01-25-2007 06:36 AM - edited 02-21-2020 02:49 PM
Hi everyone,
this is the problem:
on a router i have configured both lan-to-lan VPN tunnels (GRE and IPSec) and remote-access (software VPN Client).
i use a public loopback address as the endpoint of the GRE tunnels and therefore i use the commmand "crypto map MAP local-address LoopbackX"
the problem is that first i configured the router for VPN client and it worked just fine, and now after i configured the IPSec tunnels (which are working now) i can not connect anymore with the vpn client. i get the Xauth window, i fill up the credentials and then it just says "Not Conected"
where should i look more? i did a debug cry isakmp and debug cry ipsec and it seems that something happens in the isakmp negotiations because i don't have any ipsec message.
Thanks in advance,
01-25-2007 11:05 AM
Well, two things that would help is if you have before and after configurations you can compare, and before and after logfiles you can compare.
But to take a total and complete shot in the dark, if the RAs were using transport mode, look and see whether the OS dropped the "crypto ipsec transform-set test_trans mode transport" statement on you if you altered the other transform-set statement. On the ASA it does so without any warning, and that will cause it to fail after phase 1.
01-31-2007 03:07 AM
Thank you b.julin, but ot seems that it only needed a reload.
the config was ok, but it didn't worked until i restarted.
Nice one huh? :)
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide