<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<style>
<!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
span.EmailStyle17
{mso-style-type:personal;
font-family:Arial;
color:windowtext;}
@page Section1
{size:595.3pt 841.9pt;
margin:3.0cm 69.6pt 2.0cm 69.6pt;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=LT link=blue vlink=purple>
<div class=Section1>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>Hello,<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>I can‘t establish an IPSec session between WinXP shrewsoft client
2.1.5 and Cisco 2611 (12.4-1a IOS). Unable to negotiate phase 1 pre-shared key
authentication parameter. I configured Cisco to use isakmp client configuration
group „VPN“ and dynamic ipsec tunnels. Phase 1 parameters are:<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>Encryption: 3des<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>DH Group: 2<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>Hash: md5<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>Authentication: pre-shared key<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>Lifetime: 28800 s<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>(see cisco config below)<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>The same was configured on the client. I set the Key ID String as
„VPN“ in Local Identity, IP address as an identification type in
Remote Identity field and a pre-shared key in Credentials.<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>There‘s something wrong with pre-shared key authentication. I
checked phase 1 parameters on both cisco and client side and they match. <o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>Shrewsoft trace:<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:52 ## : IKE Daemon, ver 2.1.5<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:52 ## : Copyright 2009 Shrew Soft Inc.<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:52 ## : This product linked OpenSSL 0.9.8h 28 May 2008<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:52 ii : opened 'C:\Program Files\ShrewSoft\VPN
Client\debug\iked.log'<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:52 ii : opened 'C:\Program Files\ShrewSoft\VPN
Client/debug/dump-ike-decrypt.cap'<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:52 ii : opened 'C:\Program Files\ShrewSoft\VPN
Client/debug/dump-ike-encrypt.cap'<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:52 ii : rebuilding vnet device list ...<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:52 ii : device ROOT\VNET\0000 disabled<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:52 ii : network process thread begin ...<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:52 ii : pfkey process thread begin ...<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:52 ii : ipc server process thread begin ...<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 ii : ipc client process thread begin ...<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 <A : peer config add message<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 DB : peer ref increment ( ref count = 1, obj count =
0 )<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 DB : peer added ( obj count = 1 )<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 ii : local address 192.168.0.2 selected for peer<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 DB : peer ref increment ( ref count = 2, obj count =
1 )<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 DB : tunnel ref increment ( ref count = 1, obj count
= 0 )<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 DB : tunnel added ( obj count = 1 )<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 <A : proposal config message<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 <A : proposal config message<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 <A : client config message<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 <A : local id 'VPN' message<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 <A : preshared key message<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 <A : peer tunnel enable message<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 DB : tunnel ref increment ( ref count = 2, obj count
= 1 )<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 DB : new phase1 ( ISAKMP initiator )<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 DB : exchange type is aggressive<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 DB : 192.168.0.2:500 <-> 172.16.0.1:500<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 DB : 8c9d42b1ad3ab4f4:0000000000000000<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 DB : phase1 ref increment ( ref count = 1, obj count
= 0 )<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 DB : phase1 added ( obj count = 1 )<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 >> : security association payload<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 >> : - proposal #1 payload <o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 >> : -- transform #1 payload <o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 >> : key exchange payload<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 >> : nonce payload<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 >> : identification payload<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 >> : vendor id payload<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 ii : local supports FRAGMENTATION<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 >> : vendor id payload<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 ii : local is SHREW SOFT compatible<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 >> : vendor id payload<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 ii : local is NETSCREEN compatible<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 >> : vendor id payload<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 ii : local is SIDEWINDER compatible<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 >> : vendor id payload<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 ii : local is CISCO UNITY compatible<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 >= : cookies 8c9d42b1ad3ab4f4:0000000000000000<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 >= : message 00000000<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 -> : send IKE packet 192.168.0.2:500 ->
172.16.0.1:500 ( 387 bytes )<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 DB : phase1 resend event scheduled ( ref count = 2 )<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 DB : phase1 ref decrement ( ref count = 1, obj count
= 1 )<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 DB : tunnel ref increment ( ref count = 3, obj count
= 1 )<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 <- : recv IKE packet 172.16.0.1:500 ->
192.168.0.2:500 ( 96 bytes )<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 DB : phase1 found<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 DB : phase1 ref increment ( ref count = 2, obj count
= 1 )<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 ii : processing informational packet ( 96 bytes )<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 =< : cookies 8c9d42b1ad3ab4f4:127c53b687dc01a1<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 =< : message 00000000<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 << : notification payload<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 ii : received peer NO-PROPOSAL-CHOSEN notification<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 ii : - 172.16.0.1:500 -> 192.168.0.2:500<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 ii : - isakmp spi = none<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 ii : - data size 56<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:37:57 DB : phase1 ref decrement ( ref count = 1, obj count
= 1 )<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:38:02 -> : resend 1 phase1 packet(s) 192.168.0.2:500
-> 172.16.0.1:500<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:38:07 -> : resend 1 phase1 packet(s) 192.168.0.2:500
-> 172.16.0.1:500<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:38:12 -> : resend 1 phase1 packet(s) 192.168.0.2:500
-> 172.16.0.1:500<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:38:16 <A : peer tunnel disable message<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:38:16 ii : removing IPsec over DHCP policies<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:38:16 DB : policy not found<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:38:16 DB : policy not found<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:38:16 DB : tunnel stats event canceled ( ref count = 2 )<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:38:16 DB : removing tunnel config references<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:38:16 DB : removing tunnel phase2 references<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:38:16 DB : removing tunnel phase1 references<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:38:16 DB : phase1 ref increment ( ref count = 2, obj count
= 1 )<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:38:16 DB : phase1 resend event canceled ( ref count = 1 )<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:38:16 ii : phase1 removal before expire time<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:38:16 DB : phase1 deleted ( obj count = 0 )<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:38:16 DB : tunnel ref decrement ( ref count = 1, obj count
= 1 )<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:38:16 DB : tunnel deleted ( obj count = 0 )<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:38:17 DB : peer ref decrement ( ref count = 1, obj count =
1 )<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:38:17 DB : removing all peer tunnel refrences<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:38:17 DB : peer deleted ( obj count = 0 )<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>10/03/13 17:38:17 ii : ipc client process thread exit ...<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>Cisco 2611 debug:<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.407: ISAKMP (0:0): received packet from 192.168.0.2
dport 500 sport 500 Global (N) NEW SA<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.407: ISAKMP: Created a peer struct for 192.168.0.2,
peer port 500<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.411: ISAKMP: New peer created peer = 0x82D7B14C
peer_handle = 0x80000012<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.411: ISAKMP: Locking peer struct 0x82D7B14C, IKE
refcount 1 for crypto_isakmp_process_block<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.411: ISAKMP: local port 500, remote port 500<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.415: insert sa successfully sa = 833DFB98<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.415: ISAKMP:(0:0:N/A:0): processing SA payload.
message ID = 0<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.415: ISAKMP:(0:0:N/A:0): processing ID payload.
message ID = 0<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.415: ISAKMP (0:0): ID payload <o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>
next-payload : 13<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>
type : 11 <o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>
group id : VPN <o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>
protocol : 0 <o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>
port : 0 <o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>
length : 11<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.419: ISAKMP:(0:0:N/A:0):: peer matches TEST profile<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.419: ISAKMP:(0:0:N/A:0):Looking for a matching key for
192.168.0.2 in default<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.419: ISAKMP:(0:0:N/A:0):Setting client config settings
8297826C<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.423: ISAKMP:(0:0:N/A:0): Profile TEST assigned peer
the group named VPN<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.423: ISAKMP:(0:0:N/A:0): processing vendor id payload<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.423: ISAKMP:(0:0:N/A:0): vendor ID seems Unity/DPD but
major 194 mismatch<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.423: ISAKMP:(0:0:N/A:0): processing vendor id payload<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.427: ISAKMP:(0:0:N/A:0): vendor ID seems Unity/DPD but
major 237 mismatch<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.427: ISAKMP:(0:0:N/A:0): processing vendor id payload<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.427: ISAKMP:(0:0:N/A:0): vendor ID seems Unity/DPD but
major 19 mismatch<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.427: ISAKMP:(0:0:N/A:0): processing vendor id payload<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.431: ISAKMP:(0:0:N/A:0): vendor ID seems Unity/DPD but
major 83 mismatch<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.431: ISAKMP:(0:0:N/A:0): processing vendor id payload<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.431: ISAKMP:(0:0:N/A:0): vendor ID is Unity<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.431: ISAKMP : Looking for xauth in profile TEST<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.435: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 1
against priority 1 policy<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.435: ISAKMP: encryption
3DES-CBC<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.435: ISAKMP: hash MD5<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.435: ISAKMP: default
group 2<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.435: ISAKMP: auth
pre-share<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.435: ISAKMP: life type
in seconds<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.435: ISAKMP: life
duration (VPI) of 0x0 0x0 0x70 0x80 <o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.439: ISAKMP:(0:0:N/A:0):Preshared authentication
offered but does not match policy!<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.439: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next
payload is 0<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.439: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 1
against priority 65535 policy<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.443: ISAKMP: encryption
3DES-CBC<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.443: ISAKMP: hash MD5<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.443: ISAKMP: default
group 2<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.443: ISAKMP: auth
pre-share<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.443: ISAKMP: life type
in seconds<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.443: ISAKMP: life
duration (VPI) of 0x0 0x0 0x70 0x80 <o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.447: ISAKMP:(0:0:N/A:0):Encryption algorithm offered
does not match policy!<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.447: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next
payload is 0<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.447: ISAKMP:(0:0:N/A:0):no offers accepted!<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.451: ISAKMP:(0:0:N/A:0): phase 1 SA policy not
acceptable! (local 172.16.0.1 remote 192.168.0.2)<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.451: ISAKMP:(0:0:N/A:0):incrementing error counter on
sa: construct_fail_ag_init<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.451: ISAKMP:(0:0:N/A:0): sending packet to 192.168.0.2
my_port 500 peer_port 500 (R) AG_NO_STATE<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.455: ISAKMP:(0:0:N/A:0):peer does not do paranoid
keepalives.<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.455: ISAKMP:(0:0:N/A:0):deleting SA reason
"Phase1 SA policy proposal not accepted" state (R) AG_NO_STATE (peer
192.168.0.2)<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.455: ISAKMP:(0:0:N/A:0): processing KE payload.
message ID = 0<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.455: ISAKMP:(0:0:N/A:0): group size changed! Should be
0, is 128<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.459: ISAKMP (0:0): Unknown Input IKE_MESG_FROM_PEER,
IKE_AM_EXCH: state = IKE_READY<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.459: ISAKMP:(0:0:N/A:0):Input = IKE_MESG_FROM_PEER,
IKE_AM_EXCH<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.459: ISAKMP:(0:0:N/A:0):Old State = IKE_READY
New State = IKE_READY <o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.459: %CRYPTO-6-IKMP_MODE_FAILURE: Processing of
Aggressive mode failed with peer at 192.168.0.2 <o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.467: ISAKMP:(0:0:N/A:0):deleting SA reason
"Phase1 SA policy proposal not accepted" state (R) AG_NO_STATE (peer
192.168.0.2) <o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.467: ISAKMP: Unlocking IKE struct 0x82D7B14C for
isadb_mark_sa_deleted(), count 0<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.467: ISAKMP: Deleting peer node by peer_reap for
192.168.0.2: 82D7B14C<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.471: ISAKMP:(0:0:N/A:0):Input = IKE_MESG_INTERNAL,
IKE_PHASE1_DEL<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.471: ISAKMP:(0:0:N/A:0):Old State = IKE_READY
New State = IKE_DEST_SA <o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:06.471: IPSEC(key_engine): got a queue event with 1 kei
messages<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:11.403: ISAKMP (0:0): received packet from 192.168.0.2
dport 500 sport 500 Global (R) MM_NO_STATE<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>*Mar 31 02:52:16.407: ISAKMP (0:0): received packet from 192.168.0.2
dport 500 sport 500 Global (R) MM_NO_STATE <o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>Cisco 2611 IPSec config:<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>!<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>username cisco privilege 15 password 0 cisco<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>!<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>! <o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>!<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>crypto isakmp policy 1<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'> encr 3des<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'> hash md5<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'> authentication pre-share<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'> group 2<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'> lifetime 28800<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>!<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>crypto isakmp client configuration group VPN<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'> key 6 cisco<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'> dns 192.168.10.20<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'> pool vpn<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>crypto isakmp profile TEST<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'> match identity group VPN<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'> client configuration address respond<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'> client configuration group VPN<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'> virtual-template 1<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>!<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>!<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>crypto ipsec transform-set XXX esp-3des esp-md5-hmac <o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>!<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>crypto ipsec profile TEST<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'> set transform-set XXX <o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>!<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>!<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>!<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>!<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>interface Ethernet0/0<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'> ip address 192.168.10.1 255.255.255.0<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'> half-duplex<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>!<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>interface Serial0/0<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'> ip address 172.16.0.1 255.255.255.252<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'> no fair-queue<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>!<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>!<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>!<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>interface Virtual-Template1 type tunnel<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'> no ip address<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'> tunnel mode ipsec ipv4<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'> tunnel protection ipsec profile TEST<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>!<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>!<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>ip local pool vpn 192.168.10.5 192.168.10.10<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>I also tried configuring shrewsoft without specifying a VPN group
parameter, and it passed the phase 1 successfully, but could not pass phase 2.
Is it something wrong with Cisco or Client config?<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'>Nikolaj<o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'> <o:p></o:p></span></font></p>
<p class=MsoPlainText><font size=2 face="Courier New"><span style='font-size:
10.0pt'><o:p> </o:p></span></font></p>
</div>
</body>
</html>