W2K-Build-In Client VPN Connection with C3620

[michael.gessner]

Hello Everbody!

Has one of you already tried to set up a VPN Connection between the Windwows 2000 IPSec-Client and a Cisco 3620 Router running IOS Ver. 12.1.5?

I do have some problems! ISAKMP is working well but the IPSec SA is not being set up!

Might be the wrong IPSec-Transform-Set ? (esp-des esp-md5-hmac).

Does anyone have a clue for me ?

Thanks!

Mike

[thomas.chen]

After reading your post it looks like you’ll need the new Windows 2000 VPN Client from Cisco. I read another post that says it should be out sometime in March. Does anyone know if the built-in client in Windows works?

[michael.gessner]

Dear Thomas!

I found a solution for the built in IPSec-Client.

With great help from Yoshua McCloud /Cisco!

If you need the config, send me your e-mail address and I can mail it to you!

Mike

[tawye]

Hi, I got this working (IPSEC DEC) on 12.1.6 without problem. Could not get it to work with L2TP at the same time though.

Is NAT being performed anywhere ? If so this will cause problems. You could try using the transform ESP-DES without any MD5-Hash.

Also check what the Windows 2000 error log shows in mmc/computer management/system tools/event viewer/system.