VPN Client not connecting....

Hello,

Maybe someone here can assist me with this problem....

here's the situaltion....

2 machines. 1 laptop, 1 desktop
Laptop :WIN XP sp 2 Cisco VPN client V3.5

Desktop
WIN XP SP 1 Cisco VPN Client 4.6

Both logged in with local machine admin rights.

Both on 192.168.4.x /24 network
Both are using the same profile. ( points to Cisco 3005 VPN Consentrator )

Laptop VPN client works fine.
I get a User / password request and the VPN is up. ( verified )

Desktop clinet does not connect.
I get a User / password request, enter them in and the request is repeated.

I turned on the log and captured a session....

The only relavent portion is the following....

I've snipped the log of information that isn't needed, it shows that the connection was made, but an error prevented the VPN from staying up.
I've put those lines in BOLD COURIER TYPE

< start of Log >
Cisco Systems VPN Client Version 4.6.04.0043
Copyright (C) 1998-2005 Cisco Systems, Inc. All Rights Reserved.
Client Type(s): Windows, WinNT
Running on: 5.1.2600 Service Pack 1
Config file directory: C:\Program Files\Cisco Systems\VPN Client\

1 11:25:44.687 08/13/07 Sev=Warning/3 GUI/0xE3B00003
GI EnumPPP callback timed out.

2 11:26:14.984 08/13/07 Sev=Info/4 CM/0x63100002
Begin connection process

3 11:26:15.000 08/13/07 Sev=Info/4 CM/0x63100004
Establish secure connection using Ethernet

4 11:26:15.000 08/13/07 Sev=Info/4 CM/0x63100024
Attempt connection with server "199.245.162.35"

5 11:26:15.000 08/13/07 Sev=Info/6 IKE/0x6300003B
Attempting to establish a connection with 199.245.162.35.

<.... SNIP ....>

36 11:26:24.390 08/13/07 Sev=Info/5 IKE/0x6300000D
MODE_CFG_REPLY: Attribute = MODECFG_UNITY_SPLIT_INCLUDE (# of split_nets), value = 0x00000003

37 11:26:24.390 08/13/07 Sev=Info/5 IKE/0x6300000F
SPLIT_NET #1
subnet = 192.168.135.0
mask = 255.255.255.0
protocol = 0
src port = 0
dest port=0

38 11:26:24.390 08/13/07 Sev=Info/5 IKE/0x6300000F
SPLIT_NET #2
subnet = 192.168.132.0
mask = 255.255.255.0
protocol = 0
src port = 0
dest port=0

39 11:26:24.390 08/13/07 Sev=Info/5 IKE/0x6300000F
SPLIT_NET #3
subnet = 199.245.162.0
mask = 255.255.255.0
protocol = 0
src port = 0
dest port=0
40 11:26:24.390 08/13/07 Sev=Info/5 IKE/0x6300000D
MODE_CFG_REPLY: Attribute = MODECFG_UNITY_PFS: , value = 0x00000000

41 11:26:24.390 08/13/07 Sev=Info/5 IKE/0x6300000E
MODE_CFG_REPLY: Attribute = APPLICATION_VERSION, value = Cisco Systems, Inc./VPN 3000 Concentrator Version 3.5.Rel built by vmurphy on Nov 27 2001 13:35:16

42 11:26:24.390 08/13/07 Sev=Info/4 CM/0x63100019
Mode Config data received

43 11:26:24.406 08/13/07 Sev=Info/4 IKE/0x63000056
Received a key request from Driver: Local IP = 199.245.162.100, GW IP = 199.245.162.35, Remote IP = 0.0.0.0

44 11:26:24.406 08/13/07 Sev=Info/4 IKE/0x63000013
SENDING >>> ISAKMP OAK QM *(HASH, SA, NON, ID, ID) to 199.245.162.35


<.... SNIP ....>



55 11:26:24.453 08/13/07 Sev=Info/5 IKE/0x63000026
Loaded INBOUND ESP SPI: 0x0BDAFBCA

56 11:26:24.578 08/13/07 Sev=Info/5 CVPND/0x63400013
Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.4.1 192.168.4.193 20
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.168.4.0 255.255.255.0 192.168.4.193 192.168.4.193 20
192.168.4.193 255.255.255.255 127.0.0.1 127.0.0.1 20
192.168.4.255 255.255.255.255 192.168.4.193 192.168.4.193 20
224.0.0.0 240.0.0.0 192.168.4.193 192.168.4.193 20
255.255.255.255 255.255.255.255 192.168.4.193 192.168.4.193 1


57 11:26:24.593 08/13/07 Sev=Warning/2 CVPND/0xE3400014
The VPN Client could not find the adapters GUID - Virtual Adapter's tcpip GUID failed: 2.

58 11:26:24.593 08/13/07 Sev=Warning/3 CVPND/0xE340000D
The Client was unable to enable the Virtual Adapter because it could not set the IP configuration into the registry.

59 11:26:24.593 08/13/07 Sev=Warning/2 CM/0xE310000A
The virtual adapter failed to enable

60 11:26:24.593 08/13/07 Sev=Info/5 CVPND/0x63400013
Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.4.1 192.168.4.193 20
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.168.4.0 255.255.255.0 192.168.4.193 192.168.4.193 20
192.168.4.193 255.255.255.255 127.0.0.1 127.0.0.1 20
192.168.4.255 255.255.255.255 192.168.4.193 192.168.4.193 20
224.0.0.0 240.0.0.0 192.168.4.193 192.168.4.193 20
255.255.255.255 255.255.255.255 192.168.4.193 192.168.4.193 1


61 11:26:24.593 08/13/07 Sev=Info/6 CM/0x6310003A
Unable to restore route changes from file.

62 11:26:24.593 08/13/07 Sev=Info/6 CM/0x63100037
The routing table was returned to original state prior to Virtual Adapter

63 11:26:24.703 08/13/07 Sev=Warning/2 CVPND/0xE3400014
The VPN Client could not find the adapters GUID - Virtual Adapter's tcpip GUID failed: 2.

<.... SNIP ....>

88 11:26:25.453 08/13/07 Sev=Info/4 IPSEC/0x63700014
Deleted all keys

89 11:26:25.453 08/13/07 Sev=Info/4 IPSEC/0x63700014
Deleted all keys

90 11:26:25.453 08/13/07 Sev=Info/4 IPSEC/0x63700014
Deleted all keys

91 11:26:25.453 08/13/07 Sev=Info/4 IPSEC/0x6370000A
IPSec driver successfully stopped

< end of Log >

This is holding up a major project at my job. If anyone can be of assistance please use my email address....

joe <dot> ambrose <at> fabrikant <dot> com

thanks in advance.

Relevant Pages

  • Re: Network problems
    ... connected to a VPN client/Meditech hospital network. ... was the Windows-XP network connection ... The Cisco VPN Client requires a network MTU of 1300 rather than ...
    (microsoft.public.windowsxp.general)
  • Re: Cisco Client VPN over VPN?
    ... I don't think two Ipsec connections s from same PC will work. ... > Concentrator using the VPN Client to get to the Internet. ... > I also need to use the Cisco VPN client to connect to work. ... > Is there any possibility to start a second vpn connection over the first ...
    (comp.dcom.sys.cisco)
  • Re: Cico 800 (836) VPN to Internet NAT
    ... I have this cisco 836 providing NAT for all the internal networks. ... Router and VPN Client for Public Internet on a Stick Configuration ... I also wanted to avoid using the Cisco VPN client. ... It can also be used to open a session (to be exhaustive, there might be means to open a session with pptp as well, therefore you could think of launching an open session batch under 2K or XP) ...
    (comp.dcom.sys.cisco)
  • Re: Cisco VPN - Keeping it IPSEC only or using PPTP
    ... > We have millions of users using Microsoft VPN client out there. ... > VPN server and password would be security boundary there. ... > disadvantage when compared to the specific Cisco VPN client, ...
    (microsoft.public.security)
  • Re: pcAnywhere cant get through Cisco firewall
    ... Check your VPN client connection statistics. ... My problem is not receiving data. ... Since the Cisco VPN client reports the connection as ok, ...
    (comp.dcom.sys.cisco)