cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
514
Views
0
Helpful
4
Replies

VPN Client issue

siskoboy2007
Level 1
Level 1

HI, I just moved my VPN users from the concentrator to the ASA, Everything is woring fine but I'm getting complaint from some users that they can get in (authenticates) but can't get to any network resources. Here's the log on their VPN client:

Cisco Systems VPN Client Version 5.0.02.0090

Copyright (C) 1998-2007 Cisco Systems, Inc. All Rights Reserved.

Client Type(s): Windows, WinNT

Running on: 5.1.2600 Service Pack 2

Config file directory: C:\Program Files\Cisco Systems\VPN Client\

1 18:48:57.093 03/26/08 Sev=Warning/2 CVPND/0xE3400013

AddRoute failed to add a route: code 87

Destination 192.168.1.255

Netmask 255.255.255.255

Gateway 172.25.1.1

Interface 172.25.1.31

2 18:48:57.093 03/26/08 Sev=Warning/2 CM/0xA3100024

Unable to add route. Network: c0a801ff, Netmask: ffffffff, Interface: ac19011f, Gateway: ac190101.

3 18:50:14.171 03/26/08 Sev=Warning/2 IKE/0xA3000067

Received an IPC message during invalid state (IKE_MAIN:507)

I couldn't replicate this issue in my lab or at home. Has anyone seen this issue before and if so what's the ficx for it?

4 Replies 4

francisco_1
Level 7
Level 7

send us the asa config to look at.

Franco

Here you go:

the resources you are trying to access, are they on 192.168.1.0 subnet?

No, they are trying to access our internal network of 172.20.x.x or 172.21.x.x. The RAS network in 172.25.x.x and the 192.168.x.x network is their home network. Again this is not happening to everyone so I suspecting it may be their home router. However they have no issues if they connect to the old VPN Concentrator.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: