XP VPN Client

[wraights]

I forgot what the commands are that you need to have in the firewall for the newest vpn client (3.1) to work. I know that you have to put these in:

vpngroup xpclient address-pool clientpool

vpngroup xpclient idle-time 1800

vpngroup xpclient password password

There must be something else that I am missing though, because I can't get it to work on my 501. My other VPN clients (for W2K and 98) are working fine but I can't get this right. Your help is greatly appreciated!

[wraights]

I figured it out...here are the missing commands:

isakmp policy 15 authentication pre-share

isakmp policy 15 encryption des

isakmp policy 15 hash md5

isakmp policy 15 group 2

isakmp policy 15 lifetime 3600

[jpoulos]

what version of IOS are you using?

Thanks,

JPoulo

[wraights]

I am using 6.1(1).

[mike.scaggs]

access-list vpn permit ip 10.1.1.0 255.255.255.0 192.168.1.0 255.255.255.0

ip local pool vpnpool 192.168.1.1-192.168.1.254

nat (inside) 0 access-list vpn

floodguard enable

sysopt connection permit-ipsec

crypto ipsec transform-set myset esp-3des esp-md5-hmac

crypto dynamic-map dynmap 10 set transform-set myset

crypto map mymap 10 ipsec-isakmp dynamic dynmap

crypto map mymap interface outside

isakmp enable outside

isakmp identity address

isakmp policy 10 authentication pre-share

isakmp policy 10 encryption 3des

isakmp policy 10 hash md5

isakmp policy 10 group 2

isakmp policy 10 lifetime 86400

vpngroup xpclient address-pool vpnpool

vpngroup xpclient dns-server 10.1.1.1

vpngroup xpclient wins-server 10.1.1.1

vpngroup xpclient default-domain emike.net

vpngroup xpclient idle-time 1800

vpngroup xpclient password cisco

Mike