cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
611
Views
0
Helpful
1
Replies

L2TP over IPsec and VPN 3030 error

mlew
Level 1
Level 1

I am configuring an iPaq H3955 running Windows PPC 2003 to connect to my VPN 3030 (ver 4.1.7c) using L2TP over IPsec. I get the PPC to complete phase 1 and 2, but I then get disconnected with the following error message (from the Event Log in the concentrator):

16498 07/20/2005 18:04:16.480 SEV=4 IKE/119 RPT=28197 10.242.4.203

Group [VPNC_Base_Group]

PHASE 1 COMPLETED

16499 07/20/2005 18:04:16.500 SEV=5 IKE/25 RPT=30494 10.242.4.203

Group [VPNC_Base_Group]

Received remote Proxy Host data in ID Payload:

Address 10.242.4.203, Protocol 17, Port 1701

16502 07/20/2005 18:04:16.500 SEV=5 IKE/24 RPT=537 10.242.4.203

Group [VPNC_Base_Group]

Received local Proxy Host data in ID Payload:

Address 10.243.1.1, Protocol 17, Port 1701

16505 07/20/2005 18:04:16.500 SEV=5 IKE/66 RPT=30484 10.242.4.203

Group [VPNC_Base_Group]

IKE Remote Peer configured for SA: ESP-L2TP-TRANSPORT

16506 07/20/2005 18:04:16.520 SEV=4 IKE/49 RPT=30655 10.242.4.203

Group [VPNC_Base_Group]

Security negotiation complete for User ()

Responder, Inbound SPI = 0x18505acc, Outbound SPI = 0x0062b600

16509 07/20/2005 18:04:16.520 SEV=4 IKE/120 RPT=30657 10.242.4.203

Group [VPNC_Base_Group]

PHASE 2 COMPLETED (msgid=f02edf9c)

16510 07/20/2005 18:04:25.530 SEV=4 L2TP/33 RPT=5 10.242.4.203

Exceeded rexmit limit of 8 to 10.242.4.203 (Ss:1, last Nr:0)

16511 07/20/2005 18:04:25.530 SEV=4 L2TP/46 RPT=5 10.242.4.203

Tunnel to peer 10.242.4.203 closed, reason: Peer no longer responding

I changed the rexmit limit to 8 (default is 4). What else shall I look at? Thanks!

1 Reply 1

umedryk
Level 5
Level 5

"Peer no longer responding" that seems to indicate that there is a timeout issue. See if you can set the PPTP 'Acknowledgement Timeout' to something in the range of 5 - 8 seconds and see if that helps. See the Concentrators Users Guide online at the following link:

http://www.cisco.com/univercd/cc/td/doc/product/vpn/vpn3000/vpn3kco/vcoug/vcoug25.pdf