EMC VPN Dialer Version 4.6.00.0045 Copyright (C) 1998-2004 Cisco Systems, Inc. All Rights Reserved. Client Type(s): Windows, WinNT Running on: 5.1.2600 Service Pack 2 Config file directory: C:\Program Files\EMC VPN\VPN Client 1 10:12:49.720 11/30/06 Sev=Info/4 CM/0x63100002 Begin connection process 2 10:12:49.800 11/30/06 Sev=Info/4 CM/0x63100004 Establish secure connection using Ethernet 3 10:12:49.800 11/30/06 Sev=Info/4 CM/0x63100024 Attempt connection with server "10.0.0.1" 4 10:12:49.810 11/30/06 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 10.0.0.1. 5 10:12:49.850 11/30/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Nat-T), VID(Frag), VID(Unity)) to 10.0.0.1 6 10:12:49.881 11/30/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 7 10:12:49.881 11/30/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(?), VID(Xauth), VID(Unity)) from 10.0.0.1 8 10:12:49.881 11/30/06 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 9 10:12:49.881 11/30/06 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 10 10:12:49.891 11/30/06 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 11 10:12:49.891 11/30/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 10.0.0.1 12 10:12:49.891 11/30/06 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 13 10:12:49.891 11/30/06 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 14 10:12:49.911 11/30/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 15 10:12:49.911 11/30/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 10.0.0.1 16 10:12:49.911 11/30/06 Sev=Info/4 CM/0x63100015 Launch xAuth application 17 10:12:50.071 11/30/06 Sev=Info/4 IPSEC/0x63700008 IPSec driver successfully started 18 10:12:50.071 11/30/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 19 10:12:50.421 11/30/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 20 10:12:50.421 11/30/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 21 10:12:51.433 11/30/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 22 10:12:51.433 11/30/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 23 10:12:53.446 11/30/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 24 10:12:53.446 11/30/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 25 10:12:57.461 11/30/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 26 10:12:57.461 11/30/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 27 10:12:58.132 11/30/06 Sev=Info/4 CM/0x63100017 xAuth application returned 28 10:12:58.132 11/30/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 10.0.0.1 29 10:13:00.085 11/30/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:HEARTBEAT) to 10.0.0.1 30 10:13:00.085 11/30/06 Sev=Info/6 IKE/0x63000052 Sent a keepalive on the IKE SA 31 10:13:03.320 11/30/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 32 10:13:03.320 11/30/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 10.0.0.1 33 10:13:03.320 11/30/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 10.0.0.1 34 10:13:03.320 11/30/06 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=D2B5D33450F2EA4D R_Cookie=6D1EA7544BE123FF) reason = DEL_REASON_WE_FAILED_AUTH 35 10:13:03.320 11/30/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 10.0.0.1 36 10:13:03.350 11/30/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 37 10:13:03.350 11/30/06 Sev=Info/4 IKE/0x63000057 Received an ISAKMP message for a non-active SA, I_Cookie=D2B5D33450F2EA4D R_Cookie=6D1EA7544BE123FF 38 10:13:03.350 11/30/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(Dropped) from 10.0.0.1 39 10:13:04.091 11/30/06 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=D2B5D33450F2EA4D R_Cookie=6D1EA7544BE123FF) reason = DEL_REASON_WE_FAILED_AUTH 40 10:13:04.091 11/30/06 Sev=Info/4 CM/0x63100014 Unable to establish Phase 1 SA with server "10.0.0.1" because of "DEL_REASON_WE_FAILED_AUTH" 41 10:13:04.091 11/30/06 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 42 10:13:04.091 11/30/06 Sev=Info/4 IKE/0x63000001 IKE received signal to terminate VPN connection 43 10:13:04.101 11/30/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 44 10:13:04.101 11/30/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 45 10:13:04.101 11/30/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 46 10:13:04.101 11/30/06 Sev=Info/4 IPSEC/0x6370000A IPSec driver successfully stopped 47 10:13:08.027 11/30/06 Sev=Info/4 CM/0x63100002 Begin connection process 48 10:13:08.047 11/30/06 Sev=Info/4 CM/0x63100004 Establish secure connection using Ethernet 49 10:13:08.047 11/30/06 Sev=Info/4 CM/0x63100024 Attempt connection with server "10.0.0.1" 50 10:13:08.047 11/30/06 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 10.0.0.1. 51 10:13:08.057 11/30/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Nat-T), VID(Frag), VID(Unity)) to 10.0.0.1 52 10:13:08.087 11/30/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 53 10:13:08.087 11/30/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(?), VID(Xauth), VID(Unity)) from 10.0.0.1 54 10:13:08.087 11/30/06 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 55 10:13:08.087 11/30/06 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 56 10:13:08.097 11/30/06 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 57 10:13:08.097 11/30/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 10.0.0.1 58 10:13:08.097 11/30/06 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 59 10:13:08.097 11/30/06 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 60 10:13:08.097 11/30/06 Sev=Info/4 IPSEC/0x63700008 IPSec driver successfully started 61 10:13:08.097 11/30/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 62 10:13:08.117 11/30/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 63 10:13:08.117 11/30/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 10.0.0.1 64 10:13:08.117 11/30/06 Sev=Info/4 CM/0x63100015 Launch xAuth application 65 10:13:08.627 11/30/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 66 10:13:08.627 11/30/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 67 10:13:09.649 11/30/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 68 10:13:09.649 11/30/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 69 10:13:11.662 11/30/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 70 10:13:11.662 11/30/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 71 10:13:15.678 11/30/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 72 10:13:15.678 11/30/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 73 10:13:17.590 11/30/06 Sev=Info/4 CM/0x63100017 xAuth application returned 74 10:13:17.590 11/30/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 10.0.0.1 75 10:13:18.111 11/30/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:HEARTBEAT) to 10.0.0.1 76 10:13:18.111 11/30/06 Sev=Info/6 IKE/0x63000052 Sent a keepalive on the IKE SA 77 10:13:19.693 11/30/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 78 10:13:19.693 11/30/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 10.0.0.1 79 10:13:19.693 11/30/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 10.0.0.1 80 10:13:19.693 11/30/06 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 1 User Authenticated IKE SA in the system 81 10:13:19.774 11/30/06 Sev=Info/5 IKE/0x6300005D Client sending a firewall request to concentrator 82 10:13:19.774 11/30/06 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=Cisco Systems Integrated Client, Capability= (Centralized Protection Policy). 83 10:13:19.774 11/30/06 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=NetworkICE BlackICE Defender, Capability= (Are you There?). 84 10:13:19.774 11/30/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 10.0.0.1 85 10:13:19.784 11/30/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 86 10:13:19.784 11/30/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 10.0.0.1 87 10:13:19.784 11/30/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_ADDRESS: , value = 10.24.200.158 88 10:13:19.784 11/30/06 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NETMASK: , value = 255.255.255.255 89 10:13:19.784 11/30/06 Sev=Info/4 CM/0x63100019 Mode Config data received 90 10:13:19.794 11/30/06 Sev=Info/4 IKE/0x63000055 Received a key request from Driver: Local IP = 10.24.200.158, GW IP = 10.0.0.1, Remote IP = 0.0.0.0 91 10:13:19.804 11/30/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH, SA, NON, ID, ID) to 10.0.0.1 92 10:13:19.824 11/30/06 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 93 10:13:19.824 11/30/06 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK QM *(HASH, SA, NON, ID, ID, NOTIFY:STATUS_RESP_LIFETIME) from 10.0.0.1 94 10:13:19.824 11/30/06 Sev=Info/5 IKE/0x63000044 RESPONDER-LIFETIME notify has value of 57600 seconds 95 10:13:19.824 11/30/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH) to 10.0.0.1 96 10:13:19.824 11/30/06 Sev=Info/5 IKE/0x63000058 Loading IPsec SA (MsgID=32C928B9 OUTBOUND SPI = 0x3D178609 INBOUND SPI = 0x758DA26D) 97 10:13:19.824 11/30/06 Sev=Info/5 IKE/0x63000025 Loaded OUTBOUND ESP SPI: 0x3D178609 98 10:13:19.824 11/30/06 Sev=Info/5 IKE/0x63000026 Loaded INBOUND ESP SPI: 0x758DA26D 99 10:13:21.616 11/30/06 Sev=Info/4 CM/0x63100034 The Virtual Adapter was enabled: IP=10.24.200.158/255.255.255.255 DNS=0.0.0.0,0.0.0.0 WINS=0.0.0.0,0.0.0.0 Domain= Split DNS Names= 100 10:13:21.636 11/30/06 Sev=Info/6 CM/0x63100036 The routing table was updated for the Virtual Adapter 101 10:13:21.676 11/30/06 Sev=Info/4 CM/0x6310001A One secure connection established 102 10:13:21.706 11/30/06 Sev=Info/4 CM/0x63100038 Address watch added for 10.24.200.158. Current address(es): 10.24.200.158, 192.168.6.1, 192.168.5.1. 103 10:13:21.706 11/30/06 Sev=Info/4 CM/0x63100038 Address watch added for 10.24.200.158. Current address(es): 10.24.200.158, 192.168.6.1, 192.168.5.1. 104 10:13:21.867 11/30/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 105 10:13:21.867 11/30/06 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 106 10:13:21.867 11/30/06 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0x0986173d into key list 107 10:13:21.867 11/30/06 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 108 10:13:21.867 11/30/06 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0x6da28d75 into key list 109 10:13:21.867 11/30/06 Sev=Info/4 IPSEC/0x6370002E Assigned VA private interface addr 10.24.200.158 110 10:13:22.618 11/30/06 Sev=Info/4 IPSEC/0x63700019 Activate outbound key with SPI=0x0986173d for inbound key with SPI=0x6da28d75 111 12:08:45.763 11/30/06 Sev=Info/4 CM/0x6310000A Secure connections terminated 112 12:08:45.763 11/30/06 Sev=Info/4 IKE/0x63000001 IKE received signal to terminate VPN connection 113 12:08:45.763 11/30/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 10.0.0.1 114 12:08:45.763 11/30/06 Sev=Info/5 IKE/0x63000018 Deleting IPsec SA: (OUTBOUND SPI = 3D178609 INBOUND SPI = 758DA26D) 115 12:08:45.763 11/30/06 Sev=Info/4 IKE/0x63000048 Discarding IPsec SA negotiation, MsgID=32C928B9 116 12:08:45.763 11/30/06 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=F370E05708EBDFFC R_Cookie=3B044C9E13D26CFA) reason = DEL_REASON_RESET_SADB 117 12:08:45.763 11/30/06 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 10.0.0.1 118 12:08:45.763 11/30/06 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=F370E05708EBDFFC R_Cookie=3B044C9E13D26CFA) reason = DEL_REASON_RESET_SADB 119 12:08:45.763 11/30/06 Sev=Info/4 CM/0x63100013 Phase 1 SA deleted cause by DEL_REASON_RESET_SADB. 0 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 120 12:08:45.763 11/30/06 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 121 12:08:45.763 11/30/06 Sev=Info/6 CM/0x63100031 Tunnel to headend device 10.0.0.1 disconnected: duration: 0 days 1:55:24 122 12:08:45.773 11/30/06 Sev=Warning/2 CVPND/0xA3400015 Error with call to IpHlpApi.DLL: DeleteIpForwardEntry, error 87 123 12:08:45.773 11/30/06 Sev=Warning/2 CVPND/0xA3400015 Error with call to IpHlpApi.DLL: DeleteIpForwardEntry, error 87 124 12:08:45.773 11/30/06 Sev=Info/6 CM/0x63100037 The routing table was returned to orginal state prior to Virtual Adapter 125 12:09:01.806 11/30/06 Sev=Warning/2 CM/0xA310002E Failed to disable the virtual adapter. 126 12:09:01.806 11/30/06 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 127 12:09:01.806 11/30/06 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0x6da28d75 128 12:09:01.806 11/30/06 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0x6da28d75 129 12:09:01.806 11/30/06 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0x0986173d 130 12:09:01.806 11/30/06 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0x0986173d 131 12:09:01.806 11/30/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 132 12:09:01.806 11/30/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 133 12:09:01.806 11/30/06 Sev=Info/4 IPSEC/0x6370000A IPSec driver successfully stopped 134 12:09:01.806 11/30/06 Sev=Info/4 IPSEC/0x63700014 Deleted all keys