VPN 3000 RADIUS with Expiry Feature Using Microsoft Internet Authentication Server

Available Languages

Download Options

PDF (265.3 KB)
View with Adobe Reader on a variety of devices
Updated:January 14, 2008
Document ID:26147
Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
Introduction
Prerequisites
Requirements
Components Used
Network Diagram
Conventions
Configure the VPN 3000 RADIUS with Expiry Feature
Configure the VPN 3000 Concentrator
Configure Microsoft IAS
Verify
Troubleshoot
Related Information
Introduction

This document highlights the steps to configure the RADIUS with Expiry feature on VPN 3000 Concentrators. Microsoft Internet Authentication Service (IAS) configured for MS-CHAP2 (PAP not supported for this feature), is used as the RADIUS server in this example. With this feature enabled, VPN users are prompted to change an expired Microsoft Windows password when they launch the Cisco VPN Client to connect to the VPN 3000 Concentrator.
Refer to Configure the Cisco VPN 3000 Series Concentrators to Support the NT Password Expiration Feature with the RADIUS Server in order to learn more about the same scenerio with RADIUS Authentication.
Prerequisites

Requirements

There are no specific requirements for this document.
Components Used

The information in this document is based on these software and hardware versions:
Cisco VPN 3000 Concentrator with Cisco IOS® Software Release 3.5.3A
Cisco VPN Client version 3.5.1C
Microsoft IAS installed on a Windows 2000 server
Users in this document are defined in the Microsoft Windows 2000 Active Directory Server
The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, make sure that you understand the potential impact of any command.
Network Diagram

This document uses this network setup:
Conventions

Refer to the Cisco Technical Tips Conventions for more information on document conventions.
Configure the VPN 3000 RADIUS with Expiry Feature

Configure the VPN 3000 Concentrator

Complete these steps in order to configure the VPN 3000 Concentrator.
Choose Configuration > User Management > Groups in order to configure the VPN group.
Specify the Xauth method denoted by "Authentication" as "RADIUS with Expiry" under the IPSec tab.
Choose Configuration > System > Servers > Authentication in order to define the RADIUS server.
Define the IP address assignment method.

This example uses an IP address pool defined locally on the VPN 3000 Concentrator.
Define an IP address pool.
Configure Microsoft IAS

Complete these steps in order to configure Microsoft IAS.
Define the VPN 3000 Concentrator as a client.

Note: Microsoft is chosen as the Client-Vendor to get support for the Microsoft Vendor-Specific Attributes (VSA) required by the RADIUS with Expiry feature.
Define a Remote Access Policy.

Under this policy, the Windows group that contains all the VPN users is specified.

Note: Windows users must check Allow access under the Remote Access Permission (Dial-in or VPN) section in the user profile as shown below.
Verify

These examples demonstrate how the RADIUS with Expiry feature works when the Windows password expires. The VPN user is informed that the password has expired and prompted to enter a new one.
Launch the Cisco VPN Client.
Type your username and password to log in. Then click OK.
When the Windows password expires, you will be prompted to change the password. Type a new password. Type again to confirm it, and click OK.
Troubleshoot

This section shows the event log captured on the VPN 3000 Concentrator during a tunnel negotiation. Refer to the bold portions to see how Microsoft VSAs are passed between the IAS and VPN 3000 Concentrator to inform the VPN user that the password has expired, and take the new Windows password back from the VPN user to Windows user database.
1 08/06/2002 16:45:40.920 SEV=8 AUTHDBG/1 RPT=263 
AUTH_Open() returns 102


2 08/06/2002 16:45:40.920 SEV=7 AUTH/12 RPT=264
Authentication session opened: handle = 102


3 08/06/2002 16:45:40.920 SEV=8 AUTHDBG/3 RPT=302
AUTH_PutAttrTable(102, 742784)


4 08/06/2002 16:45:40.920 SEV=8 AUTHDBG/6 RPT=183
AUTH_GroupAuthenticate(102, 9aa2e24, 4983ac)


5 08/06/2002 16:45:40.920 SEV=8 AUTHDBG/59 RPT=302
AUTH_BindServer(9a03fcc, 0, 0)


6 08/06/2002 16:45:40.920 SEV=9 AUTHDBG/69 RPT=302
Auth Server 18cdfa4 has been bound to ACB 9a03fcc, sessions = 1


7 08/06/2002 16:45:40.920 SEV=8 AUTHDBG/65 RPT=302
AUTH_CreateTimer(9a03fcc, 0, 0)


8 08/06/2002 16:45:40.920 SEV=9 AUTHDBG/72 RPT=302
Reply timer created: handle = 5A0C001B


9 08/06/2002 16:45:40.920 SEV=8 AUTHDBG/61 RPT=302
AUTH_BuildMsg(9a03fcc, 0, 0)


10 08/06/2002 16:45:40.920 SEV=8 AUTHDBG/64 RPT=302
AUTH_StartTimer(9a03fcc, 0, 0)


11 08/06/2002 16:45:40.920 SEV=9 AUTHDBG/73 RPT=302
Reply timer started: handle = 5A0C001B, timestamp = 355273988, timeout = 30000


12 08/06/2002 16:45:40.920 SEV=8 AUTHDBG/62 RPT=302
AUTH_SndRequest(9a03fcc, 0, 0)


13 08/06/2002 16:45:40.920 SEV=8 AUTHDBG/50 RPT=477
IntDB_Decode(62fd1a8, 146)


14 08/06/2002 16:45:40.920 SEV=10 AUTHDECODE/12 RPT=1
IntDB: Type = 1 (0x01) User-Name


15 08/06/2002 16:45:40.920 SEV=10 AUTHDECODE/13 RPT=1
IntDB: Length = 11 (0x0B)


16 08/06/2002 16:45:40.920 SEV=10 AUTHDECODE/14 RPT=1
IntDB: Value (String) = 


17 08/06/2002 16:45:40.920 SEV=10 AUTHDECODE/0 RPT=1
0000: 77696E64 6F777375 736572 windowsuser


18 08/06/2002 16:45:40.920 SEV=10 AUTHDECODE/12 RPT=2
IntDB: Type = 5 (0x05) NAS-Port


19 08/06/2002 16:45:40.920 SEV=10 AUTHDECODE/13 RPT=2
IntDB: Length = 4 (0x04)


20 08/06/2002 16:45:40.920 SEV=10 AUTHDECODE/15 RPT=1
IntDB: Value (Integer) = 0 (0x0000)


21 08/06/2002 16:45:40.920 SEV=10 AUTHDECODE/12 RPT=3
IntDB: Type = 6 (0x06) Service-Type


22 08/06/2002 16:45:40.920 SEV=10 AUTHDECODE/13 RPT=3
IntDB: Length = 4 (0x04)


23 08/06/2002 16:45:40.920 SEV=10 AUTHDECODE/15 RPT=2
IntDB: Value (Integer) = 2 (0x0002)

24 08/06/2002 16:45:40.920 SEV=10 AUTHDECODE/12 RPT=4
IntDB: Type = 7 (0x07) Framed-Protocol

25 08/06/2002 16:45:40.920 SEV=10 AUTHDECODE/13 RPT=4
IntDB: Length = 4 (0x04)

26 08/06/2002 16:45:40.920 SEV=10 AUTHDECODE/15 RPT=3
IntDB: Value (Integer) = 1 (0x0001)

27 08/06/2002 16:45:40.920 SEV=10 AUTHDECODE/12 RPT=5
IntDB: Type = 66 (0x42) Tunnel-Client-Endpoint

28 08/06/2002 16:45:40.920 SEV=10 AUTHDECODE/13 RPT=5
IntDB: Length = 12 (0x0C)

29 08/06/2002 16:45:40.920 SEV=10 AUTHDECODE/14 RPT=2
IntDB: Value (String) =

30 08/06/2002 16:45:40.920 SEV=10 AUTHDECODE/0 RPT=2
0000: 3137312E 36392E38 392E3930  171.69.89.90

31 08/06/2002 16:45:40.920 SEV=10 AUTHDECODE/12 RPT=6
IntDB: Type = 4118 (0x1016) Authentication-Server-Type

32 08/06/2002 16:45:40.920 SEV=10 AUTHDECODE/13 RPT=6
IntDB: Length = 4 (0x04)

33 08/06/2002 16:45:40.920 SEV=10 AUTHDECODE/15 RPT=4
IntDB: Value (Integer) = 5 (0x0005)

34 08/06/2002 16:45:40.920 SEV=8 AUTHDBG/47 RPT=477
IntDB_Xmt(9a03fcc)

35 08/06/2002 16:45:40.920 SEV=9 AUTHDBG/71 RPT=302
xmit_cnt = 1

36 08/06/2002 16:45:40.920 SEV=8 AUTHDBG/47 RPT=478
IntDB_Xmt(9a03fcc)

37 08/06/2002 16:45:41.020 SEV=8 AUTHDBG/49 RPT=239
IntDB_Match(9a03fcc, 62f1c4c)

38 08/06/2002 16:45:41.020 SEV=8 AUTHDBG/63 RPT=302
AUTH_RcvReply(9a03fcc, 0, 0)

39 08/06/2002 16:45:41.020 SEV=8 AUTHDBG/50 RPT=478
IntDB_Decode(62f1c4c, 170)

40 08/06/2002 16:45:41.020 SEV=10 AUTHDECODE/12 RPT=7
IntDB: Type = 1 (0x01) User-Name

41 08/06/2002 16:45:41.020 SEV=10 AUTHDECODE/13 RPT=7
IntDB: Length = 11 (0x0B)

42 08/06/2002 16:45:41.020 SEV=10 AUTHDECODE/14 RPT=3
IntDB: Value (String) =

43 08/06/2002 16:45:41.020 SEV=10 AUTHDECODE/0 RPT=3
0000: 77696E64 6F777375 736572  windowsuser

44 08/06/2002 16:45:41.020 SEV=10 AUTHDECODE/12 RPT=8
IntDB: Type = 4109 (0x100D) IPSec-Authentication

45 08/06/2002 16:45:41.020 SEV=10 AUTHDECODE/13 RPT=8
IntDB: Length = 4 (0x04)

46 08/06/2002 16:45:41.020 SEV=10 AUTHDECODE/15 RPT=5
IntDB: Value (Integer) = 6 (0x0006)

47 08/06/2002 16:45:41.020 SEV=10 AUTHDECODE/12 RPT=9
IntDB: Type = 4123 (0x101B) Split-Tunnel-Inclusion-List

48 08/06/2002 16:45:41.020 SEV=10 AUTHDECODE/13 RPT=9
IntDB: Length = 4 (0x04)

49 08/06/2002 16:45:41.020 SEV=10 AUTHDECODE/14 RPT=4
IntDB: Value (String) =

50 08/06/2002 16:45:41.020 SEV=10 AUTHDECODE/0 RPT=4
0000: 74657374  test

51 08/06/2002 16:45:41.020 SEV=10 AUTHDECODE/12 RPT=10
IntDB: Type = 4151 (0x1037) Split-Tunneling-Policy

52 08/06/2002 16:45:41.020 SEV=10 AUTHDECODE/13 RPT=10
IntDB: Length = 4 (0x04)

53 08/06/2002 16:45:41.020 SEV=10 AUTHDECODE/15 RPT=6
IntDB: Value (Integer) = 1 (0x0001)

54 08/06/2002 16:45:41.020 SEV=8 AUTHDBG/48 RPT=239
IntDB_Rcv(9a03fcc)

55 08/06/2002 16:45:41.020 SEV=8 AUTHDBG/66 RPT=302
AUTH_DeleteTimer(9a03fcc, 0, 0)

56 08/06/2002 16:45:41.020 SEV=9 AUTHDBG/74 RPT=302
Reply timer stopped: handle = 5A0C001B, timestamp = 355273998

57 08/06/2002 16:45:41.020 SEV=8 AUTHDBG/58 RPT=302
AUTH_Callback(9a03fcc, 0, 0)

58 08/06/2002 16:45:41.020 SEV=6 AUTH/41 RPT=218 171.69.89.90
Authentication successful: handle = 102, server = Internal, 
group = windowsuser

59 08/06/2002 16:45:41.020 SEV=8 AUTHDBG/4 RPT=288
AUTH_GetAttrTable(102, 742a30)

60 08/06/2002 16:45:41.020 SEV=8 AUTHDBG/2 RPT=263
AUTH_Close(102)

61 08/06/2002 16:45:41.020 SEV=8 AUTHDBG/60 RPT=302
AUTH_UnbindServer(9a03fcc, 0, 0)

62 08/06/2002 16:45:41.020 SEV=9 AUTHDBG/70 RPT=302
Auth Server 18cdfa4 has been unbound from ACB 9a03fcc, sessions = 0

63 08/06/2002 16:45:41.020 SEV=8 AUTHDBG/10 RPT=263
AUTH_Int_FreeAuthCB(9a03fcc)

64 08/06/2002 16:45:41.020 SEV=7 AUTH/13 RPT=264
Authentication session closed: handle = 102

65 08/06/2002 16:45:46.610 SEV=8 AUTHDBG/1 RPT=264
AUTH_Open() returns 103

66 08/06/2002 16:45:46.610 SEV=7 AUTH/12 RPT=265
Authentication session opened: handle = 103

67 08/06/2002 16:45:46.610 SEV=8 AUTHDBG/3 RPT=303
AUTH_PutAttrTable(103, 7429b8)

68 08/06/2002 16:45:46.610 SEV=8 AUTHDBG/5 RPT=56
AUTH_Authenticate(103, 500a278, 4cad38)

69 08/06/2002 16:45:46.610 SEV=8 AUTHDBG/59 RPT=303
AUTH_BindServer(9aa46fc, 0, 0)

70 08/06/2002 16:45:46.610 SEV=9 AUTHDBG/69 RPT=303
Auth Server 18ce1a4 has been bound to ACB 9aa46fc, sessions = 1

71 08/06/2002 16:45:46.610 SEV=8 AUTHDBG/65 RPT=303
AUTH_CreateTimer(9aa46fc, 0, 0)

72 08/06/2002 16:45:46.610 SEV=9 AUTHDBG/72 RPT=303
Reply timer created: handle = 5A0E0016

73 08/06/2002 16:45:46.610 SEV=8 AUTHDBG/61 RPT=303
AUTH_BuildMsg(9aa46fc, 0, 0)

74 08/06/2002 16:45:46.610 SEV=8 AUTHDBG/27 RPT=64
Radius_Build(9aa46fc)

75 08/06/2002 16:45:46.610 SEV=8 AUTHDBG/64 RPT=303
AUTH_StartTimer(9aa46fc, 0, 0)

76 08/06/2002 16:45:46.610 SEV=9 AUTHDBG/73 RPT=303
Reply timer started: handle = 5A0E0016, timestamp = 355274557, timeout = 4000

77 08/06/2002 16:45:46.610 SEV=8 AUTHDBG/62 RPT=303
AUTH_SndRequest(9aa46fc, 0, 0)

78 08/06/2002 16:45:46.610 SEV=8 AUTHDBG/31 RPT=127
Radius_Decode(62f1c4c, 156)

79 08/06/2002 16:45:46.610 SEV=13 AUTHDECODE/0 RPT=5
0000: 0122009C 7F70A83B E37B9B27 31668A07     ."...p.;.{.'1f..
0010: 1089C0A4 010A7670 6E757365 72310506     ......vpnuser1..
0020: 0000041C 06060000 00020706 00000001     ................
0030: 420E3137 312E3639 2E38392E 39301A18     B.171.69.89.90..
0040: 00000137 0B12BE14 D10DA7ED 8A00FD25     ...7...........%
0050: 47B90956 3B191A3A 00000137 19340000     G..V;..:...7.4..
0060: 62B6A996 DD4962AE 05FA5AAF FDDA96A9     b....Ib...Z.....
0070: 00000000 00000000 3CA2008E A03CABCF     ........<....<..
0080: 73FB28E0 D1560A01 D96AAE3B BFB6DD42     s.(..V...j.;...B
0090: 0406AC10 AC243D06 00000005              .....$=.....

89 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/1 RPT=1
Radius: Code = 1 (0x01)

90 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/2 RPT=1
Radius: Identifier = 34 (0x22)

91 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/3 RPT=1
Radius: Length = 156 (0x009C)

92 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/4 RPT=1
Radius: Vector:

93 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/0 RPT=6
0000: 7F70A83B E37B9B27 31668A07 1089C0A4     .p.;.{.'1f......

94 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/5 RPT=1
Radius: Type = 1 (0x01) User-Name

95 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/6 RPT=1
Radius: Length = 10 (0x0A)

96 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/7 RPT=1
Radius: Value (String) =

97 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/0 RPT=7
0000: 76706E75 73657231                       vpnuser1

98 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/5 RPT=2>
Radius: Type = 5 (0x05) NAS-Port

99 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/6 RPT=2
Radius: Length = 6 (0x06)

100 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/11 RPT=1
Radius: Value (Hex) = 0x41C

101 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/5 RPT=3
Radius: Type = 6 (0x06) Service-Type

102 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/6 RPT=3
Radius: Length = 6 (0x06)

103 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/11 RPT=2
Radius: Value (Hex) = 0x2

104 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/5 RPT=4
Radius: Type = 7 (0x07) Framed-Protocol

105 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/6 RPT=4
Radius: Length = 6 (0x06)

106 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/11 RPT=3
Radius: Value (Hex) = 0x1

107 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/5 RPT=5
Radius: Type = 66 (0x42) Tunnel-Client-Endpoint

108 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/6 RPT=5
Radius: Length = 14 (0x0E)

109 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/7 RPT=2
Radius: Value (String) =

110 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/0 RPT=8
0000: 3137312E 36392E38 392E3930              171.69.89.90

111 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/5 RPT=6
Radius: Type = 26 (0x1A) Vendor-Specific

112 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/6 RPT=6
Radius: Length = 24 (0x18)

113 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/10 RPT=1
Radius: Vendor ID = 311 (0x00000137)

114 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/5 RPT=7
Radius: Type = 11 (0x0B) MS-CHAP-Challenge

115 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/6 RPT=7
Radius: Length = 18 (0x12)

116 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/7 RPT=3
Radius: Value (String) =

117 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/0 RPT=9
0000: BE14D10D A7ED8A00 FD2547B9 09563B19     .........%G..V;.

118 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/5 RPT=8
Radius: Type = 26 (0x1A) Vendor-Specific

119 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/6 RPT=8
Radius: Length = 58 (0x3A)

120 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/10 RPT=2
Radius: Vendor ID = 311 (0x00000137)

121 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/5 RPT=9
Radius: Type = 25 (0x19) MS-CHAP2-Response

122 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/6 RPT=9
Radius: Length = 52 (0x34)

123 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/7 RPT=4
Radius: Value (String) =

124 08/06/2002 16:45:46.610 SEV=10 AUTHDECODE/0 RPT=10
0000: 000062B6 A996DD49 62AE05FA 5AAFFDDA     ..b....Ib...Z...
0010: 96A90000 00000000 00003CA2 008EA03C     ..........<....<
0020: ABCF73FB 28E0D156 0A01D96A AE3BBFB6     ..s.(..V...j.;..
0030: DD42                                    .B

128 08/06/2002 16:45:46.620 SEV=10 AUTHDECODE/5 RPT=10
Radius: Type = 4 (0x04) NAS-IP-Address

129 08/06/2002 16:45:46.620 SEV=10 AUTHDECODE/6 RPT=10
Radius: Length = 6 (0x06)

130 08/06/2002 16:45:46.620 SEV=10 AUTHDECODE/9 RPT=1
Radius: Value (IP Address) = 172.16.172.36 (0xAC10AC24)

131 08/06/2002 16:45:46.620 SEV=10 AUTHDECODE/5 RPT=11
Radius: Type = 61 (0x3D) NAS-Port-Type

132 08/06/2002 16:45:46.620 SEV=10 AUTHDECODE/6 RPT=11
Radius: Length = 6 (0x06)

133 08/06/2002 16:45:46.620 SEV=10 AUTHDECODE/11 RPT=4
Radius: Value (Hex) = 0x5

134 08/06/2002 16:45:46.620 SEV=8 AUTHDBG/28 RPT=64
Radius_Xmt(9aa46fc)

135 08/06/2002 16:45:46.620 SEV=9 AUTHDBG/71 RPT=303
xmit_cnt = 1

136 08/06/2002 16:45:46.710 SEV=8 AUTHDBG/30 RPT=64
Radius_Match(9aa46fc, 5004a10), id = 0x22, rcvd = 0x22

137 08/06/2002 16:45:46.710 SEV=8 AUTHDBG/63 RPT=303
AUTH_RcvReply(9aa46fc, 0, 0)

138 08/06/2002 16:45:46.710 SEV=8 AUTHDBG/31 RPT=128
Radius_Decode(5004a10, 42)

139 08/06/2002 16:45:46.710 SEV=13 AUTHDECODE/0 RPT=11
0000: 0322002A CCDF6607 AB8B6D51 9B17CFE1     .".*..f...mQ....
0010: 6A11AE2E 1A160000 01370210 00453D36     j........7...E=6
0020: 34382052 3D302056 3D33                  48 R=0 V=3

142 08/06/2002 16:45:46.710 SEV=10 AUTHDECODE/1 RPT=2
Radius: Code = 3 (0x03)

143 08/06/2002 16:45:46.710 SEV=10 AUTHDECODE/2 RPT=2
Radius: Identifier = 34 (0x22)

144 08/06/2002 16:45:46.710 SEV=10 AUTHDECODE/3 RPT=2
Radius: Length = 42 (0x002A)

145 08/06/2002 16:45:46.710 SEV=10 AUTHDECODE/4 RPT=2
Radius: Vector:

146 08/06/2002 16:45:46.710 SEV=10 AUTHDECODE/0 RPT=12
0000: CCDF6607 AB8B6D51 9B17CFE1 6A11AE2E     ..f...mQ....j...

147 08/06/2002 16:45:46.710 SEV=10 AUTHDECODE/5 RPT=12
Radius: Type = 26 (0x1A) Vendor-Specific

148 08/06/2002 16:45:46.710 SEV=10 AUTHDECODE/6 RPT=12
Radius: Length = 22 (0x16)

149 08/06/2002 16:45:46.710 SEV=10 AUTHDECODE/10 RPT=3
Radius: Vendor ID = 311 (0x00000137)

150 08/06/2002 16:45:46.710 SEV=10 AUTHDECODE/5 RPT=13
Radius: Type = 2 (0x02) MS-CHAP-Error

151 08/06/2002 16:45:46.710 SEV=10 AUTHDECODE/6 RPT=13
Radius: Length = 16 (0x10)

152 08/06/2002 16:45:46.710 SEV=10 AUTHDECODE/7 RPT=5
Radius: Value (String) =

153 08/06/2002 16:45:46.710 SEV=10 AUTHDECODE/0 RPT=13
0000: 00453D36 34382052 3D302056 3D33         .E=648 R=0 V=3

154 08/06/2002 16:45:46.710 SEV=8 AUTHDBG/29 RPT=64
Radius_Rcv(9aa46fc)

155 08/06/2002 16:45:46.710 SEV=8 AUTHDBG/66 RPT=303
AUTH_DeleteTimer(9aa46fc, 0, 0)

156 08/06/2002 16:45:46.710 SEV=9 AUTHDBG/74 RPT=303
Reply timer stopped: handle = 5A0E0016, timestamp = 355274567

157 08/06/2002 16:45:46.710 SEV=8 AUTHDBG/58 RPT=303
AUTH_Callback(9aa46fc, 0, 0)

158 08/06/2002 16:45:46.710 SEV=3 AUTH/5 RPT=42 171.69.89.90
Authentication rejected: Reason = Password expired
handle = 103, server = 171.69.89.60, user = vpnuser1, domain = <not specified>

160 08/06/2002 16:45:46.710 SEV=8 AUTHDBG/4 RPT=289
AUTH_GetAttrTable(103, 743aa8)

161 08/06/2002 16:45:46.710 SEV=8 AUTHDBG/4 RPT=290
AUTH_GetAttrTable(103, 743ad8)

162 08/06/2002 16:45:46.710 SEV=8 AUTHDBG/60 RPT=303
AUTH_UnbindServer(9aa46fc, 0, 0)

163 08/06/2002 16:45:46.710 SEV=9 AUTHDBG/70 RPT=303
Auth Server 18ce1a4 has been unbound from ACB 9aa46fc, sessions = 0

164 08/06/2002 16:45:50.480 SEV=8 AUTHDBG/3 RPT=304
AUTH_PutAttrTable(103, 742898)

165 08/06/2002 16:45:50.480 SEV=8 AUTHDBG/5 RPT=57
AUTH_Authenticate(103, 500a278, 4cad38)

166 08/06/2002 16:45:50.480 SEV=8 AUTHDBG/59 RPT=304
AUTH_BindServer(9aa46fc, 0, 0)

167 08/06/2002 16:45:50.480 SEV=9 AUTHDBG/69 RPT=304
Auth Server 18ce1a4 has been bound to ACB 9aa46fc, sessions = 1

168 08/06/2002 16:45:50.480 SEV=8 AUTHDBG/65 RPT=304
AUTH_CreateTimer(9aa46fc, 0, 0)

169 08/06/2002 16:45:50.480 SEV=9 AUTHDBG/72 RPT=304
Reply timer created: handle = 5A100016

170 08/06/2002 16:45:50.480 SEV=8 AUTHDBG/61 RPT=304
AUTH_BuildMsg(9aa46fc, 0, 0)

171 08/06/2002 16:45:50.480 SEV=8 AUTHDBG/27 RPT=65
Radius_Build(9aa46fc)

172 08/06/2002 16:45:50.480 SEV=8 AUTHDBG/64 RPT=304
AUTH_StartTimer(9aa46fc, 0, 0)

173 08/06/2002 16:45:50.480 SEV=9 AUTHDBG/73 RPT=304
Reply timer started: handle = 5A100016, timestamp = 355274944, timeout = 4000

174 08/06/2002 16:45:50.480 SEV=8 AUTHDBG/62 RPT=304
AUTH_SndRequest(9aa46fc, 0, 0)

175 08/06/2002 16:45:50.480 SEV=8 AUTHDBG/31 RPT=129
Radius_Decode(9a03ba8, 726)

176 08/06/2002 16:45:50.480 SEV=13 AUTHDECODE/0 RPT=14
0000: 012302D6 E8317738 275469B7 A7D230C5     .#...1w8'Ti...0.
0010: 50CC8DE0 010A7670 6E757365 72310506     P.....vpnuser1..
0020: 0000041C 06060000 00020706 00000001     ................
0030: 420E3137 312E3639 2E38392E 39301AFF     B.171.69.89.90..
0040: 00000137 06F90601 000164BF 9A72CBB1     ...7......d..r..
0050: FE1F1FFA 7D66A600 45BD9769 DD24BAAF     ....}f..E..i.$..
0060: D68FCDF2 BA9F9B2C FABE2BCC 0D66CF62     .......,..+..f.b
0070: 51F6E280 F37502AD 53E5D6FB 7648C8D7     Q....u..S...vH..
0080: 68CCC00F D1B186C8 7217E6DB 7E455DB4     h.......r...~E].
0090: EAB2FE0C 2F09C25A 359F4DCA FE15B816     ..../..Z5.M.....
00A0: 5B113D39 1101444C B8E85BE4 7BDD367F     [.=9..DL..[.{.6.
00B0: 145D5786 38A3A8DC 8D07A029 911DC3D8     .]W.8......)....

188 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/1 RPT=3
Radius: Code = 1 (0x01)

189 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/2 RPT=3
Radius: Identifier = 35 (0x23)

190 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/3 RPT=3
Radius: Length = 726 (0x02D6)

191 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/4 RPT=3
Radius: Vector:

192 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/0 RPT=15
0000: E8317738 275469B7 A7D230C5 50CC8DE0     .1w8'Ti...0.P...

193 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/5 RPT=14
Radius: Type = 1 (0x01) User-Name

194 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/6 RPT=14
Radius: Length = 10 (0x0A)

195 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/7 RPT=6
Radius: Value (String) =

196 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/0 RPT=16
0000: 76706E75 73657231                       vpnuser1

197 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/5 RPT=15
Radius: Type = 5 (0x05) NAS-Port

198 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/6 RPT=15
Radius: Length = 6 (0x06)

199 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/11 RPT=5
Radius: Value (Hex) = 0x41C

200 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/5 RPT=16
Radius: Type = 6 (0x06) Service-Type

201 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/6 RPT=16
Radius: Length = 6 (0x06)

202 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/11 RPT=6
Radius: Value (Hex) = 0x2

203 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/5 RPT=17
Radius: Type = 7 (0x07) Framed-Protocol

204 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/6 RPT=17
Radius: Length = 6 (0x06)

205 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/11 RPT=7
Radius: Value (Hex) = 0x1

206 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/5 RPT=18
Radius: Type = 66 (0x42) Tunnel-Client-Endpoint

207 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/6 RPT=18
Radius: Length = 14 (0x0E)

208 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/7 RPT=7
Radius: Value (String) =

209 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/0 RPT=17
0000: 3137312E 36392E38 392E3930              171.69.89.90

210 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/5 RPT=19
Radius: Type = 26 (0x1A) Vendor-Specific

211 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/6 RPT=19
Radius: Length = 255 (0xFF)

212 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/10 RPT=4
Radius: Vendor ID = 311 (0x00000137)

213 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/5 RPT=20
Radius: Type = 6 (0x06) MS-CHAP-NT-Enc-PW

214 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/6 RPT=20
Radius: Length = 249 (0xF9)

215 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/7 RPT=8
Radius: Value (String) =

216 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/0 RPT=18
0000: 06010001 64BF9A72 CBB1FE1F 1FFA7D66     ....d..r......}f
0010: A60045BD 9769DD24 BAAFD68F CDF2BA9F     ..E..i.$........
0020: 9B2CFABE 2BCC0D66 CF6251F6 E280F375     .,..+..f.bQ....u
0030: 02AD53E5 D6FB7648 C8D768CC C00FD1B1     ..S...vH..h.....
0040: 86C87217 E6DB7E45 5DB4EAB2 FE0C2F09     ..r...~E]...../.
0050: C25A359F 4DCAFE15 B8165B11 3D391101     .Z5.M.....[.=9..
0060: 444CB8E8 5BE47BDD 367F145D 578638A3     DL..[.{.6..]W.8.
0070: A8DC8D07 A029911D C3D839D6 12880394     .....)....9.....
0080: BFCB86DA F5DE706B 616FA285 6B0F2312     ......pkao..k.#.
0090: 5BA566D2 153D9A88 D970EAA7 EEAE2453     [.f..=...p....$S
00A0: DC28ECC7 C0B4F4C4 8BF04712 D68F3FCA     .(........G...?.
00B0: 89F11100 3FA76070 2EE793E9 4EE10B7C     ....?.`p....N..|

228 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/5 RPT=21
Radius: Type = 26 (0x1A) Vendor-Specific

229 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/6 RPT=21
Radius: Length = 255 (0xFF)

230 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/10 RPT=5
Radius: Vendor ID = 311 (0x00000137)

231 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/5 RPT=22
Radius: Type = 6 (0x06) MS-CHAP-NT-Enc-PW

232 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/6 RPT=22
Radius: Length = 249 (0xF9)

233 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/7 RPT=9
Radius: Value (String) =

234 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/0 RPT=19
0000: 06010002 424D1964 E0FCDAA8 DE020FCF     ....BM.d........
0010: 141848C6 3080EE8C 098DCB0E C5FD7AD0     ..H.0.........z.
0020: 771E909B 78C84AA0 89CEAA5E D2727D24     w...x.J....^.r}$
0030: 67D195F9 85F8602E AABB5548 D0F29B5E     g.....`...UH...^
0040: E16380AF 941D7DC0 BD842962 5673BDBD     .c....}...)bVs..
0050: E8818EBE 271C7B4F 9E52A02F 8A6AAA8E     ....'.{O.R./.j..
0060: D3E142B7 C60FDCE9 AECC4F81 7B926351     ..B.......O.{.cQ
0070: 375530C5 F8BFD23C 5E737129 4164C119     7U0....<^sq)Ad..
0080: 4BF7C116 4EB4F82C 5FC2639E 2EAB8DD9     K...N..,_.c.....
0090: 8DD129AC 84B21D0F 96E11B94 BBB78214     ..).............
00A0: B2CED1D2 1758E20C 8462F884 26C3292E     .....X...b..&.).
00B0: D4BAC7F6 7812C981 B5309BE5 509877E5     ....x....0..P.w.

246 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/5 RPT=23
Radius: Type = 26 (0x1A) Vendor-Specific

247 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/6 RPT=23
Radius: Length = 42 (0x2A)

248 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/10 RPT=6
Radius: Vendor ID = 311 (0x00000137)

249 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/5 RPT=24
Radius: Type = 6 (0x06) MS-CHAP-NT-Enc-PW

250 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/6 RPT=24
Radius: Length = 36 (0x24)

251 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/7 RPT=10
Radius: Value (String) =

252 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/0 RPT=20
0000: 06010003 47FD5D0E 1840AC0A F345102C     ....G.]..@...E.,
0010: ED6971DC 1F5CB1D7 609C5101 4724A804     .iq..\..`.Q.G$..
0020: 9B9C                                    ..

255 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/5 RPT=25
Radius: Type = 26 (0x1A) Vendor-Specific

256 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/6 RPT=25
Radius: Length = 24 (0x18)

257 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/10 RPT=7
Radius: Vendor ID = 311 (0x00000137)

258 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/5 RPT=26
Radius: Type = 11 (0x0B) MS-CHAP-Challenge

259 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/6 RPT=26
Radius: Length = 18 (0x12)

260 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/7 RPT=11
Radius: Value (String) =

261 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/0 RPT=21
0000: A7129F8C 8F87FA68 3D3D0A73 E70E3AB0     .......h==.s..:.

262 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/5 RPT=27
Radius: Type = 26 (0x1A) Vendor-Specific

263 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/6 RPT=27
Radius: Length = 76 (0x4C)

264 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/10 RPT=8
Radius: Vendor ID = 311 (0x00000137)

265 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/5 RPT=28
Radius: Type = 27 (0x1B) MS-CHAP2-CPW

266 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/6 RPT=28
Radius: Length = 70 (0x46)

267 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/7 RPT=12
Radius: Value (String) =

268 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/0 RPT=22
0000: 07014E5D FC26F8E9 2F90A59B C04963DA     ..N].&../....Ic.
0010: 048662B6 A996DD49 62AE05FA 5AAFFDDA     ..b....Ib...Z...
0020: 96A90000 00000000 0000EF4A 06BB0405     ...........J....
0030: A003F44A F8B81E05 B22506A4 6259979C     ...J.....%..bY..
0040: 5F510000                                _Q..

273 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/5 RPT=29
Radius: Type = 4 (0x04) NAS-IP-Address

274 08/06/2002 16:45:50.480 SEV=10 AUTHDECODE/6 RPT=29
Radius: Length = 6 (0x06)

275 08/06/2002 16:45:50.490 SEV=10 AUTHDECODE/9 RPT=2
Radius: Value (IP Address) = 172.16.172.36 (0xAC10AC24)

276 08/06/2002 16:45:50.490 SEV=10 AUTHDECODE/5 RPT=30
Radius: Type = 61 (0x3D) NAS-Port-Type

277 08/06/2002 16:45:50.490 SEV=10 AUTHDECODE/6 RPT=30
Radius: Length = 6 (0x06)

278 08/06/2002 16:45:50.490 SEV=10 AUTHDECODE/11 RPT=8
Radius: Value (Hex) = 0x5

279 08/06/2002 16:45:50.490 SEV=8 AUTHDBG/28 RPT=65
Radius_Xmt(9aa46fc)

280 08/06/2002 16:45:50.490 SEV=9 AUTHDBG/71 RPT=304
xmit_cnt = 1

281 08/06/2002 16:45:50.680 SEV=8 AUTHDBG/30 RPT=65
Radius_Match(9aa46fc, 71e7df4), id = 0x23, rcvd = 0x23

282 08/06/2002 16:45:50.680 SEV=8 AUTHDBG/63 RPT=304
AUTH_RcvReply(9aa46fc, 0, 0)

283 08/06/2002 16:45:50.680 SEV=8 AUTHDBG/31 RPT=130
Radius_Decode(71e7df4, 213)

284 08/06/2002 16:45:50.680 SEV=13 AUTHDECODE/0 RPT=23
0000: 022300D5 EF3B5E72 2E31AF7C 7D305207     .#...;^r.1.|}0R.
0010: 27ADA143 07060000 00010606 00000002     '..C............
0020: 19204920 05160000 01370001 AB45593C     . I .....7...EY<
0030: 01C2037B 9CB17432 00000000 00000023     ...{..t2.......#
0040: 1A2A0000 01371124 80293506 D58538BE     .*...7.$.)5...8.
0050: 93D9BB03 17133616 C55D4C6F CE5D8848     ......6..]Lo.].H
0060: 82BAB54B DF490416 84271A2A 00000137     ...K.I...'.*...7
0070: 1024802A F7F3D930 56008345 580C49D5     .$.*...0V..EX.I.
0080: 414E8B6F 4FABD2EB 65A99BB3 2032E3DB     AN.oO...e... 2..
0090: 792C0750 1A330000 01371A2D 01533D33     y,.P.3...7.-.S=3
00A0: 37333630 41343233 44384145 42423132     7360A423D8AEBB12
00B0: 33324239 36413545 36433741 45443938     32B96A5E6C7AED98

296 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/1 RPT=4
Radius: Code = 2 (0x02)

297 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/2 RPT=4
Radius: Identifier = 35 (0x23)

298 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/3 RPT=4
Radius: Length = 213 (0x00D5)

299 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/4 RPT=4
Radius: Vector:

300 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/0 RPT=24
0000: EF3B5E72 2E31AF7C 7D305207 27ADA143     .;^r.1.|}0R.'..C

301 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/5 RPT=31
Radius: Type = 7 (0x07) Framed-Protocol

302 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/6 RPT=31
Radius: Length = 6 (0x06)

303 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/11 RPT=9
Radius: Value (Hex) = 0x1

304 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/5 RPT=32
Radius: Type = 6 (0x06) Service-Type

305 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/6 RPT=32
Radius: Length = 6 (0x06)

306 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/11 RPT=10
Radius: Value (Hex) = 0x2

307 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/5 RPT=33
Radius: Type = 25 (0x19) Class

308 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/6 RPT=33
Radius: Length = 32 (0x20)

309 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/7 RPT=13
Radius: Value (String) =

310 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/0 RPT=25
0000: 49200516 00000137 0001AB45 593C01C2     I .....7...EY<..
0010: 037B9CB1 74320000 00000000 0023         .{..t2.......#

312 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/5 RPT=34
Radius: Type = 26 (0x1A) Vendor-Specific

313 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/6 RPT=34
Radius: Length = 42 (0x2A)

314 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/10 RPT=9
Radius: Vendor ID = 311 (0x00000137)

315 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/5 RPT=35
Radius: Type = 17 (0x11) MS-MPPE-Recv-Key

316 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/6 RPT=35
Radius: Length = 36 (0x24)

317 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/7 RPT=14
Radius: Value (String) =

318 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/0 RPT=26
0000: 80293506 D58538BE 93D9BB03 17133616     .)5...8.......6.
0010: C55D4C6F CE5D8848 82BAB54B DF490416     .]Lo.].H...K.I..
0020: 8427                                    .'

321 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/5 RPT=36
Radius: Type = 26 (0x1A) Vendor-Specific

322 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/6 RPT=36
Radius: Length = 42 (0x2A)

323 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/10 RPT=10
Radius: Vendor ID = 311 (0x00000137)

324 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/5 RPT=37
Radius: Type = 16 (0x10) MS-MPPE-Send-Key

325 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/6 RPT=37
Radius: Length = 36 (0x24)

326 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/7 RPT=15
Radius: Value (String) =

327 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/0 RPT=27
0000: 802AF7F3 D9305600 8345580C 49D5414E     .*...0V..EX.I.AN
0010: 8B6F4FAB D2EB65A9 9BB32032 E3DB792C     .oO...e... 2..y,
0020: 0750                                    .P

330 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/5 RPT=38
Radius: Type = 26 (0x1A) Vendor-Specific

331 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/6 RPT=38
Radius: Length = 51 (0x33)

332 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/10 RPT=11
Radius: Vendor ID = 311 (0x00000137)

333 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/5 RPT=39
Radius: Type = 26 (0x1A) MS-CHAP2-Success

334 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/6 RPT=39
Radius: Length = 45 (0x2D)

335 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/7 RPT=16
Radius: Value (String) =

336 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/0 RPT=28
0000: 01533D33 37333630 41343233 44384145     .S=37360A423D8AE
0010: 42423132 33324239 36413545 36433741     BB1232B96A5E6C7A
0020: 45443938 45313841 453032                ED98E18AE02

339 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/5 RPT=40
Radius: Type = 26 (0x1A) Vendor-Specific

340 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/6 RPT=40
Radius: Length = 14 (0x0E)

341 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/10 RPT=12
Radius: Vendor ID = 311 (0x00000137)

342 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/5 RPT=41
Radius: Type = 10 (0x0A) Unknown

343 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/6 RPT=41
Radius: Length = 8 (0x08)

344 08/06/2002 16:45:50.680 SEV=8 AUTHDBG/29 RPT=65
Radius_Rcv(9aa46fc)

345 08/06/2002 16:45:50.680 SEV=9 AUTHDBG/32 RPT=8
Radius: Discarding unknown Vendor Specific Attribute: vid = 311, type = 10

346 08/06/2002 16:45:50.680 SEV=8 AUTHDBG/66 RPT=304
AUTH_DeleteTimer(9aa46fc, 0, 0)

347 08/06/2002 16:45:50.680 SEV=9 AUTHDBG/74 RPT=304
Reply timer stopped: handle = 5A100016, timestamp = 355274964

348 08/06/2002 16:45:50.680 SEV=8 AUTHDBG/58 RPT=304
AUTH_Callback(9aa46fc, 0, 0)

349 08/06/2002 16:45:50.680 SEV=6 AUTH/4 RPT=18 171.69.89.90
Authentication successful: handle = 103, server = 171.69.89.60, 
user = vpnuser1

350 08/06/2002 16:45:50.680 SEV=8 AUTHDBG/3 RPT=305
AUTH_PutAttrTable(103, 19bfc54)

351 08/06/2002 16:45:50.680 SEV=8 AUTHDBG/60 RPT=304
AUTH_UnbindServer(9aa46fc, 0, 0)

352 08/06/2002 16:45:50.680 SEV=9 AUTHDBG/70 RPT=304
Auth Server 18ce1a4 has been unbound from ACB 9aa46fc, sessions = 0

353 08/06/2002 16:45:50.680 SEV=8 AUTHDBG/59 RPT=305
AUTH_BindServer(9aa46fc, 0, 0)

354 08/06/2002 16:45:50.680 SEV=9 AUTHDBG/69 RPT=305
Auth Server 18cdfa4 has been bound to ACB 9aa46fc, sessions = 1

355 08/06/2002 16:45:50.680 SEV=8 AUTHDBG/65 RPT=305
AUTH_CreateTimer(9aa46fc, 0, 0)

356 08/06/2002 16:45:50.680 SEV=9 AUTHDBG/72 RPT=305
Reply timer created: handle = 5A110016

357 08/06/2002 16:45:50.680 SEV=8 AUTHDBG/61 RPT=305>
AUTH_BuildMsg(9aa46fc, 0, 0)>

358 08/06/2002 16:45:50.680 SEV=8 AUTHDBG/64 RPT=305
AUTH_StartTimer(9aa46fc, 0, 0)

359 08/06/2002 16:45:50.680 SEV=9 AUTHDBG/73 RPT=305
Reply timer started: handle = 5A110016, timestamp = 355274964, timeout = 30000

360 08/06/2002 16:45:50.680 SEV=8 AUTHDBG/62 RPT=305
AUTH_SndRequest(9aa46fc, 0, 0)>

361 08/06/2002 16:45:50.680 SEV=8 AUTHDBG/50 RPT=479
IntDB_Decode(2ea1004, 57)

362 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/12 RPT=11
IntDB: Type = 1 (0x01) User-Name

363 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/13 RPT=11
IntDB: Length = 11 (0x0B)

364 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/14 RPT=5
IntDB: Value (String) =

365 08/06/2002 16:45:50.680 SEV=10 AUTHDECODE/0 RPT=29
0000: 77696E64 6F777375 736572                windowsuser

366 08/06/2002 16:45:50.680 SEV=8 AUTHDBG/47 RPT=479
IntDB_Xmt(9aa46fc)

367 08/06/2002 16:45:50.680 SEV=9 AUTHDBG/71 RPT=305
xmit_cnt = 1

368 08/06/2002 16:45:50.680 SEV=8 AUTHDBG/47 RPT=480
IntDB_Xmt(9aa46fc)

369 08/06/2002 16:45:50.780 SEV=8 AUTHDBG/49 RPT=240
IntDB_Match(9aa46fc, 62f1c4c)

370 08/06/2002 16:45:50.780 SEV=8 AUTHDBG/63 RPT=305
AUTH_RcvReply(9aa46fc, 0, 0)

371 08/06/2002 16:45:50.780 SEV=8 AUTHDBG/50 RPT=480
IntDB_Decode(62f1c4c, 170)

372 08/06/2002 16:45:50.780 SEV=10 AUTHDECODE/12 RPT=12
IntDB: Type = 1 (0x01) User-Name

373 08/06/2002 16:45:50.780 SEV=10 AUTHDECODE/13 RPT=12
IntDB: Length = 11 (0x0B)

374 08/06/2002 16:45:50.780 SEV=10 AUTHDECODE/14 RPT=6
IntDB: Value (String) =

375 08/06/2002 16:45:50.780 SEV=10 AUTHDECODE/0 RPT=30
0000: 77696E64 6F777375 736572                windowsuser

376 08/06/2002 16:45:50.780 SEV=10 AUTHDECODE/12 RPT=13
IntDB: Type = 4109 (0x100D) IPSec-Authentication

377 08/06/2002 16:45:50.780 SEV=10 AUTHDECODE/13 RPT=13
IntDB: Length = 4 (0x04)

378 08/06/2002 16:45:50.780 SEV=10 AUTHDECODE/15 RPT=7
IntDB: Value (Integer) = 6 (0x0006)

379 08/06/2002 16:45:50.780 SEV=10 AUTHDECODE/12 RPT=14
IntDB: Type = 4123 (0x101B) Split-Tunnel-Inclusion-List

380 08/06/2002 16:45:50.780 SEV=10 AUTHDECODE/13 RPT=14
IntDB: Length = 4 (0x04)

381 08/06/2002 16:45:50.780 SEV=10 AUTHDECODE/14 RPT=7
IntDB: Value (String) =

382 08/06/2002 16:45:50.780 SEV=10 AUTHDECODE/0 RPT=31
0000: 74657374                                test

383 08/06/2002 16:45:50.780 SEV=10 AUTHDECODE/12 RPT=15
IntDB: Type = 4151 (0x1037) Split-Tunneling-Policy

384 08/06/2002 16:45:50.780 SEV=10 AUTHDECODE/13 RPT=15
IntDB: Length = 4 (0x04)

385 08/06/2002 16:45:50.780 SEV=10 AUTHDECODE/15 RPT=8
IntDB: Value (Integer) = 1 (0x0001)

386 08/06/2002 16:45:50.780 SEV=8 AUTHDBG/48 RPT=240
IntDB_Rcv(9aa46fc)

387 08/06/2002 16:45:50.780 SEV=8 AUTHDBG/66 RPT=305
AUTH_DeleteTimer(9aa46fc, 0, 0)

388 08/06/2002 16:45:50.780 SEV=9 AUTHDBG/74 RPT=305
Reply timer stopped: handle = 5A110016, timestamp = 355274974

389 08/06/2002 16:45:50.780 SEV=8 AUTHDBG/58 RPT=305
AUTH_Callback(9aa46fc, 0, 0)

390 08/06/2002 16:45:50.780 SEV=6 AUTH/41 RPT=219 171.69.89.90
Authentication successful: handle = 103, server = Internal, 
group = windowsuser

391 08/06/2002 16:45:50.780 SEV=8 AUTHDBG/3 RPT=306
AUTH_PutAttrTable(103, 19bfc54)

392 08/06/2002 16:45:50.780 SEV=8 AUTHDBG/60 RPT=305
AUTH_UnbindServer(9aa46fc, 0, 0)

393 08/06/2002 16:45:50.780 SEV=9 AUTHDBG/70 RPT=305
Auth Server 18cdfa4 has been unbound from ACB 9aa46fc, sessions = 0

394 08/06/2002 16:45:50.780 SEV=8 AUTHDBG/59 RPT=306
AUTH_BindServer(9aa46fc, 0, 0)

395 08/06/2002 16:45:50.780 SEV=9 AUTHDBG/69 RPT=306
Auth Server 18cdfa4 has been bound to ACB 9aa46fc, sessions = 1

396 08/06/2002 16:45:50.780 SEV=8 AUTHDBG/65 RPT=306
AUTH_CreateTimer(9aa46fc, 0, 0)

397 08/06/2002 16:45:50.780 SEV=9 AUTHDBG/72 RPT=306
Reply timer created: handle = 5A120016

398 08/06/2002 16:45:50.780 SEV=8 AUTHDBG/61 RPT=306
AUTH_BuildMsg(9aa46fc, 0, 0)

399 08/06/2002 16:45:50.780 SEV=8 AUTHDBG/64 RPT=306
AUTH_StartTimer(9aa46fc, 0, 0)

400 08/06/2002 16:45:50.780 SEV=9 AUTHDBG/73 RPT=306
Reply timer started: handle = 5A120016, timestamp = 355274974, timeout = 30000

401 08/06/2002 16:45:50.780 SEV=8 AUTHDBG/62 RPT=306
AUTH_SndRequest(9aa46fc, 0, 0)

402 08/06/2002 16:45:50.780 SEV=8 AUTHDBG/50 RPT=481
IntDB_Decode(2e8aa34, 57)

403 08/06/2002 16:45:50.780 SEV=10 AUTHDECODE/12 RPT=16
IntDB: Type = 1 (0x01) User-Name

404 08/06/2002 16:45:50.780 SEV=10 AUTHDECODE/13 RPT=16
IntDB: Length = 11 (0x0B)

405 08/06/2002 16:45:50.780 SEV=10 AUTHDECODE/14 RPT=8
IntDB: Value (String) =

406 08/06/2002 16:45:50.780 SEV=10 AUTHDECODE/0 RPT=32
0000: 77696E64 6F777375 736572                windowsuser

407 08/06/2002 16:45:50.780 SEV=8 AUTHDBG/47 RPT=481
IntDB_Xmt(9aa46fc)

408 08/06/2002 16:45:50.780 SEV=9 AUTHDBG/71 RPT=306
xmit_cnt = 1

409 08/06/2002 16:45:50.780 SEV=8 AUTHDBG/47 RPT=482
IntDB_Xmt(9aa46fc)

410 08/06/2002 16:45:50.880 SEV=8 AUTHDBG/49 RPT=241
IntDB_Match(9aa46fc, 62fd1a8)

411 08/06/2002 16:45:50.880 SEV=8 AUTHDBG/63 RPT=306
AUTH_RcvReply(9aa46fc, 0, 0)

412 08/06/2002 16:45:50.880 SEV=8 AUTHDBG/50 RPT=482
IntDB_Decode(62fd1a8, 170)

413 08/06/2002 16:45:50.880 SEV=10 AUTHDECODE/12 RPT=17
IntDB: Type = 1 (0x01) User-Name

414 08/06/2002 16:45:50.880 SEV=10 AUTHDECODE/13 RPT=17
IntDB: Length = 11 (0x0B)


415 08/06/2002 16:45:50.880 SEV=10 AUTHDECODE/14 RPT=9
IntDB: Value (String) =

416 08/06/2002 16:45:50.880 SEV=10 AUTHDECODE/0 RPT=33
0000: 77696E64 6F777375 736572                windowsuser

417 08/06/2002 16:45:50.880 SEV=10 AUTHDECODE/12 RPT=18
IntDB: Type = 4109 (0x100D) IPSec-Authentication

418 08/06/2002 16:45:50.880 SEV=10 AUTHDECODE/13 RPT=18
IntDB: Length = 4 (0x04)

419 08/06/2002 16:45:50.880 SEV=10 AUTHDECODE/15 RPT=9
IntDB: Value (Integer) = 6 (0x0006)

420 08/06/2002 16:45:50.880 SEV=10 AUTHDECODE/12 RPT=19
IntDB: Type = 4123 (0x101B) Split-Tunnel-Inclusion-List

421 08/06/2002 16:45:50.880 SEV=10 AUTHDECODE/13 RPT=19
IntDB: Length = 4 (0x04)

422 08/06/2002 16:45:50.880 SEV=10 AUTHDECODE/14 RPT=10
IntDB: Value (String) =

423 08/06/2002 16:45:50.880 SEV=10 AUTHDECODE/0 RPT=34
0000: 74657374                                test

424 08/06/2002 16:45:50.880 SEV=10 AUTHDECODE/12 RPT=20
IntDB: Type = 4151 (0x1037) Split-Tunneling-Policy

425 08/06/2002 16:45:50.880 SEV=10 AUTHDECODE/13 RPT=20
IntDB: Length = 4 (0x04)

426 08/06/2002 16:45:50.880 SEV=10 AUTHDECODE/15 RPT=10
IntDB: Value (Integer) = 1 (0x0001)

427 08/06/2002 16:45:50.880 SEV=8 AUTHDBG/48 RPT=241
IntDB_Rcv(9aa46fc)

428 08/06/2002 16:45:50.880 SEV=8 AUTHDBG/66 RPT=306
AUTH_DeleteTimer(9aa46fc, 0, 0)

429 08/06/2002 16:45:50.880 SEV=9 AUTHDBG/74 RPT=306
Reply timer stopped: handle = 5A120016, timestamp = 355274984

430 08/06/2002 16:45:50.880 SEV=8 AUTHDBG/58 RPT=306
AUTH_Callback(9aa46fc, 0, 0)

431 08/06/2002 16:45:50.880 SEV=6 AUTH/41 RPT=220 171.69.89.90
Authentication successful: handle = 103, server = Internal, 
group = windowsuser

432 08/06/2002 16:45:50.880 SEV=8 AUTHDBG/4 RPT=291
AUTH_GetAttrTable(103, 743aa8)

433 08/06/2002 16:45:50.880 SEV=8 AUTHDBG/4 RPT=292
AUTH_GetAttrTable(103, 743ad8)

434 08/06/2002 16:45:50.880 SEV=8 AUTHDBG/4 RPT=293
AUTH_GetAttrTable(103, 742a30)

435 08/06/2002 16:45:50.880 SEV=8 AUTHDBG/2 RPT=264
AUTH_Close(103)

436 08/06/2002 16:45:50.880 SEV=4 IKE/52 RPT=19 171.69.89.90
Group [windowsuser] User [vpnuser1]
User (vpnuser1) authenticated.

437 08/06/2002 16:45:50.880 SEV=8 AUTHDBG/60 RPT=306
AUTH_UnbindServer(9aa46fc, 0, 0)

438 08/06/2002 16:45:50.880 SEV=9 AUTHDBG/70 RPT=306
Auth Server 18cdfa4 has been unbound from ACB 9aa46fc, sessions = 0

439 08/06/2002 16:45:50.880 SEV=8 AUTHDBG/10 RPT=264
AUTH_Int_FreeAuthCB(9aa46fc)

440 08/06/2002 16:45:50.880 SEV=7 AUTH/13 RPT=265
Authentication session closed: handle = 103

441 08/06/2002 16:45:50.900 SEV=6 IKE/130 RPT=30 171.69.89.90
Group [windowsuser] User [vpnuser1]
Received unsupported transaction mode attribute: 5

443 08/06/2002 16:45:50.930 SEV=4 AUTH/22 RPT=286
User vpnuser1 connected

444 08/06/2002 16:45:50.930 SEV=4 IKE/119 RPT=23 171.69.89.90
Group [windowsuser] User [vpnuser1]
PHASE 1 COMPLETED

445 08/06/2002 16:45:50.930 SEV=6 IKE/121 RPT=23 171.69.89.90
Keep-alive type for this connection: DPD

446 08/06/2002 16:45:50.930 SEV=5 IKE/25 RPT=27 171.69.89.90
Group [windowsuser] User [vpnuser1]
Received remote Proxy Host data in ID Payload:
Address 10.10.10.1, Protocol 0, Port 0

449 08/06/2002 16:45:50.930 SEV=5 IKE/24 RPT=23 171.69.89.90
Group [windowsuser] User [vpnuser1]
Received local Proxy Host data in ID Payload:
Address 172.16.172.36, Protocol 0, Port 0

452 08/06/2002 16:45:50.930 SEV=5 IKE/66 RPT=27 171.69.89.90
Group [windowsuser] User [vpnuser1]
IKE Remote Peer configured for SA: ESP-3DES-MD5

454 08/06/2002 16:45:50.930 SEV=5 IKE/75 RPT=27 171.69.89.90
Group [windowsuser] User [vpnuser1]
Overriding Initiator's IPSec rekeying duration from 2147483 to 28800 seconds

456 08/06/2002 16:45:50.940 SEV=4 IKE/49 RPT=27 171.69.89.90

Group [windowsuser] User [vpnuser1]
Security negotiation complete for User (vpnuser1)
Responder, Inbound SPI = 0x36291f3d, Outbound SPI = 0x07345e3e

459 08/06/2002 16:45:50.940 SEV=8 AUTHDBG/1 RPT=265
AUTH_Open() returns 104

460 08/06/2002 16:45:50.940 SEV=7 AUTH/12 RPT=266
Authentication session opened: handle = 104

461 08/06/2002 16:45:50.940 SEV=8 AUTHDBG/3 RPT=307
AUTH_PutAttrTable(104, 1b3b748)

462 08/06/2002 16:45:50.940 SEV=8 AUTHDBG/7 RPT=31
AUTH_Accounting(104, 0, 0)

463 08/06/2002 16:45:50.940 SEV=4 IKE/120 RPT=27 171.69.89.90
Group [windowsuser] User [vpnuser1]
PHASE 2 COMPLETED (msgid=ed3c1f7c)

464 08/06/2002 16:45:50.940 SEV=8 AUTHDBG/59 RPT=307
AUTH_BindServer(9a9b1ec, 0, 0)

465 08/06/2002 16:45:50.940 SEV=9 AUTHDBG/69 RPT=307
Acct Server 1811fa4 has been bound to ACB 9a9b1ec, sessions = 1

466 08/06/2002 16:45:50.940 SEV=8 AUTHDBG/65 RPT=307
AUTH_CreateTimer(9a9b1ec, 0, 0)

467 08/06/2002 16:45:50.940 SEV=9 AUTHDBG/72 RPT=307
Reply timer created: handle = 5A180017

468 08/06/2002 16:45:50.940 SEV=8 AUTHDBG/61 RPT=307
AUTH_BuildMsg(9a9b1ec, 0, 0)

469 08/06/2002 16:45:50.940 SEV=8 AUTHDBG/27 RPT=66
Radius_Build(9a9b1ec)

470 08/06/2002 16:45:50.940 SEV=8 AUTHDBG/64 RPT=307
AUTH_StartTimer(9a9b1ec, 0, 0)

471 08/06/2002 16:45:50.940 SEV=9 AUTHDBG/73 RPT=307
Reply timer started: handle = 5A180017, timestamp = 355274990, timeout = 1000

472 08/06/2002 16:45:50.940 SEV=8 AUTHDBG/62 RPT=307
AUTH_SndRequest(9a9b1ec, 0, 0)

473 08/06/2002 16:45:50.940 SEV=8 AUTHDBG/31 RPT=131
Radius_Decode(62f2324, 140)

474 08/06/2002 16:45:50.940 SEV=13 AUTHDECODE/0 RPT=35
0000: 043A008C 0A49A1AF C3022A50 B74B0B97     .:...I....*P.K..
0010: 887AFEC1 010A7670 6E757365 72310506     .z....vpnuser1..
0020: 0000041C 06060000 00020706 00000001     ................
0030: 08060A0A 0A011920 49200516 00000137     ....... I .....7
0040: 0001AB45 593C01C2 037B9CB1 74320000     ...EY<...{..t2..
0050: 00000000 00232806 00000001 2C0A3345     .....#(.....,.3E
0060: 35303030 3144420E 3137312E 36392E38     50001DB.171.69.8
0070: 392E3930 2D060000 00012906 00000000     9.90-.....).....
0080: 0406AC10 AC243D06 00000005              .....$=.....

483 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/1 RPT=5
Radius: Code = 4 (0x04)

484 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/2 RPT=5
Radius: Identifier = 58 (0x3A)

485 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/3 RPT=5
Radius: Length = 140 (0x008C)

486 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/4 RPT=5
Radius: Vector:

487 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/0 RPT=36
0000: 0A49A1AF C3022A50 B74B0B97 887AFEC1     .I....*P.K...z..

488 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/5 RPT=42
Radius: Type = 1 (0x01) User-Name

489 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/6 RPT=42
Radius: Length = 10 (0x0A)

490 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/7 RPT=17
Radius: Value (String) =

491 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/0 RPT=37
0000: 76706E75 73657231                       vpnuser1

492 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/5 RPT=43
Radius: Type = 5 (0x05) NAS-Port

493 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/6 RPT=43
Radius: Length = 6 (0x06)

494 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/11 RPT=11
Radius: Value (Hex) = 0x41C

495 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/5 RPT=44
Radius: Type = 6 (0x06) Service-Type

496 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/6 RPT=44
Radius: Length = 6 (0x06)

497 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/11 RPT=12
Radius: Value (Hex) = 0x2

498 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/5 RPT=45
Radius: Type = 7 (0x07) Framed-Protocol

499 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/6 RPT=45
Radius: Length = 6 (0x06)

500 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/11 RPT=13
Radius: Value (Hex) = 0x1

501 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/5 RPT=46
Radius: Type = 8 (0x08) Framed-IP-Address

502 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/6 RPT=46
Radius: Length = 6 (0x06)

503 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/9 RPT=3
Radius: Value (IP Address) = 10.10.10.1 (0x0A0A0A01)

504 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/5 RPT=47
Radius: Type = 25 (0x19) Class

505 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/6 RPT=47
Radius: Length = 32 (0x20)

506 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/7 RPT=18
Radius: Value (String) =

507 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/0 RPT=38
0000: 49200516 00000137 0001AB45 593C01C2     I .....7...EY<..
0010: 037B9CB1 74320000 00000000 0023         .{..t2.......#

509 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/5 RPT=48
Radius: Type = 40 (0x28) Acct-Status-Type

510 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/6 RPT=48
Radius: Length = 6 (0x06)

511 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/11 RPT=14
Radius: Value (Hex) = 0x1

512 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/5 RPT=49
Radius: Type = 44 (0x2C) Acct-Session-Id

513 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/6 RPT=49
Radius: Length = 10 (0x0A)

514 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/7 RPT=19
Radius: Value (String) =

515 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/0 RPT=39
0000: 33453530 30303144                       3E50001D

516 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/5 RPT=50
Radius: Type = 66 (0x42) Tunnel-Client-Endpoint

517 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/6 RPT=50
Radius: Length = 14 (0x0E)

518 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/7 RPT=20
Radius: Value (String) =

519 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/0 RPT=40
0000: 3137312E 36392E38 392E3930              171.69.89.90

520 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/5 RPT=51
Radius: Type = 45 (0x2D) Acct-Authentic

521 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/6 RPT=51
Radius: Length = 6 (0x06)

522 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/11 RPT=15
Radius: Value (Hex) = 0x1

523 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/5 RPT=52
Radius: Type = 41 (0x29) Acct-Delay-Time

524 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/6 RPT=52
Radius: Length = 6 (0x06)

525 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/11 RPT=16
Radius: Value (Hex) = 0x0

526 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/5 RPT=53
Radius: Type = 4 (0x04) NAS-IP-Address

527 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/6 RPT=53
Radius: Length = 6 (0x06)

528 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/9 RPT=4
Radius: Value (IP Address) = 172.16.172.36 (0xAC10AC24)

529 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/5 RPT=54
Radius: Type = 61 (0x3D) NAS-Port-Type

530 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/6 RPT=54
Radius: Length = 6 (0x06)

531 08/06/2002 16:45:50.940 SEV=10 AUTHDECODE/11 RPT=17
Radius: Value (Hex) = 0x5

532 08/06/2002 16:45:50.940 SEV=8 AUTHDBG/28 RPT=66
Radius_Xmt(9a9b1ec)

533 08/06/2002 16:45:50.940 SEV=9 AUTHDBG/71 RPT=307
xmit_cnt = 1

534 08/06/2002 16:45:51.040 SEV=8 AUTHDBG/30 RPT=66
Radius_Match(9a9b1ec, 500aacc), id = 0x3A, rcvd = 0x3A

535 08/06/2002 16:45:51.040 SEV=8 AUTHDBG/63 RPT=307
AUTH_RcvReply(9a9b1ec, 0, 0)

536 08/06/2002 16:45:51.040 SEV=8 AUTHDBG/31 RPT=132
Radius_Decode(500aacc, 20)

537 08/06/2002 16:45:51.040 SEV=13 AUTHDECODE/0 RPT=41
0000: 053A0014 7DE07642 671D26FA 5B2E1904     .:..}.vBg.&.[...
0010: 943FA41A                                .?..

539 08/06/2002 16:45:51.040 SEV=10 AUTHDECODE/1 RPT=6
Radius: Code = 5 (0x05)

540 08/06/2002 16:45:51.040 SEV=10 AUTHDECODE/2 RPT=6
Radius: Identifier = 58 (0x3A)

541 08/06/2002 16:45:51.040 SEV=10 AUTHDECODE/3 RPT=6
Radius: Length = 20 (0x0014)

542 08/06/2002 16:45:51.040 SEV=10 AUTHDECODE/4 RPT=6
Radius: Vector:

543 08/06/2002 16:45:51.040 SEV=10 AUTHDECODE/0 RPT=42
0000: 7DE07642 671D26FA 5B2E1904 943FA41A     }.vBg.&.[....?..

544 08/06/2002 16:45:51.040 SEV=8 AUTHDBG/29 RPT=66
Radius_Rcv(9a9b1ec)

545 08/06/2002 16:45:51.040 SEV=8 AUTHDBG/66 RPT=307
AUTH_DeleteTimer(9a9b1ec, 0, 0)

546 08/06/2002 16:45:51.040 SEV=9 AUTHDBG/74 RPT=307
Reply timer stopped: handle = 5A180017, timestamp = 355275000

547 08/06/2002 16:45:51.040 SEV=8 AUTHDBG/58 RPT=307
AUTH_Callback(9a9b1ec, 0, 0)

548 08/06/2002 16:45:51.040 SEV=6 AUTH/10 RPT=31 171.69.89.90
Accounting successful: handle = 104, server = 171.69.89.154, user = vpnuser1

549 08/06/2002 16:45:51.040 SEV=8 AUTHDBG/2 RPT=265
AUTH_Close(104)

550 08/06/2002 16:45:51.040 SEV=8 AUTHDBG/60 RPT=307
AUTH_UnbindServer(9a9b1ec, 0, 0)


551 08/06/2002 16:45:51.040 SEV=9 AUTHDBG/70 RPT=307
Acct Server 1811fa4 has been unbound from ACB 9a9b1ec, sessions = 0

552 08/06/2002 16:45:51.040 SEV=8 AUTHDBG/10 RPT=265
AUTH_Int_FreeAuthCB(9a9b1ec)

553 08/06/2002 16:45:51.040 SEV=7 AUTH/13 RPT=266
Authentication session closed: handle = 104

554 08/06/2002 16:45:54.890 SEV=5 IKE/50 RPT=37 171.69.89.90
Group [windowsuser] User [vpnuser1]
Connection terminated for peer vpnuser1 (Peer Terminate)
Remote Proxy 10.10.10.1, Local Proxy 172.16.172.36

557 08/06/2002 16:45:54.890 SEV=8 AUTHDBG/1 RPT=266
AUTH_Open() returns 105

558 08/06/2002 16:45:54.890 SEV=7 AUTH/12 RPT=267
Authentication session opened: handle = 105

559 08/06/2002 16:45:54.890 SEV=8 AUTHDBG/3 RPT=308
AUTH_PutAttrTable(105, 1b3b730)

560 08/06/2002 16:45:54.890 SEV=8 AUTHDBG/7 RPT=32
AUTH_Accounting(105, 0, 0)

561 08/06/2002 16:45:54.890 SEV=4 AUTH/28 RPT=23 171.69.89.90
User [vpnuser1] disconnected:
 Duration: 0:00:03
 Bytes xmt: 0
 Bytes rcv: 0
 Reason: User Requested

563 08/06/2002 16:45:54.890 SEV=8 AUTHDBG/59 RPT=308
AUTH_BindServer(9a043f0, 0, 0)

564 08/06/2002 16:45:54.890 SEV=9 AUTHDBG/69 RPT=308
Acct Server 1811fa4 has been bound to ACB 9a043f0, sessions = 1

565 08/06/2002 16:45:54.890 SEV=8 AUTHDBG/65 RPT=308
AUTH_CreateTimer(9a043f0, 0, 0)

566 08/06/2002 16:45:54.890 SEV=9 AUTHDBG/72 RPT=308
Reply timer created: handle = 5A19001B

567 08/06/2002 16:45:54.890 SEV=8 AUTHDBG/61 RPT=308
AUTH_BuildMsg(9a043f0, 0, 0)

568 08/06/2002 16:45:54.890 SEV=8 AUTHDBG/27 RPT=67
Radius_Build(9a043f0)

569 08/06/2002 16:45:54.890 SEV=8 AUTHDBG/64 RPT=308
AUTH_StartTimer(9a043f0, 0, 0)

570 08/06/2002 16:45:54.890 SEV=9 AUTHDBG/73 RPT=308
Reply timer started: handle = 5A19001B, timestamp = 355275385, timeout = 1000

571 08/06/2002 16:45:54.890 SEV=8 AUTHDBG/62 RPT=308
AUTH_SndRequest(9a043f0, 0, 0)

572 08/06/2002 16:45:54.890 SEV=8 AUTHDBG/31 RPT=133
Radius_Decode(630894c, 176)

573 08/06/2002 16:45:54.890 SEV=13 AUTHDECODE/0 RPT=43
0000: 043B00B0 295505F0 864A0A1F 6345232B     .;..)U...J..cE#+
0010: 81D315E5 010A7670 6E757365 72310506     ......vpnuser1..
0020: 0000041C 06060000 00020706 00000001     ................
0030: 08060A0A 0A011920 49200516 00000137     ....... I .....7
0040: 0001AB45 593C01C2 037B9CB1 74320000     ...EY<...{..t2..
0050: 00000000 00232806 00000002 2A060000     .....#(.....*...
0060: 00002B06 00000000 2C0A3345 35303030     ..+.....,.3E5000
0070: 31442E06 00000004 2F060000 00003006     1D....../.....0.
0080: 00000000 31060000 0001420E 3137312E     ....1.....B.171.
0090: 36392E38 392E3930 2D060000 00012906     69.89.90-.....).
00A0: 00000000 0406AC10 AC243D06 00000005     .........$=.....

584 08/06/2002 16:45:54.890 SEV=10 AUTHDECODE/1 RPT=7
Radius: Code = 4 (0x04)

585 08/06/2002 16:45:54.890 SEV=10 AUTHDECODE/2 RPT=7
Radius: Identifier = 59 (0x3B)

586 08/06/2002 16:45:54.890 SEV=10 AUTHDECODE/3 RPT=7
Radius: Length = 176 (0x00B0)

587 08/06/2002 16:45:54.890 SEV=10 AUTHDECODE/4 RPT=7
Radius: Vector:

588 08/06/2002 16:45:54.890 SEV=10 AUTHDECODE/0 RPT=44
0000: 295505F0 864A0A1F 6345232B 81D315E5     )U...J..cE#+....

589 08/06/2002 16:45:54.890 SEV=10 AUTHDECODE/5 RPT=55
Radius: Type = 1 (0x01) User-Name

590 08/06/2002 16:45:54.890 SEV=10 AUTHDECODE/6 RPT=55
Radius: Length = 10 (0x0A)

591 08/06/2002 16:45:54.890 SEV=10 AUTHDECODE/7 RPT=21
Radius: Value (String) =

592 08/06/2002 16:45:54.890 SEV=10 AUTHDECODE/0 RPT=45
0000: 76706E75 73657231                       vpnuser1

593 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/5 RPT=56
Radius: Type = 5 (0x05) NAS-Port

594 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/6 RPT=56
Radius: Length = 6 (0x06)

595 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/11 RPT=18
Radius: Value (Hex) = 0x41C

596 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/5 RPT=57
Radius: Type = 6 (0x06) Service-Type

597 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/6 RPT=57
Radius: Length = 6 (0x06)

598 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/11 RPT=19
Radius: Value (Hex) = 0x2

599 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/5 RPT=58
Radius: Type = 7 (0x07) Framed-Protocol

600 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/6 RPT=58
Radius: Length = 6 (0x06)

601 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/11 RPT=20
Radius: Value (Hex) = 0x1

602 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/5 RPT=59
Radius: Type = 8 (0x08) Framed-IP-Address

603 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/6 RPT=59
Radius: Length = 6 (0x06)

604 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/9 RPT=5
Radius: Value (IP Address) = 10.10.10.1 (0x0A0A0A01)

605 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/5 RPT=60
Radius: Type = 25 (0x19) Class

606 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/6 RPT=60
Radius: Length = 32 (0x20)

607 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/7 RPT=22
Radius: Value (String) =

608 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/0 RPT=46
0000: 49200516 00000137 0001AB45 593C01C2     I .....7...EY<..>
0010: 037B9CB1 74320000 00000000 0023         .{..t2.......#

610 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/5 RPT=61
Radius: Type = 40 (0x28) Acct-Status-Type

611 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/6 RPT=61
Radius: Length = 6 (0x06)

612 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/11 RPT=21
Radius: Value (Hex) = 0x2

613 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/5 RPT=62
Radius: Type = 42 (0x2A) Acct-Input-Octets

614 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/6 RPT=62
Radius: Length = 6 (0x06)

615 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/11 RPT=22
Radius: Value (Hex) = 0x0

616 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/5 RPT=63
Radius: Type = 43 (0x2B) Acct-Output-Octets

617 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/6 RPT=63
Radius: Length = 6 (0x06)

618 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/11 RPT=23
Radius: Value (Hex) = 0x0

619 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/5 RPT=64
Radius: Type = 44 (0x2C) Acct-Session-Id

620 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/6 RPT=64
Radius: Length = 10 (0x0A)

621 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/7 RPT=23
Radius: Value (String) =

622 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/0 RPT=47
0000: 33453530 30303144                       3E50001D

623 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/5 RPT=65
Radius: Type = 46 (0x2E) Acct-Session-Time

624 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/6 RPT=65
Radius: Length = 6 (0x06)

625 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/11 RPT=24
Radius: Value (Hex) = 0x4

626 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/5 RPT=66
Radius: Type = 47 (0x2F) Acct-Input-Packets

627 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/6 RPT=66
Radius: Length = 6 (0x06)

628 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/11 RPT=25
Radius: Value (Hex) = 0x0

629 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/5 RPT=67
Radius: Type = 48 (0x30) Acct-Output-Packets

630 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/6 RPT=67
Radius: Length = 6 (0x06)

631 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/11 RPT=26
Radius: Value (Hex) = 0x0

632 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/5 RPT=68
Radius: Type = 49 (0x31) Acct-Terminate-Cause

633 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/6 RPT=68
Radius: Length = 6 (0x06)

634 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/11 RPT=27
Radius: Value (Hex) = 0x1

635 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/5 RPT=69
Radius: Type = 66 (0x42) Tunnel-Client-Endpoint

636 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/6 RPT=69
Radius: Length = 14 (0x0E)

637 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/7 RPT=24
Radius: Value (String) =

638 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/0 RPT=48
0000: 3137312E 36392E38 392E3930              171.69.89.90

639 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/5 RPT=70
Radius: Type = 45 (0x2D) Acct-Authentic

640 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/6 RPT=70
Radius: Length = 6 (0x06)

641 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/11 RPT=28
Radius: Value (Hex) = 0x1

642 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/5 RPT=71
Radius: Type = 41 (0x29) Acct-Delay-Time

643 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/6 RPT=71
Radius: Length = 6 (0x06)<

644 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/11 RPT=29
Radius: Value (Hex) = 0x0

645 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/5 RPT=72
Radius: Type = 4 (0x04) NAS-IP-Address

646 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/6 RPT=72
Radius: Length = 6 (0x06)

647 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/9 RPT=6
Radius: Value (IP Address) = 172.16.172.36 (0xAC10AC24)

648 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/5 RPT=73
Radius: Type = 61 (0x3D) NAS-Port-Type

649 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/6 RPT=73
Radius: Length = 6 (0x06)

650 08/06/2002 16:45:54.900 SEV=10 AUTHDECODE/11 RPT=30
Radius: Value (Hex) = 0x5

651 08/06/2002 16:45:54.900 SEV=8 AUTHDBG/28 RPT=67
Radius_Xmt(9a043f0)

652 08/06/2002 16:45:54.900 SEV=9 AUTHDBG/71 RPT=308
xmit_cnt = 1

653 08/06/2002 16:45:54.900 SEV=6 IKE/38 RPT=31 171.69.89.90
Header invalid, missing SA payload! (next payload = 8)

654 08/06/2002 16:45:54.990 SEV=8 AUTHDBG/30 RPT=67
Radius_Match(9a043f0, 5009d58), id = 0x3B, rcvd = 0x3B

655 08/06/2002 16:45:54.990 SEV=8 AUTHDBG/63 RPT=308
AUTH_RcvReply(9a043f0, 0, 0)

656 08/06/2002 16:45:54.990 SEV=8 AUTHDBG/31 RPT=134
Radius_Decode(5009d58, 20)

657 08/06/2002 16:45:54.990 SEV=13 AUTHDECODE/0 RPT=49
0000: 053B0014 A7C83B83 2EA5C679 FB0B4540     .;....;....y..E@
0010: 4F1A83EB                                O...

659 08/06/2002 16:45:54.990 SEV=10 AUTHDECODE/1 RPT=8
Radius: Code = 5 (0x05)

660 08/06/2002 16:45:54.990 SEV=10 AUTHDECODE/2 RPT=8
Radius: Identifier = 59 (0x3B)

661 08/06/2002 16:45:54.990 SEV=10 AUTHDECODE/3 RPT=8
Radius: Length = 20 (0x0014)

662 08/06/2002 16:45:54.990 SEV=10 AUTHDECODE/4 RPT=8
Radius: Vector:

663 08/06/2002 16:45:54.990 SEV=10 AUTHDECODE/0 RPT=50
0000: A7C83B83 2EA5C679 FB0B4540 4F1A83EB     ..;....y..E@O...

664 08/06/2002 16:45:54.990 SEV=8 AUTHDBG/29 RPT=67
Radius_Rcv(9a043f0)

665 08/06/2002 16:45:54.990 SEV=8 AUTHDBG/66 RPT=308
AUTH_DeleteTimer(9a043f0, 0, 0)

666 08/06/2002 16:45:54.990 SEV=9 AUTHDBG/74 RPT=308
Reply timer stopped: handle = 5A19001B, timestamp = 355275395

667 08/06/2002 16:45:54.990 SEV=8 AUTHDBG/58 RPT=308
AUTH_Callback(9a043f0, 0, 0)

668 08/06/2002 16:45:54.990 SEV=6 AUTH/10 RPT=32 171.69.89.90
Accounting successful: handle = 105, server = 171.69.89.154, user = vpnuser1

669 08/06/2002 16:45:54.990 SEV=8 AUTHDBG/2 RPT=266
AUTH_Close(105)

670 08/06/2002 16:45:54.990 SEV=8 AUTHDBG/60 RPT=308
AUTH_UnbindServer(9a043f0, 0, 0)

671 08/06/2002 16:45:54.990 SEV=9 AUTHDBG/70 RPT=308
Acct Server 1811fa4 has been unbound from ACB 9a043f0, sessions = 0

672 08/06/2002 16:45:54.990 SEV=8 AUTHDBG/10 RPT=266
AUTH_Int_FreeAuthCB(9a043f0)

673 08/06/2002 16:45:54.990 SEV=7 AUTH/13 RPT=267
Authentication session closed: handle = 105