#1  
Old January 3rd, 2011, 04:14 PM
nixon9681 nixon9681 is offline
Junior Member
 
Join Date: Jan 2011
Posts: 4
nixon9681 is on a distinguished road
Default DG834Gv5 VPN connection issues

Hi,
We have purchased a DG834Gv5 Modem for a volunteer project for our local Coast guard. This will allow them to connect to their radios from home.
Our issues is that we can not get past Phase2 of the VPN connection.

I have trialed the following VPN client software..

Shrewsoft,
Greenbow
and
Netgear's prosafe

we have had no luck. Below is a cut and paste of the log, not all, but about 2hrs of the work yesterday.

The network is a workgroup and the users only need to connect to one device

If you require any more information please let me know.

Sorry for the lack of info, but there are word restrictions.

Thank you.

Garry.

Code:
Mon, 2011-01-03 16:38:19 - [GCVPN] sending encrypted notification INVALID_ID_INFORMATION to ##.##.##.##:500 
Mon, 2011-01-03 16:38:23 - [GCVPN] STATE_MAIN_R2: retransmission; will wait 40s for response 
Mon, 2011-01-03 16:39:03 - [GCVPN] max number of retransmissions (2) reached STATE_MAIN_R2 
Mon, 2011-01-03 16:42:13 - [GCVPN] responding to Main Mode from unknown peer ##.##.##.## 
Mon, 2011-01-03 16:42:14 - [GCVPN] no suitable connection for peer ##.##.##.## 
Mon, 2011-01-03 16:42:14 - [GCVPN] sending encrypted notification INVALID_ID_INFORMATION to ##.##.##.##:500 
Mon, 2011-01-03 16:42:20 - [GCVPN] no suitable connection for peer ##.##.##.## 
Mon, 2011-01-03 16:42:20 - [GCVPN] sending encrypted notification INVALID_ID_INFORMATION to ##.##.##.##:500 
Mon, 2011-01-03 16:42:24 - [GCVPN] STATE_MAIN_R2: retransmission; will wait 20s for response 
Mon, 2011-01-03 16:42:24 - [GCVPN] no suitable connection for peer ##.##.##.## 
Mon, 2011-01-03 16:42:24 - [GCVPN] sending encrypted notification INVALID_ID_INFORMATION to ##.##.##.##:500 
Mon, 2011-01-03 16:42:30 - [GCVPN] no suitable connection for peer ##.##.##.## 
Mon, 2011-01-03 16:42:30 - [GCVPN] sending encrypted notification INVALID_ID_INFORMATION to ##.##.##.##:500 
Mon, 2011-01-03 16:42:34 - [GCVPN] no suitable connection for peer ##.##.##.## 
Mon, 2011-01-03 16:42:34 - [GCVPN] sending encrypted notification INVALID_ID_INFORMATION to ##.##.##.##:500 
Mon, 2011-01-03 16:42:40 - [GCVPN] no suitable connection for peer ##.##.##.## 
Mon, 2011-01-03 16:42:40 - [GCVPN] sending encrypted notification INVALID_ID_INFORMATION to ##.##.##.##:500 
Mon, 2011-01-03 16:42:44 - [GCVPN] STATE_MAIN_R2: retransmission; will wait 40s for response 
Mon, 2011-01-03 16:43:24 - [GCVPN] max number of retransmissions (2) reached STATE_MAIN_R2 
Mon, 2011-01-03 16:45:08 - [GCVPN] responding to Main Mode from unknown peer ##.##.##.## 
Mon, 2011-01-03 16:45:10 - [GCVPN] sent MR3, ISAKMP SA established 
Mon, 2011-01-03 16:45:10 - [GCVPN] Dead Peer Detection (RFC 3706): enabled 
Mon, 2011-01-03 16:45:10 - [GCVPN] sending encrypted notification INVALID_ID_INFORMATION to ##.##.##.##:500 
Mon, 2011-01-03 16:45:16 - [GCVPN] sending encrypted notification INVALID_MESSAGE_ID to ##.##.##.##:500 
Mon, 2011-01-03 16:45:21 - [GCVPN] sending encrypted notification INVALID_MESSAGE_ID to ##.##.##.##:500 
Mon, 2011-01-03 16:45:26 - [GCVPN] sending encrypted notification INVALID_MESSAGE_ID to ##.##.##.##:500 
Mon, 2011-01-03 16:45:30 - [GCVPN] sending encrypted notification INVALID_MESSAGE_ID to ##.##.##.##:500 
Mon, 2011-01-03 16:45:35 - [GCVPN] sending encrypted notification INVALID_MESSAGE_ID to ##.##.##.##:500 
Mon, 2011-01-03 16:46:21 - [GCVPN] received Delete SA payload: deleting ISAKMP State #29 
Mon, 2011-01-03 16:46:34 - [GCVPN] responding to Main Mode from unknown peer ##.##.##.## 
Mon, 2011-01-03 16:46:36 - [GCVPN] sent MR3, ISAKMP SA established 
Mon, 2011-01-03 16:46:36 - [GCVPN] Dead Peer Detection (RFC 3706): enabled 
Mon, 2011-01-03 16:46:37 - [GCVPN] sending encrypted notification INVALID_ID_INFORMATION to ##.##.##.##:500 
Mon, 2011-01-03 16:46:41 - [GCVPN] sending encrypted notification INVALID_MESSAGE_ID to ##.##.##.##:500 
Mon, 2011-01-03 16:46:47 - [GCVPN] sending encrypted notification INVALID_MESSAGE_ID to ##.##.##.##:500 
Mon, 2011-01-03 16:46:52 - [GCVPN] sending encrypted notification INVALID_MESSAGE_ID to ##.##.##.##:500 
Mon, 2011-01-03 16:46:56 - [GCVPN] sending encrypted notification INVALID_MESSAGE_ID to ##.##.##.##:500 
Mon, 2011-01-03 16:47:01 - [GCVPN] sending encrypted notification INVALID_MESSAGE_ID to ##.##.##.##;500 
Mon, 2011-01-03 16:47:34 - [GCVPN] received Delete SA payload: deleting ISAKMP State #30 
Mon, 2011-01-03 16:48:30 - [GCVPN] responding to Main Mode from unknown peer ##.##.##.## 
Mon, 2011-01-03 16:48:32 - [GCVPN] sent MR3, ISAKMP SA established 
Mon, 2011-01-03 16:48:32 - [GCVPN] Dead Peer Detection (RFC 3706): enabled 
Mon, 2011-01-03 16:48:33 - [GCVPN] sending encrypted notification INVALID_ID_INFORMATION to ##.##.##.##:500 
Mon, 2011-01-03 16:48:38 - [GCVPN] sending encrypted notification INVALID_MESSAGE_ID to ##.##.##.##:500 
Mon, 2011-01-03 16:48:44 - [GCVPN] sending encrypted notification INVALID_MESSAGE_ID to ##.##.##.##:500 
Mon, 2011-01-03 16:48:47 - [GCVPN] sending encrypted notification INVALID_MESSAGE_ID to ##.##.##.##:500 
Mon, 2011-01-03 16:48:52 - [GCVPN] sending encrypted notification INVALID_MESSAGE_ID to ##.##.##.##:500 
Mon, 2011-01-03 16:48:57 - [GCVPN] sending encrypted notification INVALID_MESSAGE_ID to ##.##.##.##:500 
Mon, 2011-01-03 16:49:53 - [GCVPN] received Delete SA payload: deleting ISAKMP State #31 
Mon, 2011-01-03 16:50:07 - [GCVPN] responding to Main Mode from unknown peer ##.##.##.## 
Mon, 2011-01-03 16:50:08 - [GCVPN] sent MR3, ISAKMP SA established 
Mon, 2011-01-03 16:50:08 - [GCVPN] Dead Peer Detection (RFC 3706): enabled 
Mon, 2011-01-03 16:50:09 - [GCVPN] sending encrypted notification INVALID_ID_INFORMATION to ##.##.##.##:500 
Mon, 2011-01-03 16:50:13 - [GCVPN] sending encrypted notification INVALID_MESSAGE_ID to ##.##.##.##:500 
Mon, 2011-01-03 16:50:19 - [GCVPN] sending encrypted notification INVALID_MESSAGE_ID to ##.##.##.##:500 
Mon, 2011-01-03 16:50:24 - [GCVPN] sending encrypted notification INVALID_MESSAGE_ID to ##.##.##.##:500 
Mon, 2011-01-03 16:50:28 - [GCVPN] sending encrypted notification INVALID_MESSAGE_ID to ##.##.##.##:500 
Mon, 2011-01-03 16:50:33 - [GCVPN] sending encrypted notification INVALID_MESSAGE_ID to 123.208.244.243:500 
Mon, 2011-01-03 16:51:04 - [GCVPN] received Delete SA payload: deleting ISAKMP State #32 
Tue, 2011-01-04 07:54:53 - deleting connection "GCVPN" 
Tue, 2011-01-04 07:54:54 - added connection description "GCVPN" 
Tue, 2011-01-04 07:56:30 - [GCVPN] responding to Main Mode from unknown peer 61.9.216.193 
Tue, 2011-01-04 07:56:30 - [GCVPN] sent MR3, ISAKMP SA established 
Tue, 2011-01-04 07:56:30 - [GCVPN] Dead Peer Detection (RFC 3706): enabled 
Tue, 2011-01-04 07:56:30 - [GCVPN] sending encrypted notification INVALID_ID_INFORMATION to ##.##.##.##:500 
Tue, 2011-01-04 07:56:36 - [GCVPN] sending encrypted notification INVALID_MESSAGE_ID to ##.##.##.##:500 
Tue, 2011-01-04 07:56:41 - [GCVPN] sending encrypted notification INVALID_MESSAGE_ID to ##.##.##.##:500 
Tue, 2011-01-04 08:56:30 - [GCVPN] initiating Main Mode to replace #33 
Tue, 2011-01-04 08:56:30 - [GCVPN] ISAKMP SA expired (LATEST!) 
Tue, 2011-01-04 08:56:40 - [GCVPN] STATE_MAIN_I1: retransmission; will wait 20s for response 
Tue, 2011-01-04 08:57:00 - [GCVPN] STATE_MAIN_I1: retransmission; will wait 40s for response 
Tue, 2011-01-04 08:57:40 - [GCVPN] STATE_MAIN_I1: retransmission; will wait 40s for response 
Tue, 2011-01-04 08:58:20 - [GCVPN] STATE_MAIN_I1: retransmission; will wait 40s for response 
Tue, 2011-01-04 08:59:00 - [GCVPN] STATE_MAIN_I1: retransmission; will wait 40s for response 
Tue, 2011-01-04 08:59:40 - [GCVPN] STATE_MAIN_I1: retransmission; will wait 40s for response 
Tue, 2011-01-04 09:00:20 - [GCVPN] STATE_MAIN_I1: retransmission; will wait 40s for response 
Tue, 2011-01-04 09:01:00 - [GCVPN] STATE_MAIN_I1: retransmission; will wait 40s for response 
Tue, 2011-01-04 09:01:40 - [GCVPN] STATE_MAIN_I1: retransmission; will wait 40s for response 
Tue, 2011-01-04 09:02:20 - [GCVPN] STATE_MAIN_I1: retransmission; will wait 40s for response 
Tue, 2011-01-04 09:03:00 - [GCVPN] STATE_MAIN_I1: retransmission; will wait 40s for response 
Tue, 2011-01-04 09:03:40 - [GCVPN] STATE_MAIN_I1: retransmission; will wait 40s for response 
Tue, 2011-01-04 09:04:20 - [GCVPN] STATE_MAIN_I1: retransmission; will wait 40s for response 
Tue, 2011-01-04 09:05:00 - [GCVPN] STATE_MAIN_I1: retransmission; will wait 40s for response 
Tue, 2011-01-04 09:05:40 - [GCVPN] STATE_MAIN_I1: retransmission; will wait 40s for response 
Tue, 2011-01-04 09:06:20 - [GCVPN] STATE_MAIN_I1: retransmission; will wait 40s for response 
Tue, 2011-01-04 09:07:00 - [GCVPN] STATE_MAIN_I1: retransmission; will wait 40s for response 
Tue, 2011-01-04 09:07:40 - [GCVPN] STATE_MAIN_I1: retransmission; will wait 40s for response 
Tue, 2011-01-04 09:08:20 - [GCVPN] STATE_MAIN_I1: retransmission; will wait 40s for response 
Tue, 2011-01-04 09:09:00 - [GCVPN] STATE_MAIN_I1: retransmission; will wait 40s for response 
Tue, 2011-01-04 09:09:40 - [GCVPN] max number of retransmissions (20) reached STATE_MAIN_I1.  No response (or no acceptable response) to our first IKE message 
Tue, 2011-01-04 09:09:40 - [GCVPN] initiating Main Mode to replace #34 
Tue, 2011-01-04 09:09:50 - [GCVPN] STATE_MAIN_I1: retransmission; will wait 20s for response 
Tue, 2011-01-04 09:10:10 - [GCVPN] STATE_MAIN_I1: retransmission; will wait 40s for response 
Tue, 2011-01-04 09:10:51 - [GCVPN] STATE_MAIN_I1: retransmission; will wait 40s for response 
Tue, 2011-01-04 09:11:31 - [GCVPN] STATE_MAIN_I1: retransmission; will wait 40s for response 
Tue, 2011-01-04 09:12:11 - [GCVPN] STATE_MAIN_I1: retransmission; will wait 40s for response

Last edited by Mars Mug; January 3rd, 2011 at 10:09 PM. Reason: Added Code tags
Reply With Quote
  #2  
Old January 3rd, 2011, 04:22 PM
jmizoguchi's Avatar
jmizoguchi jmizoguchi is offline
Senior Member
NETGEAR Fanatic
 
Join Date: Feb 2007
Location: Kentucky, USA
Posts: 95,363
jmizoguchi is on a distinguished road
Default Re: DG834Gv5 VPN connection issues

see my site

fvs336G would be reference point to setup
__________________
VPN Case Study (www.vpncasestudy.com)
Our Second To None VPN Related Setup Case Study
"One Stop Solution To Your Netgear VPN Connectivity"
*Visit the site for Non-VPN related Doc & Links* [Windows & Mac user/support]

Most Other Useful Docs -"General Technical Documentation", "Router Reset", "Router Setup", "Print Server Tips", "Remote Admin"
"Wireless Tips"


Forum Policy

June Mizoguchi-i....@vpncasestudy.com
Reply With Quote
  #3  
Old January 3rd, 2011, 06:36 PM
nixon9681 nixon9681 is offline
Junior Member
 
Join Date: Jan 2011
Posts: 4
nixon9681 is on a distinguished road
Default Re: DG834Gv5 VPN connection issues

thanks for your reply Jim,

I have visited your site but when I try to access the docs it asks for a user name and password, but there is no where where I can set up an account.

Where do I set up?

Garry.
Reply With Quote
  #4  
Old January 3rd, 2011, 06:39 PM
jmizoguchi's Avatar
jmizoguchi jmizoguchi is offline
Senior Member
NETGEAR Fanatic
 
Join Date: Feb 2007
Location: Kentucky, USA
Posts: 95,363
jmizoguchi is on a distinguished road
Default Re: DG834Gv5 VPN connection issues

Read the pop up. It says exactly Email me! NO PM
__________________
VPN Case Study (www.vpncasestudy.com)
Our Second To None VPN Related Setup Case Study
"One Stop Solution To Your Netgear VPN Connectivity"
*Visit the site for Non-VPN related Doc & Links* [Windows & Mac user/support]

Most Other Useful Docs -"General Technical Documentation", "Router Reset", "Router Setup", "Print Server Tips", "Remote Admin"
"Wireless Tips"


Forum Policy

June Mizoguchi-i....@vpncasestudy.com
Reply With Quote
  #5  
Old January 4th, 2011, 09:11 PM
nixon9681 nixon9681 is offline
Junior Member
 
Join Date: Jan 2011
Posts: 4
nixon9681 is on a distinguished road
Default Re: DG834Gv5 VPN connection issues

I have looked at case study #127 (Shrew Client 2.1.5-release (Dyn IP) & ProSafe VPN Firewall FVS336G (Stat IP))

I have followed it as best as I can considering that it is for the DG834G modem. The only differences are Cliet Tab= can't tick 'Enable Client Login Banner' and the Modem does not support 'Aggressive' mode.

It looks like a connection has been meade, but I can not ping any thing on the network past the modem.

Wed, 2011-01-05 16:03:27 - [CGVPN] responding to Main Mode from unknown peer 61.9.216.193
Wed, 2011-01-05 16:03:27 - [CGVPN] sent MR3, ISAKMP SA established
Wed, 2011-01-05 16:03:27 - [CGVPN] Dead Peer Detection (RFC 3706): not enabled because peer did not advertise it


If I ping the device from the client...

Wed, 2011-01-05 16:07:40 - [CGVPN] sending encrypted notification INVALID_ID_INFORMATION to 61.9.216.193:500
Wed, 2011-01-05 16:07:45 - [CGVPN] sending encrypted notification INVALID_MESSAGE_ID to 61.9.216.193:500
Wed, 2011-01-05 16:07:50 - [CGVPN] sending encrypted notification INVALID_MESSAGE_ID to 61.9.216.193:500
Wed, 2011-01-05 16:07:55 - [CGVPN] sending encrypted notification INVALID_MESSAGE_ID to 61.9.216.193:500
Wed, 2011-01-05 16:07:57 - [CGVPN] sending encrypted notification INVALID_ID_INFORMATION to 61.9.216.193:500
Wed, 2011-01-05 16:08:02 - [CGVPN] sending encrypted notification INVALID_MESSAGE_ID to 61.9.216.193:500
Wed, 2011-01-05 16:08:07 - [CGVPN] sending encrypted notification INVALID_MESSAGE_ID to 61.9.216.193:500

I also cannot ping the client from the device.

I am at a loss why this wont connect.

Garry.
Reply With Quote
  #6  
Old January 5th, 2011, 03:39 AM
jmizoguchi's Avatar
jmizoguchi jmizoguchi is offline
Senior Member
NETGEAR Fanatic
 
Join Date: Feb 2007
Location: Kentucky, USA
Posts: 95,363
jmizoguchi is on a distinguished road
Default Re: DG834Gv5 VPN connection issues

Quote:
I have followed it as best as I can considering that it is for the DG834G modem. The only differences are Cliet Tab= can't tick 'Enable Client Login Banner' and the Modem does not support 'Aggressive' mode.
you don't need banner... and yes you can only use main mode on DG unit

....

log does not help all the way.

email me entire screenshot of both side
__________________
VPN Case Study (www.vpncasestudy.com)
Our Second To None VPN Related Setup Case Study
"One Stop Solution To Your Netgear VPN Connectivity"
*Visit the site for Non-VPN related Doc & Links* [Windows & Mac user/support]

Most Other Useful Docs -"General Technical Documentation", "Router Reset", "Router Setup", "Print Server Tips", "Remote Admin"
"Wireless Tips"


Forum Policy

June Mizoguchi-i....@vpncasestudy.com
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



All times are GMT -8. The time now is 07:32 AM.