EMC VPN Dialer Version 4.6.00.0045 Copyright (C) 1998-2004 Cisco Systems, Inc. All Rights Reserved. Client Type(s): Windows, WinNT Running on: 5.1.2600 Service Pack 2 Config file directory: C:\Program Files\EMC VPN\VPN Client 1 08:29:43.072 05/23/07 Sev=Info/4 CM/0x63100002 Begin connection process 2 08:29:43.093 05/23/07 Sev=Info/4 CM/0x63100004 Establish secure connection using Ethernet 3 08:29:43.093 05/23/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw3.emc.com" 4 08:30:09.390 05/23/07 Sev=Info/4 CM/0x6310001D Unable to resolve server address "usvgw3.emc.com" 5 08:30:09.390 05/23/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "usvgw1.emc.com" 6 08:30:35.678 05/23/07 Sev=Info/4 CM/0x6310001D Unable to resolve server address "usvgw1.emc.com" 7 08:30:35.678 05/23/07 Sev=Info/4 CM/0x6310000C All connection attempts with backup server failed 8 08:30:35.678 05/23/07 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 9 08:30:35.688 05/23/07 Sev=Info/4 IPSEC/0x63700008 IPSec driver successfully started 10 08:30:35.688 05/23/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 11 08:30:35.688 05/23/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 12 08:30:35.688 05/23/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 13 08:30:35.688 05/23/07 Sev=Info/4 IPSEC/0x6370000A IPSec driver successfully stopped 14 08:31:06.332 05/23/07 Sev=Info/4 CM/0x63100002 Begin connection process 15 08:31:06.352 05/23/07 Sev=Info/4 CM/0x63100004 Establish secure connection using Ethernet 16 08:31:06.352 05/23/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "10.0.0.1" 17 08:31:06.392 05/23/07 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 10.0.0.1. 18 08:31:06.432 05/23/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Nat-T), VID(Frag), VID(Unity)) to 10.0.0.1 19 08:31:06.432 05/23/07 Sev=Info/4 IPSEC/0x63700008 IPSec driver successfully started 20 08:31:06.432 05/23/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 21 08:31:06.462 05/23/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 22 08:31:06.462 05/23/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(?), VID(Xauth), VID(Unity)) from 10.0.0.1 23 08:31:06.462 05/23/07 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 24 08:31:06.462 05/23/07 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 25 08:31:06.472 05/23/07 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 26 08:31:06.472 05/23/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 10.0.0.1 27 08:31:06.472 05/23/07 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 28 08:31:06.472 05/23/07 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 29 08:31:06.492 05/23/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 30 08:31:06.492 05/23/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 10.0.0.1 31 08:31:06.492 05/23/07 Sev=Info/4 CM/0x63100015 Launch xAuth application 32 08:31:07.003 05/23/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 33 08:31:07.003 05/23/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 34 08:31:08.025 05/23/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 35 08:31:08.025 05/23/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 36 08:31:10.038 05/23/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 37 08:31:10.038 05/23/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 38 08:31:14.063 05/23/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 39 08:31:14.063 05/23/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 40 08:31:15.545 05/23/07 Sev=Info/4 CM/0x63100017 xAuth application returned 41 08:31:15.545 05/23/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 10.0.0.1 42 08:31:16.867 05/23/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:HEARTBEAT) to 10.0.0.1 43 08:31:16.867 05/23/07 Sev=Info/6 IKE/0x63000052 Sent a keepalive on the IKE SA 44 08:31:17.979 05/23/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 45 08:31:17.979 05/23/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 10.0.0.1 46 08:31:17.979 05/23/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 10.0.0.1 47 08:31:17.979 05/23/07 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 1 User Authenticated IKE SA in the system 48 08:31:18.069 05/23/07 Sev=Info/5 IKE/0x6300005D Client sending a firewall request to concentrator 49 08:31:18.069 05/23/07 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=Cisco Systems Integrated Client, Capability= (Centralized Protection Policy). 50 08:31:18.069 05/23/07 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=NetworkICE BlackICE Defender, Capability= (Are you There?). 51 08:31:18.069 05/23/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 10.0.0.1 52 08:31:18.079 05/23/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 53 08:31:18.079 05/23/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 10.0.0.1 54 08:31:18.079 05/23/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_ADDRESS: , value = 10.24.198.138 55 08:31:18.079 05/23/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NETMASK: , value = 255.255.255.255 56 08:31:18.079 05/23/07 Sev=Info/4 CM/0x63100019 Mode Config data received 57 08:31:18.089 05/23/07 Sev=Info/4 IKE/0x63000055 Received a key request from Driver: Local IP = 10.24.198.138, GW IP = 10.0.0.1, Remote IP = 0.0.0.0 58 08:31:18.089 05/23/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH, SA, NON, ID, ID) to 10.0.0.1 59 08:31:18.119 05/23/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 60 08:31:18.119 05/23/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK QM *(HASH, SA, NON, ID, ID, NOTIFY:STATUS_RESP_LIFETIME) from 10.0.0.1 61 08:31:18.119 05/23/07 Sev=Info/5 IKE/0x63000044 RESPONDER-LIFETIME notify has value of 57600 seconds 62 08:31:18.119 05/23/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH) to 10.0.0.1 63 08:31:18.119 05/23/07 Sev=Info/5 IKE/0x63000058 Loading IPsec SA (MsgID=F7C8D8D5 OUTBOUND SPI = 0x4427AEA5 INBOUND SPI = 0x7FA278AE) 64 08:31:18.119 05/23/07 Sev=Info/5 IKE/0x63000025 Loaded OUTBOUND ESP SPI: 0x4427AEA5 65 08:31:18.119 05/23/07 Sev=Info/5 IKE/0x63000026 Loaded INBOUND ESP SPI: 0x7FA278AE 66 08:31:20.693 05/23/07 Sev=Info/4 CM/0x63100034 The Virtual Adapter was enabled: IP=10.24.198.138/255.255.255.255 DNS=0.0.0.0,0.0.0.0 WINS=0.0.0.0,0.0.0.0 Domain= Split DNS Names= 67 08:31:20.743 05/23/07 Sev=Info/6 CM/0x63100036 The routing table was updated for the Virtual Adapter 68 08:31:20.763 05/23/07 Sev=Info/4 CM/0x6310001A One secure connection established 69 08:31:20.783 05/23/07 Sev=Info/4 CM/0x63100038 Address watch added for 10.24.198.138. Current address(es): 10.24.198.138, 192.168.5.1. 70 08:31:20.783 05/23/07 Sev=Info/4 CM/0x63100038 Address watch added for 10.24.198.138. Current address(es): 10.24.198.138, 192.168.5.1. 71 08:31:20.993 05/23/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 72 08:31:20.993 05/23/07 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 73 08:31:20.993 05/23/07 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0xa5ae2744 into key list 74 08:31:20.993 05/23/07 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 75 08:31:20.993 05/23/07 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0xae78a27f into key list 76 08:31:20.993 05/23/07 Sev=Info/4 IPSEC/0x6370002E Assigned VA private interface addr 10.24.198.138 77 08:31:25.880 05/23/07 Sev=Info/4 IPSEC/0x63700019 Activate outbound key with SPI=0xa5ae2744 for inbound key with SPI=0xae78a27f 78 17:06:20.337 05/23/07 Sev=Info/4 CM/0x6310000A Secure connections terminated 79 17:06:20.337 05/23/07 Sev=Info/4 IKE/0x63000001 IKE received signal to terminate VPN connection 80 17:06:20.337 05/23/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 10.0.0.1 81 17:06:20.337 05/23/07 Sev=Info/5 IKE/0x63000018 Deleting IPsec SA: (OUTBOUND SPI = 4427AEA5 INBOUND SPI = 7FA278AE) 82 17:06:20.337 05/23/07 Sev=Info/4 IKE/0x63000048 Discarding IPsec SA negotiation, MsgID=F7C8D8D5 83 17:06:20.347 05/23/07 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=1A66FC5061F40F0B R_Cookie=00C9E7408B94F4C9) reason = DEL_REASON_RESET_SADB 84 17:06:20.347 05/23/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 10.0.0.1 85 17:06:20.347 05/23/07 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=1A66FC5061F40F0B R_Cookie=00C9E7408B94F4C9) reason = DEL_REASON_RESET_SADB 86 17:06:20.347 05/23/07 Sev=Info/4 CM/0x63100013 Phase 1 SA deleted cause by DEL_REASON_RESET_SADB. 0 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 87 17:06:20.347 05/23/07 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 88 17:06:20.407 05/23/07 Sev=Info/6 CM/0x63100031 Tunnel to headend device 10.0.0.1 disconnected: duration: 0 days 8:35:0 89 17:06:20.417 05/23/07 Sev=Warning/2 CVPND/0xA3400015 Error with call to IpHlpApi.DLL: DeleteIpForwardEntry, error 87 90 17:06:20.427 05/23/07 Sev=Warning/2 CVPND/0xA3400015 Error with call to IpHlpApi.DLL: DeleteIpForwardEntry, error 87 91 17:06:20.427 05/23/07 Sev=Info/6 CM/0x63100037 The routing table was returned to orginal state prior to Virtual Adapter 92 17:06:35.999 05/23/07 Sev=Warning/2 CM/0xA310002E Failed to disable the virtual adapter. 93 17:06:35.999 05/23/07 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 94 17:06:36.009 05/23/07 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0xae78a27f 95 17:06:36.009 05/23/07 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0xae78a27f 96 17:06:36.009 05/23/07 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0xa5ae2744 97 17:06:36.009 05/23/07 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0xa5ae2744 98 17:06:36.009 05/23/07 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 99 17:06:36.009 05/23/07 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0x00000000 100 17:06:36.009 05/23/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 101 17:06:36.009 05/23/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 102 17:06:36.009 05/23/07 Sev=Info/4 IPSEC/0x6370000A IPSec driver successfully stopped 103 17:06:36.009 05/23/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 104 17:06:36.009 05/23/07 Sev=Warning/2 IKE/0xA3000067 Received an IPC message during invalid state (IKE_MAIN:511)