Hi,
let'see if someone can help.
I'm trying to setup a VPN from my 1941 router to my corporate Sonicwall firewall which is set up to allow remote connections and which is managed by our corporate it-stuff.
Till now I've been using SHREW software with a specific profile using XAUTH and preshared key.
I basically replicated the SHREW profile on the easy vpn remote (same group, preshared key, phase1 and phase 2 proposals and so on). I did the set up using DVTI.
When debugging the connection from cisco router to sonicwall I can see that PHASE 1 completes, but then i get this error :
deleting SA reason "No reason" state (I) CONF_ADDR (peer X.X.X.X)
ISAKMP: (1264):deleting node -1160479369 error FALSE reason "Informational (in) state 1"
IPSEC(ipsec_get_crypto_session_id):
Invalid Payload Id
I think (just guessing) that my easyvpn remote is trying to request an ip address to the sonicwall which it doesn't provide.
I'm saying that, beacuse on my SHREW profile we do have fixed ip addresses specified.
Any idea?
If that is the problem and i cannot modify the firewall configuration, is there a way to avoid easy vpn to ask for an ip address and use one specified?
Thanks
Nicola
