The reply from the VPN Concentrator is not getting to the Client, and the Client is retransmitting the connection request. The problem is usually an Access Control List (ACL) or routing issue.
Verify that the Internet Security Association and Key Management Protocol (ISAKMP) port -- User Datagram Protocol (UDP) 500 -- is not blocked by an ACL, and verify that routing to the workstation from the VPN Concentrator is correct.
If you are using IP Security (IPSec) over UDP or IPSEC over Transport Control Protocol (TCP), make sure those settings have been turned on for both the Client and Concentrator.
You can configure the Concentrator to use IPSec over UDP and IPSec over TCP at the same time. The VPN Client can use either one, but only one at a time. It must manually select which one it is going to use.
To configure IPSec over TCP, select Configuration > System > Tunneling Protocols > IPSec > NAT Transparency. Make sure that IPSec over TCP option is checked.
To configure IPSec over UDP, select Configuration > User Management > Groups > Group Name > Client Config. Make sure that IPSec over UDP option is checked.
For further configuration information, refer to the these documents:
I am having an issue on 3850 running 16.9.5 which is loosing sgacl information
User authenticates to the Switch and the SGACL information is downloaded
IPv4 Role-based permissions default:
IPv4 Role-based permissions from group 6:Gues...
Hi, I have an IPSEC site to site VPN between to Cisco ASA 5505 firewalls. I have managed to get the VPN tunnel to establish, however, I seem to be unable to get any traffic to flow between the sites.Network details are as follows: Site A:Network ID: ...
Objective:- To combine configurations of two separate (2.3) ISE deployment into a (2.7) new deployment.- To refresh the old deployments (2 existing deployment)Overview:There are two separate deployments, and the new deployment must have both of the config...
Join us live on Tuesday, July 14 (and on demand after) to learn what impacts COVID-19 has had on the information security landscape from one of the people living that fight.
We'll take your questions live during the show and after, so post them belo...