"Recieved malformed message.." in VPN Client Log

[Rainer88]

I have a PIX 501 configured with the Startup- and the VPN Wizard from the new PDM 2.0. When I connect to the PIX from the Cisco VPN client (3.5.1) the login and the channel seems to be established; but in the Log the line "IKE/0xA3000057 ... Received malformed message or negotiation no longer active" appears.

There is no communication with the inside net possible.

 

[philster01]

Rainer88,
Did you resolve this problem? I am receiving the same message in the cisco log when trying to connect via wireless nic to my linksys wireless router to company VPN.
It works fine direct cabled to my linksys, but not wireless.

 

[Guest_imported]

I also have this issue is there a solution!

 

[yizhar]

HI.

There is a SETMTU utility in the VPN client package, try using it.
Try the following values for Ethernet:
1400
1000
500
These are only my guesses.

What is the client OS?
What type of connection to the Internet does the client use?
Did you try also with an analog modem?
Did setting the MTU change anything?

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[kerna]

Hi,

We are using version 6.2(2) on a Pix515. After configuring a vpn, client connecting to pix to access internal machines, we recieved the same error as listed above.

After doing a little digging, we found that one of the hiding nat rules was a little odd: (Real addresses replace with private address for this example)

global (outside) 1 192.168.42.119

This was replaced with:

global (outside) 1 192.168.42.119 netmask 255.255.255.255

Once this was done, attempting to connect with the vpn client 3.5.2 still recieved the same error in the log viewer, but we are now able to access the machines on the inside network.

I do wonder if the error is generated by an error in nat rules.

 

[yizhar]

HI Kerna.

Do you have any documents or links about this issue?
Can you provide more info and details?

Thanks.
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[ardy]

I am having this problem too. When I connect using my wireless card (LinkSys router) I get this error. But, with ethernet , it works fine. Did anyone find a solution?

Thanks in advance,
Ardy

 

[lexcoupe]

Hi All,

I followed Yizhar's help and it worked for me. I set the MTU to 1400 on the LAN and it's working.

Lexcoupe