Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

VPN3005 Kerberos First Authentication always Fails

A VPN3005 concentrator that uses Kerberos/Active Directory Authentication always fails the first time a user attempts to authenticate. The second time, never a problem. Here is the log output:

3830 01/25/2006 19:33:14.400 SEV=4 IPSEC/4 RPT=290

IPSec ESP Tunnel Inb: Packet authentication failed, username: username, SPI: 2c3ef3

7e, Seq Num: 00000d70. Dump of failed hash follows.

3832 01/25/2006 19:33:14.400 SEV=4 IPSEC/0 RPT=868

0000: 4FB2D9AF ED4B98C5 E3FE41E6 O....K....A.

3833 01/25/2006 19:33:14.400 SEV=4 IPSEC/0 RPT=869

0000: 1125C120 B9A5E2AD 4DC8E29D ... ....M...

3834 01/25/2006 19:33:14.400 SEV=4 IPSEC/0 RPT=870

0000: 00640000 2C3EF37E 00000D70 6A06872D .d..,>.~...pj..-

0010: 217F3AFF 6E04DCA7 8B38DE95 80010F90 !.:.n....8......

0020: D8DAA001 AC100201 08006314 0300E747 ..........c....G

0030: 61626364 65666768 696A6B6C 6D6E6F70 abcdefghijklmnop

0040: 71727374 75767761 62636465 66676869 qrstuvwabcdefghi

0050: 01020204 4FB2D9AF ED4B98C5 E3FE41E6 ....O....K....A.

0060: 2ABB44F8 20332033 8A80FFFF FFFF7279 *.D. 3 3......ry

0070: 00000000 11000000 00000000 11000000 ................

<<REPEAT>>

194
Views
0
Helpful
0
Replies