Thanks renazone for your response but I have already done those things. Just doesn't make any sense to me.
Main Topics
Browse All TopicsFor some reason my vpn clients can no longer connect to our Cisco VPN. They are getting the following errror.
Secure VPN Connection terminated locally by client. Reason 413: User authtication failed.
Nothing has changed as far as I know. It has been working for years without any problems.
Her is my client connection log.
Cisco Systems VPN Client Version 4.8.01.0590
Copyright (C) 1998-2006 Cisco Systems, Inc. All Rights Reserved.
Client Type(s): Windows, WinNT
Running on: 6.0.6001 Service Pack 1
484 20:04:27.400 07/27/09 Sev=Info/4 CM/0x63100002
Begin connection process
485 20:04:27.402 07/27/09 Sev=Info/4 CM/0x63100004
Establish secure connection
486 20:04:27.402 07/27/09 Sev=Info/4 CM/0x63100024
Attempt connection with server "66.0.66.130"
487 20:04:27.407 07/27/09 Sev=Info/6 IKE/0x6300003B
Attempting to establish a connection with 66.0.66.130.
488 20:04:27.419 07/27/09 Sev=Info/4 IKE/0x63000013
SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Frag), VID(Nat-T), VID(Unity)) to 66.0.66.130
489 20:04:27.460 07/27/09 Sev=Info/4 IPSEC/0x63700008
IPSec driver successfully started
490 20:04:27.460 07/27/09 Sev=Info/4 IPSEC/0x63700014
Deleted all keys
491 20:04:27.634 07/27/09 Sev=Info/5 IKE/0x6300002F
Received ISAKMP packet: peer = 66.0.66.130
492 20:04:27.634 07/27/09 Sev=Info/4 IKE/0x63000014
RECEIVING <<< ISAKMP OAK AG (SA, VID(Xauth), VID(dpd), VID(Unity), VID(?), KE, ID, NON, VID(?), VID(Nat-T), NAT-D, NAT-D, HASH) from 66.0.66.130
493 20:04:27.634 07/27/09 Sev=Info/5 IKE/0x63000001
Peer supports XAUTH
494 20:04:27.634 07/27/09 Sev=Info/5 IKE/0x63000001
Peer supports DPD
495 20:04:27.634 07/27/09 Sev=Info/5 IKE/0x63000001
Peer is a Cisco-Unity compliant peer
496 20:04:27.634 07/27/09 Sev=Info/5 IKE/0x63000082
Received IOS Vendor ID with unknown capabilities flag 0x000000A5
497 20:04:27.634 07/27/09 Sev=Info/5 IKE/0x63000001
Peer supports NAT-T
498 20:04:27.641 07/27/09 Sev=Info/6 IKE/0x63000001
IOS Vendor ID Contruction successful
499 20:04:27.641 07/27/09 Sev=Info/4 IKE/0x63000013
SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONT
500 20:04:27.642 07/27/09 Sev=Info/6 IKE/0x63000055
Sent a keepalive on the IPSec SA
501 20:04:27.642 07/27/09 Sev=Info/4 IKE/0x63000083
IKE Port in use - Local Port = 0xC1B7, Remote Port = 0x1194
502 20:04:27.642 07/27/09 Sev=Info/5 IKE/0x63000072
Automatic NAT Detection Status:
Remote end is NOT behind a NAT device
This end IS behind a NAT device
503 20:04:27.642 07/27/09 Sev=Info/4 CM/0x6310000E
Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system
504 20:04:27.717 07/27/09 Sev=Info/5 IKE/0x6300002F
Received ISAKMP packet: peer = 66.0.66.130
505 20:04:27.717 07/27/09 Sev=Info/4 IKE/0x63000014
RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:STATUS_INITIAL_CONT
506 20:04:27.717 07/27/09 Sev=Warning/2 IKE/0xA3000067
Received Unexpected InitialContact Notify (PLMgrNotify:886)
507 20:04:27.718 07/27/09 Sev=Info/5 IKE/0x6300002F
Received ISAKMP packet: peer = 66.0.66.130
508 20:04:27.718 07/27/09 Sev=Info/4 IKE/0x63000014
RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:STATUS_RESP_LIFETIM
509 20:04:27.718 07/27/09 Sev=Info/5 IKE/0x63000045
RESPONDER-LIFETIME notify has value of 43200 seconds
510 20:04:27.718 07/27/09 Sev=Info/5 IKE/0x63000047
This SA has already been alive for 0 seconds, setting expiry to 43200 seconds from now
511 20:04:27.719 07/27/09 Sev=Info/5 IKE/0x6300002F
Received ISAKMP packet: peer = 66.0.66.130
512 20:04:27.719 07/27/09 Sev=Info/4 IKE/0x63000014
RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 66.0.66.130
513 20:04:27.720 07/27/09 Sev=Info/4 CM/0x63100015
Launch xAuth application
514 20:04:32.382 07/27/09 Sev=Info/4 CM/0x63100017
xAuth application returned
515 20:04:32.382 07/27/09 Sev=Info/4 IKE/0x63000013
SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 66.0.66.130
516 20:04:32.459 07/27/09 Sev=Info/5 IKE/0x6300002F
Received ISAKMP packet: peer = 66.0.66.130
517 20:04:32.459 07/27/09 Sev=Info/4 IKE/0x63000014
RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 66.0.66.130
518 20:04:32.459 07/27/09 Sev=Info/4 IKE/0x63000013
SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 66.0.66.130
519 20:04:32.459 07/27/09 Sev=Info/4 IKE/0x63000017
Marking IKE SA for deletion (I_Cookie=68103E0931933117
520 20:04:32.460 07/27/09 Sev=Info/4 IKE/0x63000013
SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 66.0.66.130
521 20:04:33.041 07/27/09 Sev=Info/4 IKE/0x6300004B
Discarding IKE SA negotiation (I_Cookie=68103E0931933117
522 20:04:33.041 07/27/09 Sev=Info/4 CM/0x63100014
Unable to establish Phase 1 SA with server "66.0.66.130" because of "DEL_REASON_WE_FAILED_AUTH
523 20:04:33.041 07/27/09 Sev=Info/5 CM/0x63100025
Initializing CVPNDrv
524 20:04:33.043 07/27/09 Sev=Info/6 CM/0x63100046
Set tunnel established flag in registry to 0.
525 20:04:33.043 07/27/09 Sev=Info/4 IKE/0x63000001
IKE received signal to terminate VPN connection
526 20:04:33.047 07/27/09 Sev=Info/4 IPSEC/0x63700014
Deleted all keys
527 20:04:33.047 07/27/09 Sev=Info/4 IPSEC/0x63700014
Deleted all keys
528 20:04:33.047 07/27/09 Sev=Info/4 IPSEC/0x63700014
Deleted all keys
529 20:04:33.047 07/27/09 Sev=Info/4 IPSEC/0x6370000A
IPSec driver successfully stopped
530 20:06:48.316 07/27/09 Sev=Info/4 CM/0x63100002
Begin connection process
531 20:06:48.318 07/27/09 Sev=Info/4 CM/0x63100004
Establish secure connection
532 20:06:48.318 07/27/09 Sev=Info/4 CM/0x63100024
Attempt connection with server "66.0.66.130"
533 20:06:48.321 07/27/09 Sev=Info/6 IKE/0x6300003B
Attempting to establish a connection with 66.0.66.130.
534 20:06:48.329 07/27/09 Sev=Info/4 IKE/0x63000013
SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Frag), VID(Nat-T), VID(Unity)) to 66.0.66.130
535 20:06:48.545 07/27/09 Sev=Info/5 IKE/0x6300002F
Received ISAKMP packet: peer = 66.0.66.130
536 20:06:48.545 07/27/09 Sev=Info/4 IKE/0x63000014
RECEIVING <<< ISAKMP OAK AG (SA, VID(Xauth), VID(dpd), VID(Unity), VID(?), KE, ID, NON, VID(?), VID(Nat-T), NAT-D, NAT-D, HASH) from 66.0.66.130
537 20:06:48.546 07/27/09 Sev=Info/5 IKE/0x63000001
Peer supports XAUTH
538 20:06:48.546 07/27/09 Sev=Info/5 IKE/0x63000001
Peer supports DPD
539 20:06:48.546 07/27/09 Sev=Info/5 IKE/0x63000001
Peer is a Cisco-Unity compliant peer
540 20:06:48.546 07/27/09 Sev=Info/5 IKE/0x63000082
Received IOS Vendor ID with unknown capabilities flag 0x000000A5
541 20:06:48.546 07/27/09 Sev=Info/5 IKE/0x63000001
Peer supports NAT-T
542 20:06:48.552 07/27/09 Sev=Info/6 IKE/0x63000001
IOS Vendor ID Contruction successful
543 20:06:48.552 07/27/09 Sev=Info/4 IKE/0x63000013
SENDING >>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_INITIAL_CONT
544 20:06:48.553 07/27/09 Sev=Info/6 IKE/0x63000055
Sent a keepalive on the IPSec SA
545 20:06:48.553 07/27/09 Sev=Info/4 IKE/0x63000083
IKE Port in use - Local Port = 0xF2EA, Remote Port = 0x1194
546 20:06:48.553 07/27/09 Sev=Info/5 IKE/0x63000072
Automatic NAT Detection Status:
Remote end is NOT behind a NAT device
This end IS behind a NAT device
547 20:06:48.553 07/27/09 Sev=Info/4 CM/0x6310000E
Established Phase 1 SA. 1 Crypto Active IKE SA, 0 User Authenticated IKE SA in the system
548 20:06:48.553 07/27/09 Sev=Info/4 IPSEC/0x63700008
IPSec driver successfully started
549 20:06:48.553 07/27/09 Sev=Info/4 IPSEC/0x63700014
Deleted all keys
550 20:06:58.692 07/27/09 Sev=Info/6 IKE/0x63000055
Sent a keepalive on the IPSec SA
551 20:07:03.539 07/27/09 Sev=Info/5 IKE/0x6300002F
Received ISAKMP packet: peer = 66.0.66.130
552 20:07:03.539 07/27/09 Sev=Info/4 IKE/0x63000014
RECEIVING <<< ISAKMP OAK AG (Retransmission) from 66.0.66.130
553 20:07:03.539 07/27/09 Sev=Info/4 IKE/0x63000021
Retransmitting last packet!
554 20:07:03.539 07/27/09 Sev=Info/4 IKE/0x63000013
SENDING >>> ISAKMP OAK AG *(Retransmission) to 66.0.66.130
555 20:07:03.624 07/27/09 Sev=Info/5 IKE/0x6300002F
Received ISAKMP packet: peer = 66.0.66.130
556 20:07:03.624 07/27/09 Sev=Info/4 IKE/0x63000014
RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:STATUS_INITIAL_CONT
557 20:07:03.624 07/27/09 Sev=Warning/2 IKE/0xA3000067
Received Unexpected InitialContact Notify (PLMgrNotify:886)
558 20:07:03.625 07/27/09 Sev=Info/5 IKE/0x6300002F
Received ISAKMP packet: peer = 66.0.66.130
559 20:07:03.625 07/27/09 Sev=Info/4 IKE/0x63000014
RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:STATUS_RESP_LIFETIM
560 20:07:03.625 07/27/09 Sev=Info/5 IKE/0x63000045
RESPONDER-LIFETIME notify has value of 43200 seconds
561 20:07:03.625 07/27/09 Sev=Info/5 IKE/0x63000047
This SA has already been alive for 15 seconds, setting expiry to 43185 seconds from now
562 20:07:03.626 07/27/09 Sev=Info/5 IKE/0x6300002F
Received ISAKMP packet: peer = 66.0.66.130
563 20:07:03.626 07/27/09 Sev=Info/4 IKE/0x63000014
RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 66.0.66.130
564 20:07:03.626 07/27/09 Sev=Info/4 CM/0x63100015
Launch xAuth application
565 20:07:08.833 07/27/09 Sev=Info/6 IKE/0x63000055
Sent a keepalive on the IPSec SA
566 20:07:18.614 07/27/09 Sev=Info/5 IKE/0x6300002F
Received ISAKMP packet: peer = 66.0.66.130
567 20:07:18.614 07/27/09 Sev=Info/4 IKE/0x63000014
RECEIVING <<< ISAKMP OAK TRANS *(Retransmission) from 66.0.66.130
568 20:07:18.986 07/27/09 Sev=Info/6 IKE/0x63000055
Sent a keepalive on the IPSec SA
569 20:07:23.669 07/27/09 Sev=Info/4 CM/0x63100017
xAuth application returned
570 20:07:23.669 07/27/09 Sev=Info/4 IKE/0x63000013
SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 66.0.66.130
571 20:07:23.746 07/27/09 Sev=Info/5 IKE/0x6300002F
Received ISAKMP packet: peer = 66.0.66.130
572 20:07:23.746 07/27/09 Sev=Info/4 IKE/0x63000014
RECEIVING <<< ISAKMP OAK TRANS *(HASH, ATTR) from 66.0.66.130
573 20:07:23.746 07/27/09 Sev=Info/4 IKE/0x63000013
SENDING >>> ISAKMP OAK TRANS *(HASH, ATTR) to 66.0.66.130
574 20:07:23.746 07/27/09 Sev=Info/4 IKE/0x63000017
Marking IKE SA for deletion (I_Cookie=1A298A55D2315D8D
575 20:07:23.746 07/27/09 Sev=Info/4 IKE/0x63000013
SENDING >>> ISAKMP OAK INFO *(HASH, DEL) to 66.0.66.130
576 20:07:24.565 07/27/09 Sev=Info/4 IKE/0x6300004B
Discarding IKE SA negotiation (I_Cookie=1A298A55D2315D8D
577 20:07:24.565 07/27/09 Sev=Info/4 CM/0x63100014
Unable to establish Phase 1 SA with server "66.0.66.130" because of "DEL_REASON_WE_FAILED_AUTH
578 20:07:24.565 07/27/09 Sev=Info/5 CM/0x63100025
Initializing CVPNDrv
579 20:07:24.566 07/27/09 Sev=Info/6 CM/0x63100046
Set tunnel established flag in registry to 0.
580 20:07:24.566 07/27/09 Sev=Info/4 IKE/0x63000001
IKE received signal to terminate VPN connection
581 20:07:24.569 07/27/09 Sev=Info/4 IPSEC/0x63700014
Deleted all keys
582 20:07:24.569 07/27/09 Sev=Info/4 IPSEC/0x63700014
Deleted all keys
583 20:07:24.569 07/27/09 Sev=Info/4 IPSEC/0x63700014
Deleted all keys
584 20:07:24.569 07/27/09 Sev=Info/4 IPSEC/0x6370000A
IPSec driver successfully stopped
Please any help would be great.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Business Accounts
Answer for Membership
by: renazonsePosted on 2009-07-27 at 18:44:23ID: 24957339
It may be as simple as power cycling the firewall...I'd export your configuration to a file prior to rebooting.
If that doesn't do it, it can't hurt to reset or reenter the password in the terminal.