Can we use Windows XP buit-in VPN service?

[cxnoel]

Hi

I'm wondering if we can use Windows XP Professionnal built-in VPN service to connect to a Cisco 3000 VPN Concentrator?

Thanks.

[HEATH FREEL]

Yes, I have tested and it seems to work fine. You must use L2TP/IPSec

[kpong]

I have tried to use the build-in L2TP/IPsec VPN client to connect to our VPN router but unsuccessful. From the debug output, IKE Phase2, negotiation of IPsec SA parameters, is failed. it seems the setting of encryption and authentication algorithms is not match between VPN router and Window XP client.

Could you advise the transform-set setting you are using in your VPN device that can support window xp build IPsec VPN client.

Many thanks,

[HEATH FREEL]

I had trouble initially too. In the Concentrator I had to reverse the DES and 3DES entires in the default L2TP-Transport SA rule. Although XP has all the proposals set up, it does not seem to go through them all.