when i try to establish a VPN lan-to-lan
between asa and cisco router ios through a nat device .Vpn work fine if router start vpn but fail if asa start.
Router logs give these errors :
*Aug 27 07:11:09.945: ISAKMP:(0:961:SW:1): processing KE
> payload. message ID = 0
> *Aug 27 07:11:09.993: ISAKMP:(0:961:SW:1): processing NONCE
> payload. message ID = 0
> *Aug 27 07:11:10.001: ISAKMP:(0:961:SW:1):found peer
> pre-shared key matching 85.18.244.76
> *Aug 27 07:11:10.001: ISAKMP:(0:961:SW:1):SKEYID state generated
> *Aug 27 07:11:10.001: ISAKMP:(0:961:SW:1): processing vendor
> id payload
> *Aug 27 07:11:10.001: ISAKMP:(0:961:SW:1): vendor ID is Unity
> *Aug 27 07:11:10.001: ISAKMP:(0:961:SW:1): processing vendor
> id payload
> *Aug 27 07:11:10.001: ISAKMP:(0:961:SW:1): vendor ID seems
> Unity/DPD but major 132 mismatch
> *Aug 27 07:11:10.001: ISAKMP:(0:961:SW:1): vendor ID is XAUTH
> *Aug 27 07:11:10.001: ISAKMP:(0:961:SW:1): processing vendor
> id payload
> *Aug 27 07:11:10.001: ISAKMP:(0:961:SW:1): speaking to
> another IOS box!
> *Aug 27 07:11:10.005: ISAKMP:(0:961:SW:1): processing vendor
> id payload
> *Aug 27 07:11:10.005: ISAKMP:(0:961:SW:1):vendor ID seems
> Unity/DPD but hash mismatch
> *Aug 27 07:11:10.005: ISAKMP:received payload type 20
> *Aug 27 07:11:10.005: ISAKMP:received payload type 20
> *Aug 27 07:11:10.005: ISAKMP (0:134218689): NAT found, the
> node outside NAT
> *Aug 27 07:11:10.005: ISAKMP:(0:961:SW:1):Input =
> IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
> *Aug 27 07:11:10.005: ISAKMP:(0:961:SW:1):Old State =
> IKE_R_MM3 New State = IKE_R_MM3
Someone have any suggestions ?
Thank you
