Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

problem wthi VPN encryption

Hi,

I have a cisco router 2800, and i want to stablish an vpn encrypted connection with an ASA 5520 (property of a client of my own company)but i can't do it.

I have checked the configurations and the debugs, but I do not see where the mistake can be.

I attach the configuration and the debug gathered in c2800.

Thanks and regards.

6 REPLIES

Re: problem wthi VPN encryption

show full config....

Re: problem wthi VPN encryption

Check the transform set configuration, both sides should be indentical..

*Jul 10 16:44:03.589: ISAKMP:(0:1:SW:1): hash verification failed for -1273054243!

Community Member

Re: problem wthi VPN encryption

The transform-set is equal in both sides, I am sure enough of it.

Which can be the meaning and the reason of this line in the debug? Don't you see anything that could be important?

Thanks and regards.

Community Member

Re: problem wthi VPN encryption

I have continued checking the connection vpn and I have seen that the behavior is different if the traffic it generates by the ASA or by the c2800.

I attach the debug with the results of initiating the traffic from c2800.

at
Community Member

Re: problem wthi VPN encryption

hi,

check the traffic which you want to encrypt, should be the same on both sides. Also take a look that you do not nat this traffic (asa side) !

look at this example :

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00805e8c80.shtml

regards

alex

Re: problem wthi VPN encryption

local_proxy= 0.0.0.0/0.0.0.0/0/0 (type=4),

remote_proxy= 0.0.0.0/0.0.0.0/0/0 (type=4),

what is your crypto ACL on both sides?

125
Views
0
Helpful
6
Replies
CreatePlease to create content