EMC VPN Dialer Version 4.6.00.0045 Copyright (C) 1998-2004 Cisco Systems, Inc. All Rights Reserved. Client Type(s): Windows, WinNT Running on: 5.1.2600 Service Pack 2 Config file directory: C:\Program Files\EMC VPN\VPN Client 1 16:20:37.101 09/20/06 Sev=Info/4 CM/0x63100002 Begin connection process 2 16:20:37.111 09/20/06 Sev=Warning/2 CVPND/0xA3400011 Error -14 sending packet. Dst Addr: 0xFFFFFFFF, Src Addr: 0xC0A80102 (DRVIFACE:1199). 3 16:20:37.111 09/20/06 Sev=Info/4 CM/0x63100004 Establish secure connection using Ethernet 4 16:20:37.111 09/20/06 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw3.emc.com" 5 16:20:37.131 09/20/06 Sev=Info/6 CM/0x6310002F Allocated local TCP port 4507 for TCP connection. 6 16:20:37.141 09/20/06 Sev=Info/4 IPSEC/0x63700008 IPSec driver successfully started 7 16:20:37.141 09/20/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 8 16:20:37.141 09/20/06 Sev=Info/6 IPSEC/0x6370002B Sent 14 packets, 0 were fragmented. 9 16:20:37.141 09/20/06 Sev=Info/4 IPSEC/0x6370000D Key(s) deleted by Interface (192.168.1.4) 10 16:20:37.141 09/20/06 Sev=Info/4 IPSEC/0x6370000D Key(s) deleted by Interface (10.13.32.188) 11 16:20:37.141 09/20/06 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 137.69.115.15, src port 4507, dst port 4005 12 16:20:37.760 09/20/06 Sev=Info/6 IPSEC/0x6370001C TCP SYN-ACK received from 137.69.115.15, src port 4005, dst port 4507 13 16:20:37.760 09/20/06 Sev=Info/6 IPSEC/0x63700020 TCP ACK sent to 137.69.115.15, src port 4507, dst port 4005 14 16:20:37.760 09/20/06 Sev=Info/4 CM/0x63100029 TCP connection established on port 4005 with server "usvgw3.emc.com" 15 16:20:38.260 09/20/06 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw3.emc.com" 16 16:20:38.260 09/20/06 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 137.69.115.15. 17 16:20:38.270 09/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Unity)) to 137.69.115.15 18 16:20:43.754 09/20/06 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=1F4911CA50302206 R_Cookie=0000000000000000) reason = DEL_REASON_PEER_NOT_RESPONDING 19 16:20:44.753 09/20/06 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=1F4911CA50302206 R_Cookie=0000000000000000) reason = DEL_REASON_PEER_NOT_RESPONDING 20 16:20:44.753 09/20/06 Sev=Info/4 CM/0x63100014 Unable to establish Phase 1 SA with server "usvgw3.emc.com" because of "DEL_REASON_PEER_NOT_RESPONDING" 21 16:20:44.753 09/20/06 Sev=Info/4 CM/0x63100011 Attempt connection with backup server "usvgw1.emc.com" 22 16:20:44.753 09/20/06 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw1.emc.com" 23 16:20:44.773 09/20/06 Sev=Info/4 CM/0x6310002D Resetting TCP connection on port 4005 24 16:20:44.783 09/20/06 Sev=Info/6 IPSEC/0x63700022 TCP RST sent to 137.69.115.15, src port 4507, dst port 4005 25 16:20:44.783 09/20/06 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 128.221.195.15, src port 4507, dst port 4005 26 16:20:45.752 09/20/06 Sev=Info/6 IPSEC/0x6370001C TCP SYN-ACK received from 128.221.195.15, src port 4005, dst port 4507 27 16:20:45.752 09/20/06 Sev=Info/6 IPSEC/0x63700020 TCP ACK sent to 128.221.195.15, src port 4507, dst port 4005 28 16:20:50.747 09/20/06 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 128.221.195.15, src port 4507, dst port 4005 29 16:20:56.741 09/20/06 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 128.221.195.15, src port 4507, dst port 4005 30 16:21:01.736 09/20/06 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 128.221.195.15, src port 4507, dst port 4005 31 16:21:06.731 09/20/06 Sev=Info/4 CM/0x6310002A Unable to establish TCP connection on port 4005 with server "usvgw1.emc.com" 32 16:21:06.731 09/20/06 Sev=Info/4 CM/0x6310000C All connection attempts with backup server failed 33 16:21:06.731 09/20/06 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 34 16:21:06.740 09/20/06 Sev=Info/4 CM/0x6310002D Resetting TCP connection on port 4005 35 16:21:06.740 09/20/06 Sev=Info/6 CM/0x63100030 Removed local TCP port 4507 for TCP connection. 36 16:21:06.750 09/20/06 Sev=Info/4 IKE/0x63000001 IKE received signal to terminate VPN connection 37 16:21:07.729 09/20/06 Sev=Info/6 IPSEC/0x63700022 TCP RST sent to 128.221.195.15, src port 4507, dst port 4005 38 16:21:07.729 09/20/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 39 16:21:07.729 09/20/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 40 16:21:07.729 09/20/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 41 16:21:07.729 09/20/06 Sev=Info/4 IPSEC/0x6370000A IPSec driver successfully stopped 42 16:21:24.792 09/20/06 Sev=Info/4 CM/0x63100002 Begin connection process 43 16:21:24.802 09/20/06 Sev=Info/4 CM/0x63100004 Establish secure connection using Ethernet 44 16:21:24.802 09/20/06 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw3.emc.com" 45 16:21:24.802 09/20/06 Sev=Info/6 CM/0x6310002F Allocated local TCP port 4580 for TCP connection. 46 16:21:24.812 09/20/06 Sev=Info/4 IPSEC/0x63700008 IPSec driver successfully started 47 16:21:24.812 09/20/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 48 16:21:24.812 09/20/06 Sev=Info/6 IPSEC/0x6370002B Sent 1 packets, 0 were fragmented. 49 16:21:24.812 09/20/06 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 137.69.115.15, src port 4580, dst port 4005 50 16:21:25.711 09/20/06 Sev=Info/6 IPSEC/0x6370001C TCP SYN-ACK received from 137.69.115.15, src port 4005, dst port 4580 51 16:21:25.711 09/20/06 Sev=Info/6 IPSEC/0x63700020 TCP ACK sent to 137.69.115.15, src port 4580, dst port 4005 52 16:21:25.711 09/20/06 Sev=Info/4 CM/0x63100029 TCP connection established on port 4005 with server "usvgw3.emc.com" 53 16:21:26.211 09/20/06 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw3.emc.com" 54 16:21:26.221 09/20/06 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 137.69.115.15. 55 16:21:26.231 09/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Unity)) to 137.69.115.15 56 16:21:26.400 09/20/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.15 57 16:21:26.400 09/20/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(Unity), VID(Xauth), VID(dpd), VID(Frag), VID(?), VID(?)) from 137.69.115.15 58 16:21:26.400 09/20/06 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 59 16:21:26.400 09/20/06 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 60 16:21:26.400 09/20/06 Sev=Info/5 IKE/0x63000001 Peer supports DPD 61 16:21:26.400 09/20/06 Sev=Info/5 IKE/0x63000001 Peer supports DWR Code and DWR Text 62 16:21:26.400 09/20/06 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 63 16:21:26.400 09/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 137.69.115.15 64 16:21:26.400 09/20/06 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 65 16:21:26.400 09/20/06 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 66 16:21:26.450 09/20/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.15 67 16:21:26.450 09/20/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:LOAD_BALANCE) from 137.69.115.15 68 16:21:26.450 09/20/06 Sev=Info/4 CM/0x6310001B Received alternative server address "137.69.115.17" from primary server 69 16:21:26.450 09/20/06 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=43752D8DC5D5121E R_Cookie=697B6FDD18AB13D8) reason = DEL_REASON_LOAD_BALANCING 70 16:21:26.450 09/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DWR) to 137.69.115.15 71 16:21:27.220 09/20/06 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=43752D8DC5D5121E R_Cookie=697B6FDD18AB13D8) reason = DEL_REASON_LOAD_BALANCING 72 16:21:27.220 09/20/06 Sev=Info/4 CM/0x63100014 Unable to establish Phase 1 SA with server "usvgw3.emc.com" because of "DEL_REASON_LOAD_BALANCING" 73 16:21:27.220 09/20/06 Sev=Info/4 CM/0x63100010 Try alternative server "137.69.115.17" given by the primary server 74 16:21:27.220 09/20/06 Sev=Info/4 CM/0x63100024 Attempt connection with server "137.69.115.17" 75 16:21:27.230 09/20/06 Sev=Info/4 CM/0x6310002D Resetting TCP connection on port 4005 76 16:21:28.209 09/20/06 Sev=Info/6 IPSEC/0x63700022 TCP RST sent to 137.69.115.15, src port 4580, dst port 4005 77 16:21:28.209 09/20/06 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 137.69.115.17, src port 4580, dst port 4005 78 16:21:28.209 09/20/06 Sev=Info/6 IPSEC/0x6370001C TCP SYN-ACK received from 137.69.115.17, src port 4005, dst port 4580 79 16:21:28.209 09/20/06 Sev=Info/6 IPSEC/0x63700020 TCP ACK sent to 137.69.115.17, src port 4580, dst port 4005 80 16:21:28.209 09/20/06 Sev=Info/4 CM/0x63100029 TCP connection established on port 4005 with server "137.69.115.17" 81 16:21:28.708 09/20/06 Sev=Info/4 CM/0x63100024 Attempt connection with server "137.69.115.17" 82 16:21:28.718 09/20/06 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 137.69.115.17. 83 16:21:28.728 09/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Unity)) to 137.69.115.17 84 16:21:28.888 09/20/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 85 16:21:28.888 09/20/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(Unity), VID(Xauth), VID(dpd), VID(Frag), VID(?), VID(?)) from 137.69.115.17 86 16:21:28.888 09/20/06 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 87 16:21:28.888 09/20/06 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 88 16:21:28.888 09/20/06 Sev=Info/5 IKE/0x63000001 Peer supports DPD 89 16:21:28.888 09/20/06 Sev=Info/5 IKE/0x63000001 Peer supports DWR Code and DWR Text 90 16:21:28.898 09/20/06 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 91 16:21:28.898 09/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 137.69.115.17 92 16:21:28.898 09/20/06 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 93 16:21:28.898 09/20/06 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 94 16:21:28.928 09/20/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 95 16:21:28.928 09/20/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 137.69.115.17 96 16:21:28.928 09/20/06 Sev=Info/4 CM/0x63100015 Launch xAuth application 97 16:21:34.572 09/20/06 Sev=Info/4 CM/0x63100017 xAuth application returned 98 16:21:34.572 09/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 137.69.115.17 99 16:21:37.269 09/20/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 100 16:21:37.269 09/20/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 137.69.115.17 101 16:21:37.269 09/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 137.69.115.17 102 16:21:37.269 09/20/06 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 1 User Authenticated IKE SA in the system 103 16:21:37.299 09/20/06 Sev=Info/5 IKE/0x6300005D Client sending a firewall request to concentrator 104 16:21:37.299 09/20/06 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=Cisco Systems Integrated Client, Capability= (Centralized Protection Policy). 105 16:21:37.299 09/20/06 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=NetworkICE BlackICE Defender, Capability= (Are you There?). 106 16:21:37.299 09/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 137.69.115.17 107 16:21:38.268 09/20/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 108 16:21:38.268 09/20/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 137.69.115.17 109 16:21:38.268 09/20/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_ADDRESS: , value = 10.13.32.161 110 16:21:38.268 09/20/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NETMASK: , value = 255.255.192.0 111 16:21:38.268 09/20/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_DNS(1): , value = 137.69.224.15 112 16:21:38.268 09/20/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_DNS(2): , value = 128.221.12.10 113 16:21:38.268 09/20/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NBNS(1) (a.k.a. WINS) : , value = 128.221.12.10 114 16:21:38.268 09/20/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NBNS(2) (a.k.a. WINS) : , value = 128.222.67.10 115 16:21:38.268 09/20/06 Sev=Info/5 IKE/0x6300000E MODE_CFG_REPLY: Attribute = MODECFG_UNITY_BANNER, value = ************** EMC Americas West Coast VPN Gateway ************** ATTENTION!!! If you are running a VPN Client version other than 4.6, you must upgrade as soon as possible. Check the title bar of your VPN Dialer application. If it does not start with VPN Dialer-Version 4.6, disconnect from VPN now and visit http://vpndist.emc.com. Download and install "DTP3.6-VPN4.6.EXE". 116 16:21:38.268 09/20/06 Sev=Info/5 IKE/0x6300000D MODE_CFG_REPLY: Attribute = MODECFG_UNITY_SAVEPWD: , value = 0x00000000 117 16:21:38.268 09/20/06 Sev=Info/5 IKE/0x6300000E MODE_CFG_REPLY: Attribute = MODECFG_UNITY_DEFDOMAIN: , value = corp.emc.com 118 16:21:38.268 09/20/06 Sev=Info/5 IKE/0x6300000D MODE_CFG_REPLY: Attribute = MODECFG_UNITY_PFS: , value = 0x00000000 119 16:21:38.268 09/20/06 Sev=Info/5 IKE/0x6300000E MODE_CFG_REPLY: Attribute = APPLICATION_VERSION, value = Cisco Systems, Inc./VPN 3000 Concentrator Version 4.7.2.B built by vmurphy on Oct 04 2005 02:50:52 120 16:21:38.268 09/20/06 Sev=Info/5 IKE/0x6300000D MODE_CFG_REPLY: Attribute = MODECFG_UNITY_INCLUDE_LOCAL_LAN (# of local_nets), value = 0x00000001 121 16:21:38.268 09/20/06 Sev=Info/5 IKE/0x6300000F LOCAL_NET #1 subnet = 192.168.1.0 mask = 255.255.255.0 protocol = 0 src port = 0 dest port=0 122 16:21:38.268 09/20/06 Sev=Info/4 CM/0x63100019 Mode Config data received 123 16:21:38.278 09/20/06 Sev=Info/4 IKE/0x63000055 Received a key request from Driver: Local IP = 10.13.32.161, GW IP = 137.69.115.17, Remote IP = 0.0.0.0 124 16:21:38.278 09/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH, SA, NON, ID, ID) to 137.69.115.17 125 16:21:38.378 09/20/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 126 16:21:38.378 09/20/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:STATUS_RESP_LIFETIME) from 137.69.115.17 127 16:21:38.378 09/20/06 Sev=Info/5 IKE/0x63000044 RESPONDER-LIFETIME notify has value of 86400 seconds 128 16:21:38.378 09/20/06 Sev=Info/5 IKE/0x63000046 This SA has already been alive for 10 seconds, setting expiry to 86390 seconds from now 129 16:21:38.378 09/20/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 130 16:21:38.378 09/20/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK QM *(HASH, SA, NON, ID, ID, NOTIFY:STATUS_RESP_LIFETIME) from 137.69.115.17 131 16:21:38.378 09/20/06 Sev=Info/5 IKE/0x63000044 RESPONDER-LIFETIME notify has value of 28800 seconds 132 16:21:38.378 09/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH) to 137.69.115.17 133 16:21:38.378 09/20/06 Sev=Info/5 IKE/0x63000058 Loading IPsec SA (MsgID=D1996D7D OUTBOUND SPI = 0x33435BF5 INBOUND SPI = 0xD54B3B22) 134 16:21:38.378 09/20/06 Sev=Info/5 IKE/0x63000025 Loaded OUTBOUND ESP SPI: 0x33435BF5 135 16:21:38.378 09/20/06 Sev=Info/5 IKE/0x63000026 Loaded INBOUND ESP SPI: 0xD54B3B22 136 16:21:39.008 09/20/06 Sev=Info/4 CM/0x63100034 The Virtual Adapter was enabled: IP=10.13.32.161/255.255.192.0 DNS=137.69.224.15,128.221.12.10 WINS=128.221.12.10,128.222.67.10 Domain=corp.emc.com Split DNS Names= 137 16:21:39.038 09/20/06 Sev=Info/6 CM/0x63100036 The routing table was updated for the Virtual Adapter 138 16:21:39.088 09/20/06 Sev=Info/4 CM/0x6310001A One secure connection established 139 16:21:39.188 09/20/06 Sev=Info/4 CM/0x63100038 Address watch added for 192.168.1.2. Current address(es): 192.168.1.2, 10.13.32.161. 140 16:21:39.198 09/20/06 Sev=Info/4 CM/0x63100038 Address watch added for 10.13.32.161. Current address(es): 192.168.1.2, 10.13.32.161. 141 16:21:39.248 09/20/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 142 16:21:39.248 09/20/06 Sev=Info/6 IPSEC/0x6370002B Sent 8 packets, 0 were fragmented. 143 16:21:39.248 09/20/06 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 144 16:21:39.248 09/20/06 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0xf55b4333 into key list 145 16:21:39.248 09/20/06 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 146 16:21:39.248 09/20/06 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0x223b4bd5 into key list 147 16:21:39.248 09/20/06 Sev=Warning/2 IPSEC/0xE3700003 Function CniInjectSend() failed with an error code of 0xe4510002 (IPSecDrvCB:824) 148 16:21:39.248 09/20/06 Sev=Warning/2 IPSEC/0xE3700003 Function CniInjectSend() failed with an error code of 0xe4510002 (IPSecDrvCB:824) 149 16:21:39.248 09/20/06 Sev=Info/4 IPSEC/0x6370002E Assigned VA private interface addr 10.13.32.161 150 16:21:40.199 09/20/06 Sev=Info/4 IPSEC/0x63700019 Activate outbound key with SPI=0xf55b4333 for inbound key with SPI=0x223b4bd5 151 16:25:53.584 09/20/06 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.17, seq# = 3279259664 152 16:25:53.584 09/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.17 153 16:25:53.654 09/20/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 154 16:25:53.654 09/20/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.17 155 16:25:53.654 09/20/06 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.17, seq# received = 3279259665, seq# expected = 3279259665 156 16:26:04.089 09/20/06 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.17, seq# = 3279259665 157 16:26:04.089 09/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.17 158 16:26:04.139 09/20/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 159 16:26:04.139 09/20/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.17 160 16:26:04.139 09/20/06 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.17, seq# received = 3279259666, seq# expected = 3279259666 161 16:26:29.625 09/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 4580, dst port 4005 162 16:31:30.057 09/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 4580, dst port 4005 163 16:36:16.970 09/20/06 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.17, seq# = 3279259666 164 16:36:16.970 09/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.17 165 16:36:21.977 09/20/06 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.17, seq# = 3279259667 166 16:36:21.977 09/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.17 167 16:36:22.007 09/20/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 168 16:36:22.007 09/20/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.17 169 16:36:22.007 09/20/06 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.17, seq# received = 3279259668, seq# expected = 3279259668 170 16:36:29.999 09/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 4580, dst port 4005 171 16:41:30.931 09/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 4580, dst port 4005 172 16:46:31.353 09/20/06 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.17, src port 4580, dst port 4005 173 16:46:42.870 09/20/06 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.17, seq# = 3279259668 174 16:46:42.870 09/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.17 175 16:46:42.910 09/20/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 176 16:46:42.910 09/20/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.17 177 16:46:42.910 09/20/06 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.17, seq# received = 3279259669, seq# expected = 3279259669 178 16:46:53.886 09/20/06 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.17, seq# = 3279259669 179 16:46:53.886 09/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.17 180 16:46:53.916 09/20/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 181 16:46:53.916 09/20/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.17 182 16:46:53.916 09/20/06 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.17, seq# received = 3279259670, seq# expected = 3279259670 183 16:49:23.040 09/20/06 Sev=Info/4 CM/0x6310000A Secure connections terminated 184 16:49:23.040 09/20/06 Sev=Info/4 IKE/0x63000001 IKE received signal to terminate VPN connection 185 16:49:23.040 09/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 137.69.115.17 186 16:49:23.040 09/20/06 Sev=Info/5 IKE/0x63000018 Deleting IPsec SA: (OUTBOUND SPI = 33435BF5 INBOUND SPI = D54B3B22) 187 16:49:23.040 09/20/06 Sev=Info/4 IKE/0x63000048 Discarding IPsec SA negotiation, MsgID=D1996D7D 188 16:49:23.040 09/20/06 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=86EE9B219E267861 R_Cookie=6D0D335E4FC245B4) reason = DEL_REASON_RESET_SADB 189 16:49:23.040 09/20/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DWR) to 137.69.115.17 190 16:49:23.040 09/20/06 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=86EE9B219E267861 R_Cookie=6D0D335E4FC245B4) reason = DEL_REASON_RESET_SADB 191 16:49:23.040 09/20/06 Sev=Info/4 CM/0x63100013 Phase 1 SA deleted cause by DEL_REASON_RESET_SADB. 0 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 192 16:49:23.040 09/20/06 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 193 16:49:23.040 09/20/06 Sev=Info/4 CM/0x6310002D Resetting TCP connection on port 4005 194 16:49:23.040 09/20/06 Sev=Info/6 CM/0x63100030 Removed local TCP port 4580 for TCP connection. 195 16:49:23.040 09/20/06 Sev=Info/6 CM/0x63100031 Tunnel to headend device 137.69.115.17 disconnected: duration: 0 days 0:27:44 196 16:49:23.050 09/20/06 Sev=Info/6 CM/0x63100037 The routing table was returned to orginal state prior to Virtual Adapter 197 16:49:25.504 09/20/06 Sev=Info/4 CM/0x63100035 The Virtual Adapter was disabled 198 16:49:25.514 09/20/06 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 199 16:49:25.554 09/20/06 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0x223b4bd5 200 16:49:25.554 09/20/06 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0x223b4bd5 201 16:49:25.554 09/20/06 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0xf55b4333 202 16:49:25.554 09/20/06 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0xf55b4333 203 16:49:25.554 09/20/06 Sev=Info/6 IPSEC/0x63700022 TCP RST sent to 137.69.115.17, src port 4580, dst port 4005 204 16:49:25.554 09/20/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 205 16:49:25.554 09/20/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 206 16:49:25.554 09/20/06 Sev=Info/4 IPSEC/0x6370000A IPSec driver successfully stopped 207 16:49:25.554 09/20/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys