02-15-2012 06:54 PM - edited 03-07-2019 04:58 AM
I have configured many ipsec/vpn tunnel using the same vpn concentrator and many remote routers and I have not had any problems but there is a remote connection that does stablish a ipsec/vpn connection.
I am attaching the router configuration and show debug thar appear during the fail connection.
Can some body tell me what is the fail?
The ios of router that is working wel is: c2801-adventerprisek9-mz.124-19b.bin
The ios of router that is not working is: c2801-adventerprisek9-mz.123-14.T7.bin
Is the problem located at ios version?
Waitng your sooner answer.
Attn.
Roger Majo
02-15-2012 08:56 PM
My suggestion is changing the acl to a numbered acl and check if IKE is enabled with "crypto isakmp enable".
crypto policy config is missing "authentication pre-share" command.
Hope this helps
Eugen
02-16-2012 06:12 AM
Hi Eugen,
I have enable crypto isakmp enable and change extended acl to numbered acl.
Authentication pre-shared is configured at crypto policyu config.
The interface fast 0/1 is up and we are making ping to a remote site but the problem persist.
See attached files and snapshoot.
Waiting your sooner answer.
Question: is it convenient that a user connect a pc to the switch connected to the router and make ping instead making ping from thye router?
Attn.
Roger Majo
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide