Re: L2TP/IPSEC not working in windows XP & 7

niirouter · ‎03-26-2011

Hi support,

i have configure l2tp/ipsec vpn on cisco ASA 5520 and also configure windows 7 client but its getting error

Error in ASA debug log

debug crypto isakmp 7

Mar 26 07:44:28 [IKEv1]: IP = 59.161.130.13, IKE_DECODE RECEIVED Message (msgid=0) with payloads : HDR + SA (1) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 384
Mar 26 07:44:28 [IKEv1 DEBUG]: IP = 59.161.130.13, processing SA payload
Mar 26 07:44:28 [IKEv1]: Phase 1 failure: Mismatched attribute types for class Group Description: Rcv'd: Unknown Cfg'd: Group 2
Mar 26 07:44:28 [IKEv1]: Phase 1 failure: Mismatched attribute types for class Group Description: Rcv'd: Unknown Cfg'd: Group 2
Mar 26 07:44:28 [IKEv1]: IP = 59.161.130.13, IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + NOTIFY (11) + NONE (0) total length : 252
Mar 26 07:44:28 [IKEv1 DEBUG]: IP = 59.161.130.13, All SA proposals found unacceptable
Mar 26 07:44:28 [IKEv1]: IP = 59.161.130.13, Error processing payload: Payload ID: 1
Mar 26 07:44:28 [IKEv1 DEBUG]: IP = 59.161.130.13, IKE MM Responder FSM error history (struct &0x72032068) <state>, <event>: MM_DONE, EV_ERROR-->MM_START, EV_RCV_MSG-->MM_START, EV_START_MM-->MM_START, EV_START_MM-->MM_START, EV_START_MM-->MM_START, EV_START_MM-->MM_START, EV_START_MM-->MM_START, EV_START_MM
Mar 26 07:44:28 [IKEv1 DEBUG]: IP = 59.161.130.13, IKE SA MM:91d78e5d terminating: flags 0x01000002, refcnt 0, tuncnt 0
Mar 26 07:44:28 [IKEv1 DEBUG]: IP = 59.161.130.13, sending delete/delete with reason message

regards,

Sashi Thakur

Ph;-91-9555280954

niirouter · ‎03-26-2011

also attach windows 7 error.

andamani · ‎03-26-2011

Hi,

Please change the crypto isakmp policy setting of group to group 2.

i.e.

crypto isakmp policy 10

authentication pre-share

encryption 3des

hash sha

group 2

lifetime 86400 .

Hope this helps.

Regards,
Anisha

P.S.: please mark this thread as resolved if you feel your query is resolved. Do rate helpful posts.