WRV200 - Office VPN Fails to connect
I recently purchased a WRV200 and suddenly my office VPN will not connect. I have all VPN Pass Through set to Enable and have even set up my laptops IP address as a DMZ for complete firewall pass through. NOTHING. In order to connect I must unplug the router and then power it back up. Even then the VPN is not stable. I really purchased this as a better solution for my office at home application. Not happy so far.
I have figured out the problem on my end. The routers wireless signal is so weak that the VPN cannot sustain heartbeat with the host. The signal on this router is about 50% less than my old WRT54G router.
(Edited post for guideline compliance. Thanks!)
Message Edited by JOHNDOE_06 on 09-17-2007 07:40 AM
Similar Messages
-
Does anyone know if the VPN option works? It is under setting, wireless network, VPN settings. I have a PPTP connection that works fine from my desktop but "fails to connect to server" when tried on my phone.
Sorry to say that showing the scrreen shots does not make it work. The bottom line is the the ROM supplied by Verizon/Samsung/Google - whoever you want to blame does not support VPN connections.
Here is a log and one VPN vendors answer.
11-18 21:27:41.648 E/VpnService(7616)onError()
11-18 21:27:41.648 E/VpnService(7616)java.io.IOException: Connecting timed out
11-18 21:27:41.648 E/VpnService(7616)at com.android.server.vpn.VpnService.waitUntilConnectedOrTimedout(VpnService.java:206)
11-18 21:27:41.648 E/VpnService(7616)at com.android.server.vpn.VpnService.onConnect(VpnService.java:136)
11-18 21:27:41.648 E/VpnService(7616)at com.android.server.vpn.VpnServiceBinder$2.run(VpnServiceBinder.java:108)
11-18 21:27:41.648 E/VpnService(7616)at java.lang.Thread.run(Thread.java:1096)
11-18 21:27:41.728 I/VpnService(7616)disconnecting VPN...
11-18 21:27:41.793 D/VpnActor(7580)vpn disconnecting!
We think the reason behind this error is that, either your phone not support VPN or the ROM u r using have VPN problem.( from my own experience, I think it's the ROM problem) -
Mail Fails To Connect In My Office Network, Works on Reboot
This is baffling me and my network admin:
Mail fails to connect to any of my accounts at work. But it recovers if I reboot my machine.
Here is what happens:
- Mail works just fine at home. Connects to gmail, iCloud, and a 3rd party email account no problems.
- I get to the office
- I log in to the office WiFi with my password - for this I have to open a browser window, and enter my credentials.
(I kind of assume that this is the problem ^^)
- All my internet connections work fine, I can use the browser to access Gmail etc
- Mail refuses to connect to any of my email servers, and all accounts go offline
- Connection Doctor says "Mail can connect to the internet" but all individual connections are red, not reachable. I checked "detail" too - its empty.
Then I reboot my Mac, and after that everything's happy. Mail connects to my accounts normally, and Connection Doctor marks all as green.
Since it works on reboot, we can rule out network problems like closed ports etc. So the only thing I can think of is that Mail initially tries to connect as soon as I am on WiFi, then hangs (because I am not logged in yet), and somehow this hang is of a kind that does not recover (I've left it on for hours at a time, no difference, it never recovers).
Anyone have any ideas about this? Is there some way I can restart networking daemons to kill the hung connections. Or any other way I can diagnose this?A captive portal, which is what you have, can work in any of at least three ways: by HTTP redirection, IP redirection, or DNS poisoning. I'm guessing that yours is the last type. In that case, a TTL of zero should be used. If the TTL is non-zero, then Internet applications may not work until the DNS cache is flushed. That happens when you reboot.
You should discuss the possibility with your network admin. If the network configuration isn't going to be changed, you may be able to avoid the need to reboot by flushing the DNS cache manually, as described in the article linked below:
OS X: How to reset the DNS cache -
Remote access VPN client gets connected fails on hosts in LAN
Hi,
VPN client gets connected fine, I have a inter VLAN routing happening on the switch in the LAN so all the LAN hosts have gateway IP on the switch, I have the defult route pointing to ASA inside interface on the switch, the switch I can reach after Remote Access VPN is connected how ever I cannot ping/connect to other hosts in the LAN and if I make the gateway point to the ASA then that host is accessible, any suggestions? I really want to have gateway to be the Switch as I have other networks reachable through the Switch (Intranet routing)Hi Mashal,
Thanks for your time,
VPN Pool(Client) 192.168.100.0/24
Internal Subnets 192.9.200.0/24(VLAN 4000) and 192.168.2.0/24 (VLAN 1000)
=============
On the Switch
=============
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is 192.168.2.5 to network 0.0.0.0
172.32.0.0/24 is subnetted, 1 subnets
C 172.32.0.0 is directly connected, Vlan101
C 192.168.200.0/24 is directly connected, Vlan2000
C 192.9.200.0/24 is directly connected, Vlan4000
S 192.168.250.0/24 [1/0] via 192.9.200.125
S 192.168.1.0/24 [1/0] via 192.9.200.125
C 192.168.2.0/24 is directly connected, Vlan1000
S 192.168.252.0/24 [1/0] via 192.9.200.125
S* 0.0.0.0/0 [1/0] via 192.168.2.5
===============
On ASA
===============
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route
Gateway of last resort is 172.32.0.2 to network 0.0.0.0
C 172.32.0.0 255.255.255.0 is directly connected, outside
C 192.9.200.0 255.255.255.0 is directly connected, inside
C 192.168.168.0 255.255.255.0 is directly connected, failover
C 192.168.2.0 255.255.255.0 is directly connected, MGMT
S 192.168.100.2 255.255.255.255 [1/0] via 172.32.0.2, outside
S 192.168.100.3 255.255.255.255 [1/0] via 172.32.0.2, outside
S* 0.0.0.0 0.0.0.0 [1/0] via 172.32.0.2, outside
We don't need route print on the PC for now as I can explain what is happening I can get complete access to the 192.168.2.0/24 (VLAN 1000) but for 192.9.200.0/24 (VLAN 4000) above from the switch I can only ping IP's on the switches/pair but cannot have any tcp connections, which explains the default route being pointed on the switch is on VLAN 1000, now my issue is How do I get access to VLAN 4000 as you can see these two are on different Interfaces/zones on the ASA and please note with default gateway pointing to ASA I will have access to both the VLAN's it is only when I move the gateway pointing to Switch I loose tcp connections to one VLAN depending on the default route on the being pointing to on the switch.
So we are left to do with how to on the switch with default route. -
VPN Client Tunnel Connection Pix506E
Situation: Trying to connect to PiX 506e for vpn client tunnel. The tunnel shows the following when using the sho isa sa command:
qm_idle 0 0
then after about 3-4 minutes the client workstaiton is receiving error: Reason 412: the remote peer is no longer responding
The same workstation on the same internet connection from the home office is able to connect to an ASA 5505 vpn client with no problems.
I have enabled: nat traversal on the pix506e and tried serveral options on the client side.
The Pix506E also has site to site vpn tunnels that are working without any problems.
Pix Software version: 6.3.5
Any ideas?Try to connect from a different internet connection and see if you are having the same issue.
Also, turn on the logs on the vpn client and see why it's failing. -
12c design view of JSF page fails to render with 'Loading failed Reason: Connection reset by server'
When in the design view of a JSF page, the page never renders in JDeveloper 12c. Instead I get an error message 'Loading failed Reason: Connection reset by server'. I traced this to a conflict with the port used by Cisco Anyconnect (5001) which seems to be something JDeveloper uses as well to render the page. Is there a way to change the port used to render the page in design mode? I could not find any settings in the preferences.
Hi Frank,
The proxy settings are set to use the system default proxy settings in JDev and I have not needed to change it when VPN'ed.
The product that is in conflict is the 'AnyConnect Web Security Agent' (acwebsecagent.exe) which runs whether I am on vpn or am in the office - it is listening on port 5001 and that is the same port jdev64w.exe is listening to when rendering the page in the design mode. I confirmed this using netstat -ab. After getting the conflicting program switched off temporarily, the design mode of the page was rendered within the IDE so that I could then drop components on the design surface.
Since I cannot get the Cisco product to listen on a different port, I am hopeful there is a way to modify the port used by JDev.
Thanks,
Sunil -
881 VPN fails after 24hrs/IKE key lifetime
Hi all,
This is my first post on the support forms and I only just got my CCNA, so please bear with me and don't shoot me if I pose a slightly newbish perspective on things. Thanks in advance.
We've got a central office (actually quite small) where several IPSec connections connect to. Two of these connections are Cisco 881 routers. One of them works fine, the other craps out after 24 hours (coincidentally also the IKE key lifetime). When I mean "craps out", it means the VPN worked fine from the get go, until 24 hours later. Only a reload will bring back the VPN tunnel. I've verified my PFS and DPD configurations are solid, because these kind of symptoms would most likely occur when these configurations aren't in order.
The two 881 configurations are quite similar. The only differences between the two are some details in the PPPoE configurations and (quite obviously) the IP address space for the two sites. Both operate on the premise of a point to point connection (no multipoint stuff going on here).
I have examined all I can. It took me two weeks to make sure I exhausted all my options before I post my issue here.
Here is a brief list of things I've done.
- Checked configuration of central router (which is a Mikrotik RB800 btw)
- Verified that the central router is not the cause of the VPN not coming back. Rebooted it as a last resort; VPN stays down. Rebooted 881, VPN comes back.
- I've downgraded the 881 firmware image from version 152.4.M2 to 151.4.M4 (the succesful 881 was running the 151.4.M4 image, and I found some Ipsec issues in the caveat for version 152.4.M2), but to no avail.
- I've tried to clear several crypto components hoping to restore key exchanging, also to no avail. Only a reload will suffice.
I've included the 881's config:
Building configuration...Current configuration : 7795 bytes
! Last configuration change at 15:37:50 Paris Tue May 28 2013 by admin
version 15.1
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname <<removed>>
boot-start-marker
boot system flash c880data-universalk9-mz.151-4.M4.bin
boot-end-marker
logging buffered 102400
enable secret 4 <<removed>>
no aaa new-model
memory-size iomem 10
clock timezone Paris 1 0
clock summer-time Paris date Mar 30 2003 2:00 Oct 26 2003 3:00
crypto pki token default removal timeout 0
!no ip source-route
ip dhcp excluded-address 192.168.4.1 192.168.4.9
ip dhcp excluded-address 192.168.4.199 192.168.4.254
ip dhcp pool Main
network 192.168.4.0 255.255.255.0
dns-server 192.168.4.250 8.8.4.4
default-router 192.168.4.250
lease infinite
ip cef
ip domain lookup source-interface Dialer1
ip domain name <<removed>>
ip name-server 8.8.4.4
ip name-server 192.168.58.199
no ipv6 cef
password encryption aes!
object-group network SUBNET_DUITSLAND
description Hele subnet IC Duitsland
192.168.4.0 255.255.255.0
object-group network SUBNET_IC_ARNHEM
description Hele subnet IC Arnhem
192.168.58.0 255.255.255.0
object-group network WAN_IC_ARNHEM
description Het WAN IP adres van IC Arnhem
host <<removed>>
vtp mode transparent
username <<removed>> privilege 15 view root secret 4 <<removed>>
class-map type inspect match-all sdm-cls-VPNOutsideToInside-1
match access-group 102
class-map type inspect match-all sdm-cls-VPNOutsideToInside-2
match access-group 105
class-map type inspect match-all ccp-cls--1
match access-group name Outgoing
class-map type inspect match-all ccp-cls--2
match access-group name Incoming
policy-map type inspect ccp-policy-ccp-cls--1
class type inspect ccp-cls--1
pass
class class-default
drop
policy-map type inspect ccp-policy-ccp-cls--2
class type inspect ccp-cls--2
pass
class type inspect sdm-cls-VPNOutsideToInside-1
inspect
class type inspect sdm-cls-VPNOutsideToInside-2
inspect
class class-default
drop
zone security Inside
zone security Outside
zone-pair security sdm-zp-Inside-Outside source Inside destination Outside
service-policy type inspect ccp-policy-ccp-cls--1
zone-pair security sdm-zp-Outside-Inside source Outside destination Inside
service-policy type inspect ccp-policy-ccp-cls--2
crypto logging ezvpn
crypto isakmp policy 1
encr aes 256
authentication pre-share
group 5
crypto isakmp key <<removed>> address <<removed>>
crypto isakmp invalid-spi-recovery
crypto isakmp keepalive 10 periodic
crypto ipsec security-association lifetime seconds 28800
crypto ipsec transform-set ESP-AES256-SHA esp-aes esp-sha-hmac
crypto map SDM_CMAP_1 1 ipsec-isakmp
description Tunnel to CO
set peer <<removed>>
set transform-set ESP-AES256-SHA
set pfs group5
match address 104
interface FastEthernet0
no ip address
interface FastEthernet1
no ip address
interface FastEthernet2
no ip address
interface FastEthernet3
no ip address
interface FastEthernet4
description DeutscheTelekom$ETH-WAN$
no ip address
duplex auto
speed auto
pppoe-client dial-pool-number 1
interface Vlan1
description $FW_INSIDE$
ip address 192.168.4.250 255.255.255.0
ip mask-reply
ip nat inside
ip virtual-reassembly in
zone-member security Inside
ip tcp adjust-mss 1412
interface Dialer1
description $FW_OUTSIDE$
mtu 1492
ip address negotiated
ip nat outside
ip virtual-reassembly in
zone-member security Outside
encapsulation ppp
no ip route-cache
dialer pool 1
dialer-group 1
ppp authentication pap callin
ppp chap hostname <<removed>>
ppp chap password 7 <<removed>>
ppp pap sent-username <<removed>> password 7 <<removed>>
ppp ipcp dns request
ppp ipcp address accept
crypto map SDM_CMAP_1
ip forward-protocol nd
no ip http server
ip http access-class 2
ip http authentication local
ip http secure-server
ip nat inside source route-map SDM_RMAP_1 interface Dialer1 overload
ip route 0.0.0.0 0.0.0.0 Dialer1 permanent
ip access-list extended Incoming
remark CCP_ACL Category=128
permit ip any object-group SUBNET_DUITSLAND
ip access-list extended Outgoing
remark CCP_ACL Category=128
permit ip object-group SUBNET_DUITSLAND any
ip access-list extended SDM_HTTPS
remark CCP_ACL Category=1
permit tcp any any eq 443
ip access-list extended SDM_SHELL
remark CCP_ACL Category=1
permit tcp any any eq cmd
ip access-list extended SDM_SSH
remark CCP_ACL Category=1
permit tcp any any eq 22
no logging trap
access-list 1 remark CCP_ACL Category=2
access-list 1 permit 192.168.4.0 0.0.0.255
access-list 2 permit <<removed>>
access-list 2 remark Auto generated by SDM Management Access feature
access-list 2 remark CCP_ACL Category=1
access-list 2 permit 192.168.4.0 0.0.0.255
access-list 2 permit 192.168.58.0 0.0.0.255
access-list 101 remark Auto generated by SDM Management Access feature
access-list 101 remark CCP_ACL Category=1
access-list 101 permit ip 192.168.4.0 0.0.0.255 any
access-list 101 permit ip host <<removed>> any
access-list 101 permit ip 192.168.58.0 0.0.0.255 any
access-list 102 remark CCP_ACL Category=0
access-list 102 permit ip 192.168.58.0 0.0.0.255 192.168.4.0 0.0.0.255
access-list 103 remark CCP_ACL Category=2
access-list 103 remark IPSec Rule
access-list 103 deny ip 192.168.4.0 0.0.0.255 192.168.58.0 0.0.0.255
access-list 103 permit ip 192.168.4.0 0.0.0.255 any
access-list 104 remark CCP_ACL Category=4
access-list 104 remark IPSec Rule
access-list 104 permit ip 192.168.4.0 0.0.0.255 192.168.58.0 0.0.0.255
access-list 105 remark CCP_ACL Category=0
access-list 105 permit ip 192.168.58.0 0.0.0.255 192.168.4.0 0.0.0.255
dialer-list 1 protocol ip permit
route-map SDM_RMAP_1 permit 1
match ip address 103
line con 0
line aux 0
line vty 0 4
access-class 101 in
privilege level 15
password 7 <<removed>>
login local
transport input ssh
ntp update-calendar
ntp server de.pool.ntp.org prefer
end
Also, I have some ISAKMP debug output (when the VPN fails, I can still reach the router via the internet):
.May 29 08:31:22.848: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:31:28.848: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:31:30.016: ISAKMP: set new node 0 to QM_IDLE
.May 29 08:31:30.016: ISAKMP:(0):SA is still budding. Attached new ipsec request to it. (local <<remote office WAN IP>>, remote <<central office WAN IP>>)
.May 29 08:31:30.016: ISAKMP: Error while processing SA request: Failed to initialize SA
.May 29 08:31:30.016: ISAKMP: Error while processing KMI message 0, error 2.
.May 29 08:31:30.016: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
.May 29 08:31:30.016: ISAKMP (0): incrementing error counter on sa, attempt 3 of 5: retransmit phase 1
.May 29 08:31:30.016: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
.May 29 08:31:30.016: ISAKMP:(0): sending packet to <<central office WAN IP>> my_port 500 peer_port 500 (I) MM_NO_STATE
.May 29 08:31:30.016: ISAKMP:(0):Sending an IKE IPv4 Packet.
.May 29 08:31:34.848: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:31:40.016: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
.May 29 08:31:40.016: ISAKMP (0): incrementing error counter on sa, attempt 4 of 5: retransmit phase 1
.May 29 08:31:40.016: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
.May 29 08:31:40.016: ISAKMP:(0): sending packet to <<central office WAN IP>> my_port 500 peer_port 500 (I) MM_NO_STATE
.May 29 08:31:40.016: ISAKMP:(0):Sending an IKE IPv4 Packet.
.May 29 08:31:40.844: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:31:46.380: ISAKMP:(0):purging node 297623767
.May 29 08:31:46.380: ISAKMP:(0):purging node -1266458641
.May 29 08:31:46.452: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:31:49.848: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=<<remote office WAN IP>>, prot=50, spi=0xCF8BD5F3(3482047987), srcaddr=<<central office WAN IP>>, input interface=Dialer1
.May 29 08:31:50.016: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
.May 29 08:31:50.016: ISAKMP (0): incrementing error counter on sa, attempt 5 of 5: retransmit phase 1
.May 29 08:31:50.016: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
.May 29 08:31:50.016: ISAKMP:(0): sending packet to <<central office WAN IP>> my_port 500 peer_port 500 (I) MM_NO_STATE
.May 29 08:31:50.016: ISAKMP:(0):Sending an IKE IPv4 Packet.
.May 29 08:31:52.845: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:31:56.381: ISAKMP:(0):purging SA., sa=874CF15C, delme=874CF15C
.May 29 08:31:58.849: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:32:00.017: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
.May 29 08:32:00.017: ISAKMP:(0):peer does not do paranoid keepalives..May 29 08:32:00.017: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (I) MM_NO_STATE (peer <<central office WAN IP>>)
.May 29 08:32:00.017: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (I) MM_NO_STATE (peer <<central office WAN IP>>)
.May 29 08:32:00.017: ISAKMP: Unlocking peer struct 0x874792E0 for isadb_mark_sa_deleted(), count 0
.May 29 08:32:00.017: ISAKMP: Deleting peer node by peer_reap for <<central office WAN IP>>: 874792E0
.May 29 08:32:00.017: ISAKMP:(0):deleting node -118750948 error FALSE reason "IKE deleted"
.May 29 08:32:00.017: ISAKMP:(0):deleting node -1193365643 error FALSE reason "IKE deleted"
.May 29 08:32:00.017: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
.May 29 08:32:00.017: ISAKMP:(0):Old State = IKE_I_MM1 New State = IKE_DEST_SA.May 29 08:32:02.037: ISAKMP:(0): SA request profile is (NULL)
.May 29 08:32:02.037: ISAKMP: Created a peer struct for <<central office WAN IP>>, peer port 500
.May 29 08:32:02.037: ISAKMP: New peer created peer = 0x875BF6B8 peer_handle = 0x8000000A
.May 29 08:32:02.037: ISAKMP: Locking peer struct 0x875BF6B8, refcount 1 for isakmp_initiator
.May 29 08:32:02.037: ISAKMP: local port 500, remote port 500
.May 29 08:32:02.037: ISAKMP: set new node 0 to QM_IDLE
.May 29 08:32:02.037: ISAKMP: Find a dup sa in the avl tree during calling isadb_insert sa = 85C6B420
.May 29 08:32:02.037: ISAKMP:(0):Can not start Aggressive mode, trying Main mode.
.May 29 08:32:02.037: ISAKMP:(0):found peer pre-shared key matching <<central office WAN IP>>
.May 29 08:32:02.037: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID
.May 29 08:32:02.041: ISAKMP:(0): constructed NAT-T vendor-07 ID
.May 29 08:32:02.041: ISAKMP:(0): constructed NAT-T vendor-03 ID
.May 29 08:32:02.041: ISAKMP:(0): constructed NAT-T vendor-02 ID
.May 29 08:32:02.041: ISAKMP:(0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM
.May 29 08:32:02.041: ISAKMP:(0):Old State = IKE_READY New State = IKE_I_MM1.May 29 08:32:02.041: ISAKMP:(0): beginning Main Mode exchange
.May 29 08:32:02.041: ISAKMP:(0): sending packet to <<central office WAN IP>> my_port 500 peer_port 500 (I) MM_NO_STATE
.May 29 08:32:02.041: ISAKMP:(0):Sending an IKE IPv4 Packet.
.May 29 08:32:04.849: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:32:10.845: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:32:12.041: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
.May 29 08:32:12.041: ISAKMP (0): incrementing error counter on sa, attempt 1 of 5: retransmit phase 1
.May 29 08:32:12.041: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
.May 29 08:32:12.041: ISAKMP:(0): sending packet to <<central office WAN IP>> my_port 500 peer_port 500 (I) MM_NO_STATE
.May 29 08:32:12.041: ISAKMP:(0):Sending an IKE IPv4 Packet.
.May 29 08:32:16.845: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:32:22.041: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
.May 29 08:32:22.041: ISAKMP (0): incrementing error counter on sa, attempt 2 of 5: retransmit phase 1
.May 29 08:32:22.041: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
.May 29 08:32:22.041: ISAKMP:(0): sending packet to <<central office WAN IP>> my_port 500 peer_port 500 (I) MM_NO_STATE
.May 29 08:32:22.041: ISAKMP:(0):Sending an IKE IPv4 Packet.
.May 29 08:32:22.449: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:32:28.846: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:32:32.038: ISAKMP: set new node 0 to QM_IDLE
.May 29 08:32:32.038: ISAKMP:(0):SA is still budding. Attached new ipsec request to it. (local <<remote office WAN IP>>, remote <<central office WAN IP>>)
.May 29 08:32:32.038: ISAKMP: Error while processing SA request: Failed to initialize SA
.May 29 08:32:32.038: ISAKMP: Error while processing KMI message 0, error 2.
.May 29 08:32:32.042: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
.May 29 08:32:32.042: ISAKMP (0): incrementing error counter on sa, attempt 3 of 5: retransmit phase 1
.May 29 08:32:32.042: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
.May 29 08:32:32.042: ISAKMP:(0): sending packet to <<central office WAN IP>> my_port 500 peer_port 500 (I) MM_NO_STATE
.May 29 08:32:32.042: ISAKMP:(0):Sending an IKE IPv4 Packet.
.May 29 08:32:34.846: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:32:40.846: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:32:42.042: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
.May 29 08:32:42.042: ISAKMP (0): incrementing error counter on sa, attempt 4 of 5: retransmit phase 1
.May 29 08:32:42.042: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
.May 29 08:32:42.042: ISAKMP:(0): sending packet to <<central office WAN IP>> my_port 500 peer_port 500 (I) MM_NO_STATE
.May 29 08:32:42.042: ISAKMP:(0):Sending an IKE IPv4 Packet.
.May 29 08:32:46.846: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:32:50.018: ISAKMP:(0):purging node -118750948
.May 29 08:32:50.018: ISAKMP:(0):purging node -1193365643
.May 29 08:32:51.346: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=<<remote office WAN IP>>, prot=50, spi=0xCF8BD5F3(3482047987), srcaddr=<<central office WAN IP>>, input interface=Dialer1
.May 29 08:32:52.042: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
.May 29 08:32:52.042: ISAKMP (0): incrementing error counter on sa, attempt 5 of 5: retransmit phase 1
.May 29 08:32:52.042: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
.May 29 08:32:52.042: ISAKMP:(0): sending packet to <<central office WAN IP>> my_port 500 peer_port 500 (I) MM_NO_STATE
.May 29 08:32:52.042: ISAKMP:(0):Sending an IKE IPv4 Packet.
.May 29 08:32:52.846: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:32:58.847: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>
.May 29 08:33:00.019: ISAKMP:(0):purging SA., sa=875BE8B8, delme=875BE8B8
.May 29 08:33:02.043: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
.May 29 08:33:02.043: ISAKMP:(0):peer does not do paranoid keepalives..May 29 08:33:02.043: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (I) MM_NO_STATE (peer <<central office WAN IP>>)
.May 29 08:33:02.043: ISAKMP:(0):deleting SA reason "Death by retransmission P1" state (I) MM_NO_STATE (peer <<central office WAN IP>>)
.May 29 08:33:02.043: ISAKMP: Unlocking peer struct 0x875BF6B8 for isadb_mark_sa_deleted(), count 0
.May 29 08:33:02.043: ISAKMP: Deleting peer node by peer_reap for <<central office WAN IP>>: 875BF6B8
.May 29 08:33:02.043: ISAKMP:(0):deleting node 1839947115 error FALSE reason "IKE deleted"
.May 29 08:33:02.043: ISAKMP:(0):deleting node -1221586275 error FALSE reason "IKE deleted"
.May 29 08:33:02.043: ISAKMP:(0):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
.May 29 08:33:02.043: ISAKMP:(0):Old State = IKE_I_MM1 New State = IKE_DEST_SA.May 29 08:33:02.455: ISAKMP:(0): SA request profile is (NULL)
.May 29 08:33:02.455: ISAKMP: Created a peer struct for <<central office WAN IP>>, peer port 500
.May 29 08:33:02.455: ISAKMP: New peer created peer = 0x874792E0 peer_handle = 0x8000000B
.May 29 08:33:02.455: ISAKMP: Locking peer struct 0x874792E0, refcount 1 for isakmp_initiator
.May 29 08:33:02.455: ISAKMP: local port 500, remote port 500
.May 29 08:33:02.455: ISAKMP: set new node 0 to QM_IDLE
.May 29 08:33:02.455: ISAKMP: Find a dup sa in the avl tree during calling isadb_insert sa = 87060E68
.May 29 08:33:02.455: ISAKMP:(0):Can not start Aggressive mode, trying Main mode.
.May 29 08:33:02.455: ISAKMP:(0):found peer pre-shared key matching <<central office WAN IP>>
.May 29 08:33:02.455: ISAKMP:(0): constructed NAT-T vendor-rfc3947 ID
.May 29 08:33:02.455: ISAKMP:(0): constructed NAT-T vendor-07 ID
.May 29 08:33:02.455: ISAKMP:(0): constructed NAT-T vendor-03 ID
.May 29 08:33:02.455: ISAKMP:(0): constructed NAT-T vendor-02 ID
.May 29 08:33:02.455: ISAKMP:(0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM
.May 29 08:33:02.455: ISAKMP:(0):Old State = IKE_READY New State = IKE_I_MM1.May 29 08:33:02.455: ISAKMP:(0): beginning Main Mode exchange
.May 29 08:33:02.455: ISAKMP:(0): sending packet to <<central office WAN IP>> my_port 500 peer_port 500 (I) MM_NO_STATE
.May 29 08:33:02.455: ISAKMP:(0):Sending an IKE IPv4 Packet.
.May 29 08:33:04.847: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>ndebug crypto isakmp
.May 29 08:33:10.847: ISAKMP:(0): ignoring request to send delete notify (sa not authenticated) src <<remote office WAN IP>> dst <<central office WAN IP>>o debug crypto isakmp
Crypto ISAKMP debugging is off
IC-Deutschland#
.May 29 08:33:12.455: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE...
.May 29 08:33:12.455: ISAKMP (0): incrementing error counter on sa, attempt 1 of 5: retransmit phase 1
.May 29 08:33:12.455: ISAKMP:(0): retransmitting phase 1 MM_NO_STATE
.May 29 08:33:12.455: ISAKMP:(0): sending packet to <<central office WAN IP>> my_port 500 peer_port 500 (I) MM_NO_STATE
.May 29 08:33:12.455: ISAKMP:(0):Sending an IKE IPv4 Packet.
Can anyone shed some light as what could be going on?
Much obliged!Unfortunately I do not have a support contract for our hardware. I wouldn't even know how to get one.
However, we do pay top dollar for the equipment and it seems one it's components doesn't work as advertised. So if no support is given I will have to try warrenty instead. This does mean I have to replace the unit with a competitor brand which isn't something I'm keen to do because I want to use Cisco as our main brand. This issue effectively nukes my entire plan.
Given our work load, CPU power isn't an issue. The encryption level is set to this level because I'm paranoid. Which I reckon is a good thing when it comes to network security (correct me if I'm wrong). Do you suspect these settings could be of any influence in this particular case?
If I remember correctly I used the "debug crypto isakmp" or "debug crypto isakmp errors" and "debug crypto ipsec" (also perhaps with the "error" suffix), I'm not sure. -
S2S VPN Dropping GroupWise Connection
We have a S2S vpn between two BM 3.8.4 servers. At the remote site, the
user has a full GroupWise 7.0.2 client running in caching mode, which
connects to the post office at the home site. Everything will work fine
for about 4 hours, then the GW client will fail to connect. The only way
to recover is to reboot the client system. While the GW client will not
connect, all other services through the tunnel work fine. The servers
never lose contact, and I can even remote the system in question while it
can't connect to GW.
There is nothing scheduled to run every 4 hours on the system or the
servers. The NIC is not set to power off. We sent another system to the
remote site, and brought his back here. The new system at the remote site
does the same thing, but the old system connected to the post
office locally without going through the vpn stays connected.
I looked at the old (2004) post from Craig about making sure the connection
can be initiated from both sides, and it can. Am I missing something?
TIAIn article <f6Fkk.13632$[email protected]>, Randall Diekmeyer
wrote:
> It seems to happen every four hours. Would a packet capture from the BM
> server do? That would save me from a 10 hr round trip. :-)
>
That's hard to say. Capturing packets might just get you a bunch of
encrypted traffic and miss what is going on at the client. Wouldn't hurt
though.
Why not try to remote into the problem PC and install wireshark, and then
use it remotely? Either RDP, or VNC. You'll have to filter out the remote
control traffic, and probably other stuff as well, but you will at least
see what is happening where it is important.
Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to http://www.craigjconsulting.com *** -
Fails to connect, forgets password
I have a 2G Touch with 3.1.1 software. This problem was happening before the 3.1.1 upgrade, but does seem to be happening a bit more frequently since.
There are several Wi-Fi networks I connect to regularly, but have a problem with only one. That is the one at my office, which uses an older D-Link router. It's not unusual to have to try a couple of times before connecting, and I blame the router for that. However, sometimes when it fails to connect, the iPod then seems to forget the password. That is, the connection fails and when I try again, it asks for the password. That works, and it continues to work on subsequent tries until a day or two later when it fails and demands the password again.
Not much I can do about the router, but it seems to me that the iPod should remember the password, even after a failed connection. I've tried resetting the network settings, restarting the iPod, forgetting the network and re-entering it. Nothing improves the problem.
Any suggestions?Similar issue has hsppen to my 2 gen itouch after 3.1.1 update. If the ssid is not broadcasted, itouch wont remember the network name.
Network at work, the ssid is not broadcasted and there is no password for the network. Every time after I put itouch to sleep, I will need to enter the network name again when I turn on the itouch. The 1st gen itouch without 3.1.1 update doesn't require me input the network name over and over.
Just tested the home network. Everything works fine if I have ssid broadcasted. Once I hide the ssid, itouch wont pick up the network at all until I manually type in the network name. It also forgets the password as well just like what posthocergopropterhoc had mentioned.
I am very positive that firmware 2.2.2 does pick up hidden ssid once it has been entered once. However, I will double check again with my friend's itouch again tomorrow and post the confirmation.
I am not sure if Apple purposely design 3.1.1 upgrade to act this way, but its for sure very inconvenient. Especially when it says on itouch network interface that "Known networks will be joined automatically". I do consider I know my own network even if the ssid is hidden for privacy reason.
Message was edited by: WonderingPisces -
VPN fails for iOS and Android devices
L2TP and PPTP VPN set up on OS X Server 3.0 fails when connection is made from iOS or Android device. When connecting from a MacBook Air running Maverick it all works fine. Exact same client settings are done on iOS and OS X.
When connecting from OS X, Server VPN log shows all the details. But when trying to connect from iOS and even from my Android, there is not a single entry in the Server logs that anything even reaches the server.
I checked using TCPMon and using PPTP and was clearly showing that packages were forwarded to the server. But still nothing showed in the log.It's a known bug and will be fixed with 10.9.1 according to the Apple support.
-
My office is setting up a new gateway server. I can connect to the old one just fine, but the new one is not allowing me to connect. I can connect from my Windows VM, but not my Mac Client.
This is the log:
2014-Nov-26 16:09:10] RDP (0): Final rdp configuration used: gatewayhostname:s:gat1.gibbscam.com
screen mode id:i:0
use multimon:i:0
session bpp:i:24
full address:s:dev-JeremyS2.gibbs.local
audiomode:i:2
username:s:Gibbs\JeremyS
disable wallpaper:i:0
disable full window drag:i:0
disable menu anims:i:0
disable themes:i:0
alternate shell:s:
shell working directory:s:
authentication level:i:2
connect to console:i:0
gatewayusagemethod:i:1
disable cursor setting:i:0
allow font smoothing:i:1
allow desktop com"font-family:Helvetica;line-height:normal;" />redirectprinters:i:0
bookmarktype:i:3
use redirection server name:i:0
[2014-Nov-26 16:09:10] RDP (0): --- BEGIN INTERFACE LIST ---
[2014-Nov-26 16:09:10] RDP (0): lo0 af=18 addr= netmask=
[2014-Nov-26 16:09:10] RDP (0): lo0 af=30 (AF_INET6) addr=::1 netmask=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
[2014-Nov-26 16:09:10] RDP (0): lo0 af=2 (AF_INET) addr=127.0.0.1 netmask=255.0.0.0
[2014-Nov-26 16:09:10] RDP (0): lo0 af=30 (AF_INET6) addr=fe80::1%lo0 netmask=ffff:ffff:ffff:ffff::
[2014-Nov-26 16:09:10] RDP (0): gif0 af=18 addr= netmask=
[2014-Nov-26 16:09:10] RDP (0): stf0 af=18 addr= netmask=
[2014-Nov-26 16:09:10] RDP (0): en0 af=18 addr= netmask=
[2014-Nov-26 16:09:10] RDP (0): en1 af=18 addr= netmask=
[2014-Nov-26 16:09:10] RDP (0): en1 af=30 (AF_INET6) addr=fe80::1240:f3ff:fe97:e0b2%en1 netmask=ffff:ffff:ffff:ffff::
[2014-Nov-26 16:09:10] RDP (0): en1 af=2 (AF_INET) addr=192.168.0.5 netmask=255.255.255.0
[2014-Nov-26 16:09:10] RDP (0): en1 af=30 (AF_INET6) addr=2605:e000:63c2:f800:1240:f3ff:fe97:e0b2 netmask=ffff:ffff:ffff:ffff::
[2014-Nov-26 16:09:10] RDP (0): en1 af=30 (AF_INET6) addr=2605:e000:63c2:f800:65fb:7056:64eb:4363 netmask=ffff:ffff:ffff:ffff::
[2014-Nov-26 16:09:10] RDP (0): fw0 af=18 addr= netmask=
[2014-Nov-26 16:09:10] RDP (0): en2 af=18 addr= netmask=
[2014-Nov-26 16:09:10] RDP (0): p2p0 af=18 addr= netmask=
[2014-Nov-26 16:09:10] RDP (0): bridge0 af=18 addr= netmask=
[2014-Nov-26 16:09:10] RDP (0): utun0 af=18 addr= netmask=
[2014-Nov-26 16:09:10] RDP (0): utun0 af=30 (AF_INET6) addr=fe80::ec38:250a:2a5d:3618%utun0 netmask=ffff:ffff:ffff:ffff::
[2014-Nov-26 16:09:10] RDP (0): utun0 af=30 (AF_INET6) addr=fd68:4c46:7658:e98e:ec38:250a:2a5d:3618 netmask=ffff:ffff:ffff:ffff::
[2014-Nov-26 16:09:10] RDP (0): --- END INTERFACE LIST ---
[2014-Nov-26 16:09:10] RDP (0): correlation id: d8afdeb7-ce3a-ceff-a6e8-51a5d5b40000
[2014-Nov-26 16:09:10] RDP (0): Protocol state changed to: ProtocolConnectingNetwork(1)
[2014-Nov-26 16:09:15] RDP (0): Exception caught: Exception in file '../../librdpclient/asiosocketendpoint.cpp' at line 521
User Message : Unable to connect to remote PC. Please provide the fully-qualified name or the IP address of the remote
PC, and then try again.
[2014-Nov-26 16:09:15] RDP (0): Protocol state changed to: ProtocolDisconnecting(7)
[2014-Nov-26 16:09:15] RDP (0): Protocol state changed to: ProtocolDisconnected(8)
[2014-Nov-26 16:09:15] RDP (0): ------ END ACTIVE CONNECTION ------
[2014-Nov-26 16:09:15] RDP (0): --- BEGIN INTERFACE LIST ---
[2014-Nov-26 16:09:15] RDP (0): lo0 af=18 addr= netmask=
[2014-Nov-26 16:09:15] RDP (0): lo0 af=30 (AF_INET6) addr=::1 netmask=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
[2014-Nov-26 16:09:15] RDP (0): lo0 af=2 (AF_INET) addr=127.0.0.1 netmask=255.0.0.0
[2014-Nov-26 16:09:15] RDP (0): lo0 af=30 (AF_INET6) addr=fe80::1%lo0 netmask=ffff:ffff:ffff:ffff::
[2014-Nov-26 16:09:15] RDP (0): gif0 af=18 addr= netmask=
[2014-Nov-26 16:09:15] RDP (0): stf0 af=18 addr= netmask=
[2014-Nov-26 16:09:15] RDP (0): en0 af=18 addr= netmask=
[2014-Nov-26 16:09:15] RDP (0): en1 af=18 addr= netmask=
[2014-Nov-26 16:09:15] RDP (0): en1 af=30 (AF_INET6) addr=fe80::1240:f3ff:fe97:e0b2%en1 netmask=ffff:ffff:ffff:ffff::
[2014-Nov-26 16:09:15] RDP (0): en1 af=2 (AF_INET) addr=192.168.0.5 netmask=255.255.255.0
[2014-Nov-26 16:09:15] RDP (0): en1 af=30 (AF_INET6) addr=2605:e000:63c2:f800:1240:f3ff:fe97:e0b2 netmask=ffff:ffff:ffff:ffff::
[2014-Nov-26 16:09:15] RDP (0): en1 af=30 (AF_INET6) addr=2605:e000:63c2:f800:65fb:7056:64eb:4363 netmask=ffff:ffff:ffff:ffff::
[2014-Nov-26 16:09:15] RDP (0): fw0 af=18 addr= netmask=
[2014-Nov-26 16:09:15] RDP (0): en2 af=18 addr= netmask=
[2014-Nov-26 16:09:15] RDP (0): p2p0 af=18 addr= netmask=
[2014-Nov-26 16:09:15] RDP (0): bridge0 af=18 addr= netmask=
[2014-Nov-26 16:09:15] RDP (0): utun0 af=18 addr= netmask=
[2014-Nov-26 16:09:15] RDP (0): utun0 af=30 (AF_INET6) addr=fe80::ec38:250a:2a5d:3618%utun0 netmask=ffff:ffff:ffff:ffff::
[2014-Nov-26 16:09:15] RDP (0): utun0 af=30 (AF_INET6) addr=fd68:4c46:7658:e98e:ec38:250a:2a5d:3618 netmask=ffff:ffff:ffff:ffff::
[2014-Nov-26 16:09:15] RDP (0): --- END INTERFACE LIST ---
[2014-Nov-26 16:09:15] RDP (0): correlation id: 3d81bcf6-8d0e-fba8-b75e-bd2a247c0000
[2014-Nov-26 16:09:15] RDP (0): Protocol state changed to: ProtocolConnectingNetwork(1)
[2014-Nov-26 16:09:15] RDP (0): Resolved 'gat1.gibbscam.com' to '12.167.61.34' using NameResolveMethod_DNS(1)
[2014-Nov-26 16:09:15] RDP (0): Resolved 'gat1.gibbscam.com' to '12.167.61.34' using NameResolveMethod_DNS(1)
[2014-Nov-26 16:09:15] RDP (0): Exception caught: Exception in file '../../librdp/private/httpendpoint.cpp' at line 305
User Message : HTTPEndpointException: 4, The non-proxy http connection failed to connect with the message: 404 Not
Found
[2014-Nov-26 16:09:15] RDP (0): Protocol state changed to: ProtocolDisconnecting(7)
[2014-Nov-26 16:09:15] RDP (0): Protocol state changed to: ProtocolDisconnected(8)
[2014-Nov-26 16:09:16] RDP (0): ------ END ACTIVE CONNECTION ------
And here's a log for server that I can connect to:
[2014-Nov-26 15:52:20] RDP (0): Final rdp configuration used: gatewayhostname:s:gato.gibbscam.com
screen mode id:i:0
use multimon:i:1
session bpp:i:24
full address:s:dev-JeremyS2.gibbs.local
audiomode:i:2
username:s:Gibbs\JeremyS
disable wallpaper:i:0
disable full window drag:i:0
disable menu anims:i:0
disable themes:i:0
alternate shell:s:
shell working directory:s:
authentication level:i:2
connect to console:i:0
gatewayusagemethod:i:1
disable cursor setting:i:0
allow font smoothing:i:1
allow desktop com"font-family:Helvetica;line-height:normal;" />redirectprinters:i:0
bookmarktype:i:3
use redirection server name:i:0
[2014-Nov-26 15:52:20] RDP (0): --- BEGIN INTERFACE LIST ---
[2014-Nov-26 15:52:20] RDP (0): lo0 af=18 addr= netmask=
[2014-Nov-26 15:52:20] RDP (0): lo0 af=30 (AF_INET6) addr=::1 netmask=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
[2014-Nov-26 15:52:20] RDP (0): lo0 af=2 (AF_INET) addr=127.0.0.1 netmask=255.0.0.0
[2014-Nov-26 15:52:20] RDP (0): lo0 af=30 (AF_INET6) addr=fe80::1%lo0 netmask=ffff:ffff:ffff:ffff::
[2014-Nov-26 15:52:20] RDP (0): gif0 af=18 addr= netmask=
[2014-Nov-26 15:52:20] RDP (0): stf0 af=18 addr= netmask=
[2014-Nov-26 15:52:20] RDP (0): en0 af=18 addr= netmask=
[2014-Nov-26 15:52:20] RDP (0): en1 af=18 addr= netmask=
[2014-Nov-26 15:52:20] RDP (0): en1 af=30 (AF_INET6) addr=fe80::1240:f3ff:fe97:e0b2%en1 netmask=ffff:ffff:ffff:ffff::
[2014-Nov-26 15:52:20] RDP (0): en1 af=30 (AF_INET6) addr=2605:e000:63c2:f800:1240:f3ff:fe97:e0b2 netmask=ffff:ffff:ffff:ffff::
[2014-Nov-26 15:52:20] RDP (0): en1 af=30 (AF_INET6) addr=2605:e000:63c2:f800:d111:af1b:b193:8d4e netmask=ffff:ffff:ffff:ffff::
[2014-Nov-26 15:52:20] RDP (0): en1 af=2 (AF_INET) addr=192.168.0.5 netmask=255.255.255.0
[2014-Nov-26 15:52:20] RDP (0): fw0 af=18 addr= netmask=
[2014-Nov-26 15:52:20] RDP (0): en2 af=18 addr= netmask=
[2014-Nov-26 15:52:20] RDP (0): p2p0 af=18 addr= netmask=
[2014-Nov-26 15:52:20] RDP (0): bridge0 af=18 addr= netmask=
[2014-Nov-26 15:52:20] RDP (0): utun0 af=18 addr= netmask=
[2014-Nov-26 15:52:20] RDP (0): utun0 af=30 (AF_INET6) addr=fe80::ec38:250a:2a5d:3618%utun0 netmask=ffff:ffff:ffff:ffff::
[2014-Nov-26 15:52:20] RDP (0): utun0 af=30 (AF_INET6) addr=fd68:4c46:7658:e98e:ec38:250a:2a5d:3618 netmask=ffff:ffff:ffff:ffff::
[2014-Nov-26 15:52:20] RDP (0): --- END INTERFACE LIST ---
[2014-Nov-26 15:52:20] RDP (0): correlation id: 3bea4411-4b23-c197-9b52-63f948a10000
[2014-Nov-26 15:52:20] RDP (0): Protocol state changed to: ProtocolConnectingNetwork(1)
[2014-Nov-26 15:52:25] RDP (0): Exception caught: Exception in file '../../librdpclient/asiosocketendpoint.cpp' at line 521
User Message : Unable to connect to remote PC. Please provide the fully-qualified name or the IP address of the remote
PC, and then try again.
[2014-Nov-26 15:52:25] RDP (0): Protocol state changed to: ProtocolDisconnecting(7)
[2014-Nov-26 15:52:25] RDP (0): Protocol state changed to: ProtocolDisconnected(8)
[2014-Nov-26 15:52:25] RDP (0): ------ END ACTIVE CONNECTION ------
[2014-Nov-26 15:52:25] RDP (0): --- BEGIN INTERFACE LIST ---
[2014-Nov-26 15:52:25] RDP (0): lo0 af=18 addr= netmask=
[2014-Nov-26 15:52:25] RDP (0): lo0 af=30 (AF_INET6) addr=::1 netmask=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
[2014-Nov-26 15:52:25] RDP (0): lo0 af=2 (AF_INET) addr=127.0.0.1 netmask=255.0.0.0
[2014-Nov-26 15:52:25] RDP (0): lo0 af=30 (AF_INET6) addr=fe80::1%lo0 netmask=ffff:ffff:ffff:ffff::
[2014-Nov-26 15:52:25] RDP (0): gif0 af=18 addr= netmask=
[2014-Nov-26 15:52:25] RDP (0): stf0 af=18 addr= netmask=
[2014-Nov-26 15:52:25] RDP (0): en0 af=18 addr= netmask=
[2014-Nov-26 15:52:25] RDP (0): en1 af=18 addr= netmask=
[2014-Nov-26 15:52:25] RDP (0): en1 af=30 (AF_INET6) addr=fe80::1240:f3ff:fe97:e0b2%en1 netmask=ffff:ffff:ffff:ffff::
[2014-Nov-26 15:52:25] RDP (0): en1 af=30 (AF_INET6) addr=2605:e000:63c2:f800:1240:f3ff:fe97:e0b2 netmask=ffff:ffff:ffff:ffff::
[2014-Nov-26 15:52:25] RDP (0): en1 af=30 (AF_INET6) addr=2605:e000:63c2:f800:d111:af1b:b193:8d4e netmask=ffff:ffff:ffff:ffff::
[2014-Nov-26 15:52:25] RDP (0): en1 af=2 (AF_INET) addr=192.168.0.5 netmask=255.255.255.0
[2014-Nov-26 15:52:25] RDP (0): fw0 af=18 addr= netmask=
[2014-Nov-26 15:52:25] RDP (0): en2 af=18 addr= netmask=
[2014-Nov-26 15:52:25] RDP (0): p2p0 af=18 addr= netmask=
[2014-Nov-26 15:52:25] RDP (0): bridge0 af=18 addr= netmask=
[2014-Nov-26 15:52:25] RDP (0): utun0 af=18 addr= netmask=
[2014-Nov-26 15:52:25] RDP (0): utun0 af=30 (AF_INET6) addr=fe80::ec38:250a:2a5d:3618%utun0 netmask=ffff:ffff:ffff:ffff::
[2014-Nov-26 15:52:25] RDP (0): utun0 af=30 (AF_INET6) addr=fd68:4c46:7658:e98e:ec38:250a:2a5d:3618 netmask=ffff:ffff:ffff:ffff::
[2014-Nov-26 15:52:25] RDP (0): --- END INTERFACE LIST ---
[2014-Nov-26 15:52:26] RDP (0): correlation id: 509122b5-d9b1-60f0-a0ac-b75a8dc20000
[2014-Nov-26 15:52:26] RDP (0): Protocol state changed to: ProtocolConnectingNetwork(1)
[2014-Nov-26 15:52:26] RDP (0): Resolved 'gato.gibbscam.com' to '12.167.61.35' using NameResolveMethod_DNS(1)
[2014-Nov-26 15:52:26] RDP (0): Resolved 'gato.gibbscam.com' to '12.167.61.35' using NameResolveMethod_DNS(1)
[2014-Nov-26 15:52:26] RDP (0): Protocol state changed to: ProtocolNegotiatingCredentials(2)
[2014-Nov-26 15:52:27] RDP (0): Protocol state changed to: ProtocolConnectingRDP(3)
[2014-Nov-26 15:52:27] RDP (0): Protocol state changed to: ProtocolInactive(4)
[2014-Nov-26 15:52:28] RDP (0): Server supports RAIL
[2014-Nov-26 15:52:28] RDP (0): Protocol state changed to: ProtocolActive(5)
[2014-Nov-26 15:52:29] RDP (0): Server hides cursor
[2014-Nov-26 15:52:31] RDP (0): Server shows cursor
[2014-Nov-26 15:52:35] RDP (0): Protocol state changed to: ProtocolDisconnecting(7)
[2014-Nov-26 15:52:35] RDP (0): Protocol state changed to: ProtocolDisconnected(8)
[2014-Nov-26 15:52:35] RDP (0): ------ END ACTIVE CONNECTION ------
Any suggestions on what I can ask my IT department to change on the server so I can connect would be greatly appreciated.Hi Jeremy,
Thank you for posting in Windows Server Forum.
From the error and other description it seems that there is some misconfiguration with setup. You need to provide the FQDN name of the server as might server name is not resolving its name properly and so facing issue. As seems from below details:
[2014-Nov-26 15:52:20] RDP (0): Final rdp configuration used:gatewayhostname:s:gato.gibbscam.com
screen mode id:i:0
use multimon:i:1
session bpp:i:24
full address:s:dev-JeremyS2.gibbs.local
Configuration used and full address name both appears different so please verify configuration accordingly.
Please check the DNS record, check certificate whether it match FQDN name of the server with certificate name, also try to check to connect with IP address and see what result you can find.
You can follow below guide to configure RD Gateway and after that verify the result.
1. Deploying Remote Desktop Gateway RDS 2012
2. How To Work with RD Gateway in Windows Server 2012
Hope it helps!
Thanks.
Dharmesh Solanki
TechNet Community Support -
Verification failed cannot connect to icloud
Trying to erase and reset my iPhone 5 (since I have activated an iPhone 6) and cannot get past the 'verification failed, cannot connect to iCloud'. I've been receiving the same message for 5 days.
Hello kmb1727,
To start with troubleshooting this issue where you are getting the error "Verification failed, cannot connect to iCloud," I'd like you to please go into your iPhone settings, and reset the network settings. After that, please try to erase your iPhone.
Reset iPhone settings. Go to Settings > General > Reset, then choose an option:
Reset Network Settings: When you reset network settings, previously used networks and VPN settings that weren’t installed by a configuration profile are removed. (To remove VPN settings installed by a configuration profile, go to Settings > General > Profile, select the profile, then tap Remove. This also removes other settings or accounts provided by the profile.) Wi-Fi is turned off and then back on, disconnecting you from any network you’re on. The Wi-Fi and “Ask to Join Networks” settings remain turned on.
Reset iPhone settings - iPhone
Thanks for using the Apple Support Communities!
Cheers,
Alex H. -
I have been getting the error below on a regular basis when attempting to import Excel, Text, or Access files.
I'm running Office 2010 (SP1), and PowerPivot (SP1). After reading a similar thread I reinstalled PowerPivot. It worked until I closed Excel. Now it recuses to allow import or update of these files. I really need it to work. Anyone have an solution or even
something to try - other than uninstalling and reinstalling PowerPiviot everytime I need to import or refresh files?
Thanks,
============================
Error Message:
============================
Unspecified error
Failed to connect to the server. Reason: Unspecified error
============================
Call Stack:
============================
at System.Data.OleDb.OleDbConnectionInternal..ctor(OleDbConnectionString constr, OleDbConnection connection)
at System.Data.OleDb.OleDbConnectionFactory.CreateConnection(DbConnectionOptions options, DbConnectionPoolKey poolKey, Object poolGroupProviderInfo, DbConnectionPool pool, DbConnection owningObject)
at System.Data.ProviderBase.DbConnectionFactory.CreateConnection(DbConnectionOptions options, DbConnectionPoolKey poolKey, Object poolGroupProviderInfo, DbConnectionPool pool, DbConnection owningConnection, DbConnectionOptions userOptions)
at System.Data.ProviderBase.DbConnectionFactory.CreateNonPooledConnection(DbConnection owningConnection, DbConnectionPoolGroup poolGroup, DbConnectionOptions userOptions)
at System.Data.ProviderBase.DbConnectionFactory.TryGetConnection(DbConnection owningConnection, TaskCompletionSource`1 retry, DbConnectionOptions userOptions, DbConnectionInternal& connection)
at System.Data.ProviderBase.DbConnectionClosed.TryOpenConnection(DbConnection outerConnection, DbConnectionFactory connectionFactory, TaskCompletionSource`1 retry, DbConnectionOptions userOptions)
at System.Data.ProviderBase.DbConnectionInternal.OpenConnection(DbConnection outerConnection, DbConnectionFactory connectionFactory)
at System.Data.OleDb.OleDbConnection.Open()
at Microsoft.AnalysisServices.BackEnd.RelationalDataSourceConnection.InitializeConnectionObject(String connectionIdentifier)
at Microsoft.AnalysisServices.BackEnd.RelationalDataSourceConnection.InitializeConnectionObject(String connectionIdentifier)
at Microsoft.AnalysisServices.BackEnd.RelationalDataSourceConnection.Open(String& connectionIdentifier)
at Microsoft.AnalysisServices.BackEnd.RelationalDataSourceConnection.Open()
at Microsoft.AnalysisServices.Common.DataSourceBasic.TestConnection()
at Microsoft.AnalysisServices.Common.DataSourceBasic.ClickTestConnection(Object progressControl)
============================Hi San,
What's the version of your PowerPivot? Please refer to the article to check the version of PowerPivot for Excel:
http://powerpivot-info.com/post/89-q-how-can-i-check-what-version-of-powerpivot-for-excel-is-installed-on-my-machine
We can download the latest PowerPivot for Excel version from:
http://www.microsoft.com/en-us/download/details.aspx?id=29074
In addition, please help to collect windows events log information to us for further investigation. If you cann't import Excel, TEXT or Access data into PowerPivot data model, you can try to directly copy your data into it.
Regards,
Elvis Long
TechNet Community Support -
Failed to connect to OLAP Service
I create a demo cube with two dimensions. When I try connect from Excel I get the following error:
(it is very strange because my schema is DWH and not D_DWH)
Failed to connect to OLAP Service
oracle.olapi.metadata.DuplicateMetadataIDException: D_DWH.D_TIME
at
oracle.olapi.metadata.BaseMetadataProvider.registerMetadataObject(BaseMetadataProvider.java:331)
at
oracle.olapi.metadata.BaseMetadataObjectFactory.registerObject(BaseMetadataObjectFactory.java:73)
at
oracle.olapi.metadata.mdm.MdmObjectFactory.createStandardDimension(MdmObjectFactory.java:110)
at
oracle.olapi.metadata.MdmXMLReaderObjectFactory.createMetadataObject(MdmXMLReaderObjectFactory.java:48)
at
oracle.olapi.metadata.MetadataXMLReaderElementState.enter(MetadataXMLReaderElementState.java:69)
at
oracle.olapi.metadata.MetadataXMLReader.startElement(MetadataXMLReader.java:159)
at
org.xml.sax.helpers.ParserAdapter.startElement(ParserAdapter.java:597)
at
oracle.xml.parser.v2.XMLContentHandler.startElement(XMLContentHandler.java:180)
at
oracle.xml.parser.v2.NonValidatingParser.parseElement(NonValidatingParser.java:1224)
at
oracle.xml.parser.v2.NonValidatingParser.parseRootElement(NonValidatingParser.java:311)
at
oracle.xml.parser.v2.NonValidatingParser.parseDocument(NonValidatingParser.java:278)
at oracle.xml.parser.v2.XMLParser.parse(XMLParser.java:184)
at org.xml.sax.helpers.ParserAdapter.parse(ParserAdapter.java:431)
at
oracle.olapi.metadata.MetadataFetcher.processXML(MetadataFetcher.java:224)
at
oracle.olapi.metadata.MetadataFetcher.fetchBaseMetadataObjects(MetadataFetcher.java:179)
at
oracle.olapi.metadata.BaseMetadataProvider.fetchMetadataObject(BaseMetadataProvider.java:154)
at
oracle.olapi.metadata.BaseMetadataProvider.fetchMetadataObject(BaseMetadataProvider.java:109)
at
oracle.olapi.metadata.mdm.MdmMetadataProvider.getMetadataObject(MdmMetadataProvider.java:169)
at
oracle.olapi.metadata.mdm.MdmMetadataProvider.getRootSchema(MdmMetadataProvider.java:196)
at
oracle.express.mdm.MdmMetadataProvider.getRootSchema(MdmMetadataProvider.java:133)
at
oracle.dss.metadataManager.server.drivers.mdm._92.MDMMetadataDriverImpl_92.getMdmSchema(MDMMetadataDriverImpl_92.java:1449)
at
oracle.dss.metadataManager.server.drivers.mdm._92.MDMMetadataDriverImpl_92.getRoot(MDMMetadataDriverImpl_92.java:1110)
at
oracle.dss.metadataManager.server.drivers.mdm._92.MDMMetadataDriverImpl_92.addToObjectModel(MDMMetadataDriverImpl_92.java:2511)
at
oracle.dss.metadataManager.server.drivers.mdm.MDMMetadataDriverImpl.addToObjectModel(MDMMetadataDriverImpl.java:280)
at
oracle.dss.metadataManager.server.MetadataManagerImpl.buildObjectModel(MetadataManagerImpl.java:1198)
at
oracle.dss.metadataManager.server.MetadataManagerImpl.attach(MetadataManagerImpl.java:1027)
at
oracle.dss.metadataManager.client.MetadataManager.attach(MetadataManager.java:943)
at
oracle.dss.metadataManager.client.MetadataManager.attach(MetadataManager.java:840)
at
oracle.dss.xladdin.bibeans.oraolapxl.ConHandler.populateConLink(ConHandler.java:1003)
at
oracle.dss.xladdin.bibeans.oraolapxl.ConHandler.connect2(ConHandler.java:312)
at
oracle.dss.xladdin.bibeans.oraolapxl.ConHandler.connect(ConHandler.java:178)
at oracle.dss.xladdin.bibeans.oraolapxl.Core.connect(Core.java:467)
at
oracle.dss.xladdin.bibeans.oraolapxl.XLQuery.connectToServer(XLQuery.java:836)
at oracle.dss.xladdin.bibeans.oraolapxl.Editor.edit2(Editor.java:203)
at oracle.dss.xladdin.bibeans.oraolapxl.Editor.edit(Editor.java:128)
at
oracle.dss.xladdin.bibeans.oraolapxl.XLQuery.editQuery(XLQuery.java:417)
at
oracle.dss.xladdin.bibeans.oraolapxl.XLQuery.editQuery(XLQuery.java:400)
at
oracle.dss.xladdin.bibeans.oraolapxl.XLQuery.newQuery(XLQuery.java:544)
at oracle.dss.xladdin.bibeans.oraolapxl.XLQM.newQuery(XLQM.java:4254)
at oracle.dss.xladdin.bibeans.oraolapxl.XLQM.onMenuEvent(XLQM.java:895)
at
oracle.dss.xladdin.bibeans.oraolapxl.OraMenu.fireMenuEvent(OraMenu.java:146)
at
oracle.dss.xladdin.bibeans.oraolapxl.Core.fireMenuEvent(Core.java:825)
About my configurations:
=> Database: Oracle 10g (patchset 10.1.0.4)
=> Oracle Analytic Worksapace Manager Version 10.0.0.1.0
=> Oracle Enterprise Manager 10g Grid Control Release 10.1.0.3.0
Supported Target Databases 10.1.0.x
9.2.0.4
9.0.1.4
8.1.7.4
Supported Target Application Servers 9.0.4.x
9.0.3.x
9.0.2.x
Accessibility Mode Disabled
=> Microsoft Office Excel 2003(11.5612.5606)
=> OracleBI Spreadshet Add-In - Release 1 version 10.1.2.0.0
I need some help.OK. First off, the D_DWH is correct in the referencing of your AW. The reference that you are seeing is the metadata manager definition of the analytic workspace. It appends the D_ by default.
An excerpt and some code from the online help...
Most classes that extend oracle.dss.metadataManager.common.MDObject are client-side representations of objects that exist in an analytic workspace. To find the analytic workspace name for an object, use the following methods of MDObject: isAWObject -- Determines whether an object is a logical representation of an analytic workspace data object getAWObjectName -- Retrieves the analytic workspace name for an object Example: Retrieving the analytic workspace name for an object The following code assumes that myObject is an existing MDObject. //Confirms that an MDObject is a logical representation of
//an analytic workspace object and then prints the object's name.
public void printAWObjectName (MDObject myObject)
if (myObject.isAWObject())
system.out.println ("AWObjectName = " +
myObject.getAWObjectName());
That being said, here is the trick to verifying the internal metadata name for the AW objects.
Knowing this, I'm going to guess that naming your dimension D_TIME may not be the best idea as this may confuse the MDM. Rename the dimension and give it another shot. -
My work place has switched to a new Firewall and of course it's not compatible with my VPN Tracker software that I use at home. Grrrr...stupid PC networks!!
Anyway...without having to go into my Terminal (which scares the crap out of me) and mess with that, I'd love to use the VPN access via the Internet Connection application. Far more user friendly.
I entered all the correct and appropriate info that was given to me by our administrator (server address, ect), but it's giving me an error.
QUESTION: Does something ELSE need to be running on my MAC for the VPN option to be working correctly?
I'm running Tiger on my eMac. I have a cable modem connection via Airport.I rebooted and all seems to be okay. Both our MACs connected to the internet just fine. So I think I'm okay. No harm. Although I'm too tired and frustrated to be playing with this probably! LOL Frustrated that our so-called administrator at work is so afraid of MACs. But I don't want him coming to my house and screwing up my MAC and Network here!
But when you said I had to open up a Port, wouldn't that require some kind of set up in Network Preferences? It makes sense that I'd need a new portal to connect, but I didn't used to have to before. I had a main portal (IP address) to my office, then I was able to connect to the other servers once that connection was made.
I'm using that main IP address to try and connect via the VPN in Internet Connection, but no luck. I have the Share Secret, and account name and password all set up, so I don't know what i'm doing wrong at this point. Everything used to work great via VPN Tracker, so I'm even more upset he didn't ask me if that software program was compatible with the new FireWire they installed.
Oh, well! I'll keep trying.
Thanks,
H
Maybe you are looking for
-
I have 2 iPads with the same Apple account name. How do I set up one with a different Apple name?
-
Having "upgraded" to Mavericks, I'm totally dissatisfied with it. Several things are missing that were useful on the old OSX that I had before, e.g, in Mail, there is no indication that mail is being downloaded. Also, my version of Dreamweaver won't
-
How do I install Ubuntu on Mac?
I was wondering about Ubuntu and learning more about it. I used Boot Camp once to install Windows 7 Ultimate, but I wasn't satisfied with Windows 7, so I removed it. I thought Windows 7 was really boring and I missed many of the games included with X
-
Cannot Create Runtime Systems in Landscape Configurator
Hi All, I'm not able to save runtime system information. When i do 'Save' or 'Save and Restore' I get the following error or trace. communication error: Error during servlet communication / configuartion failed: <?xml version="1.0" encoding="UTF-8"?>
-
I've looked everywhere and cant find the file. Its the first time I've ever downloaded a movie from iTunes and thus far... its been a nightmare. Please help!