EzVPN: AAA and snmp problem

hugo.picado · ‎07-15-2009

Hello,

I have EzVPN configured in routers and asa5505 as a client and ASA5510 as a server, but I can not get through aaa authentication (accounting & authorization too) in both cases, and snmp on the asa5505 case.

Traffic between LAN behind router and ASA acting as a client is not a problem. I am using NEM.

Is there anything else I shoud do?

Regards

HUGO

sadbulali · ‎07-21-2009

Verify that the "management-access inside" is enabled on the ASA5505 and that the outside IP address is included on the tunnel's interesting traffic.

Check whether you have "vpnclient management clear" command enabled on the ASA5505. This command excludes the device's outside interface IP from the tunnel's interesting traffic. By doing this the SNMP will not be able to reply because by default this protocol uses the outside IP address of the device to send the packets. If you do a "no vpnclient management clear" you should be able to retrieve SNMP information.