Cisco SA520 VPN Connections

Do they require additional licensing, or are they included with the device? Does it make a difference whether Hardware VPN to another Device or Software VPN to remote user?

Thanks for the follow up Steven. Can you go into more detail regarding this? Is there a white paper or data sheet that a partner can look at to come up with the correct solution?

Similar Messages

Cisco ASA 5505 Remote Access IP/Sec VPN Connectivity Issues

We have a Cisco ASA that we use just for Remote Access VPN. It uses UDP and was working fine for about 2 months. Recently clients have had intermittent issues when connecting from home. The following message is display by the Cisco VPN Client :
"Secure VPN connection terminated locally by the Client. Reason 412: The remote peer is no longer responding"
Upon looking at a client side packet capture, I notice that no response is being given back to the client for the udp packets sent to the ASA on udp 500. If I login to the ASA from the LAN and send a single ping FROM the ASA, then the client can connect without issue. I don't understand the significance of the needed outbound ping since ping is not used by the client to test if the ASA is alive.
Once again this is a remote access udp ip/sec VPN. I set most of it up with the VPN wizard and then backed up the config. The issue started happening at least a month after setup (maybe two) and I restored to the saved config just in-case, but the issue remains.
Any insight would be greatly appreciated.
I'm using IOS 831 and have tried 821 and 823 as one thread that I found recommended downgraded to 821.
Thanks much,
Justin

Javier,
I logged into the ASA last time the VPN went down. I issued the following commands:
debug crypto isakmp 190
debug crypto ipsec 190
capture outside-cap interface outside match udp any any
I then used a remote access tool to access the client and tried to connect. I got absolutely nothing from debugging. So I issued the following command:
show capture outside | include 500
and also got nothing. So I issued the following command:
ping 4.2.2.2
Upon which my normal deug messaged began to showup, so I issued the show capture outside command again and recieved the expected output below:
   1: 15:44:18.570160 802.1Q vlan#2 P0 REMOTE_IP.1151 > OFFICE_IP.500: udp 868
   2: 15:44:18.579269 802.1Q vlan#2 P0 OFFICE_IP.500 > REMOTE_IP.1151: udp 444
   3: 15:44:18.703866 802.1Q vlan#2 P0 REMOTE_IP.1151 > OFFICE_IP.500: udp 172
   4: 15:44:18.706567 802.1Q vlan#2 P0 OFFICE_IP.500 > REMOTE_IP.1151: udp 76
   5: 15:44:18.831499 802.1Q vlan#2 P0 REMOTE_IP.1151 > OFFICE_IP.500: udp 92
   6: 15:44:19.024061 802.1Q vlan#2 P0 OFFICE_IP.500 > REMOTE_IP.1151: udp 76
   7: 15:44:19.111963 802.1Q vlan#2 P0 REMOTE_IP.1151 > OFFICE_IP.500: udp 60
   8: 15:44:19.517185 802.1Q vlan#2 P0 REMOTE_IP.1151 > OFFICE_IP.500: udp 204
   9: 15:44:19.521350 802.1Q vlan#2 P0 REMOTE_IP.1151 > OFFICE_IP.500: udp 92
10: 15:44:19.522723 802.1Q vlan#2 P0 OFFICE_IP.500 > REMOTE_IP.1151: udp 252
11: 15:44:42.121957 802.1Q vlan#2 P0 REMOTE_IP.1155 > OFFICE_IP.500: udp 868
12: 15:44:42.130822 802.1Q vlan#2 P0 OFFICE_IP.500 > REMOTE_IP.1155: udp 444
13: 15:44:42.228397 802.1Q vlan#2 P0 REMOTE_IP.1155 > OFFICE_IP.500: udp 172
14: 15:44:42.231036 802.1Q vlan#2 P0 OFFICE_IP.500 > REMOTE_IP.1155: udp 76
15: 15:44:42.329557 802.1Q vlan#2 P0 REMOTE_IP.1155 > OFFICE_IP.500: udp 92
16: 15:44:42.521091 802.1Q vlan#2 P0 OFFICE_IP.500 > REMOTE_IP.1155: udp 76
17: 15:44:42.610167 802.1Q vlan#2 P0 REMOTE_IP.1155 > OFFICE_IP.500: udp 60
18: 15:44:42.649258 802.1Q vlan#2 P0 REMOTE_IP.1155 > OFFICE_IP.500: udp 204
19: 15:44:42.653790 802.1Q vlan#2 P0 OFFICE_IP.500 > REMOTE_IP.1155: udp 252
20: 15:44:42.789342 802.1Q vlan#2 P0 REMOTE_IP.1155 > OFFICE_IP.500: udp 1036
21: 15:44:42.792119 802.1Q vlan#2 P0 OFFICE_IP.500 > REMOTE_IP.1155: udp 92
22: 15:44:42.800846 802.1Q vlan#2 P0 OFFICE_IP.500 > REMOTE_IP.1155: udp 188
23: 15:44:42.892120 802.1Q vlan#2 P0 REMOTE_IP.1155 > OFFICE_IP.500: udp 60
34: 15:44:54.446220 802.1Q vlan#2 P0 REMOTE_IP.1155 > OFFICE_IP.500: udp 92
35: 15:44:54.447913 802.1Q vlan#2 P0 OFFICE_IP.500 > REMOTE_IP.1155: udp 92
70: 15:45:01.825000 802.1Q vlan#2 P0 OFFICE_IP.10000 > REMOTE_IP.10000: udp 100
174: 15:45:03.417764 802.1Q vlan#2 P0 OFFICE_IP.10000 > REMOTE_IP.10000: udp 500
377: 15:45:07.881500 802.1Q vlan#2 P0 REMOTE_IP.10000 > OFFICE_IP.10000: udp 100    1: 15:44:18.570160 802.1Q vlan#2 P0 REMOTE_IP.1151 > OFFICE_IP.500: udp 868
   2: 15:44:18.579269 802.1Q vlan#2 P0 OFFICE_IP.500 > REMOTE_IP.1151: udp 444
   3: 15:44:18.703866 802.1Q vlan#2 P0 REMOTE_IP.1151 > OFFICE_IP.500: udp 172
   4: 15:44:18.706567 802.1Q vlan#2 P0 OFFICE_IP.500 > REMOTE_IP.1151: udp 76
   5: 15:44:18.831499 802.1Q vlan#2 P0 REMOTE_IP.1151 > OFFICE_IP.500: udp 92
   6: 15:44:19.024061 802.1Q vlan#2 P0 OFFICE_IP.500 > REMOTE_IP.1151: udp 76
   7: 15:44:19.111963 802.1Q vlan#2 P0 REMOTE_IP.1151 > OFFICE_IP.500: udp 60
   8: 15:44:19.517185 802.1Q vlan#2 P0 REMOTE_IP.1151 > OFFICE_IP.500: udp 204
   9: 15:44:19.521350 802.1Q vlan#2 P0 REMOTE_IP.1151 > OFFICE_IP.500: udp 92
10: 15:44:19.522723 802.1Q vlan#2 P0 OFFICE_IP.500 > REMOTE_IP.1151: udp 252
11: 15:44:42.121957 802.1Q vlan#2 P0 REMOTE_IP.1155 > OFFICE_IP.500: udp 868
12: 15:44:42.130822 802.1Q vlan#2 P0 OFFICE_IP.500 > REMOTE_IP.1155: udp 444
13: 15:44:42.228397 802.1Q vlan#2 P0 REMOTE_IP.1155 > OFFICE_IP.500: udp 172
14: 15:44:42.231036 802.1Q vlan#2 P0 OFFICE_IP.500 > REMOTE_IP.1155: udp 76
15: 15:44:42.329557 802.1Q vlan#2 P0 REMOTE_IP.1155 > OFFICE_IP.500: udp 92
16: 15:44:42.521091 802.1Q vlan#2 P0 OFFICE_IP.500 > REMOTE_IP.1155: udp 76
17: 15:44:42.610167 802.1Q vlan#2 P0 REMOTE_IP.1155 > OFFICE_IP.500: udp 60
18: 15:44:42.649258 802.1Q vlan#2 P0 REMOTE_IP.1155 > OFFICE_IP.500: udp 204
19: 15:44:42.653790 802.1Q vlan#2 P0 OFFICE_IP.500 > REMOTE_IP.1155: udp 252
20: 15:44:42.789342 802.1Q vlan#2 P0 REMOTE_IP.1155 > OFFICE_IP.500: udp 1036
21: 15:44:42.792119 802.1Q vlan#2 P0 OFFICE_IP.500 > REMOTE_IP.1155: udp 92
22: 15:44:42.800846 802.1Q vlan#2 P0 OFFICE_IP.500 > REMOTE_IP.1155: udp 188
23: 15:44:42.892120 802.1Q vlan#2 P0 REMOTE_IP.1155 > OFFICE_IP.500: udp 60
34: 15:44:54.446220 802.1Q vlan#2 P0 REMOTE_IP.1155 > OFFICE_IP.500: udp 92
35: 15:44:54.447913 802.1Q vlan#2 P0 OFFICE_IP.500 > REMOTE_IP.1155: udp 92
70: 15:45:01.825000 802.1Q vlan#2 P0 OFFICE_IP.10000 > REMOTE_IP.10000: udp 100
174: 15:45:03.417764 802.1Q vlan#2 P0 OFFICE_IP.10000 > REMOTE_IP.10000: udp 500
377: 15:45:07.881500 802.1Q vlan#2 P0 REMOTE_IP.10000 > OFFICE_IP.10000: udp 100
It would seem as if no traffic reached the ASA until some outbound traffic to an arbitrary public IP. In this case I sent an echo request to a public DNS server. It seems almost like a state-table issue although I don't know how ICMP ties in.
Once again, any insight would be greatly appreciated.
Thanks,
Justin

How to Configure an Cisco 5505 for PPTP VPN connectivity

I currently have a Cisco ASA 5505(ASA Version 8.2(1), and ASDM gui version 6.2) and a Windows 2008 R2 server with one NIC card. Currently the router is connected to the interent sucessfully using the 'outside' interface(devices connected to the 'inside' interface have access to the internet and are assigned IP addresses via DHCP on the Windows 2008 Server which is also connected to the 'inside' interface) When connected with a client on the inside interface I can establish a VPN connection with the W2008 server, however when I try to connect through the internet I cannot. I have tried researching this on the internet, but have not had much luck. I know it has something to do with pptp port and allowing gre, but I am not familiar enough with configuring Cisco devices or the language they use, to configure this router. I feel as though I am missing something small but very critical. Any help or feedback you can provide regarding this issue is most appreicated, thank you.
*Edit: I have attached a network diagram of what I am trying to accomplish, and I have also attached a dump of the current running-config.

Hi,
Below is the link to the admin guide for the RV042. Chapter 9 covers the configuration of site to site VPN’s and begins on page 123.
http://www.cisco.com/en/US/docs/routers/csbr/rv0xx/administration/guide/rv0xx_AG_78-19576.pdf
If you need further assistance please feel free to contact Cisco Small Business for help in configuring and troubleshooting your VPN.
Thank you,
Jason Nickle

Cisco VPN connection drops on airport extreme on OS X 10.6.7

I recently bought Airport Extreme and I must say the wifi coverage and strength is amazing compared to the DLink or Belkin routers that I tried. THe whole thing setup like in 2 minutes. Love it.
Now the problem. I use CISCO VPN provided by work a lot as I work from home frequently. I have found that the VPN connection drops like in 2-5 minutes of connecting. I looked through the several threads and apple response " to use NAT-T in CISCO VPN preferences". Only thing is that I did not see any NAT setting options in preferences and also I am unable to edit anything in the CISCO VPN pref (probably things locked out by our IT who provided the vpn software).
I also tried someone's suggestion that I switch to manual radio channels in the airport utility config - but that didn't work either.
Any suggestions?
I am on OS X 10.6.7 and CISCO VPN CLIENT 4.9.0.1.0180
URGENT HELP NEEDED

airport is off how can i turn it on?
Click on the AirPort icon in the OS X menu bar. Select "Turn Wi-Fi On" or "Turn AirPort On" as appropriate.
how can i reinstall mac os x 10.6.7?
I would suggest that you start with the Snow Leopard installation disk. You can then update to 10.6.7 from Software Update.

Cisco VPN connects but then no services are available.

Where to start:
I have a situation where by my remote office, 5 machines, connects to head office via Cisco VPN client.
Recently we have been able to make a vpn connection but once connected we have no services available like connecting to servers, internet, network drives, voip phone or even pinging any of the services. We get an IP address on the virtual network adaptor created by vpn connection but then nothing.
After a hec of amount of troubleshooting I swapped out our router, Draytek Vigor 2820, for another 2820. Same problem. I then took my Draytek Vigor from home, that does work, to the office and it works perfectly fine using the 2600 router in the office. I then tried a dlink router and that worked in office as well. So it has something to do with the 2820 router. It has been working fine for months and now recently, having changed nothing on it, it has stopped working for us with Cisco vpn connection. Does anyone have any clues as to why and what I could do on the router to resolve issue or could it be something on the cisco side that needs changing? I have already updated firmware to latest version on router.
Any help / advice would be great appreciated.
Regards,
Ashley

Can you please share the configuration as there might be something that change after the upgrade that might cause the issue.

Cisco UC560 Not Clearing Static Routes When VPN Connections Drop

We have a Cisco UC560 (UC560-FXO-K9) running "Cisco IOS Software, UC500 Software (UC500-ADVIPSERVICESK9-M),
Version 15.1(2)T2, RELEASE SOFTWARE (fc1)" The issue is when we have end users connecting with the Cisco VPN Client to this device sometimes we are unable to connect to any devices on our LAN or sometimes we can't connect to the LAN on the other end of our site-to-site VPN. The one symptom I've observed when this happens is that old VPN sessions that have disconnected appear to leave static routes from the user's outside IP at their home to an IP on our LAN to a Virtual-Access interface. When this starts to happen, I restart the firewall to clear out the stale static routes and the problem is fixed, for a while at least. Below is the current state where we have the site-to-site VPN connected to our branch office and 2 user's connected with Cisco VPN clients. Below that is the static route table which has 5 total Virtual-Access interface routes (one is an extra route for a user currently connected so that their outside IP is in the static route table with 2 inside IP's associated.) Is there a way to fix the cleanup of VPN connections when they terminate?
#sh crypto isakmp peers
Peer: <branch office outside IP> Port: 500 Local: <firewall's outside IP>
Phase1 id: <branch office outside IP>
Peer: <users's outside IP #1> Port: 50420 Local: <firewall's outside IP>
Phase1 id: EZVPN_GRP_437
Peer: <user's outside IP #2> Port: 49345 Local: <firewall's outside IP>
Phase1 id: EZVPN_GRP_437
Bugsy#sh ip ro st
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
       + - replicated route, % - next hop override
Gateway of last resort is <next hop of ISP for firewall> to network 0.0.0.0
S*    0.0.0.0/0 [1/0] via <next hop of ISP for firewall>
      10.0.0.0/8 is variably subnetted, 12 subnets, 3 masks
S        10.0.0.153/32 [1/0] via <non-connected IP of VPN user>, Virtual-Access2
S        10.0.0.155/32 [1/0] via <non-connected IP of VPN user>, Virtual-Access2
S        10.0.0.156/32 [1/0] via <user's outside IP #2>, Virtual-Access3
S        10.0.0.158/32 [1/0] via <user's outside IP #1>, Virtual-Access3
S        10.0.0.159/32 [1/0] via <user's outside IP #2 again>, Virtual-Access2
S        10.1.10.1/32 is directly connected, Vlan90

Hi Brian,
This sounds like you are running into the following known issue:
CSCtl03682 - EzVPN client: Several RRI routes pointing to same virtual interface
which is Dup'd to:
CSCtf39056 - RRI routes not deleted
This is fixed since 15.1(2)T4, so I would recommend upgrading to SWP 8.2 or higher. The only other way to clean up the stuck routes is to reload the router.
Thanks,
Brandon

Cisco vpn connect problem with 3g dongle

Hi,
I am trying to connect cisco vpn but every time i am getting following error while trying to connect from huawei 3g usb dongle in win8. for win7 it works fine with no issue. Also the problem is only form datacard, form lan and wireless interaface i can easily connect to vpn without any issue. Any help/idea/suggestion highly appreciated?
Cisco Systems VPN Client Version 5.0.07.0440
Copyright (C) 1998-2010 Cisco Systems, Inc. All Rights Reserved.
Client Type(s): Windows, WinNT
Running on: 6.2.9200
25     08:06:46.846 12/25/13 Sev=Info/4    CM/0x63100002
Begin connection process
26     08:06:46.848 12/25/13 Sev=Info/4    CM/0x63100004
Establish secure connection
27     08:06:46.848 12/25/13 Sev=Info/4    CM/0x63100024
Attempt connection with server "116.68.208.113"
28     08:06:46.849 12/25/13 Sev=Info/6    IKE/0x6300003B
Attempting to establish a connection with 116.68.208.113.
29     08:06:46.855 12/25/13 Sev=Info/4    IKE/0x63000001
Starting IKE Phase 1 Negotiation
30     08:06:46.858 12/25/13 Sev=Info/4    IKE/0x63000013
SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Frag), VID(Nat-T), VID(Unity)) to 116.68.208.113
31     08:06:47.145 12/25/13 Sev=Info/4    IPSEC/0x63700008
IPSec driver successfully started
32     08:06:47.145 12/25/13 Sev=Info/4    IPSEC/0x63700014
Deleted all keys
33     08:06:52.144 12/25/13 Sev=Info/4    IKE/0x63000021
Retransmitting last packet!
34     08:06:52.144 12/25/13 Sev=Info/4    IKE/0x63000013
SENDING >>> ISAKMP OAK AG (Retransmission) to 116.68.208.113
35     08:06:57.144 12/25/13 Sev=Info/4    IKE/0x63000021
Retransmitting last packet!
36     08:06:57.144 12/25/13 Sev=Info/4    IKE/0x63000013
SENDING >>> ISAKMP OAK AG (Retransmission) to 116.68.208.113
37     08:07:02.145 12/25/13 Sev=Info/4    IKE/0x63000021
Retransmitting last packet!
38     08:07:02.145 12/25/13 Sev=Info/4    IKE/0x63000013
SENDING >>> ISAKMP OAK AG (Retransmission) to 116.68.208.113
39     08:07:07.145 12/25/13 Sev=Info/4    IKE/0x63000017
Marking IKE SA for deletion (I_Cookie=97205EA6A12866F0 R_Cookie=0000000000000000) reason = DEL_REASON_PEER_NOT_RESPONDING
40     08:07:07.645 12/25/13 Sev=Info/4    IKE/0x6300004B
Discarding IKE SA negotiation (I_Cookie=97205EA6A12866F0 R_Cookie=0000000000000000) reason = DEL_REASON_PEER_NOT_RESPONDING
41     08:07:07.645 12/25/13 Sev=Info/4    CM/0x63100014
Unable to establish Phase 1 SA with server "116.68.208.113" because of "DEL_REASON_PEER_NOT_RESPONDING"
42     08:07:07.645 12/25/13 Sev=Info/5    CM/0x63100025
Initializing CVPNDrv
43     08:07:07.645 12/25/13 Sev=Info/6    CM/0x63100046
Set tunnel established flag in registry to 0.
44     08:07:07.645 12/25/13 Sev=Info/4    IKE/0x63000001
IKE received signal to terminate VPN connection
45     08:07:08.146 12/25/13 Sev=Info/4    IPSEC/0x63700014
Deleted all keys
46     08:07:08.146 12/25/13 Sev=Info/4    IPSEC/0x63700014
Deleted all keys
47     08:07:08.146 12/25/13 Sev=Info/4    IPSEC/0x63700014
Deleted all keys
48     08:07:08.146 12/25/13 Sev=Info/4    IPSEC/0x6370000A
IPSec driver successfully stopped
49     08:19:59.202 12/25/13 Sev=Info/4    CM/0x63100002
Begin connection process
50     08:19:59.202 12/25/13 Sev=Info/4    CM/0x63100004
Establish secure connection
51     08:19:59.202 12/25/13 Sev=Info/4    CM/0x63100024
Attempt connection with server "116.68.208.113"
52     08:19:59.202 12/25/13 Sev=Info/6    IKE/0x6300003B
Attempting to establish a connection with 116.68.208.113.
53     08:19:59.202 12/25/13 Sev=Info/4    IKE/0x63000001
Starting IKE Phase 1 Negotiation
54     08:19:59.218 12/25/13 Sev=Info/4    IKE/0x63000013
SENDING >>> ISAKMP OAK AG (SA, KE, NON, ID, VID(Xauth), VID(dpd), VID(Frag), VID(Nat-T), VID(Unity)) to 116.68.208.113
55     08:19:59.656 12/25/13 Sev=Info/4    IPSEC/0x63700008
IPSec driver successfully started
56     08:19:59.656 12/25/13 Sev=Info/4    IPSEC/0x63700014
Deleted all keys
57     08:20:04.656 12/25/13 Sev=Info/4    IKE/0x63000021
Retransmitting last packet!
58     08:20:04.656 12/25/13 Sev=Info/4    IKE/0x63000013
SENDING >>> ISAKMP OAK AG (Retransmission) to 116.68.208.113
59     08:20:09.656 12/25/13 Sev=Info/4    IKE/0x63000021
Retransmitting last packet!
60     08:20:09.656 12/25/13 Sev=Info/4    IKE/0x63000013
SENDING >>> ISAKMP OAK AG (Retransmission) to 116.68.208.113
61     08:20:14.656 12/25/13 Sev=Info/4    IKE/0x63000021
Retransmitting last packet!
62     08:20:14.656 12/25/13 Sev=Info/4    IKE/0x63000013
SENDING >>> ISAKMP OAK AG (Retransmission) to 116.68.208.113
63     08:20:19.656 12/25/13 Sev=Info/4    IKE/0x63000017
Marking IKE SA for deletion (I_Cookie=46B8917FD54C64AC R_Cookie=0000000000000000) reason = DEL_REASON_PEER_NOT_RESPONDING
64     08:20:20.156 12/25/13 Sev=Info/4    IKE/0x6300004B
Discarding IKE SA negotiation (I_Cookie=46B8917FD54C64AC R_Cookie=0000000000000000) reason = DEL_REASON_PEER_NOT_RESPONDING
65     08:20:20.156 12/25/13 Sev=Info/4    CM/0x63100014
Unable to establish Phase 1 SA with server "116.68.208.113" because of "DEL_REASON_PEER_NOT_RESPONDING"
66     08:20:20.156 12/25/13 Sev=Info/5    CM/0x63100025
Initializing CVPNDrv
67     08:20:20.156 12/25/13 Sev=Info/6    CM/0x63100046
Set tunnel established flag in registry to 0.
68     08:20:20.156 12/25/13 Sev=Info/4    IKE/0x63000001
IKE received signal to terminate VPN connection
69     08:20:20.156 12/25/13 Sev=Info/4    IPSEC/0x63700014
Deleted all keys
70     08:20:20.156 12/25/13 Sev=Info/4    IPSEC/0x63700014
Deleted all keys
71     08:20:20.156 12/25/13 Sev=Info/4    IPSEC/0x63700014
Deleted all keys
72     08:20:20.156 12/25/13 Sev=Info/4    IPSEC/0x6370000A
IPSec driver successfully stopped

Hi Karsten,
Thank you for the reply !!! & best wishes for the new year 2014.
The problem is like this, if i select datacard connection type to NDIS it works but it doesnt work when i select RAS(modem) connection type for 3G datacard it doesnt. (NDIS and RAS(Modem) connection types are the 2 modes currently supporetd by the datacard.). Is there any case the users are experiencing from the similar problem? and what they have done to solve the issues? And thank you for the workaroung, i have checked the shrew-soft with win7 and it was working fine but not on win8, i will check shrew-soft on win8 very soon. Also we can move to the anyconnect solution but just want to know if this can solve our problem or not? whether there will be any issues with anyconnect solution for win 8 or not? can you please confim.
Thank you

Cisco RV042 VPN unable to connect to Netgear PS FVS318

Hello,
We recently replaced one of two Netgear ProSafe VPN FVS318 with a Cisco RV042 VPN. Both Netgear were configured site-site and was working fine until one of them failed. We copied as much configuration settings from the failed Netgear PS to the RV042 but were unsuccessful in establishing a connection between the two sites.
The logs on the Cisco router shows this:
VPN Log packet from 1.1.1.1:500: received Vendor ID payload [RFC 3947]
VPN Log packet from 1.1.1.1:500: ignoring Vendor ID payload [439b59f8ba676c4c7737ae22eab8f582]
VPN Log packet from 1.1.1.1:500: ignoring Vendor ID payload [439b59f8ba676c4c7737ae22eab8f582]
VPN Log packet from 1.1.1.1:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03]
VPN Log packet from 1.1.1.1:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03]
VPN Log packet from 1.1.1.1:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n]
VPN Log packet from 1.1.1.1:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n]
VPN Log packet from 1.1.1.1:500: [Tunnel Negotiation Info] <<< Responder Received Main Mode 1st packet
VPN Log packet from 1.1.1.1:500: [Tunnel Negotiation Info] <<< Responder Received Main Mode 1st packet
VPN Log packet from 1.1.1.1:500: initial Main Mode message received on 2.2.2.2:500 but no connection has been authorized with policy=PSK
Each time we select a tunnel test connect, that last message appears with "but no connection has been authorized with policy=PSK"
*replaced actual IP with sample IP.
Any ideas why this is happening?
Thank you!

Hello,
It looks as RV042 receive phase 1 configuration from Netgear, but due to mismatch with it's phase 1 settings does not reply back.
I can't be more specific as this could be anything in phase 1 - aggressive/main mode; the WAN IP addresses, encryption or SA lifetime. As well if any of the devices is behind NAT, the option NAT traversal should be checked.
Regards,
Kremena

Cisco AnyConnect VPN app on iPhone 4s won't connect

I have successfully installed the Cisco AnyConnect VPN app on my iPad Air and can connect to my target VPN. But the same app on my iPhone 4s won't work. When I try to connect I get this message: "Connect using Cisco AnyConnect App at least once before using any other App." I'm not trying to use another app, in fact I closed all other apps. I'm using the same settings as the Air. I tried with wi-fi, turned wi-fi off, location services on and off, etc. I'm on Verizon.
Has anyone got this to work on an iPhone?
Thanks

Although I agree that this is really a question for Cisco, finding/receiving an official answer there may take a while.
This app worked fine for me until I upgraded today - June 19, 2014 - the date of the release of Version 3.0.09430. After upgrade, I get the same message. The update note says "Apple IOS Connect On Demand Considerations - To ensure proper establish of Connect On Demand VPN tunnels after updating AnyConnect, users must manually start the Any Connect app and establish a connection. If this is not done, upon the next iOS system attempt to establish a VPN tunnel, the error message 'The VPN Connection requires an application to start up' will display."
But I too have tried various interpretations of that, and still get the error above quoted by azmilt.
It appears that either:
- the upgrade is faulty
- the version itself is faulty
- the directions for a proper upgrade need clarification
So if anyone has upgraded to this version, and made it work, I think that providing a procedure would help the community.

OEL 5 - Cisco VPN connects proper, then in a few minutes times out

Issue
I installed the latest Linux Cisco VPN (e.g. on Oracle Enterprise linux)
Error
I get this-->
[user@localhost ~]$ vpnclient connect xyz
Cisco Systems VPN Client Version 4.8.01 (0640)
Copyright (C) 1998-2007 Cisco Systems, Inc. All Rights Reserved.
Client Type(s): Linux
Running on: Linux 2.6.18-164.el5xen #1 SMP Thu Sep 3 02:41:56 EDT 2009 i686
Config file directory: /etc/opt/cisco-vpnclient
Initializing the VPN connection.
Contacting the gateway at xxx.xx.xxx.xxx
Contacting the gateway at xxx.xx.xxx.xxx (balancing)
User Authentication for xyz...
Enter Username and Password.
Username [xyz]:
Password []:
Authenticating user.
Negotiating security policies.
Securing communication channel.
Your VPN connection is secure.
VPN tunnel information.
Client address: xxx.xxx.xxx.xxx
Server address: xxx.xx.xxx.xxx
Encryption: 168-bit 3-DES
Authentication: HMAC-SHA
IP Compression: None
NAT passthrough is active on port UDP 4500
Local LAN Access is disabled
Secure VPN Connection terminated locally by the Client
Reason: Remote peer is no longer responding.
Disconnecting the VPN connection.
[user@localhost ~]$
Questions
Even when I drop the OEL 5 firewall -- the remote peer will still "no longer respond"
Also, while the VPN is connected, browsers set to the proper proxy and mail do not connect and return data, etc...
Then it just does this -->
Secure VPN Connection terminated locally by the Client
Reason: Remote peer is no longer responding.
Any advise will be appreciated....
Thanks.....
Edited by: mheath on Dec 7, 2009 2:41 PM

1) Note that I do understand that external mail will not work when connected to the vpn, only internal mail
2) When the vpn is connected, the following should work and both "do not work":
a) When pointing to the proper proxy, the browser should display "external pages like google" and internal pages..
b) And, internal imap mail should work - it does not
3) on a windows machine in the same exact subnet/network vpn works fine...?
4) Also, I have had vpn working with ubuntu 9.1x just previously in the same exact subnet/network!
5) ==> Something is not letting the vpn communicate "after" it is connected on the OEL 5 server ?
Thanks...

Cisco VPN connection not reliable

I connect to my VPN, and all works fine. After a while (always different, from 15 minutes to 2 hours), the VPN connection is not usable anymore, but it is indicated by the VPN indicator on the top of the screen that it is still connected. I cannot connect to my intranet servers anymore.
Anyone with same problem? Anyway to fix it?
I remember having the same problem via VPNC when I used to use Linux a while ago, but that was fixed later on in VPNC implementation when new package was available.

I have a similar problem. In my case, after a similar period of time (some random time which can be anything from a couple of minutes to a couple of hours) the connection drops and the wifi becomes unusable until it is turned off and on. This only happens when i am at work using the cisco vpn. It doesn't happen with other wifi connections in other places. Apple have told me the problem is with cisco.

Cisco VPN Connection Problems

Hello Everyone,
We're having a problem with the Cisco VPN connection capability in Snow Leopard.
The transaction complains that our shared secret is incorrect. What I believe is happening is that certain assumptions are made about the IKE proposals and encryption etc. There doesn't appear to be a place to tailor these in the connection profile. There may be at the system level (which I'm unaware of).
Has anyone else experienced this problem?
I believe the same problem applies to the iPhone's Cisco VPN connector.
Furthermore, Cisco is not providing Snow-Leopard IPSec home-to-network clients any longer; they are promoting the AnyConnect SSL VPN instead, for which they have a BETA build available specifically for Snow Leopard.
So this reduces our options (yes, I'm working on VPNTracker).
Thank you.

It is a known limitation that you are only able to establish a single VPN connection to the same VPN server through a router doing NAT like yours.
What client exactly do you use and what settings did you define there?

Cisco vpn connection

I am tryijng to set up a cisco vpn connection.
I tried to do it manually throygh setting set up a vpn connection an by installion a config.
Always i get the message "voer de gebruikersgegevens in" what means in English enter your user contents or something.
I tried everything, setting of my Wifi before configuring
The information I filled in are:
Beschrijving: Optimix VPN
Server: 195.18.88.130
Account: my username
Password: .....
Uses cert: no
Groepsnaam: Optimixmobiel
Geheim: .....
Can somebody tell me what the problem is?
Kindly regards

I have the same problem. I configured My iPhone to connect my PIX trough VPN.
In the first time the first phrase wouldn't succeeded.
But I read this ( http://blogs.oreilly.com/iphone/2008/07/strong-passwords-can-hurt.html ) and that's now not really the problem. (to strong pw)
When I let the iPhone connect I see a popup 'Enter User Authentication' if I chose OK, its gone (I have the Dutch version)
If I see the syslog I see this: Authentication failed for user ''
it looks like the iPhone send an empty user account?
How can we fix this?
Regards,
Dennis Kortekaas
The Netherlands

Cisco SA520 Max # of users?

Greetings,
I am trying to find out the max number of users the CISCO SA520 will support?
Also I can't seem to find the part numbers for adding users to SAS 520, I currently have an SA 520 which has I believe has 10 users built in.
Could someone point me to a page with the part numbers for adding 25 or 50 users?
I am assuming that if I purchase 25 users and for the SA 520 I will end up with 35 users?
Thanks in advance.
Justin

Hi Justin,
Which type of user are you referring?
By default, the SA520 supports;
2 SSL VPN connections with a maximum of 25 with license purchase
50 IPSEC tunnels
Authenticated users (internal database) 100
Connection/user quantity 15,000
These information is found at the following;
http://www.cisco.com/en/US/partner/products/ps9932/prod_models_comparison.html
http://www.cisco.com/cisco/web/solutions/small_business/products/security/SA_500/index.html-tab-Models
-Tom

Cisco IPSEC VPN not working after upgrade to Mavericks

I have been using the Cisco IPSEC VPN for almost 2 years with no issues. When I upgraded to Mavericks this week it stopped working. When i tell it to connect it prompts for password and attempts to connect for about 30 seconds then comes back with the following message...
VPN Connection
The negotiation with the VPN server failed. Verify the server address and try reconnecting.
The address, group, shared secret, user and password are correct. Any help would be greatly appreiated.

Hry, I'm not sure if this fixes the Cisco IPSec issue, but I can vouch for it fixing the L2TP issue that occurs after tha mavericks upgrade!
I’ve got L2TP VPN working in Mavericks 10.9 and Server App 3.0.0 / 3.0.1.
It really is quite a simple fix.
Obviously, the standard caveats apply: This is a temporary, unsupported, workaround, and only a suggested idea at that. Again, this workaround is NOT supported by Apple.
Proceed with this workaround on your own equipment at your own risk. And remember the golden rule: Always backup your data!
OK so here goes… copy and paste the following into termini ONE LINE AT A TIME!
cd /tmp
curl -sO http://c5mart.co/mavericks-vpn-fix/racoon.tar.gz
tar -xzvf racoon.tar.gz
rm racoon.tar.gz
sudo chown root:wheel racoon
sudo chmod 555 racoon
if [ ! -f /usr/sbin/racoon.mavericks ]; then sudo mv /usr/sbin/racoon /usr/sbin/racoon.mavericks; fi;
sudo mv racoon /usr/sbin/racoon
sudo killall racoon
This works fine for me and I'm running a OSX Server for my entire office.
…et voilà!

Cisco SA520 VPN Connections

Similar Messages

Maybe you are looking for