03-27-2008 02:41 PM - edited 02-21-2020 03:38 PM
HI, I just moved my VPN users from the concentrator to the ASA, Everything is woring fine but I'm getting complaint from some users that they can get in (authenticates) but can't get to any network resources. Here's the log on their VPN client:
Cisco Systems VPN Client Version 5.0.02.0090
Copyright (C) 1998-2007 Cisco Systems, Inc. All Rights Reserved.
Client Type(s): Windows, WinNT
Running on: 5.1.2600 Service Pack 2
Config file directory: C:\Program Files\Cisco Systems\VPN Client\
1 18:48:57.093 03/26/08 Sev=Warning/2 CVPND/0xE3400013
AddRoute failed to add a route: code 87
Destination 192.168.1.255
Netmask 255.255.255.255
Gateway 172.25.1.1
Interface 172.25.1.31
2 18:48:57.093 03/26/08 Sev=Warning/2 CM/0xA3100024
Unable to add route. Network: c0a801ff, Netmask: ffffffff, Interface: ac19011f, Gateway: ac190101.
3 18:50:14.171 03/26/08 Sev=Warning/2 IKE/0xA3000067
Received an IPC message during invalid state (IKE_MAIN:507)
I couldn't replicate this issue in my lab or at home. Has anyone seen this issue before and if so what's the ficx for it?
03-27-2008 02:43 PM
send us the asa config to look at.
Franco
03-27-2008 02:49 PM
03-27-2008 03:07 PM
the resources you are trying to access, are they on 192.168.1.0 subnet?
03-27-2008 03:17 PM
No, they are trying to access our internal network of 172.20.x.x or 172.21.x.x. The RAS network in 172.25.x.x and the 192.168.x.x network is their home network. Again this is not happening to everyone so I suspecting it may be their home router. However they have no issues if they connect to the old VPN Concentrator.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: