02-12-2011 07:09 AM
Hello,
In my test lab I have a CISCO VPN3002 that I would like to connect automatically C1841 after a power down.
Unfortunately , when I do the setup , it works and connect directly (3 GREEN LED's).
But after a power down , when I look back in the config , I have :
GROUP = 3000client Password=xxxxxxxx Verify=xxxxxxxx
USER = cisco Password= Verify=
Both Password and Verify are empty ?
What do I forget ?, I have saved the configuration and still , it does not want to keep the User Password
Any help is welcome.
Best Regards,
Didier
02-12-2011 07:22 AM
Didier,
Depending on the configuration there should be an option to ''allow the remote cilent to save password''
On the IOS router:
crypto isakmp client configuration group GROUP-NAME
save-password
Federico.
02-12-2011 10:15 AM
Hello Federico, You are again right !!! But I do not understand how the VPN ROUTER can influence the VPN CLIENT , when he is not yet connected ?!? I compared both files in the VPN3002 and with SAVE-PASSWORD set in the CISCO 1841, the setting in the VPN3002 is :saveusrsecret=1when I remove the SAVE-PASSWORD in the CISCO 1841 it is :
saveusrsecret=2Strange , but it works
BEFORE : [ike_peer 1] peer=81.83.201.32 name= saveusrsecret=2 grpname=3000client grpsecret=cio123 usrname=cisco secunitenable=1 pri=1 ikerequiredpeerdn= ikepeerdnchkenabled=2 [session] sessionLimit=10 webvpnSessionLimit=1 [auto_update] AutoUpdateEnabled=1 RetryLimit=20 RetryInterval=300 ClientLimit=10 ClientInterval=180 [group_match] Enabled=2 GroupFromOu=1 DefaultAction=2 DefaultGroup=0 [xml] enable=1 [ctcp] enable=2 [ctcp_port 10000] port=1 [notify] discevents=2 [fips] FipsCertsRequired=2 [stc] stc=2 [End] AFTER : [ike_peer 1] peer=81.83.201.32 name= saveusrsecret=1 grpname=3000client grpsecret=cisco123 usrname=cisco usrsecret=cisco secunitenable=2 pri=1 ikerequiredpeerdn= ikepeerdnchkenabled=2 [session] sessionLimit=10 webvpnSessionLimit=1 [auto_update] AutoUpdateEnabled=1 RetryLimit=20 RetryInterval=300 ClientLimit=10 ClientInterval=180 [group_match] Enabled=2 GroupFromOu=1 DefaultAction=2 DefaultGroup=0 [xml] enable=1 [ctcp] enable=2 [ctcp_port 10000] port=1 [notify] discevents=2 [fips] FipsCertsRequired=2 [stc] stc=2 [End]
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide