VPN on Cisco ASA 5508

[cknox1]

Hi Guys

I am running into some issues activating a VPN on my cisco asa 5508, when trying to add the below command:

"crypto ikev2 enable outside"

I get the following errors:

ERROR: Failed to open "udp/localized/2/500"
ERROR: Error opening IKE port 500 on Interface outside

Any help please

[小Q]

How did you solve this problem?

[Marvin Rhoads]

It usually occurs when an existing connection through the firewall is already using udp/500.

We often see that when there is a device internal to the network also running IPsec VPN through the firewall. PAT will use the original udp port as long as it's not already allocated.