**Please note that in this post I replaced the last six numbers of all
instances of the server IP address with "x's" for security reasons**

I am running a NetWare 6.5 SP3, BorderManager 3.8 SP4 Box with Client-
Site VPN service enabled.

The setup on the server side is:

Cable Modem --> Router --> BM VPN Server (configured as DMZ server in the
router setup)


On the client side:

Cable Modem --> BM VPN Client Computer / Software


When the VPN client (Novell Client v4.90 SP2, VPN Client 3.8.16) tries to
connect to the VPN Server, the VPN Client displays the status
as "Negotiating and Authenticating" for about 4 minutes before the client
fails, displaying the following error:

"An error was reported by the IKE application. Either 67.82.xxx.xxx is
an invalid VPN server address or the IKE is not loaded on the VPN
server. For more details please look at the IKE log."

Well, IKE is up and running on the sever, so I took a look at the IKE
log. The following log information is from the ikelog.txt file in the
C:\NOVELL\VPNC\WINNT\log directory:


01-12-2007 08:40:16 PM Created thread for SendKeepAlivePacketProcess
01-12-2007 08:40:16 PM Start IPSEC SA 00a26318 - Initiator****totSA=1

01-12-2007 08:40:16 PM src from IPsec

01-12-2007 08:40:16 PM 00000000 c0a80006
01-12-2007 08:40:16 PM dst from IPsec

01-12-2007 08:40:16 PM 00000000 4352e7ea
01-12-2007 08:40:16 PM Start IKE-SA 00a29220 -
Initiator,src=192.168.0.6,dst=67.82.xxx.xxx,TotSA= 1

01-12-2007 08:40:16 PM AUTH ALG IS 1
01-12-2007 08:40:16 PM Negotiating for an NMAS user 67.82.xxx.xxx

01-12-2007 08:40:16 PM ***Send Main Mode message to 67.82.xxx.xxx

01-12-2007 08:40:16 PM I-COOKIE=6d1f9e464f24c8fa,R-
COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=18938628

01-12-2007 08:40:21 PM Retransmit timer expired :Peer lost our reply
retransmit the old packet to 67.82.xxx.xxx
01-12-2007 08:40:21 PM ***Send Main Mode message to 67.82.xxx.xxx

01-12-2007 08:40:21 PM I-COOKIE=6d1f9e464f24c8fa,R-
COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=14482200

01-12-2007 08:40:28 PM Retransmit timer expired :Peer lost our reply
retransmit the old packet to 67.82.xxx.xxx
01-12-2007 08:40:28 PM ***Send Main Mode message to 67.82.xxx.xxx

01-12-2007 08:40:28 PM I-COOKIE=6d1f9e464f24c8fa,R-
COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=14482200

01-12-2007 08:40:38 PM Retransmit timer expired :Peer lost our reply
retransmit the old packet to 67.82.xxx.xxx
01-12-2007 08:40:38 PM ***Send Main Mode message to 67.82.xxx.xxx

01-12-2007 08:40:38 PM I-COOKIE=6d1f9e464f24c8fa,R-
COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=14482200

01-12-2007 08:40:53 PM Retransmit timer expired :Peer lost our reply
retransmit the old packet to 67.82.xxx.xxx
01-12-2007 08:40:53 PM IKE-SA is deleted- packet retransmit exceeded the
limit, dst=67.82.xxx.xxx

01-12-2007 08:40:53 PM Stoppping ike retransmit timer
01-12-2007 08:40:55 PM IKE-SA a29220 is Deleted,I-COOKIE=6d1f9e46,R-
COOKIE=00000000,dst=67.82.xxx.xxx

01-12-2007 08:40:55 PM State:0 Cond:4 TimerEvent:1
01-12-2007 08:40:55 PM lifetime :0 sec Rekey Time :0 sec

01-12-2007 08:40:55 PM Created at :0 sec Remaining life time :-132347
sec Current time 132347

01-12-2007 08:40:55 PM Freeing IKE SA
01-12-2007 08:40:55 PM Start IPSEC SA 00a26318 - Initiator****totSA=1

01-12-2007 08:40:55 PM src from IPsec

01-12-2007 08:40:55 PM 00000000 c0a80006
01-12-2007 08:40:55 PM dst from IPsec

01-12-2007 08:40:55 PM 00000000 4352e7ea
01-12-2007 08:40:55 PM Start IKE-SA 00a29220 -
Initiator,src=192.168.0.6,dst=67.82.xxx.xxx,TotSA= 1

01-12-2007 08:40:55 PM AUTH ALG IS 1
01-12-2007 08:40:55 PM Negotiating for an NMAS user 67.82.xxx.xxx

01-12-2007 08:40:55 PM ***Send Main Mode message to 67.82.xxx.xxx

01-12-2007 08:40:55 PM I-COOKIE=76554c3a155c0474,R-
COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=18938628

01-12-2007 08:41:00 PM Retransmit timer expired :Peer lost our reply
retransmit the old packet to 67.82.xxx.xxx
01-12-2007 08:41:00 PM ***Send Main Mode message to 67.82.xxx.xxx

01-12-2007 08:41:00 PM I-COOKIE=76554c3a155c0474,R-
COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=14482200

01-12-2007 08:41:07 PM Retransmit timer expired :Peer lost our reply
retransmit the old packet to 67.82.xxx.xxx
01-12-2007 08:41:07 PM ***Send Main Mode message to 67.82.xxx.xxx

01-12-2007 08:41:07 PM I-COOKIE=76554c3a155c0474,R-
COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=14482200

01-12-2007 08:41:17 PM Retransmit timer expired :Peer lost our reply
retransmit the old packet to 67.82.xxx.xxx
01-12-2007 08:41:17 PM ***Send Main Mode message to 67.82.xxx.xxx

01-12-2007 08:41:17 PM I-COOKIE=76554c3a155c0474,R-
COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=14482200

01-12-2007 08:41:32 PM Retransmit timer expired :Peer lost our reply
retransmit the old packet to 67.82.xxx.xxx
01-12-2007 08:41:32 PM IKE-SA is deleted- packet retransmit exceeded the
limit, dst=67.82.xxx.xxx

01-12-2007 08:41:32 PM Stoppping ike retransmit timer
01-12-2007 08:41:35 PM IKE-SA a29220 is Deleted,I-COOKIE=76554c3a,R-
COOKIE=00000000,dst=67.82.xxx.xxx

01-12-2007 08:41:35 PM State:0 Cond:4 TimerEvent:1
01-12-2007 08:41:35 PM lifetime :0 sec Rekey Time :0 sec

01-12-2007 08:41:35 PM Created at :0 sec Remaining life time :-134569
sec Current time 134569

01-12-2007 08:41:35 PM Freeing IKE SA
01-12-2007 08:41:35 PM Start IPSEC SA 00a26318 - Initiator****totSA=1

01-12-2007 08:41:35 PM src from IPsec

01-12-2007 08:41:35 PM 00000000 c0a80006
01-12-2007 08:41:35 PM dst from IPsec

01-12-2007 08:41:35 PM 00000000 4352e7ea
01-12-2007 08:41:35 PM Start IKE-SA 00a29220 -
Initiator,src=192.168.0.6,dst=67.82.xxx.xxx,TotSA= 1

01-12-2007 08:41:35 PM AUTH ALG IS 1
01-12-2007 08:41:35 PM Negotiating for an NMAS user 67.82.xxx.xxx

01-12-2007 08:41:35 PM ***Send Main Mode message to 67.82.xxx.xxx

01-12-2007 08:41:35 PM I-COOKIE=6fcad5f442aea65d,R-
COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=18938628

01-12-2007 08:41:40 PM Retransmit timer expired :Peer lost our reply
retransmit the old packet to 67.82.xxx.xxx
01-12-2007 08:41:40 PM ***Send Main Mode message to 67.82.xxx.xxx

01-12-2007 08:41:40 PM I-COOKIE=6fcad5f442aea65d,R-
COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=14482200

01-12-2007 08:41:47 PM Retransmit timer expired :Peer lost our reply
retransmit the old packet to 67.82.xxx.xxx
01-12-2007 08:41:47 PM ***Send Main Mode message to 67.82.xxx.xxx

01-12-2007 08:41:47 PM I-COOKIE=6fcad5f442aea65d,R-
COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=14482200

01-12-2007 08:41:57 PM Retransmit timer expired :Peer lost our reply
retransmit the old packet to 67.82.xxx.xxx
01-12-2007 08:41:57 PM ***Send Main Mode message to 67.82.xxx.xxx

01-12-2007 08:41:57 PM I-COOKIE=6fcad5f442aea65d,R-
COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=14482200

01-12-2007 08:42:12 PM Retransmit timer expired :Peer lost our reply
retransmit the old packet to 67.82.xxx.xxx
01-12-2007 08:42:12 PM IKE-SA is deleted- packet retransmit exceeded the
limit, dst=67.82.xxx.xxx

01-12-2007 08:42:12 PM Stoppping ike retransmit timer
01-12-2007 08:42:15 PM IKE-SA a29220 is Deleted,I-COOKIE=6fcad5f4,R-
COOKIE=00000000,dst=67.82.xxx.xxx

01-12-2007 08:42:15 PM State:0 Cond:4 TimerEvent:1
01-12-2007 08:42:15 PM lifetime :0 sec Rekey Time :0 sec

01-12-2007 08:42:15 PM Created at :0 sec Remaining life time :-136791
sec Current time 136791

01-12-2007 08:42:15 PM Freeing IKE SA
01-12-2007 08:42:15 PM Start IPSEC SA 00a26318 - Initiator****totSA=1

01-12-2007 08:42:15 PM src from IPsec

01-12-2007 08:42:15 PM 00000000 c0a80006
01-12-2007 08:42:15 PM dst from IPsec

01-12-2007 08:42:15 PM 00000000 4352e7ea
01-12-2007 08:42:15 PM Start IKE-SA 00a29220 -
Initiator,src=192.168.0.6,dst=67.82.xxx.xxx,TotSA= 1

01-12-2007 08:42:15 PM AUTH ALG IS 1
01-12-2007 08:42:15 PM Negotiating for an NMAS user 67.82.xxx.xxx

01-12-2007 08:42:15 PM ***Send Main Mode message to 67.82.xxx.xxx

01-12-2007 08:42:15 PM I-COOKIE=6d8d733f0f691180,R-
COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=18938628

01-12-2007 08:42:20 PM Retransmit timer expired :Peer lost our reply
retransmit the old packet to 67.82.xxx.xxx
01-12-2007 08:42:20 PM ***Send Main Mode message to 67.82.xxx.xxx

01-12-2007 08:42:20 PM I-COOKIE=6d8d733f0f691180,R-
COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=14482200

01-12-2007 08:42:27 PM Retransmit timer expired :Peer lost our reply
retransmit the old packet to 67.82.xxx.xxx
01-12-2007 08:42:27 PM ***Send Main Mode message to 67.82.xxx.xxx

01-12-2007 08:42:27 PM I-COOKIE=6d8d733f0f691180,R-
COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=14482200

01-12-2007 08:42:37 PM Retransmit timer expired :Peer lost our reply
retransmit the old packet to 67.82.xxx.xxx
01-12-2007 08:42:37 PM ***Send Main Mode message to 67.82.xxx.xxx

01-12-2007 08:42:37 PM I-COOKIE=6d8d733f0f691180,R-
COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=14482200

01-12-2007 08:42:52 PM Retransmit timer expired :Peer lost our reply
retransmit the old packet to 67.82.xxx.xxx
01-12-2007 08:42:52 PM IKE-SA is deleted- packet retransmit exceeded the
limit, dst=67.82.xxx.xxx

01-12-2007 08:42:52 PM Stoppping ike retransmit timer
01-12-2007 08:42:55 PM IKE-SA a29220 is Deleted,I-COOKIE=6d8d733f,R-
COOKIE=00000000,dst=67.82.xxx.xxx

01-12-2007 08:42:55 PM State:0 Cond:4 TimerEvent:1
01-12-2007 08:42:55 PM lifetime :0 sec Rekey Time :0 sec

01-12-2007 08:42:55 PM Created at :0 sec Remaining life time :-139013
sec Current time 139013

01-12-2007 08:42:55 PM Freeing IKE SA
01-12-2007 08:42:55 PM Start IPSEC SA 00a26318 - Initiator****totSA=1

01-12-2007 08:42:55 PM src from IPsec

01-12-2007 08:42:55 PM 00000000 c0a80006
01-12-2007 08:42:55 PM dst from IPsec

01-12-2007 08:42:55 PM 00000000 4352e7ea
01-12-2007 08:42:55 PM Start IKE-SA 00a29220 -
Initiator,src=192.168.0.6,dst=67.82.xxx.xxx,TotSA= 1

01-12-2007 08:42:55 PM AUTH ALG IS 1
01-12-2007 08:42:55 PM Negotiating for an NMAS user 67.82.xxx.xxx

01-12-2007 08:42:55 PM ***Send Main Mode message to 67.82.xxx.xxx

01-12-2007 08:42:55 PM I-COOKIE=f439319a2de024b9,R-
COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=18938628

01-12-2007 08:43:00 PM Retransmit timer expired :Peer lost our reply
retransmit the old packet to 67.82.xxx.xxx
01-12-2007 08:43:00 PM ***Send Main Mode message to 67.82.xxx.xxx

01-12-2007 08:43:00 PM I-COOKIE=f439319a2de024b9,R-
COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=14482200

01-12-2007 08:43:07 PM Retransmit timer expired :Peer lost our reply
retransmit the old packet to 67.82.xxx.xxx
01-12-2007 08:43:07 PM ***Send Main Mode message to 67.82.xxx.xxx

01-12-2007 08:43:07 PM I-COOKIE=f439319a2de024b9,R-
COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=14482200

01-12-2007 08:43:17 PM Retransmit timer expired :Peer lost our reply
retransmit the old packet to 67.82.xxx.xxx
01-12-2007 08:43:17 PM ***Send Main Mode message to 67.82.xxx.xxx

01-12-2007 08:43:17 PM I-COOKIE=f439319a2de024b9,R-
COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=14482200

01-12-2007 08:43:32 PM Retransmit timer expired :Peer lost our reply
retransmit the old packet to 67.82.xxx.xxx
01-12-2007 08:43:32 PM IKE-SA is deleted- packet retransmit exceeded the
limit, dst=67.82.xxx.xxx

01-12-2007 08:43:32 PM Stoppping ike retransmit timer
01-12-2007 08:43:35 PM IKE-SA a29220 is Deleted,I-COOKIE=f439319a,R-
COOKIE=00000000,dst=67.82.xxx.xxx

01-12-2007 08:43:35 PM State:0 Cond:4 TimerEvent:1
01-12-2007 08:43:35 PM lifetime :0 sec Rekey Time :0 sec

01-12-2007 08:43:35 PM Created at :0 sec Remaining life time :-141236
sec Current time 141236

01-12-2007 08:43:35 PM Freeing IKE SA
01-12-2007 08:43:35 PM Start IPSEC SA 00a26318 - Initiator****totSA=1

01-12-2007 08:43:35 PM src from IPsec

01-12-2007 08:43:35 PM 00000000 c0a80006
01-12-2007 08:43:35 PM dst from IPsec

01-12-2007 08:43:35 PM 00000000 4352e7ea
01-12-2007 08:43:35 PM Start IKE-SA 00a29220 -
Initiator,src=192.168.0.6,dst=67.82.xxx.xxx,TotSA= 1

01-12-2007 08:43:35 PM AUTH ALG IS 1
01-12-2007 08:43:35 PM Negotiating for an NMAS user 67.82.xxx.xxx

01-12-2007 08:43:35 PM ***Send Main Mode message to 67.82.xxx.xxx

01-12-2007 08:43:35 PM I-COOKIE=e1078995aef12baf,R-
COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=18938628

01-12-2007 08:43:40 PM Retransmit timer expired :Peer lost our reply
retransmit the old packet to 67.82.xxx.xxx
01-12-2007 08:43:40 PM ***Send Main Mode message to 67.82.xxx.xxx

01-12-2007 08:43:40 PM I-COOKIE=e1078995aef12baf,R-
COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=14482200

01-12-2007 08:43:47 PM Retransmit timer expired :Peer lost our reply
retransmit the old packet to 67.82.xxx.xxx
01-12-2007 08:43:47 PM ***Send Main Mode message to 67.82.xxx.xxx

01-12-2007 08:43:47 PM I-COOKIE=e1078995aef12baf,R-
COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=14482200

01-12-2007 08:43:57 PM Retransmit timer expired :Peer lost our reply
retransmit the old packet to 67.82.xxx.xxx
01-12-2007 08:43:57 PM ***Send Main Mode message to 67.82.xxx.xxx

01-12-2007 08:43:57 PM I-COOKIE=e1078995aef12baf,R-
COOKIE=0000000000000000,MsgID=0,1stPL=SA-PAYLOAD,state=14482200

01-12-2007 08:44:12 PM Retransmit timer expired :Peer lost our reply
retransmit the old packet to 67.82.xxx.xxx
01-12-2007 08:44:12 PM IKE-SA is deleted- packet retransmit exceeded the
limit, dst=67.82.xxx.xxx

01-12-2007 08:44:12 PM Stoppping ike retransmit timer
01-12-2007 08:44:15 PM IKE-SA a29220 is Deleted,I-COOKIE=e1078995,R-
COOKIE=00000000,dst=67.82.xxx.xxx

01-12-2007 08:44:15 PM State:0 Cond:4 TimerEvent:1
01-12-2007 08:44:15 PM lifetime :0 sec Rekey Time :0 sec

01-12-2007 08:44:15 PM Created at :0 sec Remaining life time :-143458
sec Current time 143458

01-12-2007 08:44:15 PM Freeing IKE SA
01-12-2007 08:44:15 PM Exiting thread for SendKeepAlivePacketProcess



I tried searching Novell's support page for "Retransmit timer expired"
but found no solutions.

Any thoughts?

Tom