EMC VPN Dialer Version 4.6.00.0045 Copyright (C) 1998-2004 Cisco Systems, Inc. All Rights Reserved. Client Type(s): Windows, WinNT Running on: 5.1.2600 Service Pack 2 Config file directory: C:\Program Files\EMC VPN\VPN Client 1 14:28:15.046 10/30/06 Sev=Info/4 CM/0x63100002 Begin connection process 2 14:28:15.056 10/30/06 Sev=Info/4 CM/0x63100004 Establish secure connection using Ethernet 3 14:28:15.056 10/30/06 Sev=Info/4 CM/0x63100024 Attempt connection with server "10.0.0.1" 4 14:28:15.056 10/30/06 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 10.0.0.1. 5 14:28:15.066 10/30/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Nat-T), VID(Frag), VID(Unity)) to 10.0.0.1 6 14:28:15.106 10/30/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 7 14:28:15.106 10/30/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(?), VID(Xauth), VID(Unity)) from 10.0.0.1 8 14:28:15.106 10/30/06 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 9 14:28:15.106 10/30/06 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 10 14:28:15.116 10/30/06 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 11 14:28:15.116 10/30/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 10.0.0.1 12 14:28:15.116 10/30/06 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 13 14:28:15.116 10/30/06 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 14 14:28:15.176 10/30/06 Sev=Info/4 IPSEC/0x63700008 IPSec driver successfully started 15 14:28:15.176 10/30/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 16 14:28:15.176 10/30/06 Sev=Info/4 IPSEC/0x6370000D Key(s) deleted by Interface (137.69.48.162) 17 14:28:15.176 10/30/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 18 14:28:15.176 10/30/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 10.0.0.1 19 14:28:15.176 10/30/06 Sev=Info/4 CM/0x63100015 Launch xAuth application 20 14:28:15.667 10/30/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 21 14:28:15.667 10/30/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 22 14:28:16.688 10/30/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 23 14:28:16.688 10/30/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 24 14:28:18.711 10/30/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 25 14:28:18.711 10/30/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 26 14:28:22.717 10/30/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 27 14:28:22.717 10/30/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 28 14:28:25.190 10/30/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:HEARTBEAT) to 10.0.0.1 29 14:28:25.190 10/30/06 Sev=Info/6 IKE/0x63000052 Sent a keepalive on the IKE SA 30 14:28:30.638 10/30/06 Sev=Info/4 CM/0x63100017 xAuth application returned 31 14:28:30.638 10/30/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 10.0.0.1 32 14:28:32.751 10/30/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 33 14:28:32.751 10/30/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 10.0.0.1 34 14:28:32.751 10/30/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 10.0.0.1 35 14:28:32.751 10/30/06 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 1 User Authenticated IKE SA in the system 36 14:28:32.791 10/30/06 Sev=Info/5 IKE/0x6300005D Client sending a firewall request to concentrator 37 14:28:32.791 10/30/06 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=Cisco Systems Integrated Client, Capability= (Centralized Protection Policy). 38 14:28:32.791 10/30/06 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=NetworkICE BlackICE Defender, Capability= (Are you There?). 39 14:28:32.801 10/30/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 10.0.0.1 40 14:28:32.821 10/30/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 41 14:28:32.821 10/30/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 10.0.0.1 42 14:28:32.821 10/30/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_ADDRESS: , value = 10.24.200.43 43 14:28:32.821 10/30/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NETMASK: , value = 255.255.255.255 44 14:28:32.821 10/30/06 Sev=Info/4 CM/0x63100019 Mode Config data received 45 14:28:32.821 10/30/06 Sev=Info/4 IKE/0x63000055 Received a key request from Driver: Local IP = 10.24.200.43, GW IP = 10.0.0.1, Remote IP = 0.0.0.0 46 14:28:32.821 10/30/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH, SA, NON, ID, ID) to 10.0.0.1 47 14:28:32.851 10/30/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 48 14:28:32.851 10/30/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK QM *(HASH, SA, NON, ID, ID, NOTIFY:STATUS_RESP_LIFETIME) from 10.0.0.1 49 14:28:32.851 10/30/06 Sev=Info/5 IKE/0x63000044 RESPONDER-LIFETIME notify has value of 57600 seconds 50 14:28:32.851 10/30/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH) to 10.0.0.1 51 14:28:32.851 10/30/06 Sev=Info/5 IKE/0x63000058 Loading IPsec SA (MsgID=854CB520 OUTBOUND SPI = 0x79489E19 INBOUND SPI = 0x818E5701) 52 14:28:32.851 10/30/06 Sev=Info/5 IKE/0x63000025 Loaded OUTBOUND ESP SPI: 0x79489E19 53 14:28:32.851 10/30/06 Sev=Info/5 IKE/0x63000026 Loaded INBOUND ESP SPI: 0x818E5701 54 14:28:33.422 10/30/06 Sev=Info/4 CM/0x63100034 The Virtual Adapter was enabled: IP=10.24.200.43/255.255.255.255 DNS=0.0.0.0,0.0.0.0 WINS=0.0.0.0,0.0.0.0 Domain= Split DNS Names= 55 14:28:33.432 10/30/06 Sev=Info/6 CM/0x63100036 The routing table was updated for the Virtual Adapter 56 14:28:33.462 10/30/06 Sev=Info/4 CM/0x6310001A One secure connection established 57 14:28:33.472 10/30/06 Sev=Info/4 CM/0x63100038 Address watch added for 10.24.200.43. Current address(es): 10.24.200.43. 58 14:28:33.472 10/30/06 Sev=Info/4 CM/0x63100038 Address watch added for 10.24.200.43. Current address(es): 10.24.200.43. 59 14:28:33.632 10/30/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 60 14:28:33.632 10/30/06 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 61 14:28:33.632 10/30/06 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0x199e4879 into key list 62 14:28:33.632 10/30/06 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 63 14:28:33.632 10/30/06 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0x01578e81 into key list 64 14:28:33.632 10/30/06 Sev=Info/4 IPSEC/0x6370002E Assigned VA private interface addr 10.24.200.43 65 14:28:34.704 10/30/06 Sev=Info/4 IPSEC/0x63700019 Activate outbound key with SPI=0x199e4879 for inbound key with SPI=0x01578e81 66 14:35:53.395 10/30/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 10.0.0.1 67 14:35:53.395 10/30/06 Sev=Info/5 IKE/0x63000018 Deleting IPsec SA: (OUTBOUND SPI = 79489E19 INBOUND SPI = 818E5701) 68 14:35:53.395 10/30/06 Sev=Info/4 IKE/0x63000048 Discarding IPsec SA negotiation, MsgID=854CB520 69 14:35:53.395 10/30/06 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=B83E4479A2FED81A R_Cookie=7424E26F876E847F) reason = DEL_REASON_RESET_SADB 70 14:35:53.395 10/30/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 10.0.0.1 71 14:35:53.395 10/30/06 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=B83E4479A2FED81A R_Cookie=7424E26F876E847F) reason = DEL_REASON_RESET_SADB 72 14:35:53.395 10/30/06 Sev=Info/4 CM/0x63100013 Phase 1 SA deleted cause by DEL_REASON_RESET_SADB. 0 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 73 14:35:53.395 10/30/06 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 74 14:35:53.395 10/30/06 Sev=Info/6 CM/0x63100031 Tunnel to headend device 10.0.0.1 disconnected: duration: 0 days 0:7:20 75 14:35:53.395 10/30/06 Sev=Info/4 IKE/0x63000001 IKE received signal to terminate VPN connection 76 14:35:53.415 10/30/06 Sev=Warning/2 CVPND/0xA3400015 Error with call to IpHlpApi.DLL: DeleteIpForwardEntry, error 87 77 14:35:53.415 10/30/06 Sev=Warning/2 CVPND/0xA3400015 Error with call to IpHlpApi.DLL: DeleteIpForwardEntry, error 87 78 14:35:53.425 10/30/06 Sev=Info/6 CM/0x63100037 The routing table was returned to orginal state prior to Virtual Adapter 79 14:36:40.753 10/30/06 Sev=Critical/1 FIREWALL/0xE3A00003 Fatal error trying to start the firewall. The firewall has not been started. 80 14:36:43.126 10/30/06 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0x01578e81 81 14:36:43.126 10/30/06 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0x01578e81 82 14:36:43.126 10/30/06 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0x199e4879 83 14:36:43.126 10/30/06 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0x199e4879 84 14:36:43.126 10/30/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 85 14:36:43.126 10/30/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 86 14:36:43.126 10/30/06 Sev=Info/4 IPSEC/0x6370000A IPSec driver successfully stopped 87 14:36:43.126 10/30/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys