vpnclient 4.0.1 connection problem
Diallo Mamadou <[email protected]> Fri, 30 Jun 2006 15:09:24 +0200 (CEST)
| Newsgroups | gmane.comp.security.vpn |
|---|---|
| Message-ID | <[email protected]> |
--===============0373405603== Content-Type: multipart/alternative; boundary="0-1090406007-1151672964=:95796" Content-Transfer-Encoding: 7bit --0-1090406007-1151672964=:95796 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Hi, =20 Excuse my poor english! =20 I am a senegalese student, i am testing connection to a pix 506E with a= vpnclient 4.01 using rsa-sig. =20 i get the message "secure vpn connection terminated locally by the clie= nt Reason:Unable to contact security gateway" =20 I try any things but i can not solve the problem. =20 I obtained this log from the vpnclient logviewer: =20 Cisco Systems VPN Client Version 4.0.1 (Rel) Copyright (C) 1998-2003 Cisco Systems, Inc. All Rights Reserved. Client Type(s): Windows, WinNT Running on: 5.0.2195 94 13:30:40.203 06/28/06 Sev=3DInfo/4 CERT/0x63600014 Cert (c=3DSN,o=3DDOUANE senegalaise,ou=3Dpkigroup,cn=3DKamou) verificatio= n succeeded. 95 13:30:40.250 06/28/06 Sev=3DInfo/4 CM/0x63100002 Begin connection process 96 13:30:40.250 06/28/06 Sev=3DInfo/4 CM/0x63100004 Establish secure connection using Ethernet 97 13:30:40.250 06/28/06 Sev=3DInfo/4 CM/0x63100024 Attempt connection with server "10.3.0.46" 98 13:30:41.265 06/28/06 Sev=3DInfo/6 IKE/0x6300003B Attempting to establish a connection with 10.3.0.46. 99 13:30:41.343 06/28/06 Sev=3DInfo/4 IKE/0x63000013 SENDING >>> ISAKMP OAK MM (SA, VID(Xauth), VID(dpd), VID(Nat-T), VID(Frag= ), VID(Unity)) to 10.3.0.46 100 13:30:41.421 06/28/06 Sev=3DInfo/5 IKE/0x6300002F Received ISAKMP packet: peer =3D 10.3.0.46 101 13:30:41.421 06/28/06 Sev=3DInfo/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK MM (SA) from 10.3.0.46 102 13:30:41.468 06/28/06 Sev=3DInfo/6 IKE/0x63000001 IOS Vendor ID Contruction successful 103 13:30:41.468 06/28/06 Sev=3DInfo/4 IKE/0x63000013 SENDING >>> ISAKMP OAK MM (KE, NON, VID(?), VID(Unity)) to 10.3.0.46 104 13:30:41.593 06/28/06 Sev=3DInfo/5 IKE/0x6300002F Received ISAKMP packet: peer =3D 10.3.0.46 105 13:30:41.593 06/28/06 Sev=3DInfo/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK MM (KE, NON, CERT_REQ, VID(Xauth), VID(dpd), VID= (Unity), VID(?)) from 10.3.0.46 106 13:30:41.593 06/28/06 Sev=3DInfo/5 IKE/0x63000001 Peer supports XAUTH 107 13:30:41.593 06/28/06 Sev=3DInfo/5 IKE/0x63000001 Peer supports DPD 108 13:30:41.593 06/28/06 Sev=3DInfo/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 109 13:30:41.593 06/28/06 Sev=3DInfo/5 IKE/0x63000081 Received IOS Vendor ID with unknown capabilities flag 0x00000025 110 13:30:41.640 06/28/06 Sev=3DInfo/4 IKE/0x63000013 SENDING >>> ISAKMP OAK MM *(ID, CERT, CERT_REQ, SIG, NOTIFY:STATUS_INITIA= L_CONTACT) to 10.3.0.46 111 13:30:41.921 06/28/06 Sev=3DInfo/5 IKE/0x6300002F Received ISAKMP packet: peer =3D 10.3.0.46 112 13:30:41.921 06/28/06 Sev=3DInfo/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK MM *(ID, CERT, SIG) from 10.3.0.46 113 13:30:41.937 06/28/06 Sev=3DInfo/4 CERT/0x63600014 Cert (c=3DSN,o=3DDOUANE senegalaise,cn=3Dmonpix.douane,1.2.840.113549.1.9= .2=3D#130d6d6f6e7069782e646f75616e65,1.2.840.113549.1.9.8=3D#130931302e33= 2e302e3436) verification succeeded. 114 13:30:41.937 06/28/06 Sev=3DWarning/3 IKE/0xE3000081 Invalid remote certificate id: ID_FQDN: ID =3D monpix.douane, Certificate= =3D [NULL] 115 13:30:41.937 06/28/06 Sev=3DWarning/3 IKE/0xE3000058 The peer's certificate doesn't match Phase 1 ID 116 13:30:41.937 06/28/06 Sev=3DWarning/2 IKE/0xE30000A5 Unexpected SW error occurred while processing Identity Protection (Main M= ode) negotiator:(Navigator:2046) 117 13:30:41.937 06/28/06 Sev=3DInfo/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=3D76198AC89083E130 R_Cookie=3DCCF7= DFE832EC4EA3) reason =3D DEL_REASON_IKE_NEG_FAILED 118 13:30:41.937 06/28/06 Sev=3DInfo/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 10.3.0.46 119 13:30:42.812 06/28/06 Sev=3DInfo/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=3D76198AC89083E130 R_Cookie=3DCCF= 7DFE832EC4EA3) reason =3D DEL_REASON_IKE_NEG_FAILED 120 13:30:42.812 06/28/06 Sev=3DInfo/4 CM/0x63100014 Unable to establish Phase 1 SA with server "10.3.0.46" because of "DEL_RE= ASON_IKE_NEG_FAILED" 121 13:30:42.812 06/28/06 Sev=3DInfo/5 CM/0x63100025 Initializing CVPNDrv 122 13:30:42.812 06/28/06 Sev=3DInfo/4 IKE/0x63000001 IKE received signal to terminate VPN connection 123 13:30:42.828 06/28/06 Sev=3DInfo/4 IKE/0x63000085 Microsoft IPSec Policy Agent service started successfully =20 Please i really need your help! =20 Cheers =20 =09 --------------------------------- Yahoo! Mail r=E9invente le mail ! D=E9couvrez le nouveau Yahoo! Mail et = son interface r=E9volutionnaire. --0-1090406007-1151672964=:95796 Content-Type: text/html; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable <div>Hi,</div> <div> </div> <div>Excuse my poor english!</div> <d= iv> </div> <div>I am a senegalese student, i am testing connection = to a pix 506E with a vpnclient 4.01 using rsa-sig.</div> <div> </di= v> <div>i get the message "secure vpn connection terminated locally by t= he client Reason:Unable to contact security gateway"</div> <div> </= div> <div>I try any things but i can not solve the problem.</div> <div>= </div> <div>I obtained this log from the vpnclient logviewer:</div= > <div> </div> <div>Cisco Systems VPN Client Version 4.0.1 (Rel)<B= R>Copyright (C) 1998-2003 Cisco Systems, Inc. All Rights Reserved.<BR>Cli= ent Type(s): Windows, WinNT<BR>Running on: 5.0.2195</div> <div>94 &= nbsp; 13:30:40.203 06/28/06 Sev=3DInfo/4 CER= T/0x63600014<BR>Cert (c=3DSN,o=3DDOUANE senegalaise,ou=3Dpkigroup,cn=3DKa= mou) verification succeeded.</div> <div>95 13:30= :40.250 06/28/06 Sev=3DInfo/4 CM/0x63100002<BR>Begin connection process</div> <div>= 96 13:30:40.250 06/28/06 Sev=3DInfo/4= CM/0x63100004<BR>Establish secure connection using Ethernet</div> = <div>97 13:30:40.250 06/28/06 Sev=3DI= nfo/4 CM/0x63100024<BR>Attempt connection with server "10.3.0.46"</d= iv> <div>98 13:30:41.265 06/28/06 Se= v=3DInfo/6 IKE/0x6300003B<BR>Attempting to establish a connection wi= th 10.3.0.46.</div> <div>99 13:30:41.343 0= 6/28/06 Sev=3DInfo/4 IKE/0x63000013<BR>SENDING >>> IS= AKMP OAK MM (SA, VID(Xauth), VID(dpd), VID(Nat-T), VID(Frag), VID(Unity))= to 10.3.0.46</div> <div>100 13:30:41.421 06/28/= 06 Sev=3DInfo/5 IKE/0x6300002F<BR>Received ISAKMP packet: peer= =3D 10.3.0.46</div> <div>101 13:30:41.421 06/28= /06 Sev=3DInfo/4 IKE/0x63000014<BR>RECEIVING <<< ISAKMP OAK MM (SA) from 10.3.0.46</div> <div>102 &nbs= p; 13:30:41.468 06/28/06 Sev=3DInfo/6 IKE/0x630000= 01<BR>IOS Vendor ID Contruction successful</div> <div>103 &nb= sp; 13:30:41.468 06/28/06 Sev=3DInfo/4 IKE/0x63000013<BR= >SENDING >>> ISAKMP OAK MM (KE, NON, VID(?), VID(Unity)) to 10.3= .0.46</div> <div>104 13:30:41.593 06/28/06 = Sev=3DInfo/5 IKE/0x6300002F<BR>Received ISAKMP packet: peer =3D 10.= 3.0.46</div> <div>105 13:30:41.593 06/28/06 = ; Sev=3DInfo/4 IKE/0x63000014<BR>RECEIVING <<< ISAKMP OAK M= M (KE, NON, CERT_REQ, VID(Xauth), VID(dpd), VID(Unity), VID(?)) from 10.3= .0.46</div> <div>106 13:30:41.593 06/28/06 = Sev=3DInfo/5 IKE/0x63000001<BR>Peer supports XAUTH</div> <div>107&= nbsp; 13:30:41.593 06/28/06 Sev=3DInfo/5 IKE= /0x63000001<BR>Peer supports DPD</div>=20 <div>108 13:30:41.593 06/28/06 Sev=3DInfo/= 5 IKE/0x63000001<BR>Peer is a Cisco-Unity compliant peer</div> <div= >109 13:30:41.593 06/28/06 Sev=3DInfo/5&nbs= p;IKE/0x63000081<BR>Received IOS Vendor ID with unknown capabilities flag= 0x00000025</div> <div>110 13:30:41.640 06/28/06= Sev=3DInfo/4 IKE/0x63000013<BR>SENDING >>> ISAKMP OA= K MM *(ID, CERT, CERT_REQ, SIG, NOTIFY:STATUS_INITIAL_CONTACT) to 10.3.0.= 46</div> <div>111 13:30:41.921 06/28/06 Se= v=3DInfo/5 IKE/0x6300002F<BR>Received ISAKMP packet: peer =3D 10.3.0= .46</div> <div>112 13:30:41.921 06/28/06 S= ev=3DInfo/4 IKE/0x63000014<BR>RECEIVING <<< ISAKMP OAK MM *= (ID, CERT, SIG) from 10.3.0.46</div> <div>113 13:30:41= .937 06/28/06 Sev=3DInfo/4 CERT/0x63600014<BR>Cert (c=3D= SN,o=3DDOUANE senegalaise,cn=3Dmonpix.douane,1.2.840.113549.1.9.2=3D#130d6d6f6e7069782= e646f75616e65,1.2.840.113549.1.9.8=3D#130931302e332e302e3436) verificatio= n succeeded.</div> <div>114 13:30:41.937 06/28/0= 6 Sev=3DWarning/3 IKE/0xE3000081<BR>Invalid remote certificate= id: ID_FQDN: ID =3D monpix.douane, Certificate =3D [NULL]</div> <div>11= 5 13:30:41.937 06/28/06 Sev=3DWarning/3&nbs= p;IKE/0xE3000058<BR>The peer's certificate doesn't match Phase 1 ID</div>= <div>116 13:30:41.937 06/28/06 Sev=3DWarn= ing/2 IKE/0xE30000A5<BR>Unexpected SW error occurred while processin= g Identity Protection (Main Mode) negotiator:(Navigator:2046)</div> <div= >117 13:30:41.937 06/28/06 Sev=3DInfo/4&nbs= p;IKE/0x63000017<BR>Marking IKE SA for deletion (I_Cookie=3D76198AC= 89083E130 R_Cookie=3DCCF7DFE832EC4EA3) reason =3D DEL_REASON_IKE_NEG_FAIL= ED</div> <div>118 13:30:41.937 06/28/06 Sev=3DInfo/4 IKE/0x63000013<BR>SENDING >>> = ISAKMP OAK INFO *(HASH, DEL) to 10.3.0.46</div> <div>119 &nbs= p; 13:30:42.812 06/28/06 Sev=3DInfo/4 IKE/0x6300004A<BR>= Discarding IKE SA negotiation (I_Cookie=3D76198AC89083E130 R_Cookie=3DCCF= 7DFE832EC4EA3) reason =3D DEL_REASON_IKE_NEG_FAILED</div> <div>120 = 13:30:42.812 06/28/06 Sev=3DInfo/4 CM/0x631= 00014<BR>Unable to establish Phase 1 SA with server "10.3.0.46" because o= f "DEL_REASON_IKE_NEG_FAILED"</div> <div>121 13:30:42.= 812 06/28/06 Sev=3DInfo/5 CM/0x63100025<BR>Initializing = CVPNDrv</div> <div>122 13:30:42.812 06/28/06&nbs= p; Sev=3DInfo/4 IKE/0x63000001<BR>IKE received signal to terminate V= PN connection</div> <div>123 13:30:42.828 06/28/= 06 Sev=3DInfo/4 IKE/0x63000085<BR>Microsoft IPSec Policy Agent= service started successfully</div> <div> </div>=20 <div>Please i really need your help!</div> <div> </div> <div>Chee= rs</div> <div> </div><p>  <hr size=3D"1">=20 <b>Yahoo! Mail r=E9invente le mail !</b> D=E9couvrez le <a href=3D"http:/= /fr.rd.yahoo.com/evt=3D40577/*http://fr.promotions.yahoo.com/mail/nouveau= mail.html=20 ">nouveau Yahoo! Mail</a> et son interface r=E9volutionnaire. --0-1090406007-1151672964=:95796-- --===============0373405603== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ VPN mailing list [email protected] http://lists.shmoo.com/mailman/listinfo/vpn --===============0373405603==--