03-06-2007 03:17 PM - edited 02-21-2020 02:54 PM
Hi, new to cisco stuff. First thing i had working on the new PIX 506e was the VPN. Set up the IP Pool, group, and username. Installed the client, worked great. Now that ive been playing around with figuring out rules, acl's, translations, etc. it seems the VPN client is inconsistent now. It sometimes will work, but usually it will hang at "securing communications channel". Cancelling the connection does not work, it just creates the second error shown in the log (see below). I then have to end the task via taskmanager, open the VPN client again, (icon pops up in the tray as locked, but does not see the remote network in any way) disconnect, and then exit to get my machine to talk to its local network again.
Here is the log:
Cisco Systems VPN Client Version 4.6.00.0045
Copyright (C) 1998-2004 Cisco Systems, Inc. All Rights Reserved.
Client Type(s): Windows, WinNT
Running on: 5.1.2600 Service Pack 2
Config file directory: C:\Program Files\Cisco Systems\VPN Client
1 15:44:39.600 03/06/07 Sev=Warning/2 CVPND/0xA3400011
Error -14 sending packet. Dst Addr: 0xFFFFFFFF, Src Addr: 0xA9FE0202 (DRVIFACE:1199).
2 15:46:06.876 03/06/07 Sev=Warning/3 GUI/0xE3B00002
GI GI_EnumPPP failed with error (FFFFFFFEh).
Thank you for any help you can provide. This will be the primary means for the few remote users we have to access the network from home, vegas, etc.
Maury
Edit:
heres another one
Cisco Systems VPN Client Version 4.6.00.0045
Copyright (C) 1998-2004 Cisco Systems, Inc. All Rights Reserved.
Client Type(s): Windows, WinNT
Running on: 5.1.2600 Service Pack 2
Config file directory: C:\Program Files\Cisco Systems\VPN Client
1 15:47:31.117 03/06/07 Sev=Warning/2 CVPND/0xA3400015
Error with call to IpHlpApi.DLL: DeleteIpForwardEntry, error 87
03-07-2007 09:03 AM
03-07-2007 09:34 AM
Could you capture the client logs and debugs from the PIX?
debug cry isak
debug cry ipsec
Regards,
Kamal
03-07-2007 10:10 AM
03-07-2007 11:37 AM
Hi Maury,
For testing, could you please consider changing the software version of the VPN client. You can download the latest version from :
Please make sure that you remove the existing version first. Please also make sure that you don't have any 3rd party firewalls running like Norton Internet Security, McAffee Desktop Firewall or ZoneAlarm stuff.
HTH,
Please rate if it helps,
Regards,
Kamal
03-07-2007 11:44 AM
i guess i dont have the proper access. Probably havent spent enough money on cisco stuff yet :)
03-08-2007 12:22 PM
Well, i think it may be solved partially, looks like its now just a client issue on my laptop here. Ive tried it on the other client with no problems multiple times. Could have been two issues seeming to be one, and those commands fixed one. I'm not too concerned about my laptop for now. Thank you for all your help!!!
Maury
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: