vpn problem cisco & watchguard

"Navratil Pavel" <[email protected]>
Newsgroups gmane.comp.security.vpn
Message-ID <0A6487EEF13CAF4ABBA72CB95F4D373C01FD3CFF@phm-ex01.internal.nextra.cz>
You posted this question in VPN mail list:
--------------------------------------
> I have a problem with a cisco router ed Watchguard firewall.
> Sometime the tunnel ipsec dropped.
> the logs on the router is that:
> %CRYPTO-4-IKMP_PKT_OVERFLOW : ISAKMP message from [IP_address] larger
([dec]) than the UDP packet length ([dec]) 
> Explanation ISAKMP messages are carried in UDP packets and have their
own message length field. The message length field of this message was
greater than the length of the UDP packet. This situation could indicate
a denial-of-service attack.
> Recommended Action Contact the remote peer and the administrator of
the remote peer.
> 
> the remote watchguard 700/III release 7.0 sp1 seem not have a problem.
> the cisco si that:
> System image file is "flash:c837-k9o3y6-mz.122-13.ZH2.bin"
> CISCO C837 (MPC857DSL) processor (revision 0x400) with 29492K/3276K
bytes of memory.
> 
>  Please let me
> know this as soon as possible.
----------------------------------------------

I am just starting to resolve similar problem on my VPN with IPsec
connection between CISCO VPN Client and CISCO Router (IOS version
12.2.15T10) with the same error message.
Did you have any response for your answer or any advice/hint how to
resolve this problem?

Thank you

-------------------------------------------------------
Pavel Navratil
Cisco Certified Security Professional         
NEXTRA Czech Republic s.r.o.  - http://www.nextra.cz
V Celnici 10 / CZ - 117 21 Praha 1 / Czech Republic
Tel: +420/2/96 355 111
E-mail: [email protected]

Contact address:
Wolkerova 1331 / CZ - 565 01 Chocen / Czech Republic
Tel.: +420/603/279069
See Disclaimer: http://www.nextra.cz/disclaimer/
-------------------------------------------------------
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.