cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
362
Views
0
Helpful
2
Replies

Cannot Connect to VPN via Cisco VPN Client

Rick Morris
Level 6
Level 6

Here is my config.

aaa authentication login default local group tacacs+

aaa authorization console

aaa authorization config-commands

aaa authorization exec default local group tacacs+

aaa authorization network MONROE-IT local

!

crypto isakmp policy 10

encr 3des

authentication pre-share

group 2

crypto isakmp client configuration address-pool local MONROEIT

crypto isakmp xauth timeout 60

!

crypto isakmp client configuration group MONROE-IT

key <pre-share key>

dns 10.1.0.121

domain lzb.hq

pool MONROEIT

acl 101

!

!

crypto ipsec transform-set transform-1 esp-3des esp-sha-hmac

!

crypto dynamic-map MONROE-IT 1

set transform-set transform-1

reverse-route

!

crypto map MONROE-IT client authentication list default

crypto map MONROE-IT isakmp authorization list MONROE-IT

crypto map MONROE-IT client configuration address respond

crypto map MONROE-IT 1 ipsec-isakmp dynamic MONROE-IT

!

interface FastEthernet0/0

ip address 12.XX.XX.3 255.255.255.128

duplex auto

speed auto

!

interface FastEthernet0/1

no ip address

ip flow ingress

duplex auto

speed auto

!

interface FastEthernet0/1.100

encapsulation dot1Q 100

ip address 10.1.0.10 255.255.240.0

no ip redirects

ip virtual-reassembly

!

router eigrp 555

network 10.1.0.0 0.0.15.255

network 10.251.1.10 0.0.0.0

no auto-summary

!

ip local pool MONROEIT 10.1.10.1 10.1.10.6

ip forward-protocol nd

ip route 0.0.0.0 0.0.0.0 FastEthernet 0/0

ip http server

ip http authentication local

ip http secure-server

ip http timeout-policy idle 600 life 86400 requests 10000

!

access-list 101 permit ip 10.1.10.0 0.0.0.255 any

I try to connect and the client says the remote end did not respond.

1 Accepted Solution

Accepted Solutions

celiocarreto
Level 1
Level 1

Try this:

interface FastEthernet0/0

ip address 12.XX.XX.3 255.255.255.128

crypto map MONROE-IT

Regards, Celio

View solution in original post

2 Replies 2

celiocarreto
Level 1
Level 1

Try this:

interface FastEthernet0/0

ip address 12.XX.XX.3 255.255.255.128

crypto map MONROE-IT

Regards, Celio

THANK YOU!!!

I spent all week last week looking at this issue and it never dawned on me to add this line.

Thanks,

Rick

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card