Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Changed my pre-shared-key, vpn doesn't work now

Hi everyone,

I recently finished setting up remote access vpn on my asa 5510.  software is v8.2.  It was working fine, I was able to connect, able to ping anything internally on our network, rdp worked, etc.  I gave the pcf file to another person in our IT department to test with me before we rolled it out to our users.  He then called me to ask for the pre-shared-key cause he wanted to set it up on his ipad.  I then realized I never made a note anywhere of what pre-shared-key I used.   

So I changed it.  Removed the old one in the cli, made a new one.  Changed the key on my vpn client, and connected.  I can connect just fine.  But, now I can't do ANYTHING internally.  Ping doesn't work, rdp, nothing.  I can't even ping the connected client from the asa.  Is there something else I need to do?  Do I need to re-do everything because changing it broke encryption or something? 

Please help, thanks.

Everyone's tags (2)
1 ACCEPTED SOLUTION

Accepted Solutions

Re: Changed my pre-shared-key, vpn doesn't work now

Try to redo the only the tunnel group configuration.
And the it should be fine

Sent from Cisco Technical Support iPad App

6 REPLIES
Super Bronze

Changed my pre-shared-key, vpn doesn't work now

Hi,

I dont see why changing the PSK in the configuration and in the PCF would affect what is allowed through the VPN connection. Its a pretty common problem sometimes when configuring L2L VPN that you are either sent the wrong PSK or your misstype it and have to change it in the configuration. This has never caused problems for me.

Perhaps something else than the PSK was also changed during this? Have you gone through the configurations for anything else that would have changed from the original setup?

If the PSK is lost again, remember that you can view the PSK in the ASA configuration

You can use this command

more system:running-config

It will show the running configuration and reveal the actual PSK used in the VPN configuration.

- Jouni

New Member

Changed my pre-shared-key, vpn doesn't work now

As far as I know nothing else changed.  I'm contemplating at this point just totally redoing it.  I can't find the problem. 

New Member

Re: Changed my pre-shared-key, vpn doesn't work now

Hi,

If you have a backup config you can compare it otherwise maybe there were some click problems with asdm changing policies... This s very common... If you still has issues you can let us know to check the problem and troubleshoot

Regards,

Sent from Cisco Technical Support iPhone App

Re: Changed my pre-shared-key, vpn doesn't work now

Try to redo the only the tunnel group configuration.
And the it should be fine

Sent from Cisco Technical Support iPad App

New Member

Re: Changed my pre-shared-key, vpn doesn't work now

Thanks, redoing it worked.

Re: Changed my pre-shared-key, vpn doesn't work now

Good to hear that it worked :)

Sent from Cisco Technical Support iPad App

691
Views
0
Helpful
6
Replies