VPN connection problem

[trietgiang]

Hi everyone,

I connect a Draytek router to Cisco router using VDPN. I have run "debug crypto isakmp" on our Cisco router. The SA was authenticated but the connection wasn't established. The show crypto session said the connection was DOWN-NEGOTIATING.

Do you know why it doesn't establish the connection?

Thank you very much.

Triet

[#2]

Make sure that crypto map which allows the interesting traffic is configured right and applied to the appropriate outgoing interface to bring the tunnel up.

[trietgiang]

Thanks Pengke11, I can confirm the settings are correct.

[purohit_810]

Do you have port open 4500 i.e. for NAT-T??

Thanks,

Dharmesh

[trietgiang]

Dharmesh, thank you for your reply.

No I don't have port 4500 open. Why does it need to be opened?

Best regards,

Triet

[trietgiang]

Yes I already have port NAT-T open, just didn't realise that "non500-isakmp" is actually 4500.

[trietgiang]

Hi again,

I have finally had the VPN working between a Draytek and a Cisco router. Both on dynamic IP. I wrote down as a blog, check it out if you need to:

http://trietgiang.blogspot.com/2008/04/dialin-vpn-from-draytek-to-cisco.html