Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

VPN Error - "unable to retrieve extended authentication parameters"

I have a user getting this error when they try to connect to the VPN client 3.6.1. Other users are not getting this error?

Any idea what this means?

  • Other Security Subjects
Cisco Employee

Re: VPN Error - "unable to retrieve extended authentication para

Mike, VPN 3.6.1 clients are connecting to what headend (VPN 3000, PIX) ?

1) If headend is VPN 3000 please enable events AUTH, IKE, IKEDBG- level 9 is OK.

2) If PIX headend turn on debugs:

debug crypto ipsec and debug crypto isakmp

3) turn on VPN Client Log events to High.

4) clear all logs ...and initiate the tunnel...

5) Please post the logs and any configs.



New Member

Re: VPN Error - "unable to retrieve extended authentication para

Nelson, the VPN client are connected to PIX 515, i enable debug in the VPN client and the pix but the request to server in dmz is not displayed. my idea is if the request is over inside the next hop is the firewall and reroute to destination, but if the destination is dmz the pix don't respond and the pc find the network in the internet, and don't connect with real server

I test all posibles configuration in split and routing

This widget could not be displayed.