cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
5379
Views
0
Helpful
6
Replies

RV 120W and Client VPN Connection

hwgtech77
Level 1
Level 1

Ok, I must be missing something- I'm trying to configure my RV 120W to allow for remote VPN connections by a few salesmen. I tried to set it up through the wizard, but the "help" menu tells me that the Remote Information (IP or FQDN) is assnged when they client connects but I HAVE to put something in there. I tried it with my IP information and can't connect either, but I have a feeling that is my PC's issue with Windows 7 (it just sits on verifying uername and password and then locks up explorer). I don't see anything in the logs about it attempting to connect or anything from my machine- I'm going to work with another but that still doesn't help me with the "unknown" IP connection setup.

If anyone can help - I'll name my first born after then - or maybe just sing their praises on mountains high!

6 Replies 6

mpyhala
Level 7
Level 7

Hi Matthew,

Thank you for posting. Please try the following: Log in to the web GUI of the router, go to VPN-> IPsec-> IPsec Users and click "Add". Type a Username, change the User Type to Cisco Quick VPN and add a password. Click Save at the bottom and you are done. You should be able to connect from a remote location using the WAN IP address, Username and Password. Please reply and let us know if this helps or if you need further assistance.

Thanks for the quick reply. I didn't say that I'm not using the QuickVPN. I'd like to, but I can't change the internal IP

to 10.x due to some retrictions already in place with other equipment. I'm trying to use the Windows VPN (built into XP / 7). I have been messing around and it looks like I'm getting the message Identity Protection mode of xxx.xxx.xxx.xxx[500] is not acceptable.

I Changed the mode from Aggressive to main (after some research) and that cleared the eariler error - this is the error I get now. I HAVE checked the PSK on the workstation.

2011-04-06 17:28:45: [router83CBF8] [IKE] INFO:  Received request for new phase 1 negotiation: 66.147.51.188[500]<=>74.130.12.146[500]
2011-04-06 17:28:45: [router83CBF8] [IKE] INFO:  Beginning Identity Protection mode.
2011-04-06 17:28:45: [router83CBF8] [IKE] INFO:  Received Vendor ID: MS NT5 ISAKMPOAKLEY
2011-04-06 17:28:45: [router83CBF8] [IKE] INFO:  Received unknown Vendor ID
2011-04-06 17:28:45: [router83CBF8] [IKE] INFO:  Received Vendor ID: draft-ietf-ipsec-nat-t-ike-02

2011-04-06 17:28:45: [router83CBF8] [IKE] INFO:  Received unknown Vendor ID
2011-04-06 17:28:45: [router83CBF8] [IKE] INFO:  For 74.130.12.146[500], Selected NAT-T version: draft-ietf-ipsec-nat-t-ike-02

2011-04-06 17:28:45: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:28:45: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "2048-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:28:45: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:28:45: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:28:45: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's hashtype "MD5" mismatched with Local "SHA".
2011-04-06 17:28:45: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's encryption type "DES-CBC" mismatched with Local "3DES-CBC".
2011-04-06 17:28:45: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:28:45: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "768-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:28:45: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's encryption type "DES-CBC" mismatched with Local "3DES-CBC".
2011-04-06 17:28:45: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:28:45: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's hashtype "MD5" mismatched with Local "SHA".
2011-04-06 17:28:45: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "768-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:28:45: [router83CBF8] [IKE] ERROR:  No suitable proposal found for 74.130.12.146[500].
2011-04-06 17:28:45: [router83CBF8] [IKE] ERROR:  Failed to get matching proposal for 74.130.12.146[500].
2011-04-06 17:28:47: [router83CBF8] [IKE] INFO:  Configuration found for 74.130.12.146[500].
2011-04-06 17:28:47: [router83CBF8] [IKE] INFO:  Received request for new phase 1 negotiation: 66.147.51.188[500]<=>74.130.12.146[500]
2011-04-06 17:28:47: [router83CBF8] [IKE] INFO:  Beginning Identity Protection mode.
2011-04-06 17:28:47: [router83CBF8] [IKE] INFO:  Received Vendor ID: MS NT5 ISAKMPOAKLEY
2011-04-06 17:28:47: [router83CBF8] [IKE] INFO:  Received unknown Vendor ID
2011-04-06 17:28:47: [router83CBF8] [IKE] INFO:  Received Vendor ID: draft-ietf-ipsec-nat-t-ike-02

2011-04-06 17:28:47: [router83CBF8] [IKE] INFO:  Received unknown Vendor ID
2011-04-06 17:28:47: [router83CBF8] [IKE] INFO:  For 74.130.12.146[500], Selected NAT-T version: draft-ietf-ipsec-nat-t-ike-02

2011-04-06 17:28:47: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:28:47: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "2048-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:28:47: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:28:47: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:28:47: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's hashtype "MD5" mismatched with Local "SHA".
2011-04-06 17:28:47: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's encryption type "DES-CBC" mismatched with Local "3DES-CBC".
2011-04-06 17:28:47: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:28:47: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "768-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:28:47: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's encryption type "DES-CBC" mismatched with Local "3DES-CBC".
2011-04-06 17:28:47: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:28:47: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's hashtype "MD5" mismatched with Local "SHA".
2011-04-06 17:28:47: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "768-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:28:47: [router83CBF8] [IKE] ERROR:  No suitable proposal found for 74.130.12.146[500].
2011-04-06 17:28:47: [router83CBF8] [IKE] ERROR:  Failed to get matching proposal for 74.130.12.146[500].
2011-04-06 17:28:49: [router83CBF8] [IKE] INFO:  Configuration found for 74.130.12.146[500].
2011-04-06 17:28:49: [router83CBF8] [IKE] INFO:  Received request for new phase 1 negotiation: 66.147.51.188[500]<=>74.130.12.146[500]
2011-04-06 17:28:49: [router83CBF8] [IKE] INFO:  Beginning Identity Protection mode.
2011-04-06 17:28:49: [router83CBF8] [IKE] INFO:  Received Vendor ID: MS NT5 ISAKMPOAKLEY
2011-04-06 17:28:49: [router83CBF8] [IKE] INFO:  Received unknown Vendor ID
2011-04-06 17:28:49: [router83CBF8] [IKE] INFO:  Received Vendor ID: draft-ietf-ipsec-nat-t-ike-02

2011-04-06 17:28:49: [router83CBF8] [IKE] INFO:  Received unknown Vendor ID
2011-04-06 17:28:49: [router83CBF8] [IKE] INFO:  For 74.130.12.146[500], Selected NAT-T version: draft-ietf-ipsec-nat-t-ike-02

2011-04-06 17:28:49: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:28:49: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "2048-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:28:49: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:28:49: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:28:49: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's hashtype "MD5" mismatched with Local "SHA".
2011-04-06 17:28:49: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's encryption type "DES-CBC" mismatched with Local "3DES-CBC".
2011-04-06 17:28:49: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:28:49: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "768-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:28:49: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's encryption type "DES-CBC" mismatched with Local "3DES-CBC".
2011-04-06 17:28:49: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:28:49: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's hashtype "MD5" mismatched with Local "SHA".
2011-04-06 17:28:49: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "768-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:28:49: [router83CBF8] [IKE] ERROR:  No suitable proposal found for 74.130.12.146[500].
2011-04-06 17:28:49: [router83CBF8] [IKE] ERROR:  Failed to get matching proposal for 74.130.12.146[500].
2011-04-06 17:28:53: [router83CBF8] [IKE] INFO:  Configuration found for 74.130.12.146[500].
2011-04-06 17:28:53: [router83CBF8] [IKE] INFO:  Received request for new phase 1 negotiation: 66.147.51.188[500]<=>74.130.12.146[500]
2011-04-06 17:28:53: [router83CBF8] [IKE] INFO:  Beginning Identity Protection mode.
2011-04-06 17:28:53: [router83CBF8] [IKE] INFO:  Received Vendor ID: MS NT5 ISAKMPOAKLEY
2011-04-06 17:28:53: [router83CBF8] [IKE] INFO:  Received unknown Vendor ID
2011-04-06 17:28:53: [router83CBF8] [IKE] INFO:  Received Vendor ID: draft-ietf-ipsec-nat-t-ike-02

2011-04-06 17:28:53: [router83CBF8] [IKE] INFO:  Received unknown Vendor ID
2011-04-06 17:28:53: [router83CBF8] [IKE] INFO:  For 74.130.12.146[500], Selected NAT-T version: draft-ietf-ipsec-nat-t-ike-02

2011-04-06 17:28:53: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:28:53: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "2048-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:28:53: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:28:53: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:28:53: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's hashtype "MD5" mismatched with Local "SHA".
2011-04-06 17:28:53: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's encryption type "DES-CBC" mismatched with Local "3DES-CBC".
2011-04-06 17:28:53: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:28:53: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "768-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:28:53: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's encryption type "DES-CBC" mismatched with Local "3DES-CBC".
2011-04-06 17:28:53: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:28:53: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's hashtype "MD5" mismatched with Local "SHA".
2011-04-06 17:28:53: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "768-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:28:53: [router83CBF8] [IKE] ERROR:  No suitable proposal found for 74.130.12.146[500].
2011-04-06 17:28:53: [router83CBF8] [IKE] ERROR:  Failed to get matching proposal for 74.130.12.146[500].
2011-04-06 17:29:01: [router83CBF8] [IKE] INFO:  Configuration found for 74.130.12.146[500].
2011-04-06 17:29:01: [router83CBF8] [IKE] INFO:  Received request for new phase 1 negotiation: 66.147.51.188[500]<=>74.130.12.146[500]
2011-04-06 17:29:01: [router83CBF8] [IKE] INFO:  Beginning Identity Protection mode.
2011-04-06 17:29:01: [router83CBF8] [IKE] INFO:  Received Vendor ID: MS NT5 ISAKMPOAKLEY
2011-04-06 17:29:01: [router83CBF8] [IKE] INFO:  Received unknown Vendor ID
2011-04-06 17:29:01: [router83CBF8] [IKE] INFO:  Received Vendor ID: draft-ietf-ipsec-nat-t-ike-02

2011-04-06 17:29:01: [router83CBF8] [IKE] INFO:  Received unknown Vendor ID
2011-04-06 17:29:01: [router83CBF8] [IKE] INFO:  For 74.130.12.146[500], Selected NAT-T version: draft-ietf-ipsec-nat-t-ike-02

2011-04-06 17:29:01: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:29:01: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "2048-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:29:01: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:29:01: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:29:01: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's hashtype "MD5" mismatched with Local "SHA".
2011-04-06 17:29:01: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's encryption type "DES-CBC" mismatched with Local "3DES-CBC".
2011-04-06 17:29:01: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:29:01: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "768-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:29:01: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's encryption type "DES-CBC" mismatched with Local "3DES-CBC".
2011-04-06 17:29:01: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:29:01: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's hashtype "MD5" mismatched with Local "SHA".
2011-04-06 17:29:01: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "768-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:29:01: [router83CBF8] [IKE] ERROR:  No suitable proposal found for 74.130.12.146[500].
2011-04-06 17:29:01: [router83CBF8] [IKE] ERROR:  Failed to get matching proposal for 74.130.12.146[500].
2011-04-06 17:29:17: [router83CBF8] [IKE] INFO:  Configuration found for 74.130.12.146[500].
2011-04-06 17:29:17: [router83CBF8] [IKE] INFO:  Received request for new phase 1 negotiation: 66.147.51.188[500]<=>74.130.12.146[500]
2011-04-06 17:29:17: [router83CBF8] [IKE] INFO:  Beginning Identity Protection mode.
2011-04-06 17:29:17: [router83CBF8] [IKE] INFO:  Received Vendor ID: MS NT5 ISAKMPOAKLEY
2011-04-06 17:29:17: [router83CBF8] [IKE] INFO:  Received unknown Vendor ID
2011-04-06 17:29:17: [router83CBF8] [IKE] INFO:  Received Vendor ID: draft-ietf-ipsec-nat-t-ike-02

2011-04-06 17:29:17: [router83CBF8] [IKE] INFO:  Received unknown Vendor ID
2011-04-06 17:29:17: [router83CBF8] [IKE] INFO:  For 74.130.12.146[500], Selected NAT-T version: draft-ietf-ipsec-nat-t-ike-02

2011-04-06 17:29:17: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:29:17: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "2048-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:29:17: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:29:17: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:29:17: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's hashtype "MD5" mismatched with Local "SHA".
2011-04-06 17:29:17: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's encryption type "DES-CBC" mismatched with Local "3DES-CBC".
2011-04-06 17:29:17: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:29:17: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "768-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:29:17: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's encryption type "DES-CBC" mismatched with Local "3DES-CBC".
2011-04-06 17:29:17: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:29:17: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's hashtype "MD5" mismatched with Local "SHA".
2011-04-06 17:29:17: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "768-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:29:17: [router83CBF8] [IKE] ERROR:  No suitable proposal found for 74.130.12.146[500].
2011-04-06 17:29:17: [router83CBF8] [IKE] ERROR:  Failed to get matching proposal for 74.130.12.146[500].
2011-04-06 17:30:09: [router83CBF8] [IKE] INFO:  Adding IPSec configuration with identifier "RenewalAnnex"
2011-04-06 17:30:09: [router83CBF8] [IKE] INFO:  Adding IKE configuration with identifier "RenewalAnnex"
2011-04-06 17:30:15: [router83CBF8] [IKE] INFO:  Using IPsec SA configuration: 192.168.1.0/24<->192.168.11.0/24
2011-04-06 17:30:15: [router83CBF8] [IKE] INFO:  Configuration found for 74.142.6.50.
2011-04-06 17:30:15: [router83CBF8] [IKE] INFO:  Initiating new phase 1 negotiation: 66.147.51.188[500]<=>74.142.6.50[500]
2011-04-06 17:30:15: [router83CBF8] [IKE] INFO:  Beginning Identity Protection mode.
2011-04-06 17:30:15: [router83CBF8] [IKE] INFO:   [ident_i1send:180]: XXX: NUMNATTVENDORIDS: 3
2011-04-06 17:30:15: [router83CBF8] [IKE] INFO:   [ident_i1send:184]: XXX: setting vendorid: 4
2011-04-06 17:30:15: [router83CBF8] [IKE] INFO:   [ident_i1send:184]: XXX: setting vendorid: 8
2011-04-06 17:30:15: [router83CBF8] [IKE] INFO:   [ident_i1send:184]: XXX: setting vendorid: 9
2011-04-06 17:30:15: [router83CBF8] [IKE] INFO:  Received Vendor ID: RFC 3947
2011-04-06 17:30:15: [router83CBF8] [IKE] INFO:  Received Vendor ID: DPD
2011-04-06 17:30:15: [router83CBF8] [IKE] INFO:  Received Vendor ID: KAME/racoon
2011-04-06 17:30:15: [router83CBF8] [IKE] INFO:  For 74.142.6.50[500], Selected NAT-T version: RFC 3947
2011-04-06 17:30:16: [router83CBF8] [IKE] INFO:  Received Vendor ID: KAME/racoon
2011-04-06 17:30:16: [router83CBF8] [IKE] INFO:  NAT-D payload matches for 66.147.51.188[500]
2011-04-06 17:30:16: [router83CBF8] [IKE] INFO:  NAT-D payload matches for 74.142.6.50[500]
2011-04-06 17:30:16: [router83CBF8] [IKE] INFO:  NAT not detected
2011-04-06 17:30:16: [router83CBF8] [IKE] INFO:  ISAKMP-SA established for 66.147.51.188[500]-74.142.6.50[500] with spi:dfa32f2a58e30ce2:5b3ade16df7d348c
2011-04-06 17:30:16: [router83CBF8] [IKE] INFO:  Sending Informational Exchange: notify payload[INITIAL-CONTACT]
2011-04-06 17:30:17: [router83CBF8] [IKE] INFO:  Initiating new phase 2 negotiation: 66.147.51.188[0]<=>74.142.6.50[0]
2011-04-06 17:30:18: [router83CBF8] [IKE] INFO:  IPsec-SA established: ESP/Tunnel 74.142.6.50->66.147.51.188 with spi=239450116(0xe45b804)
2011-04-06 17:30:18: [router83CBF8] [IKE] INFO:  IPsec-SA established: ESP/Tunnel 66.147.51.188->74.142.6.50 with spi=80423284(0x4cb2974)
2011-04-06 17:30:36: [router83CBF8] [IKE] WARNING:  no phase2 found for "SynapseTest"
2011-04-06 17:30:36: [router83CBF8] [IKE] INFO:  IPSec configuration with identifier "SynapseTest" deleted sucessfully
2011-04-06 17:30:36: [router83CBF8] [IKE] WARNING:  no phase1 found for "SynapseTest"
2011-04-06 17:30:36: [router83CBF8] [IKE] INFO:  IKE configuration with identifier "SynapseTest" deleted sucessfully
2011-04-06 17:31:27: [router83CBF8] [IKE] INFO:  Adding IPSec configuration with identifier "SynapseTest"
2011-04-06 17:31:27: [router83CBF8] [IKE] INFO:  Adding IKE configuration with identifier "SynapseTest"
2011-04-06 17:31:32: [router83CBF8] [IKE] INFO:  Configuration found for 74.130.12.146[500].
2011-04-06 17:31:32: [router83CBF8] [IKE] INFO:  Received request for new phase 1 negotiation: 66.147.51.188[500]<=>74.130.12.146[500]
2011-04-06 17:31:32: [router83CBF8] [IKE] INFO:  Beginning Identity Protection mode.
2011-04-06 17:31:32: [router83CBF8] [IKE] INFO:  Received Vendor ID: MS NT5 ISAKMPOAKLEY
2011-04-06 17:31:32: [router83CBF8] [IKE] INFO:  Received unknown Vendor ID
2011-04-06 17:31:32: [router83CBF8] [IKE] INFO:  Received Vendor ID: draft-ietf-ipsec-nat-t-ike-02

2011-04-06 17:31:32: [router83CBF8] [IKE] INFO:  Received unknown Vendor ID
2011-04-06 17:31:32: [router83CBF8] [IKE] INFO:  For 74.130.12.146[500], Selected NAT-T version: draft-ietf-ipsec-nat-t-ike-02

2011-04-06 17:31:32: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:31:32: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "2048-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:31:32: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:31:32: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:31:32: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's hashtype "MD5" mismatched with Local "SHA".
2011-04-06 17:31:32: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's encryption type "DES-CBC" mismatched with Local "3DES-CBC".
2011-04-06 17:31:32: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:31:32: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "768-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:31:32: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's encryption type "DES-CBC" mismatched with Local "3DES-CBC".
2011-04-06 17:31:32: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:31:32: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's hashtype "MD5" mismatched with Local "SHA".
2011-04-06 17:31:32: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "768-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:31:32: [router83CBF8] [IKE] ERROR:  No suitable proposal found for 74.130.12.146[500].
2011-04-06 17:31:32: [router83CBF8] [IKE] ERROR:  Failed to get matching proposal for 74.130.12.146[500].
2011-04-06 17:31:33: [router83CBF8] [IKE] INFO:  Configuration found for 74.130.12.146[500].
2011-04-06 17:31:33: [router83CBF8] [IKE] INFO:  Received request for new phase 1 negotiation: 66.147.51.188[500]<=>74.130.12.146[500]
2011-04-06 17:31:33: [router83CBF8] [IKE] INFO:  Beginning Identity Protection mode.
2011-04-06 17:31:33: [router83CBF8] [IKE] INFO:  Received Vendor ID: MS NT5 ISAKMPOAKLEY
2011-04-06 17:31:33: [router83CBF8] [IKE] INFO:  Received unknown Vendor ID
2011-04-06 17:31:33: [router83CBF8] [IKE] INFO:  Received Vendor ID: draft-ietf-ipsec-nat-t-ike-02

2011-04-06 17:31:33: [router83CBF8] [IKE] INFO:  Received unknown Vendor ID
2011-04-06 17:31:33: [router83CBF8] [IKE] INFO:  For 74.130.12.146[500], Selected NAT-T version: draft-ietf-ipsec-nat-t-ike-02

2011-04-06 17:31:33: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:31:33: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "2048-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:31:33: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:31:33: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:31:33: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's hashtype "MD5" mismatched with Local "SHA".
2011-04-06 17:31:33: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's encryption type "DES-CBC" mismatched with Local "3DES-CBC".
2011-04-06 17:31:33: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:31:33: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "768-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:31:33: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's encryption type "DES-CBC" mismatched with Local "3DES-CBC".
2011-04-06 17:31:33: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:31:33: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's hashtype "MD5" mismatched with Local "SHA".
2011-04-06 17:31:33: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "768-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:31:33: [router83CBF8] [IKE] ERROR:  No suitable proposal found for 74.130.12.146[500].
2011-04-06 17:31:33: [router83CBF8] [IKE] ERROR:  Failed to get matching proposal for 74.130.12.146[500].
2011-04-06 17:31:35: [router83CBF8] [IKE] INFO:  Configuration found for 74.130.12.146[500].
2011-04-06 17:31:35: [router83CBF8] [IKE] INFO:  Received request for new phase 1 negotiation: 66.147.51.188[500]<=>74.130.12.146[500]
2011-04-06 17:31:35: [router83CBF8] [IKE] INFO:  Beginning Identity Protection mode.
2011-04-06 17:31:35: [router83CBF8] [IKE] INFO:  Received Vendor ID: MS NT5 ISAKMPOAKLEY
2011-04-06 17:31:35: [router83CBF8] [IKE] INFO:  Received unknown Vendor ID
2011-04-06 17:31:35: [router83CBF8] [IKE] INFO:  Received Vendor ID: draft-ietf-ipsec-nat-t-ike-02

2011-04-06 17:31:35: [router83CBF8] [IKE] INFO:  Received unknown Vendor ID
2011-04-06 17:31:35: [router83CBF8] [IKE] INFO:  For 74.130.12.146[500], Selected NAT-T version: draft-ietf-ipsec-nat-t-ike-02

2011-04-06 17:31:35: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:31:35: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "2048-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:31:35: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:31:35: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:31:35: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's hashtype "MD5" mismatched with Local "SHA".
2011-04-06 17:31:35: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's encryption type "DES-CBC" mismatched with Local "3DES-CBC".
2011-04-06 17:31:35: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:31:35: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "768-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:31:35: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's encryption type "DES-CBC" mismatched with Local "3DES-CBC".
2011-04-06 17:31:35: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:31:35: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's hashtype "MD5" mismatched with Local "SHA".
2011-04-06 17:31:35: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "768-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:31:35: [router83CBF8] [IKE] ERROR:  No suitable proposal found for 74.130.12.146[500].
2011-04-06 17:31:35: [router83CBF8] [IKE] ERROR:  Failed to get matching proposal for 74.130.12.146[500].
2011-04-06 17:31:39: [router83CBF8] [IKE] INFO:  Configuration found for 74.130.12.146[500].
2011-04-06 17:31:39: [router83CBF8] [IKE] INFO:  Received request for new phase 1 negotiation: 66.147.51.188[500]<=>74.130.12.146[500]
2011-04-06 17:31:39: [router83CBF8] [IKE] INFO:  Beginning Identity Protection mode.
2011-04-06 17:31:39: [router83CBF8] [IKE] INFO:  Received Vendor ID: MS NT5 ISAKMPOAKLEY
2011-04-06 17:31:39: [router83CBF8] [IKE] INFO:  Received unknown Vendor ID
2011-04-06 17:31:39: [router83CBF8] [IKE] INFO:  Received Vendor ID: draft-ietf-ipsec-nat-t-ike-02

2011-04-06 17:31:39: [router83CBF8] [IKE] INFO:  Received unknown Vendor ID
2011-04-06 17:31:39: [router83CBF8] [IKE] INFO:  For 74.130.12.146[500], Selected NAT-T version: draft-ietf-ipsec-nat-t-ike-02

2011-04-06 17:31:39: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:31:39: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "2048-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:31:39: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:31:39: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:31:39: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's hashtype "MD5" mismatched with Local "SHA".
2011-04-06 17:31:39: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's encryption type "DES-CBC" mismatched with Local "3DES-CBC".
2011-04-06 17:31:39: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:31:39: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "768-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:31:39: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's encryption type "DES-CBC" mismatched with Local "3DES-CBC".
2011-04-06 17:31:39: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:31:39: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's hashtype "MD5" mismatched with Local "SHA".
2011-04-06 17:31:39: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "768-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:31:39: [router83CBF8] [IKE] ERROR:  No suitable proposal found for 74.130.12.146[500].
2011-04-06 17:31:39: [router83CBF8] [IKE] ERROR:  Failed to get matching proposal for 74.130.12.146[500].
2011-04-06 17:31:47: [router83CBF8] [IKE] INFO:  Configuration found for 74.130.12.146[500].
2011-04-06 17:31:47: [router83CBF8] [IKE] INFO:  Received request for new phase 1 negotiation: 66.147.51.188[500]<=>74.130.12.146[500]
2011-04-06 17:31:47: [router83CBF8] [IKE] INFO:  Beginning Identity Protection mode.
2011-04-06 17:31:47: [router83CBF8] [IKE] INFO:  Received Vendor ID: MS NT5 ISAKMPOAKLEY
2011-04-06 17:31:47: [router83CBF8] [IKE] INFO:  Received unknown Vendor ID
2011-04-06 17:31:47: [router83CBF8] [IKE] INFO:  Received Vendor ID: draft-ietf-ipsec-nat-t-ike-02

2011-04-06 17:31:47: [router83CBF8] [IKE] INFO:  Received unknown Vendor ID
2011-04-06 17:31:47: [router83CBF8] [IKE] INFO:  For 74.130.12.146[500], Selected NAT-T version: draft-ietf-ipsec-nat-t-ike-02

2011-04-06 17:31:47: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:31:47: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "2048-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:31:47: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:31:47: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:31:47: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's hashtype "MD5" mismatched with Local "SHA".
2011-04-06 17:31:47: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's encryption type "DES-CBC" mismatched with Local "3DES-CBC".
2011-04-06 17:31:47: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:31:47: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "768-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:31:47: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's encryption type "DES-CBC" mismatched with Local "3DES-CBC".
2011-04-06 17:31:47: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:31:47: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's hashtype "MD5" mismatched with Local "SHA".
2011-04-06 17:31:47: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "768-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:31:47: [router83CBF8] [IKE] ERROR:  No suitable proposal found for 74.130.12.146[500].
2011-04-06 17:31:47: [router83CBF8] [IKE] ERROR:  Failed to get matching proposal for 74.130.12.146[500].
2011-04-06 17:32:03: [router83CBF8] [IKE] INFO:  Configuration found for 74.130.12.146[500].
2011-04-06 17:32:03: [router83CBF8] [IKE] INFO:  Received request for new phase 1 negotiation: 66.147.51.188[500]<=>74.130.12.146[500]
2011-04-06 17:32:03: [router83CBF8] [IKE] INFO:  Beginning Identity Protection mode.
2011-04-06 17:32:03: [router83CBF8] [IKE] INFO:  Received Vendor ID: MS NT5 ISAKMPOAKLEY
2011-04-06 17:32:03: [router83CBF8] [IKE] INFO:  Received unknown Vendor ID
2011-04-06 17:32:03: [router83CBF8] [IKE] INFO:  Received Vendor ID: draft-ietf-ipsec-nat-t-ike-02

2011-04-06 17:32:03: [router83CBF8] [IKE] INFO:  Received unknown Vendor ID
2011-04-06 17:32:03: [router83CBF8] [IKE] INFO:  For 74.130.12.146[500], Selected NAT-T version: draft-ietf-ipsec-nat-t-ike-02

2011-04-06 17:32:03: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:32:03: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "2048-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:32:03: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:32:03: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:32:03: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's hashtype "MD5" mismatched with Local "SHA".
2011-04-06 17:32:03: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's encryption type "DES-CBC" mismatched with Local "3DES-CBC".
2011-04-06 17:32:03: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:32:03: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "768-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:32:03: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's encryption type "DES-CBC" mismatched with Local "3DES-CBC".
2011-04-06 17:32:03: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's authentication method "pre-shared key" mismatched with Local "XAuth psk server".
2011-04-06 17:32:03: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's hashtype "MD5" mismatched with Local "SHA".
2011-04-06 17:32:03: [router83CBF8] [IKE] WARNING:  Rejected phase 1 proposal as Peer's dh_group "768-bit MODP group" mismatched with Local "1024-bit MODP group".
2011-04-06 17:32:03: [router83CBF8] [IKE] ERROR:  No suitable proposal found for 74.130.12.146[500].
2011-04-06 17:32:03: [router83CBF8] [IKE] ERROR:  Failed to get matching proposal for 74.130.12.146[500].

anastasi37
Level 1
Level 1

Matthew,

I don't know if this will help you but it helped me.  I have a RV120W that I wanted users to be able to create a VPN session from their home computer to connect to the office computers.

I started the way you did, using the VPN Wizard, but after consulting with the Cisco Tech Support, they told me I do not need to use the VPN Wizard.  That is if you want to create a VPN tunnel between two different RV120W's.  I did not understand if you wanted to do that or not, so I am assuming not.  I am assuming that you want to have users use the QuickVPN software from their Windows XP/Windows 7 pc's from home to connect to the office.  If this is true for you this is what I had to do.

The Cisco Tech told me to do the following:

Remove all policies from the VPN / IPsec / IPsec Policies section.

Make sure the Status / IPsec Connection Status is stopped.

In the Firewall / Remote Management, check to turn Enable it and I changed the port from 443 to 60443.  We are using 443 for something else.

In the Firewall / Basic Settings / Attack Checks, we checked the Respond to Ping on Internet (seemed to be needed for Windows 7) and unchecked Block Fragmented Packets

In the VPN / IPsec Users section I added users that will be connecting via QuickVPN.  I added their names, selected the Cisco QuickVPN option and gave them a password.  I also check the option to allow them to change their password.

After all that, I installed the QuickVPN on the PC's and used their username and password, the IP address of the router at the office and selected port 60443.

I installed this on a Windows XP, a Windows 7 Home Premium 64-Bit and a Windows 7 Professional 32-Bit.

The QuickVPN for the Windows XP PC, I did not have to make any changes to it to work.

For the Windows 7 PC's, I had to right-mouse click on the QuickVPN icon, select properties.  I then selected the Compatibility tab and selected the Windows Vista Service Pack 2 compatibility mode.   I also checked the Run as Administrator check box.

These were all settings provided by the Cisco Tech Support.

This all works each PC - IF (big IF here) you have the PC connected directly into the network.  It does not work (at this moment) if it is connected to a Wireless network (still working on that).  For some reason when I try it wirelessly, it tells me that the remote gateway not responding.  We are still working on this.

Let me now if you have any more questions.

Rick Habel rick.habel@comcast.net

sammydlc75
Level 1
Level 1

Rick,

Thanks for the great post. I had been working on a similar issue for one of my clients. I recommended this router because of the nice features of having a quick vpn client, but this has been a nightmare.

I went ahead and deleted the VPNs that the wizard created. I just created the users and made sure I selected Quick VPN client. also made changes on a windows 7 laptop that is trying to access from one of the 3 offices we want to conect.

for some reason it worked for about 45 seconds. then it closed. I have been trying to reconect from a Windows XP SP3 and Windows 7 and both keep giving me the same error.

I have checked all options and they are all fine

1. Incorrect Password. I am using the right password

2. No valid IP for the network card. ( I am connecting from a Wireless Windows 7 and a Wired Windows XP, both working fine with internet.

3. Incorrect server address. IP is correct. I can connect to remote management from both laptops

4. Windows Vista 7 Firewall. (Winodws 7 has firewall disabled  but IPSEC enabled and running.and XP also has  FW disabled

5. Local IP address (Both remote sites have a Class B subnet. VPN Office has a Class C subnet.

At this point I do not know what else to try. Any help is greatly appreciated.

>4. Windows Vista 7 Firewall. (Winodws 7 has firewall disabled  but IPSEC enabled and running.and XP also has  FW disabled

To use QuickVPN client on Windows 7 or Vista, Windows Firewall must be enabled. If the problem persists, feel free to call the Support Center and one of the support agents can provide further assistance.