[VPN] Cisco 3015 Log

[Evan Francen]

I have one user that's having problems connecting to our Cisco 3015 VPN
Concentrator.  He can connect ~2 of 50 times, on average.  I find the
information below in the Concentrator log files, and I was hoping someone on
this list might be able to point me the right direction.

50235 10/23/2002 17:44:00.930 SEV=4 IKE/52 RPT=1217 201.214.18.178 
Group [VPNUser] User [DOMAINX\mwilliams]
User (DOMAINX\mwilliams) authenticated.

50236 10/23/2002 17:44:01.760 SEV=5 IKE/184 RPT=1215 201.214.18.178 
Group [VPNUser] User [DOMAINX\mwilliams]
Client OS: N/A
Client Application Version: 3.5 (Rel)

50238 10/23/2002 17:44:37.610 SEV=4 IKEDBG/65 RPT=397 201.214.18.178
Group [VPNUser] User [DOMAINX\mwilliams]
IKE TM V6 FSM error history (struct &0x4c5db3c)
<state>, <event>:
TM_DONE, EV_ERROR
TM_WAIT_QM_MSG, EV_TIMEOUT
TM_WAIT_QM_MSG, NullEvent
TM_SND_REPLY, EV_SND_MSG

50243 10/23/2002 17:44:37.610 SEV=4 IKEDBG/65 RPT=398 201.214.18.178
Group [VPNUser] User [DOMAINX\mwilliams]
IKE AM Responder FSM error history (struct &0x5bd1bd0)
<state>, <event>:
AM_DONE, EV_ERROR
AM_TM_INIT_MODECFG_V6H, EV_TM_FAIL
AM_TM_INIT_MODECFG_V6H, NullEvent
AM_TM_INIT_MODECFG, EV_WAIT

50249 10/23/2002 17:45:02.350 SEV=4 IKE/136 RPT=249 201.214.18.178 
Group [VPNUser] User [DOMAINX\mwilliams]
IKE session establishment timed out [AM_WAIT_DELETE], aborting!

50251 10/23/2002 17:45:12.350 SEV=4 IKE/136 RPT=250 201.214.18.178 
Group [VPNUser] User [DOMAINX\mwilliams]
IKE session establishment timed out [AM_WAIT_DELETE], aborting!

50253 10/23/2002 17:45:22.350 SEV=4 IKE/137 RPT=124 201.214.18.178 
Group [VPNUser] User [DOMAINX\mwilliams]
Reaper overriding refCnt [0] and tunnelCnt [2] -- deleting SA!

Any explanations, or references to some night time reading material
(relative to this!) would be greatly appreciated.
Thanks in advance!

Evan Francen, CCNP
efrancen at jasc.com