C867VAE IPSec by VPN client software

[h.dam]

Hi everyone,

I'm trying to configure the C867VAE as a Hub VPN router and use VPN client as Shrew soft or Cisco QuickVPN on PC to mount IPSec tunnel between.

At present, I've Ezvpn remote sites working with this Hub site. So I add a profile for VPN client on Hub router.

The VPN tunnel didn't work, no IKE phase1, phase2.

So I'd like to check if someone has succeed.

Does C867 supports the VPN client ?

Thanks.

Regards,

hdam

[h.dam]

Hi,

I've run the DEBUG and got the following output:

..........

*Jan 25 16:05:59.540: ISAKMP:(0):: peer matches *none* of the profiles
*Jan 25 16:05:59.540: ISAKMP:(0): processing vendor id payload
*Jan 25 16:05:59.540: ISAKMP:(0): vendor ID seems Unity/DPD but major 221 mismatch
*Jan 25 16:05:59.540: ISAKMP:(0): processing vendor id payload
*Jan 25 16:05:59.540: ISAKMP:(0): vendor ID seems Unity/DPD but major 168 mismatch
*Jan 25 16:05:59.540: ISAKMP:(0): processing vendor id payload
*Jan 25 16:05:59.540: ISAKMP:(0): vendor ID seems Unity/DPD but major 123 mismatch
*Jan 25 16:05:59.540: ISAKMP:(0): vendor ID is NAT-T v2
*Jan 25 16:05:59.540: ISAKMP:(0): processing vendor id payload
*Jan 25 16:05:59.540: ISAKMP:(0): vendor ID seems Unity/DPD but major 157 mismatch
*Jan 25 16:05:59.540: ISAKMP:(0): vendor ID is NAT-T v3
*Jan 25 16:05:59.540: ISAKMP:(0): processing vendor id payload
*Jan 25 16:05:59.540: ISAKMP:(0): vendor ID seems Unity/DPD but major 69 mismatch
*Jan 25 16:05:59.540: ISAKMP (0): vendor ID is NAT-T RFC 3947
*Jan 25 16:05:59.540: ISAKMP:(0): processing vendor id payload
*Jan 25 16:05:59.540: ISAKMP:(0): vendor ID seems Unity/DPD but major 237 mismatch
*Jan 25 16:05:59.540: ISAKMP:(0): processing vendor id payload
*Jan 25 16:05:59.540: ISAKMP:(0): processing IKE frag vendor id payload
*Jan 25 16:05:59.540: ISAKMP:(0):Support for IKE Fragmentation not enabled
*Jan 25 16:05:59.540: ISAKMP:(0): processing vendor id payload
*Jan 25 16:05:59.540: ISAKMP:(0): vendor ID seems Unity/DPD but major 83 mismatch
*Jan 25 16:05:59.540: ISAKMP:(0): processing vendor id payload

................

I don't know what those mismatches mean. I did the tests by using SHREW client to connect to Hub site (C867VAE). I ran tests via ADSL box or 3G network, but the errors are the same.

[h.dam]

Hi,

Both Quickvpn or Shrew soft didn't work on my my C867VAE configured as Ezvpn server.

I tried today with Cisco VPN client v5.0. It works quite well.

But I'm still interested in the above message if s/o can explain.

Thanks.

Regards,

hdam