[vpn-help] negotiation timeout

[Kevin VPN]

On 05/03/2013 03:09 AM, Alan Johnson wrote:
> Windows 7 Starter (32bits of course) - Wireless connection ( No Virtual
> WiFi that I can find )
>

<snip>

>
> The cisco vpn client that I use has ZERO issues connecting to Client B.
> Shrewsoft times out.
>
> I realize that the settings for Client A and Client B are very
> different, but I can not get Client A firewall to even acknowledge that
> it is receiving requests.  So I decided to try against known-working vpn
> server.  no joy.
>

<snip>

> 13/05/03 02:53:03 -> : send IKE packet 192.168.1.100:500 ->
> 209.115.50.18:500 ( 1193 bytes )
> 13/05/03 02:53:03 DB : phase1 resend event scheduled ( ref count = 2 )
> 13/05/03 02:53:03 DB : phase1 ref decrement ( ref count = 1, obj count =
> 1 )
> 13/05/03 02:53:08 -> : resend 1 phase1 packet(s) [0/2] 192.168.1.100:500
> -> 209.115.50.18:500
> 13/05/03 02:53:13 -> : resend 1 phase1 packet(s) [1/2] 192.168.1.100:500
> -> 209.115.50.18:500
> 13/05/03 02:53:18 -> : resend 1 phase1 packet(s) [2/2] 192.168.1.100:500
> -> 209.115.50.18:500
> 13/05/03 02:53:23 ii : resend limit exceeded for phase1 exchange

<snip>

>
> I hope that the answer is something simple that I'm just not seeing.
> Would love to get this working for Client A.
>

Hi Alan,

First off, your VPN gateway is using a private address (192.168.1.100), 
which is typically not the case.  I'm assuming that you've got the 
gateway setup in a lab environment.

The Shrew log shows that it does not receive packets back from the 
gateway.  You state that the Client A firewall does not log any attempts 
from Shrew.  Makes me wonder if packets are being sent out at all.

Can you try running Wireshark on your Win7Starter box to see if it's 
actually sending packets out to the gateway?

In addition, even though I can't find it anywhere, I have a tickle in my 
brain about Win7Starter missing some bits, but I may be remembering a 
different problem.