Tech Support banner

Status
Not open for further replies.
1 - 2 of 2 Posts

·
Registered
Joined
·
2 Posts
Discussion Starter #1
Hi All,
I am in dire need of some help. I am setting up the Symantec 200R for VPN access from remote computers. I have setup the Router and installed to VPN software on the computers... according to how Symantec say but with no luck....below is a log firstly of the client software and then secondly the log of the router. Can anyone let me know what i am doing wrong.

HELP

Remote Client is using a
Windows XP SP1 Machine with Version 7.01 of Symantec Enterprise VPN Client
Has an ADSL connection through a Billion 743GE ADSL Firewall / Router. (Firewall has been turned off)


From the Symantec Enterprise VPN Client Log

Oct 06 21:34:16.875 lian-li emapi[2216]: 400 Symantec Enterprise VPN Client Error: The security gateway [202.154.115.???] has not been defined.
Oct 06 21:34:16.906 lian-li emapi[2216]: 301 Internal warning: accept fails (Socket operation on non-socket.)
Oct 06 21:34:23.093 lian-li emapi[2092]: 100 Symantec Enterprise VPN Client Info: Entering EMAPI initial wait state.
Oct 06 21:34:23.187 lian-li vpnd[2584]: 117 Daemon starting
Oct 06 21:34:23.187 lian-li isakmpd[3784]: 117 isakmpd Info: Daemon starting
Oct 06 21:34:23.234 lian-li isakmpd[3784]: 120 isakmpd Info: Not waiting for Mobile
Oct 06 21:34:23.265 lian-li vpn: 401 Internal error: can't set interface parameters for IP address 192.168.1.171
Oct 06 21:34:23.265 lian-li vpn: 343 Interfaces Warning: The interface 192.168.1.171 was configured, but was not found on the firewall.
Oct 06 21:34:24.250 lian-li isakmpd[3784]: 120 isakmpd Info: Reloading tunnels to vpnd with 3 sec wait.
Oct 06 21:34:24.250 lian-li isakmpd[3784]: 120 isakmpd Info: Reloading tunnels to RaptorMobile with 3 sec wait.
Oct 06 21:34:25.156 lian-li isakmpd[3784]: 120 isakmpd Info: IKMPLogin: Switched to lite mode, cannot access CA directory
Oct 06 21:34:25.156 lian-li isakmpd[3784]: 120 isakmpd Info: Try to turn off crl validation...
Oct 06 21:34:25.156 lian-li isakmpd[3784]: 120 isakmpd Info: Successfully logged into the ISAKMP engine with a default profile which has no Certificate support
Oct 06 21:34:25.171 lian-li isakmpd[3784]: 120 isakmpd Info: Reconfiguring Isakmp tunnels
Oct 06 21:34:25.171 lian-li emapi[2092]: 100 Symantec Enterprise VPN Client Info: Continue operation.
Oct 06 21:34:25.171 lian-li isakmpd[3784]: 120 isakmpd Info: Reloading tunnels to RaptorMobile with 15 sec wait.
Oct 06 21:34:30.234 lian-li emapi[2092]: 100 nsetup Trace: Session Notification enabled.
Oct 06 21:34:30.265 lian-li isakmpd[3784]: 120 isakmpd Info: Reconfiguring Isakmp tunnels
Oct 06 21:34:30.281 lian-li emapi[2092]: 100 nsetup Trace: Connecting security gateway 202.154.???.???
Oct 06 21:34:30.281 lian-li emapi[2092]: 100 nsetup Trace: Connecting tunnel to 192.168.1.1
Oct 06 21:34:31.734 lian-li isakmpd[3784]: 120 isakmpd Info: Initiator, Established ISAKMP SA (Lsg=192.168.1.171, Rsg=202.154.???.???), [tunTemplate=SP1]
Oct 06 21:34:32.109 lian-li isakmpd[3784]: 120 isakmpd Info: Error while processing data rcvd from peer 202.154.???.???: (-3366) Unexpected payload was received in request.
Oct 06 21:34:32.109 lian-li isakmpd[3784]: 120 isakmpd Info: Error during isakmp sa negotiation with peer 202.154.???.???, status=IKMP_ERROR err=(-3366) Unexpected payload was received in request.
Oct 06 21:34:32.125 lian-li isakmpd[3784]: 120 isakmpd Info: Initiator, Failed to establish IPSEC SA with peer 202.154.???.??? [tunTemplate=SP1]
Oct 06 21:34:32.125 lian-li isakmpd[3784]: 120 isakmpd Info: Isakmp SA with peer 202.154.???.??? expired. Will renegotiate.
Oct 06 21:34:33.562 lian-li isakmpd[3784]: 120 isakmpd Info: Initiator, Established ISAKMP SA (Lsg=192.168.1.171, Rsg=202.154.???.???), [tunTemplate=SP1]
Oct 06 21:34:33.781 lian-li isakmpd[3784]: 120 isakmpd Info: Error while processing data rcvd from peer 202.154.???.???: (-3366) Unexpected payload was received in request.
Oct 06 21:34:33.796 lian-li isakmpd[3784]: 120 isakmpd Info: Error during isakmp sa negotiation with peer 202.154.???.???, status=IKMP_ERROR err=(-3366) Unexpected payload was received in request.
Oct 06 21:34:33.796 lian-li isakmpd[3784]: 120 isakmpd Info: Initiator, Failed to establish IPSEC SA with peer 202.154.???.??? [tunTemplate=SP1]
Oct 06 21:34:33.796 lian-li isakmpd[3784]: 120 isakmpd Info: Isakmp SA with peer 202.154.???.??? expired. Will renegotiate.
Oct 06 21:34:35.187 lian-li isakmpd[3784]: 120 isakmpd Info: Initiator, Established ISAKMP SA (Lsg=192.168.1.171, Rsg=202.154.???.???), [tunTemplate=SP1]
Oct 06 21:34:35.359 lian-li isakmpd[3784]: 120 isakmpd Info: Error while processing data rcvd from peer 202.154.???.???: (-3366) Unexpected payload was received in request.
Oct 06 21:34:35.359 lian-li isakmpd[3784]: 120 isakmpd Info: Error during isakmp sa negotiation with peer 202.154.???.???, status=IKMP_ERROR err=(-3366) Unexpected payload was received in request.
Oct 06 21:34:35.375 lian-li isakmpd[3784]: 120 isakmpd Info: Initiator, Failed to establish IPSEC SA with peer 202.154.???.??? [tunTemplate=SP1]
Oct 06 21:34:35.375 lian-li isakmpd[3784]: 120 isakmpd Info: Isakmp SA with peer 202.154.???.??? expired. Will renegotiate.
Oct 06 21:34:36.875 lian-li isakmpd[3784]: 120 isakmpd Info: Initiator, Established ISAKMP SA (Lsg=192.168.1.171, Rsg=202.154.???.???), [tunTemplate=SP1]
Oct 06 21:34:37.046 lian-li isakmpd[3784]: 120 isakmpd Info: Error while processing data rcvd from peer 202.154.???.???: (-3366) Unexpected payload was received in request.
Oct 06 21:34:37.046 lian-li isakmpd[3784]: 120 isakmpd Info: Error during isakmp sa negotiation with peer 202.154.???.???, status=IKMP_ERROR err=(-3366) Unexpected payload was received in request.
Oct 06 21:34:37.046 lian-li isakmpd[3784]: 120 isakmpd Info: Initiator, Failed to establish IPSEC SA with peer 202.154.???.??? [tunTemplate=SP1]
Oct 06 21:34:37.046 lian-li emapi[2092]: 400 Symantec Enterprise VPN Client Error: Communications with the ISAKMP daemon failed.
Oct 06 21:34:38.265 lian-li emapi[2092]: 100 nsetup Trace: Error connecting tunnel to 192.168.1.1. RC=1. Terminating connect operation.

From the Symantec 200R Firewall


10/06/2003 11:34:25.62 CCS - responding to Aggressive Mode from Road Warrior 218.214.?
10/06/2003 11:34:26.87 CCS - STATE_AGGR_R1: from STATE_AGGR_R0; sent AR1, expecting AI2
10/06/2003 11:34:27.02 CCS - STATE_AGGR_R2 ISAKMP SA established
10/06/2003 11:34:27.27 CCS - (null): INVALID_ID_INFORMATION
10/06/2003 11:34:27.27 CCS - state transition function for STATE_QUICK_R0 failed: INVALID_ID_INFORMATION
10/06/2003 11:34:27.27 CCS - Sending ISAKMP OAK INFO (Notification IKE SA)
10/06/2003 11:34:27.27 CCS - Terminating connection
10/06/2003 11:34:27.27 CCS - Terminating connection
10/06/2003 11:34:27.42 CCS - responding to Aggressive Mode from Road Warrior 218.214.???.???
10/06/2003 11:34:28.72 CCS - STATE_AGGR_R1: from STATE_AGGR_R0; sent AR1, expecting AI2
10/06/2003 11:34:28.87 CCS - STATE_AGGR_R2 ISAKMP SA established
10/06/2003 11:34:28.92 CCS - (null): INVALID_ID_INFORMATION
10/06/2003 11:34:28.92 CCS - state transition function for STATE_QUICK_R0 failed: INVALID_ID_INFORMATION
10/06/2003 11:34:28.92 CCS - Sending ISAKMP OAK INFO (Notification IKE SA)
10/06/2003 11:34:28.92 CCS - Terminating connection
10/06/2003 11:34:28.92 CCS - Terminating connection
10/06/2003 11:34:29.12 CCS - responding to Aggressive Mode from Road Warrior 218.214.???.???
10/06/2003 11:34:30.37 CCS - STATE_AGGR_R1: from STATE_AGGR_R0; sent AR1, expecting AI2
 

·
Registered
Joined
·
1 Posts
Hi, did you ever get this problem sorted, I got myself a symantec firewall/VPN 200r of ebay and I can't get the vpn client to connect, I have forwarded my internet IP to the symantec box and get the below error message.

08/30/2007 21:00:39.46 VPN1 - responding to Aggressive Mode from Road Warrior 192.168.1.97
08/30/2007 21:00:40.71 VPN1 - STATE_AGGR_R1: from STATE_AGGR_R0; sent AR1, expecting AI2
08/30/2007 21:00:40.81 VPN1 - STATE_AGGR_R2 ISAKMP SA established
08/30/2007 21:00:40.86 VPN1 - (null): INVALID_ID_INFORMATION
08/30/2007 21:00:40.86 VPN1 - state transition function for STATE_QUICK_R0 failed: INVALID_ID_INFORMATION
08/30/2007 21:00:40.86 VPN1 - Sending ISAKMP OAK INFO (Notification IKE SA)
08/30/2007 21:00:40.86 VPN1 - Terminating connection
08/30/2007 21:00:40.86 VPN1 - Terminating connection
08/30/2007 21:00:40.96 VPN1 - responding to Aggressive Mode from Road Warrior 192.168.1.97
08/30/2007 21:00:42.26 VPN1 - STATE_AGGR_R1: from STATE_AGGR_R0; sent AR1, expecting AI2
08/30/2007 21:00:42.31 VPN1 - STATE_AGGR_R2 ISAKMP SA established
08/30/2007 21:00:42.36 VPN1 - (null): INVALID_ID_INFORMATION
08/30/2007 21:00:42.36 VPN1 - state transition function for STATE_QUICK_R0 failed: INVALID_ID_INFORMATION
08/30/2007 21:00:42.36 VPN1 - Sending ISAKMP OAK INFO (Notification IKE SA)
08/30/2007 21:00:42.41 VPN1 - Terminating connection
08/30/2007 21:00:42.41 VPN1 - Terminating connection
08/30/2007 21:00:42.46 VPN1 - responding to Aggressive Mode from Road Warrior 192.168.1.97
08/30/2007 21:00:43.71 VPN1 - STATE_AGGR_R1: from STATE_AGGR_R0; sent AR1, expecting AI2
08/30/2007 21:00:43.76 VPN1 - STATE_AGGR_R2 ISAKMP SA established
08/30/2007 21:00:43.86 VPN1 - (null): INVALID_ID_INFORMATION
08/30/2007 21:00:43.86 VPN1 - state transition function for STATE_QUICK_R0 failed: INVALID_ID_INFORMATION
08/30/2007 21:00:43.86 VPN1 - Sending ISAKMP OAK INFO (Notification IKE SA)
08/30/2007 21:00:43.86 VPN1 - Terminating connection
08/30/2007 21:00:43.86 VPN1 - Terminating connection
08/30/2007 21:00:43.91 VPN1 - responding to Aggressive Mode from Road Warrior 192.168.1.97
08/30/2007 21:00:45.26 VPN1 - STATE_AGGR_R1: from STATE_AGGR_R0; sent AR1, expecting AI2


Hope you can help.
Paul
 
1 - 2 of 2 Posts
Status
Not open for further replies.
Top