EMC VPN Dialer Version 4.6.00.0045 Copyright (C) 1998-2004 Cisco Systems, Inc. All Rights Reserved. Client Type(s): Windows, WinNT Running on: 5.1.2600 Service Pack 2 Config file directory: C:\Program Files\EMC VPN\VPN Client 1 11:10:30.984 05/10/06 Sev=Info/4 CM/0x63100002 Begin connection process 2 11:10:30.984 05/10/06 Sev=Info/4 CM/0x63100004 Establish secure connection using Ethernet 3 11:10:30.984 05/10/06 Sev=Info/4 CM/0x63100024 Attempt connection with server "10.0.0.1" 4 11:10:30.994 05/10/06 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 10.0.0.1. 5 11:10:31.054 05/10/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Nat-T), VID(Frag), VID(Unity)) to 10.0.0.1 6 11:10:31.054 05/10/06 Sev=Info/4 IPSEC/0x63700008 IPSec driver successfully started 7 11:10:31.054 05/10/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 8 11:10:31.094 05/10/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 9 11:10:31.094 05/10/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(?), VID(Xauth), VID(Unity)) from 10.0.0.1 10 11:10:31.094 05/10/06 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 11 11:10:31.094 05/10/06 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 12 11:10:31.114 05/10/06 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 13 11:10:31.114 05/10/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 10.0.0.1 14 11:10:31.114 05/10/06 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 15 11:10:31.114 05/10/06 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 16 11:10:31.645 05/10/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 17 11:10:31.645 05/10/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 10.0.0.1 18 11:10:31.645 05/10/06 Sev=Info/4 CM/0x63100015 Launch xAuth application 19 11:10:32.666 05/10/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 20 11:10:32.666 05/10/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 21 11:10:34.689 05/10/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 22 11:10:34.689 05/10/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 23 11:10:38.705 05/10/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 24 11:10:38.705 05/10/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 25 11:10:41.479 05/10/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:HEARTBEAT) to 10.0.0.1 26 11:10:41.479 05/10/06 Sev=Info/6 IKE/0x63000052 Sent a keepalive on the IKE SA 27 11:10:46.717 05/10/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 28 11:10:46.717 05/10/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 29 11:11:01.508 05/10/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:HEARTBEAT) to 10.0.0.1 30 11:11:01.508 05/10/06 Sev=Info/6 IKE/0x63000052 Sent a keepalive on the IKE SA 31 11:11:02.740 05/10/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 32 11:11:02.740 05/10/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 33 11:11:21.537 05/10/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:HEARTBEAT) to 10.0.0.1 34 11:11:21.537 05/10/06 Sev=Info/6 IKE/0x63000052 Sent a keepalive on the IKE SA 35 11:11:23.239 05/10/06 Sev=Info/4 CM/0x63100017 xAuth application returned 36 11:11:23.239 05/10/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 10.0.0.1 37 11:11:25.843 05/10/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 38 11:11:25.843 05/10/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 10.0.0.1 39 11:11:25.843 05/10/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 10.0.0.1 40 11:11:25.843 05/10/06 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 1 User Authenticated IKE SA in the system 41 11:11:25.903 05/10/06 Sev=Info/5 IKE/0x6300005D Client sending a firewall request to concentrator 42 11:11:25.903 05/10/06 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=Cisco Systems Integrated Client, Capability= (Centralized Protection Policy). 43 11:11:25.903 05/10/06 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=NetworkICE BlackICE Defender, Capability= (Are you There?). 44 11:11:25.903 05/10/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 10.0.0.1 45 11:11:25.913 05/10/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 46 11:11:25.913 05/10/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 10.0.0.1 47 11:11:25.913 05/10/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_ADDRESS: , value = 10.24.199.63 48 11:11:25.913 05/10/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NETMASK: , value = 255.255.255.255 49 11:11:25.913 05/10/06 Sev=Info/4 CM/0x63100019 Mode Config data received 50 11:11:25.923 05/10/06 Sev=Info/4 IKE/0x63000055 Received a key request from Driver: Local IP = 10.24.199.63, GW IP = 10.0.0.1, Remote IP = 0.0.0.0 51 11:11:25.923 05/10/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH, SA, NON, ID, ID) to 10.0.0.1 52 11:11:26.053 05/10/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 53 11:11:26.474 05/10/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 54 11:11:26.474 05/10/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK QM *(HASH, SA, NON, ID, ID, NOTIFY:STATUS_RESP_LIFETIME) from 10.0.0.1 55 11:11:26.474 05/10/06 Sev=Info/5 IKE/0x63000044 RESPONDER-LIFETIME notify has value of 57600 seconds 56 11:11:26.474 05/10/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH) to 10.0.0.1 57 11:11:26.474 05/10/06 Sev=Info/5 IKE/0x63000058 Loading IPsec SA (MsgID=B78B5F5B OUTBOUND SPI = 0x161EAEAC INBOUND SPI = 0x6C5E4EA5) 58 11:11:26.474 05/10/06 Sev=Info/5 IKE/0x63000025 Loaded OUTBOUND ESP SPI: 0x161EAEAC 59 11:11:26.474 05/10/06 Sev=Info/5 IKE/0x63000026 Loaded INBOUND ESP SPI: 0x6C5E4EA5 60 11:11:27.495 05/10/06 Sev=Info/4 CM/0x63100034 The Virtual Adapter was enabled: IP=10.24.199.63/255.255.255.255 DNS=0.0.0.0,0.0.0.0 WINS=0.0.0.0,0.0.0.0 Domain= Split DNS Names= 61 11:11:27.505 05/10/06 Sev=Info/6 CM/0x63100036 The routing table was updated for the Virtual Adapter 62 11:11:27.515 05/10/06 Sev=Info/4 CM/0x6310001A One secure connection established 63 11:11:27.525 05/10/06 Sev=Info/4 CM/0x63100038 Address watch added for 10.24.199.63. Current address(es): 10.24.199.63. 64 11:11:27.525 05/10/06 Sev=Info/4 CM/0x63100038 Address watch added for 10.24.199.63. Current address(es): 10.24.199.63. 65 11:11:27.716 05/10/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 66 11:11:27.716 05/10/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK QM *(Retransmission) from 10.0.0.1 67 11:11:27.716 05/10/06 Sev=Info/4 IKE/0x63000021 Retransmitting last packet! 68 11:11:27.716 05/10/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(Retransmission) to 10.0.0.1 69 11:11:27.716 05/10/06 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 70 11:11:27.716 05/10/06 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0xacae1e16 into key list 71 11:11:27.716 05/10/06 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 72 11:11:27.716 05/10/06 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0xa54e5e6c into key list 73 11:11:27.716 05/10/06 Sev=Info/4 IPSEC/0x6370002E Assigned VA private interface addr 10.24.199.63 74 11:11:28.547 05/10/06 Sev=Info/4 IPSEC/0x63700019 Activate outbound key with SPI=0xacae1e16 for inbound key with SPI=0xa54e5e6c 75 13:45:00.822 05/10/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 10.0.0.1 76 13:45:00.822 05/10/06 Sev=Info/5 IKE/0x63000018 Deleting IPsec SA: (OUTBOUND SPI = 161EAEAC INBOUND SPI = 6C5E4EA5) 77 13:45:00.822 05/10/06 Sev=Info/4 IKE/0x63000048 Discarding IPsec SA negotiation, MsgID=B78B5F5B 78 13:45:00.822 05/10/06 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=E73FDF0EC4D92507 R_Cookie=4C463C9B152A2BD4) reason = DEL_REASON_RESET_SADB 79 13:45:00.822 05/10/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 10.0.0.1 80 13:45:00.822 05/10/06 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=E73FDF0EC4D92507 R_Cookie=4C463C9B152A2BD4) reason = DEL_REASON_RESET_SADB 81 13:45:00.822 05/10/06 Sev=Info/4 CM/0x63100013 Phase 1 SA deleted cause by DEL_REASON_RESET_SADB. 0 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 82 13:45:00.822 05/10/06 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 83 13:45:00.822 05/10/06 Sev=Info/6 CM/0x63100031 Tunnel to headend device 10.0.0.1 disconnected: duration: 0 days 2:33:33 84 13:45:00.822 05/10/06 Sev=Info/4 IKE/0x63000001 IKE received signal to terminate VPN connection 85 13:45:00.953 05/10/06 Sev=Warning/2 CVPND/0xA3400015 Error with call to IpHlpApi.DLL: DeleteIpForwardEntry, error 87 86 13:45:00.953 05/10/06 Sev=Warning/2 CVPND/0xA3400015 Error with call to IpHlpApi.DLL: DeleteIpForwardEntry, error 87 87 13:45:00.953 05/10/06 Sev=Info/6 CM/0x63100037 The routing table was returned to orginal state prior to Virtual Adapter