Cisco PIX 506 VPN Group Password

Posted on 2007-10-09
Last Modified: 2008-01-09
Is there a way to show the encrypted password for a VPN group.  I have a client that has a VPN setup and the password they are giving me to get access to the VPN does not work. I keep getting this in the Cisco VPN Logs:

1      15:36:34.281  10/09/07  Sev=Warning/3      IKE/0xE3000056
The received HASH payload cannot be verified

2      15:36:34.281  10/09/07  Sev=Warning/2      IKE/0xE300007D
Hash verification failed... may be configured with invalid group password.

3      15:36:34.281  10/09/07  Sev=Warning/2      IKE/0xE3000099
Failed to authenticate peer (Navigator:903)

4      15:36:34.281  10/09/07  Sev=Warning/2      IKE/0xE30000A5
Unexpected SW error occurred while processing Aggressive Mode negotiator:(Navigator:2201)

Any help would be appreciated.
Question by:Neadom Tucker
    LVL 36

    Expert Comment

    You can save the configuration to a ftp server and then view the file that is saved.
    Solarwinds do a free tftp server for windows.
    LVL 6

    Author Comment

    by:Neadom Tucker
    How do I do that?
    LVL 36

    Accepted Solution

    Download a copy of solarwinds tftp server from and run it. Make sure the windows firewall is disabled.

    Log into the PIX. Type 'enable' to go into priviledged mode.
    Type 'wri net' where is the IP address of the windows machine running the tftp server.

    I'll be back online in the morning (BST time) if you have any furthur questions.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Suggested Solutions

    This article assumes you have at least one Cisco ASA or PIX configured with working internet and a non-dynamic, public, address on the outside interface. If you need instructions on how to enable your device for internet, or basic configuration info…
    Imagine you have a shopping list of items you need to get at the grocery store. You have two options: A. Take one trip to the grocery store and get everything you need for the week, or B. Take multiple trips, buying an item at a time, to achieve t…
    Hi everyone! This is Experts Exchange customer support.  This quick video will show you how to change your primary email address.  If you have any questions, then please Write a Comment below!
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now