EMC VPN Dialer Version 4.6.00.0045 Copyright (C) 1998-2004 Cisco Systems, Inc. All Rights Reserved. Client Type(s): Windows, WinNT Running on: 5.1.2600 Service Pack 2 Config file directory: C:\Program Files\EMC VPN\VPN Client 1 08:37:09.848 06/05/07 Sev=Info/4 CM/0x63100002 Begin connection process 2 08:37:09.898 06/05/07 Sev=Info/4 CM/0x63100004 Establish secure connection using Ethernet 3 08:37:09.898 06/05/07 Sev=Info/4 CM/0x63100024 Attempt connection with server "10.0.0.1" 4 08:37:09.908 06/05/07 Sev=Info/6 IKE/0x6300003B Attempting to establish a connection with 10.0.0.1. 5 08:37:09.928 06/05/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Nat-T), VID(Frag), VID(Unity)) to 10.0.0.1 6 08:37:09.928 06/05/07 Sev=Info/4 IPSEC/0x63700008 IPSec driver successfully started 7 08:37:09.928 06/05/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 8 08:37:09.968 06/05/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 9 08:37:09.968 06/05/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID(?), VID(Xauth), VID(Unity)) from 10.0.0.1 10 08:37:09.968 06/05/07 Sev=Info/5 IKE/0x63000001 Peer supports XAUTH 11 08:37:09.968 06/05/07 Sev=Info/5 IKE/0x63000001 Peer is a Cisco-Unity compliant peer 12 08:37:09.968 06/05/07 Sev=Info/6 IKE/0x63000001 IOS Vendor ID Contruction successful 13 08:37:09.968 06/05/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONTACT, VID(?), VID(Unity)) to 10.0.0.1 14 08:37:09.968 06/05/07 Sev=Info/4 IKE/0x63000082 IKE Port in use - Local Port = 0x01F4, Remote Port = 0x01F4 15 08:37:09.968 06/05/07 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 16 08:37:09.998 06/05/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 17 08:37:09.998 06/05/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 10.0.0.1 18 08:37:09.998 06/05/07 Sev=Info/4 CM/0x63100015 Launch xAuth application 19 08:37:10.509 06/05/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 20 08:37:10.509 06/05/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 21 08:37:11.530 06/05/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 22 08:37:11.530 06/05/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 23 08:37:13.543 06/05/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 24 08:37:13.543 06/05/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 25 08:37:17.559 06/05/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 26 08:37:17.559 06/05/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 27 08:37:20.373 06/05/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, NOTIFY:HEARTBEAT) to 10.0.0.1 28 08:37:20.373 06/05/07 Sev=Info/6 IKE/0x63000052 Sent a keepalive on the IKE SA 29 08:37:25.571 06/05/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 30 08:37:25.571 06/05/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 10.0.0.1 31 08:37:29.857 06/05/07 Sev=Info/4 CM/0x63100017 xAuth application returned 32 08:37:29.857 06/05/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 10.0.0.1 33 08:37:32.120 06/05/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 34 08:37:32.120 06/05/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 10.0.0.1 35 08:37:32.120 06/05/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 10.0.0.1 36 08:37:32.120 06/05/07 Sev=Info/4 CM/0x6310000E Established Phase 1 SA. 1 Crypto Active IKE SA, 1 User Authenticated IKE SA in the system 37 08:37:32.220 06/05/07 Sev=Info/5 IKE/0x6300005D Client sending a firewall request to concentrator 38 08:37:32.220 06/05/07 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=Cisco Systems Integrated Client, Capability= (Centralized Protection Policy). 39 08:37:32.220 06/05/07 Sev=Info/5 IKE/0x6300005C Firewall Policy: Product=NetworkICE BlackICE Defender, Capability= (Are you There?). 40 08:37:32.220 06/05/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 10.0.0.1 41 08:37:32.230 06/05/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 42 08:37:32.230 06/05/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 10.0.0.1 43 08:37:32.230 06/05/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_ADDRESS: , value = 10.24.198.23 44 08:37:32.230 06/05/07 Sev=Info/5 IKE/0x63000010 MODE_CFG_REPLY: Attribute = INTERNAL_IPV4_NETMASK: , value = 255.255.255.255 45 08:37:32.230 06/05/07 Sev=Info/4 CM/0x63100019 Mode Config data received 46 08:37:32.240 06/05/07 Sev=Info/4 IKE/0x63000055 Received a key request from Driver: Local IP = 10.24.198.23, GW IP = 10.0.0.1, Remote IP = 0.0.0.0 47 08:37:32.250 06/05/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH, SA, NON, ID, ID) to 10.0.0.1 48 08:37:32.270 06/05/07 Sev=Info/5 IKE/0x6300002F Received ISAKMP packet: peer = 10.0.0.1 49 08:37:32.270 06/05/07 Sev=Info/4 IKE/0x63000014 RECEIVING <<< ISAKMP OAK QM *(HASH, SA, NON, ID, ID, NOTIFY:STATUS_RESP_LIFETIME) from 10.0.0.1 50 08:37:32.270 06/05/07 Sev=Info/5 IKE/0x63000044 RESPONDER-LIFETIME notify has value of 57600 seconds 51 08:37:32.270 06/05/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK QM *(HASH) to 10.0.0.1 52 08:37:32.270 06/05/07 Sev=Info/5 IKE/0x63000058 Loading IPsec SA (MsgID=475C28D7 OUTBOUND SPI = 0x1143DA37 INBOUND SPI = 0x368B46A9) 53 08:37:32.270 06/05/07 Sev=Info/5 IKE/0x63000025 Loaded OUTBOUND ESP SPI: 0x1143DA37 54 08:37:32.270 06/05/07 Sev=Info/5 IKE/0x63000026 Loaded INBOUND ESP SPI: 0x368B46A9 55 08:37:35.245 06/05/07 Sev=Info/4 CM/0x63100034 The Virtual Adapter was enabled: IP=10.24.198.23/255.255.255.255 DNS=0.0.0.0,0.0.0.0 WINS=0.0.0.0,0.0.0.0 Domain= Split DNS Names= 56 08:37:35.265 06/05/07 Sev=Info/6 CM/0x63100036 The routing table was updated for the Virtual Adapter 57 08:37:35.295 06/05/07 Sev=Info/4 CM/0x6310001A One secure connection established 58 08:37:35.315 06/05/07 Sev=Info/4 CM/0x63100038 Address watch added for 10.24.198.23. Current address(es): 10.24.198.23, 192.168.5.1. 59 08:37:35.315 06/05/07 Sev=Info/4 CM/0x63100038 Address watch added for 10.24.198.23. Current address(es): 10.24.198.23, 192.168.5.1. 60 08:37:35.615 06/05/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 61 08:37:35.615 06/05/07 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 62 08:37:35.615 06/05/07 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0x37da4311 into key list 63 08:37:35.615 06/05/07 Sev=Info/4 IPSEC/0x63700010 Created a new key structure 64 08:37:35.615 06/05/07 Sev=Info/4 IPSEC/0x6370000F Added key with SPI=0xa9468b36 into key list 65 08:37:35.615 06/05/07 Sev=Info/4 IPSEC/0x6370002E Assigned VA private interface addr 10.24.198.23 66 08:37:37.898 06/05/07 Sev=Info/4 IPSEC/0x63700019 Activate outbound key with SPI=0x37da4311 for inbound key with SPI=0xa9468b36 67 17:14:01.999 06/05/07 Sev=Warning/3 CM/0xA310002C Adapter address changed from 10.24.198.23. Current address(es): 192.168.5.1. 68 17:14:01.999 06/05/07 Sev=Info/4 IKE/0x63000001 IKE received signal to terminate VPN connection 69 17:14:01.999 06/05/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 10.0.0.1 70 17:14:01.999 06/05/07 Sev=Warning/3 IKE/0xE3000068 Failed to send 76 bytes to 10.0.0.1, error = 0xFFFFFFF0 71 17:14:01.999 06/05/07 Sev=Info/5 IKE/0x63000018 Deleting IPsec SA: (OUTBOUND SPI = 1143DA37 INBOUND SPI = 368B46A9) 72 17:14:01.999 06/05/07 Sev=Info/4 IKE/0x63000048 Discarding IPsec SA negotiation, MsgID=475C28D7 73 17:14:01.999 06/05/07 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=A40994962F9B4421 R_Cookie=92AA4A6AF9E7FF6C) reason = DEL_REASON_ADDRESS_CHANGE 74 17:14:01.999 06/05/07 Sev=Info/4 IKE/0x63000013 SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 10.0.0.1 75 17:14:01.999 06/05/07 Sev=Warning/3 IKE/0xE3000068 Failed to send 84 bytes to 10.0.0.1, error = 0xFFFFFFF0 76 17:14:01.999 06/05/07 Sev=Info/4 IKE/0x6300004A Discarding IKE SA negotiation (I_Cookie=A40994962F9B4421 R_Cookie=92AA4A6AF9E7FF6C) reason = DEL_REASON_ADDRESS_CHANGE 77 17:14:01.999 06/05/07 Sev=Info/4 CM/0x63100013 Phase 1 SA deleted cause by DEL_REASON_ADDRESS_CHANGE. 0 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system 78 17:14:01.999 06/05/07 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 79 17:14:02.049 06/05/07 Sev=Info/6 CM/0x63100031 Tunnel to headend device 10.0.0.1 disconnected: duration: 0 days 8:36:27 80 17:14:02.139 06/05/07 Sev=Warning/2 CVPND/0xA340000E Failed to get adapter index. 81 17:14:02.139 06/05/07 Sev=Warning/2 CVPND/0xA340000E Failed to get adapter index. 82 17:14:02.139 06/05/07 Sev=Warning/2 CVPND/0xA340000E Failed to get adapter index. 83 17:14:02.139 06/05/07 Sev=Warning/2 CVPND/0xA340000E Failed to get adapter index. 84 17:14:02.149 06/05/07 Sev=Info/6 CM/0x63100037 The routing table was returned to orginal state prior to Virtual Adapter 85 17:14:03.681 06/05/07 Sev=Info/4 CM/0x63100035 The Virtual Adapter was disabled 86 17:14:03.681 06/05/07 Sev=Info/5 CM/0x63100025 Initializing CVPNDrv 87 17:14:03.681 06/05/07 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0xa9468b36 88 17:14:03.681 06/05/07 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0xa9468b36 89 17:14:03.681 06/05/07 Sev=Info/4 IPSEC/0x63700013 Delete internal key with SPI=0x37da4311 90 17:14:03.681 06/05/07 Sev=Info/4 IPSEC/0x6370000C Key deleted by SPI 0x37da4311 91 17:14:03.681 06/05/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 92 17:14:03.681 06/05/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys 93 17:14:03.681 06/05/07 Sev=Info/4 IPSEC/0x6370000A IPSec driver successfully stopped 94 17:14:03.681 06/05/07 Sev=Info/4 IPSEC/0x63700014 Deleted all keys