cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
258
Views
0
Helpful
1
Replies

Problems with Easy VPN Server

UNIKAPERUGIA
Level 1
Level 1

I configured my 1841 with 1841-advsecurityk9-mz.124-4.T.bin IOS.

This is a piece of config:

aaa authentication login userauthen local

aaa authentication login sdm_vpn_xauth_ml_1 local

crypto isakmp policy 1

encr 3des

hash md5

authentication pre-share

group 2

lifetime 300

!

crypto isakmp client configuration group vpnipsec

key cisco

dns xxxxx

pool ippool

!

crypto ipsec transform-set xxxxx

!

crypto dynamic-map SDM_DYNMAP_1 1

set security-association idle-time 300

set transform-set ESP-3DES-MD5

reverse-route

!

crypto map SDM_CMAP_1 client authentication list sdm_vpn_xauth_ml_1

crypto map SDM_CMAP_1 isakmp authorization list sdm_vpn_group_ml_1

crypto map SDM_CMAP_1 client configuration address respond

crypto map SDM_CMAP_1 65535 ipsec-isakmp dynamic SDM_DYNMAP_1

interface ATM0/0/0.1 point-to-point

description ConnessioneADSL

ip address 82.185.xx.xx 255.255.255.248 secondary

ip address 88.33.xx.xx 255.255.255.252

ip nat outside

ip virtual-reassembly

crypto map SDM_CMAP_1

pvc 8/35

!

The error i get via CVPN Client is

52 10:46:41.936 01/31/06 Sev=Info/4 IKE/0x63000014

RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:NO_PROPOSAL_CHOSEN) from 82.185.x.x

And than Fails.

Any sugestion?

Thanks

1 Accepted Solution

Accepted Solutions

spremkumar
Level 9
Level 9

hi

Can you try to establish the connection to 88.33.x.x ip instead of 88.185.x.x ip ??

We had similar kinda issues when we were trying to establish the same with the secondary ip and got resolved once we changed it towards the primary ip..

regds

View solution in original post

1 Reply 1

spremkumar
Level 9
Level 9

hi

Can you try to establish the connection to 88.33.x.x ip instead of 88.185.x.x ip ??

We had similar kinda issues when we were trying to establish the same with the secondary ip and got resolved once we changed it towards the primary ip..

regds