oakley.log

[Dagmar]

Hi,

the L2TP/IPSec connection to our ISA Server suddenly stopped working (only
PPTP is possible any more). I enabled oakley.log logging to find the error,
but there are some different messages starting with "failed" but no one
results in an error. Finally the connection is ended with "IKE SA deleted
before establishment completed".

I have got:
failed to get chain 80092004
Could not find the peer list entry


Can anybody help me?

Regards,
Dagmar

 

[S. Pidgorny]

IPsec is hard to troubleshoot at times, which is why we like PPTP.
Refer to http://support.microsoft.com/kb/257225 for some ideas on
troubleshooting - you probably have relevant events in the security log on
the ISA server that will help.
Also try making subtle changes in IPsec policy eg algorithms - see how it
goes

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

* http://sl.mvps.org * http://msmvps.com/blogs/sp *


"Dagmar" <Dagmar@discussions.microsoft.com> wrote in message
news:08183785-B747-4628-9B63-BD8E15D588F0@microsoft.com...
> Hi,
>
> the L2TP/IPSec connection to our ISA Server suddenly stopped working (only
> PPTP is possible any more). I enabled oakley.log logging to find the
> error,
> but there are some different messages starting with "failed" but no one
> results in an error. Finally the connection is ended with "IKE SA deleted
> before establishment completed".
>
> I have got:
> failed to get chain 80092004
> Could not find the peer list entry
>
>
> Can anybody help me?
>
> Regards,
> Dagmar
>

 

[Dagmar]

The article you recommended my is very basic troubleshooting and I have
worked it through before I posted here. However, thank you for your answer.

Regards, Dagmar



"S. Pidgorny <MVP>" wrote:

> IPsec is hard to troubleshoot at times, which is why we like PPTP.
> Refer to http://support.microsoft.com/kb/257225 for some ideas on
> troubleshooting - you probably have relevant events in the security log on
> the ISA server that will help.
> Also try making subtle changes in IPsec policy eg algorithms - see how it
> goes
>
> --
> Svyatoslav Pidgorny, MS MVP - Security, MCSE
> -= F1 is the key =-
>
> * http://sl.mvps.org * http://msmvps.com/blogs/sp *
>
>
> "Dagmar" <Dagmar@discussions.microsoft.com> wrote in message
> news:08183785-B747-4628-9B63-BD8E15D588F0@microsoft.com...
> > Hi,
> >
> > the L2TP/IPSec connection to our ISA Server suddenly stopped working (only
> > PPTP is possible any more). I enabled oakley.log logging to find the
> > error,
> > but there are some different messages starting with "failed" but no one
> > results in an error. Finally the connection is ended with "IKE SA deleted
> > before establishment completed".
> >
> > I have got:
> > failed to get chain 80092004
> > Could not find the peer list entry
> >
> >
> > Can anybody help me?
> >
> > Regards,
> > Dagmar
> >
>
>
>