000000)

12 12:03:45.862 02/17/04 Sev=Info/4 IKE/0x63000021

Retransmitting last packet!

13 12:03:45.862 02/17/04 Sev=Info/4 IKE/0x63000013

SENDING >>> ISAKMP OAK AG (Retransmission) to 192.168.1.100

14 12:03:50.869 02/17/04 Sev=Info/4 IKE/0x63000021

Retransmitting last packet!

15 12:03:50.869 02/17/04 Sev=Info/4 IKE/0x63000013

SENDING >>> ISAKMP OAK AG (Retransmission) to 192.168.1.100

16 12:03:55.877 02/17/04 Sev=Info/4 IKE/0x63000021

Retransmitting last packet!

17 12:03:55.877 02/17/04 Sev=Info/4 IKE/0x63000013

SENDING >>> ISAKMP OAK AG (Retransmission) to 202.130.186.114

18 12:04:00.904 02/17/04 Sev=Info/4 IKE/0x63000017

Marking IKE SA for deletion (I_Cookie=B79305BCE246BC38 R_Cookie=ABB0BF3974A2CF3C) reason = DEL_REASON_PEER_NOT_RESPONDING

19 12:04:01.414 02/17/04 Sev=Info/4 IKE/0x6300004A

Discarding IKE SA negotiation (I_Cookie=B79305BCE246BC38 R_Cookie=ABB0BF3974A2CF3C) reason = DEL_REASON_PEER_NOT_RESPONDING

20 12:04:01.414 02/17/04 Sev=Info/4 CM/0x63100014

Unable to establish Phase 1 SA with server "202.130.186.114" because of "DEL_REASON_PEER_NOT_RESPONDING"

21 12:04:01.414 02/17/04 Sev=Info/5 CM/0x63100025

Initializing CVPNDrv

22 12:04:01.435 02/17/04 Sev=Info/4 IKE/0x63000001

IKE received signal to terminate VPN connection

23 12:04:02.476 02/17/04 Sev=Info/4 IPSEC/0x63700014

Deleted all keys

24 12:04:02.476 02/17/04 Sev=Info/4 IPSEC/0x63700014

Deleted all keys

25 12:04:02.476 02/17/04 Sev=Info/4 IPSEC/0x63700014

Deleted all keys

26 12:04:02.476 02/17/04 Sev=Info/4 IPSEC/0x6370000A

IPSec driver successfully stopped

2 REPLIES
Silver

Re: VPN client 4.03 ...can't form VPN network

This could happen when the Pix is not responding and so the VPN Client tears down the tunnel.

You could try changing the keepalive and retry interval on the PIX.

New Member

Re: VPN client 4.03 ...can't form VPN network

Thx reply

But I check that the PIX is alive when I form VPN netowrk. (Ping test)

& I use W2k with Cisco VPN 3.52, it form VPN connection successfully

105
Views
0
Helpful
2
Replies
CreatePlease to create content