Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

client not connecting to VPN on 871w

I've configured a VPN server on my 871w using IPSec over UDP. I've done this using the SDM. When I try to open a connection using the latest client (5.0), I get these messages in the log:

Cisco Systems VPN Client Version

Copyright (C) 1998-2007 Cisco Systems, Inc. All Rights Reserved.

Client Type(s): Windows, WinNT

Running on: 6.0.6000

Config file directory: C:\Program Files\Cisco Systems\VPN Client\

1 15:17:54.811 08/26/07 Sev=Warning/2 IKE/0xE300009B

Invalid SPI size (PayloadNotify:116)

2 15:17:54.811 08/26/07 Sev=Warning/3 IKE/0xA3000058

Received malformed message or negotiation no longer active (message id: 0x00000000)

The only answers I can get so far from my research is that:

1) The group name/password are wrong, which I know is not possible.

2) I need to forward (UDP) ports 500 and 4500 on the 871w firewall.

If it's the port forwarding I need, how can I forward these ports for a network range, instead of just one static host IP? Thanks in advance.