topic Re: VPN Issues in VPN

VPN Issues

JPDisney01 — Fri, 21 Feb 2020 23:27:56 GMT

I've got a Cisco 1800 ISR with ADvIPServ running 12.4(11) IOS.

The problem im having is with connecting a Remote users (on Windows XP) to the Easy VPN Server on this unit.

I've configured the Ez-VPN Svr with basics and im using the name/groupname for authentication and placing the PSK in the diallin settings.

But im left with MM_NO_STATE with attempted connections.

I've run debug on isakmp and this seems to hint at key problems but i cant see how??

Any help would be appreciated...

dominic.caron — Mon, 07 Jan 2008 16:20:32 GMT

Hi,

This message indicate that your Phase 1 did not complete.

Can you post your output.

JPDisney01 — Mon, 07 Jan 2008 16:23:38 GMT

Have attached the file, i understand that this message implies that phase1 has failed, i just cant see why...

dominic.caron — Mon, 07 Jan 2008 16:45:31 GMT

can you post your isakmp config...

profile/policy/client config

JPDisney01 — Mon, 07 Jan 2008 16:48:34 GMT

Dominic,

Can you think of anything that could cause this?

Thanks

dominic.caron — Mon, 07 Jan 2008 16:57:22 GMT

Probably something in the crypto isakmp client configuration or in the profiles

Question...do you really need the profiles ?

JPDisney01 — Mon, 07 Jan 2008 17:07:42 GMT

This is the first time i've set one of these up and have suffered the SDM initiation ;O) so im guessing these are all things setup by the wizard?

Well there isn't much to configure on the client (MS or Cisco)

dominic.caron — Mon, 07 Jan 2008 18:53:51 GMT

There isn't much to configure on the client (MS or Cisco) like you said

You need profile if your have willcard Lan to Lan VPN or DMVPN and/or multiple Ez group.

If you only what to setup the EZvpn, avoid profile.

JPDisney01 — Tue, 15 Jan 2008 09:54:19 GMT

Resolved this. AS is oft the case, a simple over sight on my part. Thanks to those that posted a response.