RV320 VPN Connection - ignoring Delete SA payload: PROTO_IPSEC_ESP SA

I have RV320 (Serial Number: NKS17161863 Firmware Version: v1.1.1.19 (2014-12-01, 12:38:04))
and Two RV130:
RV130 #1
System Name: router8E6AAF
Firmware Version: 1.0.1.3
Serial Number: CCQ18391LCX
RV130 # 2
System Name: router8E6A58
Firmware Version: 1.0.1.3
Serial Number: CCQ18391LC4
The VPN Server is RV320 and the setting is
http://i.imgur.com/a2iKNVT.png
The Settings on RV130’s is:
http://i.imgur.com/ly3bB2Z.png
http://i.imgur.com/AB1ImwU.png
And Log is sending me errors
2015-04-03, 11:10:19 VPN Log [g2gips2] #361: [Tunnel Established] sent QI2, IPsec SA established {ESP=>0xd2c697fd < 0xc996e19a}
2015-04-03, 11:12:34 VPN Log [g2gips0] #362: [Tunnel Established] ISAKMP SA established
2015-04-03, 11:26:04 ALLOW UDP 91.196.8.139:500 -> 95.51.168.122:500 on eth2
2015-04-03, 11:26:04 VPN Log [g2gips0] #363: [Tunnel Established] IPsec SA established {ESP=>0x33533382 < 0xc3fbe46e}
2015-04-03, 11:26:04 VPN Log [g2gips0] #362: [Tunnel Authorize Fail] ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0x96a8668e) not found (maybe expired)
I thing the last Record is the problem. Can you help me?

I found an answer.
The message is informational in nature and is not the cause of any problems. the routers run Linux and use the open source codebase....
"When an IPsec SA is about to expire *swan sends a delete SA notification
to the peer. Since the same IPsec SA is also about to expire on the
peer side, often the peer is a little faster and has already deleted
the IPsec SA itself. Thus when the delete SA message arrives, the IPsec SA
doesn't exist anymore and the warning below is issued in the log.
If you want to study the SA renewal and deletion mechanism in detail
you can do this by activating the following debug option
ipsec whack --debug-lifecycle"
https://lists.openswan.org/pipermail/users/2004-September/002128.html
In my case, the ISP is Comcast and they were filtering UDP packets, causing the issue. A call to their business tech support and an explanation of our need to use an IPSEC VPN tunnel which uses UDP resolved the problem.
The Cisco VPN routers (RV325 & RV320) work great and I haven't had any problems since. There is excellent tech support from Cisco, you just have to follow their procedures and register the serial numbers of your devices. They helped me even without a service contract, but I purchased one anyway. It's only $56 for a 3 year support agreement at CDW.
Hope that helps.

Similar Messages

RV320 VPN log level

Hello
The RV320 logs are very poor to troubleshoot VPN issues, even with external syslog facility, at the maximum log level the device does not log any VPN event.
Is there a way to increase the log level?
Is there a separate syslog facility local# for VPN?
Where to get extensive documentation about syslog facilities numbers used by RV320?
Thank you

Cisco support team is trying to fix this up, but it's not working
They managed to build a working tunnel but that's not the point, we need VPN logs, period.
It looks like the device only starts VPN log after a succesfull VPN connection, making the device impossible to setup, diagnose or monitor failed VPN connections. This is a no go.
using external syslog does not help, the only VPN related output I get in log is :
Oct 22 12:32:18 10.0.0.254 VPN Log: [g2gips0]: [Tunnel Disconnected]
what I should get (and is a must have) would be :
2014-10-20, 05:15:31
VPN Log
[g2gips2] #11: [Tunnel Established] ISAKMP SA established
2014-10-20, 05:15:54
VPN Log
[g2gips2] #14: [Tunnel Established] sent MR3, ISAKMP SA established
2014-10-20, 05:15:55
VPN Log
[g2gips2]: cmd=up-client peer=62.176.126.28 peer_client=192.168.1.0/24 peer_client_net=192.168.1.0 peer_client_mask=255.255.255.0
2014-10-20, 05:15:55
VPN Log
ip route add 192.168.1.0/24 via 88.161.221.254 dev eth1 metric 35
2014-10-20, 05:15:55
VPN Log
iptables -t nat -I vpn -s 10.0.0.0/24 -d 192.168.1.0/24 -j ACCEPT
2014-10-20, 05:15:55
VPN Log
iptables -t nat -I vpn -s 192.168.1.0/24 -d 10.0.0.0/24 -j ACCEPT
2014-10-20, 05:15:55
VPN Log
iptables -t nat -I vpn_postrouting -s 10.0.0.0/24 -d 192.168.1.0/24 -j ACCEPT
2014-10-20, 05:15:55
VPN Log
iptables -t nat -I vpn_postrouting -o eth0 -s 192.168.1.0/24 -d 10.0.0.0/24 -j ACCEPT
2014-10-20, 05:15:55
VPN Log
[g2gips2] #15: [Tunnel Established] IPsec SA established {ESP=>0xc570a9c8 < 0xc43d09ba}
2014-10-20, 05:16:53
VPN Log
[g2gips2] #15: [Tunnel Negotiation Fail] DPD: Could not find newest phase 1 state
2014-10-20, 05:26:44
User Log
User cisco Session Expired
2014-10-20, 06:14:42
VPN Log
[g2gips2] #16: [Tunnel Established] sent MR3, ISAKMP SA established
2014-10-20, 06:14:42
VPN Log
[g2gips2] #17: [Tunnel Established] IPsec SA established {ESP=>0xc0931255 < 0xc928b34e}
2014-10-20, 06:14:42
VPN Log
[g2gips2] #16: [Tunnel Authorize Fail] ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xc570a9c8) not found (maybe expired)
2014-10-20, 07:13:34
VPN Log
[g2gips2] #18: [Tunnel Established] IPsec SA established {ESP=>0xcea6223a < 0xcfbc92ba}
2014-10-20, 07:13:34
VPN Log
[g2gips2] #16: [Tunnel Authorize Fail] ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xc0931255) not found (maybe expired)
2014-10-20, 08:12:20
VPN Log
[g2gips2] #19: [Tunnel Established] IPsec SA established {ESP=>0xcdb2138d < 0xcfa80369}
2014-10-20, 08:12:20
VPN Log
[g2gips2] #16: [Tunnel Authorize Fail] ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xcea6223a) not found (maybe expired)
2014-10-20, 09:11:09
VPN Log
[g2gips2] #20: [Tunnel Established] IPsec SA established {ESP=>0xc5aeba36 < 0xcd182a7c}
2014-10-20, 09:11:09
VPN Log
[g2gips2] #16: [Tunnel Authorize Fail] ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xcdb2138d) not found (maybe expired)
2014-10-20, 10:09:57
VPN Log
[g2gips2] #21: [Tunnel Established] IPsec SA established {ESP=>0xc862dbe2 < 0xc68a5a29}
2014-10-20, 10:09:57
VPN Log
[g2gips2] #16: [Tunnel Authorize Fail] ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xc5aeba36) not found (maybe expired)
2014-10-20, 11:08:45
VPN Log
[g2gips2] #22: [Tunnel Established] IPsec SA established {ESP=>0xc8c5d191 < 0xc7009873}
2014-10-20, 11:08:45
VPN Log
[g2gips2] #16: [Tunnel Authorize Fail] ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xc862dbe2) not found (maybe expired)
2014-10-20, 12:07:29
VPN Log
[g2gips2] #23: [Tunnel Established] IPsec SA established {ESP=>0xcbb5aca6 < 0xc087d294}
2014-10-20, 12:07:29
VPN Log
[g2gips2] #16: [Tunnel Authorize Fail] ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xc8c5d191) not found (maybe expired)
2014-10-20, 13:06:16
VPN Log
[g2gips2] #24: [Tunnel Established] IPsec SA established {ESP=>0xce08b895 < 0xca8ee98b}
2014-10-20, 13:06:16
VPN Log
[g2gips2] #16: [Tunnel Authorize Fail] ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xcbb5aca6) not found (maybe expired)
2014-10-20, 14:05:03
VPN Log
[g2gips2] #25: [Tunnel Established] IPsec SA established {ESP=>0xc84ace20 < 0xc66ee4e5}
2014-10-20, 14:05:03
VPN Log
[g2gips2] #16: [Tunnel Authorize Fail] ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xce08b895) not found (maybe expired)
2014-10-20, 14:13:46
VPN Log
[g2gips2] #26: [Tunnel Established] sent MR3, ISAKMP SA established
2014-10-20, 15:03:54
VPN Log
[g2gips2] #27: [Tunnel Established] IPsec SA established {ESP=>0xc8808731 < 0xc6aaaf12}
2014-10-20, 15:03:54
VPN Log
[g2gips2] #26: [Tunnel Authorize Fail] ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xc84ace20) not found (maybe expired)
2014-10-20, 16:02:47
VPN Log
[g2gips2] #28: [Tunnel Established] IPsec SA established {ESP=>0xc20db40f < 0xcbcbb7c5}
2014-10-20, 16:02:47
VPN Log
[g2gips2] #26: [Tunnel Authorize Fail] ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xc8808731) not found (maybe expired)
2014-10-20, 17:01:39
VPN Log
[g2gips2] #29: [Tunnel Established] IPsec SA established {ESP=>0xc8f8b88c < 0xc87177ac}
2014-10-20, 17:01:39
VPN Log
[g2gips2] #26: [Tunnel Authorize Fail] ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xc20db40f) not found (maybe expired)
2014-10-20, 18:00:24
VPN Log
[g2gips2] #30: [Tunnel Established] IPsec SA established {ESP=>0xc24edeb7 < 0xc31180a7}
2014-10-20, 18:00:24
VPN Log
[g2gips2] #26: [Tunnel Authorize Fail] ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xc8f8b88c) not found (maybe expired)
2014-10-20, 18:59:12
VPN Log
[g2gips2] #31: [Tunnel Established] IPsec SA established {ESP=>0xcf388896 < 0xcca051f9}
2014-10-20, 18:59:12
VPN Log
[g2gips2] #26: [Tunnel Authorize Fail] ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xc24edeb7) not found (maybe expired)
2014-10-20, 19:57:59
VPN Log
[g2gips2] #32: [Tunnel Established] IPsec SA established {ESP=>0xcb12a9c8 < 0xc6d3e8a4}
2014-10-20, 19:57:59
VPN Log
[g2gips2] #26: [Tunnel Authorize Fail] ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xcf388896) not found (maybe expired)
2014-10-20, 20:56:46
VPN Log
[g2gips2] #33: [Tunnel Established] IPsec SA established {ESP=>0xcdc041c8 < 0xc69fa232}
2014-10-20, 20:56:46
VPN Log
[g2gips2] #26: [Tunnel Authorize Fail] ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xcb12a9c8) not found (maybe expired)
2014-10-20, 21:55:36
VPN Log
[g2gips2] #34: [Tunnel Established] IPsec SA established {ESP=>0xc4f97df6 < 0xc4a67abd}
2014-10-20, 21:55:36
VPN Log
[g2gips2] #26: [Tunnel Authorize Fail] ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xcdc041c8) not found (maybe expired)
2014-10-20, 22:12:56
VPN Log
[g2gips2] #35: [Tunnel Established] sent MR3, ISAKMP SA established
2014-10-20, 22:54:27
VPN Log
[g2gips2] #36: [Tunnel Established] IPsec SA established {ESP=>0xc3716585 < 0xc41ab42b}
2014-10-20, 22:54:27
VPN Log
[g2gips2] #35: [Tunnel Authorize Fail] ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xc4f97df6) not found (maybe expired)
2014-10-20, 23:53:13
VPN Log
[g2gips2] #37: [Tunnel Established] IPsec SA established {ESP=>0xcfc747c8 < 0xc5994856}
2014-10-20, 23:53:13
VPN Log
[g2gips2] #35: [Tunnel Authorize Fail] ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xc3716585) not found (maybe expired)
2014-10-21, 00:51:58
VPN Log
[g2gips2] #38: [Tunnel Established] IPsec SA established {ESP=>0xcf4ea957 < 0xc566c6d3}
2014-10-21, 00:51:58
VPN Log
[g2gips2] #35: [Tunnel Authorize Fail] ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xcfc747c8) not found (maybe expired)
2014-10-21, 01:50:48
VPN Log
[g2gips2] #39: [Tunnel Established] IPsec SA established {ESP=>0xc4f4ddc5 < 0xc852f0a8}
2014-10-21, 01:50:48
VPN Log
[g2gips2] #35: [Tunnel Authorize Fail] ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xcf4ea957) not found (maybe expired)
2014-10-21, 02:49:33
VPN Log
[g2gips2] #40: [Tunnel Established] IPsec SA established {ESP=>0xc4d14f63 < 0xc841322e}
2014-10-21, 02:49:33
VPN Log
[g2gips2] #35: [Tunnel Authorize Fail] ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xc4f4ddc5) not found (maybe expired)
2014-10-21, 03:48:17
VPN Log
[g2gips2] #41: [Tunnel Established] IPsec SA established {ESP=>0xcab61c1d < 0xc8e06d65}
2014-10-21, 03:48:17
VPN Log
[g2gips2] #35: [Tunnel Authorize Fail] ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xc4d14f63) not found (maybe expired)
2014-10-21, 04:47:10
VPN Log
[g2gips2] #42: [Tunnel Established] IPsec SA established {ESP=>0xcc4d0867 < 0xc5370a2f}
2014-10-21, 04:47:10
VPN Log
[g2gips2] #35: [Tunnel Authorize Fail] ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xcab61c1d) not found (maybe expired)
2014-10-21, 05:45:57
VPN Log
[g2gips2] #43: [Tunnel Established] IPsec SA established {ESP=>0xcb8459a9 < 0xcab43b24}
2014-10-21, 05:45:57
VPN Log
[g2gips2] #35: [Tunnel Authorize Fail] ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xcc4d0867) not found (maybe expired)
2014-10-21, 06:12:00
VPN Log
[g2gips2] #44: [Tunnel Established] sent MR3, ISAKMP SA established
2014-10-21, 06:44:47
VPN Log
[g2gips2] #45: [Tunnel Established] IPsec SA established {ESP=>0xc1d633d9 < 0xc5b9214f}
2014-10-21, 06:44:47
VPN Log
[g2gips2] #44: [Tunnel Authorize Fail] ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xcb8459a9) not found (maybe expired)
2014-10-21, 07:43:37
VPN Log
[g2gips2] #46: [Tunnel Established] IPsec SA established {ESP=>0xc8a6235e < 0xc549a18d}
2014-10-21, 07:43:37
VPN Log
[g2gips2] #44: [Tunnel Authorize Fail] ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xc1d633d9) not found (maybe expired)
2014-10-21, 08:42:28
VPN Log
[g2gips2] #47: [Tunnel Established] IPsec SA established {ESP=>0xc563592a < 0xc033e13d}
2014-10-21, 08:42:28
VPN Log
[g2gips2] #44: [Tunnel Authorize Fail] ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xc8a6235e) not found (maybe expired)
2014-10-21, 09:41:12
VPN Log
[g2gips2] #48: [Tunnel Established] IPsec SA established {ESP=>0xc6c5e0b6 < 0xc9acd1e2}
2014-10-21, 09:41:12
VPN Log
[g2gips2] #44: [Tunnel Authorize Fail] ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xc563592a) not found (maybe expired)
2014-10-21, 10:40:03
VPN Log
[g2gips2] #49: [Tunnel Established] IPsec SA established {ESP=>0xc49d311a < 0xca8961e8}
2014-10-21, 10:40:03
VPN Log
[g2gips2] #44: [Tunnel Authorize Fail] ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xc6c5e0b6) not found (maybe expired)
2014-10-21, 11:38:53
VPN Log
[g2gips2] #50: [Tunnel Established] IPsec SA established {ESP=>0xc682b92b < 0xc01e3e5f}
2014-10-21, 11:38:53
VPN Log
[g2gips2] #44: [Tunnel Authorize Fail] ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xc49d311a) not found (maybe expired)
2014-10-21, 12:37:41
VPN Log
[g2gips2] #51: [Tunnel Established] IPsec SA established {ESP=>0xc0e9d4eb < 0xc0c1b26a}
2014-10-21, 12:37:41
VPN Log
[g2gips2] #44: [Tunnel Authorize Fail] ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xc682b92b) not found (maybe expired)
2014-10-21, 13:36:29
VPN Log
[g2gips2] #52: [Tunnel Established] IPsec SA established {ESP=>0xc424276a < 0xc0467e19}

RV082 loses all vpn connections over night

I have a RV082 vpn router with 20 VPN connections permasnently deployed. I am using 1.3.98 tm firmware (latest) After long periods of inactivity (overnight)
the VPN cease to function there is no indication of a problem. The tunnels are showing active in the VPN summary screen. If I restart the router from the management page the tunnels are restored.

OK.   Next, lets check the other side of the tunnel. Which product is that? Are Keep alives and DPD enabled there?
Also, lets look in the LOG file of the RV082 and see what it says.   Should show the tunnel trying to reconnect after it failed and may give us hints.
Here is an RV082 bringing up a tunnel (as an example for reference).
Jun 4 05:26:17 2009    VPN Log   initiating Quick Mode PSK+ENCRYPT+TUNNEL+PFS to replace #5453 Jun 4 05:26:17 2009    VPN Log   [Tunnel Negotiation Info] >>> Initiator send Quick Mode 1st packetJun 4 05:26:17 2009    VPN Log   [Tunnel Negotiation Info] <<< Initiator Received Quick Mode 2nd packetJun 4 05:26:17 2009    VPN Log   [Tunnel Negotiation Info] Inbound SPI value = ddfeccbJun 4 05:26:17 2009    VPN Log   [Tunnel Negotiation Info] Outbound SPI value = d866cd5bJun 4 05:26:17 2009    VPN Log   [Tunnel Negotiation Info] >>> Initiator Send Quick Mode 3rd packetJun 4 05:26:17 2009    VPN Log   [Tunnel Negotiation Info] Quick Mode Phase 2 SA Established, IPSec Tunnel ConnectedJun 4 05:26:17 2009    VPN Log   Dead Peer Detection Start, DPD delay timer=10 sec timeout=10 secJun 4 05:26:17 2009    VPN Log   ignoring Delete SA payload: IPSEC SA not found (maybe expired)

Need to accept VPN connections from "Any"

I had previously been using two WRV54G wireless routers to establish a site to site VPN connection between a branch office and our corporate Headquarters. Because of the limited DHCP scope configuration options, I decided to "upgrade" to the WRVS4400N devices. I have now been able to establish the VPN again between the two new boxes but I've now gotten to the point where I would like to add an additional remote site. In the WRV54G, it was easy to configure the one at HQ to accept connections from "any" but this new router does not seem to be as simple.
Oh yeah, I am running firmware version 1.1.03 on both routers.
Does anyone have any idea how I can set up the HQ router to accept VPN connections from "any"?
Thanks! I appreciate the help.

And this is the VPN log on the HQ router:
Mar 4 11:11:39 - [VPN Log]: "gatekeeper": cannot initiate connection without knowing peer IP address (kind=CK_TEMPLATE)
Mar 4 11:11:47 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [Openswan (this version) cvs2006Jan12_11:29:56 X.509-1.5.4 PLUTO_SENDS_VENDORID PLUTO_USES_KEYRR]
Mar 4 11:11:47 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [Dead Peer Detection]
Mar 4 11:11:47 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [RFC 3947] method set to=109
Mar 4 11:11:47 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03] meth=108, but already using method 109
Mar 4 11:11:47 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02] meth=107, but already using method 109
Mar 4 11:11:47 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-00]
Mar 4 11:11:47 - [VPN Log]: "gatekeeper"[4] (Remote router WAN IP) #4: responding to Main Mode from unknown peer (Remote router WAN IP)
Mar 4 11:11:47 - [VPN Log]: "gatekeeper"[4] (Remote router WAN IP) #4: Can't authenticate: no preshared key found for `(HQ Router WAN IP)' and `%any'. Attribute OAKLEY_AUTHENTICATION_METHOD
Mar 4 11:11:47 - [VPN Log]: "gatekeeper"[4] (Remote router WAN IP) #4: no acceptable Oakley Transform
Mar 4 11:11:47 - [VPN Log]: "gatekeeper"[4] (Remote router WAN IP) #4: sending notification NO_PROPOSAL_CHOSEN to (Remote router WAN IP):500
Mar 4 11:11:47 - [VPN Log]: "gatekeeper"[4] (Remote router WAN IP): deleting connection "gatekeeper" instance with peer (Remote router WAN IP) {isakmp=#0/ipsec=#0}
Mar 4 11:11:57 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [Openswan (this version) cvs2006Jan12_11:29:56 X.509-1.5.4 PLUTO_SENDS_VENDORID PLUTO_USES_KEYRR]
Mar 4 11:11:57 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [Dead Peer Detection]
Mar 4 11:11:57 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [RFC 3947] method set to=109
Mar 4 11:11:57 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03] meth=108, but already using method 109
Mar 4 11:11:57 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02] meth=107, but already using method 109
Mar 4 11:11:57 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-00]
Mar 4 11:11:57 - [VPN Log]: "gatekeeper"[5] (Remote router WAN IP) #5: responding to Main Mode from unknown peer (Remote router WAN IP)
Mar 4 11:11:57 - [VPN Log]: "gatekeeper"[5] (Remote router WAN IP) #5: Can't authenticate: no preshared key found for `(HQ Router WAN IP)' and `%any'. Attribute OAKLEY_AUTHENTICATION_METHOD
Mar 4 11:11:57 - [VPN Log]: "gatekeeper"[5] (Remote router WAN IP) #5: no acceptable Oakley Transform
Mar 4 11:11:57 - [VPN Log]: "gatekeeper"[5] (Remote router WAN IP) #5: sending notification NO_PROPOSAL_CHOSEN to (Remote router WAN IP):500
Mar 4 11:11:57 - [VPN Log]: "gatekeeper"[5] (Remote router WAN IP): deleting connection "gatekeeper" instance with peer (Remote router WAN IP) {isakmp=#0/ipsec=#0}
Mar 4 11:12:17 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [Openswan (this version) cvs2006Jan12_11:29:56 X.509-1.5.4 PLUTO_SENDS_VENDORID PLUTO_USES_KEYRR]
Mar 4 11:12:17 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [Dead Peer Detection]
Mar 4 11:12:17 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [RFC 3947] method set to=109
Mar 4 11:12:17 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03] meth=108, but already using method 109
Mar 4 11:12:17 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02] meth=107, but already using method 109
Mar 4 11:12:17 - [VPN Log]: packet from (Remote router WAN IP):500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-00]
Mar 4 11:12:17 - [VPN Log]: "gatekeeper"[6] (Remote router WAN IP) #6: responding to Main Mode from unknown peer (Remote router WAN IP)
Mar 4 11:12:17 - [VPN Log]: "gatekeeper"[6] (Remote router WAN IP) #6: Can't authenticate: no preshared key found for `(HQ Router WAN IP)' and `%any'. Attribute OAKLEY_AUTHENTICATION_METHOD
Mar 4 11:12:17 - [VPN Log]: "gatekeeper"[6] (Remote router WAN IP) #6: no acceptable Oakley Transform
Mar 4 11:12:17 - [VPN Log]: "gatekeeper"[6] (Remote router WAN IP) #6: sending notification NO_PROPOSAL_CHOSEN to (Remote router WAN IP):500
Mar 4 11:12:17 - [VPN Log]: "gatekeeper"[6] (Remote router WAN IP): deleting connection "gatekeeper" instance with peer (Remote router WAN IP) {isakmp=#0/ipsec=#0}
Thanks much.

Automatically create a custom VPN connection and set default wallpaper in a deployment...

Hey guys,
I've been hard at work on creating a custom deployment for our company to allow us to start rolling out Windows 7 at the first of next month. I demonstrated it to the brass today and they were blown away. All they asked for was two changes and I admit I'm stumped. Hopefully someone here can help:
1 - Set Default Wallpaper for *all* users: I've written a script to copy our company wallpaper to "C:\Windows\Web\Wallpaper" during a deployment. Is there any way I can modify that script to set that wallpaper as default for anyone who logs into that computer. Or if there's a non-script way to do this I'm all ears. I just need that wallpaper as default.
2 - Create a VPN Connection for our company intranet: Right now this is being done manually in the Network and Sharing Center. All they are doing is choosing "Set up a new connection or network" >> "Connect to a workplace" >> "Use my Internet Connection (VPN)" and just entering our VPN server IP Address and giving the connection a name. Surely there has to be a way to automate this with a script or something? Can anyone help?
3 - BONUS: This is just gravy, but if anyone can tell me how to "silently" or "automatically" disable the "Highlight newly installed programs" checkbox for all users using a script or something, that would be *wonderful*.
Can anyone help me here?

1. Go here http://blogs.technet.com/deploymentguys/archive/2008/06/06/useful-script-number-5-adjusting-the-default-user-registry-hive.aspx . There is a script that will set your default wallpaper for you.
2. Does your company use a VPN client?
3. This option is set in the Registry. You could create a startup script or add this to your Task Sequence. Create the Dword and set it to 0 to disable highlighting.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Start_NotifyNewApps
Rich
http://deploywindows7.wordpress.com/
Thanks for responding Rich,
1. I actually came across that script when I was poking around the Deployment guys forums, but I noticed that it did a lot more than just set the Wallpaper. I was trying to "keep it simple" plus the registry editing sort of made me nervous. I guess I can give it a go and see if it can be made to work for me.
2. Our company dos not use a VPN client. If you look back at my description of the process in bullet point #2 we are just using the Network and Sharing Center that is built into Windows 7 to create a simple VPN connection. That's why I'm so certain there has to be a way to automate this process. ll we are doing is entering an IP Address and giving the connection a name. Surely I can script that, or is there maybe some way to create the connection on one computer and save it as a file that I can then copy to each machine during my deployment?
3. Thanks for answering my bonus one too. Please forgive my ignorance because I am new to a lot of this. I assume I can create a "file" with the proper registry settings that can be applied during deployment right? I've seen people crate files that do this and use the .reg extension. Do you know how to make one of these or can you link me to a tutorial that steps me through it?
You could always edit the script to leave the other parts out. Thanks for the clarification on the VPN Client, just wanted to make absolutely sure. Let me know how if the process you found works for you.
For the reg key, you would want to create the key I described, add it to your scripts directory, and then add a Client Build Custom Task in StateRestore to set the key in the registry. You can do this by adding a RunLineCommand to the Task Sequence. Then the command would look like this
cmd /c regedit /s %deployroot%\scripts\NameOfRegKey.reghttp://deploywindows7.wordpress.com/

Trying to set a delay in an Applescript for VPN connection

I need to be able to set some routes upon opening a particular VPN connection so I did some searching and found a really simple Applescript that does the job. Problem is it tries to set the routes before the VPN actually connects so the routes don't go in.
I added in a 10 second delay which does the trick, but I'm thinking there has to be a way to do this that waits until the VPN actually connects before continuing - so if it takes 5 seconds or 10 or whatever, it waits.
The other thing I'm doing that I think is bad is I'm sending a route delete command before sending the add command. Why? Because if I don't and for some reason the route is partially in the table, it doesn't give an error and ends up not routing. Again, probably a better way to do this.
Here is my current script"
-- Connect Work VPN
tell application "System Events"
tell current location of network preferences
set VPNservice to service "Work" -- name of the VPN service
if exists VPNservice then connect VPNservice
end tell
end tell
delay 10
set gateway to "x.x.x.x" -- omitted here for security
do shell script "route delete 192.168.25.0/24 " & gateway with administrator privileges
do shell script "route delete 192.168.20.0/24 " & gateway with administrator privileges
do shell script "route add 192.168.25.0/24 " & gateway with administrator privileges
do shell script "route add 192.168.20.0/24 " & gateway with administrator privileges
Any suggestions??
Thanks.

you might want to try asking in the Applescript forum under OS X technologies.
I don't have any VPN connections so can't test anything but applescript dictionary for system events indicates that configuration property of a service has a boolean property "connected". so just run a loop with, say, 1 second delay until this porperty becomes true. presumably it would be something along the lines
<pre style="
font-family: Monaco, 'Courier New', Courier, monospace;
font-size: 10px;
margin: 0px;
padding: 5px;
border: 1px solid #000000;
width: 720px;
color: #000000;
background-color: #ADD8E6;
overflow: auto;"
title="this text can be pasted into the Script Editor">
tell application "System Events"
tell current location of network preferences
set VPNservice to service "Work" -- name of the VPN service
if exists VPNservice then connect VPNservice
repeat until (connected of current configuration of VPNservice)
delay 1
end repeat
end tell
end tell
set gateway to "x.x.x.x" -- omitted here for security
do shell script "route delete 192.168.25.0/24 " & gateway with administrator privileges
do shell script "route delete 192.168.20.0/24 " & gateway with administrator privileges
do shell script "route add 192.168.25.0/24 " & gateway with administrator privileges
do shell script "route add 192.168.20.0/24 " & gateway with administrator privileges</pre>

Can't remove locked VPN Connections installed by HotSpot Shield

How can I remove locked VPN connections under Network? (OS 10.9.5)
HotSpot Shield installed three VPN connections under Network settings. I no longer subscribe to the service and have removed the application, but I'm unable to remove the network connections.
Three VPN connections were created:
"US Server"   utahmaps.us
"GB Server"   jacketmagazine.us
"JP Server"    brainphotos.us
However, all these connections have the padlocked icon beside them, and I don't have the permissions to delete them.
I'm including a screen capture of one of the settings, for reference.
I can set them to inactive, but would like to remove them altogether.
Can anyone offer any assistance?
Thanks

I have been looking for this answer also... I found it yesterday. if you go to profiles in system preferences, you will be able to delete those completely.

Cisco UC560 Not Clearing Static Routes When VPN Connections Drop

We have a Cisco UC560 (UC560-FXO-K9) running "Cisco IOS Software, UC500 Software (UC500-ADVIPSERVICESK9-M),
Version 15.1(2)T2, RELEASE SOFTWARE (fc1)" The issue is when we have end users connecting with the Cisco VPN Client to this device sometimes we are unable to connect to any devices on our LAN or sometimes we can't connect to the LAN on the other end of our site-to-site VPN. The one symptom I've observed when this happens is that old VPN sessions that have disconnected appear to leave static routes from the user's outside IP at their home to an IP on our LAN to a Virtual-Access interface. When this starts to happen, I restart the firewall to clear out the stale static routes and the problem is fixed, for a while at least. Below is the current state where we have the site-to-site VPN connected to our branch office and 2 user's connected with Cisco VPN clients. Below that is the static route table which has 5 total Virtual-Access interface routes (one is an extra route for a user currently connected so that their outside IP is in the static route table with 2 inside IP's associated.) Is there a way to fix the cleanup of VPN connections when they terminate?
#sh crypto isakmp peers
Peer: <branch office outside IP> Port: 500 Local: <firewall's outside IP>
Phase1 id: <branch office outside IP>
Peer: <users's outside IP #1> Port: 50420 Local: <firewall's outside IP>
Phase1 id: EZVPN_GRP_437
Peer: <user's outside IP #2> Port: 49345 Local: <firewall's outside IP>
Phase1 id: EZVPN_GRP_437
Bugsy#sh ip ro st
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
       + - replicated route, % - next hop override
Gateway of last resort is <next hop of ISP for firewall> to network 0.0.0.0
S*    0.0.0.0/0 [1/0] via <next hop of ISP for firewall>
      10.0.0.0/8 is variably subnetted, 12 subnets, 3 masks
S        10.0.0.153/32 [1/0] via <non-connected IP of VPN user>, Virtual-Access2
S        10.0.0.155/32 [1/0] via <non-connected IP of VPN user>, Virtual-Access2
S        10.0.0.156/32 [1/0] via <user's outside IP #2>, Virtual-Access3
S        10.0.0.158/32 [1/0] via <user's outside IP #1>, Virtual-Access3
S        10.0.0.159/32 [1/0] via <user's outside IP #2 again>, Virtual-Access2
S        10.1.10.1/32 is directly connected, Vlan90

Hi Brian,
This sounds like you are running into the following known issue:
CSCtl03682 - EzVPN client: Several RRI routes pointing to same virtual interface
which is Dup'd to:
CSCtf39056 - RRI routes not deleted
This is fixed since 15.1(2)T4, so I would recommend upgrading to SWP 8.2 or higher. The only other way to clean up the stuck routes is to reload the router.
Thanks,
Brandon

Cannot establish a VPN connection in Lion

I have followed the instructions in this support article but cannot create a VPN connection:
http://docs.info.apple.com/article.html?path=Mac/10.6/en/9010.html
I've tried the steps outlined in this article, and successfully completed everything but still cannot create a VPN connection:
http://anders.com/guides/native-cisco-vpn-on-mac-os-x/
I have all the correct credentials for my VPN network (vpn address, group name, shared secret). I always receive a server time out error.
I am able to successfully connect to my work VPN using the Cisco VPNClient. But unfortunately it only runs in 32-bit mode. I prefer to boot in 64-bit mode and would prefer not to reboot everytime I want to establish a VPN connection.
I have been working on this issues for three days straight and am getting nowhere. My work is an unsupported IT environment, and the IT support subscription service we use will not handle any Mac issues.

Hmm, no changes. Still the same issue. I deleted the files described, rebooted and reconfigured the network.
hmm, Finder still remembers his old server connection settings, maybe i should delete those, too. Any idea where finder stores his server connections?
In my perception the message that no secure connection can be established comes up immediately after sending the connect command. I don't think that there is network traffic, there is no noticeable latency...

Vpn connection droppes Windows 8.1 Enterprise

Hi.
I've an issue related VPN connection.
I've setup PPTP connection like this:
Windows 8.1 Ent. ->Wi-Fi -> Dlink DIR-300 -> Ericsson GPON -> FC -> ISP -> Ericsson GPON -> Dlink DSR 500N
After few minutes i connect to the DSR 500N over VPN PPTP, the connection is dropping. Mostly it seems when I'm starting the RDP connection. After this I can normally connect again, but there is another problem, I should delete the ROUTE and Add it again
to have an access in network on another side.
Before this I've the Windows 7 Enterprise on the same computer, and haven't seen any problem like this.
Can you explain me how can I fix it?

Hi!
In this case I would download Fiddler and start it just before you connect to the VPN.
This will show you an exact log of what is happening and why it's happening, the instant it happens.
You can download Fiddler from this site: http://www.telerik.com/fiddler
The log will be clear and it's not as advanced as it might look when you first start it :)
Best regards
Andreas Molin

Cisco vpn connect problem with 3g dongle

Hi,
I am trying to connect cisco vpn but every time i am getting following error while trying to connect from huawei 3g usb dongle in win8. for win7 it works fine with no issue. Also the problem is only form datacard, form lan and wireless interaface i can easily connect to vpn without any issue. Any help/idea/suggestion highly appreciated?
Cisco Systems VPN Client Version 5.0.07.0440
Copyright (C) 1998-2010 Cisco Systems, Inc. All Rights Reserved.
Client Type(s): Windows, WinNT
Running on: 6.2.9200
25     08:06:46.846 12/25/13 Sev=Info/4    CM/0x63100002
Begin connection process
26     08:06:46.848 12/25/13 Sev=Info/4    CM/0x63100004
Establish secure connection
27     08:06:46.848 12/25/13 Sev=Info/4    CM/0x63100024
Attempt connection with server "116.68.208.113"
28     08:06:46.849 12/25/13 Sev=Info/6    IKE/0x6300003B
Attempting to establish a connection with 116.68.208.113.
29     08:06:46.855 12/25/13 Sev=Info/4    IKE/0x63000001
Starting IKE Phase 1 Negotiation
30     08:06:46.858 12/25/13 Sev=Info/4    IKE/0x63000013
SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Frag), VID(Nat-T), VID(Unity)) to 116.68.208.113
31     08:06:47.145 12/25/13 Sev=Info/4    IPSEC/0x63700008
IPSec driver successfully started
32     08:06:47.145 12/25/13 Sev=Info/4    IPSEC/0x63700014
Deleted all keys
33     08:06:52.144 12/25/13 Sev=Info/4    IKE/0x63000021
Retransmitting last packet!
34     08:06:52.144 12/25/13 Sev=Info/4    IKE/0x63000013
SENDING >>> ISAKMP OAK AG (Retransmission) to 116.68.208.113
35     08:06:57.144 12/25/13 Sev=Info/4    IKE/0x63000021
Retransmitting last packet!
36     08:06:57.144 12/25/13 Sev=Info/4    IKE/0x63000013
SENDING >>> ISAKMP OAK AG (Retransmission) to 116.68.208.113
37     08:07:02.145 12/25/13 Sev=Info/4    IKE/0x63000021
Retransmitting last packet!
38     08:07:02.145 12/25/13 Sev=Info/4    IKE/0x63000013
SENDING >>> ISAKMP OAK AG (Retransmission) to 116.68.208.113
39     08:07:07.145 12/25/13 Sev=Info/4    IKE/0x63000017
Marking IKE SA for deletion (I_Cookie=97205EA6A12866F0 R_Cookie=0000000000000000) reason = DEL_REASON_PEER_NOT_RESPONDING
40     08:07:07.645 12/25/13 Sev=Info/4    IKE/0x6300004B
Discarding IKE SA negotiation (I_Cookie=97205EA6A12866F0 R_Cookie=0000000000000000) reason = DEL_REASON_PEER_NOT_RESPONDING
41     08:07:07.645 12/25/13 Sev=Info/4    CM/0x63100014
Unable to establish Phase 1 SA with server "116.68.208.113" because of "DEL_REASON_PEER_NOT_RESPONDING"
42     08:07:07.645 12/25/13 Sev=Info/5    CM/0x63100025
Initializing CVPNDrv
43     08:07:07.645 12/25/13 Sev=Info/6    CM/0x63100046
Set tunnel established flag in registry to 0.
44     08:07:07.645 12/25/13 Sev=Info/4    IKE/0x63000001
IKE received signal to terminate VPN connection
45     08:07:08.146 12/25/13 Sev=Info/4    IPSEC/0x63700014
Deleted all keys
46     08:07:08.146 12/25/13 Sev=Info/4    IPSEC/0x63700014
Deleted all keys
47     08:07:08.146 12/25/13 Sev=Info/4    IPSEC/0x63700014
Deleted all keys
48     08:07:08.146 12/25/13 Sev=Info/4    IPSEC/0x6370000A
IPSec driver successfully stopped
49     08:19:59.202 12/25/13 Sev=Info/4    CM/0x63100002
Begin connection process
50     08:19:59.202 12/25/13 Sev=Info/4    CM/0x63100004
Establish secure connection
51     08:19:59.202 12/25/13 Sev=Info/4    CM/0x63100024
Attempt connection with server "116.68.208.113"
52     08:19:59.202 12/25/13 Sev=Info/6    IKE/0x6300003B
Attempting to establish a connection with 116.68.208.113.
53     08:19:59.202 12/25/13 Sev=Info/4    IKE/0x63000001
Starting IKE Phase 1 Negotiation
54     08:19:59.218 12/25/13 Sev=Info/4    IKE/0x63000013
SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Frag), VID(Nat-T), VID(Unity)) to 116.68.208.113
55     08:19:59.656 12/25/13 Sev=Info/4    IPSEC/0x63700008
IPSec driver successfully started
56     08:19:59.656 12/25/13 Sev=Info/4    IPSEC/0x63700014
Deleted all keys
57     08:20:04.656 12/25/13 Sev=Info/4    IKE/0x63000021
Retransmitting last packet!
58     08:20:04.656 12/25/13 Sev=Info/4    IKE/0x63000013
SENDING >>> ISAKMP OAK AG (Retransmission) to 116.68.208.113
59     08:20:09.656 12/25/13 Sev=Info/4    IKE/0x63000021
Retransmitting last packet!
60     08:20:09.656 12/25/13 Sev=Info/4    IKE/0x63000013
SENDING >>> ISAKMP OAK AG (Retransmission) to 116.68.208.113
61     08:20:14.656 12/25/13 Sev=Info/4    IKE/0x63000021
Retransmitting last packet!
62     08:20:14.656 12/25/13 Sev=Info/4    IKE/0x63000013
SENDING >>> ISAKMP OAK AG (Retransmission) to 116.68.208.113
63     08:20:19.656 12/25/13 Sev=Info/4    IKE/0x63000017
Marking IKE SA for deletion (I_Cookie=46B8917FD54C64AC R_Cookie=0000000000000000) reason = DEL_REASON_PEER_NOT_RESPONDING
64     08:20:20.156 12/25/13 Sev=Info/4    IKE/0x6300004B
Discarding IKE SA negotiation (I_Cookie=46B8917FD54C64AC R_Cookie=0000000000000000) reason = DEL_REASON_PEER_NOT_RESPONDING
65     08:20:20.156 12/25/13 Sev=Info/4    CM/0x63100014
Unable to establish Phase 1 SA with server "116.68.208.113" because of "DEL_REASON_PEER_NOT_RESPONDING"
66     08:20:20.156 12/25/13 Sev=Info/5    CM/0x63100025
Initializing CVPNDrv
67     08:20:20.156 12/25/13 Sev=Info/6    CM/0x63100046
Set tunnel established flag in registry to 0.
68     08:20:20.156 12/25/13 Sev=Info/4    IKE/0x63000001
IKE received signal to terminate VPN connection
69     08:20:20.156 12/25/13 Sev=Info/4    IPSEC/0x63700014
Deleted all keys
70     08:20:20.156 12/25/13 Sev=Info/4    IPSEC/0x63700014
Deleted all keys
71     08:20:20.156 12/25/13 Sev=Info/4    IPSEC/0x63700014
Deleted all keys
72     08:20:20.156 12/25/13 Sev=Info/4    IPSEC/0x6370000A
IPSec driver successfully stopped

Hi Karsten,
Thank you for the reply !!! & best wishes for the new year 2014.
The problem is like this, if i select datacard connection type to NDIS it works but it doesnt work when i select RAS(modem) connection type for 3G datacard it doesnt. (NDIS and RAS(Modem) connection types are the 2 modes currently supporetd by the datacard.). Is there any case the users are experiencing from the similar problem? and what they have done to solve the issues? And thank you for the workaroung, i have checked the shrew-soft with win7 and it was working fine but not on win8, i will check shrew-soft on win8 very soon. Also we can move to the anyconnect solution but just want to know if this can solve our problem or not? whether there will be any issues with anyconnect solution for win 8 or not? can you please confim.
Thank you

Internet stops with PPTP VPN connections to ASUS RT-N66U VPN Router

I have a client with a small office network that has a few people working remotely from Windows 7 and 8 PCs. As an inexpensive solution the client opted to use a VPN router (ASUS RT-N66U) that supports PPTP so remote users could access the shared
files and SQL DB server.
The VPN connectivity for one client was working fine and then stopped working altogether so when the VPN connection is established all Internet and VPN access is stopped. This was especially troubling for me since I work remotely and cannot test or debug after
the VPN session has been connected. I checked the error logs and found nothing. Also there had been no new programs installed. And finally, I ran a full system antivirus scan with no issues found.
In case you are facing a similar issue, before trying something remotely that may not work, use the shutdown with reboot command in a COMMAND window and set a timer for something like 3 minutes to reboot in case you get stuck. (e.g. shutdown -r -t 180).
Problem: The two symptoms of the VPN connection failure are:
1) All Internet browsing stops working locally
2) No data can pass through the VPN tunnel
I created a virtual machine on my local network and replicated the client's environment. I experimented with nearly every setting in the VPN dialogue until and came to the final solution.
Solution: For the VPN adapter on the remote machines I configured DNS settings and used the remote as the default gateway.
* VPN adapter Networking IPV4 Properties for:
- DNS server 1: Main Office VPN Router IP Address
- DNS server 2: A public DNS server (Google is 8.8.8.8)
- I also checked the box to "register this connection addresses in DNS"
Note: Perhaps the local router would also have worked and DNS2 but I didn't test it.
I have documented this because after reading and searching among many Technical articles and the Microsoft support website, I was unable to find the solution that I came up with so I hope to help someone else.
Question1: - Can anyone tell me why the connectivity only works when 'use default gateway on remote network' is checked?
- I have disabled this option with some business class VPN routers and the connectivity still worked to the remote network but it does not work to the Asus router.
Question2: From the information provided can I determine where the problem lies?
Is it the:
1) Remote client PC
2) Remote client router
3) Home office VPN router (Asus RT-N66U)
If the true culprit cannot be determined yet, what steps do you recommend so I can isolate the true cause of the failure.
I appreciate any help so that I can be sure my solution is valid and pass along the findings to ASUS if it is their issue.

Thank you for the suggestion. I have successfully connected through the VPN router when the one client was unable to get VPN throughput working.
I looked at the routing tables with and without the VPN connection established. The differences are that:
1) when VPN is NOT active, there is a route from the local NIC IP to the Internet IP address of the local gateway
destination 68.109.82.xx
mask 255.255.255.0
gateway 192.168.0.1
interface 192.168.0.11
metric 21
2) when VPN IS active, the route to the Internet IP address of the local gateway is deleted and a persistent route to the VPN router local network has been added
Persistent route:
destination 192.168.21.0
mask 255.255.255.0
gateway 192.168.0.1
interface 192.168.0.11
metric 1

EJB transaction hanging over VPN connection

EJB transaction hanging over VPN connection
I am trying to diagnose a problem that only occurs when I am doing testing from home and connected via VPN to work.
We are using WL 10.3. Our clusters are setup to communicate via multicast. We have a stateless session bean that uses many different resources (Sybase DB, other EJBs, Sonic JMS). I have a local EJB on my home network that I am testing and it connects with other EJBs and resources on my corporate network. While I don't think it is related to the problem, there is a cluster of the same EJB I am trying to test deployed to my corporate environment. i.e. I am testing ResetService EJB and there is a deployed domain cluster of several ResetService EJBs in the environment I am connecting to. My local server and admin domain are named differently than the one deployed and my local ejb shouldn't try to connect to the cluster in the environment.
When I make a call into my local ejb everything seems to work as expected until it gets to the commit part of the transaction (after my ejb returns). At this point the executing thread hangs at the following location
"[STUCK] ExecuteThread: '16' for queue: 'weblogic.kernel.Default (self-tuning)'" daemon prio=2 tid=0x2e8cb400 nid=0x22fc in Object.wait() [0x3031f000]
   java.lang.Thread.State: TIMED_WAITING (on object monitor)
        at java.lang.Object.wait(Native Method)
        - waiting on <0x091a4b18> (a weblogic.transaction.internal.ServerTransactionImpl)
        at weblogic.transaction.internal.ServerTransactionImpl.globalPrePrepare(ServerTransactionImpl.java:2130)
        - locked <0x091a4b18> (a weblogic.transaction.internal.ServerTransactionImpl)
        at weblogic.transaction.internal.ServerTransactionImpl.internalCommit(ServerTransactionImpl.java:266)
        at weblogic.transaction.internal.ServerTransactionImpl.commit(ServerTransactionImpl.java:233)
        at weblogic.ejb.container.internal.BaseRemoteObject.postInvoke1(BaseRemoteObject.java:621)
        at weblogic.ejb.container.internal.StatelessRemoteObject.postInvoke1(StatelessRemoteObject.java:60)
        at weblogic.ejb.container.internal.BaseRemoteObject.postInvokeTxRetry(BaseRemoteObject.java:441)
        at advantage.tradesupport.rates.resets.ejb.ResetTradeServiceBean_shnf9c_EOImpl.resetTradeByRate(ResetTradeServiceBean_shnf9c_EOImpl.java:1921)
        at advantage.tradesupport.rates.resets.ejb.ResetTradeServiceBean_shnf9c_EOImpl_WLSkel.invoke(Unknown Source)
        at weblogic.rmi.internal.BasicServerRef.invoke(BasicServerRef.java:589)
        at weblogic.rmi.cluster.ClusterableServerRef.invoke(ClusterableServerRef.java:230)
        at weblogic.rmi.internal.BasicServerRef$1.run(BasicServerRef.java:477)
        at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:363)
        at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:147)
        at weblogic.rmi.internal.BasicServerRef.handleRequest(BasicServerRef.java:473)
        at weblogic.rmi.internal.wls.WLSExecuteRequest.run(WLSExecuteRequest.java:118)
        at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
        at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)This thread is obviously waiting for a notification from some other thread but it is unclear what exactly it is waiting for. This only seems to happen when I am connected via VPN because when I try this same setup connected directly to my corporate network at work it works fine.
I connected w/ debugger and tried to dig. Some interesting observations I see are.
1) The ServerTransactionImpl object that is hanging has a 'preferredHost' of a different machine on my corporate network. It is an EJB that my service got some information from but it wasn't involved in any create, update, or delete aspects of the tran so in theory it shouldn't be part of it. Does anyone know what exactly this peferredHost attribute is signifying? I also see this same remote ejb server reference defined in a ServerCoordinatorDescriptor variable.
2) I also sometimes see other XA resources (JMS) with this ServerTransactionImpl that point to references of resources that live on other machines on my corporate network (not my local ejb). This doesn't always seem to be the case though.
VPN will definetly block multicast packets from the corporate env back to my machine. I don't think it works from my machine to the corporate env machines either.
I also have two IPs when connected over VPN. One for my local home network and one given to me by my VPN client. I have setup my local WL server to listen on the VPN client provided IP which the corporate machines should be able to resolve and send TCP message over.
This definetly seems to be transaction related because when I remove the tran support from my ejb things work as expected. The problem is I need to test within the transaction just like it runs in a deployed environment so this isn't really a fix.
My theory: My local test WL EJB is waiting for a communication from some other server before it can commit the tran. This communication is blocked due to my VPN connection. I just don't know what exactly it is trying to communicate and how to resolve if that is in fact the problem. I thought about looking into unicast rather than multicast for cluster communication but in my mind that doesn't come into play here because I am not deploying a local cluster for my EJB and I thought multicast was just used for inter-cluster communication.
I also saw some docs talking about resources need to be uniquely named when inter-domain communication is performed (http://docs.oracle.com/cd/E13222_01/wls/docs81/ConsoleHelp/jta.html#1120356).
Anyone have any thoughts on what might be going on?
Here is some log output from my local WL instance:
Servers in this output--
My test Server - AdminServer+10.125.105.14:7001+LJDomain+t3
Server in env I read data from during ejb method call - TradeAccessTS_lkcma00061-1+171.149.24.240:17501+TradeSupportApplication2+t3
Server in env I read data from during ejb method call - MesaService_lkcma00065-1+171.149.24.244:17501+MESAApplication1+t3
Server in env I read data from during ejb method call - DataAccess_lkcma00055-0+171.149.24.234:17500+AdvantageApplication1+t3
Server in env I read data from during ejb method call - DataAccess_lkcma00053-6+171.149.24.232:17506+AdvantageApplication1+t3
####<Mar 20, 2012 4:23:26 PM CDT> <Debug> <JTA2PC> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <BEA1-0005C168CCCC337F43A8> <> <1332278606895> <BEA-000000> <BEA1-0005C168CCCC337F43A8: [EJB advantage.tradesupport.rates.resets.ejb.ResetTradeServiceBean.resetTradeByRate(java.lang.Long,java.util.Set,java.lang.String,java.lang.String,boolean,advantage.common.service.context.ServiceContext)]: ServerTransactionImpl.commit()>
####<Mar 20, 2012 4:23:26 PM CDT> <Debug> <JTA2PC> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <BEA1-0005C168CCCC337F43A8> <> <1332278606895> <BEA-000000> <BEA1-0005C168CCCC337F43A8: [EJB advantage.tradesupport.rates.resets.ejb.ResetTradeServiceBean.resetTradeByRate(java.lang.Long,java.util.Set,java.lang.String,java.lang.String,boolean,advantage.common.service.context.ServiceContext)]: TX[BEA1-0005C168CCCC337F43A8] active-->pre_preparing>
####<Mar 20, 2012 4:23:26 PM CDT> <Debug> <JTA2PC> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <BEA1-0005C168CCCC337F43A8> <> <1332278606896> <BEA-000000> <SC[LJDomain+AdminServer] active-->pre-preparing>
####<Mar 20, 2012 4:23:26 PM CDT> <Debug> <JTA2PC> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <BEA1-0005C168CCCC337F43A8> <> <1332278606896> <BEA-000000> <BEA1-0005C168CCCC337F43A8: [EJB advantage.tradesupport.rates.resets.ejb.ResetTradeServiceBean.resetTradeByRate(java.lang.Long,java.util.Set,java.lang.String,java.lang.String,boolean,advantage.common.service.context.ServiceContext)]: before completion iteration #0>
####<Mar 20, 2012 4:23:26 PM CDT> <Debug> <JTA2PC> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <BEA1-0005C168CCCC337F43A8> <> <1332278606896> <BEA-000000> <BEA1-0005C168CCCC337F43A8: [EJB advantage.tradesupport.rates.resets.ejb.ResetTradeServiceBean.resetTradeByRate(java.lang.Long,java.util.Set,java.lang.String,java.lang.String,boolean,advantage.common.service.context.ServiceContext)]: Synchronization[weblogic.ejb.container.internal.TxManager$TxListener@11b0cf9].beforeCompletion()>
####<Mar 20, 2012 4:23:26 PM CDT> <Debug> <JTA2PC> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <BEA1-0005C168CCCC337F43A8> <> <1332278606897> <BEA-000000> <BEA1-0005C168CCCC337F43A8: [EJB advantage.tradesupport.rates.resets.ejb.ResetTradeServiceBean.resetTradeByRate(java.lang.Long,java.util.Set,java.lang.String,java.lang.String,boolean,advantage.common.service.context.ServiceContext)]: Synchronization[weblogic.ejb.container.internal.TxManager$TxListener@11b0cf9].beforeCompletion() END>
####<Mar 20, 2012 4:23:26 PM CDT> <Debug> <JTA2PC> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <BEA1-0005C168CCCC337F43A8> <> <1332278606898> <BEA-000000> <SC[LJDomain+AdminServer] pre-preparing-->pre-prepared>
####<Mar 20, 2012 4:23:26 PM CDT> <Debug> <JTA2PC> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <BEA1-0005C168CCCC337F43A8> <> <1332278606898> <BEA-000000> <SC[TradeSupportApplication2+TradeAccessTS_lkcma00061-1] active-->pre-preparing>
####<Mar 20, 2012 4:23:26 PM CDT> <Debug> <JTA2PC> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <BEA1-0005C168CCCC337F43A8> <> <1332278606898> <BEA-000000> <BEA1-0005C168CCCC337F43A8: [EJB advantage.tradesupport.rates.resets.ejb.ResetTradeServiceBean.resetTradeByRate(java.lang.Long,java.util.Set,java.lang.String,java.lang.String,boolean,advantage.common.service.context.ServiceContext)]: delist weblogic.jdbc.wrapper.JTSXAResourceImpl, TMSUSPEND, beforeState=new, startThread=null>
####<Mar 20, 2012 4:23:26 PM CDT> <Debug> <JTA2PC> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <BEA1-0005C168CCCC337F43A8> <> <1332278606898> <BEA-000000> <BEA1-0005C168CCCC337F43A8: [EJB advantage.tradesupport.rates.resets.ejb.ResetTradeServiceBean.resetTradeByRate(java.lang.Long,java.util.Set,java.lang.String,java.lang.String,boolean,advantage.common.service.context.ServiceContext)]: delist weblogic.jdbc.wrapper.JTSXAResourceImpl, afterStatenew>
####<Mar 20, 2012 4:23:26 PM CDT> <Debug> <JTA2PC> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <BEA1-0005C168CCCC337F43A8> <> <1332278606899> <BEA-000000> <BEA1-0005C168CCCC337F43A8: [EJB advantage.tradesupport.rates.resets.ejb.ResetTradeServiceBean.resetTradeByRate(java.lang.Long,java.util.Set,java.lang.String,java.lang.String,boolean,advantage.common.service.context.ServiceContext)]: sc(TradeAccessTS_lkcma00061-1+171.149.24.240:17501+TradeSupportApplication2+t3+).startPrePrepareAndChain>
####<Mar 20, 2012 4:23:26 PM CDT> <Debug> <JTA2PC> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <BEA1-0005C168CCCC337F43A8> <> <1332278606900> <BEA-000000> <SC[TradeSupportApplication2+TradeAccessTS_lkcma00061-1] pre-preparing-->pre-preparing>
####<Mar 20, 2012 4:23:26 PM CDT> <Debug> <JTA2PC> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <BEA1-0005C168CCCC337F43A8> <> <1332278606902> <BEA-000000> <BEA1-0005C168CCCC337F43A8: [EJB advantage.tradesupport.rates.resets.ejb.ResetTradeServiceBean.resetTradeByRate(java.lang.Long,java.util.Set,java.lang.String,java.lang.String,boolean,advantage.common.service.context.ServiceContext)]: delist weblogic.jdbc.wrapper.JTSXAResourceImpl, TMSUSPEND, beforeState=new, startThread=null>
####<Mar 20, 2012 4:23:26 PM CDT> <Debug> <JTA2PC> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <BEA1-0005C168CCCC337F43A8> <> <1332278606903> <BEA-000000> <BEA1-0005C168CCCC337F43A8: [EJB advantage.tradesupport.rates.resets.ejb.ResetTradeServiceBean.resetTradeByRate(java.lang.Long,java.util.Set,java.lang.String,java.lang.String,boolean,advantage.common.service.context.ServiceContext)]: delist weblogic.jdbc.wrapper.JTSXAResourceImpl, afterStatenew>
####<Mar 20, 2012 4:23:26 PM CDT> <Debug> <JTANaming> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <BEA1-0005C168CCCC337F43A8> <> <1332278606903> <BEA-000000> <SecureAction.runAction Use Subject= <anonymous>for action:sc.startPrePrepareAndChain to t3://171.149.24.240:17501>
####<Mar 20, 2012 4:23:26 PM CDT> <Debug> <JTAPropagate> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <> <1332278606903> <BEA-000000> <PropagationContext: Peer=null, Version=4>
####<Mar 20, 2012 4:23:26 PM CDT> <Debug> <JTAPropagate> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <> <1332278606904> <BEA-000000> < +++ otherPeerInfo.getMajor() :: 10>
####<Mar 20, 2012 4:23:26 PM CDT> <Debug> <JTAPropagate> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <> <1332278606904> <BEA-000000> < +++ otherPeerInfo.getMinor() :: 3>
####<Mar 20, 2012 4:23:26 PM CDT> <Debug> <JTAPropagate> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <> <1332278606904> <BEA-000000> < +++ otherPeerInfo.getServicePack() :: 1>
####<Mar 20, 2012 4:23:26 PM CDT> <Debug> <JTAPropagate> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <> <1332278606905> <BEA-000000> < +++ otherPeerInfo.getRollingPatch() :: 0>
####<Mar 20, 2012 4:23:26 PM CDT> <Debug> <JTAPropagate> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <> <1332278606905> <BEA-000000> < +++ otherPeerInfo.hasTemporaryPatch() :: false>
####<Mar 20, 2012 4:23:26 PM CDT> <Debug> <JTA2PC> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <BEA1-0005C168CCCC337F43A8> <> <1332278606905> <BEA-000000> <BEA1-0005C168CCCC337F43A8: [EJB advantage.tradesupport.rates.resets.ejb.ResetTradeServiceBean.resetTradeByRate(java.lang.Long,java.util.Set,java.lang.String,java.lang.String,boolean,advantage.common.service.context.ServiceContext)]: waitForPrePrepareAcks AdminServer+10.125.105.14:7001+LJDomain+t3+=>pre-prepared TradeAccessTS_lkcma00061-1+171.149.24.240:17501+TradeSupportApplication2+t3+=>pre-preparing MesaService_lkcma00065-1+171.149.24.244:17501+MESAApplication1+t3+=>active DataAccess_lkcma00055-0+171.149.24.234:17500+AdvantageApplication1+t3+=>active DataAccess_lkcma00053-6+171.149.24.232:17506+AdvantageApplication1+t3+=>active>
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
Then eventually I get timeout errors like below in log
####<Mar 20, 2012 4:26:29 PM CDT> <Debug> <JTAPropagate> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <> <1332278789379> <BEA-000000> < +++ otherPeerInfo.getMajor() :: 10>
####<Mar 20, 2012 4:26:29 PM CDT> <Debug> <JTAPropagate> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <> <1332278789380> <BEA-000000> < +++ otherPeerInfo.getMinor() :: 3>
####<Mar 20, 2012 4:26:29 PM CDT> <Debug> <JTAPropagate> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <> <1332278789380> <BEA-000000> < +++ otherPeerInfo.getServicePack() :: 1>
####<Mar 20, 2012 4:26:29 PM CDT> <Debug> <JTAPropagate> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <> <1332278789381> <BEA-000000> < +++ otherPeerInfo.getRollingPatch() :: 0>
####<Mar 20, 2012 4:26:29 PM CDT> <Debug> <JTAPropagate> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <> <1332278789382> <BEA-000000> < +++ otherPeerInfo.hasTemporaryPatch() :: false>
####<Mar 20, 2012 4:26:29 PM CDT> <Debug> <JTAPropagate> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <> <1332278789382> <BEA-000000> < +++ Using new Method for reading rollback reason....>
####<Mar 20, 2012 4:26:29 PM CDT> <Debug> <JTANaming> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <> <1332278789383> <BEA-000000> <RMI call coming from = TradeSupportApplication2>
####<Mar 20, 2012 4:26:29 PM CDT> <Debug> <JTANaming> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <> <1332278789384> <BEA-000000> <SecureAction.stranger Subject used on received call: <anonymous> for action: startRollback AUTHENTICATION UNDETERMINABLE use SecurityInteropMode>
####<Mar 20, 2012 4:26:29 PM CDT> <Debug> <JTAPropagate> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <> <1332278789385> <BEA-000000> <PropagationContext.getTransaction: tx=null>
####<Mar 20, 2012 4:26:29 PM CDT> <Debug> <JTAPropagate> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <> <1332278789385> <BEA-000000> <PropagationContext.getTransaction: xid=BEA1-0005C168CCCC337F43A8, isCoordinator=true, infectCoordinatorFirstTime=false, txProps={weblogic.transaction.name=[EJB advantage.tradesupport.rates.resets.ejb.ResetTradeServiceBean.resetTradeByRate(java.lang.Long,java.util.Set,java.lang.String,java.lang.String,boolean,advantage.common.service.context.ServiceContext)], weblogic.jdbc=t3://171.149.24.240:17501}>
####<Mar 20, 2012 4:26:29 PM CDT> <Debug> <JTAPropagate> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <> <1332278789391> <BEA-000000> < +++ looking up class : weblogic.transaction.internal.TimedOutException :: in classloader : java.net.URLClassLoader@15e92d7>
####<Mar 20, 2012 4:26:29 PM CDT> <Debug> <JTAPropagate> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <> <1332278789397> <BEA-000000> < +++ looking up class : weblogic.transaction.TimedOutException :: in classloader : java.net.URLClassLoader@15e92d7>
####<Mar 20, 2012 4:26:29 PM CDT> <Debug> <JTAPropagate> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <> <1332278789398> <BEA-000000> < +++ looking up class : java.lang.Exception :: in classloader : java.net.URLClassLoader@15e92d7>
####<Mar 20, 2012 4:26:29 PM CDT> <Debug> <JTAPropagate> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <> <1332278789398> <BEA-000000> < +++ looking up class : java.lang.Throwable :: in classloader : java.net.URLClassLoader@15e92d7>
####<Mar 20, 2012 4:26:29 PM CDT> <Debug> <JTAPropagate> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <> <1332278789402> <BEA-000000> < +++ looking up class : [Ljava.lang.StackTraceElement; :: in classloader : java.net.URLClassLoader@15e92d7>
####<Mar 20, 2012 4:26:29 PM CDT> <Debug> <JTAPropagate> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <> <1332278789403> <BEA-000000> < +++ looking up class : java.lang.StackTraceElement :: in classloader : java.net.URLClassLoader@15e92d7>
####<Mar 20, 2012 4:26:29 PM CDT> <Debug> <JTAPropagate> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <> <1332278789404> <BEA-000000> < +++ converted bytes to rollback reason : weblogic.transaction.internal.TimedOutException: Timed out tx=BEA1-0005C168CCCC337F43A8 after 30000 seconds>
####<Mar 20, 2012 4:26:29 PM CDT> <Debug> <JTA2PC> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <> <1332278789404> <BEA-000000> <Name=[EJB advantage.tradesupport.rates.resets.ejb.ResetTradeServiceBean.resetTradeByRate(java.lang.Long,java.util.Set,java.lang.String,java.lang.String,boolean,advantage.common.service.context.ServiceContext)],Xid=BEA1-0005C168CCCC337F43A8(21880283),Status=Marked rollback. [Reason=weblogic.transaction.internal.TimedOutException: Timed out tx=BEA1-0005C168CCCC337F43A8 after 30000 seconds],numRepliesOwedMe=0,numRepliesOwedOthers=0,seconds since begin=502,seconds left=29497,activeThread=Thread[[ACTIVE] ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)',5,Pooled Threads],XAServerResourceInfo[weblogic.jdbc.wrapper.JTSXAResourceImpl]=(ServerResourceInfo[weblogic.jdbc.wrapper.JTSXAResourceImpl]=(state=new,assigned=none),xar=null,re-Registered = false),SCInfo[LJDomain+AdminServer]=(state=pre-prepared),SCInfo[TradeSupportApplication2+TradeAccessTS_lkcma00061-1]=(state=pre-preparing),SCInfo[MESAApplication1+MesaService_lkcma00065-1]=(state=active),SCInfo[AdvantageApplication1+DataAccess_lkcma00055-0]=(state=active),SCInfo[AdvantageApplication1+DataAccess_lkcma00053-6]=(state=active),properties=({weblogic.transaction.name=[EJB advantage.tradesupport.rates.resets.ejb.ResetTradeServiceBean.resetTradeByRate(java.lang.Long,java.util.Set,java.lang.String,java.lang.String,boolean,advantage.common.service.context.ServiceContext)], weblogic.jdbc=t3://171.149.24.240:17501}),OwnerTransactionManager=ServerTM[ServerCoordinatorDescriptor=(CoordinatorURL=AdminServer+10.125.105.14:7001+LJDomain+t3+, XAResources={LJDomain.AdminServer.JMSXASessionPool.advantage.jms.queue.sonicConnectionFactory, LJDomain.AdminServer.JMSXASessionPool.advantage.jms.topic.sonicConnectionFactory, WLStore_LJDomain__WLS_AdminServer, WSATGatewayRM_AdminServer_LJDomain},NonXAResources={})],CoordinatorURL=AdminServer+10.125.105.14:7001+LJDomain+t3+) wakeUpAfterSeconds(60)>
####<Mar 20, 2012 4:26:29 PM CDT> <Debug> <JTA2PC> <F68B599F56D71> <AdminServer> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <> <1332278789406> <BEA-000000> <BEA1-0005C168CCCC337F43A8: [EJB advantage.tradesupport.rates.resets.ejb.ResetTradeServiceBean.resetTradeByRate(java.lang.Long,java.util.Set,java.lang.String,java.lang.String,boolean,advantage.common.service.context.ServiceContext)]: setProperty: weblogic.transaction.name=[EJB advantage.tradesupport.rates.resets.ejb.ResetTradeServiceBean.resetTradeByRate(java.lang.Long,java.util.Set,java.lang.String,java.lang.String,boolean,advantage.common.service.context.ServiceContext)]>

Hello asirigaya,
MSDTC configure does not belong to this forum, this forum topic is "Discuss client application development using Windows Forms controls and features."
I didn't see MSDN has this kind of forum so I will help you move this case to "Where is the forum for"
Regards,
Barry Wang
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Can't find PPTP option for making a new VPN connection

I'm trying to set up a new VPN connection. It needs to be a PPTP connection.
I opened System Preferences --> Network, and clicked on the "+" sign to set up a new VPN connection. I can't find an option to make it a PPTP connection. I think the default is the other kind (don't know the name, but it starts with "L").
How do I specify that a new VPN connection will be PPTP?
I tried looking for the "Internet Connect" application, but couldn't find it. Did that application disappear in OS 10.5?

That solved my question - thanks Bob.
When I created the VPN account, I didn't notice the L2TP option that was selected by default, and It looks like you can't change that setting after an account is created. I deleted the account I had created incorrectly and created a new one - and it worked perfectly the first time.
Thanks.

VPN connection with Lion doesn't work

Hello,
I am using the System Preferences to connect to the VPN network of my university. It's a Cisco IPSec. But since the update to OS X Lion it doesn't work anymore. I did not change the preferences of the VPN so they are correct. I also deleted the VPN connection and re-enetered the VPN settings but it stil doesn't work. Yesterday I asked the people from the computation centre but they have also no clue.
Does anyone has a clue what to do?
Best regards
Frank

Is your disk partitioned into more than just one mac partition and the bootcamp partition by any chance?
A second Mac partition?
This sympton is often caused by the Windows partition moving to be to be the 4th or higher partition, which it doesn't like for booting. Lion installs an extra partition - the recovery partition at the beginning of the drive and shuffles everything down one effectively, so if your bootcamp partition was the 3rd it becomes the 4th and Windows becomes unhappy about booting

RV320 VPN Connection - ignoring Delete SA payload: PROTO_IPSEC_ESP SA

Similar Messages

Maybe you are looking for