I am hoping someone else has run across this issue and can point me in
the right direction. I have one laptop that was connecting to our
BorderManager 3.8 c2s vpn just fine prior to applying Windows2000 service
pack4. Now it will make the connection and athuenticate ok, but no packets
will travel down the tunnel encrypted or unencrypted.
We are using Erikkson CS82 wireless cards to connect, and other laptops
can connect with them no problem .

I can see the user connecting (Via NoRm) but the number of Packets stay
at zero. The user can see the Traffic Rules pushed to them. And all looks
normal, but they are unable to ping anything on the private side. I have
tried an uninstall and re-install of both Client 32 and Vpn client 3.8.7

I am including a snip of the IKe log in hopes someone can point me in the
right direction. Any help or advice is greatly appreciated.

################################################## #########################
############

9-14-2004 3:42:03 pm The client 172.134.50.1 removed from vpninf

9-14-2004 4:01:59 pm Read trusted root cert file
SYS:/ETC/IKE/ROOTCERT/C2S001.DER
9-14-2004 4:01:59 pm Read trusted root cert file
SYS:/ETC/IKE/ROOTCERT/SRV001.DER
9-14-2004 4:05:24 pm ***Receive Main Mode message from 166.138.200.163
9-14-2004 4:05:24 pm I-COOKIE=24661B1690459213,R-
COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=-820006324
9-14-2004 4:05:24 pm Start IKE-SA 956D7040 -
Responder,src=168.58.17.2,dst=166.138.200.163,TotS A=1
9-14-2004 4:05:24 pm Negotiating for an NMAS user 166.138.200.163
9-14-2004 4:05:24 pm IKE SA NEGOTIATION: Peer lifetime = 28800 My
lifetime=28800
9-14-2004 4:05:24 pm ****DH private exponent size is 1016****
9-14-2004 4:05:24 pm Local server's interfaces : 192.77.15.8
9-14-2004 4:05:24 pm Local server's interfaces : 168.58.17.2
9-14-2004 4:05:24 pm Recieved Supported Vendor id Novell Border Manager
VPN 4.0 client - Protected Net from 166.138.200.163
9-14-2004 4:05:24 pm Recieved Supported Vendor id draft-ietf-ipsec-nat-t-
ike-03 from 166.138.200.163
9-14-2004 4:05:24 pm ***Send Main Mode message to 166.138.200.163
9-14-2004 4:05:24 pm I-COOKIE=24661B1690459213,R-
COOKIE=84419293B12B1E80,MsgID=0,1stPL=SA-PAYLOAD,state=-820006324
9-14-2004 4:05:26 pm ***Receive Main Mode message from 166.138.200.163
9-14-2004 4:05:26 pm I-COOKIE=24661B1690459213,R-
COOKIE=84419293B12B1E80,MsgID=0,1stPL=KEY-PAYLOAD,state=-820006272
9-14-2004 4:05:26 pm No NAT detected
9-14-2004 4:05:26 pm ***Send Main Mode message to 166.138.200.163
9-14-2004 4:05:26 pm I-COOKIE=24661B1690459213,R-
COOKIE=84419293B12B1E80,MsgID=0,1stPL=KEY-PAYLOAD,state=-820006272
9-14-2004 4:05:27 pm ***Receive Main Mode message from 166.138.200.163
9-14-2004 4:05:27 pm I-COOKIE=24661B1690459213,R-
COOKIE=84419293B12B1E80,MsgID=0,1stPL=ID-PAYLOAD,state=-820006260
9-14-2004 4:05:27 pm Recieved MM ID payload type 1 protocol 0 portnum 0
length 8
9-14-2004 4:05:27 pm *Received MM ID ID_IPV4_ADDR 166.138.200.163
9-14-2004 4:05:27 pm Recieved notify message type 24578 from
166.138.200.163
9-14-2004 4:05:27 pm Recieved INITIAL_CONTACT notify deleting all old SA's
with 166.138.200.163 address
9-14-2004 4:05:27 pm IKE : Nmas user check authentication and traffic rule
9-14-2004 4:05:27 pm Adding user :original address is 166.138.200.163
9-14-2004 4:05:27 pm
Client 172.134.50.1 is added successfully
9-14-2004 4:05:27 pm *Sending MM id payload IPSEC_ID_IPV4_ADDR
168.58.17.2
9-14-2004 4:05:27 pm *protocol 0 portnum 0 length 8
9-14-2004 4:05:27 pm ***Send Main Mode message to 166.138.200.163
9-14-2004 4:05:27 pm I-COOKIE=24661B1690459213,R-
COOKIE=84419293B12B1E80,MsgID=0,1stPL=ID-PAYLOAD,state=-820006260
9-14-2004 4:05:29 pm ***Receive Quick Mode message from 166.138.200.163
9-14-2004 4:05:29 pm I-COOKIE=24661B1690459213,R-
COOKIE=84419293B12B1E80,MsgID=2D4EDFC6,1stPL=HASH-PAYLOAD,state=-820006212
9-14-2004 4:05:29 pm Start IPSEC SA CF20B5E0 - Responder****totSA=1
9-14-2004 4:05:29 pm ****DH private exponent size is 1016****
9-14-2004 4:05:29 pm Final IKE (phase 1) SA lifetime is 28800 secs
9-14-2004 4:05:29 pm IKE-SA is created. rekey time = 27360
encr=5,hash=2,auth=1,lifesec=28800
9-14-2004 4:05:29 pm dst=166.138.200.163,time=1592282
9-14-2004 4:05:29 pm Received (QM) proxy ID 166.138.200.163 - 0.0.0.0
0.0.0.0
9-14-2004 4:05:29 pm Warn :Proposal mismatch Quick Mode : ESP - transform
mismatch mine : esp 3des his : esp des dst : 166.138.200.163 src :
168.58.17.2 cookies[his :mine] 84419293B12B1E80 : 24661B16956D7216
9-14-2004 4:05:29 pm IPSE SA NEGOTIATION: Peer lifetime = 7200 My
lifetime=7200
9-14-2004 4:05:29 pm Received (QM) proxy ID 166.138.200.163 - 0.0.0.0
0.0.0.0
9-14-2004 4:05:29 pm Sending DH params in QM - PFS Configured or Requested
by Peer
9-14-2004 4:05:29 pm *Sending proxy ID type 1 166.138.200.163
9-14-2004 4:05:29 pm *Sending proxy ID type 4 0.0.0.0/0.0.0.0
9-14-2004 4:05:29 pm VPN Requires NCF is set to NO.
9-14-2004 4:05:29 pm ***Send Quick Mode message to 166.138.200.163
9-14-2004 4:05:29 pm I-COOKIE=24661B1690459213,R-
COOKIE=84419293B12B1E80,MsgID=2D4EDFC6,1stPL=HASH-PAYLOAD,state=-820006212
9-14-2004 4:05:30 pm ***Receive Quick Mode message from 166.138.200.163
9-14-2004 4:05:30 pm I-COOKIE=24661B1690459213,R-
COOKIE=84419293B12B1E80,MsgID=2D4EDFC6,1stPL=HASH-PAYLOAD,state=-820006212
9-14-2004 4:05:30 pm ESP-SA is created:algorID=esp
3des,mySPI=49E94A71,peerSPI=6DF3920B,time=88461 ,dst=166.138.200.163
9-14-2004 4:10:17 pm ***Receive Acknowledge Informational message from
166.138.200.163
9-14-2004 4:10:17 pm I-COOKIE=24661B1690459213,R-
COOKIE=84419293B12B1E80,MsgID=188F649C,1stPL=HASH-PAYLOAD,state=-820006212
9-14-2004 4:10:17 pm recieved isakmp sa delete msg from 166.138.200.163
cookies are 24661B1690459213 : 84419293B12B1E80
9-14-2004 4:10:17 pm ***Send Acknowledge Informational message to
166.138.200.163
9-14-2004 4:10:17 pm I-COOKIE=24661B1690459213,R-
COOKIE=84419293B12B1E80,MsgID=188F649C,1stPL=HASH-PAYLOAD,state=-820006212
9-14-2004 4:10:18 pm IKE-SA 956D7040 is Deleted,I-COOKIE=24661B16,R-
COOKIE=84419293,dst=166.138.200.163
9-14-2004 4:10:18 pm State:3 Cond:4 TimerEvent:3
9-14-2004 4:10:18 pm lifetime :28800 sec Rekey Time :27360 sec
9-14-2004 4:10:18 pm Created at :88460 sec Remaining life time :28507
sec Current time 88753
9-14-2004 4:10:18 pm ESP-SA is deleted :algorID=esp
3des,mySPI=49E94A71,peerSPI=6DF3920B,time=88753,ds t=166.138.200.163
9-14-2004 4:10:18 pm The client 172.134.50.1 removed from vpninf

9-14-2004 4:27:12 pm ***Receive Main Mode message from 166.138.206.136
9-14-2004 4:27:12 pm I-COOKIE=DFF430136DE41C9E,R-
COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=-820006324
9-14-2004 4:27:12 pm Start IKE-SA 946C2040 -
Responder,src=168.58.17.2,dst=166.138.206.136,TotS A=1
9-14-2004 4:27:12 pm Negotiating for an NMAS user 166.138.206.136
9-14-2004 4:27:12 pm IKE SA NEGOTIATION: Peer lifetime = 28800 My
lifetime=28800
9-14-2004 4:27:12 pm ****DH private exponent size is 1016****
9-14-2004 4:27:12 pm Local server's interfaces : 192.77.15.8
9-14-2004 4:27:12 pm Local server's interfaces : 168.58.17.2
9-14-2004 4:27:12 pm Recieved Supported Vendor id Novell Border Manager
VPN 4.0 client - Protected Net from 166.138.206.136
9-14-2004 4:27:12 pm Recieved Supported Vendor id draft-ietf-ipsec-nat-t-
ike-03 from 166.138.206.136
9-14-2004 4:27:12 pm ***Send Main Mode message to 166.138.206.136
9-14-2004 4:27:12 pm I-COOKIE=DFF430136DE41C9E,R-
COOKIE=0B74E73996C614E2,MsgID=0,1stPL=SA-PAYLOAD,state=-820006324
9-14-2004 4:27:13 pm ***Receive Main Mode message from 166.138.206.136
9-14-2004 4:27:13 pm I-COOKIE=DFF430136DE41C9E,R-
COOKIE=0B74E73996C614E2,MsgID=0,1stPL=KEY-PAYLOAD,state=-820006272
9-14-2004 4:27:13 pm No NAT detected
9-14-2004 4:27:13 pm ***Send Main Mode message to 166.138.206.136
9-14-2004 4:27:13 pm I-COOKIE=DFF430136DE41C9E,R-
COOKIE=0B74E73996C614E2,MsgID=0,1stPL=KEY-PAYLOAD,state=-820006272
9-14-2004 4:27:14 pm ***Receive Main Mode message from 166.138.206.136
9-14-2004 4:27:14 pm I-COOKIE=DFF430136DE41C9E,R-
COOKIE=0B74E73996C614E2,MsgID=0,1stPL=ID-PAYLOAD,state=-820006260
9-14-2004 4:27:14 pm Recieved MM ID payload type 1 protocol 0 portnum 0
length 8
9-14-2004 4:27:14 pm *Received MM ID ID_IPV4_ADDR 166.138.206.136
9-14-2004 4:27:14 pm Recieved notify message type 24578 from
166.138.206.136
9-14-2004 4:27:14 pm Recieved INITIAL_CONTACT notify deleting all old SA's
with 166.138.206.136 address
9-14-2004 4:27:14 pm IKE : Nmas user check authentication and traffic rule
9-14-2004 4:27:14 pm Adding user :original address is 166.138.206.136
9-14-2004 4:27:14 pm
Client 172.134.50.1 is added successfully
9-14-2004 4:27:14 pm *Sending MM id payload IPSEC_ID_IPV4_ADDR
168.58.17.2
9-14-2004 4:27:14 pm *protocol 0 portnum 0 length 8
9-14-2004 4:27:14 pm ***Send Main Mode message to 166.138.206.136
9-14-2004 4:27:14 pm I-COOKIE=DFF430136DE41C9E,R-
COOKIE=0B74E73996C614E2,MsgID=0,1stPL=ID-PAYLOAD,state=-820006260
9-14-2004 4:27:15 pm ***Receive Quick Mode message from 166.138.206.136
9-14-2004 4:27:15 pm I-COOKIE=DFF430136DE41C9E,R-
COOKIE=0B74E73996C614E2,MsgID=7FB71EC3,1stPL=HASH-PAYLOAD,state=-820006212
9-14-2004 4:27:15 pm Start IPSEC SA CF20B4C0 - Responder****totSA=1
9-14-2004 4:27:15 pm ****DH private exponent size is 1016****
9-14-2004 4:27:15 pm Final IKE (phase 1) SA lifetime is 28800 secs
9-14-2004 4:27:15 pm IKE-SA is created. rekey time = 27360
encr=5,hash=2,auth=1,lifesec=28800
9-14-2004 4:27:15 pm dst=166.138.206.136,time=1616071
9-14-2004 4:27:15 pm Received (QM) proxy ID 166.138.206.136 - 0.0.0.0
0.0.0.0
9-14-2004 4:27:15 pm Warn :Proposal mismatch Quick Mode : ESP - transform
mismatch mine : esp 3des his : esp des dst : 166.138.206.136 src :
168.58.17.2 cookies[his :mine] 0B74E73996C614E2 : DFF43013946C2216
9-14-2004 4:27:15 pm IPSE SA NEGOTIATION: Peer lifetime = 7200 My
lifetime=7200
9-14-2004 4:27:15 pm Received (QM) proxy ID 166.138.206.136 - 0.0.0.0
0.0.0.0
9-14-2004 4:27:15 pm Sending DH params in QM - PFS Configured or Requested
by Peer
9-14-2004 4:27:15 pm *Sending proxy ID type 1 166.138.206.136
9-14-2004 4:27:15 pm *Sending proxy ID type 4 0.0.0.0/0.0.0.0
9-14-2004 4:27:15 pm VPN Requires NCF is set to NO.
9-14-2004 4:27:15 pm ***Send Quick Mode message to 166.138.206.136
9-14-2004 4:27:15 pm I-COOKIE=DFF430136DE41C9E,R-
COOKIE=0B74E73996C614E2,MsgID=7FB71EC3,1stPL=HASH-PAYLOAD,state=-820006212
9-14-2004 4:27:16 pm ***Receive Quick Mode message from 166.138.206.136
9-14-2004 4:27:16 pm I-COOKIE=DFF430136DE41C9E,R-
COOKIE=0B74E73996C614E2,MsgID=7FB71EC3,1stPL=HASH-PAYLOAD,state=-820006212
9-14-2004 4:27:16 pm ESP-SA is created:algorID=esp
3des,mySPI=15B33F31,peerSPI=EA83B5C9,time=89782 ,dst=166.138.206.136
9-14-2004 4:31:56 pm Read trusted root cert file
SYS:/ETC/IKE/ROOTCERT/C2S001.DER
9-14-2004 4:31:56 pm Read trusted root cert file
SYS:/ETC/IKE/ROOTCERT/SRV001.DER
9-14-2004 4:32:36 pm ***Receive Acknowledge Informational message from
166.138.206.136
9-14-2004 4:32:36 pm I-COOKIE=DFF430136DE41C9E,R-
COOKIE=0B74E73996C614E2,MsgID=2D72E092,1stPL=HASH-PAYLOAD,state=-820006212
9-14-2004 4:32:36 pm recieved isakmp sa delete msg from 166.138.206.136
cookies are DFF430136DE41C9E : 0B74E73996C614E2
9-14-2004 4:32:36 pm ***Send Acknowledge Informational message to
166.138.206.136
9-14-2004 4:32:36 pm I-COOKIE=DFF430136DE41C9E,R-
COOKIE=0B74E73996C614E2,MsgID=2D72E092,1stPL=HASH-PAYLOAD,state=-820006212
9-14-2004 4:32:38 pm IKE-SA 946C2040 is Deleted,I-COOKIE=DFF43013,R-
COOKIE=0B74E739,dst=166.138.206.136
9-14-2004 4:32:38 pm State:3 Cond:4 TimerEvent:3
9-14-2004 4:32:38 pm lifetime :28800 sec Rekey Time :27360 sec
9-14-2004 4:32:38 pm Created at :89781 sec Remaining life time :28474
sec Current time 90108
9-14-2004 4:32:38 pm ESP-SA is deleted :algorID=esp
3des,mySPI=15B33F31,peerSPI=EA83B5C9,time=90108,ds t=166.138.206.136
9-14-2004 4:32:38 pm The client 172.134.50.1 removed from vpninf

9-14-2004 4:33:35 pm ***Receive Main Mode message from 166.138.206.136
9-14-2004 4:33:35 pm I-COOKIE=1F59869E0F22D82D,R-
COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=-820006324
9-14-2004 4:33:35 pm Start IKE-SA 946C2040 -
Responder,src=168.58.17.2,dst=166.138.206.136,TotS A=1
9-14-2004 4:33:35 pm Negotiating for an NMAS user 166.138.206.136
9-14-2004 4:33:35 pm IKE SA NEGOTIATION: Peer lifetime = 28800 My
lifetime=28800
9-14-2004 4:33:35 pm ****DH private exponent size is 1016****
9-14-2004 4:33:35 pm Local server's interfaces : 192.77.15.8
9-14-2004 4:33:35 pm Local server's interfaces : 168.58.17.2
9-14-2004 4:33:35 pm Recieved Supported Vendor id Novell Border Manager
VPN 4.0 client - Protected Net from 166.138.206.136
9-14-2004 4:33:35 pm Recieved Supported Vendor id draft-ietf-ipsec-nat-t-
ike-03 from 166.138.206.136
9-14-2004 4:33:35 pm ***Send Main Mode message to 166.138.206.136
9-14-2004 4:33:35 pm I-COOKIE=1F59869E0F22D82D,R-
COOKIE=0B74E73996C614E2,MsgID=0,1stPL=SA-PAYLOAD,state=-820006324
9-14-2004 4:33:36 pm ***Receive Main Mode message from 166.138.206.136
9-14-2004 4:33:36 pm I-COOKIE=1F59869E0F22D82D,R-
COOKIE=0B74E73996C614E2,MsgID=0,1stPL=KEY-PAYLOAD,state=-820006272
9-14-2004 4:33:36 pm No NAT detected
9-14-2004 4:33:36 pm ***Send Main Mode message to 166.138.206.136
9-14-2004 4:33:36 pm I-COOKIE=1F59869E0F22D82D,R-
COOKIE=0B74E73996C614E2,MsgID=0,1stPL=KEY-PAYLOAD,state=-820006272
9-14-2004 4:33:37 pm ***Receive Main Mode message from 166.138.206.136
9-14-2004 4:33:37 pm I-COOKIE=1F59869E0F22D82D,R-
COOKIE=0B74E73996C614E2,MsgID=0,1stPL=ID-PAYLOAD,state=-820006260
9-14-2004 4:33:37 pm Recieved MM ID payload type 1 protocol 0 portnum 0
length 8
9-14-2004 4:33:37 pm *Received MM ID ID_IPV4_ADDR 166.138.206.136
9-14-2004 4:33:37 pm Recieved notify message type 24578 from
166.138.206.136
9-14-2004 4:33:37 pm Recieved INITIAL_CONTACT notify deleting all old SA's
with 166.138.206.136 address
9-14-2004 4:33:37 pm IKE : Nmas user check authentication and traffic rule
9-14-2004 4:33:37 pm Adding user :original address is 166.138.206.136
9-14-2004 4:33:37 pm
Client 172.134.50.1 is added successfully
9-14-2004 4:33:37 pm *Sending MM id payload IPSEC_ID_IPV4_ADDR
168.58.17.2
9-14-2004 4:33:37 pm *protocol 0 portnum 0 length 8
9-14-2004 4:33:37 pm ***Send Main Mode message to 166.138.206.136
9-14-2004 4:33:37 pm I-COOKIE=1F59869E0F22D82D,R-
COOKIE=0B74E73996C614E2,MsgID=0,1stPL=ID-PAYLOAD,state=-820006260
9-14-2004 4:33:38 pm ***Receive Quick Mode message from 166.138.206.136
9-14-2004 4:33:38 pm I-COOKIE=1F59869E0F22D82D,R-
COOKIE=0B74E73996C614E2,MsgID=69233D8D,1stPL=HASH-PAYLOAD,state=-820006212
9-14-2004 4:33:38 pm Start IPSEC SA CF20B4C0 - Responder****totSA=1
9-14-2004 4:33:38 pm ****DH private exponent size is 1016****
9-14-2004 4:33:38 pm Final IKE (phase 1) SA lifetime is 28800 secs
9-14-2004 4:33:38 pm IKE-SA is created. rekey time = 27360
encr=5,hash=2,auth=1,lifesec=28800
9-14-2004 4:33:38 pm dst=166.138.206.136,time=1623044
9-14-2004 4:33:38 pm Received (QM) proxy ID 166.138.206.136 - 0.0.0.0
0.0.0.0
9-14-2004 4:33:38 pm Warn :Proposal mismatch Quick Mode : ESP - transform
mismatch mine : esp 3des his : esp des dst : 166.138.206.136 src :
168.58.17.2 cookies[his :mine] 0B74E73996C614E2 : 1F59869E946C2216
9-14-2004 4:33:38 pm IPSE SA NEGOTIATION: Peer lifetime = 7200 My
lifetime=7200
9-14-2004 4:33:38 pm Received (QM) proxy ID 166.138.206.136 - 0.0.0.0
0.0.0.0
9-14-2004 4:33:38 pm Sending DH params in QM - PFS Configured or Requested
by Peer
9-14-2004 4:33:38 pm *Sending proxy ID type 1 166.138.206.136
9-14-2004 4:33:38 pm *Sending proxy ID type 4 0.0.0.0/0.0.0.0
9-14-2004 4:33:38 pm VPN Requires NCF is set to NO.
9-14-2004 4:33:38 pm ***Send Quick Mode message to 166.138.206.136
9-14-2004 4:33:38 pm I-COOKIE=1F59869E0F22D82D,R-
COOKIE=0B74E73996C614E2,MsgID=69233D8D,1stPL=HASH-PAYLOAD,state=-820006212
9-14-2004 4:33:40 pm ***Receive Quick Mode message from 166.138.206.136
9-14-2004 4:33:40 pm I-COOKIE=1F59869E0F22D82D,R-
COOKIE=0B74E73996C614E2,MsgID=69233D8D,1stPL=HASH-PAYLOAD,state=-820006212
9-14-2004 4:33:40 pm ESP-SA is created:algorID=esp
3des,mySPI=B7643584,peerSPI=9BF271F6,time=90170 ,dst=166.138.206.136
9-14-2004 4:34:14 pm ***Receive Acknowledge Informational message from
166.138.206.136
9-14-2004 4:34:14 pm I-COOKIE=1F59869E0F22D82D,R-
COOKIE=0B74E73996C614E2,MsgID=F8EBFC4,1stPL=HASH-PAYLOAD,state=-820006212
9-14-2004 4:34:14 pm recieved isakmp sa delete msg from 166.138.206.136
cookies are 1F59869E0F22D82D : 0B74E73996C614E2
9-14-2004 4:34:14 pm ***Send Acknowledge Informational message to
166.138.206.136
9-14-2004 4:34:14 pm I-COOKIE=1F59869E0F22D82D,R-
COOKIE=0B74E73996C614E2,MsgID=F8EBFC4,1stPL=HASH-PAYLOAD,state=-820006212
9-14-2004 4:34:17 pm IKE-SA 946C2040 is Deleted,I-COOKIE=1F59869E,R-
COOKIE=0B74E739,dst=166.138.206.136
9-14-2004 4:34:17 pm State:3 Cond:4 TimerEvent:3
9-14-2004 4:34:17 pm lifetime :28800 sec Rekey Time :27360 sec
9-14-2004 4:34:17 pm Created at :90169 sec Remaining life time :28761
sec Current time 90208
9-14-2004 4:34:17 pm ESP-SA is deleted :algorID=esp
3des,mySPI=B7643584,peerSPI=9BF271F6,time=90208,ds t=166.138.206.136
9-14-2004 4:34:17 pm The client 172.134.50.1 removed from vpninf