Using Vista 64 Bit MS VPN Client to VPN to Cisco ASA

Unanswered Question
Nov 21st, 2008

Hello all,

I am unable to establish a vpn connection using a vista 64 bit ms vpn client. The Microsoft vpn client connects to the ASA with no problem on the xp pro machine. Is any one done this configuration before? Below is my vpn configuration. Your help will be greatly appreciated.

group-policy DefaultRAGroup attributes

dns-server value

vpn-tunnel-protocol IPSec l2tp-ipsec

default-domain value

crypto isakmp policy 15

authentication pre-share

encryption 3des

hash md5

group 2

lifetime 86400

tunnel-group DefaultRAGroup general-attributes

address-pool ISS_Network_Pool1

authentication-server-group ACS

default-group-policy DefaultRAGroup

tunnel-group DefaultRAGroup ipsec-attributes

pre-shared-key xxxxx

tunnel-group DefaultRAGroup ppp-attributes

no authentication chap

authentication ms-chap-v2

crypto ipsec transform-set TRANS_ESP_3DES_MD5 esp-3des esp-md5-hmac

crypto ipsec transform-set TRANS_ESP_3DES_MD5 mode transport

crypto dynamic-map outside_dyn_map 20 set transform-set TRANS_ESP_3DES_MD5

crypto map outside_map 20 ipsec-isakmp dynamic outside_dyn_map

crypto map outside_map interface wan



I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
mbroberson1 Fri, 11/21/2008 - 12:05


I ran into this senario a while back. What I was told from Cisco is that this is not supported. The ASA MSCHAPv2 on Vista is different from the MSCHAPv's on the ASA. Even if they both say MSCHAPv2, underneath they are actually different. If you do find a workaround I would love to know about it.




This Discussion