VPN drops after authentication

Question

Looking at the logs is says IKE Failed. phase 5, assert 0 then gets disconnected.  my Cisco ACS server shows that my authentication is successful and the logs show the banner being displayed.  Any ideas where to start looking for this?  I have tried looking at Google to no avail.

Answer 1

More logs info.
>
�Sep  5 08:43:03 unknown CommCenter[15] <Notice>: Client [Preferences-CTTelephonyCenter] is telling PDP context 0 to go active.
Sep  5 08:43:03 unknown configd[14] <Notice>: network configuration changed.
Sep  5 08:43:03 unknown CommCenter[15] <Error>: kPdpContextStateChangeNotification kActive set last_auto_trigger_failed to false
Sep  5 08:43:03 unknown CommCenter[15] <Error>: _ReInitThrottleTimer(): Clearing throttle timer on context ID [0] at 368545383.978369
Sep  5 08:43:04 unknown configd[14] <Notice>: IPSec connecting to server x.x.x.x
Sep  5 08:43:04 unknown configd[14] <Notice>: IPSec Phase1 starting.
Sep  5 08:43:04 unknown configd[14] <Notice>: SCNC: start, triggered by Preferences, type IPSec, status 0
Sep  5 08:43:04 unknown racoon[657] <Notice>: IPSec connecting to server x.x.x.x
Sep  5 08:43:04 unknown racoon[657] <Notice>: IPSec Phase1 started (Initiated by me).
Sep  5 08:43:04 unknown kernel[0] <Debug>: launchd[657] Builtin profile: racoon (sandbox)
>
Sep  5 08:43:05 unknown racoon[657] <Notice>: IPSec Phase1 established (Initiated by me).
Sep  5 08:43:05 unknown racoon[657] <Notice>: IPSec Extended Authentication requested.
Sep  5 08:43:05 unknown configd[14] <Notice>: IPSec requesting Extended Authentication.
Sep  5 08:43:05 unknown searchd[658] <Warning>: Could not open updates file for com.apple.MobileSMS SMSSearch
Sep  5 08:43:05 unknown searchd[658] <Warning>: Something wrong with index com.apple.MobileSMS.SMSSearch, re-creating (index=0, tid=0, savedTid=0, version=1, savedVersion=0)
>
�Sep  5 08:43:25 unknown configd[14] <Notice>: IPSec sending Extended Authentication.
Sep  5 08:43:25 unknown racoon[657] <Notice>: IPSec Extended Authentication sent.
>
�Sep  5 08:43:28 unknown racoon[657] <Notice>: IPSec Extended Authentication Passed.
Sep  5 08:43:28 unknown racoon[657] <Notice>: IPSec Network Configuration requested.
Sep  5 08:43:28 unknown racoon[657] <Notice>: IPSec Network Configuration established.
Sep  5 08:43:28 unknown configd[14] <Notice>: IPSec Network Configuration started.
Sep  5 08:43:28 unknown configd[14] <Notice>: IPSec Network Configuration: INTERNAL-IP4-ADDRESS = x.x.x.x.
Sep  5 08:43:28 unknown configd[14] <Notice>: IPSec Network Configuration: INTERNAL-IP4-MASK = 255.255.255.0.
Sep  5 08:43:28 unknown configd[14] <Notice>: IPSec Network Configuration: SAVE-PASSWORD = 1.
Sep  5 08:43:28 unknown configd[14] <Notice>: IPSec Network Configuration: INTERNAL-IP4-DNS = x.x.x.x.
Sep  5 08:43:28 unknown configd[14] <Notice>: IPSec Network Configuration: INTERNAL-IP4-DNS = x.x.x.x.
Sep  5 08:43:28 unknown configd[14] <Notice>: IPSec Network Configuration: BANNER = !!!!! WARNING !!!!!
     Unauthorized access and use of this system is
     not permitted and strictly prohibited by
     security policies, regulations, state and federal
     law.
     UNAUTHORIZED USERS ARE SUBJECT TO CRIMINAL AND
     CIVIL PENALTIES AS WELL AS COMPANY INITIATED
     DISCIPLINARY PROCEEDINGS..
Sep  5 08:43:28 unknown configd[14] <Notice>: IPSec Network Configuration: DEF-DOMAIN = domain.com.
Sep  5 08:43:28 unknown configd[14] <Notice>: IPSec Network Configuration: DEFAULT-ROUTE = local-address x.x.x.x/32.
Sep  5 08:43:28 unknown configd[14] <Notice>: IPSec Phase2 starting.
��Sep  5 08:43:28 unknown configd[14] <Notice>: IPSec Network Configuration established.
��Sep  5 08:43:28 unknown configd[14] <Notice>: IPSec Phase1 established.
Sep  5 08:43:28 unknown configd[14] <Notice>: event_callback: Address added. previous interface setting (name: en0, address: x.x.x.x), current interface setting (name: utun0, family: 1000, address: x.x.x.x, subnet: 255.255.255.0, destination:x.x.x.x).
Sep  5 08:43:28 unknown racoon[657] <Notice>: IPSec Phase2 started (Initiated by me).
Sep  5 08:43:28 unknown apsd[68] <Warning>: <APSCourier: 0x130da0>: Stream error occurred for <APSTCPStream: 0xe62d100>: Error Domain=NSPOSIXErrorDomain Code=57 "The operation couldn’-t -b-e -c-o-m-p-l-e-t-e-d-. -S-o-c-k-e-t -i-s -n-o-t -c-o-n-n-e-c-t-e-d-" -U-s-e-r-I-n-f-o-=-0-x-e-6-2-c-7-3-0 -{-}
Sep  5 08:43:28 unknown configd[14] <Notice>: network configuration changed.
Sep  5 08:43:28 unknown configd[14] <Error>: IPSec Controller: IKE FAILED. phase 5, assert 0
Sep  5 08:43:28 unknown configd[14] <Notice>: IPSec disconnecting from server x.x.x.x
Sep  5 08:43:28 unknown racoon[657] <Notice>: IPSec disconnecting from server x.x.x.x
Sep  5 08:43:28 unknown mDNSResponder[45] <Error>: UpdateInterfaceList: if_nametoindex returned zero/negative value for utun0(0)
Sep  5 08:43:28 unknown configd[14] <Error>: SCNC Controller: service_ending_verify_primaryservice, waiting for PrimaryService. status = 1.
Sep  5 08:43:28 unknown mDNSResponder[45] <Error>: ConfigResolvers: interface specific index 8 not found
Sep  5 08:43:28 unknown mDNSResponder[45] <Error>: ConfigResolvers: interface specific index 8 not found
Sep  5 08:43:28 unknown mDNSResponder[45] <Error>: ConfigResolvers: interface specific index 8 not found
Sep  5 08:43:28 unknown mDNSResponder[45] <Error>: ConfigResolvers: interface specific index 8 not found
��Sep  5 08:43:28 unknown configd[14] <Notice>: network configuration changed.
Sep  5 08:43:28 unknown configd[14] <Error>: SCNC Controller: ipv4_state_changed, done waiting for ServiceID.