Environment
Novell BorderManager 3.8
BM38SP4.EXE applied
VPN Client 3.8.9
VPN Client 3.8.10
NMAS Authentication
BM38SP4.EXE applied
VPN Client 3.8.9
VPN Client 3.8.10
NMAS Authentication
Situation
Error: "Failed to connect to the Authentication Gateway"
Unable to open SYS:\_netware\vpn\PRESHAR.KEY! errno= 1 seen in the server side IKE log file.
Error: Pre-shared key not configured for C2S seen in the csaudit log file on the server.
Problem only shows for a couple of VPN clients per day and once you try to connect at a later time it works fine.
Unable to open SYS:\_netware\vpn\PRESHAR.KEY! errno= 1 seen in the server side IKE log file.
Error: Pre-shared key not configured for C2S seen in the csaudit log file on the server.
Problem only shows for a couple of VPN clients per day and once you try to connect at a later time it works fine.
Resolution
Fixed with latest VPN client
Status
Reported to EngineeringAdditional Information
In the client side IKE log file can be seen that NMAS
authentication is selected "Negotiating for an NMAS user"
In the server side IKE log file the following entries are
seen:
30.3.2006 10:58:16 Start IKE-SA 93723DE0 -
Responder,src=x.x.x.x,dst=x.x.x.x,TotSA=100
30.3.2006 10:58:16 AUTH ALG IS 3
30.3.2006 10:58:16 Peer requesting Pre shared authentication method Accept
30.3.2006 10:58:16 IKE SA NEGOTIATION: Peer lifetime = 28800 My lifetime=28800
30.3.2006 10:58:16 Unable to open SYS:\_netware\vpn\PRESHAR.KEY! errno= 1
30.3.2006 10:58:16 Processed SA-PAYLOAD unsuccessful - Unable to get the pre-shared key, dst=x.x.x.x.
30.3.2006 10:58:16 Error processing the first MM packet - Unable to get the pre-shared key
30.3.2006 10:58:16 IKE-SA 93723DE0 is Deleted,I-COOKIE=369B9BBA,R-COOKIE=F5B2A502,dst=x.x.x.x
30.3.2006 10:58:16 AUTH ALG IS 3
30.3.2006 10:58:16 Peer requesting Pre shared authentication method Accept
30.3.2006 10:58:16 IKE SA NEGOTIATION: Peer lifetime = 28800 My lifetime=28800
30.3.2006 10:58:16 Unable to open SYS:\_netware\vpn\PRESHAR.KEY! errno= 1
30.3.2006 10:58:16 Processed SA-PAYLOAD unsuccessful - Unable to get the pre-shared key, dst=x.x.x.x.
30.3.2006 10:58:16 Error processing the first MM packet - Unable to get the pre-shared key
30.3.2006 10:58:16 IKE-SA 93723DE0 is Deleted,I-COOKIE=369B9BBA,R-COOKIE=F5B2A502,dst=x.x.x.x
In the csaudit log file on the server the following is seen for
this connection:
my-his : F5B2A502097DABA0-369B9BBAD044B9EE dst: x.x.x.x src:
x.x.x.x
Formerly known as TID# 10100860