PIX to VPN Concentrator problem

Unanswered Question
Mar 5th, 2007

Hi,

I am having a problem with a pix to VPN concentrator. Phase one gets to the MMKEY_EXCH stage and then drops. Output from the log of the concentrator below:

IKEDBG/65 RPT=52 <ip address> Group [<ipaddress>] IKE MM Initiator FSM error history (struct &0x3c51900) <state>, <event>: MM_DONE, EV_ERROR MM_WAIT_MSG6, EV_RESEND_MSG MM_WAIT_MSG6, NullEvent MM_SND_MSG5, EV_SND_MSG

cheers

Kev

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Kamal Malhotra Mon, 03/05/2007 - 07:08

Hi Kevin,

It seems that the preshared key is not matching. Please reconfigure it. Please also make sure that if any one end is behind a NAT/PAT device then we configure NAT-T. and that NAT/PAT device should allow the UDP 500 and UDP 4500 through it.

HTH,

Please rate if it helps.

Regards,

Kamal

Actions

This Discussion