Cisco VPN Client Hanging at User Authentication

[mawilson]

I have one user that is having problems getting into our VPN. When he tries to connect it hangs at the user authentication stage. The username/password box comes up but has an hourglass with it and will not allow him to type in his password. I do not see anything in the logs on the concentrator where it even makes contact. I have uninstalled and reinstalled the client software, but it did not help. He has been on his home DSL, dialup, hotel wireless, and hotel ethernet with the same results each time. Has anyone seen this before?

Mark

 

[themut]

The concentrator logs are really detailed and actually provide more details than needed. If the VPN client displays the user/password box then you should definately see logs in the concentrator. The most common problem would be username and/or passwords don't match. You can also enable logs in the VPN client, go to:

Log | Log Settings

and make sure all options are set to High. Then click on Log again and "Enable" if "Disable" is displayed then logging is already enabled.

To enable detail logging in the VPN3000 concentrator go to:

Configuration | System | Events | Classes

and make sure AUTH, AUTHDBG, AUTHDECODE, IKE, IKEDBG, IKEDECODE, IPSEC, IPSECDBG and IPSECDECODE are ALL selected.

Then go to:

Monitoring | Filterable Event Log

and you will see all the logs there. I would advise you to look at simultaneous logs from both the VPN3000 and the VPN client. If the box is displayed but fails from there, it means IKE phase one has been established but it is failing due to either IKE phase two or user/password mismatch amongst the most common causes.

 

[mawilson]

Update. Fixed. I had the user send in his laptop. I had to install AdAware and run a scan. Then I was able to use the VPN connection and he has had no problems since.

Mark

 

[JOAMON]

Spyware....a beautiful thing................