hello,

i'm running site-to-site VPN and VPN Client on the same router 3845.

The remote site of site-to-site has dynamic IP address through the ISP provider, I configure the VPN tunnel and the client config .

The site-to-site could establish the communication untill i remove the below line from the router config and put it back.

( crypto map to_dubai_map client authentication list sdm_vpn_xauth_ml_2)

The connection will remain up for some time then dropped again.

Or:

when i add no-xauth to peer as the below

crypto isakmp key XXXXXXX address 0.0.0.0 0.0.0.0 no-xauth

but when i add no-xauth the remote VPN client could not login or establish the connection.

Im attaching the config . Your help will be appreciated