easy vpn connection drops

I replaced our PIX with a new asa 5505 firewall. I use this like easyvpn firewall client to connect to the PIX seat unit. VPN tunnel established without problem but after 1 to 3 minutes of the Tomb tunnel. During the replacement of the asa with the old pix, all is well. The ASA is not able to connect to the pix or won't my config? output to see the attached config.

Thomas

use:

peer conditio debug crypto [ip address of the vpn peer]

debugging cry isa 127

Debug crypto ipsec 127

Set out at the time of the issue!

Cheers.

Tags: Cisco Security

Similar Questions

  • ASA easy VPN connection problem

    Hi guys,.

    I configured easy VPN between 5510 and 5505. Every thing seems fine, however, if there is no traffic in the tunnel in the next few hours, I can not initial 5510 5505 (customer) traffic. But if I first traffice 5505, there is no problem.

    Anyone know why?

    Thank you

    Hello

    This is normal behavior, it is part of the easy vpn functionality. The 5505 will act as a remote for the 5510 vpn client. This isn't like a site to site vpn or both ends know the IP address of the remote peer, and so that each peer can initiate the connection, here the 5510 don't know on the network and 5505 IP when it will connect via the easy VPN.

    If you want the tunnel to be put in place at both ends, I would say that you are using a classic site-to-site connection as described here:

    http://www.Cisco.com/en/us/docs/security/ASA/asa80/Getting_started/ASA5505/quick/guide/SITESITE.html

    I hope this helps.

    Kind regards
    Bastien

  • Linksys Cisco VPN Client connection drops

    I have a Linksys BEFVP41 V2. I have a PC running Windows XP SP2 with customer VPN Cisco 5.0.00.0340. I have a problem when I log in the VPN client with my employer network. It seems to be ok. No problem to do the job, hit their proxy server, etc.. All of a sudden, the connection drops. It seems to 'freeze' the network. No surfing, without PuTTY. Sometimes 5 minutes after the connection or 3 hours later. I have to disconnect the VPN connection, and then reconnect. What could be the problem? My MTU is set to 1432. The Windows Firewall has exceptions for ports 10000, 4500 and 62515. I have a network in place at 172.20.x.x... not the default or typical 10.x.x.x network. Firmware is 1.01.04 on the router.


  • Drops of easy vpn due to change of address IP ISP

    I do some testing with Cisco Easy VPN between 2 IOS routers.

    The VPN server is behind a static NAT (made by a checkpoint firewall) and it has a fixed IP address.

    Simple VPN client works on a residential xDSL connection. It is behind a NAT router provided by the ISP.

    The internet router has a dynamic public IP address and it changes every 36 hours (ISP is, can not change).

    The easy vpn works great. Both devices detect NAT and enable NAT-transparency. The link appears and works well.

    The question I have, is that when changes in xDSL router's public IP address, the IPSEC link falls and can't get back online.

    It seems that the change of the public IP address prevents the client in order to re-establish the VPN.

    When I reboot the router to vpn client, VPN back upward.

    Someone has encountered this and is there a way I can avoid this problem?

    Hi Tom,

    I have reproduced this issue in my lab, and instead of charging the EzVPN client, you can simply delete the order "crypto ipsec ezvpn client YOUR_EZVPN ' outside interface and it should do."

    Now, since it is foolish to do it manually whenever it breaks down, I suggest:

    -Configured IP SLA accessibility and the tracks through the tunnel.

    -With a 'Beach' object, you can define if it breaks down or not.

    -In the case of a failure, then remove and add the command ezvpn from outside.

    -To do this, you can use the EEM.

    Please see this:

    10 IP sla monitor

    type echo protocol ipIcmpEcho 172.16.10.1 source-interface FastEthernet0/1

    monitor IP sla 10 calendar life never start-time now

    !

    track 10 rtr 10 accessibility

    !

    EzVPN_DOWN event manager applet

    syslog event model ' % FOLLOW-UP-5-STATE: 10 rtr 10 accessibility Down-> Up.

    command action 1.0 cli 'enable '.

    action 1.1 cli command "configures terminal.

    Action 1.2, command cli "f0/0 interface.

    Action 1.3 cli no command "no ipsec encryption YOUR_EZVPN ezvpn client.

    Action 1.4 cli command "crypto ipsec client ezvpn YOUR_EZVPN.

    Action 1.5 cli command "end".

    Where:

    FastEthernet0 / 1---> within the interface

    FastEthernet0 / 0---> outside interface

    172.16.10.1---> remote IP accessible by tunnel EzVPN, when operational.

    So basically, when SLA reports the failure (most likely because the tunnel is down) the router deletes the command EzVPN and again.

    HTH.

    Portu.

    Please note all useful posts

    Post edited by: Javier Portuguez

  • Cannot connect to the easy VPN server

    Hi *.

    I have a stupid problem with my easy VPN server. I took the following configuration to configure the VPN: click on

    Successfully, I can ping 192.168.99.1 but when I start AnyConnect (enter this IP address as serveraddress) on my IPhone, it first says that the server certificate is not valid (I ignore because it is self-signed..) and when I press continue it says that no link could be established.

    What can be the problem?

    It is very likely that you have a configured PAT-pool and simply use the Word key "overload" when from your external interface. In this command, you reference an ACL (or an ACL in a road map) where we need to ensure that your VPN-pool in included in the traffic using a NAT.

    --
    Don't stop once you have upgraded your network! Improve the world by lending money to low-income workers:
    http://www.Kiva.org/invitedBy/karsteni

  • Problem with VPN connection via a wireless card broadband Verizon Cisco VPN air

    I can't access any device on my network via RDP or applications via the host file - forwarded servers from my 64 bit Windows 7 laptop using wireless broadband Verizon and customer VPN Cisco 64 bit 5.0.7.290. I can connect easily via a LAN wired connection from home using the same laptop computer and client VPN and RDP.

    The VPN client connects to the server VPN (easy VPN on Cisco 2821 router) on the broadband wireless connection (I can see it in the GPMC on the router) but it will pass no data. I can't ping anything in the field, or external IP address. When I try to ping the laptop, it drops off the VPN (completed peer connection).

    The laptop is a Dell M4500 running Windows 7 Ultimate 64 bit OS. The VPN client is stated, rev 5.0.7.290. The card internal wireless broadband is a QualCom 5620 (EV-DO-HSPA) system (Gobi 2).

    What must I do to get this configuration to perform and log as does the wired connection?

    Tim Carlisle

    The Systems Manager

    Post edited by: Timothy Carlisle recently I discovered that the Cisco 64 bit client VPN running on my Dell Precision M6500 (Windows 7 64-bit OS) was able to connect properly using the WiFi on my iPhone 4S (Verizon Wireless). It will also connect when attached to the laptop via a USB cable. Once I discovered this, I was then able to do the same thing on the laptop that spawned this discussion, by attachment for Blackberry "BOLD" from the boss after the download and installation of a new Verizon Wireless Access Manager utility that has allowed to select the device (Blackberry) for installation.  I think that enabled us to bypass the wireless cards Gobi2 on two laptops and the factory installed Dell Connection Manager software which was not compatible with the Cisco VPN 64 bit client software. As much as I fear here, this new method (hotspot of Smartphone and attachment) is the way to go for us and has solved all the problems of connectivity distance for us. Thank you to all who have contributed to this discussion.   Tim Carlisle

    The Solution to the debate has been captured in this Document: -.

    https://supportforums.Cisco.com/docs/doc-18721

    We fought with the same question for quite awhile before finding that there seems to be a default setting in the Verizon Access Manager software that plays well with the Cisco Client.

    In VZAccess Manager, select Options | Preferences.  Connectivity options, the default setting for "NDIS Mode - connect manually" was chosen.  Change this option to "Modem Mode - connect manually" seems to have completely addressed the issue.  We can now connect to the WWAN, establish a Cisco VPN session and have connectivity.

  • SDM & easy VPN server problem

    I'm having a problem setting up an easy VPN server using Cisco Security

    Device Manager Version 2. 0a on a router in 1711 with IOS 12.3 (7) XR3.

    I have reset the router to the factory defects since the opening screen of SDM.

    Connect to 10.10.10.1

    User: cisco

    Password: Cisco

    Start SDM for the initial router configuration dialog box.

    Don't use CNS

    On basic configuration screen:

    Hostname set to router

    Domain: test.com

    Synchronize time with local PC

    Change the user name

    New user name: root

    password: xyzzy123

    password: xyzzy1234

    The LAN Interface Setup screen

    IP address set to 10.1.1.1

    Subnet: 255.255.255.0

    Active DHCP server

    Start IP: 10.1.1.50

    End IP: 10.1.1.70

    DNS Configuration screen

    Primary: 45.45.45.45

    Secondary: 45.45.45.46

    Use for DHCP Clients

    WAN Configuration screen

    Ethernet selected without Encapsulation PPOE

    No dynamic (DHCP Client) host name

    Advanced options screen

    Selected for VLAN1 port address translation

    After reading the summary, I chose the FINISH. Asked if dialog box I have

    you want to set up a basic firewall, I selected YES. I left all the

    secure by default items selected. I clicked FINISH. SDM detected that the

    DHCP client on the untrusted external interface and asked if I wanted to

    allow DHCP traffic through the firewall. I selected YES. The configuration

    has been delivered.

    Save the running-config startup-config and reloaded the router.

    Released and renewed my ip address and then reconnected in 1711 from new

    user name and password. SDM restarted.

    Has begun the task of configuration and choose to set up an easy VPN server.

    The opening screen had a command prompt to enable AAA. I launched the selected task

    After that the AAA commands have been delivered to the router.

    I chose the interface FastEthernet0 menu drop-down

    IKE proposals - selected default all the

    Transform set - selected default all the

    Group authorization / policy research - Selected Local only

    Add the user name: User1

    Password: local1

    Encrypt with MD5

    Privilege: 2

    Group permission/User Group Policies

    Add political group: tunnel

    Preshared key: sharedkey

    Selected new address Pool: 10.1.1.80 to 10.1.1.90

    Test after you have configured the selected button.

    Exit this screen, there was a warning SDM on the NAT with ACL rules

    have to be converted into NAT rules with course maps. I clicked YES to let

    SDM convert rules.

    Tests successful Easy VPN Server and client screen displays a warning

    on the "crypto ipsec df - bit clear' needing to be defined." He was not a

    way to put it in SDM and the search function had no success.

    I copied the running-config to the startup-config and tested the router from a

    connect remotely using a different ISP.

    The results:

    The SDM monitor shows the client connection, but the client cannot ping

    any host on the LAN of the router. No one on the LAN can easy ping of VPN client

    Assigned IP of VPN, but they can ping the client using the asigned IP ISP

    address.

    It seems that SDM not correctly configures the 1711 to route of the

    VPN interface to the local network.

    I enclose my 1711 Running Configuration generated by SDM.

    Hello

    I think that the reason why the ping is not successful is that your LAN IP address (connected to the VLAN interface) and the pool of IP addresses assigned to the client are in the same network.

    You can try assigning a pool of IP addresses for VPn clients that is in another subnet (say 10.1.2.80 to 10.1.2.90) and then try to ping?

    You can change the pool by means of configure-> additional tasks-> local swimming pools.

    You can then disconnect the client on the Monitoring page and connect again.

    Kind regards

    Ravikumar

  • Wireless network connection drops on my Tecra A4

    Hello
    When I upload a file (or just only connected to the web), the connection drops about 30 seconds for a few seconds. I tried many things, like change the channel, change security settings (wpa/wep), tried other places in the House, but if I sit only one metre from the router, I have the same problem.
    The strange thing is the computer which is directly connected by cable to the router shows no problem at all...

    See also http://www.sappa.nl/dumeter.jpg for an illustration of the problem.

    I read about a possible solution (http://arstechnica.com/news/posts/1080251780.html), by closing the windows net zero service and instead of this service to use a different program to search for and connect to your network (configfree?)

    I use a netgear WPN824 router
    My laptop is a Tecra A4

    Greetings!

    Hello

    It's not easy to give you a proper answer.
    If your device works with the Atheros WLan card, you must use the Atheros Client Utility to configure WLan settings and the option to use Windows to configure my wireless in the wireless network properties must be disabled.
    In addition, please check from Toshiba Web site for the new Wlan driver. Maybe the new update could solve the problem.

    Good bye

  • VPN connections disappear, RASDIAL makes reappear

    Here is a screenshot of the connect to a network dialog box. Notice that my VPN connection is not displayed. Nothing shows the:

    http://i44.Tinypic.com/2iu3rpg.jpg

    In order to get the dialog box to regain his senses, I drop simply to an elevated command prompt and run

    rasdial [name of the VPN connection]
    You don't need credentials. You don't need it to sucessfully connect; You just push with a stick rasdial:

    http://I39.Tinypic.com/16bdd2u.jpg

    The connect to a network dialog box now works:

    http://i40.Tinypic.com/qpqd6h.jpg

    You can see screenshots of Windows Vista. I saw this bug on Windows XP.

    My question is: How can I get Microsoft repaired?

    Hi Jack,

    Well, Gack! If it happens only every several weeks to months, it will be very fun in the not so fun sort of way to track down.

    Here is my point of view.

    First of all, on a side note, I would never, ever use Windows without an antivirus package, if you go on the internet at all, which you seem to do.

    'Common sense' has worked well before the age of the car by possible viruses. Just go for a page (even supposed to known good) can give you an infection. I'm not saying it's likely, all easily possible.

    I highly recommend that you run some virus scans (these forums have several good suggestions) just to be sure, but it doesn't sound like you have a virus to me.

    Well, I'll get off my soap box now. :-)

    Then, restart is a standard "fix." If this solves the problem, then virtually all support guys in the world are going to tell you, "there is difficulty, have a nice day." I won't argue your point well, it is wrong. Just please realize that there are literally billions of combinations possible, hardware and software. There is no way that each of them could possibly work together without problem. I'll just tell you that it is a workaround and you should use if it works.

    Finally, if you want to keep looking for a better solution, I am with you on that. Solutions help all of us.

    So, here's what you can do then.

    When it happens the next time, mark the time.

    Then go into the event viewer and begin to track down any errors at the time, that happened as well as the warnings and all the events that went past just before the problem started. We don't need (or want) the full thing, just the header with the name of event ID, source, journal, and level.

    You should know what happens if anything started, stopped or tried to run or tried to brake.

    Any service which is of what precedes.

    Also, I'm looking more on Technet.

    Since you said that you work, so for now, I'd mark this thread as closed and start again when and if the problem happens again.

    Of course, I hope this helps!

    Matt Hudson
    Microsoft Answers Support Engineer
    Visit our Microsoft answers feedback Forum and let us know what you think.

  • Once the VPN connection is established, cannot ping or you connect other IP devices

    Try to get a RV016 installed and work so that people can work from home.  You will need to charge customers remote both WIN XP and MAC OS X.

    Have the configured router and works fine with the VPN Linksys client for WIN XP users.  Can connect, ping, mount the shared disks, print to printers to intellectual property, etc.

    Can connect to the router fine with two VPN clients third 3 for Mac: VPN Tracker and IPSecuritas.  However, once the connection is established, cannot ping the VPN LinkSYS router or any other IP address on the LAN Office.  Turn the firewall on or off makes no difference.

    Is there documentation anywhere that describes how the LinksysVPN for Windows Client communicates so these can be replicated in 3rd VPN clients from third parties for the Mac in OS X?

    The connection with IPSecuritas and VPN Tracker is performed using a shared key and a domain name.  It is not a conflict of IP address network between the client and the VPN 192.168.0.0/24 network.

    VPN Tracker and IPSecuritas are able to connect to the routers CISCO easy VPN with no poblem.

    Any ideas on how to get the RV016 to work for non-Windows users?

    We found and fixed the problem, so using VPN Tracker or current IPSecuritas on OS X people have access to the LAN via the RV016 machines. The "remote networks" in the screen BASE in VPN Tracker has been set on the entire subnet: 192.168.0.0/255.255.255.0 the in the RV016 has been set to the IP of 192.168.0.1 to 192.168.0.254 range. Even if the addresses are essentially the same, without specifying the full subnet in the RV016 has allowed the connection to do but prevented the VPN client machine to connect because the RV016 would pass all traffic to the Remote LAN. Change the setting of 'local group' in RV016 settings in the screen "VPN/summary/GroupVPN', 'Local Group Zone' for the subnet 192.168.0.0/24 full solved the problem.

  • Cisco easy VPN + loopback interface. static ip address for the client

    Good day people.

    I have a couple a question and answer on which I can't google for a period. BTW I maybe simly use bad aproach to choose keywords.

    Thus,.

    (1) is it possible to assign the same IP to the same customer every time that it authenticated, preferably without using DHCP? Definely im sure it is possible, but can't find match configuration examples (my camera's 1921 Cisco IOS 15.0.1).

    (2) is it possible to assign the dynamic crypto map to the loopback interface (to make EASY VPN Server accessible through two interfaces - maybe you recommend another approach instead?) - that I move the map workingcrypto of int phy loopback - I can not connect with reason "SA Phace1 policy proposal" not accepted

    Hello

    (1) you can attach to the same IP to the same username using RADIUS

    (2) If you have 2 outside interfaces

    Then, you would use

    mymap-address loop0 crypto card

    int gig0/0

    crypto mymap map

    int g0/1

    cryptp map mymap

    By doing so, the local address would actually be the loop0 but Cryptography card HAS to be applied on physical output interfaces

    See you soon

    OLivier

  • Cannot access the internal network with Cisco easy vpn client RV320

    I have a cisco RV320 (firmware v1.1.1.06) and created a tunnel easy vpn (= split tunnel tunnel mode), then I installed the cisco client vpn v5.0.07.0290 in Windows 7 64 bit, I can connect to the vpn, but I do not see the other pc ping nor them, no idea?

    Thank you

    Hello

    1. is the firewall on the active Windows 7 computer? If so, please disable it

    2. can you check that you get a correct IP address in the range of the POOL of IP configured?

    3. When you perform the tracert command to access an internal server, it crosses the VPN¨?

    4. is the tunnel of split giving you access to internal IP subnets defined?

    5. on the RV320 you see the user connected and sending and receiving bytes?

    Don t forget to rate and score as correct the helpful post!

    David Castro,

    Kind regards

  • RV180 VPN connects and allows you to browse the files, but falls when opening a file.

    Last week, we received our 300Mbps fiber connection. We bought the RV180 due to its high performance, and he manages the speed perfectly.

    However, when you set up VPN, I encountered a strange problem.

    Establishing a QuickVpn or PPTP is simple and connection is no problem. But I'll be fine. I can communicate with QuickVpn or PPTP and find a NAS or PC directory structure, but when I try to open a file the VPC connection drops.

    I activate the remote management.
    I can ping google.com f-l 1472 without fragmentation, so a WAN MTU of 1500 should be ok.
    I have tried disabling attack prevention firewall.

    I have install the following experience: the firmware update (1.0.2.6), restore the default settings.

    Set up the RV180 as follows:

    IPv4 WAN (Internet)

    ------------------------------------------------------------------

    Internet connection type: Automatic Configuration - DHCP

    DNS Server Source: Get dynamically for ISP

    MAC address of the router: use the default address

    IPv4 LAN (local area network)

    ------------------------------------------------------------------

    Host name: RV180

    IP address: 192.168.75.1

    Subnet mask: 255.255.255.0

    Mode DHCP: DHCP Server

    Domain name: LCDVT

    From the IP address: 192.168.75.100

    End IP address: 192.168.75.254

    Rental time: 24

    DNS Proxy: enable

    Preventing attacks

    ------------------------------------------------------------------

    WAN (Internet) security controls

    Meet Ping on WAN (Internet): disabled

    Stealth mode: disabled

    Floods: disabled

    LAN (local area network) security controls

    Block UDP Flood: disabled

    Parameters of the ICSA

    Block the anonymous ICMP Messages: disabled

    Block fragmented packets: disabled

    Block multicast packets: disabled

    VPN users

    ------------------------------------------------------------------

    PPTP server: enabled

    From the IP address: 192.168.75.50

    End IP address: 192.168.75.99

    Table setting VPN Client:

    ---------------------------

    No: 1

    Enabled: enabled

    Username: lcdvt

    Password: *.

    Allow the user to change the password: NA

    Protocol: PPTP

    Web access

    ------------------------------------------------------------------

    Access on the LAN of HTTPS Web Interface: enabled

    Remote management: enabled

    Type of access: IP range

    Start of range: 192.168.75.1

    End of series: 192.168.75.254

    Port number: 443

    Remote SNMP: disabled

    The rest of the menu options are, except for logging policies where I have everything turned on by default.

    In this experiment, I connect from a remote location, start navigating among directories of the drive without any problems and then open a file, after which the VPN connection falls (or some process breaks down). After the transfer of a few 100 KB blocks the VPN connection.

    Error logs

    ------------------------------------------------------------------

    Thu Mar 20 00:39:18 2013(GMT+0100) [rv180] nimfNetIfaceTblHandler [System] [NIMF]: could not get LedPinId

    Thu Mar 20 00:39:25 2013(GMT+0100) [rv180] [System] [PROGRAM] IP: 62.45.238.236

    Thu Mar 20 00:39:25 2013(GMT+0100) [rv180] [System] [PROGRAM] BCAST: 62.45.239.255

    Thu Mar 20 00:39:25 2013(GMT+0100) [rv180] [System] [PROGRAM] subnet: 255.255.254.0

    Thu Mar 20 00:39:25 2013(GMT+0100) [rv180] [System] [PROGRAM] GW: 62.45.238.1

    Thu Mar 20 00:39:25 2013(GMT+0100) [rv180] [System] [PROGRAM] DNS1: 62.45.45.45

    Thu Mar 20 00:39:25 2013(GMT+0100) [rv180] [System] [PROGRAM] DNS2: 62.45.46.46

    Thu Mar 20 00:39:25 2013 (GMT + 0100) [rv180] [System] [PROGRAM] Interface: eth1

    Thu Mar 20 00:39:32 2013(GMT+0100) [rv180] nimfNetIfaceTblHandler [System] [NIMF]: could not get LedPinId

    Thu Mar 20 00:40:58 2013(GMT+0100) [rv180] nimfNetIfaceTblHandler [System] [NIMF]: could not get LedPinId

    Thu Mar 20 00:41:10 2013(GMT+0100) [rv180] [System] [PROGRAM] IP: 62.45.238.236

    Thu Mar 20 00:41:10 2013(GMT+0100) [rv180] [System] [PROGRAM] BCAST: 62.45.239.255

    Thu Mar 20 00:41:10 2013(GMT+0100) [rv180] [System] [PROGRAM] subnet: 255.255.254.0

    Thu Mar 20 00:41:10 2013(GMT+0100) [rv180] [System] [PROGRAM] GW: 62.45.238.1

    Thu Mar 20 00:41:10 2013(GMT+0100) [rv180] [System] [PROGRAM] DNS1: 62.45.45.45

    Thu Mar 20 00:41:10 2013(GMT+0100) [rv180] [System] [PROGRAM] DNS2: 62.45.46.46

    Thu Mar 20 00:41:10 2013 (GMT + 0100) [rv180] [System] [PROGRAM] Interface: eth1

    Thu Mar 20 00:41:19 2013(GMT+0100) [rv180] nimfNetIfaceTblHandler [System] [NIMF]: could not get LedPinId

    Warning logs

    ------------------------------------------------------------------

    Thu Mar 20 00:39:13 2013(GMT+0100) [rv180] [System] [DHCPC] dhcpcDisable: removed dhclient.leases

    Thu Mar 20 00:40:54 2013(GMT+0100) [rv180] [System] [DHCPC] dhcpcDisable: removed dhclient.leases

    Sat 1 Jan 01:02:43 2011 (GMT + 0100) [rv180] [Kernel] [KERNEL] [23.090000] /home/aruns/rv180w/updated_dec19_final/beta-v1/rv180w-common/comps/gpl/ipset/src/ipset/kernel/ip_set.c: ip_set_create: no type set 'nethash', 'setPublicNet' has not created value

    What I am doing wrong? Or the device?

    I am interested in what the solution to these problems.  Research on get a rv180...

    First car of Huntsville and bike e-magazine: www.huntsvillecarscene.com

  • With an interface easy VPN client only

    Hi guys,.

    I have an ASA 5505 configuration as simple Client VPN. Current configuration uses two interfaces: inside and outside. I tested the connection to the server and works very well.

    For reasons of site specific I'm limited to a single interface, you can call it inside, lan, whatever. So I need to connect clients to the remote site behind this interface and also use it to reach the easy VPN server. Is it possible in the first place?

    Of course, I will put the default route through the Interior of interface and another router will provide the Internet connection.

    It's so hard to make it work you should consider the answer is no.

    Specifically, you need to have one inside and outside interface or EasyVPN will not come to the top.

  • ASA 5505 ASDM VPN connection problem

    Hello

    We are running a version of firewall ASA 5505 8.4 (4) 1. The ASDM version is 6.4 (9).

    The problem is when the creation of remote access VPN connection, it works fine for about 2-3 days.

    After that, the VPN client cannot connect more and gives the error code 789.

    In this case, the VPN clients are clients of Windows 7 from different remote networks with the same problem scenario.

    Windows 8.1 clients cannot connect at all and show the same error code...

    All connections go through the keys defaultragroup and preshare match on both sides.

    When the user to connect attemps I receive the following text in the log of the ASDM:

    6 April 10, 2015 10:52:39 group = DefaultL2LGroup, IP = 5.240.31.116, P1 retransmit msg sent to the WSF MM
     
    5 April 10, 2015 10:52:39 group = DefaultL2LGroup, IP = 5.240.31.116, in double Phase 1 detected package.  Retransmit the last packet.
     
    5 April 10, 2015 10:53:03 IP = 5.240.31.116, encrypted packet received with any HIS correspondent, drop
     
    When I implemented the remote login through ASDM I followed the instructions according to the following link:
     
    The steps were a little different, but almost the same, given that these instructions show an old version
     
    I'm interested in trying the steps according to this link but not sure this will help me solve the problem id:
     
    Any help would be appreciated!
    Thank you

    Hello

    If you use local authentication (user name and password on the SAA), so why you would need this threshold?

    tunnel-group DefaultRAGroup ppp-attributes
    No chap authentication
    ms-chap-v2 authentication
    !

    Remove it and try.

Maybe you are looking for