0

I used ShrewSoft VPN to access a few work computers.

A few days ago the password has been changed so I have changed it at the credentials settings.

Since that time, I cannot connect to any of the work computers but all of my co-workers can.

There are 2 scenarios:

  • When trying to connect, I get this message:

negotiation timout occurred

Here is the IKE service log for it:

15/03/04 22:12:55 ii : rebuilding vnet device list ...
15/03/04 22:12:55 ii : device ROOT\VNET\0000 disabled
15/03/04 22:12:55 ii : network process thread begin ...
15/03/04 22:12:55 ii : pfkey process thread begin ...
15/03/04 22:12:55 ii : ipc server process thread begin ...
15/03/04 22:13:01 ii : ipc client process thread begin ...
15/03/04 22:13:01 <A : peer config add message
15/03/04 22:13:01 <A : proposal config message
15/03/04 22:13:01 <A : proposal config message
15/03/04 22:13:01 <A : client config message
15/03/04 22:13:01 <A : local id 'myserver.company.com' message
15/03/04 22:13:01 <A : preshared key message
15/03/04 22:13:01 <A : remote resource message
15/03/04 22:13:01 <A : peer tunnel enable message
15/03/04 22:13:01 DB : peer added ( obj count = 1 )
15/03/04 22:13:01 ii : local address 192.168.0.100 selected for peer
15/03/04 22:13:01 DB : tunnel added ( obj count = 1 )
15/03/04 22:13:01 DB : new phase1 ( ISAKMP initiator )
15/03/04 22:13:01 DB : exchange type is aggressive
15/03/04 22:13:01 DB : 192.168.0.100:500 <-> REMOTEIP:500
15/03/04 22:13:01 DB : e031c3fffcb0fd51:0000000000000000
15/03/04 22:13:01 DB : phase1 added ( obj count = 1 )
15/03/04 22:13:01 >> : security association payload
15/03/04 22:13:01 >> : - proposal #1 payload 
15/03/04 22:13:01 >> : -- transform #1 payload 
15/03/04 22:13:01 >> : key exchange payload
15/03/04 22:13:01 >> : nonce payload
15/03/04 22:13:01 >> : identification payload
15/03/04 22:13:01 >> : vendor id payload
15/03/04 22:13:01 ii : local supports nat-t ( draft v00 )
15/03/04 22:13:01 >> : vendor id payload
15/03/04 22:13:01 ii : local supports nat-t ( draft v01 )
15/03/04 22:13:01 >> : vendor id payload
15/03/04 22:13:01 ii : local supports nat-t ( draft v02 )
15/03/04 22:13:01 >> : vendor id payload
15/03/04 22:13:01 ii : local supports nat-t ( draft v03 )
15/03/04 22:13:01 >> : vendor id payload
15/03/04 22:13:01 ii : local supports nat-t ( rfc )
15/03/04 22:13:01 >> : vendor id payload
15/03/04 22:13:01 >> : vendor id payload
15/03/04 22:13:01 ii : local supports DPDv1
15/03/04 22:13:01 >> : vendor id payload
15/03/04 22:13:01 ii : local is SHREW SOFT compatible
15/03/04 22:13:01 >> : vendor id payload
15/03/04 22:13:01 ii : local is NETSCREEN compatible
15/03/04 22:13:01 >> : vendor id payload
15/03/04 22:13:01 ii : local is SIDEWINDER compatible
15/03/04 22:13:01 >> : vendor id payload
15/03/04 22:13:01 ii : local is CISCO UNITY compatible
15/03/04 22:13:01 >= : cookies e031c3fffcb0fd51:0000000000000000
15/03/04 22:13:01 >= : message 00000000
15/03/04 22:13:01 -> : send IKE packet 192.168.0.100:500 -> REMOTEIP:500 ( 520 bytes )
15/03/04 22:13:01 DB : phase1 resend event scheduled ( ref count = 2 )
15/03/04 22:13:06 -> : resend 1 phase1 packet(s) [0/2] 192.168.0.100:500 -> REMOTEIP:500
15/03/04 22:13:11 -> : resend 1 phase1 packet(s) [1/2] 192.168.0.100:500 -> REMOTEIP:500
15/03/04 22:13:16 -> : resend 1 phase1 packet(s) [2/2] 192.168.0.100:500 -> REMOTEIP:500
15/03/04 22:13:21 ii : resend limit exceeded for phase1 exchange
15/03/04 22:13:21 ii : phase1 removal before expire time
15/03/04 22:13:21 DB : phase1 deleted ( obj count = 0 )
15/03/04 22:13:21 DB : policy not found
15/03/04 22:13:21 DB : policy not found
15/03/04 22:13:21 DB : policy not found
15/03/04 22:13:21 DB : policy not found
15/03/04 22:13:21 DB : policy not found
15/03/04 22:13:21 DB : policy not found
15/03/04 22:13:21 DB : removing tunnel config references
15/03/04 22:13:21 DB : removing tunnel phase2 references
15/03/04 22:13:21 DB : removing tunnel phase1 references
15/03/04 22:13:21 DB : tunnel deleted ( obj count = 0 )
15/03/04 22:13:21 DB : removing all peer tunnel references
15/03/04 22:13:21 DB : peer deleted ( obj count = 0 )
15/03/04 22:13:21 ii : ipc client process thread exit ...
  • When sometimes it says that the tunnel enabled, I can't reach any computer.

Here is the IKE service log for it:

 22:16:08 ii : ipc client process thread begin ...
 22:16:08 <A : peer config add message
 22:16:08 <A : proposal config message
 22:16:08 <A : proposal config message
 22:16:08 <A : client config message
 22:16:08 <A : local id 'myserver.company.com' message
 22:16:08 <A : preshared key message
 22:16:08 <A : remote resource message
 22:16:08 <A : peer tunnel enable message
 22:16:08 DB : peer added ( obj count = 1 )
 22:16:08 ii : local address 192.168.0.100 selected for peer
 22:16:08 DB : tunnel added ( obj count = 1 )
 22:16:08 DB : new phase1 ( ISAKMP initiator )
 22:16:08 DB : exchange type is aggressive
 22:16:08 DB : 192.168.0.100:500 <-> REMOTEIP:500
 22:16:08 DB : f232ff98c4937c18:0000000000000000
 22:16:08 DB : phase1 added ( obj count = 1 )
 22:16:08 >> : security association payload
 22:16:08 >> : - proposal #1 payload 
 22:16:08 >> : -- transform #1 payload 
 22:16:08 >> : key exchange payload
 22:16:08 >> : nonce payload
 22:16:08 >> : identification payload
 22:16:08 >> : vendor id payload
 22:16:08 ii : local supports nat-t ( draft v00 )
 22:16:08 >> : vendor id payload
 22:16:08 ii : local supports nat-t ( draft v01 )
 22:16:08 >> : vendor id payload
 22:16:08 ii : local supports nat-t ( draft v02 )
 22:16:08 >> : vendor id payload
 22:16:08 ii : local supports nat-t ( draft v03 )
 22:16:08 >> : vendor id payload
 22:16:08 ii : local supports nat-t ( rfc )
 22:16:08 >> : vendor id payload
 22:16:08 >> : vendor id payload
 22:16:08 ii : local supports DPDv1
 22:16:08 >> : vendor id payload
 22:16:08 ii : local is SHREW SOFT compatible
 22:16:08 >> : vendor id payload
 22:16:08 ii : local is NETSCREEN compatible
 22:16:08 >> : vendor id payload
 22:16:08 ii : local is SIDEWINDER compatible
 22:16:08 >> : vendor id payload
 22:16:08 ii : local is CISCO UNITY compatible
 22:16:08 >= : cookies f232ff98c4937c18:0000000000000000
 22:16:08 >= : message 00000000
 22:16:08 -> : send IKE packet 192.168.0.100:500 -> REMOTEIP:500 ( 520 bytes )
 22:16:08 DB : phase1 resend event scheduled ( ref count = 2 )
 22:16:08 <- : recv IKE packet REMOTEIP:500 -> 192.168.0.100:500 ( 276 bytes )
 22:16:08 DB : phase1 found
 22:16:08 ii : processing phase1 packet ( 276 bytes )
 22:16:08 =< : cookies f232ff98c4937c18:c65052785432b59d
 22:16:08 =< : message 00000000
 22:16:08 << : security association payload
 22:16:08 << : - propsal #1 payload 
 22:16:08 << : -- transform #1 payload 
 22:16:08 ii : matched isakmp proposal #1 transform #1
 22:16:08 ii : - transform    = ike
 22:16:08 ii : - cipher type  = aes
 22:16:08 ii : - key length   = 256 bits
 22:16:08 ii : - hash type    = sha1
 22:16:08 ii : - dh group     = group2 ( modp-1024 )
 22:16:08 ii : - auth type    = psk
 22:16:08 ii : - life seconds = 28800
 22:16:08 ii : - life kbytes  = 0
 22:16:08 << : key exchange payload
 22:16:08 << : nonce payload
 22:16:08 << : identification payload
 22:16:08 ii : phase1 id match ( natt prevents ip match )
 22:16:08 ii : received = ipv4-host REMOTEIP
 22:16:08 << : hash payload
 22:16:08 ii : nat-t is unsupported by remote peer
 22:16:08 == : DH shared secret ( 128 bytes )
 22:16:08 == : SETKEYID ( 20 bytes )
 22:16:08 == : SETKEYID_d ( 20 bytes )
 22:16:08 == : SETKEYID_a ( 20 bytes )
 22:16:08 == : SETKEYID_e ( 20 bytes )
 22:16:08 == : cipher key ( 32 bytes )
 22:16:08 == : cipher iv ( 16 bytes )
 22:16:08 == : phase1 hash_i ( computed ) ( 20 bytes )
 22:16:08 >> : hash payload
 22:16:08 >= : cookies f232ff98c4937c18:c65052785432b59d
 22:16:08 >= : message 00000000
 22:16:08 >= : encrypt iv ( 16 bytes )
 22:16:08 == : encrypt packet ( 52 bytes )
 22:16:08 == : stored iv ( 16 bytes )
 22:16:08 DB : phase1 resend event canceled ( ref count = 1 )
 22:16:08 -> : send IKE packet 192.168.0.100:500 -> REMOTEIP:500 ( 88 bytes )
 22:16:08 == : phase1 hash_r ( computed ) ( 20 bytes )
 22:16:08 == : phase1 hash_r ( received ) ( 20 bytes )
 22:16:08 ii : phase1 sa established
 22:16:08 ii : REMOTEIP:500 <-> 192.168.0.100:500
 22:16:08 ii : f232ff98c4937c18:c65052785432b59d
 22:16:08 ii : sending peer INITIAL-CONTACT notification
 22:16:08 ii : - 192.168.0.100:500 -> REMOTEIP:500
 22:16:08 ii : - isakmp spi = f232ff98c4937c18:c65052785432b59d
 22:16:08 ii : - data size 0
 22:16:08 >> : hash payload
 22:16:08 >> : notification payload
 22:16:08 == : new informational hash ( 20 bytes )
 22:16:08 == : new informational iv ( 16 bytes )
 22:16:08 >= : cookies f232ff98c4937c18:c65052785432b59d
 22:16:08 >= : message 5c5ce9fa
 22:16:08 >= : encrypt iv ( 16 bytes )
 22:16:08 == : encrypt packet ( 80 bytes )
 22:16:08 == : stored iv ( 16 bytes )
 22:16:08 -> : send IKE packet 192.168.0.100:500 -> REMOTEIP:500 ( 120 bytes )
 22:16:08 DB : config added ( obj count = 1 )
 22:16:08 ii : configuration method is manual
 22:16:08 DB : phase2 not found
 22:16:08 ii : enabled adapter ROOT\VNET\0000 
 22:16:08 ii : adapter ROOT\VNET\0000 unavailable, retrying ...
 22:16:09 ii : apapter ROOT\VNET\0000 MTU is 1380
 22:16:09 ii : generating IPSEC security policies at UNIQUE level
 22:16:09 ii : creating NONE INBOUND policy ANY:REMOTEIP:* -> ANY:192.168.0.100:*
 22:16:09 DB : policy added ( obj count = 1 )
 22:16:09 K> : send pfkey X_SPDADD UNSPEC message
 22:16:09 ii : creating NONE OUTBOUND policy ANY:192.168.0.100:* -> ANY:REMOTEIP:*
 22:16:09 K< : recv pfkey X_SPDADD UNSPEC message
 22:16:09 DB : policy found
 22:16:09 ii : created NONE policy route for REMOTEIP/32
 22:16:09 DB : policy added ( obj count = 2 )
 22:16:09 K> : send pfkey X_SPDADD UNSPEC message
 22:16:09 K< : recv pfkey X_SPDADD UNSPEC message
 22:16:09 DB : policy found
 22:16:09 ii : creating NONE INBOUND policy ANY:192.168.0.1:* -> ANY:192.168.17.7:*
 22:16:09 DB : policy added ( obj count = 3 )
 22:16:09 K> : send pfkey X_SPDADD UNSPEC message
 22:16:09 ii : creating NONE OUTBOUND policy ANY:192.168.17.7:* -> ANY:192.168.0.1:*
 22:16:09 DB : policy added ( obj count = 4 )
 22:16:09 K> : send pfkey X_SPDADD UNSPEC message
 22:16:09 ii : creating IPSEC INBOUND policy ANY:VPN_LOCAL_IP/24:* -> ANY:192.168.17.7:*
 22:16:09 K< : recv pfkey X_SPDADD UNSPEC message
 22:16:09 DB : policy added ( obj count = 5 )
 22:16:09 DB : policy found
 22:16:09 K> : send pfkey X_SPDADD UNSPEC message
 22:16:09 K< : recv pfkey X_SPDADD UNSPEC message
 22:16:09 DB : policy found
 22:16:09 ii : creating IPSEC OUTBOUND policy ANY:192.168.17.7:* -> ANY:VPN_LOCAL_IP/24:*
 22:16:09 K< : recv pfkey X_SPDADD UNSPEC message
 22:16:09 DB : policy found
 22:16:09 ii : created IPSEC policy route for VPN_LOCAL_IP/24
 22:16:09 DB : policy added ( obj count = 6 )
 22:16:09 K> : send pfkey X_SPDADD UNSPEC message
 22:16:09 K< : recv pfkey X_SPDADD UNSPEC message
 22:16:09 DB : policy found
 22:16:09 ii : split DNS is disabled
 22:16:12 K< : recv pfkey ACQUIRE UNSPEC message
 22:16:12 DB : policy found
 22:16:12 DB : policy found
 22:16:12 DB : tunnel found
 22:16:12 DB : new phase2 ( IPSEC initiator )
 22:16:12 DB : phase2 added ( obj count = 1 )
 22:16:12 K> : send pfkey GETSPI ESP message
 22:16:12 K< : recv pfkey GETSPI ESP message
 22:16:12 DB : phase2 found
 22:16:12 ii : updated spi for 1 ipsec-esp proposal
 22:16:12 DB : phase1 found
 22:16:12 >> : hash payload
 22:16:12 >> : security association payload
 22:16:12 >> : - proposal #1 payload 
 22:16:12 >> : -- transform #1 payload 
 22:16:12 >> : nonce payload
 22:16:12 >> : key exchange payload
 22:16:12 >> : identification payload
 22:16:12 >> : identification payload
 22:16:12 == : phase2 hash_i ( input ) ( 248 bytes )
 22:16:12 == : phase2 hash_i ( computed ) ( 20 bytes )
 22:16:12 == : new phase2 iv ( 16 bytes )
 22:16:12 >= : cookies f232ff98c4937c18:c65052785432b59d
 22:16:12 >= : message 4a2d1878
 22:16:12 >= : encrypt iv ( 16 bytes )
 22:16:12 == : encrypt packet ( 296 bytes )
 22:16:12 == : stored iv ( 16 bytes )
 22:16:12 -> : send IKE packet 192.168.0.100:500 -> REMOTEIP:500 ( 328 bytes )
 22:16:12 DB : phase2 resend event scheduled ( ref count = 2 )
 22:16:17 -> : resend 1 phase2 packet(s) [0/2] 192.168.0.100:500 -> REMOTEIP:500
 22:16:22 -> : resend 1 phase2 packet(s) [1/2] 192.168.0.100:500 -> REMOTEIP:500
 22:16:27 -> : resend 1 phase2 packet(s) [2/2] 192.168.0.100:500 -> REMOTEIP:500
 22:16:30 K< : recv pfkey ACQUIRE UNSPEC message
 22:16:30 DB : policy found
 22:16:30 DB : policy found
 22:16:30 DB : tunnel found
 22:16:30 DB : new phase2 ( IPSEC initiator )
 22:16:30 DB : phase2 added ( obj count = 2 )
 22:16:30 K> : send pfkey GETSPI ESP message
 22:16:30 K< : recv pfkey GETSPI ESP message
 22:16:30 DB : phase2 found
 22:16:30 ii : updated spi for 1 ipsec-esp proposal
 22:16:30 DB : phase1 found
 22:16:30 >> : hash payload
 22:16:30 >> : security association payload
 22:16:30 >> : - proposal #1 payload 
 22:16:30 >> : -- transform #1 payload 
 22:16:30 >> : nonce payload
 22:16:30 >> : key exchange payload
 22:16:30 >> : identification payload
 22:16:30 >> : identification payload
 22:16:30 == : phase2 hash_i ( input ) ( 248 bytes )
 22:16:30 == : phase2 hash_i ( computed ) ( 20 bytes )
 22:16:30 == : new phase2 iv ( 16 bytes )
 22:16:30 >= : cookies f232ff98c4937c18:c65052785432b59d
 22:16:30 >= : message b4687a6c
 22:16:30 >= : encrypt iv ( 16 bytes )
 22:16:30 == : encrypt packet ( 296 bytes )
 22:16:30 == : stored iv ( 16 bytes )
 22:16:30 -> : send IKE packet 192.168.0.100:500 -> REMOTEIP:500 ( 328 bytes )
 22:16:30 DB : phase2 resend event scheduled ( ref count = 2 )
 22:16:32 <A : peer tunnel disable message
 22:16:32 DB : policy found
 22:16:32 ii : removing IPSEC INBOUND policy ANY:VPN_LOCAL_IP/24:* -> ANY:192.168.17.7:*
 22:16:32 K> : send pfkey X_SPDDELETE2 UNSPEC message
 22:16:32 DB : policy found
 22:16:32 ii : removing IPSEC OUTBOUND policy ANY:192.168.17.7:* -> ANY:VPN_LOCAL_IP/24:*
 22:16:32 K> : send pfkey X_SPDDELETE2 UNSPEC message
 22:16:32 K< : recv pfkey X_SPDDELETE2 UNSPEC message
 22:16:32 ii : removed IPSEC policy route for ANY:VPN_LOCAL_IP/24:*
 22:16:32 DB : policy found
 22:16:32 ii : removing NONE INBOUND policy ANY:192.168.0.1:* -> ANY:192.168.17.7:*
 22:16:32 K> : send pfkey X_SPDDELETE2 UNSPEC message
 22:16:32 DB : policy found
 22:16:32 ii : removing NONE OUTBOUND policy ANY:192.168.17.7:* -> ANY:192.168.0.1:*
 22:16:32 K> : send pfkey X_SPDDELETE2 UNSPEC message
 22:16:32 DB : policy found
 22:16:32 ii : removing NONE INBOUND policy ANY:REMOTEIP:* -> ANY:192.168.0.100:*
 22:16:32 K> : send pfkey X_SPDDELETE2 UNSPEC message
 22:16:32 DB : policy found
 22:16:32 ii : removing NONE OUTBOUND policy ANY:192.168.0.100:* -> ANY:REMOTEIP:*
 22:16:32 K> : send pfkey X_SPDDELETE2 UNSPEC message
 22:16:32 ii : removed NONE policy route for ANY:REMOTEIP:*
 22:16:32 DB : policy found
 22:16:32 DB : policy deleted ( obj count = 5 )
 22:16:32 K< : recv pfkey X_SPDDELETE2 UNSPEC message
 22:16:32 DB : policy found
 22:16:32 DB : policy deleted ( obj count = 4 )
 22:16:32 K< : recv pfkey X_SPDDELETE2 UNSPEC message
 22:16:32 DB : policy found
 22:16:32 DB : policy deleted ( obj count = 3 )
 22:16:32 K< : recv pfkey X_SPDDELETE2 UNSPEC message
 22:16:32 DB : policy found
 22:16:32 DB : policy deleted ( obj count = 2 )
 22:16:32 K< : recv pfkey X_SPDDELETE2 UNSPEC message
 22:16:32 DB : policy found
 22:16:32 DB : policy deleted ( obj count = 1 )
 22:16:32 K< : recv pfkey X_SPDDELETE2 UNSPEC message
 22:16:32 DB : policy found
 22:16:32 DB : policy deleted ( obj count = 0 )
 22:16:32 ii : disable adapter ROOT\VNET\0000
 22:16:32 DB : tunnel stats event canceled ( ref count = 5 )
 22:16:32 DB : removing tunnel config references
 22:16:32 DB : config deleted ( obj count = 0 )
 22:16:32 DB : removing tunnel phase2 references
 22:16:32 DB : phase2 resend event canceled ( ref count = 1 )
 22:16:32 ii : phase2 removal before expire time
 22:16:32 DB : phase2 deleted ( obj count = 1 )
 22:16:32 DB : phase2 resend event canceled ( ref count = 1 )
 22:16:32 ii : phase2 removal before expire time
 22:16:32 DB : phase2 deleted ( obj count = 0 )
 22:16:32 DB : removing tunnel phase1 references
 22:16:32 DB : phase1 soft event canceled ( ref count = 3 )
 22:16:32 DB : phase1 hard event canceled ( ref count = 2 )
 22:16:32 DB : phase1 dead event canceled ( ref count = 1 )
 22:16:32 ii : sending peer DELETE message
 22:16:32 ii : - 192.168.0.100:500 -> REMOTEIP:500
 22:16:32 ii : - isakmp spi = f232ff98c4937c18:c65052785432b59d
 22:16:32 ii : - data size 0
 22:16:32 >> : hash payload
 22:16:32 >> : delete payload
 22:16:32 == : new informational hash ( 20 bytes )
 22:16:32 == : new informational iv ( 16 bytes )
 22:16:32 >= : cookies f232ff98c4937c18:c65052785432b59d
 22:16:32 >= : message 66fddf83
 22:16:32 >= : encrypt iv ( 16 bytes )
 22:16:32 == : encrypt packet ( 80 bytes )
 22:16:32 == : stored iv ( 16 bytes )
 22:16:32 -> : send IKE packet 192.168.0.100:500 -> REMOTEIP:500 ( 120 bytes )
 22:16:32 ii : phase1 removal before expire time
 22:16:32 DB : phase1 deleted ( obj count = 0 )
 22:16:32 DB : tunnel deleted ( obj count = 0 )
 22:16:32 DB : removing all peer tunnel references
 22:16:32 DB : peer deleted ( obj count = 0 )
 22:16:32 ii : ipc client process thread exit ...

This is what I can see:

enter image description here

UPDATE:

This is the log of a working connection:

ii : rebuilding vnet device list ...
ii : device ROOT\VNET\0000 disabled
ii : pfkey process thread begin ...
ii : ipc server process thread begin ...
ii : network process thread begin ...
ii : ipc client process thread begin ...
<A : peer config add message
<A : proposal config message
<A : proposal config message
<A : client config message
<A : local id 'myserver.company.com' message
<A : preshared key message
<A : remote resource message
<A : peer tunnel enable message
DB : peer added ( obj count = 1 )
ii : local address LOCALIP selected for peer
DB : tunnel added ( obj count = 1 )
DB : new phase1 ( ISAKMP initiator )
DB : exchange type is aggressive
DB : LOCALIP:500 <-> REMOTEIP:500
DB : 3cbc1e92c5a533c2:0000000000000000
DB : phase1 added ( obj count = 1 )
>> : security association payload
>> : - proposal #1 payload 
>> : -- transform #1 payload 
>> : key exchange payload
>> : nonce payload
>> : identification payload
>> : vendor id payload
ii : local supports nat-t ( draft v00 )
>> : vendor id payload
ii : local supports nat-t ( draft v01 )
>> : vendor id payload
ii : local supports nat-t ( draft v02 )
>> : vendor id payload
ii : local supports nat-t ( draft v03 )
>> : vendor id payload
ii : local supports nat-t ( rfc )
>> : vendor id payload
>> : vendor id payload
ii : local supports DPDv1
>> : vendor id payload
ii : local is SHREW SOFT compatible
>> : vendor id payload
ii : local is NETSCREEN compatible
>> : vendor id payload
ii : local is SIDEWINDER compatible
>> : vendor id payload
ii : local is CISCO UNITY compatible
>= : cookies 3cbc1e92c5a533c2:0000000000000000
>= : message 00000000
-> : send IKE packet LOCALIP:500 -> REMOTEIP:500 ( 520 bytes )
DB : phase1 resend event scheduled ( ref count = 2 )
<- : recv IKE packet REMOTEIP:500 -> LOCALIP:500 ( 276 bytes )
DB : phase1 found
ii : processing phase1 packet ( 276 bytes )
=< : cookies 3cbc1e92c5a533c2:8f1d0b7661933e0d
=< : message 00000000
<< : security association payload
<< : - propsal #1 payload 
<< : -- transform #1 payload 
ii : matched isakmp proposal #1 transform #1
ii : - transform    = ike
ii : - cipher type  = aes
ii : - key length   = 256 bits
ii : - hash type    = sha1
ii : - dh group     = group2 ( modp-1024 )
ii : - auth type    = psk
ii : - life seconds = 28800
ii : - life kbytes  = 0
<< : key exchange payload
<< : nonce payload
<< : identification payload
ii : phase1 id match ( natt prevents ip match )
ii : received = ipv4-host REMOTEIP
<< : hash payload
ii : nat-t is unsupported by remote peer
== : DH shared secret ( 128 bytes )
== : SETKEYID ( 20 bytes )
== : SETKEYID_d ( 20 bytes )
== : SETKEYID_a ( 20 bytes )
== : SETKEYID_e ( 20 bytes )
== : cipher key ( 32 bytes )
== : cipher iv ( 16 bytes )
== : phase1 hash_i ( computed ) ( 20 bytes )
>> : hash payload
>= : cookies 3cbc1e92c5a533c2:8f1d0b7661933e0d
>= : message 00000000
>= : encrypt iv ( 16 bytes )
== : encrypt packet ( 52 bytes )
== : stored iv ( 16 bytes )
DB : phase1 resend event canceled ( ref count = 1 )
-> : send IKE packet LOCALIP:500 -> REMOTEIP:500 ( 88 bytes )
== : phase1 hash_r ( computed ) ( 20 bytes )
== : phase1 hash_r ( received ) ( 20 bytes )
ii : phase1 sa established
ii : REMOTEIP:500 <-> LOCALIP:500
ii : 3cbc1e92c5a533c2:8f1d0b7661933e0d
ii : sending peer INITIAL-CONTACT notification
ii : - LOCALIP:500 -> REMOTEIP:500
ii : - isakmp spi = 3cbc1e92c5a533c2:8f1d0b7661933e0d
ii : - data size 0
>> : hash payload
>> : notification payload
== : new informational hash ( 20 bytes )
== : new informational iv ( 16 bytes )
>= : cookies 3cbc1e92c5a533c2:8f1d0b7661933e0d
>= : message 7061fc09
>= : encrypt iv ( 16 bytes )
== : encrypt packet ( 80 bytes )
== : stored iv ( 16 bytes )
-> : send IKE packet LOCALIP:500 -> REMOTEIP:500 ( 120 bytes )
DB : config added ( obj count = 1 )
ii : configuration method is manual
DB : phase2 not found
ii : enabled adapter ROOT\VNET\0000 
ii : adapter ROOT\VNET\0000 unavailable, retrying ...
ii : apapter ROOT\VNET\0000 MTU is 1380
ii : generating IPSEC security policies at UNIQUE level
ii : creating NONE INBOUND policy ANY:REMOTEIP:* -> ANY:LOCALIP:*
DB : policy added ( obj count = 1 )
K> : send pfkey X_SPDADD UNSPEC message
ii : creating NONE OUTBOUND policy ANY:LOCALIP:* -> ANY:REMOTEIP:*
K< : recv pfkey X_SPDADD UNSPEC message
DB : policy found
ii : created NONE policy route for REMOTEIP/32
DB : policy added ( obj count = 2 )
K> : send pfkey X_SPDADD UNSPEC message
K< : recv pfkey X_SPDADD UNSPEC message
DB : policy found
ii : creating IPSEC INBOUND policy ANY:VPN_IP/24:* -> ANY:192.168.17.1:*
DB : policy added ( obj count = 3 )
K> : send pfkey X_SPDADD UNSPEC message
ii : creating IPSEC OUTBOUND policy ANY:192.168.17.1:* -> ANY:VPN_IP/24:*
K< : recv pfkey X_SPDADD UNSPEC message
DB : policy found
ii : created IPSEC policy route for VPN_IP/24
DB : policy added ( obj count = 4 )
K> : send pfkey X_SPDADD UNSPEC message
K< : recv pfkey X_SPDADD UNSPEC message
DB : policy found
ii : split DNS is disabled
K< : recv pfkey ACQUIRE UNSPEC message
DB : policy found
DB : policy found
DB : tunnel found
DB : new phase2 ( IPSEC initiator )
DB : phase2 added ( obj count = 1 )
K> : send pfkey GETSPI ESP message
K< : recv pfkey GETSPI ESP message
DB : phase2 found
ii : updated spi for 1 ipsec-esp proposal
DB : phase1 found
>> : hash payload
>> : security association payload
>> : - proposal #1 payload 
>> : -- transform #1 payload 
>> : nonce payload
>> : key exchange payload
>> : identification payload
>> : identification payload
== : phase2 hash_i ( input ) ( 248 bytes )
== : phase2 hash_i ( computed ) ( 20 bytes )
== : new phase2 iv ( 16 bytes )
>= : cookies 3cbc1e92c5a533c2:8f1d0b7661933e0d
>= : message 907d2142
>= : encrypt iv ( 16 bytes )
== : encrypt packet ( 296 bytes )
== : stored iv ( 16 bytes )
-> : send IKE packet LOCALIP:500 -> REMOTEIP:500 ( 328 bytes )
DB : phase2 resend event scheduled ( ref count = 2 )
<- : recv IKE packet REMOTEIP:500 -> LOCALIP:500 ( 300 bytes )
DB : phase1 found
ii : processing phase2 packet ( 300 bytes )
DB : phase2 found
=< : cookies 3cbc1e92c5a533c2:8f1d0b7661933e0d
=< : message 907d2142
=< : decrypt iv ( 16 bytes )
== : decrypt packet ( 300 bytes )
<= : trimmed packet padding ( 8 bytes )
<= : stored iv ( 16 bytes )
<< : hash payload
<< : security association payload
<< : - propsal #1 payload 
<< : -- transform #1 payload 
<< : nonce payload
<< : key exchange payload
<< : identification payload
<< : identification payload
== : phase2 hash_r ( input ) ( 264 bytes )
== : phase2 hash_r ( computed ) ( 20 bytes )
== : phase2 hash_r ( received ) ( 20 bytes )
ii : matched ipsec-esp proposal #1 transform #1
ii : - transform    = esp-aes
ii : - key length   = 256 bits
ii : - encap mode   = tunnel
ii : - msg auth     = hmac-sha1
ii : - pfs dh group = group2 ( modp-1024 )
ii : - life seconds = 3600
ii : - life kbytes  = 0
DB : policy found
K> : send pfkey GETSPI ESP message
ii : phase2 ids accepted
ii : - loc ANY:192.168.17.1:* -> ANY:VPN_IP/24:*
ii : - rmt ANY:VPN_IP/24:* -> ANY:192.168.17.1:*
ii : phase2 sa established
ii : LOCALIP:500 <-> REMOTEIP:500
== : phase2 hash_p ( input ) ( 41 bytes )
== : phase2 hash_p ( computed ) ( 20 bytes )
>> : hash payload
K< : recv pfkey GETSPI ESP message
>= : cookies 3cbc1e92c5a533c2:8f1d0b7661933e0d
DB : phase2 found
>= : message 907d2142
>= : encrypt iv ( 16 bytes )
== : encrypt packet ( 52 bytes )
== : stored iv ( 16 bytes )
DB : phase2 resend event canceled ( ref count = 1 )
-> : send IKE packet LOCALIP:500 -> REMOTEIP:500 ( 88 bytes )
== : PFS DH shared secret ( 128 bytes )
== : spi cipher key data ( 32 bytes )
== : spi hmac key data ( 20 bytes )
K> : send pfkey UPDATE ESP message
== : spi cipher key data ( 32 bytes )
== : spi hmac key data ( 20 bytes )
K> : send pfkey UPDATE ESP message
K< : recv pfkey UPDATE ESP message
K< : recv pfkey UPDATE ESP message

I've already reinstalled the software. What has gone wrong? What should I do?

2
  • After 15/03/04 22:16:32 <A : peer tunnel disable message log looks like things start getting torn down, instead of built. Are you sure you're not disabled? Have you tried comparing logs to co-workers' successful connections? Have you tried re-install (maybe a dumb approach, but may fix some potential issues). Also, be careful about consistent filtering. You blob out the "Remote Host" in picture, but log shows IP addresses. (Not really any real security problem in this case since both 192.168.0.1 and 192.168.17.7 are in RFC 1918 range.)
    – TOOGAM
    Mar 4, 2015 at 23:01
  • @TOOGAM: See the update initial post. We share the same configuration file. I'm not disabled, so we can't tell why I can't establish a working connection.
    – Nestor
    Mar 5, 2015 at 11:42

3 Answers 3

0

I had the same problem with ShrewSoft VPN on Windows 8.1 x64. It wasn't connecting - it was only reaching to:


local id configured

remote id configured

pre-shared key configured

bringing up tunnel ...


and that's all. After some time it was disconnecting for timeout.

What I did was:

the appdata folder, the programdata hidden folder

  • the registry - open regedit.exe and search for the string "shrew" and delete everything you find. Most importantly the entry about the ShrewSoft Virtual adapter

  • go to the folder c:windows\system32\drivers and delete "virtualnet.sys" and "vfilter.sys"

  • reboot

  • install ShrewSoft again

  • reboot

  • finally boot, start ShrewSoft, import your pcf and you're done - it works, finally!

-1

I set the compatibility option of the .exe with Windows 7 and Shrew now works fine.

1
  • 2
    Which .exe exactly are you referring to?
    – Daniel B
    Aug 2, 2015 at 19:58
-1

All you need to do is open REGEDIT. Go to HKEY_LOCAL_MACHINE/SOFTWARE/ SHREWSOFT/VPN. and delete all entries. Some entries won't get deleted though don't worry. Then, open the SHREWSOFT Application installer. Don't change install location. It will fail to search for certain values (the values we deleted) while installing. If error POPS, IGNORE it. Once installed. Start VPN CLIENT, Import .PCF file and Voila. It will work.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .