Re: vpn problem cisco & watchguard

Did you open a TAC case with Cisco?? What do they say?

Siddhartha


 --- Navratil Pavel <[email protected]>
wrote: > You posted this question in VPN mail list:
> --------------------------------------
> > I have a problem with a cisco router ed Watchguard
> firewall.
> > Sometime the tunnel ipsec dropped.
> > the logs on the router is that:
> > %CRYPTO-4-IKMP_PKT_OVERFLOW : ISAKMP message from
> [IP_address] larger
> ([dec]) than the UDP packet length ([dec]) 
> > Explanation ISAKMP messages are carried in UDP
> packets and have their
> own message length field. The message length field
> of this message was
> greater than the length of the UDP packet. This
> situation could indicate
> a denial-of-service attack.
> > Recommended Action Contact the remote peer and the
> administrator of
> the remote peer.
> > 
> > the remote watchguard 700/III release 7.0 sp1 seem
> not have a problem.
> > the cisco si that:
> > System image file is
> "flash:c837-k9o3y6-mz.122-13.ZH2.bin"
> > CISCO C837 (MPC857DSL) processor (revision 0x400)
> with 29492K/3276K
> bytes of memory.
> > 
> >  Please let me
> > know this as soon as possible.
> ----------------------------------------------
> 
> I am just starting to resolve similar problem on my
> VPN with IPsec
> connection between CISCO VPN Client and CISCO Router
> (IOS version
> 12.2.15T10) with the same error message.
> Did you have any response for your answer or any
> advice/hint how to
> resolve this problem?
> 
> Thank you
> 
>
-------------------------------------------------------
> Pavel Navratil
> Cisco Certified Security Professional         
> NEXTRA Czech Republic s.r.o.  - http://www.nextra.cz
> V Celnici 10 / CZ - 117 21 Praha 1 / Czech Republic
> Tel: +420/2/96 355 111
> E-mail: [email protected]
> 
> Contact address:
> Wolkerova 1331 / CZ - 565 01 Chocen / Czech Republic
> Tel.: +420/603/279069
> See Disclaimer: http://www.nextra.cz/disclaimer/
>
-------------------------------------------------------
>  
> _______________________________________________
> VPN mailing list
> [email protected]
> http://lists.shmoo.com/mailman/listinfo/vpn 

________________________________________________________________________
Yahoo! Messenger - Communicate instantly..."Ping" 
your friends today! Download Messenger Now 
http://uk.messenger.yahoo.com/download/index.html