Branch Office: Cisco 1751 configured with EzVPN Client, ADSL-/PPPoE-Connect to the ISP and dynamic ip address; Main Office: Cisco VPN Concentrator 3030 and static ip address
The configuration is nearly exact the same as in the configuration example from cco - http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00800945cf.shtml - with only one great difference: we have no static ip address on the outside interface because of the ADSL-/PPPoE-Connction to the ISP with a dialer interface which negotiats a dynamic ip address on every new connection. This happens once a day because the ISP terminats the connection every 24 hours (this is normal for some isp's to prevent address reservation). And this is the problem: the vpn setup works perfect if you power on the router, but if the connection is terminated by the ISP and the dialer interface negotiats an new dynamic ip address the ezvpn client fails to establish the vpn connection. A "debug crypto ipsec client ezvpn" shows only:
EZVPN: Current State: IDLE
EZVPN: Event: TUNNEL_HAS PUBLIC_IP_ADD
EZVPN: No state change
You can clear all interfaces but nothing happens to bring up the vpn connection. The only way to reconnect is to reload the router. After that the connection is up for 24 hours and so on. We have tried several IOS versions - 12.2(4)YA, 12.2(15)T...
DocumentationCode download linksGoalRequirementLimitationsSupported ISR and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and UCS-E Blades:Step by Step ConfigurationConfigure one of the connectivity options to access the Cisco IMC from the n...
Firepower Threat Defense (NGFWv) on UCS E-series - Transparent Mode in HA
DocumentationCode download linksGoalRequirementLimitationsSupported ISR and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and UCS-E Blades:Step by Step ConfigurationCo...
I am currently unable to specify "crypto keyring" command when configuring VPN connection on my cisco 2901 router.
The following licenses have been activated on my router :