Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

RV082 VPN logs looks like an attack

Hi,

I´m seeing this lines in the VPN Log of our RV082.

My questions are:

  • is if these are normal logs or if it could be an attack?
  • is there any exploit for RV082 that I should be aware of?
  • can I disable VPN completelly?

I'm not expeting any client connecting to the RV082.

My router: RV082 with firmware 2.0.0.19-tm

Here are the logs, the repeats every day, every few hours. Please note the same timestamp in some entries

Mar  5 08:25:21 2010    VPN Log   Received Vendor ID payload Type = [Dead Peer Detection]
Mar  5 08:25:21 2010    VPN  Log   [Tunnel Negotiation Info] <<< Responder  Received Main Mode 1st packet
Mar  5 08:25:21 2010    VPN  Log   (NATT)Initial Main Mode message received on MY_IP:500 but no connection has been authorized. Please check  your tunnel endpoint (gateway) setting
Mar  5 08:25:21 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Received Vendor ID payload Type = [Dead Peer Detection]
Mar  5 08:25:41 2010    VPN  Log   [Tunnel Negotiation Info] <<< Responder  Received Main Mode 1st packet
Mar  5 08:25:41 2010    VPN  Log   (NATT)Initial Main Mode message received on MY_IP :500 but no connection has been authorized. Please check  your tunnel endpoint (gateway) setting
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.
Mar  5 08:25:41 2010    VPN  Log   Dynamic VPN client in Main Mode is only supported for  Microsoft VPN client, please use Aggressive mode instead.

Many thanks

Oliver

http://tinymaillto.com/oliversl <-- my email after a captcha

Everyone's tags (2)
1 REPLY
New Member

Re: RV082 VPN logs looks like an attack

The other side RV082 VPN Tunnel was not disabled, that was the cause :(

1597
Views
0
Helpful
1
Replies
CreatePlease login to create content