Setting tunnel IP address fails on German Windows 7

Tue Jun 16 09:27:25 PDT 2015

Hello,

first, I just want ot thank dwmw2, nmav and others for this excellent work!
The Windows port from
https://github.com/openconnect/openconnect-gui/releases/download/v1.3/openconnect-installer.exe
works well on an English Windows 7 for me, but fails on German Windows 7. It should be
noted that, by accident, the former is a 64 bit system whereas the latter is on an old machine
with a 32 bit CPU.

The problem seems to occur when the client is to set the tunnel IP address on the local TAP/TUN
interface. The symptom is always that it, being a pseudo-ethernet NIC, remains on the initial
APIPA address once assigned by windows. The ASA (which I administer) sees a valid session, though.
Connection log is attached, but one thing really puzzles me:
I am pretty sure that in  my first attempts, there was at least one failing netsh call in the log.
Now, there is nothing like this, not even after a full reboot. The error message there read
"Element nicht gefunden" which is "Element not found". The error did not seem to be detected, though,
connection setup proceeded without the IP address ever being set to work. First, I suspected the
language-dependent interface identifiers, but with netsh you only get an "Element not found" when
at least the identifier exists (which is "LAN-Verbindung 3" in my case, corresponding to
"Local Area Connection 3".

TIA, Martin

-- 
   Dr. Martin Pauly     Phone:  +49-6421-28-23527
   HRZ Univ. Marburg    Fax:    +49-6421-28-26994
   Hans-Meerwein-Str.   E-Mail: pauly at HRZ.Uni-Marburg.DE
   D-35032 Marburg
-------------- next part --------------
POST https://vpn.uni-marburg.de/
Attempting to connect to server 137.248.1.225:443
Connected to 137.248.1.225:443
SSL negotiation with vpn.uni-marburg.de
Connected to HTTPS on vpn.uni-marburg.de
Got HTTP response: HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Cache-Control: no-cache
Pragma: no-cache
Connection: Keep-Alive
Date: Tue, 16 Jun 2015 16:02:37 GMT
X-Frame-Options: SAMEORIGIN
X-Aggregate-Auth: 1
HTTP body chunked (-2)
XML POST enabled
Please enter your username and password.
Saving group: unimr-vpn-staff
POST https://vpn.uni-marburg.de/
Got HTTP response: HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Cache-Control: no-cache
Pragma: no-cache
Connection: Keep-Alive
Date: Tue, 16 Jun 2015 16:02:39 GMT
X-Frame-Options: SAMEORIGIN
X-Aggregate-Auth: 1
HTTP body chunked (-2)
XML POST enabled
Please enter your username and password.
Select form: group_list
Text form: username
Password form: password
POST https://vpn.uni-marburg.de/
Got HTTP response: HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Cache-Control: no-cache
Pragma: no-cache
Connection: Keep-Alive
Date: Tue, 16 Jun 2015 16:02:45 GMT
X-Frame-Options: SAMEORIGIN
X-Aggregate-Auth: 1
HTTP body chunked (-2)
Got CONNECT response: HTTP/1.1 200 OK
X-CSTP-Version: 1
X-CSTP-Protocol: Copyright (c) 2004 Cisco Systems, Inc.
X-CSTP-Address: 137.248.72.236
X-CSTP-Netmask: 255.255.255.0
X-CSTP-Hostname: cvrzrz01.HRZ.Uni-Marburg.DE
X-CSTP-DNS: 137.248.1.5
X-CSTP-DNS: 137.248.21.22
X-CSTP-NBNS: 192.168.16.26
X-CSTP-Lease-Duration: 1209600
X-CSTP-Session-Timeout: none
X-CSTP-Idle-Timeout: 1800
X-CSTP-Disconnected-Timeout: 1800
X-CSTP-Default-Domain: HRZ.Uni-Marburg.DE
X-CSTP-Split-Include: 2.16.0.0/255.248.0.0
X-CSTP-Split-Include: 5.178.40.0/255.255.255.0
X-CSTP-Split-Include: 8.21.115.34/255.255.255.255
X-CSTP-Split-Include: 12.130.28.0/255.255.255.0
X-CSTP-Split-Include: 23.0.0.0/255.0.0.0
X-CSTP-Split-Include: 37.16.66.0/255.255.255.248
X-CSTP-Split-Include: 38.69.47.0/255.255.255.0
X-CSTP-Split-Include: 46.232.136.136/255.255.255.255
X-CSTP-Split-Include: 52.28.0.0/255.255.128.0
X-CSTP-Split-Include: 54.0.0.0/255.0.0.0
X-CSTP-Split-Include: 62.0.51.17/255.255.255.255
X-CSTP-Split-Include: 62.50.0.0/255.255.0.0
X-CSTP-Split-Include: 62.93.195.148/255.255.255.255
X-CSTP-Split-Include: 62.154.0.0/255.255.0.0
X-CSTP-Split-Include: 62.156.238.0/255.255.255.0
X-CSTP-Split-Include: 62.177.192.248/255.255.255.252
X-CSTP-Split-Include: 63.80.4.0/255.255.255.0
X-CSTP-Split-Include: 63.118.7.200/255.255.255.248
X-CSTP-Split-Include: 63.128.0.0/255.128.0.0
X-CSTP-Split-Include: 64.14.189.0/255.255.255.0
X-CSTP-Split-Include: 64.95.130.37/255.255.255.255
X-CSTP-Split-Include: 64.192.0.0/255.192.0.0
X-CSTP-Split-Include: 65.156.1.0/255.255.255.0
X-CSTP-Split-Include: 66.39.42.173/255.255.255.255
X-CSTP-Split-Include: 66.151.111.65/255.255.255.255
X-CSTP-Split-Include: 66.251.72.133/255.255.255.255
X-CSTP-Split-Include: 69.32.0.0/255.255.0.0
X-CSTP-Split-Include: 69.63.128.0/255.255.224.0
X-CSTP-Split-Include: 72.3.155.0/255.255.255.0
X-CSTP-Split-Include: 72.5.9.192/255.255.255.192
X-CSTP-Split-Include: 72.172.91.0/255.255.255.0
X-CSTP-Split-Include: 72.247.103.145/255.255.255.255
X-CSTP-Split-Include: 77.67.98.0/255.255.255.0
X-CSTP-Split-Include: 77.72.149.0/255.255.255.0
X-CSTP-Split-Include: 77.91.232.0/255.255.248.0
X-CSTP-Split-Include: 77.109.171.0/255.255.255.0
X-CSTP-Split-Include: 78.35.0.71/255.255.255.255
X-CSTP-Split-Include: 79.136.80.0/255.255.255.0
X-CSTP-Split-Include: 80.15.238.0/255.255.255.128
X-CSTP-Split-Include: 80.88.17.44/255.255.255.255
X-CSTP-Split-Include: 80.152.7.80/255.255.255.240
X-CSTP-Split-Include: 80.156.86.78/255.255.255.255
X-CSTP-Split-Include: 80.157.150.0/255.255.255.0
X-CSTP-Split-Include: 80.237.192.0/255.255.192.0
X-CSTP-Split-Include: 80.239.224.0/255.255.224.0
X-CSTP-Split-Include: 81.20.72.128/255.255.255.128
X-CSTP-Split-Include: 81.252.100.64/255.255.255.240
X-CSTP-Split-Include: 82.103.132.170/255.255.255.255
X-CSTP-Split-Include: 82.109.207.0/255.255.255.240
X-CSTP-Split-Include: 82.150.20.0/255.255.252.0
X-CSTP-Split-Include: 82.165.121.253/255.255.255.255
X-CSTP-Split-Include: 82.165.194.57/255.255.255.255
X-CSTP-Split-Include: 82.197.80.64/255.255.255.224
X-CSTP-Split-Include: 82.212.221.62/255.255.255.255
X-CSTP-Split-Include: 83.223.95.45/255.255.255.255
X-CSTP-Split-Include: 83.231.175.28/255.255.255.255
X-CSTP-Split-Include: 84.18.160.0/255.255.224.0
X-CSTP-Split-Include: 84.22.181.34/255.255.255.255
X-CSTP-Split-Include: 84.53.138.0/255.255.255.0
X-CSTP-Split-Include: 84.201.73.27/255.255.255.255
X-CSTP-Split-Include: 85.21.138.99/255.255.255.255
X-CSTP-Split-Include: 85.183.0.0/255.255.0.0
X-CSTP-Split-Include: 87.106.60.14/255.255.255.255
X-CSTP-Split-Include: 87.249.112.195/255.255.255.255
X-CSTP-Split-Include: 88.198.1.4/255.255.255.255
X-CSTP-Split-Include: 88.221.0.0/255.255.0.0
X-CSTP-Split-Include: 91.199.146.51/255.255.255.255
X-CSTP-Split-Include: 91.203.202.198/255.255.255.255
X-CSTP-Split-Include: 91.208.107.0/255.255.255.0
X-CSTP-Split-Include: 91.216.243.0/255.255.255.0
X-CSTP-Split-Include: 91.240.2.0/255.255.254.0
X-CSTP-Split-Include: 92.51.150.136/255.255.255.255
X-CSTP-Split-Include: 92.122.0.0/255.254.0.0
X-CSTP-Split-Include: 92.198.27.96/255.255.255.224
X-CSTP-Split-Include: 93.91.16.0/255.255.240.0
X-CSTP-Split-Include: 95.100.0.0/255.254.0.0
X-CSTP-Split-Include: 95.138.157.112/255.255.255.240
X-CSTP-Split-Include: 128.59.48.24/255.255.255.255
X-CSTP-Split-Include: 128.84.131.12/255.255.255.255
X-CSTP-Split-Include: 128.135.0.0/255.255.0.0
X-CSTP-Split-Include: 128.200.0.0/255.255.0.0
X-CSTP-Split-Include: 128.220.0.0/255.255.0.0
X-CSTP-Split-Include: 128.232.0.0/255.255.0.0
X-CSTP-Split-Include: 129.41.0.0/255.255.0.0
X-CSTP-Split-Include: 129.69.17.192/255.255.255.252
X-CSTP-Split-Include: 129.143.8.96/255.255.255.224
X-CSTP-Split-Include: 129.143.67.16/255.255.255.240
X-CSTP-Split-Include: 130.0.0.0/255.0.0.0
X-CSTP-Split-Include: 132.199.0.0/255.255.0.0
X-CSTP-Split-Include: 134.76.0.0/255.255.0.0
X-CSTP-Split-Include: 134.102.228.29/255.255.255.255
X-CSTP-Split-Include: 134.147.0.0/255.255.0.0
X-CSTP-Split-Include: 134.176.0.0/255.255.0.0
X-CSTP-Split-Include: 134.243.5.42/255.255.255.255
X-CSTP-Split-Include: 135.196.210.0/255.255.255.0
X-CSTP-Split-Include: 137.248.0.0/255.255.0.0
X-CSTP-Split-Include: 138.12.4.0/255.255.255.0
X-CSTP-Split-Include: 140.234.0.0/255.255.0.0
X-CSTP-Split-Include: 141.0.0.0/255.128.0.0
X-CSTP-Split-Include: 148.251.236.49/255.255.255.255
X-CSTP-Split-Include: 145.253.128.0/255.255.128.0
X-CSTP-Split-Include: 151.249.64.0/255.255.224.0
X-CSTP-Split-Include: 160.74.48.101/255.255.255.255
X-CSTP-Split-Include: 160.109.0.0/255.255.0.0
X-CSTP-Split-Include: 163.1.185.13/255.255.255.255
X-CSTP-Split-Include: 165.215.0.0/255.255.0.0
X-CSTP-Split-Include: 167.68.0.0/255.255.0.0
X-CSTP-Split-Include: 167.216.128.0/255.255.128.0
X-CSTP-Split-Include: 168.143.179.0/255.255.255.0
X-CSTP-Split-Include: 170.107.0.0/255.255.0.0
X-CSTP-Split-Include: 170.224.106.0/255.255.255.0
X-CSTP-Split-Include: 171.64.0.0/255.252.0.0
X-CSTP-Split-Include: 172.224.0.0/255.240.0.0
X-CSTP-Split-Include: 173.225.61.231/255.255.255.255
X-CSTP-Split-Include: 173.254.190.144/255.255.255.240
X-CSTP-Split-Include: 174.120.120.151/255.255.255.255
X-CSTP-Split-Include: 176.34.247.242/255.255.255.255
X-CSTP-Split-Include: 176.221.45.3/255.255.255.255
X-CSTP-Split-Include: 184.0.0.0/255.0.0.0
X-CSTP-Split-Include: 185.31.16.0/255.255.252.0
X-CSTP-Split-Include: 188.92.0.0/255.252.0.0
X-CSTP-Split-Include: 188.210.44.206/255.255.255.255
X-CSTP-Split-Include: 192.41.161.0/255.255.255.0
X-CSTP-Split-Include: 192.84.75.64/255.255.255.192
X-CSTP-Split-Include: 192.84.80.0/255.255.255.0
X-CSTP-Split-Include: 192.168.1.0/255.255.255.0
X-CSTP-Split-Include: 192.168.3.0/255.255.255.0
X-CSTP-Split-Include: 192.168.4.0/255.255.252.0
X-CSTP-Split-Include: 192.168.8.0/255.255.248.0
X-CSTP-Split-Include: 192.168.16.0/255.255.240.0
X-CSTP-Split-Include: 192.168.32.0/255.255.224.0
X-CSTP-Split-Include: 192.168.64.0/255.255.192.0
X-CSTP-Split-Include: 192.168.128.0/255.255.128.0
X-CSTP-Split-Include: 192.195.245.0/255.255.255.0
X-CSTP-Split-Include: 192.231.246.0/255.255.255.0
X-CSTP-Split-Include: 193.39.212.0/255.255.255.0
X-CSTP-Split-Include: 193.75.142.0/255.255.255.0
X-CSTP-Split-Include: 193.174.240.0/255.255.255.0
X-CSTP-Split-Include: 193.175.82.68/255.255.255.255
X-CSTP-Split-Include: 193.175.192.0/255.255.192.0
X-CSTP-Split-Include: 193.194.158.0/255.255.255.0
X-CSTP-Split-Include: 193.254.176.0/255.255.248.0
X-CSTP-Split-Include: 194.66.20.0/255.255.252.0
X-CSTP-Split-Include: 194.94.132.0/255.255.255.0
X-CSTP-Split-Include: 194.95.0.0/255.255.0.0
X-CSTP-Split-Include: 194.105.70.3/255.255.255.255
X-CSTP-Split-Include: 194.175.173.0/255.255.255.0
X-CSTP-Split-Include: 194.209.48.0/255.255.255.0
X-CSTP-Split-Include: 194.231.61.67/255.255.255.255
X-CSTP-Split-Include: 195.27.183.0/255.255.255.0
X-CSTP-Split-Include: 195.33.169.32/255.255.255.224
X-CSTP-Split-Include: 195.39.222.0/255.255.254.0
X-CSTP-Split-Include: 195.74.94.0/255.255.255.0
X-CSTP-Split-Include: 195.92.228.61/255.255.255.255
X-CSTP-Split-Include: 195.144.0.0/255.254.0.0
X-CSTP-Split-Include: 195.157.37.0/255.255.255.0
X-CSTP-Split-Include: 195.226.116.128/255.255.255.192
X-CSTP-Split-Include: 198.81.200.0/255.255.255.0
X-CSTP-Split-Include: 198.108.24.38/255.255.255.255
X-CSTP-Split-Include: 198.185.19.57/255.255.255.255
X-CSTP-Split-Include: 199.1.202.0/255.255.255.0
X-CSTP-Split-Include: 199.27.75.184/255.255.255.255
X-CSTP-Split-Include: 199.107.238.192/255.255.255.224
X-CSTP-Split-Include: 199.168.12.0/255.255.252.0
X-CSTP-Split-Include: 199.171.202.0/255.255.255.0
X-CSTP-Split-Include: 199.222.69.0/255.255.255.0
X-CSTP-Split-Include: 199.240.0.0/255.240.0.0
X-CSTP-Split-Include: 204.14.132.128/255.255.255.192
X-CSTP-Split-Include: 204.153.51.42/255.255.255.255
X-CSTP-Split-Include: 204.180.229.135/255.255.255.255
X-CSTP-Split-Include: 205.178.189.131/255.255.255.255
X-CSTP-Split-Include: 206.0.0.0/255.0.0.0
X-CSTP-Split-Include: 207.34.140.250/255.255.255.255
X-CSTP-Split-Include: 208.4.68.30/255.255.255.255
X-CSTP-Split-Include: 208.76.204.0/255.255.252.0
X-CSTP-Split-Include: 208.77.250.0/255.255.255.0
X-CSTP-Split-Include: 208.185.238.0/255.255.255.0
X-CSTP-Split-Include: 208.215.178.0/255.255.254.0
X-CSTP-Split-Include: 209.18.110.0/255.255.255.0
X-CSTP-Split-Include: 209.213.117.84/255.255.255.255
X-CSTP-Split-Include: 212.104.212.98/255.255.255.254
X-CSTP-Split-Include: 212.113.83.0/255.255.255.0
X-CSTP-Split-Include: 212.162.1.192/255.255.255.192
X-CSTP-Split-Include: 212.201.100.0/255.255.255.0
X-CSTP-Split-Include: 212.203.117.0/255.255.255.0
X-CSTP-Split-Include: 212.250.180.0/255.255.255.128
X-CSTP-Split-Include: 213.56.90.4/255.255.255.255
X-CSTP-Split-Include: 213.155.64.139/255.255.255.255
X-CSTP-Split-Include: 213.179.138.96/255.255.255.224
X-CSTP-Split-Include: 213.198.96.0/255.255.255.0
X-CSTP-Split-Include: 213.212.0.0/255.252.0.0
X-CSTP-Split-Include: 213.216.6.131/255.255.255.255
X-CSTP-Split-Include: 213.252.28.129/255.255.255.255
X-CSTP-Split-Include: 213.252.144.0/255.255.255.0
X-CSTP-Split-Include: 216.27.103.161/255.255.255.255
X-CSTP-Split-Include: 216.37.74.69/255.255.255.255
X-CSTP-Split-Include: 216.128.0.0/255.128.0.0
X-CSTP-Split-Include: 216.250.253.82/255.255.255.255
X-CSTP-Split-Include: 217.0.0.0/255.0.0.0
X-CSTP-Keep: true
X-CSTP-Tunnel-All-DNS: false
X-CSTP-DPD: 30
X-CSTP-Keepalive: 20
X-CSTP-Banner: Willkommen%20beim%20VPN-Zugang%20fuer%20Professoren%20und%20Mitarbeiter%20der%20Philipps-Universitaet%20Marburg.%0ABei%20Problemen%3A%20http%3A%2F%2Fwww.uni-marburg.de%2Fhrz%2Finternet%2Fvpn%0AAb%20Di%2C%2005.05.2015%3A%20Automatisches%20Update%20auf%20Anyconnect%20Version%203.1.08009%20fuer%20Windows-Clients%0A%0AWelcome%20to%20the%20VPN%20Service%20for%20staff%20of%20the%20Philipps%20University%20Marburg.%0AIn%20case%20of%20problems%20please%20refer%20to%20http%3A%2F%2Fwww.uni-marburg.de%2
X-CSTP-MSIE-Proxy-Lockdown: true
X-CSTP-Smartcard-Removal-Disconnect: true
X-DTLS-Session-ID: 5005D9680D46D6AF94CA5BAD36A8C71B1EFFD2C92312351C63A781276C3340E2
X-DTLS-Port: 443
X-DTLS-Keepalive: 20
X-DTLS-DPD: 30
X-CSTP-MTU: 1342
X-DTLS-CipherSuite: AES128-SHA
X-CSTP-Routing-Filtering-Ignore: false
X-CSTP-Quarantine: false
X-CSTP-Disable-Always-On-VPN: false
X-CSTP-Client-Bypass-Protocol: false
X-CSTP-TCP-Keepalive: true
X-CSTP-Post-Auth-XML: <elided>
CSTP connected. DPD 30, Keepalive 20
CSTP Ciphersuite: (TLS1.0)-(DHE-RSA-1024)-(AES-128-CBC)-(SHA1)
Opened tun device LAN-Verbindung 3
TAP-Windows driver v9.21 (0)
Failed to spawn script 'vpnc-script.js' for connect: Der angegebene Ressourcentyp wurde nicht in der Image-Datei gefunden.
DTLS option X-DTLS-Session-ID : 5005D9680D46D6AF94CA5BAD36A8C71B1EFFD2C92312351C63A781276C3340E2
DTLS option X-DTLS-Port : 443
DTLS option X-DTLS-Keepalive : 20
DTLS option X-DTLS-DPD : 30
DTLS option X-DTLS-CipherSuite : AES128-SHA
DTLS initialised. DPD 30, Keepalive 20
Established DTLS connection (using GnuTLS). Ciphersuite (DTLS0.9)-(RSA)-(AES-128-CBC)-(SHA1).
Send CSTP DPD
Got CSTP DPD response