EMC VPN Dialer Version 4.6.00.0045 Copyright (C) 1998-2004 Cisco Systems, Inc. All Rights Reserved. Client Type(s): Windows, WinNT Running on: 5.1.2600 Service Pack 2 Config file directory: C:\Program Files\EMC VPN\VPN Client 1 15:00:42.422 10/09/06 Sev=Info/4 CM/0x63100002 Begin connection process 2 15:00:42.452 10/09/06 Sev=Info/4 CM/0x63100004 Establish secure connection using Ethernet 3 15:00:42.452 10/09/06 Sev=Info/4 CM/0x63100024 Attempt connection with server "10.0.0.1" 4 15:00:42.462 10/09/06 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 10.0.0.1. 5 15:00:42.482 10/09/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Nat-T), VID(Frag), VID(Unity)) to 10.0.0.1 6 15:00:42.512 10/09/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 7 15:00:42.512 10/09/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(?), VID(Xauth), VID(Unity)) from 10.0.0.1 8 15:00:42.512 10/09/06 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 9 15:00:42.512 10/09/06 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 10 15:00:42.522 10/09/06 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 11 15:00:42.522 10/09/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 10.0.0.1 12 15:00:42.522 10/09/06 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 13 15:00:42.522 10/09/06 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 14 15:00:42.572 10/09/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 15 15:00:42.572 10/09/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 10.0.0.1 16 15:00:42.572 10/09/06 Sev=Info/4 CM/0x63100015 Launch xAuth application 17 15:00:42.803 10/09/06 Sev=Info/4 IPSEC/0x63700008 IPSec driver successfully started 18 15:00:42.803 10/09/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 19 15:00:43.093 10/09/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 20 15:00:43.093 10/09/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 21 15:00:44.104 10/09/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 22 15:00:44.104 10/09/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 23 15:00:46.117 10/09/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 24 15:00:46.117 10/09/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 25 15:00:50.123 10/09/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 26 15:00:50.123 10/09/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 27 15:00:52.817 10/09/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:HEARTBEAT) to 10.0.0.1 28 15:00:52.817 10/09/06 Sev=Info/6 IKE/0x63000052 Sent a keepalive on the IKE SA 29 15:00:58.135 10/09/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 30 15:00:58.135 10/09/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 31 15:01:03.522 10/09/06 Sev=Info/4 CM/0x63100017 xAuth application returned 32 15:01:03.522 10/09/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 10.0.0.1 33 15:01:12.846 10/09/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:HEARTBEAT) to 10.0.0.1 34 15:01:12.846 10/09/06 Sev=Info/6 IKE/0x63000052 Sent a keepalive on the IKE SA 35 15:01:14.608 10/09/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 36 15:01:14.608 10/09/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 10.0.0.1 37 15:01:14.608 10/09/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 10.0.0.1 38 15:01:14.608 10/09/06 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 1 User Authenticated IKE SA in the system 39 15:01:14.668 10/09/06 Sev=Info/5 IKE/0x6300005D Client sending a firewall request to concentrator 40 15:01:14.668 10/09/06 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=Cisco Systems Integrated Client, Capability= (Centralized Protection Policy). 41 15:01:14.668 10/09/06 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=NetworkICE BlackICE Defender, Capability= (Are you There?). 42 15:01:14.668 10/09/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 10.0.0.1 43 15:01:14.709 10/09/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 44 15:01:14.709 10/09/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 10.0.0.1 45 15:01:14.709 10/09/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_ADDRESS: , value = 10.24.198.79 46 15:01:14.709 10/09/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NETMASK: , value = 255.255.255.255 47 15:01:14.709 10/09/06 Sev=Info/4 CM/0x63100019 Mode Config data received 48 15:01:14.709 10/09/06 Sev=Info/4 IKE/0x63000055 Received a key request from Driver: Local IP = 10.24.198.79, GW IP = 10.0.0.1, Remote IP = 0.0.0.0 49 15:01:14.709 10/09/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH, SA, NON, ID, ID) to 10.0.0.1 50 15:01:14.739 10/09/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 51 15:01:14.739 10/09/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK QM *(HASH, SA, NON, ID, ID, NOTIFY:STATUS_RESP_LIFETIME) from 10.0.0.1 52 15:01:14.739 10/09/06 Sev=Info/5 IKE/0x63000044 RESPONDER-LIFETIME notify has value of 57600 seconds 53 15:01:14.739 10/09/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH) to 10.0.0.1 54 15:01:14.739 10/09/06 Sev=Info/5 IKE/0x63000058 Loading IPsec SA (MsgID=ED34BBD2 OUTBOUND SPI = 0xC3609715 INBOUND SPI = 0x4E67E2CE) 55 15:01:14.739 10/09/06 Sev=Info/5 IKE/0x63000025 Loaded OUTBOUND ESP SPI: 0xC3609715 56 15:01:14.739 10/09/06 Sev=Info/5 IKE/0x63000026 Loaded INBOUND ESP SPI: 0x4E67E2CE 57 15:01:16.942 10/09/06 Sev=Info/4 CM/0x63100034 The Virtual Adapter was enabled: IP=10.24.198.79/255.255.255.255 DNS=0.0.0.0,0.0.0.0 WINS=0.0.0.0,0.0.0.0 Domain= Split DNS Names= 58 15:01:16.962 10/09/06 Sev=Info/6 CM/0x63100036 The routing table was updated for the Virtual Adapter 59 15:01:16.982 10/09/06 Sev=Info/4 CM/0x6310001A One secure connection established 60 15:01:16.992 10/09/06 Sev=Info/4 CM/0x63100038 Address watch added for 10.24.198.79. Current address(es): 10.24.198.79. 61 15:01:16.992 10/09/06 Sev=Info/4 CM/0x63100038 Address watch added for 10.24.198.79. Current address(es): 10.24.198.79. 62 15:01:17.202 10/09/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 63 15:01:17.202 10/09/06 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 64 15:01:17.202 10/09/06 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0x159760c3 into key list 65 15:01:17.202 10/09/06 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 66 15:01:17.202 10/09/06 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0xcee2674e into key list 67 15:01:17.202 10/09/06 Sev=Info/4 IPSEC/0x6370002E Assigned VA private interface addr 10.24.198.79 68 15:01:18.354 10/09/06 Sev=Info/4 IPSEC/0x63700019 Activate outbound key with SPI=0x159760c3 for inbound key with SPI=0xcee2674e 69 15:08:27.861 10/09/06 Sev=Info/4 CM/0x6310000A Secure connections terminated 70 15:08:27.861 10/09/06 Sev=Info/4 IKE/0x63000001 IKE received signal to terminate VPN connection 71 15:08:27.861 10/09/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 10.0.0.1 72 15:08:27.861 10/09/06 Sev=Info/5 IKE/0x63000018 Deleting IPsec SA: (OUTBOUND SPI = C3609715 INBOUND SPI = 4E67E2CE) 73 15:08:27.861 10/09/06 Sev=Info/4 IKE/0x63000048 Discarding IPsec SA negotiation, MsgID=ED34BBD2 74 15:08:27.861 10/09/06 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=DCF365B52FC7096F R_Cookie=44BD9DE68E16503B) reason = DEL_REASON_RESET_SADB 75 15:08:27.861 10/09/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 10.0.0.1 76 15:08:27.861 10/09/06 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=DCF365B52FC7096F R_Cookie=44BD9DE68E16503B) reason = DEL_REASON_RESET_SADB 77 15:08:27.861 10/09/06 Sev=Info/4 CM/0x63100013 Phase 1 SA deleted cause by DEL_REASON_RESET_SADB. 0 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 78 15:08:27.871 10/09/06 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 79 15:08:27.871 10/09/06 Sev=Info/6 CM/0x63100031 Tunnel to headend device 10.0.0.1 disconnected: duration: 0 days 0:7:11 80 15:08:27.871 10/09/06 Sev=Warning/2 CVPND/0xA3400015 Error with call to IpHlpApi.DLL: DeleteIpForwardEntry, error 87 81 15:08:27.871 10/09/06 Sev=Warning/2 CVPND/0xA3400015 Error with call to IpHlpApi.DLL: DeleteIpForwardEntry, error 87 82 15:08:27.881 10/09/06 Sev=Info/6 CM/0x63100037 The routing table was returned to orginal state prior to Virtual Adapter 83 15:08:30.285 10/09/06 Sev=Info/4 CM/0x63100035 The Virtual Adapter was disabled 84 15:08:30.285 10/09/06 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 85 15:08:30.315 10/09/06 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0xcee2674e 86 15:08:30.315 10/09/06 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0xcee2674e 87 15:08:30.315 10/09/06 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0x159760c3 88 15:08:30.315 10/09/06 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0x159760c3 89 15:08:30.315 10/09/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 90 15:08:30.315 10/09/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 91 15:08:30.315 10/09/06 Sev=Info/4 IPSEC/0x6370000A IPSec driver successfully stopped 92 15:08:30.315 10/09/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 93 15:08:35.562 10/09/06 Sev=Info/4 CM/0x63100002 Begin connection process 94 15:08:35.572 10/09/06 Sev=Info/4 CM/0x63100004 Establish secure connection using Ethernet 95 15:08:35.572 10/09/06 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw3.emc.com" 96 15:08:57.364 10/09/06 Sev=Info/4 CM/0x6310001D Unable to resolve server address "usvgw3.emc.com" 97 15:08:57.364 10/09/06 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw1.emc.com" 98 15:09:23.652 10/09/06 Sev=Info/4 CM/0x6310001D Unable to resolve server address "usvgw1.emc.com" 99 15:09:23.652 10/09/06 Sev=Info/4 CM/0x6310000C All connection attempts with backup server failed 100 15:09:23.652 10/09/06 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 101 15:09:23.652 10/09/06 Sev=Info/4 IPSEC/0x63700008 IPSec driver successfully started 102 15:09:23.652 10/09/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 103 15:09:23.652 10/09/06 Sev=Info/6 IPSEC/0x6370002B Sent 268 packets, 0 were fragmented. 104 15:09:23.652 10/09/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 105 15:09:23.652 10/09/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 106 15:09:23.652 10/09/06 Sev=Info/4 IPSEC/0x6370000A IPSec driver successfully stopped