I have an ASA 5510 box with software version 7.2(1) which I am trying to get to work with the built-in VPN client on Mac OS X 10.4.x I have the ASA is set up to the point that client machines using the Cisco client can VPN in properly with everything working, and the Apple client can seemingly connect properly. When connected via the apple client, however, the network is not accessible. Both the ASA with logging set to the debug level and the apple VPN log show a good connection. The apple client receives the addresses of our internal DNS servers properly, and a netstat -rn shows the 10.x destinations (our inside network) being routed over ppp0-the VPN connection. All this looks good-but no traffic flows. If, for example, I try to ping a computer inside the network, I get no response. The ASA log only shows a string of errors like the following:
3 Dec 07 2006 08:58:24 713042 IKE Initiator unable to find policy: Intf inside, Src: 10.9.1.59, Dst: 10.8.1.2
where 10.8.1.2 is the address assigned to the VPN client, and 10.9.1.59 is a computer inside the network that I know responds to pings. I know this error is described as being "probably timing related" and "likely to correct itself", but in this case it seems to be denying me access to the network. As mentioned before, the Cisco client works fine. How can I correct this, other than using the Cisco client? There are a number of reasons why I would rather use the Apple client. Thanks!
