How is the Nat configuration on the Cisco device? do you have port forwarding or a one to one translation?
For an IPSec VPN tunnel you will need to make sure the ports UDP 500 and 4500 are open, normally the SSL clients will work on port 443 TCP and...
Julio, That is the best action plan now. I hope you don't find any PAT process on the path so this can work as you want it. Regards,Luis RamirezVPN TeamCisco TAC Support Engineer
Julio, As per the debugs looks like your pre-shared-key is not matching what the remote end is sending. please double check the key and let me know. You can use the command "more system:running | be tunnel-group" to check the key on your ASA. Also I ...
Hi Julio, Nat-t was created to encapsulte the ESP packets (encrypted packets) when they go through PAT. ESP is a portless protocol therefore you don't have a way to PAT this traffic, Also if this feature is not enable on the other end the VPN tunnel...
Hi Julio, In this particular case you can be sure that Nat-t should be enable as your device is behind Nat. Also in regards to the log you are seeing you are correct the log is just information and it doesn't represent the reason why the tunnel is n...
