cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
825
Views
0
Helpful
4
Replies

VPN Client to ASA 5500

carl
Level 1
Level 1

I am unable to get my Cisco VPN client to successfully negotiate with my ASA 5500. I have gone thru several configs and have had no luck. I am posting my current router config and debug info in hopes that someone sees something obvious. It is not passing the initial phase.

Thank you very much for your assistance.

1 Accepted Solution

Accepted Solutions

acomiskey
Level 10
Level 10

Still having trouble, try adding..

isakmp policy 65535 authentication pre-share

isakmp policy 65535 encryption 3des

isakmp policy 65535 hash sha

isakmp policy 65535 group 2

isakmp policy 65535 lifetime 86400

View solution in original post

4 Replies 4

acomiskey
Level 10
Level 10

Still having trouble, try adding..

isakmp policy 65535 authentication pre-share

isakmp policy 65535 encryption 3des

isakmp policy 65535 hash sha

isakmp policy 65535 group 2

isakmp policy 65535 lifetime 86400

This resolved my issue. Thanks!

mfreijser
Level 1
Level 1

You could try to change the transform-set to something like 3DES or AES instead of using DES. Rebooting the device after the initial VPN configuration is always a good idea.

I once had a strange problem with a ASA using a DES transform-set, it was solved by using a higher protocol for my transform-set.

Regards,

Michael

I actually had it at AES-256 originally and when that didn't work I brought it down to DES. Will put it back on AES-256 and reboot it later today to see what happens.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: