Remote - Access VPN - Help Urgent

[Amin Shaikh]

Hi,

My remote-access vpn is messed-up & doesnt work...

current config on ASA as..

===========================

tunnel-group RVPNtun type ipsec-ra

tunnel-group RVPNtun general-attributes

address-pool sslpool

authentication-server-group RADIUS

tunnel-group RVPNtun ipsec-attributes

pre-shared-key *

radius-sdi-xauth

crypto isakmp policy 65535

authentication pre-share

encryption 3des

hash sha

group 1

lifetime 86400

crypto ipsec transform-set RVPN esp-3des esp-md5-hmac

ip local pool sslpool 192.168.10.1-192.168.10.40 mask 255.255.255.128

=======================================

Is something missing???

I tested with CISCO VPN Client version 4 & 5 but no luck.

ASA can ping the ACS 4.0 box and vice-versa...

same account on ACS is used to authenticated ssh session for ASA without any problems

[Marwan ALshawi]

can u post the whole config please

[singhsaju]

Check out this link and match your config:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008080f2d1.shtml

[Amin Shaikh]

Thanks

Is there a way to retrieve group password define on ASA in Remote-Access VPN config ( it appears in * )

[singhsaju]

try copying the config to tftp server and then read.

[Amin Shaikh]

Thanks

Remote-Access using ACS 4.0 is working Great.

How would I restrict a group on ACS to be authenticated only for VPN