01-31-2006 02:03 AM
I configured my 1841 with 1841-advsecurityk9-mz.124-4.T.bin IOS.
This is a piece of config:
aaa authentication login userauthen local
aaa authentication login sdm_vpn_xauth_ml_1 local
crypto isakmp policy 1
encr 3des
hash md5
authentication pre-share
group 2
lifetime 300
!
crypto isakmp client configuration group vpnipsec
key cisco
dns xxxxx
pool ippool
!
crypto ipsec transform-set xxxxx
!
crypto dynamic-map SDM_DYNMAP_1 1
set security-association idle-time 300
set transform-set ESP-3DES-MD5
reverse-route
!
crypto map SDM_CMAP_1 client authentication list sdm_vpn_xauth_ml_1
crypto map SDM_CMAP_1 isakmp authorization list sdm_vpn_group_ml_1
crypto map SDM_CMAP_1 client configuration address respond
crypto map SDM_CMAP_1 65535 ipsec-isakmp dynamic SDM_DYNMAP_1
interface ATM0/0/0.1 point-to-point
description ConnessioneADSL
ip address 82.185.xx.xx 255.255.255.248 secondary
ip address 88.33.xx.xx 255.255.255.252
ip nat outside
ip virtual-reassembly
crypto map SDM_CMAP_1
pvc 8/35
!
The error i get via CVPN Client is
52 10:46:41.936 01/31/06 Sev=Info/4 IKE/0x63000014
RECEIVING <<< ISAKMP OAK INFO *(HASH, NOTIFY:NO_PROPOSAL_CHOSEN) from 82.185.x.x
And than Fails.
Any sugestion?
Thanks
Solved! Go to Solution.
02-06-2006 02:19 AM
hi
Can you try to establish the connection to 88.33.x.x ip instead of 88.185.x.x ip ??
We had similar kinda issues when we were trying to establish the same with the secondary ip and got resolved once we changed it towards the primary ip..
regds
02-06-2006 02:19 AM
hi
Can you try to establish the connection to 88.33.x.x ip instead of 88.185.x.x ip ??
We had similar kinda issues when we were trying to establish the same with the secondary ip and got resolved once we changed it towards the primary ip..
regds
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide