Dear It cisco 2811 Router and On client End its Cisco VPN Client Software and some other clients are using vpnc in Ubuntu.
I have Created Users As follows.
aaa authorization network ABC local
crypto isakmp policy 10
encr 3des
authentication pre-share
group 2
lifetime 28800
ip local pool ABC-POOL 192.168.1.200
crypto isakmp client configuration group ABC
key abc
pool ABC-POOL
save-password
crypto isakmp profile ABC-CM
match identity group ABC
isakmp authorization list ABC
client configuration address respond
crypto dynamic-map DYNMAP 1
set transform-set VPNTRANSFORM
reverse-route
crypto ipsec transform-set VPNTRANSFORM esp-3des esp-sha-hmac
crypto map CLIENTMAP isakmp authorization list ABC
crypto map CLIENTMAP client configuration address respond
crypto map CLIENTMAP 10 ipsec-isakmp dynamic DYNMAP
Now With These Settings Clients gets connected, but sometime clients dont Disconnect their Session and shutdown their pc, due to which Seesion is not ended in Router.
when i usse show crypto isakmp peer
Subject User is till Active
and then i use
show ip local pool command
his ip is also in used and as mentioned above in local ip pool i have given him single IP.
So at the same time he tried to connect he fials because his session is still active in router.
and i recieve following error
deleting SA reason "Fail to allocate ip address" state (R) MM_NO_STATE
When i cleir his session he successfully connects.
Please advice
Jawad
