Fw: Help with VPN Client 4.0.3 to PIX through A vigor internet link

Onsite DeTeWe <[email protected]>
Newsgroups gmane.comp.security.vpn
Message-ID <OFF8B69527.6257A3D1-ON80256E8A.0052535C-80256E8A.0052A10D@firstgroup.com>
OK so I was thinking that my last email was a bit vague.  Here is an 
output from my pix with the following debug.

debug packet inside src 172.1.1.1 dst JASON both

172.1.1.1 is from the pool and JASON is my PC the only PC in the 0 NAT 
access list.

The below output is generated from perfoming a VNC request from the Client 
PC, but does not connect?!?!?  Any Ideas??

Kind regards in advance.

Jason



172.1.1.1       ==>     JASON

        ver = 0x4       hlen = 0x5      tos = 0x0       tlen = 0x30
        id = 0xeb88     flags = 0x40    frag off=0x0
        ttl = 0x80      proto=0x6       chksum = 0x5335

        -- TCP --
                source port = 0x570     dest port = 0x170csyn

                seq = 0x109067c2
                ack = 0xec312177
                hlen = 0x7              window = 0xfff0
                checksum = 0x2575       urg = 0x0
tcp options:
                        0x2     0x4     0x4     0xec    0x1     0x1 0x4 0
x2
--------- END OF PACKET ---------

--------- PACKET ---------

-- IP --
JASON   ==>     172.1.1.1

        ver = 0x4       hlen = 0x5      tos = 0x0       tlen = 0x30
        id = 0x5850     flags = 0x40    frag off=0x0
        ttl = 0x7f      proto=0x6       chksum = 0xe76d

        -- TCP --
                source port = 0x170c    dest port = 0x570syn ack

                seq = 0xdc635b54
                ack = 0x109067c3
                hlen = 0x7              window = 0xfc00
                checksum = 0xfe7c       urg = 0x0
tcp options:
                        0x2     0x4     0x5     0xb4    0x1     0x1 0x4 0
x2
--------- END OF PACKET ---------

--------- PACKET ---------

-- IP --
172.1.1.1       ==>     JASON

        ver = 0x4       hlen = 0x5      tos = 0x0       tlen = 0x30
        id = 0xeb95     flags = 0x40    frag off=0x0
        ttl = 0x80      proto=0x6       chksum = 0x5328

        -- TCP --
                source port = 0x570     dest port = 0x170csyn

                seq = 0x109067c2
                ack = 0xec312177
                hlen = 0x7              window = 0xfff0
                checksum = 0x2575       urg = 0x0
tcp options:
                        0x2     0x4     0x4     0xec    0x1     0x1 0x4 0
x2
--------- END OF PACKET ---------

--------- PACKET ---------

-- IP --
JASON   ==>     172.1.1.1

        ver = 0x4       hlen = 0x5      tos = 0x0       tlen = 0x28
        id = 0x5879     flags = 0x40    frag off=0x0
        ttl = 0x7f      proto=0x6       chksum = 0xe74c

        -- TCP --
                source port = 0x170c    dest port = 0x570ack

                seq = 0xdc635b55
                ack = 0x109067c3
                hlen = 0x5              window = 0xfc00
                checksum = 0x2b41       urg = 0x0
        -- DATA --
                00000020:                         00 00 00 00 00 00 4e |
      ......N

--------- END OF PACKET ---------

--------- PACKET ---------

-- IP --
JASON   ==>     172.1.1.1

        ver = 0x4       hlen = 0x5      tos = 0x0       tlen = 0x30
        id = 0x587d     flags = 0x40    frag off=0x0
        ttl = 0x7f      proto=0x6       chksum = 0xe740

        -- TCP --
                source port = 0x170c    dest port = 0x570syn ack

                seq = 0xdc635b54
                ack = 0x109067c3
                hlen = 0x7              window = 0xfc00
                checksum = 0xfe7c       urg = 0x0
tcp options:
                        0x2     0x4     0x5     0xb4    0x1     0x1 0x4 0
x2
--------- END OF PACKET ---------

--------- PACKET ---------

-- IP --
172.1.1.1       ==>     JASON

        ver = 0x4       hlen = 0x5      tos = 0x0       tlen = 0x30
        id = 0xebb4     flags = 0x40    frag off=0x0
        ttl = 0x80      proto=0x6       chksum = 0x5309

        -- TCP --
                source port = 0x570     dest port = 0x170csyn

                seq = 0x109067c2
                ack = 0xec312177
                hlen = 0x7              window = 0xfff0
                checksum = 0x2575       urg = 0x0
tcp options:
                        0x2     0x4     0x4     0xec    0x1     0x1 0x4 0
x2
--------- END OF PACKET ---------

--------- PACKET ---------

-- IP --
JASON   ==>     172.1.1.1

        ver = 0x4       hlen = 0x5      tos = 0x0       tlen = 0x28
        id = 0x58d8     flags = 0x40    frag off=0x0
        ttl = 0x7f      proto=0x6       chksum = 0xe6ed

        -- TCP --
                source port = 0x170c    dest port = 0x570ack

                seq = 0xdc635b55
                ack = 0x109067c3
                hlen = 0x5              window = 0xfc00
                checksum = 0x2b41       urg = 0x0
        -- DATA --
                00000020:                         00 00 00 00 00 00 00 |
      .......

--------- END OF PACKET ---------

--------- PACKET ---------

-- IP --
JASON   ==>     172.1.1.1

        ver = 0x4       hlen = 0x5      tos = 0x0       tlen = 0x30
        id = 0x58e4     flags = 0x40    frag off=0x0
        ttl = 0x7f      proto=0x6       chksum = 0xe6d9

        -- TCP --
                source port = 0x170c    dest port = 0x570syn ack

                seq = 0xdc635b54
                ack = 0x109067c3
                hlen = 0x7              window = 0xfc00
                checksum = 0xfe7c       urg = 0x0
tcp options:
                        0x2     0x4     0x5     0xb4    0x1     0x1 0x4 0
x2
--------- END OF PACKET ---------


**********************************************************************
This message is confidential. It may not be disclosed to, or used by, 
anyone other than the addressee. If you receive this message in 
error, please advise us immediately.

Internet email is not necessarily secure. First does not accept
responsibility for changes to any email which occur after the email
has been sent. Attachments to this email could contain software
viruses which could damage your system. First have checked the
attachments for viruses before sending, but you should virus-check
them before opening.

http://www.firstgroup.com
**********************************************************************

_______________________________________________
VPN mailing list
[email protected]
http://lists.shmoo.com/mailman/listinfo/vpn
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.