cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
833
Views
0
Helpful
4
Replies

VPN Client to ASA 5500

carl
Level 1
Level 1

I am unable to get my Cisco VPN client to successfully negotiate with my ASA 5500. I have gone thru several configs and have had no luck. I am posting my current router config and debug info in hopes that someone sees something obvious. It is not passing the initial phase.

Thank you very much for your assistance.

1 Accepted Solution

Accepted Solutions

acomiskey
Level 10
Level 10

Still having trouble, try adding..

isakmp policy 65535 authentication pre-share

isakmp policy 65535 encryption 3des

isakmp policy 65535 hash sha

isakmp policy 65535 group 2

isakmp policy 65535 lifetime 86400

View solution in original post

4 Replies 4

acomiskey
Level 10
Level 10

Still having trouble, try adding..

isakmp policy 65535 authentication pre-share

isakmp policy 65535 encryption 3des

isakmp policy 65535 hash sha

isakmp policy 65535 group 2

isakmp policy 65535 lifetime 86400

This resolved my issue. Thanks!

mfreijser
Level 1
Level 1

You could try to change the transform-set to something like 3DES or AES instead of using DES. Rebooting the device after the initial VPN configuration is always a good idea.

I once had a strange problem with a ASA using a DES transform-set, it was solved by using a higher protocol for my transform-set.

Regards,

Michael

I actually had it at AES-256 originally and when that didn't work I brought it down to DES. Will put it back on AES-256 and reboot it later today to see what happens.