Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

VPN Client issue

HI, I just moved my VPN users from the concentrator to the ASA, Everything is woring fine but I'm getting complaint from some users that they can get in (authenticates) but can't get to any network resources. Here's the log on their VPN client:

Cisco Systems VPN Client Version 5.0.02.0090

Copyright (C) 1998-2007 Cisco Systems, Inc. All Rights Reserved.

Client Type(s): Windows, WinNT

Running on: 5.1.2600 Service Pack 2

Config file directory: C:\Program Files\Cisco Systems\VPN Client\

1 18:48:57.093 03/26/08 Sev=Warning/2 CVPND/0xE3400013

AddRoute failed to add a route: code 87

Destination 192.168.1.255

Netmask 255.255.255.255

Gateway 172.25.1.1

Interface 172.25.1.31

2 18:48:57.093 03/26/08 Sev=Warning/2 CM/0xA3100024

Unable to add route. Network: c0a801ff, Netmask: ffffffff, Interface: ac19011f, Gateway: ac190101.

3 18:50:14.171 03/26/08 Sev=Warning/2 IKE/0xA3000067

Received an IPC message during invalid state (IKE_MAIN:507)

I couldn't replicate this issue in my lab or at home. Has anyone seen this issue before and if so what's the ficx for it?

4 REPLIES

Re: VPN Client issue

send us the asa config to look at.

Franco

New Member

Re: VPN Client issue

Here you go:

Re: VPN Client issue

the resources you are trying to access, are they on 192.168.1.0 subnet?

New Member

Re: VPN Client issue

No, they are trying to access our internal network of 172.20.x.x or 172.21.x.x. The RAS network in 172.25.x.x and the 192.168.x.x network is their home network. Again this is not happening to everyone so I suspecting it may be their home router. However they have no issues if they connect to the old VPN Concentrator.

155
Views
0
Helpful
4
Replies