PIX to VPN Concentrator problem

kevinhobson2000 · ‎03-05-2007

Hi,

I am having a problem with a pix to VPN concentrator. Phase one gets to the MMKEY_EXCH stage and then drops. Output from the log of the concentrator below:

IKEDBG/65 RPT=52 <ip address> Group [<ipaddress>] IKE MM Initiator FSM error history (struct &0x3c51900) <state>, <event>: MM_DONE, EV_ERROR MM_WAIT_MSG6, EV_RESEND_MSG MM_WAIT_MSG6, NullEvent MM_SND_MSG5, EV_SND_MSG

cheers

Kev

Kamal Malhotra · ‎03-05-2007

Hi Kevin,

It seems that the preshared key is not matching. Please reconfigure it. Please also make sure that if any one end is behind a NAT/PAT device then we configure NAT-T. and that NAT/PAT device should allow the UDP 500 and UDP 4500 through it.

HTH,

Please rate if it helps.

Regards,

Kamal