[cisco-voip] Help with 871, VPN, 7970 setup

Fri May 9 09:21:30 EDT 2008

Hi Matthew, sorry for the late reply.  The router is running IOS
12.4(15)XY2.  

For the Cisco 3000, this is the info I have:
Cisco Systems, Inc./VPN 3000 Concentrator Version 4.7.2.D Dec 20 2005
15:26:54

The current image file is vpn3005-4.7.2.D-k9.bin.

Thanks.

- Geoff

________________________________

From: Matthew Linsemier [mailto:MLinsemier at apcapital.com] 
Sent: Thursday, May 08, 2008 9:56 AM
To: Rhodes, Geoff; Cisco VOIP Newsletter - puck.nether.net
Subject: Re: [cisco-voip] Help with 871, VPN, 7970 setup

Geoff,

What exact version of IOS and the VPN 3000 OS are you running?

Matt

On 5/7/08 4:36 PM, "Rhodes, Geoff" <GRhodes at rbh.com> wrote:

	Hello all.  We have set up several 7970 phones at home for our
attorneys, so that when they are working from home they can answer calls
just as though they were at the office.  Our setup consist of a Cisco
3000 VPN Concentrator here at the office, and each person who has the
setup gets a 871 router and a 7970 phone.  This has been working great
for the last couple of years.  

	Recently, we had an attorney open up a small office a few hours
away.  Until we could set up a router with SRST there and get him tied
in with us, we decided to give him this same set up for a while.  Before
we did it, we decided to upgrade the ISO on the 871 and test to make
sure it worked.  After we installed it at his office, the phone keeps
going into "Registering" mode after a while.  The VPN light on the 871
is still lit, and from the 3000 Concentrator, it looks as if the session
is still active.  To fix the problem, we can turn the 871 off and back
on and it works fine for a while.  It acts as though there is some kind
of timeout being reached somewhere.

	From the logs, we saw this today:
	52280 05/07/2008 08:41:37.420 SEV=4 IKEDBG/97 RPT=19
66.83.107.130 
	Group [HardwareClient] User [harjef-router]
	QM FSM error (P2 struct &0x3bb8e0c, mess id 0x7b94b455)!

	52282 05/07/2008 08:41:37.440 SEV=4 IKEDBG/97 RPT=20
66.83.107.130 
	Group [HardwareClient] User [harjef-router]
	QM FSM error (P2 struct &0x3573ad4, mess id 0x7f1decc2)!

	52284 05/07/2008 08:41:37.460 SEV=4 IKEDBG/97 RPT=21
66.83.107.130 
	Group [HardwareClient] User [harjef-router]
	QM FSM error (P2 struct &0x39a6678, mess id 0x2914bf14)!

	52286 05/07/2008 08:41:37.480 SEV=4 IKEDBG/97 RPT=22
66.83.107.130 
	Group [HardwareClient] User [harjef-router]
	QM FSM error (P2 struct &0x3bcb9bc, mess id 0x99559329)!

	52288 05/07/2008 08:41:37.500 SEV=4 IKEDBG/97 RPT=23
66.83.107.130 
	Group [HardwareClient] User [harjef-router]
	QM FSM error (P2 struct &0x3b5dc48, mess id 0x262f0543)!

	52290 05/07/2008 08:41:37.530 SEV=4 IKEDBG/97 RPT=24
66.83.107.130 
	Group [HardwareClient] User [harjef-router]
	QM FSM error (P2 struct &0x3546304, mess id 0xe7ba5258)!

	52292 05/07/2008 08:41:37.540 SEV=4 IKEDBG/97 RPT=25
66.83.107.130 
	Group [HardwareClient] User [harjef-router]
	QM FSM error (P2 struct &0x3b55bd8, mess id 0xbdce1c97)!

	52294 05/07/2008 08:41:37.550 SEV=4 AUTH/28 RPT=296
66.83.107.130 
	User [harjef-router] Group [HardwareClient] disconnected:
	 Session Type: IPSec/NAT-T
	 Duration: 7:36:32
	 Bytes xmt: 2072464
	 Bytes rcv: 292024
	 Reason: Lost Service

	Also, attached is the running config from the 871.  We are at a
loss.  Any ideas?

	Thanks in advance!

	Geoff Rhodes | Robinson, Bradshaw & Hinson, P.A.
	Director of Information Technology
	101 North Tryon Street, Suite 1900 | Charlotte, NC 28246
	* (704) 377-8188 | f: (704) 339-3488
	grhodes at rbh.com | www.rbh.com <http://www.rbh.com/>
<http://www.rbh.com/>   

________________________________

	_______________________________________________
	cisco-voip mailing list
	cisco-voip at puck.nether.net
	https://puck.nether.net/mailman/listinfo/cisco-voip

________________________________

CONFIDENTIALITY STATEMENT
This communication and any attachments are CONFIDENTIAL and may be
protected by one or more legal privileges. It is intended solely for the
use of the addressee identified above. If you are not the intended
recipient, any use, disclosure, copying or distribution of this
communication is UNAUTHORIZED. Neither this information block, the typed
name of the sender, nor anything else in this message is intended to
constitute an electronic signature unless a specific statement to the
contrary is included in this message. If you have received this
communication in error, please immediately contact me and delete this
communication from your computer. Thank you. 

________________________________

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://puck.nether.net/pipermail/cisco-voip/attachments/20080509/137e2659/attachment-0001.html 