3005 VPN Client Time-Outs

My Cisco 3005 VPN Concentrator keeps timeing out for some connections. When I look through the logs the only thing I see is:
626 07/03/2002 00:06:30.890 SEV=5 IP/50 RPT=192
Headend received TCP ACK pkt from client 68.38.72.43, TCP source port 1195
627 07/03/2002 00:11:31.260 SEV=5 IP/50 RPT=193
Headend received TCP ACK pkt from client 68.38.72.43, TCP source port 1195
628 07/03/2002 00:16:31.720 SEV=5 IP/50 RPT=194
Headend received TCP ACK pkt from client 68.38.72.43, TCP source port 1195
629 07/03/2002 00:21:32.030 SEV=5 IP/50 RPT=195
Headend received TCP ACK pkt from client 68.38.72.43, TCP source port 1195
630 07/03/2002 00:26:32.420 SEV=5 IP/50 RPT=196
Headend received TCP ACK pkt from client 68.38.72.43, TCP source port 1195
631 07/03/2002 00:31:32.810 SEV=5 IP/50 RPT=197
Headend received TCP ACK pkt from client 68.38.72.43, TCP source port 1195
632 07/03/2002 00:36:33.200 SEV=5 IP/50 RPT=198
Headend received TCP ACK pkt from client 68.38.72.43, TCP source port 1195
633 07/03/2002 00:41:33.610 SEV=5 IP/50 RPT=199
Headend received TCP ACK pkt from client 68.38.72.43, TCP source port 1195
634 07/03/2002 00:46:33.970 SEV=5 IP/50 RPT=200
Headend received TCP ACK pkt from client 68.38.72.43, TCP source port 1195
Any Ideas???? I have hardcoded the speed and duplex on the WAN interface
Thanks

Hi,
I think we need to turn on some additional logs to figure out the issue here, Some of the things to check on:
Does it happen with all ISP connections using the same client machine?
Is the timing consistent with the disconnects?
Did you try with both Split tunneling enabled and disabled?
Hope this helps,
Regards,
Aamir Waheed,
Cisco Systems, Inc.
-=-=-

Similar Messages

P & L Report using Report Painter does not run in PRD client ( time out)

Hi SAP Gurus
We created a P & L Statement on the basis of GLPCT table. We incorporated Accounts groups from a financial statemen version using KE5B in profit center accounting.
Report contains Account groups as well as profit centre group.
It takes around 5- 10 minutes to run in DEV client but in PRD it takes a lot of time and times out after a while.
Any suggestions....??
Regards
Satish

Hi Satish,
Use all the Index fields(Profit-center-based index) which are active for the table GLPCT in the Selection screen of the report and use maximum selection criteria.The processing time will improve to some extent.
~Andrew
Good you got the solution from the Basis Team, probably they might have increased the processing time limit of the report.But to increase the efficiency of the program the above will work.
Edited by: Andrew J on Jan 24, 2011 4:53 PM
One more tip for tuning the performance

Clients Time-Out When Retrieving Large Files From Our PureFTPd Server

Hi, not sure if this is the right place to get help, but didn't know where else to look. And let me begin by saying I'm not a server admin by trade, but that is the role I've fell into at a design firm. So please bear with my lack of knowledge on some of the more technical details.
We have OS X Server 10.4.11 running here with PureFTPd installed and managed through PureFTPd Manager application. It has been fairly reliable for us for the last 2-3 years once the initial setup craziness was complete.
But lately we've had 2 clients say that they've had difficulty downloading larger files from us. They get a time-out or error message on their end. They are most likely using Windows Explorer on a PC to do the transfer, which has always been the easiest method for our clients.
One client had no problem getting files up to 14MB or so. But when trying to download a certain file that was about 80MB, it would not work. I tried different things here, and she tried multiple times, but no luck. I tried zipping the file to see if that would help, but no luck.
Then another client had a similar problem today with a file that was only 25MB.
We don't send large files very often, so I'm not sure if this is a recent thing or not. It seems like we've received some large files recently though.
In PureFTPd manager, I usually leave all of the fields in the Transfers tab empty for all users. I didn't see anywhere else that would seem to impart a file-size limitation.
• Any ideas at all?
• If not, any other forums that I could search for help on? It looks like the developers site for PureFTPd Manager hasn't been updated in a year or two.
Thanks in advance!

Some years back I had trouble at a customer that had a ADSL using PPPoE connection to their ISP.
Their router/modem (Speedtouch) couldn't cope with the LAN MTU when they sent files out so I had to lower it on their computers (running Panther?) ethernet interface from 1500 to 1492 (PPPoE overhead was 8 byte). The communication used to stall at about 25MB but the MTU change helped resolving that.
My guess is that the router had to fragment (split in two) all outgoing packets it recived from the LAN computers and it just couldn't cope after a while.
In your case it can be other network related things too like maybe needing traffic prioritizing, if receiving a lot of traffic from Internet and trying to send at the same time.

Thunderbird email client times out making IMAP and POP3 connections to gmail and hotmail.

After autoconfiguring several gmail accounts with Thunderbird, and then using them, they stopped working after I switched to Verizon High Speed DSL. All of the accounts time out while trying to get email.   Non list an error. While trying to auto configure a hotmail account, it failed during password loggin.
Disabled Windows Firewall
Disabled Norton Firewall
Disabled modem-router firewall
checked IMAP settings in Thunderbird.
deleted and then reautoconfigured the accounts to reset the passwords.
enabled IMAP manually in gmail and POP3
checked SMTP ports and IMAP default port numbers
checked for normal password
checked for SSL/TSL text
Checked with Verizon support who said that they don't help Thunderbird clients.
Tried logging in manually to all of the accounts to make sure the passwords and usernames were correct ...works.
help! "connection to server timed out"

Not exactly the same, but I am pretty sure the fix will be the same.
give it a whirl and let us know.
Solution for sending MS Outlook and SMTP e-mail through Verizon FIOS for GoDaddy e-mail
The FIX...I had to log onto the xxxxxxxx(at)verizon.net e-mail account via the WEBMAIL version for Verizon.
I then went to Options-->More Options on the top, right menu.
Go to the Accounts menu on the left.
Click Add Account button toward the top.
I only entered information for Sending Mail.
     Account name (any name you like...I called it GoDaddy)
     From Name = my display name
     e-mail address = my GoDaddy e-mail address
     I then moved my cursor to the username field in the Receiving Mail just so my cursor wasn't in the e-mail address field anymore.
Verizon couldn't even help me with this. This should be a standard check for them whenever they receive a call for SMTP issues. I think they are trying to get everyone to use their (at)verizon.net e-mail account as their primary account. This will help them retain or gain future business. I think it's bad for business overall.
==========
Note the "Test Account Settings..." button failed on the test send of a message, but all other tests passed fine. My messages are sent fine even with this part of the tests failing.
The above is true for a lot of third party email providers (not programs but email providers)

ISCSI client Time-out Parameter

Hi
I have Configured iSCSI (Solaris iSCSI Initiators) in Solaris10 1/06 successfully with Netapp 740.
How can i influence how long the iSCSI-Client try�s to connect to the target before the mount crashes?
iscsi: [ID 286457 kern.notice] NOTICE: iscsi connection(67) unable to connect to target
After seven tries i got (In all ca. 4.06 minutes)
iscsi: [ID 328943 kern.notice] NOTICE: iscsi session(66) ******netapp:sn.61 offline
and the mounts crashes.
I didn�t find any Resources about iSCSI-Parameters in Solaris iSCSI Initiators.
sincerelly
Roland

No, you didn't configure successfully. If so, it won't crash at all.
Change your 740's timeout from very low (10 sec) to higher for testing, make sure you won't get error again in the messages file.
cheers,

Phonefactor with RRAS(Windows Server 2003) - VPN client timeout after 20 seconds -- too fast!

[Note that I have previously posted this question on Experts Exchange... but have not found a solution yet].
We are a small business and would like to switch to two-factor authentication for VPN connections. We spent nearly a year helping Barracuda debug their small business VPN appliance and finally they took their boxes back and gave us back our money - they
just couldn't get file sharing to work consistently with some new firmware they had to install due to a patent case.
So... now we are trying Phonefactor.
Our VPN setup is RRAS on a Windows Server 2003 domain controller.
We have installed Phonefactor, enabled it as a Radius server, and configured RRAS to point to Phonefactor for Radius authentication. We configured phonefactor to send text messages for authentication, as we figured that would be less disruptive than a phone
call.
It all works except... the timeout for VPN clients is only 20 seconds! By the time we receive the text message on a cell phone, sometimes there is only 5 or 6 seconds to get the six digit code typed into a reply on the cell phone... and unless we are really
nimble, that is frequently not enough time!
When the VPN client times out, it gives an Error 718 "The connection was terminated because the remote computer did not respond in a timely manner."
How can we increase the timeout on the VPN clients, so we can more reliably enter the authentication code in a reply back to phonefactor?
Things we have tried:
1) Connecting (PPTP) from different Windows clients to see if we get different timeout limits. So far we have tried several Windows 7 boxes and a Windows Server 2003 as the client, but in all cases the timeout is 20 seconds.
2) On the windows clients: Searching through the PPTP client settings to see if there is one labeled "connection timeout". So far we have found nothing.
3) On the windows 2003 server: Modifying the RRAS Radius Server time-out to be 30 seconds, 60 seconds, 300 seconds. We've tried restarting RRAS after these changes, but the client connection timeout is still 20 seconds.
4) In the phonefactor configuration: Searching through the radius server settings to see if there is one labeled "connection timeout". So far we have found nothing.
5) Using NTRadPing to connect directly to the phonefactor radius server. With NTRadPing we were able to wait more than 60 seconds without a timeout from phonefactor. So we don't *think* at this point that the issue is within phonefactor.
6) We have asked phonefactor support, but their response is "hmmm... good question, we don't know, that sounds like a problem with your vpn client". And they could well be correct.
7) Search the web for how to increase either the stock windows VPN client timeout, or the RRAS radius authentication timeout. No luck so far.
8) Try this registry hack:
http://windowsitpro.com/networking/solving-ras-718-error. Didn't help.
Any ideas?
thanks!

Hi fdc2005,
Thanks for the post.
However, generally, we first type User Name, Password, then click connect to establish the VPN connection. Such as:
Therefore, I have a little confusion about the timeout you mentioned. Would you please provide us more details.
Regarding error 718, please check if the following could help:
If you have a third-party VPN server which does not support MS-CHAPv2 as an authentication method and supports only MS-CHAPv1, you will need to use either CHAP or PAP to connect from the Windows Vista VPN client until the server you use starts supporting MS-CHAPv2.
Steps to follow for resolution:
(1) Check if the Routing and Remote Access Server (RRAS) is configured to allow connections with MS-CHAPv2
(2) Check if the RADIUS server policy supports MSCHAPv2 (This step is needed if you control access to clients using Remote Access Policies on the IAS/NPS server)
Quote from:
Troubleshooting Vista VPN problems.
Hope this helps.
Jeremy Wu
TechNet Community Support

FTP Connection Time-Out Issue

*THE PROBLEM:* OS X specific FTP clients time-out intermittently when I try to upload files to any given server directory.
*TROUBLESHOOTING FAILURES:*
* Tried uploading the files to the same directory using different FTP clients (listed below).
* Tried using another Mac in the same office with the same client to upload the same files to the same directory at the same time and different times.
* Tried plugging in with an actual network cable cable.
* Tried toggling on/off passive mode both in the FTP clients and the OSX system preferences.
* Tried using the Binary (RAW DATA) upload format.
* Tried recreating the FTP profiles for the connections.
*TROUBLESHOOTING SUCCESS:*
* Tried uploading the same files to the same directory at a different location
* Tried uploading using filezilla in a Windows XP Pro virtual machine in my otherwise problematic work location.
I'm a web-designer. So FTP is a major part of my work-flow. My connection follows this setup:
My office is somewhat remote so my local ISP uses a Microwave transmitter (line-of-site) to make connection with a receiver at my home, which in-turn is plugged into a little wireless router. I connect to the wireless router with my Airport card in my MacBook Pro.
I use a number of applications that are standalone or have integrated FTP clients including:
* Fetch
* Interarchy
* Cyberduck
* CODA (AND)
* Dreamweaver
Can anyone offer me any explanation why my FTP has these problems.

Have you tried turning off the Firewall yet?
Since you have Fetch, let's try the transcipt messages as ScottMcGuire puts it...
http://fetchsoftworks.com/ubb/Forum2/HTML/003844.html
I use TransmitX, see if it has the same problem...
http://www.panic.com/transmit/
Are the ping times on the PC & Mac much different? What are they?

Time Out error when running Service Confirmation List Report

Hi All,
I am using CRM 7.0 version and some users (not all) when try to run a report in Service Confirmation List Report in WebUI Client, TIME OUT error comes up.Some times the timeout happens when the data is being extracted, but most often the timeout is when I try to download to Excel.
I checkedin ST22 and the problems seems to be in program CL_CRM_BOL_ABSTR_BO===========C in this method IF_BOL_BO_PROPERTY_ACCESS~GET_PROPERTY_AS_VALUE ... There is a restriction, that a dialog-process can run a maximum of 600 sec- after this, the process is stopped.
Does anyone has the similar problem. I don´t know if increasing the maximum time for the time out; should be a good solution OR run the report via Background. However I don´t know How to run it in Background.. Does anyone has any idea?
Any information is much appreciated!
Thanks!

Parameer max/wp_eun_time is set to 1800 sec
By increasing the above value to higher, you can get the result.
But 1800 sec runtime for a transaction code is not a good one, check the time entities by tracing the execution(ST05) and tune if required.
Regards,
Nick Loy

Time out: Network error

Hi, everyoneI have a problem with the network, the essbase server is on Sun solaris.Connection is Ok, and i can see all the application and the databases, but when trying to add a member and save to the server I get an error "Network error [10061]: Unable to connect to server. The client time out waiting to connect to the essbase agent using TCP/IP."In the essbase.cfg I have tried different values for the NETRETRYCOUNT and NETDELAY parameters and I get the same error.I`m going through two firewalls and i`m suspicious about something is happening with this.Can anyone help me?????Thanks in advanced

we're having the same problem at my office and hyperion support staff have recomended increasing the AGENTDELAY, NETDELAY, and NETRETRYCOUNT values in the server side essbase.cfg file (try doubling or tripling them). we can't do so until we finish our current reporting cycle so i'd be curious to hear if this resolved your problem.

VPN client get connect but Request Timed out when ping

Hi, I'm using the cisco 837 router as my VPN server. I get connected using Cisco VPN Client Version 5. But when I ping the router ip, i get request timed out. Here is my configuration :
Building configuration...
Current configuration : 3704 bytes
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname michael
boot-start-marker
boot-end-marker
memory-size iomem 5
no logging console
enable secret 5 $1$pZLW$9RZ8afI8QdGRq0ssaEJVu0
aaa new-model
aaa authentication login default local
aaa authentication login sdm_vpn_xauth_ml_1 local
aaa authorization exec default local
aaa authorization network sdm_vpn_group_ml_1 local
aaa session-id common
resource policy
ip subnet-zero
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.1.1
ip dhcp pool michael
   network 192.168.1.0 255.255.255.0
   default-router 192.168.1.1
   dns-server 202.134.0.155
ip dhcp pool excluded-address
   host 192.168.1.4 255.255.255.0
   hardware-address 01c8.d719.957a.b9
ip cef
ip name-server 202.134.0.155
ip name-server 203.130.193.74
vpdn enable
username michael privilege 15 secret 5 $1$ZJQu$KDigCvYWKkzuzdYHBEY7f.
username danny privilege 10 secret 5 $1$BDs.$Ez0u9wY7ywiBzVd1ECX0N/
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
crypto isakmp xauth timeout 15
crypto isakmp client configuration group michaelvpn
key vpnpassword
pool SDM_POOL_1
acl 199
netmask 255.255.255.0
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto dynamic-map SDM_DYNMAP_1 1
set transform-set ESP-3DES-SHA
crypto map SDM_CMAP_1 client authentication list sdm_vpn_xauth_ml_1
crypto map SDM_CMAP_1 isakmp authorization list sdm_vpn_group_ml_1
crypto map SDM_CMAP_1 client configuration address respond
crypto map SDM_CMAP_1 65535 ipsec-isakmp dynamic SDM_DYNMAP_1
interface Ethernet0
description $FW_INSIDE$
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1452
hold-queue 100 out
interface Ethernet2
no ip address
shutdown
hold-queue 100 out
interface ATM0
no ip address
no atm ilmi-keepalive
dsl operating-mode auto
pvc 0/35
pppoe-client dial-pool-number 1
interface FastEthernet1
duplex auto
speed auto
interface FastEthernet2
duplex auto
speed auto
interface FastEthernet3
duplex auto
speed auto
interface FastEthernet4
duplex auto
speed auto
interface Virtual-PPP1
no ip address
interface Dialer1
description $FW_OUTSIDE$
mtu 1492
ip address negotiated
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
ppp chap hostname ispusername
ppp chap password 0 isppassword
ppp pap sent-username ispusername password 0 isppassword
crypto map SDM_CMAP_1
ip local pool SDM_POOL_1 192.168.2.1 192.168.2.5
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
ip http server
no ip http secure-server
ip nat inside source static udp 192.168.1.0 1723 interface Dialer1 1723
ip nat inside source static tcp 192.168.1.4 21 interface Dialer1 21
ip nat inside source route-map SDM_RMAP_1 interface Dialer1 overload
access-list 1 remark SDM_ACL Category=16
access-list 1 permit 192.0.0.0 0.255.255.255
access-list 102 remark SDM_ACL Category=2
access-list 102 deny   ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255
access-list 102 permit ip 192.168.1.0 0.0.0.255 any
access-list 199 permit ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255
route-map SDM_RMAP_1 permit 1
match ip address 102
control-plane
banner motd ^C
Authorized Access Only
UNAUTHORIZED ACCESS TO THIS DEVICE IS PROHIBITED
You must have explicit permission to access this device.
All activities performed on this device are logged.
Any violations of access policy will result in disciplinary action.
^C
line con 0
no modem enable
line aux 0
line vty 0 4
scheduler max-task-time 5000
end
Thank you, anny help will be appreciated.

Thank you for your response, here is the debug :
Log Buffer (4096 bytes):
1 15:19:47.011: ISAKMP: set new node 856647599 to QM_IDLE
May 1 15:19:47.015: ISAKMP:(0:8:SW:1):Sending NOTIFY DPD/R_U_THERE_ACK protocol 1
     spi 2182802952, message ID = 856647599
May 1 15:19:47.015: ISAKMP:(0:8:SW:1): seq. no 0xA3285B8A
May 1 15:19:47.015: ISAKMP:(0:8:SW:1): sending packet to 120.168.1.24 my_port 4500 peer_port 52667 (R) QM_IDLE
May 1 15:19:47.019: ISAKMP:(0:8:SW:1):purging node 856647599
May 1 15:19:47.019: ISAKMP:(0:8:SW:1):Input = IKE_MESG_FROM_PEER, IKE_MESG_KEEP_ALIVE
May 1 15:19:47.019: ISAKMP:(0:8:SW:1):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
May 1 15:19:49.979: %SYS-2-BADSHARE: Bad refcount in pak_enqueue, ptr=81B4F274, count=0
-Traceback= 0x80137488 0x801DC350 0x801DDDA8 0x801E6860 0x807103F4 0x807F99F8 0x801E698C 0x8043FB10 0x8043FDC8 0x80D23CD0 0x80D24304 0x80D24400 0x8027B3C4 0x8027E9E0
May 1 15:19:49.983: %SYS-2-BADSHARE: Bad refcount in datagram_done, ptr=81B4F274, count=0
-Traceback= 0x80137488 0x801D8830 0x801DDFD8 0x801E6860 0x807103F4 0x807F99F8 0x801E698C 0x8043FB10 0x8043FDC8 0x80D23CD0 0x80D24304 0x80D24400 0x8027B3C4 0x8027E9E0
May 1 15:19:55.127: %SYS-2-BADSHARE: Bad refcount in pak_enqueue, ptr=81B51C44, count=0
-Traceback= 0x80137488 0x801DC350 0x801DDDA8 0x801E6860 0x807103F4 0x807F99F8 0x801E698C 0x8043FB10 0x8043FDC8 0x80D23CD0 0x80D24304 0x80D24400 0x8027B3C4 0x8027E9E0
May 1 15:19:55.127: %SYS-2-BADSHARE: Bad refcount in datagram_done, ptr=81B51C44, count=0
-Traceback= 0x80137488 0x801D8830 0x801DDFD8 0x801E6860 0x807103F4 0x807F99F8 0x801E698C 0x8043FB10 0x8043FDC8 0x80D23CD0 0x80D24304 0x80D24400 0x8027B3C4 0x8027E9E0
May 1 15:19:58.383: ISAKMP (0:134217736): received packet from 120.168.1.24 dport 4500 sport 52667 Global (R) QM_IDLE
May 1 15:19:58.383: ISAKMP: set new node -1340288848 to QM_IDLE
May 1 15:19:58.387: ISAKMP:(0:8:SW:1): processing HASH payload. message ID = -1340288848
May 1 15:19:58.387: ISAKMP:(0:8:SW:1): processing NOTIFY DPD/R_U_THERE protocol 1
     spi 0, message ID = -1340288848, sa = 81A7DCEC
May 1 15:19:58.387: ISAKMP:(0:8:SW:1):deleting node -1340288848 error FALSE reason "Informational (in) state 1"
May 1 15:19:58.387: ISAKMP:(0:8:SW:1):Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY
May 1 15:19:58.387: ISAKMP:(0:8:SW:1):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
May 1 15:19:58.391: ISAKMP:(0:8:SW:1):DPD/R_U_THERE received from peer 120.168.1.24, sequence 0xA3285B8B
May 1 15:19:58.391: ISAKMP: set new node -752454119 to QM_IDLE
May 1 15:19:58.395: ISAKMP:(0:8:SW:1):Sending NOTIFY DPD/R_U_THERE_ACK protocol 1
     spi 2182802952, message ID = -752454119
May 1 15:19:58.395: ISAKMP:(0:8:SW:1): seq. no 0xA3285B8B
May 1 15:19:58.395: ISAKMP:(0:8:SW:1): sending packet to 120.168.1.24 my_port 4500 peer_port 52667 (R) QM_IDLE
May 1 15:19:58.399: ISAKMP:(0:8:SW:1):purging node -752454119
May 1 15:19:58.399: ISAKMP:(0:8:SW:1):Input = IKE_MESG_FROM_PEER, IKE_MESG_KEEP_ALIVE
May 1 15:19:58.399: ISAKMP:(0:8:SW:1):Old State = IKE_P1_COMPLETE New State = IKE_P1_COMPLETE
May 1 15:19:59.887: %SYS-2-BADSHARE: Bad refcount in pak_enqueue, ptr=81B51C44, count=0
-Traceback= 0x80137488 0x801DC350 0x801DDDA8 0x801E6860 0x807103F4 0x807F99F8 0x801E698C 0x8043FB10 0x8043FDC8 0x80D23CD0 0x80D24304 0x80D24400 0x8027B3C4 0x8027E9E0
May 1 15:19:59.887: %SYS-2-BADSHARE: Bad refcount in datagram_done, ptr=81B51C44, count=0
-Traceback= 0x80137488 0x801D8830 0x801DDFD8 0x801E6860 0x807103F4 0x807F99F8 0x801E698C 0x8043FB10 0x8043FDC8 0x80D23CD0 0x80D24304 0x80D24400 0x8027B3C4 0x8027E9E0
May 1 15:20:05.667: %SYS-2-BADSHARE: Bad refcount in pak_enqueue, ptr=81F84148, count=0
-Traceback= 0x80137488 0x801DC350 0x801DDDA8 0x801E6860 0x807103F4 0x807F99F8 0x801E698C 0x8043FB10 0x8043FDC8 0x80D23CD0 0x80D24304 0x80D24400 0x8027B3C4 0x8027E9E0
May 1 15:20:05.667: %SYS-2-BADSHARE: Bad refcount in datagram_done, ptr=81F84148, count=0
-Traceback= 0x80137488 0x801D8830 0x801DDFD8 0x801E6860 0x807103F4 0x807F99F8 0x801E698C 0x8043FB10 0x8043FDC8 0x80D23CD0 0x80D24304 0x80D24400 0x8027B3C4 0x8027E9E0
After searching thru the internet, I've found :
CSCsb46264
Symptoms: When a dialer interface is configured as an endpoint for a IPSec+GRE tunnel, tracebacks with bad refcount may be generated.
Conditions: This symptom is observed on a Cisco 837 when router-generated packets such as routing updates are being switched.
Is that possible that the root of the problem was that ? Thank you.

VPN 3005 - Reroute Internet traffic out local connection

We have a VPN 3005 concentrator that connects to our backbone switch. We have about 6 sites who have the following subnet:
site A: 172.16.x.x
site B: 172.17.x.x (etc)
When a user is at home, hotel, or directly connected to the Internet and they connect with the VPN client to our network we want all Internet traffic (cnn, google, etc) to route through their local connection and not through our network through our internal Internet connection. How can I setup the VPN Concentrator to allow all internal traffic and reroute all other traffic out their local Internet connection?

split tunneling needs to be configured on the concentrator.
firstly, create a network list.
go configuration>policy management>traffic management>network lists. then put the private lan ip behind concentrator on to the list.
go configuration>user management>groups>client config
you will see "split tunneling policy" and "split tunneling network list"
with option "split tunneling policy", choose "only tunnel networks on the list". with option "split tunneling network list", choose the network list you just created.

ASA 5505 as a SSL VPN Server and Easy VPN Client at the same time?

Is it possible to configure and operate the ASA 5505 as a SSL VPN server and Easy VPN Client at the same time? We would like to configure a few of these without having to purchase additional ASA 5505 and use a 2 device method (1 SSL VPN Server and 1 Easy VPN Client). Thanks in advance.

I don't think it is possible. Following links may help you
http://www.cisco.com/en/US/products/ps6120/products_configuration_guide_chapter09186a008068dabe.html
http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008071c428.shtml

RV042 VPN Client Access not able to connect two users at same time

I have a RV042 and have set it up for VPN Client access using the QuickVPN client to connect my remote users. I discovered today that I cannot have two users connect in at the same time. Both users are in the same remote office. They can connect individually with no problem but if one is connected and the other tries connect also the second user gets a message the gateway is not responding. They are both running WinXPPRo SP3. Any help is greatly appreciated.

Were your QuickVPN clients behind a firewall router of some sort? For multiple QuickVPN clients to be able to connect to the remote RV042 at the same time, the local firewall router must have VPN Passthrough correctly implemented. You could try using a RV042 as the firewall router for your QuickVPN clients and you should be able to maintain 2 tunnels at the same time to the remote RV042.

I can't seem to connect to my lion vpn, all web services I set up work well like wikis and what not. I get a security error 792 Connection attempt failed because security negotiation times out. Please help

I get error 792 Connection attempt failed because security negotiation time out. I am trying to connect a xp machine to my vpn.

I get error 792 Connection attempt failed because security negotiation time out. I am trying to connect a xp machine to my vpn.

Update JRE 1.4.2_08 to JDK 1.5.0_11 get "Time Out 61" Error on MI Client

Hi,
we have updated our System to SPS 14 (MW+BE) to make our clients vista ready. I have create a new setup package and updated the Java version of the client to jdk 1.5.0_11. After Starting the client I get the "Time Out 61 Error". The Startup Output seems to be good, all variables are set. And I dont know what to do.
Her is the Output from the Startup.bat
If anyone have a clou that can help me, makes me very glad.
C:\Program Files\SAP\MobileInfrastructure>startup.bat
C:\Program Files\SAP\MobileInfrastructure>SET JAVA_HOME=1
C:\Program Files\SAP\MobileInfrastructure>REM SET JAVA_HOME=
C:\Program Files\SAP\MobileInfrastructure>REM SET ME_HOME=
C:\Program Files\SAP\MobileInfrastructure>REM SET JAVA_EXE=
C:\Program Files\SAP\MobileInfrastructure>REM SET JAVA_OPTIONS=-mx256m
C:\Program Files\SAP\MobileInfrastructure>SET _OLDCP=
C:\Program Files\SAP\MobileInfrastructure>set _MEJARS=
C:\Program Files\SAP\MobileInfrastructure>copy /b "C:\Program Files\SAP\MobileIn
frastructure\SetMejar.txt" + "C:\Program Files\SAP\MobileInfrastructure\listOfJa
rs.txt" "C:\Program Files\SAP\MobileInfrastructure\setMeJar.bat"
C:\Program Files\SAP\MobileInfrastructure\SetMejar.txt
C:\Program Files\SAP\MobileInfrastructure\listOfJars.txt
1 file(s) copied.
C:\Program Files\SAP\MobileInfrastructure>call "C:\Program Files\SAP\MobileInfra
structure\setMeJar.bat"
C:\Program Files\SAP\MobileInfrastructure>SET _MEJARS=C:\Program Files\SAP\Mobil
eInfrastructure\lib\db2ejdbc.jar;C:\Program Files\SAP\MobileInfrastructure\lib\c
rimson.jar;C:\Program Files\SAP\MobileInfrastructure\lib\jasper.jar;C:\Program F
iles\SAP\MobileInfrastructure\lib\jaxp.jar;C:\Program Files\SAP\MobileInfrastruc
ture\lib\MEg.jar;C:\Program Files\SAP\MobileInfrastructure\lib\pinstall.jar;C:\P
rogram Files\SAP\MobileInfrastructure\lib\servlet.jar;C:\Program Files\SAP\Mobil
eInfrastructure\lib\system\jdk13\iaik_javax_crypto.jar;C:\Program Files\SAP\Mobi
leInfrastructure\lib\system\jdk13\iaik_jce.jar;C:\Program Files\SAP\MobileInfras
tructure\lib\system\jdk14\iaik_jce.jar;C:\Program Files\SAP\MobileInfrastructure
\lib\system\xalan.jar;C:\Program Files\SAP\MobileInfrastructure\lib\webserver.ja
r;
C:\Program Files\SAP\MobileInfrastructure>set _SSLJARS=
C:\Program Files\SAP\MobileInfrastructure>if exist "C:\Program Files\SAP\MobileI
nfrastructure\lib\jsse.jar" set _SSLJARS=C:\Program Files\SAP\MobileInfrastructu
re\lib\jsse.jar
C:\Program Files\SAP\MobileInfrastructure>if exist "C:\Program Files\SAP\MobileI
nfrastructure\lib\jcert.jar" set _SSLJARS=;C:\Program Files\SAP\MobileInfrastruc
ture\lib\jcert.jar
C:\Program Files\SAP\MobileInfrastructure>if exist "C:\Program Files\SAP\MobileI
nfrastructure\lib\jnet.jar" set _SSLJARS=;C:\Program Files\SAP\MobileInfrastruct
ure\lib\jnet.jar
C:\Program Files\SAP\MobileInfrastructure>set _IAKJARS=
C:\Program Files\SAP\MobileInfrastructure>if exist "C:\Program Files\SAP\MobileI
nfrastructure\lib\system\jdk13\iaik_jce.jar" set _IAKJARS=C:\Program Files\SAP\M
obileInfrastructure\lib\system\jdk13\iaik_jce.jar
C:\Program Files\SAP\MobileInfrastructure>if exist "C:\Program Files\SAP\MobileI
nfrastructure\lib\system\jdk13\iaik_javax_crypto.jar" set _IAKJARS=C:\Program Fi
les\SAP\MobileInfrastructure\lib\system\jdk13\iaik_jce.jar;C:\Program Files\SAP\
MobileInfrastructure\lib\system\jdk13\iaik_javax_crypto.jar
C:\Program Files\SAP\MobileInfrastructure>set CLASSPATH=C:\Program Files\SAP\Mob
ileInfrastructure\lib\db2ejdbc.jar;C:\Program Files\SAP\MobileInfrastructure\lib
\crimson.jar;C:\Program Files\SAP\MobileInfrastructure\lib\jasper.jar;C:\Program
Files\SAP\MobileInfrastructure\lib\jaxp.jar;C:\Program Files\SAP\MobileInfrastr
ucture\lib\MEg.jar;C:\Program Files\SAP\MobileInfrastructure\lib\pinstall.jar;C:
\Program Files\SAP\MobileInfrastructure\lib\servlet.jar;C:\Program Files\SAP\Mob
ileInfrastructure\lib\system\jdk13\iaik_javax_crypto.jar;C:\Program Files\SAP\Mo
bileInfrastructure\lib\system\jdk13\iaik_jce.jar;C:\Program Files\SAP\MobileInfr
astructure\lib\system\jdk14\iaik_jce.jar;C:\Program Files\SAP\MobileInfrastructu
re\lib\system\xalan.jar;C:\Program Files\SAP\MobileInfrastructure\lib\webserver.
jar;;;;C:\Program Files\SAP\MobileInfrastructure\lib\system\jdk13\iaik_jce.jar;C
:\Program Files\SAP\MobileInfrastructure\lib\system\jdk13\iaik_javax_crypto.jar;
1\lib\tools.jar
C:\Program Files\SAP\MobileInfrastructure>echo Using CLASSPATH: C:\Program Files
\SAP\MobileInfrastructure\lib\db2ejdbc.jar;C:\Program Files\SAP\MobileInfrastruc
ture\lib\crimson.jar;C:\Program Files\SAP\MobileInfrastructure\lib\jasper.jar;C:
\Program Files\SAP\MobileInfrastructure\lib\jaxp.jar;C:\Program Files\SAP\Mobile
Infrastructure\lib\MEg.jar;C:\Program Files\SAP\MobileInfrastructure\lib\pinstal
l.jar;C:\Program Files\SAP\MobileInfrastructure\lib\servlet.jar;C:\Program Files
\SAP\MobileInfrastructure\lib\system\jdk13\iaik_javax_crypto.jar;C:\Program File
s\SAP\MobileInfrastructure\lib\system\jdk13\iaik_jce.jar;C:\Program Files\SAP\Mo
bileInfrastructure\lib\system\jdk14\iaik_jce.jar;C:\Program Files\SAP\MobileInfr
astructure\lib\system\xalan.jar;C:\Program Files\SAP\MobileInfrastructure\lib\we
bserver.jar;;;;C:\Program Files\SAP\MobileInfrastructure\lib\system\jdk13\iaik_j
ce.jar;C:\Program Files\SAP\MobileInfrastructure\lib\system\jdk13\iaik_javax_cry
pto.jar;1\lib\tools.jar
Using CLASSPATH: C:\Program Files\SAP\MobileInfrastructure\lib\db2ejdbc.jar;C:\P
rogram Files\SAP\MobileInfrastructure\lib\crimson.jar;C:\Program Files\SAP\Mobil
eInfrastructure\lib\jasper.jar;C:\Program Files\SAP\MobileInfrastructure\lib\jax
p.jar;C:\Program Files\SAP\MobileInfrastructure\lib\MEg.jar;C:\Program Files\SAP
\MobileInfrastructure\lib\pinstall.jar;C:\Program Files\SAP\MobileInfrastructure
\lib\servlet.jar;C:\Program Files\SAP\MobileInfrastructure\lib\system\jdk13\iaik
javaxcrypto.jar;C:\Program Files\SAP\MobileInfrastructure\lib\system\jdk13\iai
k_jce.jar;C:\Program Files\SAP\MobileInfrastructure\lib\system\jdk14\iaik_jce.ja
r;C:\Program Files\SAP\MobileInfrastructure\lib\system\xalan.jar;C:\Program File
s\SAP\MobileInfrastructure\lib\webserver.jar;;;;C:\Program Files\SAP\MobileInfra
structure\lib\system\jdk13\iaik_jce.jar;C:\Program Files\SAP\MobileInfrastructur
e\lib\system\jdk13\iaik_javax_crypto.jar;1\lib\tools.jar
C:\Program Files\SAP\MobileInfrastructure>SET PATH=C:\WINDOWS\system32;C:\WINDOW
S;C:\WINDOWS\System32\Wbem;c:\Program Files\IBM\Client Access\Emulator\;c:\Progr
am Files\IBM\Client Access\Shared\;c:\Program Files\IBM\Client Access\;C:\Progra
m Files\Windows Imaging\;C:\Program Files\Java\jdk1.5.0_11\bin;C:\Program Files\
SAP\MobileInfrastructure/bin/DB2e/
C:\Program Files\SAP\MobileInfrastructure>"C:\Program Files\Java\1.5.0_11\bin\ja
va.exe" -DSERVER_IMPL="com.sap.tc.webdynpro.serverimpl.me.MEServerImplementatio
n" -Duse.repository=noDB com.sap.ip.me.core.Startup "-home:C:\Program Files\SAP\
MobileInfrastructure"
The system cannot find the path specified.
C:\Program Files\SAP\MobileInfrastructure>SET CLASSPATH=
C:\Program Files\SAP\MobileInfrastructure>

Hi,
Note 1086971
To install and launch MI Client on Windows Vista OS, install SUN JDK/JRE 1.5 Update 11 and higher. This is because only this version of SUN J2SE supports Windows Vista OS. For details please refer to http://java.sun.com/j2se/1.5.0/system-configurations.html.
I think I have to install this version of Java.
Regards Maik

3005 VPN Client Time-Outs

Similar Messages

Maybe you are looking for