I have a 2821 running IOS 12.4(1a) Advanced Security. I've set up EZVPN server, through Security and Device Manager, and I can't connect with Cisco VPN client version 4.6.01.0019. When I run 'sh crypto isakmp', I see a supposed 'active' tunnel with a session state of 'AG_NO_STATE' - this means that the tunnel is NOT active.
Things I've tried so far:
Turned off IPS on all interfaces
Changed my crypo map hash from SHA to MD5.
Please see attached configuration, any help is appreciated.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...