G
Guest
I am having problems connecting one of my 2k servers to a Cisco 3005 Vpn Concentrator
When I dial the VPN I get error 789 "The L2TP connection attempt failed because the security layer encountered a processing error during initial negotiations with the remote computer.
I know the Concentrator is not at fault because I have other servers connected to it
I turned on IKE Debuging and below is a sample of it
1-07: 23:28:56:350 AuthCount
1-07: 23:28:56:350 Constructing Cert Reques
1-07: 23:28:56:350 Setting CertReq typ
1-07: 23:28:56:350 Throw: State mask=111
1-07: 23:28:56:350 Doing tripleDE
1-07: 23:28:56:350
1-07: 23:28:56:350 Sending: SA = 0x01131B70 to x.x.x.
1-07: 23:28:56:350 ISAKMP Header: (V1.0), len = 1524
1-07: 23:28:56:350 I-COOKIE 8ef5dcf046b5c86
1-07: 23:28:56:350 R-COOKIE 1319da4be165293
1-07: 23:28:56:350 exchange: Oakley Main Mod
1-07: 23:28:56:350 flags: 1 ( encrypted
1-07: 23:28:56:350 next payload: I
1-07: 23:28:56:350 message ID: 0000000
1-07: 23:28:57:350 Handling Retransmit: sa 1131b70 handle 111930 context 1131910 arg 113191
1-07: 23:28:57:350 retransmit: sa = 01131B70 centry 00000000 , count =
1-07: 23:28:57:350
1-07: 23:28:57:350 Sending: SA = 0x01131B70 to x.x.x.
1-07: 23:28:57:350 ISAKMP Header: (V1.0), len = 1524
1-07: 23:28:57:350 I-COOKIE 8ef5dcf046b5c86
1-07: 23:28:57:350 R-COOKIE 1319da4be165293
1-07: 23:28:57:350 exchange: Oakley Main Mod
1-07: 23:28:57:350 flags: 1 ( encrypted
1-07: 23:28:57:350 next payload: I
1-07: 23:28:57:350 message ID: 0000000
1-07: 23:28:59:350 Handling Retransmit: sa 1131b70 handle 111930 context 1131910 arg 113191
1-07: 23:28:59:350 retransmit: sa = 01131B70 centry 00000000 , count =
1-07: 23:28:59:350
1-07: 23:28:59:350 Sending: SA = 0x01131B70 to x.x.x.
1-07: 23:28:59:350 ISAKMP Header: (V1.0), len = 1524
1-07: 23:28:59:350 I-COOKIE 8ef5dcf046b5c86
1-07: 23:28:59:350 R-COOKIE 1319da4be165293
1-07: 23:28:59:350 exchange: Oakley Main Mod
1-07: 23:28:59:350 flags: 1 ( encrypted
1-07: 23:28:59:350 next payload: I
1-07: 23:28:59:350 message ID: 0000000
1-07: 23:29:03:350 Handling Retransmit: sa 1131b70 handle 111930 context 1131910 arg 113191
1-07: 23:29:03:350 retransmit: sa = 01131B70 centry 00000000 , count =
1-07: 23:29:03:350
1-07: 23:29:03:350 Sending: SA = 0x01131B70 to x.x.x.
1-07: 23:29:03:350 ISAKMP Header: (V1.0), len = 1524
1-07: 23:29:03:350 I-COOKIE 8ef5dcf046b5c86
1-07: 23:29:03:350 R-COOKIE 1319da4be165293
1-07: 23:29:03:350 exchange: Oakley Main Mod
1-07: 23:29:03:350 flags: 1 ( encrypted
1-07: 23:29:03:350 next payload: I
1-07: 23:29:03:350 message ID: 0000000
1-07: 23:29:04:4e0 *****************Queueing work for worker. 10
1-07: 23:29:04:350
1-07: 23:29:04:350 Resume: (get) SA = 0x01131b70 from x.x.x.
1-07: 23:29:04:350 ISAKMP Header: (V1.0), len = 745
1-07: 23:29:04:350 I-COOKIE 8ef5dcf046b5c86
1-07: 23:29:04:350 R-COOKIE 1319da4be165293
1-07: 23:29:04:350 exchange: Oakley Main Mod
1-07: 23:29:04:350 flags: 0
1-07: 23:29:04:350 next payload: K
1-07: 23:29:04:350 message ID: 0000000
1-07: 23:29:04:350 received an unencrypted packet when crypto activ
1-07: 23:29:04:350 GetPacket failed cbad032
1-07: 23:29:11:350 Handling Retransmit: sa 1131b70 handle 111930 context 1131910 arg 113191
1-07: 23:29:11:350 retransmit: sa = 01131B70 centry 00000000 , count =
1-07: 23:29:11:350
1-07: 23:29:11:350 Sending: SA = 0x01131B70 to x.x.x.
1-07: 23:29:11:350 ISAKMP Header: (V1.0), len = 1524
1-07: 23:29:11:350 I-COOKIE 8ef5dcf046b5c86
1-07: 23:29:11:350 R-COOKIE 1319da4be165293
1-07: 23:29:11:350 exchange: Oakley Main Mod
1-07: 23:29:11:350 flags: 1 ( encrypted
1-07: 23:29:11:350 next payload: I
1-07: 23:29:11:350 message ID: 0000000
1-07: 23:29:12:4e0 *****************Queueing work for worker. 11
1-07: 23:29:12:350
1-07: 23:29:12:350 Resume: (get) SA = 0x01131b70 from x.x.x.
1-07: 23:29:12:350 ISAKMP Header: (V1.0), len = 745
1-07: 23:29:12:350 I-COOKIE 8ef5dcf046b5c86
1-07: 23:29:12:350 R-COOKIE 1319da4be1652939
1-07: 23:29:12:350 exchange: Oakley Main Mode
1-07: 23:29:12:350 flags: 0
1-07: 23:29:12:350 next payload: KE
1-07: 23:29:12:350 message ID: 00000000
1-07: 23:29:12:350 received an unencrypted packet when crypto active
1-07: 23:29:12:350 GetPacket failed cbad0324
1-07: 23:29:16:350 SA status context outstanding. Not deleting. Sa: 01131B70 InitiateEvent: 0000063C
1-07: 23:29:16:350 SA has QMs outstanding. Not deleting. Sa: 0023E370 Count: 1
1-07: 23:29:16:350 Reaper deleting SA 1130048
1-07: 23:29:16:350 Deleting SA 01130048
1-07: 23:29:16:350 Cancelling Timeout 11c4e0
1-07: 23:29:16:350 ReapCentry centry 0023DF28 Tick 1 Status 0 Event 00000000
1-07: 23:29:20:4e0 *****************Queueing work for worker. 111
1-07: 23:29:20:350
1-07: 23:29:20:350 Resume: (get) SA = 0x01131b70 from x.x.x.x
1-07: 23:29:20:350 ISAKMP Header: (V1.0), len = 745
1-07: 23:29:20:350 I-COOKIE 8ef5dcf046b5c862
1-07: 23:29:20:350 R-COOKIE 1319da4be1652939
1-07: 23:29:20:350 exchange: Oakley Main Mode
1-07: 23:29:20:350 flags: 0
1-07: 23:29:20:350 next payload: KE
1-07: 23:29:20:350 message ID: 00000000
1-07: 23:29:20:350 received an unencrypted packet when crypto active
1-07: 23:29:20:350 GetPacket failed cbad0324
1-07: 23:29:27:350 Handling Retransmit: sa 1131b70 handle 111930 context 1131910 arg 1131910
1-07: 23:29:27:350 retransmit: sa = 01131B70 centry 00000000 , count = 4
1-07: 23:29:27:350
1-07: 23:29:27:350 Sending: SA = 0x01131B70 to x.x.x.x
1-07: 23:29:27:350 ISAKMP Header: (V1.0), len = 1524
1-07: 23:29:27:350 I-COOKIE 8ef5dcf046b5c862
1-07: 23:29:27:350 R-COOKIE 1319da4be1652939
1-07: 23:29:27:350 exchange: Oakley Main Mode
1-07: 23:29:27:350 flags: 1 ( encrypted )
1-07: 23:29:27:350 next payload: ID
1-07: 23:29:27:350 message ID: 00000000
1-07: 23:29:28:4e0 *****************Queueing work for worker. 112
1-07: 23:29:28:350
1-07: 23:29:28:350 Resume: (get) SA = 0x01131b70 from x.x.x.x
1-07: 23:29:28:350 ISAKMP Header: (V1.0), len = 76
1-07: 23:29:28:350 I-COOKIE 8ef5dcf046b5c862
1-07: 23:29:28:350 R-COOKIE 1319da4be1652939
1-07: 23:29:28:350 exchange: ISAKMP Informational Exchange
1-07: 23:29:28:350 flags: 1 ( encrypted )
1-07: 23:29:28:350 next payload: HASH
1-07: 23:29:28:350 message ID: 8a83de10
1-07: 23:29:28:350 Doing tripleDES
1-07: 23:29:28:350 invalid payload received
1-07: 23:29:28:350 GetPacket failed cbad034b
1-07: 23:29:55:350 Deleting conn entry with message id 8524a364
1-07: 23:29:55:350 CE Dead. sa:0023E370 ce:0023DF28 status:cbad0327
1-07: 23:29:55:350 Cancelling Timer e85d0
Any ideas are welcome.
Thanks in advanced
Mike
When I dial the VPN I get error 789 "The L2TP connection attempt failed because the security layer encountered a processing error during initial negotiations with the remote computer.
I know the Concentrator is not at fault because I have other servers connected to it
I turned on IKE Debuging and below is a sample of it
1-07: 23:28:56:350 AuthCount
1-07: 23:28:56:350 Constructing Cert Reques
1-07: 23:28:56:350 Setting CertReq typ
1-07: 23:28:56:350 Throw: State mask=111
1-07: 23:28:56:350 Doing tripleDE
1-07: 23:28:56:350
1-07: 23:28:56:350 Sending: SA = 0x01131B70 to x.x.x.
1-07: 23:28:56:350 ISAKMP Header: (V1.0), len = 1524
1-07: 23:28:56:350 I-COOKIE 8ef5dcf046b5c86
1-07: 23:28:56:350 R-COOKIE 1319da4be165293
1-07: 23:28:56:350 exchange: Oakley Main Mod
1-07: 23:28:56:350 flags: 1 ( encrypted
1-07: 23:28:56:350 next payload: I
1-07: 23:28:56:350 message ID: 0000000
1-07: 23:28:57:350 Handling Retransmit: sa 1131b70 handle 111930 context 1131910 arg 113191
1-07: 23:28:57:350 retransmit: sa = 01131B70 centry 00000000 , count =
1-07: 23:28:57:350
1-07: 23:28:57:350 Sending: SA = 0x01131B70 to x.x.x.
1-07: 23:28:57:350 ISAKMP Header: (V1.0), len = 1524
1-07: 23:28:57:350 I-COOKIE 8ef5dcf046b5c86
1-07: 23:28:57:350 R-COOKIE 1319da4be165293
1-07: 23:28:57:350 exchange: Oakley Main Mod
1-07: 23:28:57:350 flags: 1 ( encrypted
1-07: 23:28:57:350 next payload: I
1-07: 23:28:57:350 message ID: 0000000
1-07: 23:28:59:350 Handling Retransmit: sa 1131b70 handle 111930 context 1131910 arg 113191
1-07: 23:28:59:350 retransmit: sa = 01131B70 centry 00000000 , count =
1-07: 23:28:59:350
1-07: 23:28:59:350 Sending: SA = 0x01131B70 to x.x.x.
1-07: 23:28:59:350 ISAKMP Header: (V1.0), len = 1524
1-07: 23:28:59:350 I-COOKIE 8ef5dcf046b5c86
1-07: 23:28:59:350 R-COOKIE 1319da4be165293
1-07: 23:28:59:350 exchange: Oakley Main Mod
1-07: 23:28:59:350 flags: 1 ( encrypted
1-07: 23:28:59:350 next payload: I
1-07: 23:28:59:350 message ID: 0000000
1-07: 23:29:03:350 Handling Retransmit: sa 1131b70 handle 111930 context 1131910 arg 113191
1-07: 23:29:03:350 retransmit: sa = 01131B70 centry 00000000 , count =
1-07: 23:29:03:350
1-07: 23:29:03:350 Sending: SA = 0x01131B70 to x.x.x.
1-07: 23:29:03:350 ISAKMP Header: (V1.0), len = 1524
1-07: 23:29:03:350 I-COOKIE 8ef5dcf046b5c86
1-07: 23:29:03:350 R-COOKIE 1319da4be165293
1-07: 23:29:03:350 exchange: Oakley Main Mod
1-07: 23:29:03:350 flags: 1 ( encrypted
1-07: 23:29:03:350 next payload: I
1-07: 23:29:03:350 message ID: 0000000
1-07: 23:29:04:4e0 *****************Queueing work for worker. 10
1-07: 23:29:04:350
1-07: 23:29:04:350 Resume: (get) SA = 0x01131b70 from x.x.x.
1-07: 23:29:04:350 ISAKMP Header: (V1.0), len = 745
1-07: 23:29:04:350 I-COOKIE 8ef5dcf046b5c86
1-07: 23:29:04:350 R-COOKIE 1319da4be165293
1-07: 23:29:04:350 exchange: Oakley Main Mod
1-07: 23:29:04:350 flags: 0
1-07: 23:29:04:350 next payload: K
1-07: 23:29:04:350 message ID: 0000000
1-07: 23:29:04:350 received an unencrypted packet when crypto activ
1-07: 23:29:04:350 GetPacket failed cbad032
1-07: 23:29:11:350 Handling Retransmit: sa 1131b70 handle 111930 context 1131910 arg 113191
1-07: 23:29:11:350 retransmit: sa = 01131B70 centry 00000000 , count =
1-07: 23:29:11:350
1-07: 23:29:11:350 Sending: SA = 0x01131B70 to x.x.x.
1-07: 23:29:11:350 ISAKMP Header: (V1.0), len = 1524
1-07: 23:29:11:350 I-COOKIE 8ef5dcf046b5c86
1-07: 23:29:11:350 R-COOKIE 1319da4be165293
1-07: 23:29:11:350 exchange: Oakley Main Mod
1-07: 23:29:11:350 flags: 1 ( encrypted
1-07: 23:29:11:350 next payload: I
1-07: 23:29:11:350 message ID: 0000000
1-07: 23:29:12:4e0 *****************Queueing work for worker. 11
1-07: 23:29:12:350
1-07: 23:29:12:350 Resume: (get) SA = 0x01131b70 from x.x.x.
1-07: 23:29:12:350 ISAKMP Header: (V1.0), len = 745
1-07: 23:29:12:350 I-COOKIE 8ef5dcf046b5c86
1-07: 23:29:12:350 R-COOKIE 1319da4be1652939
1-07: 23:29:12:350 exchange: Oakley Main Mode
1-07: 23:29:12:350 flags: 0
1-07: 23:29:12:350 next payload: KE
1-07: 23:29:12:350 message ID: 00000000
1-07: 23:29:12:350 received an unencrypted packet when crypto active
1-07: 23:29:12:350 GetPacket failed cbad0324
1-07: 23:29:16:350 SA status context outstanding. Not deleting. Sa: 01131B70 InitiateEvent: 0000063C
1-07: 23:29:16:350 SA has QMs outstanding. Not deleting. Sa: 0023E370 Count: 1
1-07: 23:29:16:350 Reaper deleting SA 1130048
1-07: 23:29:16:350 Deleting SA 01130048
1-07: 23:29:16:350 Cancelling Timeout 11c4e0
1-07: 23:29:16:350 ReapCentry centry 0023DF28 Tick 1 Status 0 Event 00000000
1-07: 23:29:20:4e0 *****************Queueing work for worker. 111
1-07: 23:29:20:350
1-07: 23:29:20:350 Resume: (get) SA = 0x01131b70 from x.x.x.x
1-07: 23:29:20:350 ISAKMP Header: (V1.0), len = 745
1-07: 23:29:20:350 I-COOKIE 8ef5dcf046b5c862
1-07: 23:29:20:350 R-COOKIE 1319da4be1652939
1-07: 23:29:20:350 exchange: Oakley Main Mode
1-07: 23:29:20:350 flags: 0
1-07: 23:29:20:350 next payload: KE
1-07: 23:29:20:350 message ID: 00000000
1-07: 23:29:20:350 received an unencrypted packet when crypto active
1-07: 23:29:20:350 GetPacket failed cbad0324
1-07: 23:29:27:350 Handling Retransmit: sa 1131b70 handle 111930 context 1131910 arg 1131910
1-07: 23:29:27:350 retransmit: sa = 01131B70 centry 00000000 , count = 4
1-07: 23:29:27:350
1-07: 23:29:27:350 Sending: SA = 0x01131B70 to x.x.x.x
1-07: 23:29:27:350 ISAKMP Header: (V1.0), len = 1524
1-07: 23:29:27:350 I-COOKIE 8ef5dcf046b5c862
1-07: 23:29:27:350 R-COOKIE 1319da4be1652939
1-07: 23:29:27:350 exchange: Oakley Main Mode
1-07: 23:29:27:350 flags: 1 ( encrypted )
1-07: 23:29:27:350 next payload: ID
1-07: 23:29:27:350 message ID: 00000000
1-07: 23:29:28:4e0 *****************Queueing work for worker. 112
1-07: 23:29:28:350
1-07: 23:29:28:350 Resume: (get) SA = 0x01131b70 from x.x.x.x
1-07: 23:29:28:350 ISAKMP Header: (V1.0), len = 76
1-07: 23:29:28:350 I-COOKIE 8ef5dcf046b5c862
1-07: 23:29:28:350 R-COOKIE 1319da4be1652939
1-07: 23:29:28:350 exchange: ISAKMP Informational Exchange
1-07: 23:29:28:350 flags: 1 ( encrypted )
1-07: 23:29:28:350 next payload: HASH
1-07: 23:29:28:350 message ID: 8a83de10
1-07: 23:29:28:350 Doing tripleDES
1-07: 23:29:28:350 invalid payload received
1-07: 23:29:28:350 GetPacket failed cbad034b
1-07: 23:29:55:350 Deleting conn entry with message id 8524a364
1-07: 23:29:55:350 CE Dead. sa:0023E370 ce:0023DF28 status:cbad0327
1-07: 23:29:55:350 Cancelling Timer e85d0
Any ideas are welcome.
Thanks in advanced
Mike