EMC VPN Dialer Version 4.6.00.0045 Copyright (C) 1998-2004 Cisco Systems, Inc. All Rights Reserved. Client Type(s): Windows, WinNT Running on: 5.1.2600 Service Pack 2 Config file directory: C:\Program Files\EMC VPN\VPN Client 1 09:25:58.423 05/25/07 Sev=Info/4 CM/0x63100002 Begin connection process 2 09:25:58.433 05/25/07 Sev=Info/4 CM/0x63100004 Establish secure connection using Ethernet 3 09:25:58.433 05/25/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "10.0.0.1" 4 09:25:58.443 05/25/07 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 10.0.0.1. 5 09:25:58.453 05/25/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Nat-T), VID(Frag), VID(Unity)) to 10.0.0.1 6 09:25:58.484 05/25/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 7 09:25:58.484 05/25/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(?), VID(Xauth), VID(Unity)) from 10.0.0.1 8 09:25:58.484 05/25/07 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 9 09:25:58.484 05/25/07 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 10 09:25:58.494 05/25/07 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 11 09:25:58.494 05/25/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 10.0.0.1 12 09:25:58.494 05/25/07 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 13 09:25:58.494 05/25/07 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 14 09:25:58.524 05/25/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 15 09:25:58.524 05/25/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 10.0.0.1 16 09:25:58.524 05/25/07 Sev=Info/4 CM/0x63100015 Launch xAuth application 17 09:25:58.614 05/25/07 Sev=Info/4 IPSEC/0x63700008 IPSec driver successfully started 18 09:25:58.614 05/25/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 19 09:25:58.614 05/25/07 Sev=Info/4 IPSEC/0x6370000D Key(s) deleted by Interface (10.24.198.138) 20 09:25:59.024 05/25/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 21 09:25:59.024 05/25/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 22 09:26:00.046 05/25/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 23 09:26:00.046 05/25/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 24 09:26:02.069 05/25/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 25 09:26:02.069 05/25/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 26 09:26:06.084 05/25/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 27 09:26:06.084 05/25/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 28 09:26:08.628 05/25/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:HEARTBEAT) to 10.0.0.1 29 09:26:08.628 05/25/07 Sev=Info/6 IKE/0x63000052 Sent a keepalive on the IKE SA 30 09:26:14.106 05/25/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 31 09:26:14.106 05/25/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 32 09:26:14.797 05/25/07 Sev=Info/4 CM/0x63100017 xAuth application returned 33 09:26:14.797 05/25/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 10.0.0.1 34 09:26:18.903 05/25/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 35 09:26:18.903 05/25/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 10.0.0.1 36 09:26:18.903 05/25/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 10.0.0.1 37 09:26:18.903 05/25/07 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 1 User Authenticated IKE SA in the system 38 09:26:18.933 05/25/07 Sev=Info/5 IKE/0x6300005D Client sending a firewall request to concentrator 39 09:26:18.933 05/25/07 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=Cisco Systems Integrated Client, Capability= (Centralized Protection Policy). 40 09:26:18.933 05/25/07 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=NetworkICE BlackICE Defender, Capability= (Are you There?). 41 09:26:18.933 05/25/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 10.0.0.1 42 09:26:18.943 05/25/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 43 09:26:18.943 05/25/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 10.0.0.1 44 09:26:18.943 05/25/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_ADDRESS: , value = 10.24.198.121 45 09:26:18.943 05/25/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NETMASK: , value = 255.255.255.255 46 09:26:18.943 05/25/07 Sev=Info/4 CM/0x63100019 Mode Config data received 47 09:26:18.963 05/25/07 Sev=Info/4 IKE/0x63000055 Received a key request from Driver: Local IP = 10.24.198.121, GW IP = 10.0.0.1, Remote IP = 0.0.0.0 48 09:26:18.963 05/25/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH, SA, NON, ID, ID) to 10.0.0.1 49 09:26:18.993 05/25/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 50 09:26:18.993 05/25/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK QM *(HASH, SA, NON, ID, ID, NOTIFY:STATUS_RESP_LIFETIME) from 10.0.0.1 51 09:26:18.993 05/25/07 Sev=Info/5 IKE/0x63000044 RESPONDER-LIFETIME notify has value of 57600 seconds 52 09:26:18.993 05/25/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH) to 10.0.0.1 53 09:26:18.993 05/25/07 Sev=Info/5 IKE/0x63000058 Loading IPsec SA (MsgID=5C2C64E4 OUTBOUND SPI = 0xB9AE7679 INBOUND SPI = 0x17718E2D) 54 09:26:18.993 05/25/07 Sev=Info/5 IKE/0x63000025 Loaded OUTBOUND ESP SPI: 0xB9AE7679 55 09:26:18.993 05/25/07 Sev=Info/5 IKE/0x63000026 Loaded INBOUND ESP SPI: 0x17718E2D 56 09:26:19.474 05/25/07 Sev=Info/4 CM/0x63100034 The Virtual Adapter was enabled: IP=10.24.198.121/255.255.255.255 DNS=0.0.0.0,0.0.0.0 WINS=0.0.0.0,0.0.0.0 Domain= Split DNS Names= 57 09:26:19.494 05/25/07 Sev=Info/6 CM/0x63100036 The routing table was updated for the Virtual Adapter 58 09:26:19.524 05/25/07 Sev=Info/4 CM/0x6310001A One secure connection established 59 09:26:19.594 05/25/07 Sev=Info/4 CM/0x63100038 Address watch added for 10.24.198.121. Current address(es): 10.24.198.121, 192.168.5.1. 60 09:26:19.594 05/25/07 Sev=Info/4 CM/0x63100038 Address watch added for 10.24.198.121. Current address(es): 10.24.198.121, 192.168.5.1. 61 09:26:19.624 05/25/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 62 09:26:19.624 05/25/07 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 63 09:26:19.624 05/25/07 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0x7976aeb9 into key list 64 09:26:19.624 05/25/07 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 65 09:26:19.624 05/25/07 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0x2d8e7117 into key list 66 09:26:19.624 05/25/07 Sev=Info/4 IPSEC/0x6370002E Assigned VA private interface addr 10.24.198.121 67 09:26:20.145 05/25/07 Sev=Info/4 IPSEC/0x63700019 Activate outbound key with SPI=0x7976aeb9 for inbound key with SPI=0x2d8e7117 68 11:36:12.535 05/25/07 Sev=Info/4 CM/0x6310000A Secure connections terminated 69 11:36:12.535 05/25/07 Sev=Info/4 IKE/0x63000001 IKE received signal to terminate VPN connection 70 11:36:12.535 05/25/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 10.0.0.1 71 11:36:12.535 05/25/07 Sev=Info/5 IKE/0x63000018 Deleting IPsec SA: (OUTBOUND SPI = B9AE7679 INBOUND SPI = 17718E2D) 72 11:36:12.535 05/25/07 Sev=Info/4 IKE/0x63000048 Discarding IPsec SA negotiation, MsgID=5C2C64E4 73 11:36:12.535 05/25/07 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=3634C5FE6C503765 R_Cookie=76E57BD7B23B87BE) reason = DEL_REASON_RESET_SADB 74 11:36:12.535 05/25/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 10.0.0.1 75 11:36:12.535 05/25/07 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=3634C5FE6C503765 R_Cookie=76E57BD7B23B87BE) reason = DEL_REASON_RESET_SADB 76 11:36:12.535 05/25/07 Sev=Info/4 CM/0x63100013 Phase 1 SA deleted cause by DEL_REASON_RESET_SADB. 0 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 77 11:36:12.535 05/25/07 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 78 11:36:12.555 05/25/07 Sev=Info/6 CM/0x63100031 Tunnel to headend device 10.0.0.1 disconnected: duration: 0 days 2:9:53 79 11:36:12.605 05/25/07 Sev=Warning/2 CVPND/0xA3400015 Error with call to IpHlpApi.DLL: DeleteIpForwardEntry, error 87 80 11:36:12.605 05/25/07 Sev=Warning/2 CVPND/0xA3400015 Error with call to IpHlpApi.DLL: DeleteIpForwardEntry, error 87 81 11:36:12.615 05/25/07 Sev=Info/6 CM/0x63100037 The routing table was returned to orginal state prior to Virtual Adapter 82 11:36:14.158 05/25/07 Sev=Info/4 CM/0x63100035 The Virtual Adapter was disabled 83 11:36:14.158 05/25/07 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 84 11:36:14.208 05/25/07 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0x2d8e7117 85 11:36:14.208 05/25/07 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0x2d8e7117 86 11:36:14.208 05/25/07 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0x7976aeb9 87 11:36:14.208 05/25/07 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0x7976aeb9 88 11:36:14.208 05/25/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 89 11:36:14.208 05/25/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 90 11:36:14.208 05/25/07 Sev=Info/4 IPSEC/0x6370000A IPSec driver successfully stopped 91 11:36:14.208 05/25/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys