Prev: Cat-6506 Sup 720 and FWSM
Next: SCP output from CiscoWorks
From: Joseph Ambrose on 13 Aug 2007 21:08
Hello,

Maybe someone here can assist me with this problem....

here's the situaltion....

2 machines. 1 laptop, 1 desktop
Laptop :WIN XP sp 2 Cisco VPN client V3.5

Desktop
WIN XP SP 1 Cisco VPN Client 4.6

Both logged in with local machine admin rights.

Both on 192.168.4.x /24 network
Both are using the same profile. ( points to Cisco 3005 VPN Consentrator )

Laptop VPN client works fine.
I get a User / password request and the VPN is up. ( verified )

Desktop clinet does not connect.
I get a User / password request, enter them in and the request is repeated.

I turned on the log and captured a session....

The only relavent portion is the following....

I've snipped the log of information that isn't needed, it shows that the connection was made, but an error prevented the VPN from staying up.
I've put those lines in BOLD COURIER TYPE

< start of Log >
Cisco Systems VPN Client Version 4.6.04.0043
Copyright (C) 1998-2005 Cisco Systems, Inc. All Rights Reserved.
Client Type(s): Windows, WinNT
Running on: 5.1.2600 Service Pack 1
Config file directory: C:\Program Files\Cisco Systems\VPN Client\

1 11:25:44.687 08/13/07 Sev=Warning/3 GUI/0xE3B00003
GI EnumPPP callback timed out.

2 11:26:14.984 08/13/07 Sev=Info/4 CM/0x63100002
Begin connection process

3 11:26:15.000 08/13/07 Sev=Info/4 CM/0x63100004
Establish secure connection using Ethernet

4 11:26:15.000 08/13/07 Sev=Info/4 CM/0x63100024
Attempt connection with server "199.245.162.35"

5 11:26:15.000 08/13/07 Sev=Info/6 IKE/0x6300003B
Attempting to establish a connection with 199.245.162.35.

<.... SNIP ....>

36 11:26:24.390 08/13/07 Sev=Info/5 IKE/0x6300000D
MODE_CFG_REPLY: Attribute = MODECFG_UNITY_SPLIT_INCLUDE (# of split_nets), value = 0x00000003

37 11:26:24.390 08/13/07 Sev=Info/5 IKE/0x6300000F
SPLIT_NET #1
subnet = 192.168.135.0
mask = 255.255.255.0
protocol = 0
src port = 0
dest port=0

38 11:26:24.390 08/13/07 Sev=Info/5 IKE/0x6300000F
SPLIT_NET #2
subnet = 192.168.132.0
mask = 255.255.255.0
protocol = 0
src port = 0
dest port=0

39 11:26:24.390 08/13/07 Sev=Info/5 IKE/0x6300000F
SPLIT_NET #3
subnet = 199.245.162.0
mask = 255.255.255.0
protocol = 0
src port = 0
dest port=0
40 11:26:24.390 08/13/07 Sev=Info/5 IKE/0x6300000D
MODE_CFG_REPLY: Attribute = MODECFG_UNITY_PFS: , value = 0x00000000

41 11:26:24.390 08/13/07 Sev=Info/5 IKE/0x6300000E
MODE_CFG_REPLY: Attribute = APPLICATION_VERSION, value = Cisco Systems, Inc./VPN 3000 Concentrator Version 3.5.Rel built by vmurphy on Nov 27 2001 13:35:16

42 11:26:24.390 08/13/07 Sev=Info/4 CM/0x63100019
Mode Config data received

43 11:26:24.406 08/13/07 Sev=Info/4 IKE/0x63000056
Received a key request from Driver: Local IP = 199.245.162.100, GW IP = 199.245.162.35, Remote IP = 0.0.0.0

44 11:26:24.406 08/13/07 Sev=Info/4 IKE/0x63000013
SENDING >>> ISAKMP OAK QM *(HASH, SA, NON, ID, ID) to 199.245.162.35


<.... SNIP ....>



55 11:26:24.453 08/13/07 Sev=Info/5 IKE/0x63000026
Loaded INBOUND ESP SPI: 0x0BDAFBCA

56 11:26:24.578 08/13/07 Sev=Info/5 CVPND/0x63400013
Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.4.1 192.168.4.193 20
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.168.4.0 255.255.255.0 192.168.4.193 192.168.4.193 20
192.168.4.193 255.255.255.255 127.0.0.1 127.0.0.1 20
192.168.4.255 255.255.255.255 192.168.4.193 192.168.4.193 20
224.0.0.0 240.0.0.0 192.168.4.193 192.168.4.193 20
255.255.255.255 255.255.255.255 192.168.4.193 192.168.4.193 1


57 11:26:24.593 08/13/07 Sev=Warning/2 CVPND/0xE3400014
The VPN Client could not find the adapters GUID - Virtual Adapter's tcpip GUID failed: 2.

58 11:26:24.593 08/13/07 Sev=Warning/3 CVPND/0xE340000D
The Client was unable to enable the Virtual Adapter because it could not set the IP configuration into the registry.

59 11:26:24.593 08/13/07 Sev=Warning/2 CM/0xE310000A
The virtual adapter failed to enable

60 11:26:24.593 08/13/07 Sev=Info/5 CVPND/0x63400013
Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.4.1 192.168.4.193 20
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.168.4.0 255.255.255.0 192.168.4.193 192.168.4.193 20
192.168.4.193 255.255.255.255 127.0.0.1 127.0.0.1 20
192.168.4.255 255.255.255.255 192.168.4.193 192.168.4.193 20
224.0.0.0 240.0.0.0 192.168.4.193 192.168.4.193 20
255.255.255.255 255.255.255.255 192.168.4.193 192.168.4.193 1


61 11:26:24.593 08/13/07 Sev=Info/6 CM/0x6310003A
Unable to restore route changes from file.

62 11:26:24.593 08/13/07 Sev=Info/6 CM/0x63100037
The routing table was returned to original state prior to Virtual Adapter

63 11:26:24.703 08/13/07 Sev=Warning/2 CVPND/0xE3400014
The VPN Client could not find the adapters GUID - Virtual Adapter's tcpip GUID failed: 2.

<.... SNIP ....>

88 11:26:25.453 08/13/07 Sev=Info/4 IPSEC/0x63700014
Deleted all keys

89 11:26:25.453 08/13/07 Sev=Info/4 IPSEC/0x63700014
Deleted all keys

90 11:26:25.453 08/13/07 Sev=Info/4 IPSEC/0x63700014
Deleted all keys

91 11:26:25.453 08/13/07 Sev=Info/4 IPSEC/0x6370000A
IPSec driver successfully stopped

< end of Log >

This is holding up a major project at my job. If anyone can be of assistance please use my email address....

joe <dot> ambrose <at> fabrikant <dot> com

thanks in advance.

From: Joe Ambrose on 15 Aug 2007 10:02
Any takers on this one?

I really do need an answer...

From: Al on 15 Aug 2007 13:24
On Aug 15, 3:02 pm, Joe Ambrose <joeambr...(a)optonline.net> wrote:
> Any takers on this one?
>
> I really do need an answer...

I haven't come across this particular error before, but a few things
spring to mind:

- have you tried re-installing the VPN client on the desktop with
admin rights?
- do you have any other virtual adapters installed for any other VPN
clients or dial-up/usb modems? If so & it's not too much hassle, can
you remove them temporarily?
- Do you have the option of upgrading to SP2? I'm not sure, but I
seem to remember that there were 'issues' with VPNs that might have
got better since SP2, with v4.6+?
- Can you downgrade again to v3.5 on the desktop?

From: Joe Ambrose on 15 Aug 2007 15:51
On Aug 15, 1:24 pm, Al <ajsbu...(a)gmail.com> wrote:
> On Aug 15, 3:02 pm, Joe Ambrose <joeambr...(a)optonline.net> wrote:
>
> > Any takers on this one?
>
> > I really do need an answer...
>
> I haven't come across this particular error before, but a few things
> spring to mind:
>
> - have you tried re-installing the VPN client on the desktop with
> admin rights?

I did install the client originally with an admin user.

> - do you have any other virtual adapters installed for any other VPN
> clients or dial-up/usb modems? If so & it's not too much hassle, can
> you remove them temporarily?

No there were no other virtual devices on the PC.

> - Do you have the option of upgrading to SP2? I'm not sure, but I
> seem to remember that there were 'issues' with VPNs that might have
> got better since SP2, with v4.6+?

No, we have software that will not work on SP2.

> - Can you downgrade again to v3.5 on the desktop?

I did uninstall 4.6, and installed 3.5, it works fine now.

Thanks!

 | 
Pages: 1
Prev: Cat-6506 Sup 720 and FWSM
Next: SCP output from CiscoWorks