cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
424
Views
0
Helpful
1
Replies

Multiple vpns

pkrekelberg
Level 1
Level 1

I've got a customer that has multiple VPN's terminating on the 1721. They all work ok. Now they have to create a VPN to another site but this time, they have to us the vpn client on the desktop. The the vpn will terminate on a pix.

I've tested the configuration by installing vpn client (4.0.2D) on a notebook and establishing the connection from our office network. All services works well, but when I put my notebook on the clients network and can establish the vpn but I can't attach to any device on the remote network.

When i ping a device on the remote network the router pumps out the following error.

%CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=203.222.133.33, prot=50, spi=0x121E2A03(303966723), srcaddr=203.222.132.82

Thanks

Paul

1 Reply 1

msdesai
Level 1
Level 1

Hi Paul

In your case using NAT-T will resolve the problem with multiple VPN's

Please refer to below links:

http://www.cisco.com/warp/customer/707/ios-ipsec-nat-vpnclient.html

http://www.cisco.com/warp/customer/110/ezvpn_pix_svr_rtr_client.html

HTH,

MD