Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 

Phone VPN to ASA

All,

I have a user that is getting a "VPN Authentication Failed" message when trying to authenticate to an ASA for Phone VPN.  I am running debug aaa common enabled at level 255.  When other users authenticate I see the debug output.  With this one user I see NOTHING on the debugs.  Could anything else cause the phone to prompt for a username and password in the same manner that hitting the ASA does?  Any other ideas?

Thakns in advance.  All replies rated.

2 REPLIES
Cisco Employee

Phone VPN to ASA

Hi,

Try disabling the "host Id check" on the CUCM for the client VPNProfile.

Hope this helps!

Regards,

Tere.

If you find this post helpful, please rate!

Regards, Tere. If you find this post helpful, please rate! :)

Phone VPN to ASA

Thanks.  The Help Page in CM says:

When you Check this box, the gateway certificate subjectAltName or CN must match the URL to which the VPN client is connected to.

Can you expand on the ramifications of not haveing this checked?

490
Views
4
Helpful
2
Replies
CreatePlease to create content