EMC VPN Dialer Version 4.6.00.0045 Copyright (C) 1998-2004 Cisco Systems, Inc. All Rights Reserved. Client Type(s): Windows, WinNT Running on: 5.1.2600 Service Pack 2 Config file directory: C:\Program Files\EMC VPN\VPN Client 1 03:34:17.978 02/14/07 Sev=Info/4 CM/0x63100002 Begin connection process 2 03:34:18.008 02/14/07 Sev=Info/4 CM/0x63100004 Establish secure connection using Ethernet 3 03:34:18.008 02/14/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw3.emc.com" 4 03:34:18.149 02/14/07 Sev=Info/6 CM/0x6310002F Allocated local TCP port 1115 for TCP connection. 5 03:34:18.239 02/14/07 Sev=Info/4 IPSEC/0x63700008 IPSec driver successfully started 6 03:34:18.239 02/14/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 7 03:34:18.239 02/14/07 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 137.69.115.15, src port 1115, dst port 4005 8 03:34:18.239 02/14/07 Sev=Info/6 IPSEC/0x6370001C TCP SYN-ACK received from 137.69.115.15, src port 4005, dst port 1115 9 03:34:18.239 02/14/07 Sev=Info/6 IPSEC/0x63700020 TCP ACK sent to 137.69.115.15, src port 1115, dst port 4005 10 03:34:18.239 02/14/07 Sev=Info/4 CM/0x63100029 TCP connection established on port 4005 with server "usvgw3.emc.com" 11 03:34:18.739 02/14/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw3.emc.com" 12 03:34:18.759 02/14/07 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 137.69.115.15. 13 03:34:18.790 02/14/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Unity)) to 137.69.115.15 14 03:34:18.960 02/14/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.15 15 03:34:18.960 02/14/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(Unity), VID(Xauth), VID(dpd), VID(Frag), VID(?), VID(?)) from 137.69.115.15 16 03:34:18.960 02/14/07 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 17 03:34:18.960 02/14/07 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 18 03:34:18.960 02/14/07 Sev=Info/5 IKE/0x63000001 Peer supports DPD 19 03:34:18.960 02/14/07 Sev=Info/5 IKE/0x63000001 Peer supports DWR Code and DWR Text 20 03:34:18.980 02/14/07 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 21 03:34:18.980 02/14/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 137.69.115.15 22 03:34:18.980 02/14/07 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 23 03:34:18.990 02/14/07 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 24 03:34:19.010 02/14/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.15 25 03:34:19.010 02/14/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:LOAD_BALANCE) from 137.69.115.15 26 03:34:19.010 02/14/07 Sev=Info/4 CM/0x6310001B Received alternative server address "137.69.115.16" from primary server 27 03:34:19.010 02/14/07 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=D58D1E442F93C40B R_Cookie=34FAD8BCC18ED8A2) reason = DEL_REASON_LOAD_BALANCING 28 03:34:19.010 02/14/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DWR) to 137.69.115.15 29 03:34:19.741 02/14/07 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=D58D1E442F93C40B R_Cookie=34FAD8BCC18ED8A2) reason = DEL_REASON_LOAD_BALANCING 30 03:34:19.741 02/14/07 Sev=Info/4 CM/0x63100014 Unable to establish Phase 1 SA with server "usvgw3.emc.com" because of "DEL_REASON_LOAD_BALANCING" 31 03:34:19.741 02/14/07 Sev=Info/4 CM/0x63100010 Try alternative server "137.69.115.16" given by the primary server 32 03:34:19.741 02/14/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "137.69.115.16" 33 03:34:19.751 02/14/07 Sev=Info/4 CM/0x6310002D Resetting TCP connection on port 4005 34 03:34:20.242 02/14/07 Sev=Info/6 IPSEC/0x63700022 TCP RST sent to 137.69.115.15, src port 1115, dst port 4005 35 03:34:20.242 02/14/07 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 137.69.115.16, src port 1115, dst port 4005 36 03:34:20.242 02/14/07 Sev=Info/6 IPSEC/0x6370001C TCP SYN-ACK received from 137.69.115.16, src port 4005, dst port 1115 37 03:34:20.242 02/14/07 Sev=Info/6 IPSEC/0x63700020 TCP ACK sent to 137.69.115.16, src port 1115, dst port 4005 38 03:34:20.242 02/14/07 Sev=Info/4 CM/0x63100029 TCP connection established on port 4005 with server "137.69.115.16" 39 03:34:20.742 02/14/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "137.69.115.16" 40 03:34:20.762 02/14/07 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 137.69.115.16. 41 03:34:20.782 02/14/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Unity)) to 137.69.115.16 42 03:34:20.963 02/14/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 43 03:34:20.963 02/14/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(Unity), VID(Xauth), VID(dpd), VID(Frag), VID(?), VID(?)) from 137.69.115.16 44 03:34:20.963 02/14/07 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 45 03:34:20.963 02/14/07 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 46 03:34:20.963 02/14/07 Sev=Info/5 IKE/0x63000001 Peer supports DPD 47 03:34:20.963 02/14/07 Sev=Info/5 IKE/0x63000001 Peer supports DWR Code and DWR Text 48 03:34:20.963 02/14/07 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 49 03:34:20.963 02/14/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 137.69.115.16 50 03:34:20.963 02/14/07 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 51 03:34:20.963 02/14/07 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 52 03:34:20.993 02/14/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 53 03:34:20.993 02/14/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 137.69.115.16 54 03:34:20.993 02/14/07 Sev=Info/4 CM/0x63100015 Launch xAuth application 55 03:34:49.854 02/14/07 Sev=Info/4 CM/0x63100017 xAuth application returned 56 03:34:49.854 02/14/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 137.69.115.16 57 03:34:54.040 02/14/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 58 03:34:54.040 02/14/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 137.69.115.16 59 03:34:54.040 02/14/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 137.69.115.16 60 03:34:54.040 02/14/07 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=15B7C9883716603D R_Cookie=E72DFC75010EEFA2) reason = DEL_REASON_WE_FAILED_AUTH 61 03:34:54.040 02/14/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DWR) to 137.69.115.16 62 03:34:54.110 02/14/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 63 03:34:54.110 02/14/07 Sev=Info/4 IKE/0x63000057 Received an ISAKMP message for a non-active SA, I_Cookie=15B7C9883716603D R_Cookie=E72DFC75010EEFA2 64 03:34:54.110 02/14/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(Dropped) from 137.69.115.16 65 03:34:54.291 02/14/07 Sev=Info/6 IPSEC/0x6370001D TCP RST received from 137.69.115.16, src port 4005, dst port 1115 66 03:34:54.791 02/14/07 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=15B7C9883716603D R_Cookie=E72DFC75010EEFA2) reason = DEL_REASON_WE_FAILED_AUTH 67 03:34:54.791 02/14/07 Sev=Info/4 CM/0x63100014 Unable to establish Phase 1 SA with server "137.69.115.16" because of "DEL_REASON_WE_FAILED_AUTH" 68 03:34:54.791 02/14/07 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 69 03:34:54.791 02/14/07 Sev=Info/4 CM/0x6310002D Resetting TCP connection on port 4005 70 03:34:54.811 02/14/07 Sev=Info/6 CM/0x63100030 Removed local TCP port 1115 for TCP connection. 71 03:34:54.841 02/14/07 Sev=Info/4 IKE/0x63000001 IKE received signal to terminate VPN connection 72 03:34:54.841 02/14/07 Sev=Info/6 IPSEC/0x63700022 TCP RST sent to 137.69.115.16, src port 1115, dst port 4005 73 03:34:54.841 02/14/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 74 03:34:54.841 02/14/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 75 03:34:54.841 02/14/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 76 03:34:54.841 02/14/07 Sev=Info/4 IPSEC/0x6370000A IPSec driver successfully stopped 77 03:35:08.461 02/14/07 Sev=Info/4 CM/0x63100002 Begin connection process 78 03:35:08.491 02/14/07 Sev=Info/4 CM/0x63100004 Establish secure connection using Ethernet 79 03:35:08.491 02/14/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw3.emc.com" 80 03:35:08.501 02/14/07 Sev=Info/6 CM/0x6310002F Allocated local TCP port 1125 for TCP connection. 81 03:35:08.811 02/14/07 Sev=Info/4 IPSEC/0x63700008 IPSec driver successfully started 82 03:35:08.811 02/14/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 83 03:35:08.811 02/14/07 Sev=Info/6 IPSEC/0x6370002B Sent 8 packets, 0 were fragmented. 84 03:35:08.811 02/14/07 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 137.69.115.15, src port 1125, dst port 4005 85 03:35:08.811 02/14/07 Sev=Info/6 IPSEC/0x6370001C TCP SYN-ACK received from 137.69.115.15, src port 4005, dst port 1125 86 03:35:08.811 02/14/07 Sev=Info/6 IPSEC/0x63700020 TCP ACK sent to 137.69.115.15, src port 1125, dst port 4005 87 03:35:08.811 02/14/07 Sev=Info/4 CM/0x63100029 TCP connection established on port 4005 with server "usvgw3.emc.com" 88 03:35:09.322 02/14/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw3.emc.com" 89 03:35:09.332 02/14/07 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 137.69.115.15. 90 03:35:09.362 02/14/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Unity)) to 137.69.115.15 91 03:35:09.532 02/14/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.15 92 03:35:09.532 02/14/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(Unity), VID(Xauth), VID(dpd), VID(Frag), VID(?), VID(?)) from 137.69.115.15 93 03:35:09.532 02/14/07 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 94 03:35:09.532 02/14/07 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 95 03:35:09.532 02/14/07 Sev=Info/5 IKE/0x63000001 Peer supports DPD 96 03:35:09.532 02/14/07 Sev=Info/5 IKE/0x63000001 Peer supports DWR Code and DWR Text 97 03:35:09.542 02/14/07 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 98 03:35:09.542 02/14/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 137.69.115.15 99 03:35:09.542 02/14/07 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 100 03:35:09.542 02/14/07 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 101 03:35:09.563 02/14/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.15 102 03:35:09.563 02/14/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:LOAD_BALANCE) from 137.69.115.15 103 03:35:09.563 02/14/07 Sev=Info/4 CM/0x6310001B Received alternative server address "137.69.115.16" from primary server 104 03:35:09.563 02/14/07 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=DEA8DC3F9F7D4368 R_Cookie=70B245084BAD2ED8) reason = DEL_REASON_LOAD_BALANCING 105 03:35:09.563 02/14/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DWR) to 137.69.115.15 106 03:35:10.314 02/14/07 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=DEA8DC3F9F7D4368 R_Cookie=70B245084BAD2ED8) reason = DEL_REASON_LOAD_BALANCING 107 03:35:10.314 02/14/07 Sev=Info/4 CM/0x63100014 Unable to establish Phase 1 SA with server "usvgw3.emc.com" because of "DEL_REASON_LOAD_BALANCING" 108 03:35:10.314 02/14/07 Sev=Info/4 CM/0x63100010 Try alternative server "137.69.115.16" given by the primary server 109 03:35:10.314 02/14/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "137.69.115.16" 110 03:35:10.324 02/14/07 Sev=Info/4 CM/0x6310002D Resetting TCP connection on port 4005 111 03:35:10.814 02/14/07 Sev=Info/6 IPSEC/0x63700022 TCP RST sent to 137.69.115.15, src port 1125, dst port 4005 112 03:35:10.814 02/14/07 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 137.69.115.16, src port 1125, dst port 4005 113 03:35:10.814 02/14/07 Sev=Info/6 IPSEC/0x6370001C TCP SYN-ACK received from 137.69.115.16, src port 4005, dst port 1125 114 03:35:10.814 02/14/07 Sev=Info/6 IPSEC/0x63700020 TCP ACK sent to 137.69.115.16, src port 1125, dst port 4005 115 03:35:10.814 02/14/07 Sev=Info/4 CM/0x63100029 TCP connection established on port 4005 with server "137.69.115.16" 116 03:35:11.315 02/14/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "137.69.115.16" 117 03:35:11.325 02/14/07 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 137.69.115.16. 118 03:35:11.345 02/14/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Unity)) to 137.69.115.16 119 03:35:11.525 02/14/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 120 03:35:11.525 02/14/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(Unity), VID(Xauth), VID(dpd), VID(Frag), VID(?), VID(?)) from 137.69.115.16 121 03:35:11.525 02/14/07 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 122 03:35:11.525 02/14/07 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 123 03:35:11.525 02/14/07 Sev=Info/5 IKE/0x63000001 Peer supports DPD 124 03:35:11.525 02/14/07 Sev=Info/5 IKE/0x63000001 Peer supports DWR Code and DWR Text 125 03:35:11.545 02/14/07 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 126 03:35:11.545 02/14/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 137.69.115.16 127 03:35:11.545 02/14/07 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 128 03:35:11.545 02/14/07 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 129 03:35:11.565 02/14/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 130 03:35:11.565 02/14/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 137.69.115.16 131 03:35:11.565 02/14/07 Sev=Info/4 CM/0x63100015 Launch xAuth application 132 03:35:21.990 02/14/07 Sev=Info/4 CM/0x63100017 xAuth application returned 133 03:35:22.000 02/14/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 137.69.115.16 134 03:35:25.285 02/14/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 135 03:35:25.285 02/14/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 137.69.115.16 136 03:35:25.285 02/14/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 137.69.115.16 137 03:35:25.285 02/14/07 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 1 User Authenticated IKE SA in the system 138 03:35:25.385 02/14/07 Sev=Info/5 IKE/0x6300005D Client sending a firewall request to concentrator 139 03:35:25.385 02/14/07 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=Cisco Systems Integrated Client, Capability= (Centralized Protection Policy). 140 03:35:25.385 02/14/07 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=NetworkICE BlackICE Defender, Capability= (Are you There?). 141 03:35:25.395 02/14/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 137.69.115.16 142 03:35:26.347 02/14/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 143 03:35:26.347 02/14/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 137.69.115.16 144 03:35:26.347 02/14/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_ADDRESS: , value = 10.13.8.173 145 03:35:26.347 02/14/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NETMASK: , value = 255.255.192.0 146 03:35:26.347 02/14/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_DNS(1): , value = 137.69.224.15 147 03:35:26.347 02/14/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_DNS(2): , value = 128.221.12.10 148 03:35:26.347 02/14/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NBNS(1) (a.k.a. WINS) : , value = 128.221.12.10 149 03:35:26.347 02/14/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NBNS(2) (a.k.a. WINS) : , value = 128.222.67.10 150 03:35:26.347 02/14/07 Sev=Info/5 IKE/0x6300000E MODE_CFG_REPLY: Attribute = MODECFG_UNITY_BANNER, value = ************** EMC Americas West Coast VPN Gateway ************** ATTENTION!!! If you are running a VPN Client version other than 4.6, you must upgrade as soon as possible. Check the title bar of your VPN Dialer application. If it does not start with VPN Dialer-Version 4.6, disconnect from VPN now and visit http://vpndist.emc.com. Download and install "DTP3.6-VPN4.6.EXE". 151 03:35:26.347 02/14/07 Sev=Info/5 IKE/0x6300000D MODE_CFG_REPLY: Attribute = MODECFG_UNITY_SAVEPWD: , value = 0x00000000 152 03:35:26.347 02/14/07 Sev=Info/5 IKE/0x6300000E MODE_CFG_REPLY: Attribute = MODECFG_UNITY_DEFDOMAIN: , value = corp.emc.com 153 03:35:26.347 02/14/07 Sev=Info/5 IKE/0x6300000D MODE_CFG_REPLY: Attribute = MODECFG_UNITY_PFS: , value = 0x00000000 154 03:35:26.347 02/14/07 Sev=Info/5 IKE/0x6300000E MODE_CFG_REPLY: Attribute = APPLICATION_VERSION, value = Cisco Systems, Inc./VPN 3000 Concentrator Version 4.7.2.B built by vmurphy on Oct 04 2005 02:50:52 155 03:35:26.347 02/14/07 Sev=Info/5 IKE/0x6300000D MODE_CFG_REPLY: Attribute = MODECFG_UNITY_INCLUDE_LOCAL_LAN (# of local_nets), value = 0x00000001 156 03:35:26.347 02/14/07 Sev=Info/5 IKE/0x6300000F LOCAL_NET #1 subnet = 192.168.1.0 mask = 255.255.255.0 protocol = 0 src port = 0 dest port=0 157 03:35:26.507 02/14/07 Sev=Info/4 CM/0x63100019 Mode Config data received 158 03:35:26.527 02/14/07 Sev=Info/4 IKE/0x63000055 Received a key request from Driver: Local IP = 10.13.8.173, GW IP = 137.69.115.16, Remote IP = 0.0.0.0 159 03:35:26.527 02/14/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH, SA, NON, ID, ID) to 137.69.115.16 160 03:35:26.567 02/14/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 161 03:35:26.567 02/14/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:STATUS_RESP_LIFETIME) from 137.69.115.16 162 03:35:26.567 02/14/07 Sev=Info/5 IKE/0x63000044 RESPONDER-LIFETIME notify has value of 86400 seconds 163 03:35:26.567 02/14/07 Sev=Info/5 IKE/0x63000046 This SA has already been alive for 15 seconds, setting expiry to 86385 seconds from now 164 03:35:26.567 02/14/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 165 03:35:26.567 02/14/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK QM *(HASH, SA, NON, ID, ID, NOTIFY:STATUS_RESP_LIFETIME) from 137.69.115.16 166 03:35:26.577 02/14/07 Sev=Info/5 IKE/0x63000044 RESPONDER-LIFETIME notify has value of 28800 seconds 167 03:35:26.577 02/14/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH) to 137.69.115.16 168 03:35:26.577 02/14/07 Sev=Info/5 IKE/0x63000058 Loading IPsec SA (MsgID=65D29817 OUTBOUND SPI = 0x4BC6B775 INBOUND SPI = 0x962E52CD) 169 03:35:26.577 02/14/07 Sev=Info/5 IKE/0x63000025 Loaded OUTBOUND ESP SPI: 0x4BC6B775 170 03:35:26.577 02/14/07 Sev=Info/5 IKE/0x63000026 Loaded INBOUND ESP SPI: 0x962E52CD 171 03:35:29.461 02/14/07 Sev=Info/4 CM/0x63100034 The Virtual Adapter was enabled: IP=10.13.8.173/255.255.192.0 DNS=137.69.224.15,128.221.12.10 WINS=128.221.12.10,128.222.67.10 Domain=corp.emc.com Split DNS Names= 172 03:35:29.531 02/14/07 Sev=Info/6 CM/0x63100036 The routing table was updated for the Virtual Adapter 173 03:35:29.561 02/14/07 Sev=Info/4 CM/0x6310001A One secure connection established 174 03:35:29.621 02/14/07 Sev=Info/4 CM/0x63100038 Address watch added for 192.168.1.104. Current address(es): 192.168.1.104, 10.13.8.173, 192.168.6.1, 192.168.5.1. 175 03:35:29.641 02/14/07 Sev=Info/4 CM/0x63100038 Address watch added for 10.13.8.173. Current address(es): 192.168.1.104, 10.13.8.173, 192.168.6.1, 192.168.5.1. 176 03:35:29.802 02/14/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 177 03:35:29.802 02/14/07 Sev=Info/6 IPSEC/0x6370002B Sent 8 packets, 0 were fragmented. 178 03:35:29.802 02/14/07 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 179 03:35:29.802 02/14/07 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0x75b7c64b into key list 180 03:35:29.802 02/14/07 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 181 03:35:29.802 02/14/07 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0xcd522e96 into key list 182 03:35:29.802 02/14/07 Sev=Info/4 IPSEC/0x6370002E Assigned VA private interface addr 10.13.8.173 183 03:35:30.843 02/14/07 Sev=Info/4 IPSEC/0x63700019 Activate outbound key with SPI=0x75b7c64b for inbound key with SPI=0xcd522e96 184 03:37:25.567 02/14/07 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.16, seq# = 1300191408 185 03:37:25.567 02/14/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.16 186 03:37:25.597 02/14/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 187 03:37:25.597 02/14/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.16 188 03:37:25.597 02/14/07 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.16, seq# received = 1300191409, seq# expected = 1300191409 189 03:40:11.917 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 190 03:45:11.865 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 191 03:50:13.309 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 192 04:00:14.116 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 193 04:05:13.847 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 194 04:10:14.299 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 195 04:15:14.318 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 196 04:20:14.763 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 197 04:25:14.697 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 198 04:30:15.114 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 199 04:35:16.039 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 200 04:40:16.972 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 201 04:45:16.913 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 202 04:50:17.365 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 203 04:55:17.797 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 204 05:00:18.249 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 205 05:05:18.673 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 206 05:10:19.116 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 207 05:15:19.548 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 208 05:20:20.422 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 209 05:25:20.355 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 210 05:30:20.797 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 211 05:35:21.229 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 212 05:40:21.655 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 213 05:45:22.087 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 214 05:50:22.549 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 215 05:55:22.981 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 216 06:00:23.423 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 217 06:05:24.356 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 218 06:10:24.317 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 219 06:15:24.759 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 220 06:20:25.201 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 221 06:25:25.653 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 222 06:30:26.090 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 223 06:35:27.022 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 224 06:40:26.973 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 225 06:45:27.896 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 226 06:50:27.827 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 227 06:55:27.768 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 228 07:00:28.701 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 229 07:05:29.143 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 230 07:10:29.575 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 231 07:15:29.586 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 232 07:17:07.617 02/14/07 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.16, seq# = 1300191409 233 07:17:07.617 02/14/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.16 234 07:17:07.647 02/14/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 235 07:17:07.647 02/14/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.16 236 07:17:07.647 02/14/07 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.16, seq# received = 1300191410, seq# expected = 1300191410 237 07:20:29.908 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 238 07:25:30.340 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 239 07:30:30.772 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 240 07:36:18.749 02/14/07 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.16, seq# = 1300191410 241 07:36:18.749 02/14/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.16 242 07:36:18.799 02/14/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 243 07:36:18.799 02/14/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.16 244 07:36:18.799 02/14/07 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.16, seq# received = 1300191411, seq# expected = 1300191411 245 07:40:31.343 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 246 07:41:06.890 02/14/07 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.16, seq# = 1300191411 247 07:41:06.890 02/14/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.16 248 07:41:06.930 02/14/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 249 07:41:06.930 02/14/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.16 250 07:41:06.930 02/14/07 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.16, seq# received = 1300191412, seq# expected = 1300191412 251 07:45:31.739 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 252 07:50:32.145 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 253 07:53:07.349 02/14/07 Sev=Info/6 IKE/0x6300003D Sending DPD request to 137.69.115.16, seq# = 1300191412 254 07:53:07.349 02/14/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:DPD_REQUEST) to 137.69.115.16 255 07:53:07.380 02/14/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 256 07:53:07.380 02/14/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:DPD_ACK) from 137.69.115.16 257 07:53:07.380 02/14/07 Sev=Info/5 IKE/0x6300003F Received DPD ACK from 137.69.115.16, seq# received = 1300191413, seq# expected = 1300191413 258 07:55:32.541 02/14/07 Sev=Info/6 IPSEC/0x63700021 TCP heartbeat sent to 137.69.115.16, src port 1125, dst port 4005 259 08:00:10.347 02/14/07 Sev=Info/4 CM/0x6310000A Secure connections terminated 260 08:00:10.347 02/14/07 Sev=Info/4 IKE/0x63000001 IKE received signal to terminate VPN connection 261 08:00:10.347 02/14/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 137.69.115.16 262 08:00:10.347 02/14/07 Sev=Info/5 IKE/0x63000018 Deleting IPsec SA: (OUTBOUND SPI = 4BC6B775 INBOUND SPI = 962E52CD) 263 08:00:10.347 02/14/07 Sev=Info/4 IKE/0x63000048 Discarding IPsec SA negotiation, MsgID=65D29817 264 08:00:10.347 02/14/07 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=B95858F14C30FD96 R_Cookie=3433FD2164E662C9) reason = DEL_REASON_RESET_SADB 265 08:00:10.347 02/14/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DWR) to 137.69.115.16 266 08:00:10.347 02/14/07 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=B95858F14C30FD96 R_Cookie=3433FD2164E662C9) reason = DEL_REASON_RESET_SADB 267 08:00:10.347 02/14/07 Sev=Info/4 CM/0x63100013 Phase 1 SA deleted cause by DEL_REASON_RESET_SADB. 0 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 268 08:00:10.347 02/14/07 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 269 08:00:10.347 02/14/07 Sev=Info/4 CM/0x6310002D Resetting TCP connection on port 4005 270 08:00:10.347 02/14/07 Sev=Info/6 CM/0x63100030 Removed local TCP port 1125 for TCP connection. 271 08:00:10.347 02/14/07 Sev=Info/6 CM/0x63100031 Tunnel to headend device 137.69.115.16 disconnected: duration: 0 days 4:24:41 272 08:00:10.357 02/14/07 Sev=Info/6 CM/0x63100037 The routing table was returned to orginal state prior to Virtual Adapter 273 08:00:12.349 02/14/07 Sev=Info/4 CM/0x63100035 The Virtual Adapter was disabled 274 08:00:12.359 02/14/07 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 275 08:00:12.359 02/14/07 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0xcd522e96 276 08:00:12.359 02/14/07 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0xcd522e96 277 08:00:12.359 02/14/07 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0x75b7c64b 278 08:00:12.359 02/14/07 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0x75b7c64b 279 08:00:12.359 02/14/07 Sev=Info/6 IPSEC/0x63700022 TCP RST sent to 137.69.115.16, src port 1125, dst port 4005 280 08:00:12.359 02/14/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 281 08:00:12.359 02/14/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 282 08:00:12.359 02/14/07 Sev=Info/4 IPSEC/0x6370000A IPSec driver successfully stopped 283 08:00:12.359 02/14/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys