EMC VPN Dialer Version 4.6.00.0045 Copyright (C) 1998-2004 Cisco Systems, Inc. All Rights Reserved. Client Type(s): Windows, WinNT Running on: 5.1.2600 Service Pack 2 Config file directory: C:\Program Files\EMC VPN\VPN Client 1 01:08:10.445 02/25/06 Sev=Info/4 CM/0x63100002 Begin connection process 2 01:08:10.445 02/25/06 Sev=Warning/2 CVPND/0xA3400011 Error -14 sending packet. Dst Addr: 0xFFFFFFFF, Src Addr: 0x0A18C69E (DRVIFACE:1199). 3 01:08:10.465 02/25/06 Sev=Info/4 CM/0x63100004 Establish secure connection using Ethernet 4 01:08:10.465 02/25/06 Sev=Info/4 CM/0x63100024 Attempt connection with server "10.0.0.1" 5 01:08:10.475 02/25/06 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 10.0.0.1. 6 01:08:10.485 02/25/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Nat-T), VID(Frag), VID(Unity)) to 10.0.0.1 7 01:08:10.516 02/25/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 8 01:08:10.516 02/25/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(?), VID(Xauth), VID(Unity)) from 10.0.0.1 9 01:08:10.516 02/25/06 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 10 01:08:10.516 02/25/06 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 11 01:08:10.586 02/25/06 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 12 01:08:10.586 02/25/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 10.0.0.1 13 01:08:10.586 02/25/06 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 14 01:08:10.586 02/25/06 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 15 01:08:10.586 02/25/06 Sev=Info/4 IPSEC/0x63700008 IPSec driver successfully started 16 01:08:10.586 02/25/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 17 01:08:10.616 02/25/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 18 01:08:10.616 02/25/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 10.0.0.1 19 01:08:10.616 02/25/06 Sev=Info/4 CM/0x63100015 Launch xAuth application 20 01:08:14.151 02/25/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 21 01:08:14.151 02/25/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 22 01:08:18.167 02/25/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 23 01:08:18.167 02/25/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 24 01:08:21.071 02/25/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:HEARTBEAT) to 10.0.0.1 25 01:08:21.071 02/25/06 Sev=Info/6 IKE/0x63000052 Sent a keepalive on the IKE SA 26 01:08:23.855 02/25/06 Sev=Info/4 CM/0x63100017 xAuth application returned 27 01:08:23.855 02/25/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 10.0.0.1 28 01:08:27.870 02/25/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 29 01:08:27.870 02/25/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 10.0.0.1 30 01:08:27.870 02/25/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 10.0.0.1 31 01:08:27.881 02/25/06 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 1 User Authenticated IKE SA in the system 32 01:08:27.991 02/25/06 Sev=Info/5 IKE/0x6300005D Client sending a firewall request to concentrator 33 01:08:27.991 02/25/06 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=Cisco Systems Integrated Client, Capability= (Centralized Protection Policy). 34 01:08:27.991 02/25/06 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=NetworkICE BlackICE Defender, Capability= (Are you There?). 35 01:08:27.991 02/25/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 10.0.0.1 36 01:08:28.001 02/25/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 37 01:08:28.001 02/25/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 10.0.0.1 38 01:08:28.001 02/25/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_ADDRESS: , value = 10.24.198.158 39 01:08:28.001 02/25/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NETMASK: , value = 255.255.255.255 40 01:08:28.011 02/25/06 Sev=Info/4 CM/0x63100019 Mode Config data received 41 01:08:28.011 02/25/06 Sev=Info/4 IKE/0x63000055 Received a key request from Driver: Local IP = 10.24.198.158, GW IP = 10.0.0.1, Remote IP = 0.0.0.0 42 01:08:28.011 02/25/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH, SA, NON, ID, ID) to 10.0.0.1 43 01:08:28.041 02/25/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 44 01:08:28.041 02/25/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK QM *(HASH, SA, NON, ID, ID, NOTIFY:STATUS_RESP_LIFETIME) from 10.0.0.1 45 01:08:28.041 02/25/06 Sev=Info/5 IKE/0x63000044 RESPONDER-LIFETIME notify has value of 57600 seconds 46 01:08:28.041 02/25/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH) to 10.0.0.1 47 01:08:28.041 02/25/06 Sev=Info/5 IKE/0x63000058 Loading IPsec SA (MsgID=E36DDFA3 OUTBOUND SPI = 0x358B11DF INBOUND SPI = 0xB039B033) 48 01:08:28.041 02/25/06 Sev=Info/5 IKE/0x63000025 Loaded OUTBOUND ESP SPI: 0x358B11DF 49 01:08:28.041 02/25/06 Sev=Info/5 IKE/0x63000026 Loaded INBOUND ESP SPI: 0xB039B033 50 01:08:28.842 02/25/06 Sev=Info/4 CM/0x63100034 The Virtual Adapter was enabled: IP=10.24.198.158/255.255.255.255 DNS=0.0.0.0,0.0.0.0 WINS=0.0.0.0,0.0.0.0 Domain= Split DNS Names= 51 01:08:28.852 02/25/06 Sev=Info/6 CM/0x63100036 The routing table was updated for the Virtual Adapter 52 01:08:28.872 02/25/06 Sev=Info/4 CM/0x6310001A One secure connection established 53 01:08:28.872 02/25/06 Sev=Info/4 CM/0x63100038 Address watch added for 10.24.198.158. Current address(es): 10.24.198.158. 54 01:08:28.872 02/25/06 Sev=Info/4 CM/0x63100038 Address watch added for 10.24.198.158. Current address(es): 10.24.198.158. 55 01:08:28.972 02/25/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 56 01:08:28.972 02/25/06 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 57 01:08:28.972 02/25/06 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0xdf118b35 into key list 58 01:08:28.972 02/25/06 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 59 01:08:28.972 02/25/06 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0x33b039b0 into key list 60 01:08:28.972 02/25/06 Sev=Info/4 IPSEC/0x6370002E Assigned VA private interface addr 10.24.198.158 61 01:08:29.583 02/25/06 Sev=Info/4 IPSEC/0x63700019 Activate outbound key with SPI=0xdf118b35 for inbound key with SPI=0x33b039b0 62 01:13:32.869 02/25/06 Sev=Info/4 CM/0x6310000A Secure connections terminated 63 01:13:32.869 02/25/06 Sev=Info/4 IKE/0x63000001 IKE received signal to terminate VPN connection 64 01:13:32.869 02/25/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 10.0.0.1 65 01:13:32.869 02/25/06 Sev=Info/5 IKE/0x63000018 Deleting IPsec SA: (OUTBOUND SPI = 358B11DF INBOUND SPI = B039B033) 66 01:13:32.869 02/25/06 Sev=Info/4 IKE/0x63000048 Discarding IPsec SA negotiation, MsgID=E36DDFA3 67 01:13:32.869 02/25/06 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=EA160378C262E57F R_Cookie=2CBC96686C7CE90E) reason = DEL_REASON_RESET_SADB 68 01:13:32.869 02/25/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 10.0.0.1 69 01:13:32.869 02/25/06 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=EA160378C262E57F R_Cookie=2CBC96686C7CE90E) reason = DEL_REASON_RESET_SADB 70 01:13:32.869 02/25/06 Sev=Info/4 CM/0x63100013 Phase 1 SA deleted cause by DEL_REASON_RESET_SADB. 0 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 71 01:13:32.869 02/25/06 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 72 01:13:32.869 02/25/06 Sev=Info/6 CM/0x63100031 Tunnel to headend device 10.0.0.1 disconnected: duration: 0 days 0:5:4 73 01:13:32.879 02/25/06 Sev=Warning/2 CVPND/0xA3400015 Error with call to IpHlpApi.DLL: DeleteIpForwardEntry, error 87 74 01:13:32.879 02/25/06 Sev=Warning/2 CVPND/0xA3400015 Error with call to IpHlpApi.DLL: DeleteIpForwardEntry, error 87 75 01:13:32.879 02/25/06 Sev=Info/6 CM/0x63100037 The routing table was returned to orginal state prior to Virtual Adapter 76 01:13:35.273 02/25/06 Sev=Info/4 CM/0x63100035 The Virtual Adapter was disabled 77 01:13:35.273 02/25/06 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 78 01:13:35.273 02/25/06 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0x33b039b0 79 01:13:35.273 02/25/06 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0x33b039b0 80 01:13:35.273 02/25/06 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0xdf118b35 81 01:13:35.273 02/25/06 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0xdf118b35 82 01:13:35.273 02/25/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 83 01:13:35.273 02/25/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 84 01:13:35.273 02/25/06 Sev=Info/4 IPSEC/0x6370000A IPSec driver successfully stopped 85 01:13:35.273 02/25/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys