Error: Unable to Establish VPN

[pvadiga123]

I have installed Cisco VPN Client on Windows Vista platform. Whenever I try coonecting, it accepts username and password and seems like it tries and then gives message "The VPN client is unable to establish a connection" and "unable to establish VPN". I am unable to resolve this error.

[Federico Coto Fajardo]

Hi,

If it gets passed the user/pass authentication it means that phase 1 is established.

Most likely there's a problem with phase 2.

Are you connecting to an ASA or router?

Are you able to connect from other location/computer?

Federico.

[pvadiga123]

Thanks Federico. You are right. It seems like it is passing stage 1 and not moving any further. I am using a linksys router and wireless network. I have not tried it on other internet connections.

Vish Adiga

[Federico Coto Fajardo]

You can check the logs on the client itself (if enable logs).

Also... if you have access to the VPN server (ASA/router) we can check the configuration for phase 2 and probably check some debugs like ''debug cry ipsec''

Federico.

[pvadiga123]

I don't know how to check logs on the client. I am not very familiar with the technical terms. This is the second time I am installing this kind of application.

I am not familiar with configuration for phase 2 and debug either. I did not see any files in the Cisco folder to edit. Is there any document I can refer to or could you direct me to the files or processes so that I can give a try?

Vish Adiga

[pvadiga123]

I located the event log file. See if this is of any help to

figure out.

Vish Adiga

[Federico Coto Fajardo]

Initially I though you were using the IPsec client but it seems is the AnyConnect client.

You can try to connect using the browser: https://PUBLIC_IP

Instead of launching the AnyConnect connection, try using the browser and see if you can connect.

Make sure there's no firewall on your PC or proxy settings enabled on the browser that might be preventing the connection from completing.

Federico.

[Ajit Singh]

Hi,

I went through the file attched and it seems that the Anyconnect client is unable verify the correct certificate for Authenication.To further identify the issue, kinldy provide the following information:

- running configuration from ASA

- Anyconnect event logs in .txt format

To collect event logs, go to start>run>eventvwr>Cisco anyconnect VPN client

delete all logs

try reconnecting VPN

right click on Cisco anyconnect VPN client under event viewer

Save logs as .txt file.

[pvadiga123]

I had to get IT help to figue this out. The antivirus settings had to be changed and some ports had to be opened up. It took about 2 and a half hours. Thanks you for all of your help.

Vish Adiga