Cisco VPN client doesn't work with ADSL

Discussion in 'Cisco' started by filip, Dec 18, 2003.

  1. filip

    filip Guest

    Hi,
    I've a strange pb.
    On a personal computer, I've got a cisco vpn client version 4.
    I connect it to a pix to access my enterprise servers.

    At the beginning, I had a 512 kb ADSL connexion.. Everything was working
    perfectly.

    Two weeks agos, I've been degrouped (same connexion but 1024 kb)
    The VPN still connects (IPSEC and IKE phases ok) but once connected I can't
    access the remote servers (behind vpn)
    On the same computer, when I use a RTC modem connection, the VPN is ok and I
    can access the remote servers, but with the ADSL connection, nothing works.
    In the Vpn client, I see packet going out but nothing coming in.

    Did someone experimented the same pb ?
    Any help would be usefull.

    Thanks
    filip, Dec 18, 2003
    #1
    1. Advertising

  2. filip

    Peter Rowe Guest

    How is the PC connecting to the ADSL? Have you changed routers with the connection?

    peter.

    >>> filip<> 18/12/2003 17:04:42 >>>

    Hi,
    I've a strange pb.
    On a personal computer, I've got a cisco vpn client version 4.
    I connect it to a pix to access my enterprise servers.

    At the beginning, I had a 512 kb ADSL connexion.. Everything was working
    perfectly.

    Two weeks agos, I've been degrouped (same connexion but 1024 kb)
    The VPN still connects (IPSEC and IKE phases ok) but once connected I can't
    access the remote servers (behind vpn)
    On the same computer, when I use a RTC modem connection, the VPN is ok and I
    can access the remote servers, but with the ADSL connection, nothing works.
    In the Vpn client, I see packet going out but nothing coming in.

    Did someone experimented the same pb ?
    Any help would be usefull.

    Thanks
    Peter Rowe, Dec 19, 2003
    #2
    1. Advertising

  3. filip

    filip Guest

    The pc is connected to ADSL with Sagem Usb modem

    here are the logs with ADSL connection

    Cisco Systems VPN Client Version 4.0.1 (Rel)
    Copyright (C) 1998-2003 Cisco Systems, Inc. All Rights Reserved.
    Client Type(s): Windows, Win9x
    Running on: 4.10.67766446

    [...]
    29 20:02:48.470 12/04/03 Sev=Info/4 CM/0x6310000E
    Established Phase 1 SA. 1 Phase 1 SA in the system

    [..then splitting tunnels..]
    40 20:02:50.990 12/04/03 Sev=Info/5 IKE/0x6300000F
    SPLIT_NET #1
    subnet = xxx
    mask = 255.255.255.0
    protocol = 0
    src port = 0
    dest port=0

    [..connection established...]
    58 20:02:51.210 12/04/03 Sev=Info/4 CM/0x6310001A
    One secure connection established

    [...I try to ping protected host.....]
    86 20:04:11.080 12/04/03 Sev=Info/5 IKE/0x6300002F
    Received ISAKMP packet: peer = VPNGATEWAY
    87 20:04:11.080 12/04/03 Sev=Info/4 IKE/0x63000014
    RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, VID(Unity), VID(dpd), VID(?))
    from VPNGATEWAY
    88 20:04:11.080 12/04/03 Sev=Info/4 IKE/0x6300007D
    Peer initiating IKE SA rekey: I_Cookie=AF0E886D801C7437
    R_Cookie=5D041C4386C03013
    89 20:04:11.080 12/04/03 Sev=Info/4 IKE/0x63000013
    SENDING >>> ISAKMP OAK INFO (NOTIFY:NO_PROPOSAL_CHOSEN) to VPNGATEWAY
    90 20:04:11.080 12/04/03 Sev=Warning/2 IKE/0xA3000067
    No matching P1 proposal found (PLMgrSA:381)
    91 20:04:11.080 12/04/03 Sev=Warning/2 IKE/0xE3000099
    Failed to process AG Msg 1 (NavitagorAM:263)
    92 20:04:11.080 12/04/03 Sev=Warning/2 IKE/0xE30000A5
    Unexpected SW error occurred while processing Aggressive Mode
    negotiator:(Navigator:2046)
    93 20:04:11.080 12/04/03 Sev=Info/4 IKE/0x63000017
    Marking IKE SA for deletion (I_Cookie=AF0E886D801C7437
    R_Cookie=5D041C4386C03013) reason = DEL_REASON_IKE_NEG_FAILED
    94 20:04:11.680 12/04/03 Sev=Info/4 IKE/0x6300004A
    Discarding IKE SA negotiation (I_Cookie=AF0E886D801C7437
    R_Cookie=5D041C4386C03013) reason = DEL_REASON_IKE_NEG_FAILED
    95 20:04:11.680 12/04/03 Sev=Info/4 CM/0x63100023
    Unable to establish additional Phase 1 SA with server "VPNGATEWAY" because
    of "DEL_REASON_IKE_NEG_FAILED"


    On the same pc, when I power off the ADSL modem and when I use a RTC modem
    connexion, evreything work well.

    I heard someone who had the same pb.. He said that he had to use an older
    Cisco VPN client (v3.6) to make it work



    "Peter Rowe" <> a écrit dans le message de
    news:brukga$a6n$...
    > How is the PC connecting to the ADSL? Have you changed routers with the

    connection?
    >
    > peter.
    >
    > >>> filip<> 18/12/2003 17:04:42 >>>

    > Hi,
    > I've a strange pb.
    > On a personal computer, I've got a cisco vpn client version 4.
    > I connect it to a pix to access my enterprise servers.
    >
    > At the beginning, I had a 512 kb ADSL connexion.. Everything was working
    > perfectly.
    >
    > Two weeks agos, I've been degrouped (same connexion but 1024 kb)
    > The VPN still connects (IPSEC and IKE phases ok) but once connected I

    can't
    > access the remote servers (behind vpn)
    > On the same computer, when I use a RTC modem connection, the VPN is ok and

    I
    > can access the remote servers, but with the ADSL connection, nothing

    works.
    > In the Vpn client, I see packet going out but nothing coming in.
    >
    > Did someone experimented the same pb ?
    > Any help would be usefull.
    >
    > Thanks
    >
    >
    >
    >
    filip, Dec 19, 2003
    #3
  4. filip

    filip Guest

    I read the same pb on

    http://www.groupstudy.com/archives/cisco/200308/msg00000.html

    This man had this error : DEL_REASON_RESET_SADB
    I've got the same in my logs

    "my set up is a vpn client connection to a cisco ios router. i can connect
    using an old version of the vpn client (3.6.4a) but i cannot connect using
    the newer versions (4.0.1 & 4.0.2)...
    "

    "filip" <> a écrit dans le message de
    news:bruspr$3tp$...
    > The pc is connected to ADSL with Sagem Usb modem
    >
    > here are the logs with ADSL connection
    >
    > Cisco Systems VPN Client Version 4.0.1 (Rel)
    > Copyright (C) 1998-2003 Cisco Systems, Inc. All Rights Reserved.
    > Client Type(s): Windows, Win9x
    > Running on: 4.10.67766446
    >
    > [...]
    > 29 20:02:48.470 12/04/03 Sev=Info/4 CM/0x6310000E
    > Established Phase 1 SA. 1 Phase 1 SA in the system
    >
    > [..then splitting tunnels..]
    > 40 20:02:50.990 12/04/03 Sev=Info/5 IKE/0x6300000F
    > SPLIT_NET #1
    > subnet = xxx
    > mask = 255.255.255.0
    > protocol = 0
    > src port = 0
    > dest port=0
    >
    > [..connection established...]
    > 58 20:02:51.210 12/04/03 Sev=Info/4 CM/0x6310001A
    > One secure connection established
    >
    > [...I try to ping protected host.....]
    > 86 20:04:11.080 12/04/03 Sev=Info/5 IKE/0x6300002F
    > Received ISAKMP packet: peer = VPNGATEWAY
    > 87 20:04:11.080 12/04/03 Sev=Info/4 IKE/0x63000014
    > RECEIVING <<< ISAKMP OAK AG (SA, KE, NON, ID, VID(Unity), VID(dpd),

    VID(?))
    > from VPNGATEWAY
    > 88 20:04:11.080 12/04/03 Sev=Info/4 IKE/0x6300007D
    > Peer initiating IKE SA rekey: I_Cookie=AF0E886D801C7437
    > R_Cookie=5D041C4386C03013
    > 89 20:04:11.080 12/04/03 Sev=Info/4 IKE/0x63000013
    > SENDING >>> ISAKMP OAK INFO (NOTIFY:NO_PROPOSAL_CHOSEN) to VPNGATEWAY
    > 90 20:04:11.080 12/04/03 Sev=Warning/2 IKE/0xA3000067
    > No matching P1 proposal found (PLMgrSA:381)
    > 91 20:04:11.080 12/04/03 Sev=Warning/2 IKE/0xE3000099
    > Failed to process AG Msg 1 (NavitagorAM:263)
    > 92 20:04:11.080 12/04/03 Sev=Warning/2 IKE/0xE30000A5
    > Unexpected SW error occurred while processing Aggressive Mode
    > negotiator:(Navigator:2046)
    > 93 20:04:11.080 12/04/03 Sev=Info/4 IKE/0x63000017
    > Marking IKE SA for deletion (I_Cookie=AF0E886D801C7437
    > R_Cookie=5D041C4386C03013) reason = DEL_REASON_IKE_NEG_FAILED
    > 94 20:04:11.680 12/04/03 Sev=Info/4 IKE/0x6300004A
    > Discarding IKE SA negotiation (I_Cookie=AF0E886D801C7437
    > R_Cookie=5D041C4386C03013) reason = DEL_REASON_IKE_NEG_FAILED
    > 95 20:04:11.680 12/04/03 Sev=Info/4 CM/0x63100023
    > Unable to establish additional Phase 1 SA with server "VPNGATEWAY" because
    > of "DEL_REASON_IKE_NEG_FAILED"
    >
    >
    > On the same pc, when I power off the ADSL modem and when I use a RTC modem
    > connexion, evreything work well.
    >
    > I heard someone who had the same pb.. He said that he had to use an older
    > Cisco VPN client (v3.6) to make it work
    >
    >
    >
    > "Peter Rowe" <> a écrit dans le message de
    > news:brukga$a6n$...
    > > How is the PC connecting to the ADSL? Have you changed routers with the

    > connection?
    > >
    > > peter.
    > >
    > > >>> filip<> 18/12/2003 17:04:42 >>>

    > > Hi,
    > > I've a strange pb.
    > > On a personal computer, I've got a cisco vpn client version 4.
    > > I connect it to a pix to access my enterprise servers.
    > >
    > > At the beginning, I had a 512 kb ADSL connexion.. Everything was working
    > > perfectly.
    > >
    > > Two weeks agos, I've been degrouped (same connexion but 1024 kb)
    > > The VPN still connects (IPSEC and IKE phases ok) but once connected I

    > can't
    > > access the remote servers (behind vpn)
    > > On the same computer, when I use a RTC modem connection, the VPN is ok

    and
    > I
    > > can access the remote servers, but with the ADSL connection, nothing

    > works.
    > > In the Vpn client, I see packet going out but nothing coming in.
    > >
    > > Did someone experimented the same pb ?
    > > Any help would be usefull.
    > >
    > > Thanks
    > >
    > >
    > >
    > >

    >
    >
    filip, Dec 19, 2003
    #4
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Oliver
    Replies:
    4
    Views:
    3,380
    username
    Nov 16, 2003
  2. MP
    Replies:
    2
    Views:
    12,234
  3. jarcar
    Replies:
    0
    Views:
    580
    jarcar
    Feb 12, 2004
  4. mw
    Replies:
    2
    Views:
    3,257
  5. Ned
    Replies:
    0
    Views:
    541
Loading...

Share This Page