Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

Register Log in
  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

VPN server Problem. 1

Status
Not open for further replies.
Roots000

Roots000

MIS
Dec 6, 2003
7
0
0
GB
Cant seem to get the vpn server to work, ive been trying to get it to work on the inside interface first once that is done i will try the outside. here is the error i get with the cisco vpn client software and my running conf:

197 14:57:16.906 12/08/03 Sev=Info/4 CM/0x63100002
Begin connection process

198 14:57:16.906 12/08/03 Sev=Info/4 CVPND/0xE3400001
Microsoft IPSec Policy Agent service stopped successfully

199 14:57:16.906 12/08/03 Sev=Info/4 CM/0x63100004
Establish secure connection using Ethernet

200 14:57:16.906 12/08/03 Sev=Info/4 CM/0x63100024
Attempt connection with server "192.168.1.2"

201 14:57:17.921 12/08/03 Sev=Info/6 IKE/0x6300003B
Attempting to establish a connection with 192.168.1.2.

202 14:57:17.921 12/08/03 Sev=Info/4 IKE/0x63000013
SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Unity)) to 192.168.1.2

203 14:57:17.921 12/08/03 Sev=Info/4 IPSEC/0x63700008
IPSec driver successfully started

204 14:57:17.921 12/08/03 Sev=Info/4 IPSEC/0x63700014
Deleted all keys

205 14:57:19.062 12/08/03 Sev=Info/5 IKE/0x6300002F
Received ISAKMP packet: peer = 192.168.1.2

206 14:57:19.062 12/08/03 Sev=Info/4 IKE/0x63000014
RECEIVING <<< ISAKMP OAK AG (SA, VID(Xauth), VID(dpd), VID(Unity), VID(?), KE, ID, NON, HASH) from 192.168.1.2

207 14:57:19.062 12/08/03 Sev=Info/5 IKE/0x63000001
Peer supports XAUTH

208 14:57:19.062 12/08/03 Sev=Info/5 IKE/0x63000001
Peer supports DPD

209 14:57:19.062 12/08/03 Sev=Info/5 IKE/0x63000001
Peer is a Cisco-Unity compliant peer

210 14:57:19.062 12/08/03 Sev=Info/5 IKE/0x63000081
Received IOS Vendor ID with unknown capabilities flag 0x00000025

211 14:57:19.078 12/08/03 Sev=Warning/3 IKE/0xE3000056
The received HASH payload cannot be verified

212 14:57:19.078 12/08/03 Sev=Warning/2 IKE/0xE300007D
Hash verification failed... may be configured with invalid group password.

213 14:57:19.078 12/08/03 Sev=Warning/2 IKE/0xE3000099
Failed to authenticate peer (Navigator:786)

214 14:57:19.078 12/08/03 Sev=Info/4 IKE/0x63000013
SENDING >>> ISAKMP OAK INFO (NOTIFY:INVALID_HASH_INFO) to 192.168.1.2

215 14:57:19.078 12/08/03 Sev=Info/4 IKE/0x63000013
SENDING >>> ISAKMP OAK INFO (NOTIFY:AUTH_FAILED) to 192.168.1.2

216 14:57:19.078 12/08/03 Sev=Warning/2 IKE/0xE30000A5
Unexpected SW error occurred while processing Aggressive Mode negotiator:(Navigator:2046)

217 14:57:19.078 12/08/03 Sev=Info/4 IKE/0x63000017
Marking IKE SA for deletion (I_Cookie=281C8F2F50E0726F R_Cookie=8B503ADA5B10948D) reason = DEL_REASON_IKE_NEG_FAILED

218 14:57:19.828 12/08/03 Sev=Info/4 IKE/0x6300004A
Discarding IKE SA negotiation (I_Cookie=281C8F2F50E0726F R_Cookie=8B503ADA5B10948D) reason = DEL_REASON_IKE_NEG_FAILED

219 14:57:19.828 12/08/03 Sev=Info/4 CM/0x63100014
Unable to establish Phase 1 SA with server &quot;192.168.1.2&quot; because of &quot;DEL_REASON_IKE_NEG_FAILED&quot;

220 14:57:19.828 12/08/03 Sev=Info/5 CM/0x63100025
Initializing CVPNDrv

221 14:57:19.828 12/08/03 Sev=Info/4 IKE/0x63000001
IKE received signal to terminate VPN connection

222 14:57:19.828 12/08/03 Sev=Critical/1 CVPND/0xE3400001
Microsoft IPSec Policy Agent service started successfully

223 14:57:20.328 12/08/03 Sev=Info/4 IPSEC/0x63700014
Deleted all keys

224 14:57:20.328 12/08/03 Sev=Info/4 IPSEC/0x63700014
Deleted all keys

225 14:57:20.328 12/08/03 Sev=Info/4 IPSEC/0x63700014
Deleted all keys

226 14:57:20.328 12/08/03 Sev=Info/4 IPSEC/0x6370000A
IPSec driver successfully stopped

227 15:09:10.062 12/08/03 Sev=Info/4 CM/0x63100002
Begin connection process

228 15:09:10.062 12/08/03 Sev=Info/4 CVPND/0xE3400001
Microsoft IPSec Policy Agent service stopped successfully

229 15:09:10.062 12/08/03 Sev=Info/4 CM/0x63100004
Establish secure connection using Ethernet

230 15:09:10.062 12/08/03 Sev=Info/4 CM/0x63100024
Attempt connection with server &quot;192.168.1.2&quot;

231 15:09:11.062 12/08/03 Sev=Info/6 IKE/0x6300003B
Attempting to establish a connection with 192.168.1.2.

232 15:09:11.062 12/08/03 Sev=Info/4 IKE/0x63000013
SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Unity)) to 192.168.1.2

233 15:09:11.062 12/08/03 Sev=Info/4 IPSEC/0x63700008
IPSec driver successfully started

234 15:09:11.062 12/08/03 Sev=Info/4 IPSEC/0x63700014
Deleted all keys

235 15:09:12.203 12/08/03 Sev=Info/5 IKE/0x6300002F
Received ISAKMP packet: peer = 192.168.1.2

236 15:09:12.203 12/08/03 Sev=Info/4 IKE/0x63000014
RECEIVING <<< ISAKMP OAK AG (SA, VID(Xauth), VID(dpd), VID(Unity), VID(?), KE, ID, NON, HASH) from 192.168.1.2

237 15:09:12.203 12/08/03 Sev=Info/5 IKE/0x63000001
Peer supports XAUTH

238 15:09:12.203 12/08/03 Sev=Info/5 IKE/0x63000001
Peer supports DPD

239 15:09:12.203 12/08/03 Sev=Info/5 IKE/0x63000001
Peer is a Cisco-Unity compliant peer

240 15:09:12.203 12/08/03 Sev=Info/5 IKE/0x63000081
Received IOS Vendor ID with unknown capabilities flag 0x00000025

241 15:09:12.218 12/08/03 Sev=Warning/3 IKE/0xE3000056
The received HASH payload cannot be verified

242 15:09:12.218 12/08/03 Sev=Warning/2 IKE/0xE300007D
Hash verification failed... may be configured with invalid group password.

243 15:09:12.218 12/08/03 Sev=Warning/2 IKE/0xE3000099
Failed to authenticate peer (Navigator:786)

244 15:09:12.218 12/08/03 Sev=Info/4 IKE/0x63000013
SENDING >>> ISAKMP OAK INFO (NOTIFY:INVALID_HASH_INFO) to 192.168.1.2

245 15:09:12.218 12/08/03 Sev=Info/4 IKE/0x63000013
SENDING >>> ISAKMP OAK INFO (NOTIFY:AUTH_FAILED) to 192.168.1.2

246 15:09:12.218 12/08/03 Sev=Warning/2 IKE/0xE30000A5
Unexpected SW error occurred while processing Aggressive Mode negotiator:(Navigator:2046)

247 15:09:12.218 12/08/03 Sev=Info/4 IKE/0x63000017
Marking IKE SA for deletion (I_Cookie=ED9E14E9643654D2 R_Cookie=8B503ADAF0602837) reason = DEL_REASON_IKE_NEG_FAILED

248 15:09:13.156 12/08/03 Sev=Info/4 IKE/0x6300004A
Discarding IKE SA negotiation (I_Cookie=ED9E14E9643654D2 R_Cookie=8B503ADAF0602837) reason = DEL_REASON_IKE_NEG_FAILED

249 15:09:13.156 12/08/03 Sev=Info/4 CM/0x63100014
Unable to establish Phase 1 SA with server &quot;192.168.1.2&quot; because of &quot;DEL_REASON_IKE_NEG_FAILED&quot;

250 15:09:13.156 12/08/03 Sev=Info/5 CM/0x63100025
Initializing CVPNDrv

251 15:09:13.156 12/08/03 Sev=Info/4 IKE/0x63000001
IKE received signal to terminate VPN connection

252 15:09:13.156 12/08/03 Sev=Critical/1 CVPND/0xE3400001
Microsoft IPSec Policy Agent service started successfully

253 15:09:13.156 12/08/03 Sev=Info/4 IPSEC/0x63700014
Deleted all keys

254 15:09:13.156 12/08/03 Sev=Info/4 IPSEC/0x63700014
Deleted all keys

255 15:09:13.156 12/08/03 Sev=Info/4 IPSEC/0x63700014
Deleted all keys

256 15:09:13.156 12/08/03 Sev=Info/4 IPSEC/0x6370000A
IPSec driver successfully stopped


PIX Version 6.3(1)
interface ethernet0 auto
interface ethernet1 100full
nameif ethernet0 outside security0
nameif ethernet1 inside security100
enable password ********* encrypted
passwd ************ encrypted
hostname *******
domain-name **********
clock timezone GMT/BST 0
fixup protocol ftp 21
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
fixup protocol http 80
fixup protocol ils 389
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol sip 5060
fixup protocol sip udp 5060
fixup protocol skinny 2000
fixup protocol smtp 25
fixup protocol sqlnet 1521
names
name 192.168.1.73 method-man
name 192.168.1.72 jetdirect
name 192.168.1.58 red-man
name 192.168.1.1 ghost
name 192.168.1.80 cathy0r
name 192.168.1.60 guy-dva9047hvmc
name 192.168.1.75 linda-v90xds6td
access-list outside_in permit tcp any any eq 7778
access-list outside_in permit udp any any eq 7777
access-list outside_in permit icmp any any echo-reply
access-list outside_in permit tcp any any eq 7779
access-list outside_in permit udp any any eq 7780
access-list outside_in permit tcp any any eq ident
access-list inside_out deny udp any any eq netbios-ns
pager lines 24
logging on
logging timestamp
logging console debugging
logging trap critical
logging facility 23
logging queue 1024
logging host inside ghost
icmp permit any echo outside
icmp permit any echo inside
mtu outside 1500
mtu inside 1500
ip address outside dhcp setroute retry 5
ip address inside 192.168.1.2 255.255.255.0
ip verify reverse-path interface outside
ip audit info action alarm
ip audit attack action alarm
ip local pool vpdnpool 192.168.1.200-192.168.1.202
pdm location ghost 255.255.255.255 inside
pdm location red-man 255.255.255.255 inside
pdm location method-man 255.255.255.255 inside
pdm location 192.169.1.58 255.255.255.255 inside
pdm logging informational 100
pdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
static (inside,outside) tcp interface 7778 red-man 7778 netmask 255.255.255.255 0 0
static (inside,outside) udp interface 7777 192.169.1.58 7777 netmask 255.255.255.255 0 0
static (inside,outside) tcp interface ident method-man ident netmask 255.255.255.255 0 0
static (inside,outside) tcp interface 7779 ghost 7779 netmask 255.255.255.255 0 0
static (inside,outside) udp interface 7780 ghost 7780 netmask 255.255.255.255 0 0
access-group outside_in in interface outside
rip inside passive version 2
timeout xlate 24:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00
timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server RADIUS protocol radius
aaa-server LOCAL protocol local
http server enable
http 192.168.1.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server community public
no snmp-server enable traps
floodguard enable
sysopt connection permit-ipsec
sysopt ipsec pl-compatible
sysopt noproxyarp inside
isakmp enable outside
isakmp enable inside
isakmp key ******** address 0.0.0.0 netmask 255.255.255.0
isakmp identity address
isakmp client configuration address-pool local vpdnpool outside
isakmp policy 1 authentication pre-share
isakmp policy 1 encryption des
isakmp policy 1 hash md5
isakmp policy 1 group 1
isakmp policy 1 lifetime 1000
isakmp policy 10 authentication pre-share
isakmp policy 10 encryption des
isakmp policy 10 hash md5
isakmp policy 10 group 2
isakmp policy 10 lifetime 86400
vpngroup vpn3000 idle-time 1800
vpngroup vpdn3000 idle-time 1800
vpngroup group idle-time 1800
vpngroup pool idle-time 1800
vpngroup roots idle-time 1800
telnet 192.168.1.0 255.255.255.0 inside
telnet timeout 25
ssh 192.168.1.0 255.255.255.0 inside
ssh timeout 5
console timeout 0
dhcpd address 192.168.1.20-192.168.1.40 inside
dhcpd dns ghost 194.168.4.100
dhcpd wins ghost
dhcpd lease 3600
dhcpd ping_timeout 750
terminal width 80

Can anyone see where im going wrong?
 
Sort by date Sort by votes
Status
Not open for further replies.

Similar threads

intel233
  • Locked
  • Question
Cisco ASA - VPN Question
Replies
6
Views
152
intel233
intel233
ISDPCMAN
  • Locked
  • Question
RDP fails over VPN
Replies
1
Views
73
gkittelson
gkittelson
Shmid
  • Locked
  • Question
Restricting Sonicwall SSL-VPN users for WAN access
Replies
7
Views
177
Shmid
Shmid
WhosYourDiffie
  • Locked
  • Question
Cisco ASA 5506 VPN for Avaya Phones
Replies
0
Views
53
WhosYourDiffie
WhosYourDiffie
ITSUPPORTIT
  • Locked
  • Question
VPN from ASA 5510 and RV215W problem
Replies
0
Views
42
ITSUPPORTIT
ITSUPPORTIT

Part and Inventory Search

Sponsor

Back
Top