EMC VPN Dialer Version 4.6.00.0045 Copyright (C) 1998-2004 Cisco Systems, Inc. All Rights Reserved. Client Type(s): Windows, WinNT Running on: 5.1.2600 Service Pack 2 Config file directory: C:\Program Files\EMC VPN\VPN Client 1 20:05:39.774 03/04/07 Sev=Info/4 CM/0x63100002 Begin connection process 2 20:05:39.804 03/04/07 Sev=Info/4 CM/0x63100004 Establish secure connection using Ethernet 3 20:05:39.804 03/04/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw3.emc.com" 4 20:05:39.824 03/04/07 Sev=Info/6 CM/0x6310002F Allocated local TCP port 1246 for TCP connection. 5 20:05:39.834 03/04/07 Sev=Info/4 IPSEC/0x63700008 IPSec driver successfully started 6 20:05:39.834 03/04/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 7 20:05:39.834 03/04/07 Sev=Info/6 IPSEC/0x6370002B Sent 2234 packets, 0 were fragmented. 8 20:05:39.834 03/04/07 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 137.69.115.15, src port 1246, dst port 4005 9 20:05:40.765 03/04/07 Sev=Info/6 IPSEC/0x6370001C TCP SYN-ACK received from 137.69.115.15, src port 4005, dst port 1246 10 20:05:40.765 03/04/07 Sev=Info/6 IPSEC/0x63700020 TCP ACK sent to 137.69.115.15, src port 1246, dst port 4005 11 20:05:40.765 03/04/07 Sev=Info/4 CM/0x63100029 TCP connection established on port 4005 with server "usvgw3.emc.com" 12 20:05:41.276 03/04/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw3.emc.com" 13 20:05:41.296 03/04/07 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 137.69.115.15. 14 20:05:41.316 03/04/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Unity)) to 137.69.115.15 15 20:05:41.486 03/04/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.15 16 20:05:41.486 03/04/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(Unity), VID(Xauth), VID(dpd), VID(Frag), VID(?), VID(?)) from 137.69.115.15 17 20:05:41.486 03/04/07 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 18 20:05:41.486 03/04/07 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 19 20:05:41.486 03/04/07 Sev=Info/5 IKE/0x63000001 Peer supports DPD 20 20:05:41.486 03/04/07 Sev=Info/5 IKE/0x63000001 Peer supports DWR Code and DWR Text 21 20:05:41.496 03/04/07 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 22 20:05:41.496 03/04/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 137.69.115.15 23 20:05:41.496 03/04/07 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 24 20:05:41.496 03/04/07 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 25 20:05:41.556 03/04/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.15 26 20:05:41.556 03/04/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:LOAD_BALANCE) from 137.69.115.15 27 20:05:41.556 03/04/07 Sev=Info/4 CM/0x6310001B Received alternative server address "137.69.115.16" from primary server 28 20:05:41.566 03/04/07 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=6009953BEF7B0CAC R_Cookie=5CB7349A764EAEFD) reason = DEL_REASON_LOAD_BALANCING 29 20:05:41.566 03/04/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DWR) to 137.69.115.15 30 20:05:42.267 03/04/07 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=6009953BEF7B0CAC R_Cookie=5CB7349A764EAEFD) reason = DEL_REASON_LOAD_BALANCING 31 20:05:42.267 03/04/07 Sev=Info/4 CM/0x63100014 Unable to establish Phase 1 SA with server "usvgw3.emc.com" because of "DEL_REASON_LOAD_BALANCING" 32 20:05:42.267 03/04/07 Sev=Info/4 CM/0x63100010 Try alternative server "137.69.115.16" given by the primary server 33 20:05:42.267 03/04/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "137.69.115.16" 34 20:05:42.287 03/04/07 Sev=Info/4 CM/0x6310002D Resetting TCP connection on port 4005 35 20:05:42.768 03/04/07 Sev=Info/6 IPSEC/0x63700022 TCP RST sent to 137.69.115.15, src port 1246, dst port 4005 36 20:05:42.768 03/04/07 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 137.69.115.16, src port 1246, dst port 4005 37 20:05:42.768 03/04/07 Sev=Info/6 IPSEC/0x6370001C TCP SYN-ACK received from 137.69.115.16, src port 4005, dst port 1246 38 20:05:42.768 03/04/07 Sev=Info/6 IPSEC/0x63700020 TCP ACK sent to 137.69.115.16, src port 1246, dst port 4005 39 20:05:42.768 03/04/07 Sev=Info/4 CM/0x63100029 TCP connection established on port 4005 with server "137.69.115.16" 40 20:05:43.269 03/04/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "137.69.115.16" 41 20:05:43.299 03/04/07 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 137.69.115.16. 42 20:05:43.319 03/04/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Unity)) to 137.69.115.16 43 20:05:43.489 03/04/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 44 20:05:43.489 03/04/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(Unity), VID(Xauth), VID(dpd), VID(Frag), VID(?), VID(?)) from 137.69.115.16 45 20:05:43.489 03/04/07 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 46 20:05:43.489 03/04/07 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 47 20:05:43.489 03/04/07 Sev=Info/5 IKE/0x63000001 Peer supports DPD 48 20:05:43.489 03/04/07 Sev=Info/5 IKE/0x63000001 Peer supports DWR Code and DWR Text 49 20:05:43.499 03/04/07 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 50 20:05:43.499 03/04/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 137.69.115.16 51 20:05:43.499 03/04/07 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 52 20:05:43.499 03/04/07 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 53 20:05:43.519 03/04/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 54 20:05:43.529 03/04/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 137.69.115.16 55 20:05:43.529 03/04/07 Sev=Info/4 CM/0x63100015 Launch xAuth application 56 20:05:51.711 03/04/07 Sev=Info/4 CM/0x63100017 xAuth application returned 57 20:05:51.711 03/04/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 137.69.115.16 58 20:05:53.744 03/04/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 59 20:05:53.744 03/04/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, DWR) from 137.69.115.16 60 20:05:53.744 03/04/07 Sev=Info/4 IKE/0x63000080 Delete Reason Code: 4 --> PEER_DELETE-IKE_DELETE_NO_ERROR. 61 20:05:53.744 03/04/07 Sev=Info/5 IKE/0x6300003C Received a DELETE payload for IKE SA with Cookies: I_Cookie=A9FD00C5C9305BC2 R_Cookie=56BFF27027E15D83 62 20:05:53.744 03/04/07 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=A9FD00C5C9305BC2 R_Cookie=56BFF27027E15D83) reason = PEER_DELETE-IKE_DELETE_NO_ERROR 63 20:05:53.794 03/04/07 Sev=Info/6 IPSEC/0x6370001D TCP RST received from 137.69.115.16, src port 4005, dst port 1246 64 20:05:54.285 03/04/07 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=A9FD00C5C9305BC2 R_Cookie=56BFF27027E15D83) reason = PEER_DELETE-IKE_DELETE_NO_ERROR 65 20:05:54.285 03/04/07 Sev=Info/4 CM/0x63100014 Unable to establish Phase 1 SA with server "137.69.115.16" because of "PEER_DELETE-IKE_DELETE_NO_ERROR" 66 20:05:54.285 03/04/07 Sev=Info/4 CM/0x63100011 Attempt connection with backup server "usvgw1.emc.com" 67 20:05:54.285 03/04/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw1.emc.com" 68 20:05:55.356 03/04/07 Sev=Info/4 CM/0x6310002D Resetting TCP connection on port 4005 69 20:05:55.376 03/04/07 Sev=Info/6 IPSEC/0x63700022 TCP RST sent to 137.69.115.16, src port 1246, dst port 4005 70 20:05:55.376 03/04/07 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 128.221.195.15, src port 1246, dst port 4005 71 20:05:56.288 03/04/07 Sev=Info/6 IPSEC/0x6370001C TCP SYN-ACK received from 128.221.195.15, src port 4005, dst port 1246 72 20:05:56.288 03/04/07 Sev=Info/6 IPSEC/0x63700020 TCP ACK sent to 128.221.195.15, src port 1246, dst port 4005 73 20:06:00.804 03/04/07 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 128.221.195.15, src port 1246, dst port 4005 74 20:06:06.312 03/04/07 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 128.221.195.15, src port 1246, dst port 4005 75 20:06:11.820 03/04/07 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 128.221.195.15, src port 1246, dst port 4005 76 20:06:16.817 03/04/07 Sev=Info/4 CM/0x6310002A Unable to establish TCP connection on port 4005 with server "usvgw1.emc.com" 77 20:06:16.817 03/04/07 Sev=Info/4 CM/0x6310000C All connection attempts with backup server failed 78 20:06:16.817 03/04/07 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 79 20:06:16.817 03/04/07 Sev=Info/4 CM/0x6310002D Resetting TCP connection on port 4005 80 20:06:16.817 03/04/07 Sev=Info/6 CM/0x63100030 Removed local TCP port 1246 for TCP connection. 81 20:06:16.827 03/04/07 Sev=Info/4 IKE/0x63000001 IKE received signal to terminate VPN connection 82 20:06:16.847 03/04/07 Sev=Info/6 IPSEC/0x63700022 TCP RST sent to 128.221.195.15, src port 1246, dst port 4005 83 20:06:16.847 03/04/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 84 20:06:16.847 03/04/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 85 20:06:16.847 03/04/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 86 20:06:16.847 03/04/07 Sev=Info/4 IPSEC/0x6370000A IPSec driver successfully stopped 87 20:06:23.006 03/04/07 Sev=Info/4 CM/0x63100002 Begin connection process 88 20:06:23.016 03/04/07 Sev=Info/4 CM/0x63100004 Establish secure connection using Ethernet 89 20:06:23.016 03/04/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw3.emc.com" 90 20:06:23.026 03/04/07 Sev=Info/6 CM/0x6310002F Allocated local TCP port 1261 for TCP connection. 91 20:06:23.346 03/04/07 Sev=Info/4 IPSEC/0x63700008 IPSec driver successfully started 92 20:06:23.346 03/04/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 93 20:06:23.346 03/04/07 Sev=Info/6 IPSEC/0x6370002B Sent 6 packets, 0 were fragmented. 94 20:06:23.346 03/04/07 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 137.69.115.15, src port 1261, dst port 4005 95 20:06:23.346 03/04/07 Sev=Info/6 IPSEC/0x6370001C TCP SYN-ACK received from 137.69.115.15, src port 4005, dst port 1261 96 20:06:23.346 03/04/07 Sev=Info/6 IPSEC/0x63700020 TCP ACK sent to 137.69.115.15, src port 1261, dst port 4005 97 20:06:23.346 03/04/07 Sev=Info/4 CM/0x63100029 TCP connection established on port 4005 with server "usvgw3.emc.com" 98 20:06:23.847 03/04/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw3.emc.com" 99 20:06:23.867 03/04/07 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 137.69.115.15. 100 20:06:23.887 03/04/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Unity)) to 137.69.115.15 101 20:06:24.057 03/04/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.15 102 20:06:24.057 03/04/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(Unity), VID(Xauth), VID(dpd), VID(Frag), VID(?), VID(?)) from 137.69.115.15 103 20:06:24.057 03/04/07 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 104 20:06:24.057 03/04/07 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 105 20:06:24.057 03/04/07 Sev=Info/5 IKE/0x63000001 Peer supports DPD 106 20:06:24.057 03/04/07 Sev=Info/5 IKE/0x63000001 Peer supports DWR Code and DWR Text 107 20:06:24.078 03/04/07 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 108 20:06:24.078 03/04/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 137.69.115.15 109 20:06:24.078 03/04/07 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 110 20:06:24.078 03/04/07 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 111 20:06:24.108 03/04/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.15 112 20:06:24.108 03/04/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:LOAD_BALANCE) from 137.69.115.15 113 20:06:24.108 03/04/07 Sev=Info/4 CM/0x6310001B Received alternative server address "137.69.115.16" from primary server 114 20:06:24.108 03/04/07 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=C66BE72A1F5BCE98 R_Cookie=AB4B034766BB6682) reason = DEL_REASON_LOAD_BALANCING 115 20:06:24.108 03/04/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DWR) to 137.69.115.15 116 20:06:24.849 03/04/07 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=C66BE72A1F5BCE98 R_Cookie=AB4B034766BB6682) reason = DEL_REASON_LOAD_BALANCING 117 20:06:24.849 03/04/07 Sev=Info/4 CM/0x63100014 Unable to establish Phase 1 SA with server "usvgw3.emc.com" because of "DEL_REASON_LOAD_BALANCING" 118 20:06:24.849 03/04/07 Sev=Info/4 CM/0x63100010 Try alternative server "137.69.115.16" given by the primary server 119 20:06:24.849 03/04/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "137.69.115.16" 120 20:06:24.859 03/04/07 Sev=Info/4 CM/0x6310002D Resetting TCP connection on port 4005 121 20:06:25.349 03/04/07 Sev=Info/6 IPSEC/0x63700022 TCP RST sent to 137.69.115.15, src port 1261, dst port 4005 122 20:06:25.349 03/04/07 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 137.69.115.16, src port 1261, dst port 4005 123 20:06:25.349 03/04/07 Sev=Info/6 IPSEC/0x6370001C TCP SYN-ACK received from 137.69.115.16, src port 4005, dst port 1261 124 20:06:25.349 03/04/07 Sev=Info/6 IPSEC/0x63700020 TCP ACK sent to 137.69.115.16, src port 1261, dst port 4005 125 20:06:25.349 03/04/07 Sev=Info/4 CM/0x63100029 TCP connection established on port 4005 with server "137.69.115.16" 126 20:06:25.840 03/04/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "137.69.115.16" 127 20:06:25.870 03/04/07 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 137.69.115.16. 128 20:06:25.890 03/04/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Unity)) to 137.69.115.16 129 20:06:26.070 03/04/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 130 20:06:26.070 03/04/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(Unity), VID(Xauth), VID(dpd), VID(Frag), VID(?), VID(?)) from 137.69.115.16 131 20:06:26.070 03/04/07 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 132 20:06:26.070 03/04/07 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 133 20:06:26.070 03/04/07 Sev=Info/5 IKE/0x63000001 Peer supports DPD 134 20:06:26.070 03/04/07 Sev=Info/5 IKE/0x63000001 Peer supports DWR Code and DWR Text 135 20:06:26.080 03/04/07 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 136 20:06:26.080 03/04/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 137.69.115.16 137 20:06:26.080 03/04/07 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 138 20:06:26.080 03/04/07 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 139 20:06:26.100 03/04/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 140 20:06:26.100 03/04/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 137.69.115.16 141 20:06:26.100 03/04/07 Sev=Info/4 CM/0x63100015 Launch xAuth application 142 20:06:39.640 03/04/07 Sev=Info/4 CM/0x63100017 xAuth application returned 143 20:06:39.640 03/04/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 137.69.115.16 144 20:06:41.993 03/04/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 145 20:06:41.993 03/04/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 137.69.115.16 146 20:06:41.993 03/04/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 137.69.115.16 147 20:06:41.993 03/04/07 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 1 User Authenticated IKE SA in the system 148 20:06:42.053 03/04/07 Sev=Info/5 IKE/0x6300005D Client sending a firewall request to concentrator 149 20:06:42.053 03/04/07 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=Cisco Systems Integrated Client, Capability= (Centralized Protection Policy). 150 20:06:42.053 03/04/07 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=NetworkICE BlackICE Defender, Capability= (Are you There?). 151 20:06:42.053 03/04/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 137.69.115.16 152 20:06:43.015 03/04/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 153 20:06:43.015 03/04/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 137.69.115.16 154 20:06:43.015 03/04/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_ADDRESS: , value = 10.13.8.157 155 20:06:43.015 03/04/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NETMASK: , value = 255.255.192.0 156 20:06:43.015 03/04/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_DNS(1): , value = 137.69.224.15 157 20:06:43.015 03/04/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_DNS(2): , value = 128.221.12.10 158 20:06:43.015 03/04/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NBNS(1) (a.k.a. WINS) : , value = 128.221.12.10 159 20:06:43.015 03/04/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NBNS(2) (a.k.a. WINS) : , value = 128.222.67.10 160 20:06:43.015 03/04/07 Sev=Info/5 IKE/0x6300000E MODE_CFG_REPLY: Attribute = MODECFG_UNITY_BANNER, value = ************** EMC Americas West Coast VPN Gateway ************** ATTENTION!!! If you are running a VPN Client version other than 4.6, you must upgrade as soon as possible. Check the title bar of your VPN Dialer application. If it does not start with VPN Dialer-Version 4.6, disconnect from VPN now and visit http://vpndist.emc.com. Download and install "DTP3.6-VPN4.6.EXE". 161 20:06:43.015 03/04/07 Sev=Info/5 IKE/0x6300000D MODE_CFG_REPLY: Attribute = MODECFG_UNITY_SAVEPWD: , value = 0x00000000 162 20:06:43.015 03/04/07 Sev=Info/5 IKE/0x6300000E MODE_CFG_REPLY: Attribute = MODECFG_UNITY_DEFDOMAIN: , value = corp.emc.com 163 20:06:43.015 03/04/07 Sev=Info/5 IKE/0x6300000D MODE_CFG_REPLY: Attribute = MODECFG_UNITY_PFS: , value = 0x00000000 164 20:06:43.015 03/04/07 Sev=Info/5 IKE/0x6300000E MODE_CFG_REPLY: Attribute = APPLICATION_VERSION, value = Cisco Systems, Inc./VPN 3000 Concentrator Version 4.7.2.B built by vmurphy on Oct 04 2005 02:50:52 165 20:06:43.015 03/04/07 Sev=Info/5 IKE/0x6300000D MODE_CFG_REPLY: Attribute = MODECFG_UNITY_INCLUDE_LOCAL_LAN (# of local_nets), value = 0x00000001 166 20:06:43.015 03/04/07 Sev=Info/5 IKE/0x6300000F LOCAL_NET #1 subnet = 192.168.1.0 mask = 255.255.255.0 protocol = 0 src port = 0 dest port=0 167 20:06:43.015 03/04/07 Sev=Info/4 CM/0x63100019 Mode Config data received 168 20:06:43.035 03/04/07 Sev=Info/4 IKE/0x63000055 Received a key request from Driver: Local IP = 10.13.8.157, GW IP = 137.69.115.16, Remote IP = 0.0.0.0 169 20:06:43.035 03/04/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH, SA, NON, ID, ID) to 137.69.115.16 170 20:06:43.075 03/04/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 171 20:06:43.075 03/04/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:STATUS_RESP_LIFETIME) from 137.69.115.16 172 20:06:43.075 03/04/07 Sev=Info/5 IKE/0x63000044 RESPONDER-LIFETIME notify has value of 86400 seconds 173 20:06:43.075 03/04/07 Sev=Info/5 IKE/0x63000046 This SA has already been alive for 18 seconds, setting expiry to 86382 seconds from now 174 20:06:43.075 03/04/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 175 20:06:43.075 03/04/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK QM *(HASH, SA, NON, ID, ID, NOTIFY:STATUS_RESP_LIFETIME) from 137.69.115.16 176 20:06:43.075 03/04/07 Sev=Info/5 IKE/0x63000044 RESPONDER-LIFETIME notify has value of 28800 seconds 177 20:06:43.075 03/04/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH) to 137.69.115.16 178 20:06:43.085 03/04/07 Sev=Info/5 IKE/0x63000058 Loading IPsec SA (MsgID=5401F3B0 OUTBOUND SPI = 0x0D625E83 INBOUND SPI = 0xB1768908) 179 20:06:43.085 03/04/07 Sev=Info/5 IKE/0x63000025 Loaded OUTBOUND ESP SPI: 0x0D625E83 180 20:06:43.085 03/04/07 Sev=Info/5 IKE/0x63000026 Loaded INBOUND ESP SPI: 0xB1768908 181 20:06:43.746 03/04/07 Sev=Info/4 CM/0x63100034 The Virtual Adapter was enabled: IP=10.13.8.157/255.255.192.0 DNS=137.69.224.15,128.221.12.10 WINS=128.221.12.10,128.222.67.10 Domain=corp.emc.com Split DNS Names= 182 20:06:43.786 03/04/07 Sev=Info/6 CM/0x63100036 The routing table was updated for the Virtual Adapter 183 20:06:43.816 03/04/07 Sev=Info/4 CM/0x6310001A One secure connection established 184 20:06:44.186 03/04/07 Sev=Info/4 CM/0x63100038 Address watch added for 192.168.1.101. Current address(es): 192.168.1.101, 10.13.8.157, 192.168.6.1, 192.168.5.1. 185 20:06:44.186 03/04/07 Sev=Info/4 CM/0x63100038 Address watch added for 10.13.8.157. Current address(es): 192.168.1.101, 10.13.8.157, 192.168.6.1, 192.168.5.1. 186 20:06:44.247 03/04/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 187 20:06:44.247 03/04/07 Sev=Info/6 IPSEC/0x6370002B Sent 8 packets, 0 were fragmented. 188 20:06:44.247 03/04/07 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 189 20:06:44.247 03/04/07 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0x835e620d into key list 190 20:06:44.247 03/04/07 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 191 20:06:44.247 03/04/07 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0x088976b1 into key list 192 20:06:44.247 03/04/07 Sev=Info/4 IPSEC/0x6370002E Assigned VA private interface addr 10.13.8.157 193 20:06:44.877 03/04/07 Sev=Info/4 IPSEC/0x63700019 Activate outbound key with SPI=0x835e620d for inbound key with SPI=0x088976b1 194 20:08:36.348 03/04/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 137.69.115.16 195 20:08:36.348 03/04/07 Sev=Info/5 IKE/0x63000018 Deleting IPsec SA: (OUTBOUND SPI = D625E83 INBOUND SPI = B1768908) 196 20:08:36.348 03/04/07 Sev=Info/4 IKE/0x63000048 Discarding IPsec SA negotiation, MsgID=5401F3B0 197 20:08:36.348 03/04/07 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=C8D4C8338602B00D R_Cookie=AEC3A2B806ED6E9C) reason = DEL_REASON_RESET_SADB 198 20:08:36.348 03/04/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DWR) to 137.69.115.16 199 20:08:36.348 03/04/07 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=C8D4C8338602B00D R_Cookie=AEC3A2B806ED6E9C) reason = DEL_REASON_RESET_SADB 200 20:08:36.348 03/04/07 Sev=Info/4 CM/0x63100013 Phase 1 SA deleted cause by DEL_REASON_RESET_SADB. 0 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 201 20:08:36.348 03/04/07 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 202 20:08:36.348 03/04/07 Sev=Info/4 CM/0x6310002D Resetting TCP connection on port 4005 203 20:08:36.358 03/04/07 Sev=Info/6 CM/0x63100030 Removed local TCP port 1261 for TCP connection. 204 20:08:36.358 03/04/07 Sev=Info/6 CM/0x63100031 Tunnel to headend device 137.69.115.16 disconnected: duration: 0 days 0:1:53 205 20:08:36.358 03/04/07 Sev=Info/4 IKE/0x63000001 IKE received signal to terminate VPN connection 206 20:08:36.378 03/04/07 Sev=Info/6 CM/0x63100037 The routing table was returned to orginal state prior to Virtual Adapter 207 20:08:52.260 03/04/07 Sev=Critical/1 FIREWALL/0xE3A00003 Fatal error trying to start the firewall. The firewall has not been started. 208 20:08:54.373 03/04/07 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0x088976b1 209 20:08:54.373 03/04/07 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0x088976b1 210 20:08:54.373 03/04/07 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0x835e620d 211 20:08:54.373 03/04/07 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0x835e620d 212 20:08:54.373 03/04/07 Sev=Info/6 IPSEC/0x63700022 TCP RST sent to 137.69.115.16, src port 1261, dst port 4005 213 20:08:54.373 03/04/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 214 20:08:54.373 03/04/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 215 20:08:54.373 03/04/07 Sev=Info/4 IPSEC/0x6370000A IPSec driver successfully stopped 216 20:08:54.373 03/04/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys