cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
504
Views
0
Helpful
2
Replies

IPsec remote access VPN anyconnect router 1721

viorelspinu
Level 1
Level 1

Hello everybody,

I am trying to configure an IPsec between an old router 1721, IOS 12.4(25a) and a PC (windows 10).

 

R1721:

Ethernet0 IP -> 10.10.10.60
FastEthernet IP -> 192.168.5.230/24
PC Windows 10 with anyconnect installed:

IP -> 192.168.5.240/24

 

Router VPN config:

aaa new-model
aaa authentication login users local
aaa authorization network groups local

username test password test

crypto isakmp policy 10
encryption 3des
hash md5
authentication pre-share
group 2

ip local pool vpnpool 10.10.10.1 10.10.10.50
access-list 101 permit ip 10.0.0.0 0.255.255.255 any

crypto isakmp client configuration group sales
key cisco
pool vpnpool
domain cisco.com
dns 10.10.10.100
wins 10.10.10.100
include-local-lan
firewall are-u-there
max-logins 1
acl 101

crypto ipsec transform-set TSET esp-3des esp-md5-hmac

crypto dynamic-map d-map 1
set transform-set TSET
reverse-route

crypto map MYMAP 1 ipsec-isakmp dynamic d-map
crypto map MYMAP client configuration address respond
crypto map MYMAP isakmp authorization list groups
crypto map MYMAP client authentication list users

int fa0
crypto map MYMAP

 

 

Ping is successful in both directions.

When I connect with AnyConnect Secure Mobility Client 4.2,  I get this message:

"Could not connect to server. Please verify Internet connectivity and server address."

 

What am I missing?

 

 

2 Replies 2

viorelspinu
Level 1
Level 1

I suspect that it is the IKE version. My router knows IKEv1 and my AnyConnect client knows IKEv2.

Not yet a solution!