Remote VPN Clients connected through ASA do not authenticate with Microsoft Active Directory and Split tunneling does not work

[TCC_2]

Core issue

These debug messages appear when you enable the debug crypto isakmp  command on ASA during the remote access clients authentication.

IKEv1]: Group = ani, Username = , IP = x.x.x.x, Removing peer
from peer table failed, no match!

[IKEv1]: Group = ani, Username = , IP = x.x.x.x, Error: Unable
to remove PeerTblEntry

Resolution

For a workaround, complete these steps:

1. Check the configuration for these commands:
   
   
   • tunnel-group ani general-attributes
     
     
   • address-pool ani-ra
     
     
   • authentication-server-group verdi LOCAL
     
     
   • default-group-policy ani
     
     
2. Make sure that Split tunnel and relevant access-lists are configured properly.

Refer to PIX/ASA 7.x: Enhanced Spoke-to-Client VPN Configuration for information on how to configure a spoke-to-client VPN tunnel on the PIX Firewall

Third Party Software

Windows Active Directory

VPN Tunnel End Points

ASA

Client

Features & Tasks

Authentication, Authorization, Accounting (AAA)

VPN Protocols

Split tunneling