08-26-2021 03:16 PM
RA VPN Phase 1error using ASA5550 and Cisco VPN Client 5.7.440
I can't seem to get past the error 412 “The remote peer is no longer responding”. This message is from the Cisco VPN client log. I can see the VPN ACL on the outside hit count increase so I know that the client is reaching the ASA. But it not talking back. The ASA is in the Single, Router mode to support VPN. I believe that the config is correct at least to my knowledge. I would be most appreciative, if someone would be kind as to find the issue that escape me.
I've added the config . but removed the cert information and most Network objects for the purpose of brevity.
Thanks
Steve
Solved! Go to Solution.
08-27-2021 05:20 AM
The issue was missing a NAT (outside,outside) DMZ and Transform-set issue (debugging revealed error All SA proposals found unacceptable and Warning: Ignoring IKE SA (src) without VM bit set). I hope that this will help someone.
Thanks Sheraz for your suggestion, please mark this as solved.
08-27-2021 01:05 AM
you configuration look to be fine. here is the link the same error is been discussed and proposed a solution too. have a look at it.
08-27-2021 05:20 AM
The issue was missing a NAT (outside,outside) DMZ and Transform-set issue (debugging revealed error All SA proposals found unacceptable and Warning: Ignoring IKE SA (src) without VM bit set). I hope that this will help someone.
Thanks Sheraz for your suggestion, please mark this as solved.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide