We are currently troubleshooting an issue we are having with Microsoft SMS & the VPN 3000 Concentrator. Currently when we connect to the concentrator and attempt to open SMS Admin Console through the tunnel, the SMS admin connects to the SMS server, but can't perform any of its queries. I've seen some issues regarding MTU size and such, but has anybody else experienced such a problem? Cisco has pointed me to several Microsoft documents, but this is not a Microsoft issue. I can connect to my AS5300 and the SMS Admin works fine, indicating a definate IPSec issue on the VPN 3000.
From your explanation it seems like its definitely a MTU size issue. You can either try reducing the MTU size on the client or you can check the MTU size on the SMS server. You might also check the DF bit setting on the server. Try resetting it if necessary.
BenefitsDocumentationPrerequisiteImage Download LinksLimitationsSupported PlatformsLicense RequirementsTopologyStep-By-Step ConfigurationConfigure Virtual ServiceActivate the virtual service and configure guest IPsConfiguring UTD (Service Plane)Configurin...
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...