cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
381
Views
0
Helpful
1
Replies

Gateway to Gateway using RV042

djb031560
Level 1
Level 1

I have a third-party vendor initiating an ipsec VPN connection to my RV042 firewall router using static IP (I have a class C range of IP's from my ISP). The VPN connection fails at Phase 1 with a MM_NO_STATE - PHASE 1 MISMATCH. We have gone through my setup and all the parameters are the same - Using IKE PS with AES 256\SHA1\Group 5 on both Phase 1 and Phase 2, disabled PFS, same encryption key, and enabled AH Encryption using SHA1. All other parameters are unchecked in advanced settings.

I have tried both Client to Gateway and Gateway to Gateway with the same results. They are using telnet to generate interesting traffic to a public static IP on my side (not my gateway) that I have one-to-one natted to a private IP on my workstation. The above MM_NO_STATE error is from their side and my logs read that the message has been received from them to us  but no connection has been authorized with policy=PSK

My vendor is convinced that I have something wrong in my setup and has basically dumped it in my lap to correct. So any help is appreciated.

1 Reply 1

 

Hi , 

 Look into below url for settings .what is other end device ASA/ Same RV042 firewall router 

IPSec Setup

http://sbkb.cisco.com/CiscoSB/Loginr.aspx?login=1&pid=2&app=search&vw=1&articleid=624

 

HTH

Sany

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: