error when connect to vpn concentrator using cisco vpn client
"tarek ismail" <[email protected]>
| Newsgroups | gmane.comp.security.vpn |
|---|---|
| Message-ID | <001f01c3be4b$a5fc8400$d70310ac@tradews205> |
hello everyone i have a problem when i want to configure my vpn concentrator version 3000 i configure to access my concenttator by using cisco vpn client to connect by useing l2tp/ipsec after make connection to concentrator and try to login using username and password it faild to login after asking me the password 3 times with my mail the logs of server and logs of vpn client server logs: 9438 12/09/2003 13:24:20.960 SEV=5 IKE/21 RPT=388 100.100.100.105 No Group found by matching IP Address of Cert peer 100.100.100.105 9439 12/09/2003 13:24:20.960 SEV=5 CERT/101 RPT=388 Cert group matching feature is disabled 9440 12/09/2003 13:24:20.960 SEV=5 IKE/20 RPT=376 100.100.100.105 No Group found by matching OU(s) from ID payload: Unknown 9441 12/09/2003 13:24:21.210 SEV=5 IKE/79 RPT=384 100.100.100.105 Group [VPNC_Base_Group] Validation of certificate successful (CN=tradews205, SN=1EDE62EC00000000000A) 9443 12/09/2003 13:24:30.040 SEV=3 AUTH/5 RPT=33 100.100.100.105 Authentication rejected: Reason = Invalid password handle = 498, server = Internal, user = VPNC_Base_Group, domain = <not specified > 9446 12/09/2003 13:24:36.420 SEV=3 AUTH/5 RPT=34 100.100.100.105 Authentication rejected: Reason = Invalid password handle = 499, server = Internal, user = VPNC_Base_Group, domain = <not specified > 9449 12/09/2003 13:24:42.110 SEV=3 AUTH/5 RPT=35 100.100.100.105 Authentication rejected: Reason = Invalid password handle = 500, server = Internal, user = VPNC_Base_Group, domain = <not specified > 9452 12/09/2003 13:24:42.110 SEV=5 IKE/50 RPT=12 100.100.100.105 Group [VPNC_Base_Group] User [cert_user] Connection terminated for peer cert_user (Peer Terminate) Remote Proxy N/A, Local Proxy N/A ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- client logs : 11 13:24:01.281 12/09/03 Sev=Info/6 DIALER/0x63300002 Initiating connection. 12 13:24:01.328 12/09/03 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 100.100.100.100. 13 13:24:01.953 12/09/03 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK MM (SA, VID, VID, VID) to 100.100.100.100 14 13:24:02.046 12/09/03 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 100.100.100.100 15 13:24:02.046 12/09/03 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK MM (SA, VID) from 100.100.100.100 16 13:24:02.046 12/09/03 Sev=Info/5 IKE/0x63000059 Vendor ID payload = 4048B7D56EBCE88525E7DE7F00D6C2D3C0000000 17 13:24:02.046 12/09/03 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK MM (KE, NON) to 100.100.100.100 18 13:24:02.109 12/09/03 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 19 13:24:02.156 12/09/03 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 100.100.100.100 20 13:24:02.156 12/09/03 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK MM (KE, NON, CERT_REQ, VID, VID, VID, VID) from 100.100.100.100 21 13:24:02.156 12/09/03 Sev=Info/5 IKE/0x63000059 Vendor ID payload = 12F5F28C457168A9702D9FE274CC0100 22 13:24:02.156 12/09/03 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 23 13:24:02.156 12/09/03 Sev=Info/5 IKE/0x63000059 Vendor ID payload = 09002689DFD6B712 24 13:24:02.156 12/09/03 Sev=Info/5 IKE/0x63000059 Vendor ID payload = B52D5C41DAD87AC7D3082EEDFEEF2CCF 25 13:24:02.156 12/09/03 Sev=Info/5 IKE/0x63000059 Vendor ID payload = 1F07F70EAA6514D3B0FA96542A500306 26 13:24:02.281 12/09/03 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK MM *(ID, CERT, CERT_REQ, SIG, NOTIFY:STATUS_INITIAL_CONTACT) to 100.100.100.100 27 13:24:03.718 12/09/03 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 100.100.100.100 28 13:24:03.718 12/09/03 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK MM *(ID, CERT, SIG, VID) from 100.100.100.100 29 13:24:04.234 12/09/03 Sev=Info/5 IKE/0x63000059 Vendor ID payload = AFCAD71368A1F1C96B8696FC77570100 30 13:24:04.234 12/09/03 Sev=Info/5 IKE/0x63000001 Peer supports DPD 31 13:24:04.703 12/09/03 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 100.100.100.100 32 13:24:04.703 12/09/03 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 100.100.100.100 33 13:24:11.078 12/09/03 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 100.100.100.100 34 13:24:11.375 12/09/03 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 100.100.100.100 35 13:24:11.375 12/09/03 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 100.100.100.100 36 13:24:17.453 12/09/03 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 100.100.100.100 37 13:24:17.765 12/09/03 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 100.100.100.100 38 13:24:17.765 12/09/03 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 100.100.100.100 39 13:24:23.140 12/09/03 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 100.100.100.100 40 13:24:23.453 12/09/03 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 100.100.100.100 41 13:24:23.453 12/09/03 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 100.100.100.100 42 13:24:23.453 12/09/03 Sev=Info/5 IKE/0x63000017 Marking IKE SA for deletion (COOKIES = 7D8E851CB00A9C02 40EAFB5CDAD97AC7) reason = DEL_REASON_WE_FAILED_AUTH 43 13:24:23.453 12/09/03 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 100.100.100.100 44 13:24:23.453 12/09/03 Sev=Warning/3 IKE/0xE3000061 The XAUTH authentication failed. 45 13:24:25.171 12/09/03 Sev=Warning/3 DIALER/0xE3300015 GI VPN start callback failed "CM_IKE_ESTABLISH_FAILED_AUTH" (19h). 46 13:24:26.203 12/09/03 Sev=Info/4 IPSEC/0x63700014 Deleted all keys _______________________________________________ VPN mailing list [email protected] http://lists.shmoo.com/mailman/listinfo/vpn