EMC VPN Dialer Version 4.6.00.0045 Copyright (C) 1998-2004 Cisco Systems, Inc. All Rights Reserved. Client Type(s): Windows, WinNT Running on: 5.1.2600 Service Pack 2 Config file directory: C:\Program Files\EMC VPN\VPN Client 1 17:19:40.662 03/12/07 Sev=Info/4 CM/0x63100002 Begin connection process 2 17:19:40.672 03/12/07 Sev=Info/4 CM/0x63100004 Establish secure connection using Ethernet 3 17:19:40.672 03/12/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw3.emc.com" 4 17:19:40.692 03/12/07 Sev=Info/6 CM/0x6310002F Allocated local TCP port 3131 for TCP connection. 5 17:19:40.812 03/12/07 Sev=Info/4 IPSEC/0x63700008 IPSec driver successfully started 6 17:19:40.812 03/12/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 7 17:19:40.812 03/12/07 Sev=Info/6 IPSEC/0x6370002B Sent 61446 packets, 0 were fragmented. 8 17:19:40.812 03/12/07 Sev=Info/4 IPSEC/0x6370000D Key(s) deleted by Interface (10.4.12.203) 9 17:19:40.812 03/12/07 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 137.69.115.15, src port 3131, dst port 4005 10 17:19:40.812 03/12/07 Sev=Info/6 IPSEC/0x6370001C TCP SYN-ACK received from 137.69.115.15, src port 4005, dst port 3131 11 17:19:40.812 03/12/07 Sev=Info/6 IPSEC/0x63700020 TCP ACK sent to 137.69.115.15, src port 3131, dst port 4005 12 17:19:40.812 03/12/07 Sev=Info/4 CM/0x63100029 TCP connection established on port 4005 with server "usvgw3.emc.com" 13 17:19:41.313 03/12/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw3.emc.com" 14 17:19:41.333 03/12/07 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 137.69.115.15. 15 17:19:41.363 03/12/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Unity)) to 137.69.115.15 16 17:19:41.543 03/12/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.15 17 17:19:41.543 03/12/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(Unity), VID(Xauth), VID(dpd), VID(Frag), VID(?), VID(?)) from 137.69.115.15 18 17:19:41.543 03/12/07 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 19 17:19:41.543 03/12/07 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 20 17:19:41.543 03/12/07 Sev=Info/5 IKE/0x63000001 Peer supports DPD 21 17:19:41.543 03/12/07 Sev=Info/5 IKE/0x63000001 Peer supports DWR Code and DWR Text 22 17:19:41.543 03/12/07 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 23 17:19:41.543 03/12/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 137.69.115.15 24 17:19:41.543 03/12/07 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 25 17:19:41.543 03/12/07 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 26 17:19:41.573 03/12/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.15 27 17:19:41.573 03/12/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:LOAD_BALANCE) from 137.69.115.15 28 17:19:41.573 03/12/07 Sev=Info/4 CM/0x6310001B Received alternative server address "137.69.115.16" from primary server 29 17:19:41.573 03/12/07 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=DC20D21225517E14 R_Cookie=514279EAA638BA7C) reason = DEL_REASON_LOAD_BALANCING 30 17:19:41.573 03/12/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DWR) to 137.69.115.15 31 17:19:42.314 03/12/07 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=DC20D21225517E14 R_Cookie=514279EAA638BA7C) reason = DEL_REASON_LOAD_BALANCING 32 17:19:42.314 03/12/07 Sev=Info/4 CM/0x63100014 Unable to establish Phase 1 SA with server "usvgw3.emc.com" because of "DEL_REASON_LOAD_BALANCING" 33 17:19:42.314 03/12/07 Sev=Info/4 CM/0x63100010 Try alternative server "137.69.115.16" given by the primary server 34 17:19:42.314 03/12/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "137.69.115.16" 35 17:19:42.324 03/12/07 Sev=Info/4 CM/0x6310002D Resetting TCP connection on port 4005 36 17:19:42.825 03/12/07 Sev=Info/6 IPSEC/0x63700022 TCP RST sent to 137.69.115.15, src port 3131, dst port 4005 37 17:19:42.825 03/12/07 Sev=Info/6 IPSEC/0x6370001F TCP SYN sent to 137.69.115.16, src port 3131, dst port 4005 38 17:19:42.825 03/12/07 Sev=Info/6 IPSEC/0x6370001C TCP SYN-ACK received from 137.69.115.16, src port 4005, dst port 3131 39 17:19:42.825 03/12/07 Sev=Info/6 IPSEC/0x63700020 TCP ACK sent to 137.69.115.16, src port 3131, dst port 4005 40 17:19:42.825 03/12/07 Sev=Info/4 CM/0x63100029 TCP connection established on port 4005 with server "137.69.115.16" 41 17:19:43.326 03/12/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "137.69.115.16" 42 17:19:43.346 03/12/07 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 137.69.115.16. 43 17:19:43.366 03/12/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Unity)) to 137.69.115.16 44 17:19:43.536 03/12/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 45 17:19:43.536 03/12/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(Unity), VID(Xauth), VID(dpd), VID(Frag), VID(?), VID(?)) from 137.69.115.16 46 17:19:43.536 03/12/07 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 47 17:19:43.536 03/12/07 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 48 17:19:43.536 03/12/07 Sev=Info/5 IKE/0x63000001 Peer supports DPD 49 17:19:43.536 03/12/07 Sev=Info/5 IKE/0x63000001 Peer supports DWR Code and DWR Text 50 17:19:43.546 03/12/07 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 51 17:19:43.546 03/12/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 137.69.115.16 52 17:19:43.546 03/12/07 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 53 17:19:43.546 03/12/07 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 54 17:19:43.566 03/12/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 55 17:19:43.566 03/12/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 137.69.115.16 56 17:19:43.566 03/12/07 Sev=Info/4 CM/0x63100015 Launch xAuth application 57 17:19:53.771 03/12/07 Sev=Info/4 CM/0x63100017 xAuth application returned 58 17:19:53.771 03/12/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 137.69.115.16 59 17:19:57.015 03/12/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 60 17:19:57.015 03/12/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 137.69.115.16 61 17:19:57.015 03/12/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 137.69.115.16 62 17:19:57.015 03/12/07 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 1 User Authenticated IKE SA in the system 63 17:19:57.036 03/12/07 Sev=Info/5 IKE/0x6300005D Client sending a firewall request to concentrator 64 17:19:57.036 03/12/07 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=Cisco Systems Integrated Client, Capability= (Centralized Protection Policy). 65 17:19:57.036 03/12/07 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=NetworkICE BlackICE Defender, Capability= (Are you There?). 66 17:19:57.036 03/12/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 137.69.115.16 67 17:19:57.977 03/12/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 68 17:19:57.977 03/12/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 137.69.115.16 69 17:19:57.977 03/12/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_ADDRESS: , value = 10.13.8.35 70 17:19:57.977 03/12/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NETMASK: , value = 255.255.192.0 71 17:19:57.977 03/12/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_DNS(1): , value = 137.69.224.15 72 17:19:57.977 03/12/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_DNS(2): , value = 128.221.12.10 73 17:19:57.977 03/12/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NBNS(1) (a.k.a. WINS) : , value = 128.221.12.10 74 17:19:57.977 03/12/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NBNS(2) (a.k.a. WINS) : , value = 128.222.67.10 75 17:19:57.977 03/12/07 Sev=Info/5 IKE/0x6300000E MODE_CFG_REPLY: Attribute = MODECFG_UNITY_BANNER, value = ************** EMC Americas West Coast VPN Gateway ************** ATTENTION!!! If you are running a VPN Client version other than 4.6, you must upgrade as soon as possible. Check the title bar of your VPN Dialer application. If it does not start with VPN Dialer-Version 4.6, disconnect from VPN now and visit http://vpndist.emc.com. Download and install "DTP3.6-VPN4.6.EXE". 76 17:19:57.977 03/12/07 Sev=Info/5 IKE/0x6300000D MODE_CFG_REPLY: Attribute = MODECFG_UNITY_SAVEPWD: , value = 0x00000000 77 17:19:57.977 03/12/07 Sev=Info/5 IKE/0x6300000E MODE_CFG_REPLY: Attribute = MODECFG_UNITY_DEFDOMAIN: , value = corp.emc.com 78 17:19:57.977 03/12/07 Sev=Info/5 IKE/0x6300000D MODE_CFG_REPLY: Attribute = MODECFG_UNITY_PFS: , value = 0x00000000 79 17:19:57.977 03/12/07 Sev=Info/5 IKE/0x6300000E MODE_CFG_REPLY: Attribute = APPLICATION_VERSION, value = Cisco Systems, Inc./VPN 3000 Concentrator Version 4.7.2.B built by vmurphy on Oct 04 2005 02:50:52 80 17:19:57.977 03/12/07 Sev=Info/5 IKE/0x6300000D MODE_CFG_REPLY: Attribute = MODECFG_UNITY_INCLUDE_LOCAL_LAN (# of local_nets), value = 0x00000001 81 17:19:57.977 03/12/07 Sev=Info/5 IKE/0x6300000F LOCAL_NET #1 subnet = 192.168.1.0 mask = 255.255.255.0 protocol = 0 src port = 0 dest port=0 82 17:19:57.987 03/12/07 Sev=Info/4 CM/0x63100019 Mode Config data received 83 17:19:58.007 03/12/07 Sev=Info/4 IKE/0x63000055 Received a key request from Driver: Local IP = 10.13.8.35, GW IP = 137.69.115.16, Remote IP = 0.0.0.0 84 17:19:58.007 03/12/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH, SA, NON, ID, ID) to 137.69.115.16 85 17:19:58.047 03/12/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 86 17:19:58.047 03/12/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:STATUS_RESP_LIFETIME) from 137.69.115.16 87 17:19:58.047 03/12/07 Sev=Info/5 IKE/0x63000044 RESPONDER-LIFETIME notify has value of 86400 seconds 88 17:19:58.047 03/12/07 Sev=Info/5 IKE/0x63000046 This SA has already been alive for 15 seconds, setting expiry to 86385 seconds from now 89 17:19:58.047 03/12/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 137.69.115.16 90 17:19:58.047 03/12/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK QM *(HASH, SA, NON, ID, ID, NOTIFY:STATUS_RESP_LIFETIME) from 137.69.115.16 91 17:19:58.047 03/12/07 Sev=Info/5 IKE/0x63000044 RESPONDER-LIFETIME notify has value of 28800 seconds 92 17:19:58.047 03/12/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH) to 137.69.115.16 93 17:19:58.047 03/12/07 Sev=Info/5 IKE/0x63000058 Loading IPsec SA (MsgID=C8D32C04 OUTBOUND SPI = 0x30B10EEB INBOUND SPI = 0x0125087D) 94 17:19:58.047 03/12/07 Sev=Info/5 IKE/0x63000025 Loaded OUTBOUND ESP SPI: 0x30B10EEB 95 17:19:58.047 03/12/07 Sev=Info/5 IKE/0x63000026 Loaded INBOUND ESP SPI: 0x0125087D 96 17:19:58.718 03/12/07 Sev=Info/4 CM/0x63100034 The Virtual Adapter was enabled: IP=10.13.8.35/255.255.192.0 DNS=137.69.224.15,128.221.12.10 WINS=128.221.12.10,128.222.67.10 Domain=corp.emc.com Split DNS Names= 97 17:19:58.748 03/12/07 Sev=Info/6 CM/0x63100036 The routing table was updated for the Virtual Adapter 98 17:19:58.948 03/12/07 Sev=Info/4 CM/0x6310001A One secure connection established 99 17:19:59.129 03/12/07 Sev=Info/4 CM/0x63100038 Address watch added for 192.168.1.101. Current address(es): 192.168.1.101, 10.13.8.35, 192.168.6.1, 192.168.5.1. 100 17:19:59.129 03/12/07 Sev=Info/4 CM/0x63100038 Address watch added for 10.13.8.35. Current address(es): 192.168.1.101, 10.13.8.35, 192.168.6.1, 192.168.5.1. 101 17:19:59.179 03/12/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 102 17:19:59.179 03/12/07 Sev=Info/6 IPSEC/0x6370002B Sent 8 packets, 0 were fragmented. 103 17:19:59.179 03/12/07 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 104 17:19:59.179 03/12/07 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0xeb0eb130 into key list 105 17:19:59.179 03/12/07 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 106 17:19:59.179 03/12/07 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0x7d082501 into key list 107 17:19:59.179 03/12/07 Sev=Info/4 IPSEC/0x6370002E Assigned VA private interface addr 10.13.8.35