IPSec NAT-T and IPSec LAN-to-LAN problem

[al-johnston]

I have a Cisco 3005 which has been used to run PPTP connections w/MIcrosoft's VPN client for company employees who are on the road. We also have several small offices that connect via IPSec LAN-to-LAN. Now I have to setup a remote site that is sitting behind a NAT firewall. I have been trying to setup IPSec NAT Transparency to run with the Cisco VPN client, but the same error keeps coming up:

"Xauth required but selected Proposal does not support xauth,

Check priorities of ike xauth proposals in ike proposal list."

When I try to change the IKE proposal list priorities to upgrade an XAUTH proposal, it causes all kinds of problems with the IPSec LAN-to-LAN connections.

Does the problem lie with the two types of IPSec connections I am trying to run? Any suggestions or solutions on how to solve this problem?

[drolemc]

Go to Configuration > System > Tunneling Protocols > IPSec > IKE proposals. Once there, select the Active proposal used by Group and check if you are using XAUTH. To change the config, click the modify button and choose "Preshared Keys (XAUTH)" under Authentication mode.