EMC VPN Dialer Version 4.6.00.0045 Copyright (C) 1998-2004 Cisco Systems, Inc. All Rights Reserved. Client Type(s): Windows, WinNT Running on: 5.1.2600 Service Pack 2 Config file directory: C:\Program Files\EMC VPN\VPN Client 1 11:37:39.614 02/17/07 Sev=Info/4 CM/0x63100002 Begin connection process 2 11:37:39.624 02/17/07 Sev=Info/4 CM/0x63100004 Establish secure connection using Ethernet 3 11:37:39.624 02/17/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw3.emc.com" 4 11:37:39.634 02/17/07 Sev=Info/6 CM/0x6310002F Allocated local TCP port 1798 for TCP connection. 5 11:37:39.654 02/17/07 Sev=Info/4 IPSEC/0x63700008 IPSec driver successfully started 6 11:37:39.654 02/17/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 7 11:37:39.654 02/17/07 Sev=Info/6 IPSEC/0x6370002B Sent 11 packets, 0 were fragmented. 8 11:37:39.654 02/17/07 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 137.69.115.15, src port 1798, dst port 4005 9 11:37:40.155 02/17/07 Sev=Info/6 IPSEC/0x6370001C TCP SYN-ACK received from 137.69.115.15, src port 4005, dst port 1798 10 11:37:40.155 02/17/07 Sev=Info/6 IPSEC/0x63700020 TCP ACK sent to 137.69.115.15, src port 1798, dst port 4005 11 11:37:40.155 02/17/07 Sev=Info/4 CM/0x63100029 TCP connection established on port 4005 with server "usvgw3.emc.com" 12 11:37:40.675 02/17/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw3.emc.com" 13 11:37:40.695 02/17/07 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 137.69.115.15. 14 11:37:40.715 02/17/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Unity)) to 137.69.115.15 15 11:37:40.886 02/17/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.15 16 11:37:40.886 02/17/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(Unity), VID(Xauth), VID(dpd), VID(Frag), VID(?), VID(?)) from 137.69.115.15 17 11:37:40.886 02/17/07 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 18 11:37:40.886 02/17/07 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 19 11:37:40.886 02/17/07 Sev=Info/5 IKE/0x63000001 Peer supports DPD 20 11:37:40.886 02/17/07 Sev=Info/5 IKE/0x63000001 Peer supports DWR Code and DWR Text 21 11:37:40.896 02/17/07 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 22 11:37:40.896 02/17/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 137.69.115.15 23 11:37:40.896 02/17/07 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 24 11:37:40.896 02/17/07 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 25 11:37:40.926 02/17/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.15 26 11:37:40.926 02/17/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:LOAD_BALANCE) from 137.69.115.15 27 11:37:40.926 02/17/07 Sev=Info/4 CM/0x6310001B Received alternative server address "137.69.115.17" from primary server 28 11:37:40.926 02/17/07 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=74B0870EED45ECC6 R_Cookie=1E21207E0BDD7946) reason = DEL_REASON_LOAD_BALANCING 29 11:37:40.926 02/17/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DWR) to 137.69.115.15 30 11:37:41.657 02/17/07 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=74B0870EED45ECC6 R_Cookie=1E21207E0BDD7946) reason = DEL_REASON_LOAD_BALANCING 31 11:37:41.657 02/17/07 Sev=Info/4 CM/0x63100014 Unable to establish Phase 1 SA with server "usvgw3.emc.com" because of "DEL_REASON_LOAD_BALANCING" 32 11:37:41.657 02/17/07 Sev=Info/4 CM/0x63100010 Try alternative server "137.69.115.17" given by the primary server 33 11:37:41.657 02/17/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "137.69.115.17" 34 11:37:41.667 02/17/07 Sev=Info/4 CM/0x6310002D Resetting TCP connection on port 4005 35 11:37:42.157 02/17/07 Sev=Info/6 IPSEC/0x63700022 TCP RST sent to 137.69.115.15, src port 1798, dst port 4005 36 11:37:42.167 02/17/07 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 137.69.115.17, src port 1798, dst port 4005 37 11:37:42.167 02/17/07 Sev=Info/6 IPSEC/0x6370001C TCP SYN-ACK received from 137.69.115.17, src port 4005, dst port 1798 38 11:37:42.167 02/17/07 Sev=Info/6 IPSEC/0x63700020 TCP ACK sent to 137.69.115.17, src port 1798, dst port 4005 39 11:37:42.167 02/17/07 Sev=Info/4 CM/0x63100029 TCP connection established on port 4005 with server "137.69.115.17" 40 11:37:42.668 02/17/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "137.69.115.17" 41 11:37:42.688 02/17/07 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 137.69.115.17. 42 11:37:42.708 02/17/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Unity)) to 137.69.115.17 43 11:37:42.878 02/17/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 44 11:37:42.878 02/17/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(Unity), VID(Xauth), VID(dpd), VID(Frag), VID(?), VID(?)) from 137.69.115.17 45 11:37:42.878 02/17/07 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 46 11:37:42.878 02/17/07 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 47 11:37:42.878 02/17/07 Sev=Info/5 IKE/0x63000001 Peer supports DPD 48 11:37:42.878 02/17/07 Sev=Info/5 IKE/0x63000001 Peer supports DWR Code and DWR Text 49 11:37:42.878 02/17/07 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 50 11:37:42.878 02/17/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 137.69.115.17 51 11:37:42.878 02/17/07 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 52 11:37:42.878 02/17/07 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 53 11:37:42.908 02/17/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 54 11:37:42.908 02/17/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 137.69.115.17 55 11:37:42.908 02/17/07 Sev=Info/4 CM/0x63100015 Launch xAuth application 56 11:37:55.617 02/17/07 Sev=Info/4 CM/0x63100017 xAuth application returned 57 11:37:55.617 02/17/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 137.69.115.17 58 11:37:59.723 02/17/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 59 11:37:59.723 02/17/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 137.69.115.17 60 11:37:59.723 02/17/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 137.69.115.17 61 11:37:59.723 02/17/07 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=18016DED9F6EE80B R_Cookie=51B592E9082E8787) reason = DEL_REASON_WE_FAILED_AUTH 62 11:37:59.723 02/17/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DWR) to 137.69.115.17 63 11:37:59.753 02/17/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.17 64 11:37:59.753 02/17/07 Sev=Info/4 IKE/0x63000057 Received an ISAKMP message for a non-active SA, I_Cookie=18016DED9F6EE80B R_Cookie=51B592E9082E8787 65 11:37:59.753 02/17/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(Dropped) from 137.69.115.17 66 11:38:00.193 02/17/07 Sev=Info/6 IPSEC/0x6370001D TCP RST received from 137.69.115.17, src port 4005, dst port 1798 67 11:38:00.684 02/17/07 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=18016DED9F6EE80B R_Cookie=51B592E9082E8787) reason = DEL_REASON_WE_FAILED_AUTH 68 11:38:00.684 02/17/07 Sev=Info/4 CM/0x63100014 Unable to establish Phase 1 SA with server "137.69.115.17" because of "DEL_REASON_WE_FAILED_AUTH" 69 11:38:00.684 02/17/07 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 70 11:38:00.694 02/17/07 Sev=Info/4 CM/0x6310002D Resetting TCP connection on port 4005 71 11:38:00.704 02/17/07 Sev=Info/6 CM/0x63100030 Removed local TCP port 1798 for TCP connection. 72 11:38:00.734 02/17/07 Sev=Info/4 IKE/0x63000001 IKE received signal to terminate VPN connection 73 11:38:00.744 02/17/07 Sev=Info/6 IPSEC/0x63700022 TCP RST sent to 137.69.115.17, src port 1798, dst port 4005 74 11:38:00.744 02/17/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 75 11:38:00.744 02/17/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 76 11:38:00.744 02/17/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 77 11:38:00.744 02/17/07 Sev=Info/4 IPSEC/0x6370000A IPSec driver successfully stopped 78 11:38:07.033 02/17/07 Sev=Info/4 CM/0x63100002 Begin connection process 79 11:38:07.053 02/17/07 Sev=Info/4 CM/0x63100004 Establish secure connection using Ethernet 80 11:38:07.053 02/17/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw1.emc.com" 81 11:38:07.053 02/17/07 Sev=Info/6 CM/0x6310002F Allocated local TCP port 1819 for TCP connection. 82 11:38:07.193 02/17/07 Sev=Info/4 IPSEC/0x63700008 IPSec driver successfully started 83 11:38:07.193 02/17/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 84 11:38:07.193 02/17/07 Sev=Info/6 IPSEC/0x6370002B Sent 8 packets, 0 were fragmented. 85 11:38:07.193 02/17/07 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 128.221.195.15, src port 1819, dst port 4005 86 11:38:07.193 02/17/07 Sev=Info/6 IPSEC/0x6370001C TCP SYN-ACK received from 128.221.195.15, src port 4005, dst port 1819 87 11:38:07.193 02/17/07 Sev=Info/6 IPSEC/0x63700020 TCP ACK sent to 128.221.195.15, src port 1819, dst port 4005 88 11:38:07.193 02/17/07 Sev=Info/4 CM/0x63100029 TCP connection established on port 4005 with server "usvgw1.emc.com" 89 11:38:07.694 02/17/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw1.emc.com" 90 11:38:07.714 02/17/07 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 128.221.195.15. 91 11:38:07.734 02/17/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Unity)) to 128.221.195.15 92 11:38:07.985 02/17/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 128.221.195.15 93 11:38:07.985 02/17/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(Unity), VID(Xauth), VID(dpd), VID(Frag), VID(?), VID(?)) from 128.221.195.15 94 11:38:07.985 02/17/07 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 95 11:38:07.985 02/17/07 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 96 11:38:07.985 02/17/07 Sev=Info/5 IKE/0x63000001 Peer supports DPD 97 11:38:07.985 02/17/07 Sev=Info/5 IKE/0x63000001 Peer supports DWR Code and DWR Text 98 11:38:07.995 02/17/07 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 99 11:38:07.995 02/17/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 128.221.195.15 100 11:38:07.995 02/17/07 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 101 11:38:07.995 02/17/07 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 102 11:38:08.095 02/17/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 128.221.195.15 103 11:38:08.095 02/17/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:LOAD_BALANCE) from 128.221.195.15 104 11:38:08.095 02/17/07 Sev=Info/4 CM/0x6310001B Received alternative server address "128.221.195.16" from primary server 105 11:38:08.095 02/17/07 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=D7AAA6DE24F2CFA9 R_Cookie=51A45EDE74834935) reason = DEL_REASON_LOAD_BALANCING 106 11:38:08.095 02/17/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DWR) to 128.221.195.15 107 11:38:08.696 02/17/07 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=D7AAA6DE24F2CFA9 R_Cookie=51A45EDE74834935) reason = DEL_REASON_LOAD_BALANCING 108 11:38:08.696 02/17/07 Sev=Info/4 CM/0x63100014 Unable to establish Phase 1 SA with server "usvgw1.emc.com" because of "DEL_REASON_LOAD_BALANCING" 109 11:38:08.696 02/17/07 Sev=Info/4 CM/0x63100010 Try alternative server "128.221.195.16" given by the primary server 110 11:38:08.696 02/17/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "128.221.195.16" 111 11:38:08.716 02/17/07 Sev=Info/4 CM/0x6310002D Resetting TCP connection on port 4005 112 11:38:09.206 02/17/07 Sev=Info/6 IPSEC/0x63700022 TCP RST sent to 128.221.195.15, src port 1819, dst port 4005 113 11:38:09.206 02/17/07 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 128.221.195.16, src port 1819, dst port 4005 114 11:38:09.206 02/17/07 Sev=Info/6 IPSEC/0x6370001C TCP SYN-ACK received from 128.221.195.16, src port 4005, dst port 1819 115 11:38:09.206 02/17/07 Sev=Info/6 IPSEC/0x63700020 TCP ACK sent to 128.221.195.16, src port 1819, dst port 4005 116 11:38:09.206 02/17/07 Sev=Info/4 CM/0x63100029 TCP connection established on port 4005 with server "128.221.195.16" 117 11:38:09.707 02/17/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "128.221.195.16" 118 11:38:09.717 02/17/07 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 128.221.195.16. 119 11:38:09.747 02/17/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Unity)) to 128.221.195.16 120 11:38:09.987 02/17/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 128.221.195.16 121 11:38:09.987 02/17/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(Unity), VID(Xauth), VID(dpd), VID(Frag), VID(?), VID(?)) from 128.221.195.16 122 11:38:09.987 02/17/07 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 123 11:38:09.987 02/17/07 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 124 11:38:09.987 02/17/07 Sev=Info/5 IKE/0x63000001 Peer supports DPD 125 11:38:09.987 02/17/07 Sev=Info/5 IKE/0x63000001 Peer supports DWR Code and DWR Text 126 11:38:09.997 02/17/07 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 127 11:38:09.997 02/17/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 128.221.195.16 128 11:38:09.997 02/17/07 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 129 11:38:09.997 02/17/07 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 130 11:38:10.088 02/17/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 128.221.195.16 131 11:38:10.088 02/17/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 128.221.195.16 132 11:38:10.088 02/17/07 Sev=Info/4 CM/0x63100015 Launch xAuth application 133 11:38:19.471 02/17/07 Sev=Info/4 CM/0x63100017 xAuth application returned 134 11:38:19.471 02/17/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 128.221.195.16 135 11:38:22.105 02/17/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 128.221.195.16 136 11:38:22.105 02/17/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 128.221.195.16 137 11:38:22.105 02/17/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 128.221.195.16 138 11:38:22.105 02/17/07 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 1 User Authenticated IKE SA in the system 139 11:38:22.155 02/17/07 Sev=Info/5 IKE/0x6300005D Client sending a firewall request to concentrator 140 11:38:22.155 02/17/07 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=Cisco Systems Integrated Client, Capability= (Centralized Protection Policy). 141 11:38:22.155 02/17/07 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=NetworkICE BlackICE Defender, Capability= (Are you There?). 142 11:38:22.155 02/17/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 128.221.195.16 143 11:38:23.096 02/17/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 128.221.195.16 144 11:38:23.096 02/17/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 128.221.195.16 145 11:38:23.096 02/17/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_ADDRESS: , value = 10.4.10.116 146 11:38:23.096 02/17/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NETMASK: , value = 255.255.224.0 147 11:38:23.096 02/17/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_DNS(1): , value = 128.221.12.10 148 11:38:23.096 02/17/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_DNS(2): , value = 128.222.67.10 149 11:38:23.096 02/17/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NBNS(1) (a.k.a. WINS) : , value = 128.221.12.10 150 11:38:23.096 02/17/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NBNS(2) (a.k.a. WINS) : , value = 128.222.67.10 151 11:38:23.096 02/17/07 Sev=Info/5 IKE/0x6300000E MODE_CFG_REPLY: Attribute = MODECFG_UNITY_BANNER, value = ************** EMC Americas East Coast VPN Gateway ************** ATTENTION!!! If you are running a VPN Client version other than 4.6, you must upgrade as soon as possible. Check the title bar of your VPN Dialer application. If it does not start with VPN Dialer-Version 4.6, disconnect from VPN now and visit http://vpndist.emc.com. Download and install "DTP3.6-VPN4.6.EXE". 152 11:38:23.096 02/17/07 Sev=Info/5 IKE/0x6300000D MODE_CFG_REPLY: Attribute = MODECFG_UNITY_SAVEPWD: , value = 0x00000000 153 11:38:23.096 02/17/07 Sev=Info/5 IKE/0x6300000E MODE_CFG_REPLY: Attribute = MODECFG_UNITY_DEFDOMAIN: , value = corp.emc.com 154 11:38:23.096 02/17/07 Sev=Info/5 IKE/0x6300000D MODE_CFG_REPLY: Attribute = MODECFG_UNITY_PFS: , value = 0x00000000 155 11:38:23.096 02/17/07 Sev=Info/5 IKE/0x6300000E MODE_CFG_REPLY: Attribute = APPLICATION_VERSION, value = Cisco Systems, Inc./VPN 3000 Concentrator Version 4.7.2.B built by vmurphy on Oct 04 2005 02:50:52 156 11:38:23.096 02/17/07 Sev=Info/4 CM/0x63100019 Mode Config data received 157 11:38:23.116 02/17/07 Sev=Info/4 IKE/0x63000055 Received a key request from Driver: Local IP = 10.4.10.116, GW IP = 128.221.195.16, Remote IP = 0.0.0.0 158 11:38:23.116 02/17/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH, SA, NON, ID, ID) to 128.221.195.16 159 11:38:23.116 02/17/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 160 11:38:23.116 02/17/07 Sev=Info/6 IPSEC/0x6370002B Sent 8 packets, 0 were fragmented. 161 11:38:23.246 02/17/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 128.221.195.16 162 11:38:23.246 02/17/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK QM *(HASH, SA, NON, ID, ID, NOTIFY:STATUS_RESP_LIFETIME) from 128.221.195.16 163 11:38:23.246 02/17/07 Sev=Info/5 IKE/0x63000044 RESPONDER-LIFETIME notify has value of 28800 seconds 164 11:38:23.246 02/17/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH) to 128.221.195.16 165 11:38:23.246 02/17/07 Sev=Info/5 IKE/0x63000058 Loading IPsec SA (MsgID=66E129D9 OUTBOUND SPI = 0x2A8EAD5D INBOUND SPI = 0xF8FAB045) 166 11:38:23.246 02/17/07 Sev=Info/5 IKE/0x63000025 Loaded OUTBOUND ESP SPI: 0x2A8EAD5D 167 11:38:23.246 02/17/07 Sev=Info/5 IKE/0x63000026 Loaded INBOUND ESP SPI: 0xF8FAB045 168 11:38:23.857 02/17/07 Sev=Info/4 CM/0x63100034 The Virtual Adapter was enabled: IP=10.4.10.116/255.255.224.0 DNS=128.221.12.10,128.222.67.10 WINS=128.221.12.10,128.222.67.10 Domain=corp.emc.com Split DNS Names= 169 11:38:23.887 02/17/07 Sev=Info/6 CM/0x63100036 The routing table was updated for the Virtual Adapter 170 11:38:23.957 02/17/07 Sev=Info/4 CM/0x6310001A One secure connection established 171 11:38:24.118 02/17/07 Sev=Info/4 CM/0x63100038 Address watch added for 192.168.1.104. Current address(es): 192.168.1.104, 10.4.10.116, 192.168.6.1, 192.168.5.1. 172 11:38:24.118 02/17/07 Sev=Info/4 CM/0x63100038 Address watch added for 10.4.10.116. Current address(es): 192.168.1.104, 10.4.10.116, 192.168.6.1, 192.168.5.1. 173 11:38:24.198 02/17/07 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 174 11:38:24.198 02/17/07 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0x5dad8e2a into key list 175 11:38:24.198 02/17/07 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 176 11:38:24.198 02/17/07 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0x45b0faf8 into key list 177 11:38:24.198 02/17/07 Sev=Info/4 IPSEC/0x6370002E Assigned VA private interface addr 10.4.10.116 178 11:38:25.219 02/17/07 Sev=Info/4 IPSEC/0x63700019 Activate outbound key with SPI=0x5dad8e2a for inbound key with SPI=0x45b0faf8 179 11:41:51.886 02/17/07 Sev=Info/4 CM/0x6310000A Secure connections terminated 180 11:41:51.886 02/17/07 Sev=Info/4 IKE/0x63000001 IKE received signal to terminate VPN connection 181 11:41:51.886 02/17/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 128.221.195.16 182 11:41:51.886 02/17/07 Sev=Info/5 IKE/0x63000018 Deleting IPsec SA: (OUTBOUND SPI = 2A8EAD5D INBOUND SPI = F8FAB045) 183 11:41:51.886 02/17/07 Sev=Info/4 IKE/0x63000048 Discarding IPsec SA negotiation, MsgID=66E129D9 184 11:41:51.886 02/17/07 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=8947665B950C8FA0 R_Cookie=FFF2235770B5593B) reason = DEL_REASON_RESET_SADB 185 11:41:51.886 02/17/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DWR) to 128.221.195.16 186 11:41:51.886 02/17/07 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=8947665B950C8FA0 R_Cookie=FFF2235770B5593B) reason = DEL_REASON_RESET_SADB 187 11:41:51.886 02/17/07 Sev=Info/4 CM/0x63100013 Phase 1 SA deleted cause by DEL_REASON_RESET_SADB. 0 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 188 11:41:51.886 02/17/07 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 189 11:41:51.886 02/17/07 Sev=Info/4 CM/0x6310002D Resetting TCP connection on port 4005 190 11:41:51.886 02/17/07 Sev=Info/6 CM/0x63100030 Removed local TCP port 1819 for TCP connection. 191 11:41:51.886 02/17/07 Sev=Info/6 CM/0x63100031 Tunnel to headend device 128.221.195.16 disconnected: duration: 0 days 0:3:28 192 11:41:51.896 02/17/07 Sev=Warning/2 CVPND/0xA3400015 Error with call to IpHlpApi.DLL: DeleteIpForwardEntry, error 87 193 11:41:51.896 02/17/07 Sev=Info/6 CM/0x63100037 The routing table was returned to orginal state prior to Virtual Adapter 194 11:41:53.498 02/17/07 Sev=Info/4 CM/0x63100035 The Virtual Adapter was disabled 195 11:41:53.498 02/17/07 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 196 11:41:53.498 02/17/07 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0x45b0faf8 197 11:41:53.508 02/17/07 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0x45b0faf8 198 11:41:53.508 02/17/07 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0x5dad8e2a 199 11:41:53.508 02/17/07 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0x5dad8e2a 200 11:41:53.508 02/17/07 Sev=Info/6 IPSEC/0x63700022 TCP RST sent to 128.221.195.16, src port 1819, dst port 4005 201 11:41:53.508 02/17/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 202 11:41:53.508 02/17/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 203 11:41:53.508 02/17/07 Sev=Info/4 IPSEC/0x6370000A IPSec driver successfully stopped 204 11:41:53.508 02/17/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys