I believe with connect auto and the username/password specified you should not be specifying "xauth userid mode..." at all. Do a no on that command and try it again.

Try adding SHA in addition to MD5 in your crypto map. Create a transform set for ESP-3DES-SHA and add it to your dynamic-map statement.

authentication mode is specified as pre-share so I don't think that is it. I have seen this problem as well using client 4.8. It doesn't seem to happen with lower versions but I am not 100% sure that the client is the problem. I am working on the exa...

I know of a few companies doing just such a thing to save $$. You will need to run GRE through the IPSEC tunnels to support routing protocols and any other multicast traffic you may have a need to transmit, even though one end is a router. IPSEC oper...