vpn problem cisco & watchguard
"Navratil Pavel" <[email protected]>
| Newsgroups | gmane.comp.security.vpn |
|---|---|
| Message-ID | <0A6487EEF13CAF4ABBA72CB95F4D373C01FD3CFF@phm-ex01.internal.nextra.cz> |
You posted this question in VPN mail list: -------------------------------------- > I have a problem with a cisco router ed Watchguard firewall. > Sometime the tunnel ipsec dropped. > the logs on the router is that: > %CRYPTO-4-IKMP_PKT_OVERFLOW : ISAKMP message from [IP_address] larger ([dec]) than the UDP packet length ([dec]) > Explanation ISAKMP messages are carried in UDP packets and have their own message length field. The message length field of this message was greater than the length of the UDP packet. This situation could indicate a denial-of-service attack. > Recommended Action Contact the remote peer and the administrator of the remote peer. > > the remote watchguard 700/III release 7.0 sp1 seem not have a problem. > the cisco si that: > System image file is "flash:c837-k9o3y6-mz.122-13.ZH2.bin" > CISCO C837 (MPC857DSL) processor (revision 0x400) with 29492K/3276K bytes of memory. > > Please let me > know this as soon as possible. ---------------------------------------------- I am just starting to resolve similar problem on my VPN with IPsec connection between CISCO VPN Client and CISCO Router (IOS version 12.2.15T10) with the same error message. Did you have any response for your answer or any advice/hint how to resolve this problem? Thank you ------------------------------------------------------- Pavel Navratil Cisco Certified Security Professional NEXTRA Czech Republic s.r.o. - http://www.nextra.cz V Celnici 10 / CZ - 117 21 Praha 1 / Czech Republic Tel: +420/2/96 355 111 E-mail: [email protected] Contact address: Wolkerova 1331 / CZ - 565 01 Chocen / Czech Republic Tel.: +420/603/279069 See Disclaimer: http://www.nextra.cz/disclaimer/ -------------------------------------------------------