#1  
Old February 12th, 2009, 07:36 AM
klm001 klm001 is offline
Junior Member
NETGEAR Newbie
 
Join Date: Feb 2009
Posts: 10
klm001 is on a distinguished road
Default Hash Payload Incorrect

Hello All,

I have a FVS3183v3. I'm trying to connect the ProSafe VPN to it. Netgear has a site on the step by step config of the router and the software. After doing that, I try to connect but it fails. Here is the log. The main error is "Hash Payload incorrect". I doublechecked and tripplechecked settings. I am using preshared key, which is entered properly on both. Any help would be appreciated.

2-12: 10:32:28.176 My Connections\Phoenix - Using cached address. (Hostname=******) (IP ADDR=******)
2-12: 10:32:28.299 My Connections\Phoenix - Attempting to resolve Hostname (******)
2-12: 10:32:28.486 My Connections\Phoenix - Filter entry 4 added: SECURE 192.168.010.013&255.255.255.255 192.168.001.000&255.255.255.000 ******
2-12: 10:32:28.495
2-12: 10:32:28.495 My Connections\Phoenix - Initiating IKE Phase 1 (Hostname=******) (IP ADDR=******)
2-12: 10:32:28.888 My Connections\Phoenix - SENDING>>>> ISAKMP OAK AG (SA, KE, NON, ID, VID 6x)
2-12: 10:32:31.938 My Connections\Phoenix - RECEIVED<<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID, NAT-D 3x)
2-12: 10:32:31.938 My Connections\Phoenix - Peer is NAT-T draft-01 capable
2-12: 10:32:31.938 My Connections\Phoenix - NAT is detected for Client
2-12: 10:32:32.025 My Connections\Phoenix - Hash Payload is incorrect.
2-12: 10:32:32.025 My Connections\Phoenix - SENDING>>>> ISAKMP OAK INFO (HASH, NOTIFY:INVALID_HASH_INFO)
2-12: 10:32:32.025 My Connections\Phoenix - Discarding IKE SA negotiation
2-12: 10:32:32.025 My Connections\Phoenix - MY COOKIE b9 5f d8 e2 7a 44 b 3a
2-12: 10:32:32.025 My Connections\Phoenix - HIS COOKIE bd 9c fd 94 21 56 76 64
2-12: 10:32:32.026 My Connections\Phoenix - Filter entry 4 removed: SECURE 192.168.010.013&255.255.255.255 192.168.001.000&255.255.255.000 ******
2-12: 10:32:37.072 My Connections\Phoenix - Using cached address. (Hostname=******) (IP ADDR=******)
2-12: 10:32:37.192 My Connections\Phoenix - RECEIVED<<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID, NAT-D 3x)
2-12: 10:32:37.192 My Connections\Phoenix - Received message for non-active SA
2-12: 10:32:42.081 My Connections\Phoenix - Using cached address. (Hostname=******) (IP ADDR=******)
2-12: 10:32:42.199 My Connections\Phoenix - RECEIVED<<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID, NAT-D 3x)
2-12: 10:32:42.199 My Connections\Phoenix - Received message for non-active SA
2-12: 10:32:47.091 My Connections\Phoenix - Using cached address. (Hostname=******) (IP ADDR=******)
2-12: 10:32:47.209 My Connections\Phoenix - RECEIVED<<< ISAKMP OAK AG (SA, KE, NON, ID, HASH, VID, NAT-D 3x)
2-12: 10:32:47.209 My Connections\Phoenix - Received message for non-active SA
2-12: 10:32:52.102 My Connections\Phoenix - Using cached address. (Hostname=******) (IP ADDR=******)
2-12: 10:32:52.231 My Connections\Phoenix - RECEIVED<<< ISAKMP OAK INFO (DEL)
Reply With Quote
  #2  
Old February 12th, 2009, 07:49 AM
klm001 klm001 is offline
Junior Member
NETGEAR Newbie
 
Join Date: Feb 2009
Posts: 10
klm001 is on a distinguished road
Default Re: Hash Payload Incorrect

Also

FVS318v3 Firmware - v3.0_26
ProSafe Client - v10.8.3
Reply With Quote
  #3  
Old February 12th, 2009, 08:53 AM
jmizoguchi jmizoguchi is offline
Banned
 
Join Date: Feb 2007
Location: Kentucky, USA
Posts: 0
jmizoguchi is an unknown quantity at this point
Default Re: Hash Payload Incorrect

setup are available at my site
Reply With Quote
  #4  
Old February 12th, 2009, 10:25 AM
adit's Avatar
adit adit is offline
Moderator
NETGEAR Fanatic
 
Join Date: Nov 2006
Location: USA
Posts: 5,285
adit is on a distinguished road
Default Re: Hash Payload Incorrect

Check your PSK's and make sure all 4 SA's are set for DH Group 2.
Reply With Quote
  #5  
Old February 12th, 2009, 11:28 AM
klm001 klm001 is offline
Junior Member
NETGEAR Newbie
 
Join Date: Feb 2009
Posts: 10
klm001 is on a distinguished road
Default Re: Hash Payload Incorrect

It seems they are all set correctly. It seems no matter what I do it always says "Hash payload incorrect"
Reply With Quote
  #6  
Old February 12th, 2009, 12:35 PM
adit's Avatar
adit adit is offline
Moderator
NETGEAR Fanatic
 
Join Date: Nov 2006
Location: USA
Posts: 5,285
adit is on a distinguished road
Default Re: Hash Payload Incorrect

post screenshots of the vpn configs
Reply With Quote
  #7  
Old February 12th, 2009, 01:09 PM
klm001 klm001 is offline
Junior Member
NETGEAR Newbie
 
Join Date: Feb 2009
Posts: 10
klm001 is on a distinguished road
Default Re: Hash Payload Incorrect

Here is a link for Imageshack

Thanks For the look

http://profile.imageshack.us/user/kl.../image1ec5.jpg
Reply With Quote
  #8  
Old February 12th, 2009, 02:01 PM
adit's Avatar
adit adit is offline
Moderator
NETGEAR Fanatic
 
Join Date: Nov 2006
Location: USA
Posts: 5,285
adit is on a distinguished road
Default Re: Hash Payload Incorrect

need to see all screens.
Reply With Quote
  #9  
Old February 12th, 2009, 04:17 PM
jmizoguchi jmizoguchi is offline
Banned
 
Join Date: Feb 2007
Location: Kentucky, USA
Posts: 0
jmizoguchi is an unknown quantity at this point
Default Re: Hash Payload Incorrect

see my site and setup exactly the same

FQDN on IKE is WRONG.. fvs_remote.com and fvx_local.com
client side"my identiity" should be fixed kery2.fvs_remote.com

do not place any IP under "internal network IP address" , you have 192.168.1.0. you can not use any subnet are on FVS side. use nothing
Reply With Quote
  #10  
Old February 13th, 2009, 04:40 AM
klm001 klm001 is offline
Junior Member
NETGEAR Newbie
 
Join Date: Feb 2009
Posts: 10
klm001 is on a distinguished road
Default Re: Hash Payload Incorrect

adit,

I have 7 images there. 2 from the router setup (IKE and VPN policies), and 5 from the PRoSafe VPN software
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



All times are GMT -8. The time now is 09:40 AM.