Hello everyone configured on my router after days i see log, 393563: Sep 10 06:44:22.375: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=a.b.c.d, prot=50, spi=0x8280(33408), srcaddr=e,f,g,h, input interface=Tunne...
Forum Posts
Hello community,Starting from 5.1.17 version, secure client responds with all-zeroes NT-response during IKEv2 EAP-MSCHAP authentication, which causes authentication failure. User and peer-challenge are good though:(snippet from freeradius log)(19) ms...
For our IPsec connection, our site uses policy-based IPsec, while the remote site uses route-based IPsec.When I changed our site from policy-based to route-based, the router’s tunnel interface went up and the connection was encrypted, but the count o...
It is no doubt just me, but no matter how fast I try to click on the "Connect to:" dialog box, AnyConnect finishes connecting to its default before I can choose the group that I want. I know that if I were fast enough, that group would then become th...
I am migrating a remote location ASA firewall and the migration suppose to start in couple of days. But now site has a situation where the ASA (5505) is completely down and we have a situation where we have to configure the new FTD and make it work.S...
Resolved! Route based VPN to Azure with BGP
I've been trying to setup a VPN tunnel between a FTD and Azure, but I am having some issues where one BGP neighbor is stuck in Idle/Connecting.I don't have any access to the Azure side. That part of the configuration is done by my custumer. Here is t...
Hello, I have a strange issue with a new RA VPN setup on a FTD 1010 running version 7.7. When trying to connect, we dont get any response at all and the connection times out after a while. I set up a packet capture with trace on the outside interface...
Hi All,I am in the middle of setting up Secure Client VPN with our FTDs using Microsoft Azure SAML authentication. This is all working ok. I am now looking to configure our ACP to filter traffic based on RAVPN SAML user identity. I have set this up b...
In a policy-based IPsec redundant configuration, if Router 1 fails, an IPsec SA inconsistency occurs between Router 2 and the remote VPN device, preventing communication from resuming. Therefore, we have automated the execution of the clear command v...
Trying to VPN for work. It was working fine before yesterday. Continue to get the following error message: AnyConnect Secure Mobility Client can't be installed on this disk. New version 3.1.07021 of the Cisco AnyConnect Secure Mobility Client is alre...
Resolved! When Route-Based IPsec SAs Expire
For an IPsec SA established via route-based IPsec, if traffic ceases on the standby router, does the SA get deleted when its lifetime (86,400 seconds) expires?Please let me know if there are any other conditions or timer values that trigger deletion....
Hi there, I use Cisco AnyConnect Secure Mobility Client V4.9.00086 on Windows 10. My Connection to the company vpn is somehow unstable and AnyConnect has to initiate a reconnect multiple times a day. Normally it is no problem to reconnect automatical...
Resolved! Download VPN Client from FTD
I have configured RAVPN and I am trying to access the outside of the firewall to download the VPN client. I put in the url setup to access to outside interface of the firewall but can't get any reply. I am pretty sure I have everthing configured as r...
Good afternoon,We are experiencing massive and persistent anti-replay errors:%IPSEC-3-REPLAY_ERROR: IPSec SA receives anti-replay error, DP Handle 11, src_addr 192.168.46.5, dest_addr 192.168.46.3, SPI 0x96ddd296 QFP:0.0 Thread:002 TS:000236450936231...
I had to rekey my SSL cert for Secure Client in FMC. I've had to update the SSL cert for Secure Client for years now but this time when I did it and tried to VPN on a iPhone, it doesnt recognize the CA certificate. It says its from an not trusted sou...
