Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

871W EasyVPN Issues

It's starting to feel like EasyVPN is not soo easy after all.

I'm having problems getting my 871 to connect to our ASA EasyVPN server in network-extension-mode with xauth userid mode local.When I do a 'sh crypto isa sa' I see the ISAKMP state listed as 'CONF_XAUTH'. If I do a 'sh crypto ipsec client ezvpn' I see the connection listed as  ready.

Also when I see EasyVPN connection down message, there is no user listed.

Any ideas?

Attached a debug output of 'debug crypto isakmp'

3 REPLIES
Cisco Employee

Re: 871W EasyVPN Issues

Robert,

Without further debugs/configs hard to say ... password storage or NEM not being enable on ASA side COULD be the reason.

Marcin

New Member

Re: 871W EasyVPN Issues

I think I've solved the issue by applying 'isakmp ikev1-user-authentication none' to the tunnel-group ipsec-attributes on the ASA. I will have to verify that this fixed it on Monday.

New Member

Re: 871W EasyVPN Issues

For an update, the above mentioned fix has resolved the issue without negatively affecting existing tunnels.

Robert

315
Views
0
Helpful
3
Replies
CreatePlease to create content