vpnc no response from target

Bug #257451 reported by Andrew
28
This bug affects 4 people
Affects Status Importance Assigned to Milestone
vpnc (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

Binary package hint: vpnc

I am trying to connect to corporate vpn and get no response from target. I tried with changing following values still the same issue

Local Port 10000
NAT Traversal Mode cisco-udp
On the windows client IPSec over TCP port as 4005 and even changed Local Port to 4005 and still no difference.

 vpnc --version
vpnc version 0.5.1
Copyright (C) 2002-2006 Geoffrey Keating, Maurice Massar, others
vpnc comes with NO WARRANTY, to the extent permitted by law.
You may redistribute copies of vpnc under the terms of the GNU General
Public License. For more information about these matters, see the files
named COPYING.
Built with openssl (certificate) support. Be aware of the
license implications.

Supported DH-Groups: nopfs dh1 dh2 dh5
Supported Hash-Methods: md5 sha1
Supported Encryptions: null des 3des aes128 aes192 aes256
Supported Auth-Methods: psk psk+xauth hybrid(rsa)

Linux ubuntu 2.6.24-19-generic #1 SMP Fri Jul 11 23:41:49 UTC 2008 i686 GNU/Linux

vpnc --no-detach --debug 3
Enter password for xaviea@<companyvpnservername>.com:

vpnc version 0.5.1
   hex_test: 00010203

S1 init_sockaddr
 [2008-08-12 16:42:45]

S2 make_socket
 [2008-08-12 16:42:45]

S3 setup_tunnel
 [2008-08-12 16:42:45]
   using interface tun0

S4 do_phase1
 [2008-08-12 16:42:45]

S4.1 create_nonce
 [2008-08-12 16:42:45]
   i_cookie: 0a071d69 e5e6aca3
   i_nonce:
   3eac203c 5d41372f 0f367efe e6dd7258 1cb424d6

S4.2 dh setup
 [2008-08-12 16:42:45]
   dh_public:
   c4d5e31f 34839649 2a008fae 336d79e3 dd958981 ed4464ea e3a605b8 9f6fa865
   984d42ef 2456666d 9b99eee2 958e868e 75146b5a f07ca1b0 88ce0d36 3a68c490
   63f0248f d146b781 d131f159 de44d3a8 efdbf4b8 82c31a10 7c0b07b0 0ecf7883
   0bbdcf38 5e8984f9 6c09fca3 1945e023 28587dcf dca48860 73f42910 5b75f032

S4.3 AM packet_1
 [2008-08-12 16:42:45]

 sending: ========================>
   BEGIN_PARSE
   Recieved Packet Len: 830
   i_cookie: 0a071d69 e5e6aca3
   r_cookie: 00000000 00000000
   payload: 01 (ISAKMP_PAYLOAD_SA)
   isakmp_version: 10
   exchange_type: 04 (ISAKMP_EXCHANGE_AGGRESSIVE)
   flags: 00
   message_id: 00000000
   len: 0000033e

   PARSING PAYLOAD type: 01 (ISAKMP_PAYLOAD_SA)
   next_type: 04 (ISAKMP_PAYLOAD_KE)
   length: 01dc
   sa.doi: 00000001 (ISAKMP_DOI_IPSEC)
   sa.situation: 00000001 (ISAKMP_IPSEC_SIT_IDENTITY_ONLY)

   PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)
   next_type: 00 (ISAKMP_PAYLOAD_NONE)
   length: 01d0
   p.number: 00
   p.prot_id: 01 (ISAKMP_IPSEC_PROTO_ISAKMP)
   p.spi_size: 00
   length: 0c
   p.spi:

   PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
   next_type: 03 (ISAKMP_PAYLOAD_T)
   length: 0028
   t.number: 00
   t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
   t.attributes.type: 000e (IKE_ATTRIB_KEY_LENGTH)
   t.attributes.u.attr_16: 0100
   t.attributes.type: 0001 (IKE_ATTRIB_ENC)
   t.attributes.u.attr_16: 0007 (IKE_ENC_AES_CBC)
   t.attributes.type: 0002 (IKE_ATTRIB_HASH)
   t.attributes.u.attr_16: 0002 (IKE_HASH_SHA)
   t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
   t.attributes.u.attr_16: fadd (IKE_AUTH_HybridInitRSA)
   t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
   t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
   t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE)
   t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS)
   t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION)
   t.attributes.u.lots.length: 0004
   t.attributes.u.lots.data: 0020c49b
   DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)

   PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
   next_type: 03 (ISAKMP_PAYLOAD_T)
   length: 0028
   t.number: 01
   t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
   t.attributes.type: 000e (IKE_ATTRIB_KEY_LENGTH)
   t.attributes.u.attr_16: 0100
   t.attributes.type: 0001 (IKE_ATTRIB_ENC)
   t.attributes.u.attr_16: 0007 (IKE_ENC_AES_CBC)
   t.attributes.type: 0002 (IKE_ATTRIB_HASH)
   t.attributes.u.attr_16: 0001 (IKE_HASH_MD5)
   t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
   t.attributes.u.attr_16: fadd (IKE_AUTH_HybridInitRSA)
   t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
   t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
   t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE)
   t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS)
   t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION)
   t.attributes.u.lots.length: 0004
   t.attributes.u.lots.data: 0020c49b
   DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)

   PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
   next_type: 03 (ISAKMP_PAYLOAD_T)
   length: 0028
   t.number: 02
   t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
   t.attributes.type: 000e (IKE_ATTRIB_KEY_LENGTH)
   t.attributes.u.attr_16: 00c0
   t.attributes.type: 0001 (IKE_ATTRIB_ENC)
   t.attributes.u.attr_16: 0007 (IKE_ENC_AES_CBC)
   t.attributes.type: 0002 (IKE_ATTRIB_HASH)
   t.attributes.u.attr_16: 0002 (IKE_HASH_SHA)
   t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
   t.attributes.u.attr_16: fadd (IKE_AUTH_HybridInitRSA)
   t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
   t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
   t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE)
   t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS)
   t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION)
   t.attributes.u.lots.length: 0004
   t.attributes.u.lots.data: 0020c49b
   DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)

   PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
   next_type: 03 (ISAKMP_PAYLOAD_T)
   length: 0028
   t.number: 03
   t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
   t.attributes.type: 000e (IKE_ATTRIB_KEY_LENGTH)
   t.attributes.u.attr_16: 00c0
   t.attributes.type: 0001 (IKE_ATTRIB_ENC)
   t.attributes.u.attr_16: 0007 (IKE_ENC_AES_CBC)
   t.attributes.type: 0002 (IKE_ATTRIB_HASH)
   t.attributes.u.attr_16: 0001 (IKE_HASH_MD5)
   t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
   t.attributes.u.attr_16: fadd (IKE_AUTH_HybridInitRSA)
   t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
   t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
   t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE)
   t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS)
   t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION)
   t.attributes.u.lots.length: 0004
   t.attributes.u.lots.data: 0020c49b
   DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)

   PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
   next_type: 03 (ISAKMP_PAYLOAD_T)
   length: 0028
   t.number: 04
   t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
   t.attributes.type: 000e (IKE_ATTRIB_KEY_LENGTH)
   t.attributes.u.attr_16: 0080
   t.attributes.type: 0001 (IKE_ATTRIB_ENC)
   t.attributes.u.attr_16: 0007 (IKE_ENC_AES_CBC)
   t.attributes.type: 0002 (IKE_ATTRIB_HASH)
   t.attributes.u.attr_16: 0002 (IKE_HASH_SHA)
   t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
   t.attributes.u.attr_16: fadd (IKE_AUTH_HybridInitRSA)
   t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
   t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
   t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE)
   t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS)
   t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION)
   t.attributes.u.lots.length: 0004
   t.attributes.u.lots.data: 0020c49b
   DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)

   PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
   next_type: 03 (ISAKMP_PAYLOAD_T)
   length: 0028
   t.number: 05
   t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
   t.attributes.type: 000e (IKE_ATTRIB_KEY_LENGTH)
   t.attributes.u.attr_16: 0080
   t.attributes.type: 0001 (IKE_ATTRIB_ENC)
   t.attributes.u.attr_16: 0007 (IKE_ENC_AES_CBC)
   t.attributes.type: 0002 (IKE_ATTRIB_HASH)
   t.attributes.u.attr_16: 0001 (IKE_HASH_MD5)
   t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
   t.attributes.u.attr_16: fadd (IKE_AUTH_HybridInitRSA)
   t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
   t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
   t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE)
   t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS)
   t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION)
   t.attributes.u.lots.length: 0004
   t.attributes.u.lots.data: 0020c49b
   DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)

   PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
   next_type: 03 (ISAKMP_PAYLOAD_T)
   length: 0024
   t.number: 06
   t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
   t.attributes.type: 0001 (IKE_ATTRIB_ENC)
   t.attributes.u.attr_16: 0005 (IKE_ENC_3DES_CBC)
   t.attributes.type: 0002 (IKE_ATTRIB_HASH)
   t.attributes.u.attr_16: 0002 (IKE_HASH_SHA)
   t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
   t.attributes.u.attr_16: fadd (IKE_AUTH_HybridInitRSA)
   t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
   t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
   t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE)
   t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS)
   t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION)
   t.attributes.u.lots.length: 0004
   t.attributes.u.lots.data: 0020c49b
   DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)

   PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
   next_type: 03 (ISAKMP_PAYLOAD_T)
   length: 0024
   t.number: 07
   t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
   t.attributes.type: 0001 (IKE_ATTRIB_ENC)
   t.attributes.u.attr_16: 0005 (IKE_ENC_3DES_CBC)
   t.attributes.type: 0002 (IKE_ATTRIB_HASH)
   t.attributes.u.attr_16: 0001 (IKE_HASH_MD5)
   t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
   t.attributes.u.attr_16: fadd (IKE_AUTH_HybridInitRSA)
   t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
   t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
   t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE)
   t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS)
   t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION)
   t.attributes.u.lots.length: 0004
   t.attributes.u.lots.data: 0020c49b
   DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)

   PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
   next_type: 03 (ISAKMP_PAYLOAD_T)
   length: 0024
   t.number: 08
   t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
   t.attributes.type: 0001 (IKE_ATTRIB_ENC)
   t.attributes.u.attr_16: 0001 (IKE_ENC_DES_CBC)
   t.attributes.type: 0002 (IKE_ATTRIB_HASH)
   t.attributes.u.attr_16: 0002 (IKE_HASH_SHA)
   t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
   t.attributes.u.attr_16: fadd (IKE_AUTH_HybridInitRSA)
   t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
   t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
   t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE)
   t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS)
   t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION)
   t.attributes.u.lots.length: 0004
   t.attributes.u.lots.data: 0020c49b
   DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)

   PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
   next_type: 03 (ISAKMP_PAYLOAD_T)
   length: 0024
   t.number: 09
   t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
   t.attributes.type: 0001 (IKE_ATTRIB_ENC)
   t.attributes.u.attr_16: 0001 (IKE_ENC_DES_CBC)
   t.attributes.type: 0002 (IKE_ATTRIB_HASH)
   t.attributes.u.attr_16: 0001 (IKE_HASH_MD5)
   t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
   t.attributes.u.attr_16: fadd (IKE_AUTH_HybridInitRSA)
   t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
   t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
   t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE)
   t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS)
   t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION)
   t.attributes.u.lots.length: 0004
   t.attributes.u.lots.data: 0020c49b
   DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)

   PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
   next_type: 03 (ISAKMP_PAYLOAD_T)
   length: 0024
   t.number: 0a
   t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
   t.attributes.type: 0001 (IKE_ATTRIB_ENC)
   t.attributes.u.attr_16: 0000 (IKE_ENC_NO_CBC)
   t.attributes.type: 0002 (IKE_ATTRIB_HASH)
   t.attributes.u.attr_16: 0002 (IKE_HASH_SHA)
   t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
   t.attributes.u.attr_16: fadd (IKE_AUTH_HybridInitRSA)
   t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
   t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
   t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE)
   t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS)
   t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION)
   t.attributes.u.lots.length: 0004
   t.attributes.u.lots.data: 0020c49b
   DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)

   PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)
   next_type: 00 (ISAKMP_PAYLOAD_NONE)
   length: 0024
   t.number: 0b
   t.id: 01 (ISAKMP_IPSEC_KEY_IKE)
   t.attributes.type: 0001 (IKE_ATTRIB_ENC)
   t.attributes.u.attr_16: 0000 (IKE_ENC_NO_CBC)
   t.attributes.type: 0002 (IKE_ATTRIB_HASH)
   t.attributes.u.attr_16: 0001 (IKE_HASH_MD5)
   t.attributes.type: 0003 (IKE_ATTRIB_AUTH_METHOD)
   t.attributes.u.attr_16: fadd (IKE_AUTH_HybridInitRSA)
   t.attributes.type: 0004 (IKE_ATTRIB_GROUP_DESC)
   t.attributes.u.attr_16: 0002 (IKE_GROUP_MODP_1024)
   t.attributes.type: 000b (IKE_ATTRIB_LIFE_TYPE)
   t.attributes.u.attr_16: 0001 (IKE_LIFE_TYPE_SECONDS)
   t.attributes.type: 000c (IKE_ATTRIB_LIFE_DURATION)
   t.attributes.u.lots.length: 0004
   t.attributes.u.lots.data: 0020c49b
   DONE PARSING PAYLOAD type: 03 (ISAKMP_PAYLOAD_T)

   PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
   DONE PARSING PAYLOAD type: 02 (ISAKMP_PAYLOAD_P)

   PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
   DONE PARSING PAYLOAD type: 01 (ISAKMP_PAYLOAD_SA)

   PARSING PAYLOAD type: 04 (ISAKMP_PAYLOAD_KE)
   next_type: 0a (ISAKMP_PAYLOAD_NONCE)
   length: 0084
   ke.data:
   c4d5e31f 34839649 2a008fae 336d79e3 dd958981 ed4464ea e3a605b8 9f6fa865
   984d42ef 2456666d 9b99eee2 958e868e 75146b5a f07ca1b0 88ce0d36 3a68c490
   63f0248f d146b781 d131f159 de44d3a8 efdbf4b8 82c31a10 7c0b07b0 0ecf7883
   0bbdcf38 5e8984f9 6c09fca3 1945e023 28587dcf dca48860 73f42910 5b75f032
   DONE PARSING PAYLOAD type: 04 (ISAKMP_PAYLOAD_KE)

   PARSING PAYLOAD type: 0a (ISAKMP_PAYLOAD_NONCE)
   next_type: 05 (ISAKMP_PAYLOAD_ID)
   length: 0018
   ke.data:
   3eac203c 5d41372f 0f367efe e6dd7258 1cb424d6
   DONE PARSING PAYLOAD type: 0a (ISAKMP_PAYLOAD_NONCE)

   PARSING PAYLOAD type: 05 (ISAKMP_PAYLOAD_ID)
   next_type: 0d (ISAKMP_PAYLOAD_VID)
   length: 0012
   id.type: 0b (ISAKMP_IPSEC_ID_KEY_ID)
   id.protocol: 11
   id.port: 01f4
   id.data: 436f7270 56504e2d 3478
   DONE PARSING PAYLOAD type: 05 (ISAKMP_PAYLOAD_ID)

   PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID)
   next_type: 0d (ISAKMP_PAYLOAD_VID)
   length: 000c
   ke.data: 09002689 dfd6b712
   (Xauth)
   DONE PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID)

   PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID)
   next_type: 0d (ISAKMP_PAYLOAD_VID)
   length: 0014
   ke.data: 12f5f28c 457168a9 702d9fe2 74cc0100
   (Cisco Unity)
   DONE PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID)

   PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID)
   next_type: 0d (ISAKMP_PAYLOAD_VID)
   length: 0014
   ke.data: 4a131c81 07035845 5c5728f2 0e95452f
   (Nat-T RFC)
   DONE PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID)

   PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID)
   next_type: 0d (ISAKMP_PAYLOAD_VID)
   length: 0014
   ke.data: 90cb8091 3ebb696e 086381b5 ec427b1f
   (Nat-T 02N)
   DONE PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID)

   PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID)
   next_type: 0d (ISAKMP_PAYLOAD_VID)
   length: 0014
   ke.data: cd604643 35df21f8 7cfdb2fc 68b6a448
   (Nat-T 02)
   DONE PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID)

   PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID)
   next_type: 0d (ISAKMP_PAYLOAD_VID)
   length: 0014
   ke.data: 16f6ca16 e4a4066d 83821a0f 0aeaa862
   (Nat-T 01)
   DONE PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID)

   PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID)
   next_type: 0d (ISAKMP_PAYLOAD_VID)
   length: 0014
   ke.data: 4485152d 18b6bbcd 0be8a846 9579ddcc
   (Nat-T 00)
   DONE PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID)

   PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID)
   next_type: 00 (ISAKMP_PAYLOAD_NONE)
   length: 0014
   ke.data: afcad713 68a1f1c9 6b8696fc 77570100
   (DPD)
   DONE PARSING PAYLOAD type: 0d (ISAKMP_PAYLOAD_VID)

   PARSING PAYLOAD type: 00 (ISAKMP_PAYLOAD_NONE)
   PARSE_OK
vpnc: no response from target

Revision history for this message
msegal (mark-markanddonna-deactivatedaccount) wrote :

I have the same issue.. used to work fine in 8.04, when i upgraded my system to 8.10. It stopped working. Same error " no response from target" Tried the NAT line and the local port work around.. still fails.

M

Revision history for this message
nikolko (vbalashi) wrote : Re: [Bug 257451] Re: vpnc no response from target
Download full text (17.2 KiB)

Hi,

I didn't succeed in resolving this issue on 8.04 release, but after I
migrated to 8.10 and kernel 2.6.27-7 it suddenly began to work... No
idea what was the problem, but now it works fine.

br, Nikolay

On 11/5/08, msegal <email address hidden> wrote:
> I have the same issue.. used to work fine in 8.04, when i upgraded my
> system to 8.10. It stopped working. Same error " no response from
> target" Tried the NAT line and the local port work around.. still
> fails.
>
>
> M
>
> --
> vpnc no response from target
> https://bugs.launchpad.net/bugs/257451
> You received this bug notification because you are a direct subscriber
> of the bug.
>
> Status in "vpnc" source package in Ubuntu: New
>
> Bug description:
> Binary package hint: vpnc
>
> I am trying to connect to corporate vpn and get no response from target. I
> tried with changing following values still the same issue
>
> Local Port 10000
> NAT Traversal Mode cisco-udp
> On the windows client IPSec over TCP port as 4005 and even changed Local
> Port to 4005 and still no difference.
>
> vpnc --version
> vpnc version 0.5.1
> Copyright (C) 2002-2006 Geoffrey Keating, Maurice Massar, others
> vpnc comes with NO WARRANTY, to the extent permitted by law.
> You may redistribute copies of vpnc under the terms of the GNU General
> Public License. For more information about these matters, see the files
> named COPYING.
> Built with openssl (certificate) support. Be aware of the
> license implications.
>
> Supported DH-Groups: nopfs dh1 dh2 dh5
> Supported Hash-Methods: md5 sha1
> Supported Encryptions: null des 3des aes128 aes192 aes256
> Supported Auth-Methods: psk psk+xauth hybrid(rsa)
>
> Linux ubuntu 2.6.24-19-generic #1 SMP Fri Jul 11 23:41:49 UTC 2008 i686
> GNU/Linux
>
>
> vpnc --no-detach --debug 3
> Enter password for xaviea@<companyvpnservername>.com:
>
> vpnc version 0.5.1
> hex_test: 00010203
>
> S1 init_sockaddr
> [2008-08-12 16:42:45]
>
> S2 make_socket
> [2008-08-12 16:42:45]
>
> S3 setup_tunnel
> [2008-08-12 16:42:45]
> using interface tun0
>
> S4 do_phase1
> [2008-08-12 16:42:45]
>
> S4.1 create_nonce
> [2008-08-12 16:42:45]
> i_cookie: 0a071d69 e5e6aca3
> i_nonce:
> 3eac203c 5d41372f 0f367efe e6dd7258 1cb424d6
>
> S4.2 dh setup
> [2008-08-12 16:42:45]
> dh_public:
> c4d5e31f 34839649 2a008fae 336d79e3 dd958981 ed4464ea e3a605b8 9f6fa865
> 984d42ef 2456666d 9b99eee2 958e868e 75146b5a f07ca1b0 88ce0d36 3a68c490
> 63f0248f d146b781 d131f159 de44d3a8 efdbf4b8 82c31a10 7c0b07b0 0ecf7883
> 0bbdcf38 5e8984f9 6c09fca3 1945e023 28587dcf dca48860 73f42910 5b75f032
>
> S4.3 AM packet_1
> [2008-08-12 16:42:45]
>
> sending: ========================>
> BEGIN_PARSE
> Recieved Packet Len: 830
> i_cookie: 0a071d69 e5e6aca3
> r_cookie: 00000000 00000000
> payload: 01 (ISAKMP_PAYLOAD_SA)
> isakmp_version: 10
> exchange_type: 04 (ISAKMP_EXCHANGE_AGGRESSIVE)
> flags: 00
> message_id: 00000000
> len: 0000033e
>
> PARSING PAYLOAD type: 01 (ISAKMP_PAYLOAD_SA)
> next_type: 04 (ISAKMP_PAYLOAD_KE)
> length: 01dc
> sa.doi: 00000001 (ISAKMP_DOI_IPSEC)
> sa.situation: 00000001 (ISAKMP_IPSEC_SIT_IDENTITY_ONLY)
>
> PARS...

Revision history for this message
Jerome Lacoste (jerome-lacoste) wrote :

I get the same auth problem:

vpnc-connect: no response from target

I've tried recompiling vpnc with openssl but that doesn't solve it.

I have vpnc working on one machine but that one uses vpnc 0.4.0 (not upgraded from latest universe).

The difference in worklogs is the following:

/tmp/vpnc.log: ke.data:
/tmp/vpnc.log: ke.data:
/tmp/vpnc.log: ke.data: 09002689 dfd6b712
/tmp/vpnc.log: ke.data: 12f5f28c 457168a9 702d9fe2 74cc0100
/tmp/vpnc.log: ke.data: 4a131c81 07035845 5c5728f2 0e95452f
/tmp/vpnc.log: ke.data: 90cb8091 3ebb696e 086381b5 ec427b1f
/tmp/vpnc.log: ke.data: cd604643 35df21f8 7cfdb2fc 68b6a448
/tmp/vpnc.log: ke.data: 16f6ca16 e4a4066d 83821a0f 0aeaa862
/tmp/vpnc.log: ke.data: 4485152d 18b6bbcd 0be8a846 9579ddcc
/tmp/vpnc.log: ke.data: afcad713 68a1f1c9 6b8696fc 77570100
/tmp/vpnc_working.log:ke.data:
/tmp/vpnc_working.log:ke.data: c633ddd9 1238a5d3 6f9753fd f3bf8971 4ecd8419
/tmp/vpnc_working.log:ke.data: 09002689 dfd6b712
/tmp/vpnc_working.log:ke.data: 12f5f28c 457168a9 702d9fe2 74cc0100
/tmp/vpnc_working.log:ke.data: 4a131c81 07035845 5c5728f2 0e95452f
/tmp/vpnc_working.log:ke.data: 90cb8091 3ebb696e 086381b5 ec427b1f
/tmp/vpnc_working.log:ke.data: cd604643 35df21f8 7cfdb2fc 68b6a448
/tmp/vpnc_working.log:ke.data: 16f6ca16 e4a4066d 83821a0f 0aeaa862
/tmp/vpnc_working.log:ke.data: 4485152d 18b6bbcd 0be8a846 9579ddcc

Both machines are on the same LAN and run Intreprid with some small APT sources differences.

Revision history for this message
Jerome Lacoste (jerome-lacoste) wrote :
Revision history for this message
Jerome Lacoste (jerome-lacoste) wrote :

I compiled vpnc-0.5.3-1 from source (current ubuntu 09.04 version), and have the same problem.

Revision history for this message
Jerome Lacoste (jerome-lacoste) wrote :

I looked at the code and first tried to disable DPD packets (using --dpd-idle 0) as this was the only difference in the logged communication exchange, but this didn't help.

I finally added

NAT Traversal Mode cisco-udp

to my vpnc conf file and vpnc works again. http://www.gossamer-threads.com/lists/vpnc/devel/1874?search_string=no%20response%20from%20target;#1874

Revision history for this message
Daniel Thomas (drt24) wrote :

Thank you Jerome, that workaround fixes the bug for me with 0.5.3r449-2 of vpnc installed.

Revision history for this message
wadkar (wadkar) wrote :

Ditto, same problem here. However, I observed that if my gateway is 192.168.1.1, I can connect to VPN. But if I change my wlan0, and connect via different gateway 192.168.1.2, I will get the NO RESPONSE message. My --debug 3 log is similar to that given in the bug description.

For now, configuring the NAT traversal to cisco-udp seems to fix the problem. I will get back here if the problem still persists.

Revision history for this message
wadkar (wadkar) wrote :

Sorry forgot to mention installation details :
$ vpnc --version
vpnc version 0.5.3
Copyright (C) 2002-2006 Geoffrey Keating, Maurice Massar, others
vpnc comes with NO WARRANTY, to the extent permitted by law.
You may redistribute copies of vpnc under the terms of the GNU General
Public License. For more information about these matters, see the files
named COPYING.
Built with certificate support.

Supported DH-Groups: nopfs dh1 dh2 dh5
Supported Hash-Methods: md5 sha1
Supported Encryptions: null des 3des aes128 aes192 aes256
Supported Auth-Methods: psk psk+xauth hybrid(rsa)

$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 11.04
Release: 11.04
Codename: natty

Revision history for this message
wadkar (wadkar) wrote :

sorry, hate to report that the issue still exists even if I set NAT Traversal to cisco-udp
any work-around/patch for this ? Its really hampering my work :(
I have to use a VBoxed CLI-Ubuntu , with exact same version of vpnc (but Ubuntu is 11.10 updated), on which the vpnc (autmagically) works!

Revision history for this message
Mathieu Trudel-Lapierre (cyphermox) wrote :

I don't know how to fix this, there's just not enough information. Both Ubuntu versions 11.04 and 11.10 use exactly the same version of vpnc.

Please see if you can add extra information about the network itself; if it works in VirtualBox, the issues may be related to the network setup, the different gateway handling VPN traffic differently from the other.

Changed in vpnc (Ubuntu):
status: New → Incomplete
Revision history for this message
Launchpad Janitor (janitor) wrote :

[Expired for vpnc (Ubuntu) because there has been no activity for 60 days.]

Changed in vpnc (Ubuntu):
status: Incomplete → Expired
Revision history for this message
Jeyanthan (ijeyanthan) wrote :

This bug affects me too. Appears after upgrading to Ubuntu 11.10 from 11.04.
Tried the workaround and it didn't work in my vpnc version 0.5.3.
Developers, kindly share your views.

Changed in vpnc (Ubuntu):
status: Expired → Confirmed
Revision history for this message
molecule-eye (niburu1) wrote :

Same problem after upgrading from 13.04 to 13.10. VPNC works fine on my Mac, and also when using my phone network rather than the DSL modem/router. Strange.

Revision history for this message
Paul Belanger (pabelanger) wrote :

Yup, same issue here. cisco-udp does not send traffic to port 10000 / udp on the far side.

Revision history for this message
sean.h.muir@gmail.com (sean-h-muir) wrote :

i am so glad i found this - i have been using WSL2 on 2 seperate windows 10 PC's and it differs from PC to PC and my home desktop was unable to connect after an update and I have been struggling with it all day, but now all is fixed

down side is I can now work from home :(

thanks @jerome

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.