EMC VPN Dialer Version 4.6.00.0045 Copyright (C) 1998-2004 Cisco Systems, Inc. All Rights Reserved. Client Type(s): Windows, WinNT Running on: 5.1.2600 Service Pack 2 Config file directory: C:\Program Files\EMC VPN\VPN Client 1 07:45:50.919 02/09/07 Sev=Info/4 CM/0x63100002 Begin connection process 2 07:45:50.949 02/09/07 Sev=Info/4 CM/0x63100004 Establish secure connection using Ethernet 3 07:45:50.949 02/09/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "10.0.0.1" 4 07:45:50.959 02/09/07 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 10.0.0.1. 5 07:45:50.979 02/09/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Nat-T), VID(Frag), VID(Unity)) to 10.0.0.1 6 07:45:50.989 02/09/07 Sev=Info/4 IPSEC/0x63700008 IPSec driver successfully started 7 07:45:50.989 02/09/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 8 07:45:51.039 02/09/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 9 07:45:51.039 02/09/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(?), VID(Xauth), VID(Unity)) from 10.0.0.1 10 07:45:51.039 02/09/07 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 11 07:45:51.039 02/09/07 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 12 07:45:51.049 02/09/07 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 13 07:45:51.049 02/09/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 10.0.0.1 14 07:45:51.049 02/09/07 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 15 07:45:51.049 02/09/07 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 16 07:45:51.099 02/09/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 17 07:45:51.099 02/09/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 10.0.0.1 18 07:45:51.099 02/09/07 Sev=Info/4 CM/0x63100015 Launch xAuth application 19 07:45:51.600 02/09/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 20 07:45:51.600 02/09/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 21 07:45:52.621 02/09/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 22 07:45:52.621 02/09/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 23 07:45:54.644 02/09/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 24 07:45:54.644 02/09/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 25 07:45:58.650 02/09/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 26 07:45:58.650 02/09/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 27 07:46:01.214 02/09/07 Sev=Info/4 CM/0x63100017 xAuth application returned 28 07:46:01.214 02/09/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 10.0.0.1 29 07:46:01.214 02/09/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:HEARTBEAT) to 10.0.0.1 30 07:46:01.214 02/09/07 Sev=Info/6 IKE/0x63000052 Sent a keepalive on the IKE SA 31 07:46:04.729 02/09/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 32 07:46:04.729 02/09/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 10.0.0.1 33 07:46:04.729 02/09/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 10.0.0.1 34 07:46:04.729 02/09/07 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 1 User Authenticated IKE SA in the system 35 07:46:04.809 02/09/07 Sev=Info/5 IKE/0x6300005D Client sending a firewall request to concentrator 36 07:46:04.809 02/09/07 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=Cisco Systems Integrated Client, Capability= (Centralized Protection Policy). 37 07:46:04.809 02/09/07 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=NetworkICE BlackICE Defender, Capability= (Are you There?). 38 07:46:04.809 02/09/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 10.0.0.1 39 07:46:04.819 02/09/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 40 07:46:04.819 02/09/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 10.0.0.1 41 07:46:04.819 02/09/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_ADDRESS: , value = 10.24.198.146 42 07:46:04.819 02/09/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NETMASK: , value = 255.255.255.255 43 07:46:04.819 02/09/07 Sev=Info/4 CM/0x63100019 Mode Config data received 44 07:46:04.839 02/09/07 Sev=Info/4 IKE/0x63000055 Received a key request from Driver: Local IP = 10.24.198.146, GW IP = 10.0.0.1, Remote IP = 0.0.0.0 45 07:46:04.839 02/09/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH, SA, NON, ID, ID) to 10.0.0.1 46 07:46:04.879 02/09/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 47 07:46:04.879 02/09/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK QM *(HASH, SA, NON, ID, ID, NOTIFY:STATUS_RESP_LIFETIME) from 10.0.0.1 48 07:46:04.879 02/09/07 Sev=Info/5 IKE/0x63000044 RESPONDER-LIFETIME notify has value of 57600 seconds 49 07:46:04.879 02/09/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH) to 10.0.0.1 50 07:46:04.879 02/09/07 Sev=Info/5 IKE/0x63000058 Loading IPsec SA (MsgID=E720C1CC OUTBOUND SPI = 0x6B640E7A INBOUND SPI = 0xC278EFEA) 51 07:46:04.879 02/09/07 Sev=Info/5 IKE/0x63000025 Loaded OUTBOUND ESP SPI: 0x6B640E7A 52 07:46:04.879 02/09/07 Sev=Info/5 IKE/0x63000026 Loaded INBOUND ESP SPI: 0xC278EFEA 53 07:46:07.543 02/09/07 Sev=Info/4 CM/0x63100034 The Virtual Adapter was enabled: IP=10.24.198.146/255.255.255.255 DNS=0.0.0.0,0.0.0.0 WINS=0.0.0.0,0.0.0.0 Domain= Split DNS Names= 54 07:46:07.583 02/09/07 Sev=Info/6 CM/0x63100036 The routing table was updated for the Virtual Adapter 55 07:46:07.613 02/09/07 Sev=Info/4 CM/0x6310001A One secure connection established 56 07:46:07.633 02/09/07 Sev=Info/4 CM/0x63100038 Address watch added for 10.24.198.146. Current address(es): 10.24.198.146, 192.168.6.1, 192.168.5.1. 57 07:46:07.633 02/09/07 Sev=Info/4 CM/0x63100038 Address watch added for 10.24.198.146. Current address(es): 10.24.198.146, 192.168.6.1, 192.168.5.1. 58 07:46:07.833 02/09/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 59 07:46:07.833 02/09/07 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 60 07:46:07.833 02/09/07 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0x7a0e646b into key list 61 07:46:07.833 02/09/07 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 62 07:46:07.833 02/09/07 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0xeaef78c2 into key list 63 07:46:07.833 02/09/07 Sev=Info/4 IPSEC/0x6370002E Assigned VA private interface addr 10.24.198.146 64 07:46:08.394 02/09/07 Sev=Info/4 IPSEC/0x63700019 Activate outbound key with SPI=0x7a0e646b for inbound key with SPI=0xeaef78c2 65 18:45:59.347 02/09/07 Sev=Info/4 CM/0x6310000A Secure connections terminated 66 18:45:59.347 02/09/07 Sev=Info/4 IKE/0x63000001 IKE received signal to terminate VPN connection 67 18:45:59.347 02/09/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 10.0.0.1 68 18:45:59.347 02/09/07 Sev=Info/5 IKE/0x63000018 Deleting IPsec SA: (OUTBOUND SPI = 6B640E7A INBOUND SPI = C278EFEA) 69 18:45:59.347 02/09/07 Sev=Info/4 IKE/0x63000048 Discarding IPsec SA negotiation, MsgID=E720C1CC 70 18:45:59.347 02/09/07 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=A480ECAF88C4E122 R_Cookie=9950035B332CC007) reason = DEL_REASON_RESET_SADB 71 18:45:59.347 02/09/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 10.0.0.1 72 18:45:59.347 02/09/07 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=A480ECAF88C4E122 R_Cookie=9950035B332CC007) reason = DEL_REASON_RESET_SADB 73 18:45:59.347 02/09/07 Sev=Info/4 CM/0x63100013 Phase 1 SA deleted cause by DEL_REASON_RESET_SADB. 0 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 74 18:45:59.347 02/09/07 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 75 18:45:59.407 02/09/07 Sev=Info/6 CM/0x63100031 Tunnel to headend device 10.0.0.1 disconnected: duration: 0 days 10:59:52 76 18:45:59.417 02/09/07 Sev=Warning/2 CVPND/0xA3400015 Error with call to IpHlpApi.DLL: DeleteIpForwardEntry, error 87 77 18:45:59.417 02/09/07 Sev=Warning/2 CVPND/0xA3400015 Error with call to IpHlpApi.DLL: DeleteIpForwardEntry, error 87 78 18:45:59.417 02/09/07 Sev=Info/6 CM/0x63100037 The routing table was returned to orginal state prior to Virtual Adapter 79 18:46:01.009 02/09/07 Sev=Info/4 CM/0x63100035 The Virtual Adapter was disabled 80 18:46:01.009 02/09/07 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 81 18:46:01.009 02/09/07 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0xeaef78c2 82 18:46:01.009 02/09/07 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0xeaef78c2 83 18:46:01.009 02/09/07 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0x7a0e646b 84 18:46:01.009 02/09/07 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0x7a0e646b 85 18:46:01.009 02/09/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 86 18:46:01.009 02/09/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 87 18:46:01.009 02/09/07 Sev=Info/4 IPSEC/0x6370000A IPSec driver successfully stopped 88 18:46:01.009 02/09/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys