Errors and troubleshooting

PWR

green

Unit is on and has power.

off

Unit is powered off.

SYS

flashing amber

Unit is performing diagnostics.

solid amber

Unit has failed diagnostics.

green

Unit is operational.

VPN

off

No VPN tunnel exists.

amber

Tunnel has failed.

green

Tunnel is established.

Interface is connected to the network.

Interface is not connected to the network.

Traffic is traveling across the interface.

Tunnel is not up/not passing data.

• PWR LED is off.
  
  

• SYS LED is solid amber.
  
  

• You see this LED display:
  
  
• PWR = green
  SYS LED = green
  VPN LED = off.
  
  

1. Verify that the VPN 3000 Series Concentrator to which this VPN 3002 connects is running version 3.0 software.

2. Navigate to Monitoring > System Status. Click Connect Now.

• Connect Now didn't bring up the tunnel, and the Public interface LED (back of unit) is off.
  
  

1. Check that a LAN cable is properly attached to the Public interface of the VPN 3002.

2. Make sure the IP address for the Public interface is properly configured.

• Public interface LED is on, but attempting to ping the default gateway (Administration > Ping) yields no response.
  
  

1. Make sure the default gateway is properly configured.

2. Contact your ISP.

• VPN LED is solid amber (tunnel failed to establish to central-site Concentrator).
  
  

1. Make sure the IPSec parameters are properly configured. Verify:

• Public IP Address of the IKE peer (central-site Concentrator) is correct.
  
  
• Group name and password are correct.
  
  
• User name and password are correct.
  
  

2. Make sure the Group and User names and passwords match those set for this VPN 3002 on the central-site Concentrator.

3. After you make any changes, navigate to Monitoring > System Status and click Connect Now.

4. Study the event log files. To capture more events, and to interpret events, see Chapter 9, Events, in the VPN 3002 Hardware Client User Guide.

My PC can't communicate with the remote network.

1. Verify that the VPN 3000 Series Concentrator to which this VPN 3002 connects is running version 3.0 software.

2. Navigate to Monitoring > System Status and click Connect Now.

Connect Now worked.

• LED(s) for the Private interface/switch port are off.
  
  

Make sure that a LAN cable is properly attached to the Private interface of the VPN 3002 and the PC.

• LED(s) for the Private interface/switch port are on.
  
  

1. Is this PC configured as a DHCP client? If so, verify that the DHCP server on the VPN 3002 is enabled.

2. With any method of address assignment, verify that the PC got an IP address and subnet mask.

• Attempting to ping the default gateway (Administration > Ping) yields no response.
  
  

1. Make sure your PC has an appropriate IP address, reachable on this network.

2. Contact your network administrator.

You clicked the Refresh or Reload button on the browser's navigation toolbar, and the Manager logged out. The main login screen appears.

To protect access security, clicking Refresh / Reload on the browser's toolbar automatically logs out the Manager session.

Do not use the browser's navigation toolbar buttons with the VPN 3002 Hardware Client Manager.

Use only the Manager's Refresh button where it appears on a screen.

We recommend that you hide the browser's navigation toolbar to prevent mistakes.

You clicked the Back or Forward button on the browser's navigation toolbar, and the Manager displayed the wrong screen or incorrect data.

To protect security and the integrity of data entries, clicking Back or Forward on the browser's toolbar deletes pointers and values within the Manager.

Do not use the browser's navigation toolbar buttons with the VPN 3002 Hardware Client Manager.

Navigate using the location bar at the top of the Manager window, the table of contents in the left frame, or links on Manager screens.

We recommend that you hide the browser's navigation toolbar to prevent mistakes.

You entered an invalid administrator login name/password combination.

• Typing error.
  
  
• Invalid (unrecognized) login name or password.
  
  

Re-enter the login name and password, and click Login. Use a valid login name and password. Verify your typing before clicking Login.

The Manager session has been idle longer than the configured timeout interval.

• No activity for (interval) seconds. The Manager resets the inactivity timer only when you click an action button (Apply, Add, Cancel, etc.) or a link on a screen—that is, when you invoke a different screen. Entering values or setting parameters on a given screen does not reset the timer.
  
  
• Default timeout interval is 600 seconds (10 minutes).
  
  
• Timeout interval set too low for normal use.
  
  

On the Administration | Access Rights | Access Settings screen, change the Session Timeout interval to a larger value and click Apply.

You tried to perform some operation that is not allowed.

The screen displays a message that describes the cause.

Click Retry the operation to return to the screen where you were working and correct the mistake. Carefully check all your previous entries on that screen. The Manager attempts to retain valid entries, but invalid entries are lost.

Click Go to main menu to go to the main Manager screen.

You tried to access an area of the Manager that you do not have authorization to access.

• You logged in using an administrator login name that has limited privileges.
  
  
• You logged in from a workstation that has limited access privileges.
  
  

Log in using the system administrator login name and password. (Defaults are admin / admin.)

Log in from a workstation with greater access privileges.

Have the system administrator change your privileges on the Administration | Access Rights | Administrators screen.

Have the system administrator change the privileges of your workstation on the Administration | Access Rights | Access Control List screen.

The Manager could not find a screen.

• You updated the software image and did not clear the browser's cache.
  
  

Clear the browser's cache: delete its temporary internet files, history files, and location bar references. Then try again.

• There is an internal Manager error.
  
  

Please note the system information on the screen and contact Cisco support personnel for assistance.

While using a Manager function that opens another browser window (such as Save Needed, Help, Software Update, etc.), Internet Explorer cannot open the window and displays the error dialog box.

A bug in the Internet Explorer JavaScript interpreter.

1. Click No on the error dialog box.

2. Log out of the Manager.

3. Close Internet Explorer.

4. Reinstall Internet Explorer.

The system expected a valid 4-byte dotted decimal entry, and the entry wasn't in that format.

• You entered something other than a 4-byte dotted decimal number. You may have omitted a byte position, or entered a number greater than 255 in a byte position.
  
  
• You entered 0.0.0.0 instead of an appropriate address.
  
  

At the prompt, re-enter a valid 4-byte dotted decimal number.

The system expected a number within a certain range, and the entry was outside that range.

• You entered a letter instead of a number.
  
  
• You entered a number greater than the possible menu numbers.
  
  

At the prompt, re-enter a number in the appropriate range.

The entry for a password and the entry to verify the password do not match.

• You mistyped an entry.
  
  
• You entered either a password or verify entry, but not the other.
  
  

At the Verify prompt, re-enter the password. If the original password is incorrect, press Enter and re-enter both the password and the verification at the prompts.