From: secondie (secondie@gmail.com)
Date: Tue Nov 07 2006 - 23:19:42 ART
Working on EZVPN and getting stuck on same error every time.
*Mar 1 01:00:06.515: ISAKMP (0:40): claimed IOS but failed
authentication <<<+++++++++++++WHAT does this mean ???
May be I am looking at wrong place so the debug for server side is below.
Any help is appreciated. !!!!
TIA
-secondie
Server side config:
R4#sh running-config
username cisco password 0 cisco
!
aaa authorization network EZ local
!
crypto isakmp policy 10
hash md5
authentication pre-share
group 2
!
crypto isakmp key cciesec address 195.1.114.1
!
crypto isakmp client configuration group EZVPN
key trinetnt
pool VPNPool
!
crypto ipsec transform-set ezset esp-des esp-md5-hmac
!
crypto dynamic-map DMAP 10
set transform-set ezset
!
crypto map mymap isakmp authorization list EZ
crypto map mymap client configuration address initiate
crypto map mymap client configuration address respond
crypto map mymap 10 ipsec-isakmp
set peer 195.1.114.1
set transform-set myset
match address 114
!
crypto map mymap 100 ipsec-isakmp dynamic DMAP
!
interface FastEthernet0/0
ip address 195.1.114.4 255.255.255.0
crypto map mymap
!
ip local pool VPNPool 192.168.1.1 192.168.1.254
Client side:
crypto ipsec client ezvpn EZ
connect auto
group EZVPN key trinetnt
mode client
peer 195.1.114.4
!
interface Loopback55
ip address 10.55.55.55 255.255.255.0
crypto ipsec client ezvpn EZ inside
!
interface Serial0/0:0
ip address 195.3.56.5 255.255.255.0
crypto ipsec client ezvpn EZ
debugs: on server side:
R4#sh debug
Cryptographic Subsystem:
Crypto ISAKMP debugging is on
Crypto IPSEC debugging is on
R4#
*Mar 1 00:59:24.239: ISAKMP (0:0): received packet from 195.3.56.5
dport 500 sport 500 Global (N) NEW SA
*Mar 1 00:59:24.239: ISAKMP: Created a peer struct for 195.3.56.5, peer
port 500
*Mar 1 00:59:24.239: ISAKMP: Locking peer struct 0x8365A4F0, IKE
refcount 1 for crypto_ikmp_config_initialize_sa
*Mar 1 00:59:24.239: ISAKMP (0:0): Setting client config settings 8365E8F0
*Mar 1 00:59:24.239: ISAKMP: local port 500, remote port 500
*Mar 1 00:59:24.243: ISAKMP: Find a dup sa in the avl tree during
calling isadb_insert sa = 83667BE8
*Mar 1 00:59:24.243: ISAKMP (0:39): processing SA payload. message ID = 0
*Mar 1 00:59:24.243: ISAKMP (0:39): processing ID payload. message ID = 0
*Mar 1 00:59:24.243: ISAKMP (0:39): peer matches *none* of the profiles
*Mar 1 00:59:24.243: ISAKMP (0:39): processing vendor id payload
*Mar 1 00:59:24.243: ISAKMP (0:39): vendor ID seems Unity/DPD but major
157 mismatch
*Mar 1 00:59:24.243: ISAKMP (0:39): vendor ID is NAT-T v3
*Mar 1 0
R4#0:59:24.243: ISAKMP (0:39): processing vendor id payload
*Mar 1 00:59:24.243: ISAKMP (0:39): vendor ID seems Unity/DPD but major
123 mismatch
*Mar 1 00:59:24.247: ISAKMP (0:39): vendor ID is NAT-T v2
*Mar 1 00:59:24.247: ISAKMP: no pre-shared key based on address
195.3.56.5 !
*Mar 1 00:59:24.247: ISAKMP: Looking for a matching key for 195.3.56.5
in default
*Mar 1 00:59:24.247: ISAKMP (0:39): No pre-shared key with 195.3.56.5!
*Mar 1 00:59:24.247: ISAKMP : Scanning profiles for xauth ...
*Mar 1 00:59:24.247: ISAKMP (0:39): Checking ISAKMP transform 1 against
priority 10 policy
*Mar 1 00:59:24.247: ISAKMP: encryption 3DES-CBC
*Mar 1 00:59:24.247: ISAKMP: hash SHA
*Mar 1 00:59:24.247: ISAKMP: default group 2
*Mar 1 00:59:24.247: ISAKMP: auth XAUTHInitPreShared
*Mar 1 00:59:24.247: ISAKMP: life type in seconds
*Mar 1 00:59:24.247: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4
0x9B
*Mar 1 00:59:24.247: ISAKMP (0:39): Encryption algorithm offered does
not match policy!
*Mar 1 00:59:24.247: ISAKMP (0:39): atts are not acceptable. Next
payload is 3
*Mar 1 00:59:24.251: ISAKMP (0:39): Checking ISAKMP transform 2 against
priority 10 policy
*Mar 1 00:59:24.251: ISAKMP: encryption 3DES-CBC
*Mar 1 00:59:24.251: ISAKMP: hash MD5
*Mar 1 00:59:24.251: ISAKMP: default group 2
*Mar 1 00:59:24.251: ISAKMP: auth XAUTHInitPreShared
*Mar 1 00:59:24.251: ISAKMP: life type in seconds
*Mar 1 00:59:24.251: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4
0x9B
*Mar 1 00:59:24.251: ISAKMP (0:39): Encryption algorithm offered does
not match policy!
*Mar 1 00:59:24.251: ISAKMP (0:39): atts are not acceptable. Next
payload is 3
*Mar 1 00:59:24.251: ISAKMP (0:39): Checking ISAKMP transform 3 against
priority 10 policy
*Mar 1 00:59:24.251: ISAKMP: encryption 3DES-CBC
*Mar 1 00:59:24.251: ISAKMP: hash SHA
*Mar 1 00:59:24.251: ISAKMP: default group 2
*Mar 1 00:59:24.251: ISAKMP: auth pre-share
*Mar 1 00:59:24.251: ISAKMP: life type in seconds
*Mar 1 00:59:24.251: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4
0x9B
*Mar 1 00:59:24.255: ISAKMP (0:39): Encryption algorithm offered does
not match policy!
*Mar 1 00:59:24.255: ISAKMP (0:39): atts are not acceptable. Next
payload is 3
*Mar 1 00:59:24.255: ISAKMP (0:39): Checking ISAKMP transform 4 against
priority 10 policy
*Mar 1 00:59:24.255: ISAKMP: encryption 3DES-CBC
*Mar 1 00:59:24.255: ISAKMP: hash MD5
*Mar 1 00:59:24.255: ISAKMP: default group 2
*Mar 1 00:59:24.255: ISAKMP: auth pre-share
*Mar 1 00:59:24.255: ISAKMP: life type in seconds
*Mar 1 00:59:24.255: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4
0x9B
*Mar 1 00:59:24.255: ISAKMP (0:39): Encryption algorithm offered does
not match policy!
*Mar 1 00:59:24.255: ISAKMP (0:39): atts are not acceptable. Next
payload is 3
*Mar 1 00:59:24.255: ISAKMP (0:39): Checking ISAKMP transform 5 against
priority 10 policy
*Mar 1 00:59:24.255: ISAKMP: encryption DES-CBC
*Mar 1 00:59:24.255: ISAKMP: hash SHA
*Mar 1 00:59:24.255: ISAKMP: default group 2
*Mar 1 00:59:24.259: ISAKMP: auth XAUTHInitPreShared
*Mar 1 00:59:24.259: ISAKMP: life type in seconds
*Mar 1 00:59:24.259: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4
0x9B
*Mar 1 00:59:24.259: ISAKMP (0:39): Hash algorithm offered does not
match policy!
*Mar 1 00:59:24.259: ISAKMP (0:39): atts are not acceptable. Next
payload is 3
*Mar 1 00:59:24.259: ISAKMP (0:39): Checking ISAKMP transform 6 against
priority 10 policy
*Mar 1 00:59:24.259: ISAKMP: encryption DES-CBC
*Mar 1 00:59:24.259: ISAKMP: hash MD5
*Mar 1 00:59:24.259: ISAKMP: default group 2
*Mar 1 00:59:24.259: ISAKMP: auth XAUTHInitPreShared
*Mar 1 00:59:24.259: ISAKMP: life type in seconds
*Mar 1 00:59:24.259: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4
0x9B
*Mar 1 00:59:24.259: ISAKMP (0:39): Xauth authentication by pre-shared
key offered but does not match policy!
*Mar 1 00:59:24.259: ISAKMP (0:39): atts are not acceptable. Next
payload is 3
*Mar 1 00:59:24.259: ISAKMP (0:39): Checking ISAKMP transform 7 against
priority 10 policy
*Mar 1 00:59:24.263: ISAKMP: encryption DES-CBC
*Mar 1 00:59:24.263: ISAKMP: hash SHA
*Mar 1 00:59:24.263: ISAKMP: default group 2
*Mar 1 00:59:24.263: ISAKMP: auth pre-share
*Mar 1 00:59:24.263: ISAKMP: life type in seconds
*Mar 1 00:59:24.263: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4
0x9B
*Mar 1 00:59:24.263: ISAKMP (0:39): Hash algorithm offered does not
match policy!
*Mar 1 00:59:24.263: ISAKMP (0:39): atts are not acceptable. Next
payload is 3
*Mar 1 00:59:24.263: ISAKMP (0:39): Checking ISAKMP transform 8 against
priority 10 policy
*Mar 1 00:59:24.263: ISAKMP: encryption DES-CBC
*Mar 1 00:59:24.263: ISAKMP: hash MD5
*Mar 1 00:59:24.263: ISAKMP: default group 2
*Mar 1 00:59:24.263: ISAKMP: auth pre-share
*Mar 1 00:59:24.263: ISAKMP: life type in seconds
*Mar 1 00:59:24.263: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4
0x9B
*Mar 1 00:59:24.267: ISAKMP (0:39): atts are acceptable. Next payload is 0
*Mar 1 00:59:24.479: ISAKMP (0:39): processing vendor id payload
*Mar 1 00:59:24.479: ISAKMP (0:39): vendor ID seems Unity/DPD but major
157 mismatch
*Mar 1 00:59:24.479: ISAKMP (0:39): vendor ID is NAT-T v3
*Mar 1 00:59:24.479: ISAKMP (0:39): processing vendor id payload
*Mar 1 00:59:24.479: ISAKMP (0:39): vendor ID seems Unity/DPD but major
123 mismatch
*Mar 1 00:59:24.479: ISAKMP (0:39): vendor ID is NAT-T v2
*Mar 1 00:59:24.479: ISAKMP (0:39): processing KE payload. message ID = 0
*Mar 1 00:59:24.747: ISAKMP (0:39): processing NONCE payload. message
ID = 0
*Mar 1 00:59:24.747: ISAKMP (0:39): processing vendor id payload
*Mar 1 00:59:24.747: ISAKMP (0:39): vendor ID is DPD
*Mar 1 00:59:24.747: ISAKMP (0:39): processing vendor id payload
*Mar 1 00:59:24.747: ISAKMP (0:39): vendor ID seems Unity/DPD but major
186 mismatch
*Mar 1 00:59:24.751: ISAKMP (0:39): vendor ID is XAUTH
*Mar 1 00:59:24.751: ISAKMP (0:39): processing vendor id payload
*Mar 1 00:59:24.751: ISAKMP (0:39): claimed IOS but failed authentication
*Mar 1 00:59:24.751: ISAKMP (0:39): processing vendor id payload
*Mar 1 00:59:24.751: ISAKMP (0:39): vendor ID is Unity
*Mar 1 00:59:24.751: ISAKMP (0:39): Input = IKE_MESG_FROM_PEER,
IKE_AM_EXCH
*Mar 1 00:59:24.751: ISAKMP (0:39): Old State = IKE_READY New State =
IKE_R_AM_AAA_AWAIT
*Mar 1 00:59:24.755: ISAKMP: got callback 1
*Mar 1 00:59:24.755: ISAKMP (0:39): incrementing error counter on sa:
construct_fail_ag_init
R4#
R4#
*Mar 1 00:59:34.239: ISAKMP (0:39): received packet from 195.3.56.5
dport 500 sport 500 Global (R) AG_NO_STATE
*Mar 1 00:59:34.243: ISAKMP (0:39): phase 1 packet is a duplicate of a
previous packet.
*Mar 1 00:59:34.243: ISAKMP (0:39): retransmitting due to retransmit
phase 1
*Mar 1 00:59:34.243: ISAKMP (0:39): retransmitting phase 1 AG_NO_STATE...
*Mar 1 00:59:34.743: ISAKMP (0:39): retransmitting phase 1 AG_NO_STATE...
*Mar 1 00:59:34.743: ISAKMP (0:39): incrementing error counter on sa:
retransmit phase 1
*Mar 1 00:59:34.743: ISAKMP (0:39): retransmitting phase 1 AG_NO_STATE
R4#
*Mar 1 00:59:34.743: ISAKMP (0:39): sending packet to 195.3.56.5
my_port 500 peer_port 500 (R) AG_NO_STATE
R4#
*Mar 1 00:59:35.759: ISAKMP (0:39): received packet from 195.3.56.5
dport 500 sport 500 Global (R) AG_NO_STATE
*Mar 1 00:59:35.763: ISAKMP (0:39): phase 1 packet is a duplicate of a
previous packet.
*Mar 1 00:59:35.763: ISAKMP (0:39): retransmitting due to retransmit
phase 1
*Mar 1 00:59:35.763: ISAKMP (0:39): retransmitting phase 1 AG_NO_STATE...
*Mar 1 00:59:36.263: ISAKMP (0:39): retransmitting phase 1 AG_NO_STATE...
*Mar 1 00:59:36.263: ISAKMP (0:39): incrementing error counter on sa:
retransmit phase 1
*Mar 1 00:59:36.263: ISAKMP (0:39): no outgoing phase 1 packet to
retransmit. AG_NO_STATE
R4#
*Mar 1 00:59:41.483: ISAKMP (0:38): purging SA., sa=836649AC,
delme=836649AC
*Mar 1 00:59:41.483: ISAKMP: Unlocking IKE struct 0x8365E7B8 for
declare_sa_dead(), count 0
*Mar 1 00:59:41.483: ISAKMP (0:37): purging SA., sa=836640BC,
delme=836640BC
*Mar 1 00:59:41.483: ISAKMP: Unlocking IKE struct 0x83665F3C for
declare_sa_dead(), count 0
*Mar 1 00:59:41.487: ISAKMP (0:36): purging SA., sa=836637CC,
delme=836637CC
*Mar 1 00:59:41.487: ISAKMP: Unlocking IKE struct 0x8365EAC8 for
declare_sa_dead(), count 0
R4#
*Mar 1 00:59:45.763: ISAKMP (0:39): received packet from 195.3.56.5
dport 500 sport 500 Global (R) AG_NO_STATE
*Mar 1 00:59:45.763: ISAKMP (0:39): phase 1 packet is a duplicate of a
previous packet.
*Mar 1 00:59:45.763: ISAKMP (0:39): retransmitting due to retransmit
phase 1
*Mar 1 00:59:45.763: ISAKMP (0:39): retransmitting phase 1 AG_NO_STATE...
*Mar 1 00:59:46.263: ISAKMP (0:39): retransmitting phase 1 AG_NO_STATE...
*Mar 1 00:59:46.263: ISAKMP (0:39): incrementing error counter on sa:
retransmit phase 1
*Mar 1 00:59:46.263: ISAKMP (0:39): no outgoing phase 1 packet to
retransmit. AG_NO_STATE
R4#
*Mar 1 00:59:55.763: ISAKMP (0:39): received packet from 195.3.56.5
dport 500 sport 500 Global (R) AG_NO_STATE
*Mar 1 00:59:55.763: ISAKMP (0:39): phase 1 packet is a duplicate of a
previous packet.
*Mar 1 00:59:55.763: ISAKMP (0:39): retransmitting due to retransmit
phase 1
*Mar 1 00:59:55.763: ISAKMP (0:39): retransmitting phase 1 AG_NO_STATE...
*Mar 1 00:59:56.263: ISAKMP (0:39): retransmitting phase 1 AG_NO_STATE...
*Mar 1 00:59:56.263: ISAKMP (0:39): incrementing error counter on sa:
retransmit phase 1
*Mar 1 00:59:56.263: ISAKMP (0:39): no outgoing phase 1 packet to
retransmit. AG_NO_STATE
R4#
*Mar 1 01:00:05.999: ISAKMP (0:0): received packet from 195.3.56.5
dport 500 sport 500 Global (N) NEW SA
*Mar 1 01:00:05.999: ISAKMP: Created a peer struct for 195.3.56.5, peer
port 500
*Mar 1 01:00:06.003: ISAKMP: Locking peer struct 0x8365E9AC, IKE
refcount 1 for crypto_ikmp_config_initialize_sa
*Mar 1 01:00:06.003: ISAKMP (0:0): Setting client config settings 83666B04
*Mar 1 01:00:06.003: ISAKMP: local port 500, remote port 500
*Mar 1 01:00:06.003: ISAKMP: Find a dup sa in the avl tree during
calling isadb_insert sa = 83663538
*Mar 1 01:00:06.003: ISAKMP (0:40): processing SA payload. message ID = 0
*Mar 1 01:00:06.003: ISAKMP (0:40): processing ID payload. message ID = 0
*Mar 1 01:00:06.003: ISAKMP (0:40): peer matches *none* of the profiles
*Mar 1 01:00:06.003: ISAKMP (0:40): processing vendor id payload
*Mar 1 01:00:06.007: ISAKMP (0:40): vendor ID seems Unity/DPD but major
157 mismatch
*Mar 1 01:00:06.007: ISAKMP (0:40): vendor ID is NAT-T v3
*Mar 1 0
R4#1:00:06.007: ISAKMP (0:40): processing vendor id payload
*Mar 1 01:00:06.007: ISAKMP (0:40): vendor ID seems Unity/DPD but major
123 mismatch
*Mar 1 01:00:06.007: ISAKMP (0:40): vendor ID is NAT-T v2
*Mar 1 01:00:06.007: ISAKMP: no pre-shared key based on address
195.3.56.5 !
*Mar 1 01:00:06.007: ISAKMP: Looking for a matching key for 195.3.56.5
in default
*Mar 1 01:00:06.007: ISAKMP (0:40): No pre-shared key with 195.3.56.5!
*Mar 1 01:00:06.007: ISAKMP : Scanning profiles for xauth ...
*Mar 1 01:00:06.007: ISAKMP (0:40): Checking ISAKMP transform 1 against
priority 10 policy
*Mar 1 01:00:06.007: ISAKMP: encryption 3DES-CBC
SNIP SNIP .....policies fail to match ....
*Mar 1 01:00:06.023: ISAKMP (0:40): Checking ISAKMP transform 7 against
priority 10 policy
*Mar 1 01:00:06.023: ISAKMP: encryption DES-CBC
*Mar 1 01:00:06.023: ISAKMP: hash SHA
*Mar 1 01:00:06.023: ISAKMP: default group 2
*Mar 1 01:00:06.023: ISAKMP: auth pre-share
*Mar 1 01:00:06.023: ISAKMP: life type in seconds
*Mar 1 01:00:06.023: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4
0x9B
*Mar 1 01:00:06.023: ISAKMP (0:40): Hash algorithm offered does not
match policy!
*Mar 1 01:00:06.023: ISAKMP (0:40): atts are not acceptable. Next
payload is 3
*Mar 1 01:00:06.023: ISAKMP (0:40): Checking ISAKMP transform 8 against
priority 10 policy
*Mar 1 01:00:06.023: ISAKMP: encryption DES-CBC
*Mar 1 01:00:06.027: ISAKMP: hash MD5
*Mar 1 01:00:06.027: ISAKMP: default group 2
*Mar 1 01:00:06.027: ISAKMP: auth pre-share
*Mar 1 01:00:06.027: ISAKMP: life type in seconds
*Mar 1 01:00:06.027: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4
0x9B
*Mar 1 01:00:06.027: ISAKMP (0:40): atts are acceptable. Next payload
is 0 <<<<============ ISAKMP Matched
*Mar 1 01:00:06.243: ISAKMP (0:40): processing vendor id payload
*Mar 1 01:00:06.243: ISAKMP (0:40): vendor ID seems Unity/DPD but major
157 mismatch
*Mar 1 01:00:06.243: ISAKMP (0:40): vendor ID is NAT-T v3
*Mar 1 01:00:06.243: ISAKMP (0:40): processing vendor id payload
*Mar 1 01:00:06.243: ISAKMP (0:40): vendor ID seems Unity/DPD but major
123 mismatch
*Mar 1 01:00:06.243: ISAKMP (0:40): vendor ID is NAT-T v2
*Mar 1 01:00:06.243: ISAKMP (0:40): processing KE payload. message ID = 0
*Mar 1 01:00:06.511: ISAKMP (0:40): processing NONCE payload. message
ID = 0
*Mar 1 01:00:06.511: ISAKMP (0:40): processing vendor id payload
*Mar 1 01:00:06.511: ISAKMP (0:40): vendor ID is DPD
*Mar 1 01:00:06.511: ISAKMP (0:40): processing vendor id payload
*Mar 1 01:00:06.515: ISAKMP (0:40): vendor ID seems Unity/DPD but major
186 mismatch
*Mar 1 01:00:06.515: ISAKMP (0:40): vendor ID is XAUTH
*Mar 1 01:00:06.515: ISAKMP (0:40): processing vendor id payload
*Mar 1 01:00:06.515: ISAKMP (0:40): claimed IOS but failed
authentication <<<+++++++++++++WHAT does this mean ???
*Mar 1 01:00:06.515: ISAKMP (0:40): processing vendor id payload
*Mar 1 01:00:06.515: ISAKMP (0:40): vendor ID is Unity
*Mar 1 01:00:06.515: ISAKMP (0:40): Input = IKE_MESG_FROM_PEER,
IKE_AM_EXCH
*Mar 1 01:00:06.515: ISAKMP (0:40): Old State = IKE_READY New State =
IKE_R_AM_AAA_AWAIT
*Mar 1 01:00:06.519: ISAKMP: got callback 1
*Mar 1 01:00:06.519: ISAKMP (0:40): incrementing error counter on sa:
construct_fail_ag_init
R4#
R4#
R4#
R4#
R4#
R4#
R4#
R4#
R4#
R4#
R4#
R4#
R4#
R4#
R4#
R4#
R4#
R4#
R4#
*Mar 1 01:00:16.003: ISAKMP (0:40): received packet from 195.3.56.5
dport 500 sport 500 Global (R) AG_NO_STATE
*Mar 1 01:00:16.003: ISAKMP (0:40): phase 1 packet is a duplicate of a
previous packet.
*Mar 1 01:00:16.003: ISAKMP (0:40): retransmitting due to retransmit
phase 1
*Mar 1 01:00:16.003: ISAKMP (0:40): retransmitting phase 1 AG_NO_STATE...
*Mar 1 01:00:16.503: ISAKMP (0:40): retransmitting phase 1 AG_NO_STATE...
*Mar 1 01:00:16.503: ISAKMP (0:40): incrementing error counter on sa:
retransmit phase 1
*Mar 1 01:00:16.503: ISAKMP (0:40): retransmitting phase 1 AG_NO_STATE
R4#
*Mar 1 01:00:16.503: ISAKMP (0:40): sending packet to 195.3.56.5
my_port 500 peer_port 500 (R) AG_NO_STATE
R4#
*Mar 1 01:00:17.519: ISAKMP (0:40): received packet from 195.3.56.5
dport 500 sport 500 Global (R) AG_NO_STATE
*Mar 1 01:00:17.519: ISAKMP (0:40): phase 1 packet is a duplicate of a
previous packet.
*Mar 1 01:00:17.519: ISAKMP (0:40): retransmitting due to retransmit
phase 1
*Mar 1 01:00:17.519: ISAKMP (0:40): retransmitting phase 1 AG_NO_STATE...
*Mar 1 01:00:18.019: ISAKMP (0:40): retransmitting phase 1 AG_NO_STATE...
*Mar 1 01:00:18.019: ISAKMP (0:40): incrementing error counter on sa:
retransmit phase 1
*Mar 1 01:00:18.019: ISAKMP (0:40): no outgoing phase 1 packet to
retransmit. AG_NO_STATE
R4#
*Mar 1 01:00:27.519: ISAKMP (0:40): received packet from 195.3.56.5
dport 500 sport 500 Global (R) AG_NO_STATE
*Mar 1 01:00:27.519: ISAKMP (0:40): phase 1 packet is a duplicate of a
previous packet.
*Mar 1 01:00:27.519: ISAKMP (0:40): retransmitting due to retransmit
phase 1
*Mar 1 01:00:27.519: ISAKMP (0:40): retransmitting phase 1 AG_NO_STATE...
*Mar 1 01:00:28.023: ISAKMP (0:40): retransmitting phase 1 AG_NO_STATE...
*Mar 1 01:00:28.023: ISAKMP (0:40): incrementing error counter on sa:
retransmit phase 1
*Mar 1 01:00:28.023: ISAKMP (0:40): no outgoing phase 1 packet to
retransmit. AG_NO_STATE
R4#
*Mar 1 01:00:37.519: ISAKMP (0:40): received packet from 195.3.56.5
dport 500 sport 500 Global (R) AG_NO_STATE
*Mar 1 01:00:37.519: ISAKMP (0:40): phase 1 packet is a duplicate of a
previous packet.
*Mar 1 01:00:37.523: ISAKMP (0:40): retransmitting due to retransmit
phase 1
*Mar 1 01:00:37.523: ISAKMP (0:40): retransmitting phase 1 AG_NO_STATE...
*Mar 1 01:00:38.023: ISAKMP (0:40): retransmitting phase 1 AG_NO_STATE...
*Mar 1 01:00:38.023: ISAKMP (0:40): incrementing error counter on sa:
retransmit phase 1
*Mar 1 01:00:38.023: ISAKMP (0:40): no outgoing phase 1 packet to
retransmit. AG_NO_STATE
R4#
R4#
R4#
This archive was generated by hypermail 2.1.4 : Fri Dec 01 2006 - 08:05:45 ART