Easy VPN on ASA prompting error log

[flipper_03]

We are migrating Easy VPN config from 3905 router to ASA5545. We are using ASA Version 9.2(2)4. We created wizard IPsec(IKEv1 Remote Access VPN Wizard). we finish the wizard and test our tactical Kit but unfortunately testing failed. There's an error prompt from Group=EZVPN, Username = tactical, IP=120.28.6.228, Hardware Client connection rejected! Network Extension Mode is not allowed for this group!

old setup: Internet >> 3905 Router >> 3750X switch >> end users

New setup: Internet >> ASA5545 >> 3905 Router >> 3750X switch >> end users

Can someone enlightened me on the error promt?

Thanks,

Ren

[Marius Gunnerud]

Have you enabled Network Extention Mode (NEM)?

[no] vpnclient mode {client-mode | network-extension-mode}

--

Please remember to select a correct answer and rate helpfull posts

[flipper_03]

i haven't enable NEM yet. no vpnclient command in CLI of ASA5545..

[Marius Gunnerud]

notice that the "no" is in brackets, this indicates that his is an option for the command and is used to remove it.  So the command you should use to enable it is: vpnclient mode network-extension-mode

Add the "no" keyword infront of that command to remove it.

--

Please remember to select a correct answer and rate helpful posts

[corette8761]

Thanks for this coment, very helpfull for me !