How to end a vpn connection from site to site on ASA 5510

Similar Questions

• How to start the VPN connection when windows is running

  Original title: trouble with automatically the VPN connection

  Hi, I want to have my VPN connection to start automatically when windows is running.

  Simple version:
  I tried various different methods, including; Paste the shortcut in the startup folder and adding the task in the Task Scheduler.

  I have the same problems with both methods. Just the VPN starts automatically... I have to run it manually whenever I turn on the computer or wake up sleep mode.
  Does anyone know other methods finally a solution for the other two methods?
  In the version of the depth of the problems:

  Method of Task Scheduler: I get argument is not valid, it is even after I have successfully created the task and click OK. The task will not work, and also by some strange reason, my VPN password is not get recorded on my connection more. So now, I need to manually start the connection and type in the password. (I click on save the password whenever this does not work, when the task is active...)

  Shortcut to the startup directory: Simple and easy... It simply doesn't get it. I followed the steps very carefully and I'm 100% sure that I did it the right way...

  These links have good information on how to open a VPN connection to the Windows dΘmarrage

  http://www.dariancabot.com/2010/11/15/automatically-connect-to-VPN-at-Windows-startup/

  http://www.Buchatech.com/2011/04/configure-Windows-to-automatically-connect-to-VPN/

• How to set the VPN connection in Windows 7 64 bit?

  Hello

  How can I set up a Vpn connection in Windows 7 x 64 bit.

  Thank you.

  Hello

  Go to the network control panel and Internet-network sharing Center.

  http://www.windows7hacker.com/index.php/2009/08/how-to-set-up-a-VPN-connection-in-Windows-7/

  Note that you need to know the login and the password to access the Internet :)

• networking with a Sprint aircard card - how can I share internet connection from my card Sprint air with other computers?

  I use a Sprint air card for my internet connection.  How can I make my connection mobile connect with my connection to the LAN ethernet so that all computers can go online.  There are two (mobile and local) connections in network and sharing Center.

  Enable Internet connection sharing on the mobile connection:

  1 right click on the connection.
  2. click on Properties .
  3. click on sharing .
  4. put a check mark in the Internet connection sharing check box.

  Then connect all computers to a network switch or router Ethernet connections.  If connect you to a router, disable the DHCP server in the router's built-in.

  Boulder computer Maven
  Most Microsoft Valuable Professional

• How to determine the cause of the ipsec tunnel fall on ASA 5510

  Is there an easy way to determine the cause of tunnel VPN ipsec l2l fall on one asa 5510? I have enabled logging, but the buffer is full so fast, I can't find something when it is 24 hours later. I'm working on obtaining a server/aggregator syslog configuration but... until it is complete I need a temporary measure. Suggestions?

  Hi Jessica.

  For the buffering limit, you can try:

  Increase the maximum buffer size.

  limit the newspapers to the class of vpn:

  Buffered Debug class vpn connection.

  On the other hand, you can try him debugs:

  Debug crypto peer peer_address condition

  debugging cry isa 128

  debugging ipsec 128 cry

  If you lose the ssh session debugging is disabled.  Finally for the vpn tunnels usually it goes down due to:

  Idle time-out

  the dead peer detection

  remove it from the other end.

  HTH.

• site-to-site between ASA 5510 (8.4 (2)) w / static IP and Dlink DIR130 w / dynamic IP.

  I'm trying to implement a VPN site link to site between the ASA5510 we use exclusively as a VPN endpoint on campus and a D-Link DIR130 router off campus, to a local company with a dynamically assigned IP address.  We currently use the ASA to remote access users who use the Cisco VPN client on mobile devices, as well as a link to site-to-site unique in our telecommunications provider for the purposes of remote monitoring telecoms equipment.

  We are looking for a way to deploy at a lower cost of VPN connections for local businesses to allow them to use the devices for sale which connect to systems on campus, so students can use their meal in local restaurants cards, similar to the way they use them in the cafeteria on campus.

  I have experience setting up Cisco switches, routers and APs, but ASA appliance absolutely baffles me.  I futzed with the AMPS 6.4 config autour gui and tried to match the configurations between the DIR130 and the ASA, but I can never get a VPN to come.  Anyone who can point me to an example, or provide me with help on this would be appreciated.  I have google searched and found very little, with my limited experience in setting up ASA, I ask to my script.

  You must configure the static route on the 6509 for 192.168.5.0/24 to ASA inside the interface:

  IP route 192.168.5.0 255.255.255.0 131.162.160.2

  Assuming that 131.162.160.1 is your 6509

• How can I remove a connection from network Local to my computer?

  I have a connection to local network on my computer (XP Service Pack 3 operating system).  I had this connection turned off for awhile and I also removed the ICON on the desktop for this connection.  For many months, I noticed in the Log Viewer/system event I had a DCOM error every morning when I started my computer.  Sometimes, the computer may pause for a few seconds, the screen would go black, and the system should restart automatically--normally.  I would check the log Event Viewer/system and the DCOM error was there.  At other times, the system should boot normally until he got to the window where I select user or administrator - at this time there, the mouse would be frozen in its tracks.  A restart (by cutting the power supply to the computer) would all walk normally again.  Another check of the event log and the DCOM error occurred once more here.  I have to admit that the problems I identified here are rare visitors to my computer (no more than once or twice a week), but they are of course annoying.  So, I believe that this connection to the unused LAN is at the root of my problem.  Then I decided to activate the LAN connection, restart my computer and see if the DCOM error occurred when starting - no error has been found.  Has it done for me, I decided that the unused LAN connection must go.  I, however, have not found the magical instructions for how to remove the connection to the local network.  I read an article that told me the Device Manager where it should be delete this connection.  So I made a visit to the Device Manager and found the connection LAN listed there - I'm not sure this is the right thing to do.  I also made a visit to the network connections and clicked on the unwanted local network connection - I found that delete is dimmed.  I just seem to be lost as to how to make this connection to the local network to go.  Can someone give me help in this task?  Any help sent my way would be greatly appreciated.

  It is a sequel to my last post.  I decided, after that no response was forthcoming to this message, follow the instructions that I have included in this post more soon to try to remove the connection to the local network unwanted from my computer.  FYI, this set of instructions worked perfectly and I have over this connection to the LAN on my system.  I hope that this information will be useful to others you want to remove a local network of their Windows XP Pro SP3 system connection.

  I. M. learning

• How to create a vpn connection

  I know that this discussion has already been posted long ago, but please help me to make this thing work. I have an assignment topic security [in which my subject are vpn] and have a presentation must undergo. I want to create a server vpn on my laptop running windows 7 and my partner's cell phone running windows 8, join. is it possible to do? Please help me through all the steps I tried this on my own using all the steps provided on the internet but ended up with my laptop friends fail to connect. Thanks in advance to the contributors of this community to guide me.

  Hi Alex,

  Welcome to the Microsoft Community Forum.

  I understand that you have a problem with setting up VPN between two computers.

  Unfortunately, the issue you have mentioned on here is best suited for the Microsoft TechNet community, so I suggest you the same post in the Microsoft TechNet forum for further assistance on this issue.

  https://social.technet.Microsoft.com/forums/Windows/en-us/home?category=w7itpro

  Thank you

• How can I get internet connection from my laptop through my mobile device (it's just a rhetorical question)

  Hi,)

  "This is only to have knowledge of some aspects on the internet).

  I have samsung mini S4 mobile with internet connection.

  Suppose I'm somewhere whitout your support and I want to internt with my laptop through my mobile.

  What steps I have to do so that the internet connection via my cell phone.

  Thank you

  Johan

  Hello Johan,.

  Thanks for posting your question on the forum of the Microsoft community.

  I would like to know some information about the problem so that we can help you better.

  What is the brand and model of your laptop?

  I suggest you try the following steps and check if it helps.

  a. connect your mobile device to the computer. If you use a USB (Universal Serial Bus) modem, simply plug it into a USB port on the computer. If you connect a mobile phone, connect the USB cable to your computer at one end and on the cell phone on the other.

  b. software start Internet sharing. If you use a cell phone, search for Internet sharing application from the 'Start' or 'Applications folder' menu on your phone. If you connect a USB modem, run the software supplied with the modem to start the connection.

  c. start the connection sharing. On the mobile phone, make sure that the Internet sharing application is set to share the mobile connection via USB. Once set, press the soft key 'Connect' on your cell phone or smart phone to share the connection with a computer. If you use a USB modem, click the 'Connect' button in the software of connection on your computer Desktop Manager of.

  d. check that the connection is active. After the Internet software to share bed 'Connected', open the network and sharing in Control Panel"and check that the connection is as a wired Internet connection. The control panel is located on the "Start" menu on your computer.

  e. connect to Internet. Launch a web browser or e-mail on your computer and check that the connection is active. Download and send to your connection speed will vary depending on force carrier and cell phone signal.

  f. put an end to the Internet via mobile by pressing the function key "Disconnect" on your mobile phone, or if you use a USB modem, click on the button "Logout" in the connection management software installed on the computer.

  Please also see this link:
  http://www.Samsung.com/us/support/SupportOwnersFAQPopup.do?faq_id=FAQ00024090&fm_seq=24258

  I hope this information helps.

  Please let us know if you need more help.

  Thank you

• Problem with VPN connection from a connection shared cable modem

  Couple of my users on a remote site share a modem cable connection using a Linksys 4 port router. They connect to the main campus using VPN. When the two try to connect via VPN to the only main campus can connect at the same time. We have VPN 3015 concentrator on the main campus and the user is authenticated on our active directory. The machines of users has windows XP pro and use Microsoft VPN to connect. Anyone encountered this before? No solution/work around?

  Thank you.

  -Nik

  I suspect that the problem is to do with NAT / PAT - if only a customer wants to create a VPN session to the 3015, NAT is used, but if several clients go through your Linksys router, then you are using PAT, that requires NAT t (nat transparency), see the following URL for more information:- http://support.microsoft.com/default.aspx?scid=kb;en-us;818043

  Rowan

• unexpected behavior with vpn, clientless ssl and smart tunnels on ASA 5510

  Hi there, hope someone can help

  I am able to set up a smart tunnel for an application and everything works fine, however...

  Without smart tunnel, the user must navigate the portal interface (because of how he encapsulates urls and basically acts as a proxy), it is too beautiful and good and expected behavior. If a user does not enter a URL in the portal URL entry (only enters the normal address bar) she takes them outside the clientless ssl vpn portal.

  Now too the point to start a smart tunnel, URL, the user types in the normal address bar is not encapsulated in the device URL, although they are still placed through our network (and note, the intelligent application of tunnel is not the browser, which is be IE). How can I know it? sites that would be blocked by a web filter are blocked with smart on but not PVD tunnels with smart tunnel.

  I need to know if this is intended behavior or not and how and why this is happening?

  Thanks in advance

  In my view, this is how it works. If you are referring to this doc:

  https://supportforums.Cisco.com/docs/doc-6172

  Smart tunnel is functioning all or nothing. Which means once you turn it on for a specific process or a specific bookmark, all your traffic for this process (and the browser you are using to open the SSL Clientless session ) will pass through the ASA.

  Example: Enable option ST for a process or bookmark #1 (which connected IE used to login). Opening a separate instance of the IE browser will be all traffic through the ASA, tunnel, if the new browser window belongs to the same process. All tabs on the movement of this browser browser will be smart tunnel, even to Favorites (ie. #2 favorite) are not specifically the chip in the tunnel. You must use a different browser (ie. (FireFox) in this case, if you want some of your traffic (ie. #2 favorite) is not to be smart tunnelees.

  I hope this helps.

• Establish a IPsec VPN connection, but remote site can't ping main office

  Hi, I set up connection from site to site IPsec VPN between cisco 892 (main site) router and linksys router wrv210 (remote site). My problem is that I can ping network router wrv210 lan of my main office where is cisco 892 router, but I cannot ping the main site of linksys wrv210 lan (my remote site).

  My configuration on the cisco 892 router:

  type of class-card inspect correspondence sdm-cls-VPNOutsideToInside-1

  game group-access 103

  type of class-card inspect correspondence sdm-cls-VPNOutsideToInside-3

  game group-access 106

  type of class-card inspect correspondence sdm-cls-VPNOutsideToInside-2

  game group-access 105

  type of class-card inspect correspondence sdm-cls-VPNOutsideToInside-5

  game group-access 108

  type of class-card inspect correspondence sdm-cls-VPNOutsideToInside-4

  game group-access 107

  type of class-card inspect correspondence sdm-cls-VPNOutsideToInside-7

  group-access 110 match

  type of class-card inspect correspondence sdm-cls-VPNOutsideToInside-6

  game group-access 109

  type of class-card inspect correspondence sdm-cls-VPNOutsideToInside-9

  game group-access 112

  type of class-card inspect correspondence sdm-cls-VPNOutsideToInside-8

  game group-access 111

  type of class-card inspect entire game SDM_AH

  match the name of group-access SDM_AH

  type of class-card inspect entire game SDM_ESP

  match the name of group-access SDM_ESP

  type of class-card inspect entire game SDM_VPN_TRAFFIC

  match Protocol isakmp

  match Protocol ipsec-msft

  corresponds to the SDM_AH class-map

  corresponds to the SDM_ESP class-map

  type of class-card inspect the correspondence SDM_VPN_PT

  game group-access 102

  corresponds to the SDM_VPN_TRAFFIC class-map

  type of class-card inspect entire game PAC-cls-insp-traffic

  match Protocol cuseeme

  dns protocol game

  ftp protocol game

  h323 Protocol game

  https protocol game

  match icmp Protocol

  match the imap Protocol

  pop3 Protocol game

  netshow Protocol game

  Protocol shell game

  match Protocol realmedia

  match rtsp Protocol

  smtp Protocol game

  sql-net Protocol game

  streamworks Protocol game

  tftp Protocol game

  vdolive Protocol game

  tcp protocol match

  udp Protocol game

  inspect the class-map match PAC-insp-traffic type

  corresponds to the class-map PAC-cls-insp-traffic

  type of class-card inspect correspondence sdm-cls-VPNOutsideToInside-10

  game group-access 113

  type of class-card inspect all sdm-service-ccp-inspect-1 game

  http protocol game

  https protocol game

  type of class-card inspect entire game PAC-cls-icmp-access

  match icmp Protocol

  tcp protocol match

  udp Protocol game

  type of class-card inspect correspondence ccp-invalid-src

  game group-access 100

  type of class-card inspect correspondence ccp-icmp-access

  corresponds to the class-ccp-cls-icmp-access card

  type of class-card inspect correspondence ccp-Protocol-http

  match class-map sdm-service-ccp-inspect-1

  !

  !

  type of policy-card inspect PCB-permits-icmpreply

  class type inspect PCB-icmp-access

  inspect

  class class by default

  Pass

  type of policy-card inspect sdm-pol-VPNOutsideToInside-1

  class type inspect sdm-cls-VPNOutsideToInside-1

  inspect

  class type inspect sdm-cls-VPNOutsideToInside-2

  Pass

  class type inspect sdm-cls-VPNOutsideToInside-3

  Pass

  class type inspect sdm-cls-VPNOutsideToInside-4

  Pass

  class type inspect sdm-cls-VPNOutsideToInside-5

  Pass

  class type inspect sdm-cls-VPNOutsideToInside-6

  inspect

  class type inspect sdm-cls-VPNOutsideToInside-7

  Pass

  class type inspect sdm-cls-VPNOutsideToInside-8

  Pass

  class type inspect sdm-cls-VPNOutsideToInside-9

  inspect

  class type inspect sdm-cls-VPNOutsideToInside-10

  Pass

  class class by default

  drop

  type of policy-map inspect PCB - inspect

  class type inspect PCB-invalid-src

  Drop newspaper

  class type inspect PCB-Protocol-http

  inspect

  class type inspect PCB-insp-traffic

  inspect

  class class by default

  drop

  type of policy-card inspect PCB-enabled

  class type inspect SDM_VPN_PT

  Pass

  class class by default

  drop

  !

  security of the area outside the area

  safety zone-to-zone

  zone-pair security PAC-zp-self-out source destination outside zone auto

  type of service-strategy inspect PCB-permits-icmpreply

  zone-pair security PAC-zp-in-out source in the area of destination outside the area

  type of service-strategy inspect PCB - inspect

  source of PAC-zp-out-auto security area outside zone destination auto pair

  type of service-strategy inspect PCB-enabled

  sdm-zp-VPNOutsideToInside-1 zone-pair security source outside the area of destination in the area

  type of service-strategy inspect sdm-pol-VPNOutsideToInside-1

  !

  !

  crypto ISAKMP policy 1

  BA 3des

  md5 hash

  preshared authentication

  Group 2

  lifetime 28800

  ISAKMP crypto key address 83.xx.xx.50 xxxxxxxxxxx

  !

  !

  Crypto ipsec transform-set ESP-3DES esp-3des esp-md5-hmac

  !

  map SDM_CMAP_1 1 ipsec-isakmp crypto

  Description NY_NJ

  the value of 83.xx.xx.50 peer

  game of transformation-ESP-3DES

  match address 101

  !

  !

  !

  !

  !

  interface BRI0

  no ip address

  no ip redirection

  no ip unreachable

  no ip proxy-arp

  penetration of the IP stream

  encapsulation hdlc

  Shutdown

  Multidrop ISDN endpoint

  !

  !

  interface FastEthernet0

  !

  !

  interface FastEthernet1

  !

  !

  interface FastEthernet2

  !

  !

  interface FastEthernet3

  !

  !

  interface FastEthernet4

  !

  !

  interface FastEthernet5

  !

  !

  FastEthernet6 interface

  !

  !

  interface FastEthernet7

  !

  !

  interface FastEthernet8

  no ip address

  no ip redirection

  no ip unreachable

  no ip proxy-arp

  penetration of the IP stream

  automatic duplex

  automatic speed

  !

  !

  interface GigabitEthernet0

  Description $ES_WAN$ $FW_OUTSIDE$

  IP address 89.xx.xx.4 255.255.255.xx

  no ip redirection

  no ip unreachable

  no ip proxy-arp

  penetration of the IP stream

  NAT outside IP

  IP virtual-reassembly

  outside the area of security of Member's area

  automatic duplex

  automatic speed

  map SDM_CMAP_1 crypto

  !

  !

  interface Vlan1

  Description $ETH - SW - LAUNCH INTF-INFO-FE 1 to $$$ $ES_LAN$ $FW_INSIDE$

  IP 192.168.0.253 255.255.255.0

  no ip redirection

  no ip unreachable

  no ip proxy-arp

  penetration of the IP stream

  IP nat inside

  IP virtual-reassembly

  Security members in the box area

  IP tcp adjust-mss 1452

  !

  !

  IP forward-Protocol ND

  IP http server

  local IP http authentication

  IP http secure server

  IP http timeout policy slowed down 60 life 86400 request 10000

  !

  !

  IP nat inside source overload map route SDM_RMAP_1 interface GigabitEthernet0

  IP route 0.0.0.0 0.0.0.0 89.xx.xx.1

  !

  SDM_AH extended IP access list

  Note the category CCP_ACL = 1

  allow a whole ahp

  SDM_ESP extended IP access list

  Note the category CCP_ACL = 1

  allow an esp

  !

  recording of debug trap

  Note access-list 1 INSIDE_IF = Vlan1

  Note category of access list 1 = 2 CCP_ACL

  access-list 1 permit 192.168.0.0 0.0.0.255

  Access-list 100 category CCP_ACL = 128 note

  access-list 100 permit ip 255.255.255.255 host everything

  access-list 100 permit ip 127.0.0.0 0.255.255.255 everything

  access-list 100 permit ip 89.xx.xx.0 0.0.0.7 everything

  Note access-list 101 category CCP_ACL = 4

  Note access-list 101 IPSec rule

  access-list 101 permit ip 192.168.0.0 0.0.0.255 192.168.7.0 0.0.0.255

  Note access-list 102 CCP_ACL category = 128

  access-list 102 permit ip host 83.xx.xx.50 all

  Note access-list 103 CCP_ACL category = 0

  Note access-list 103 IPSec rule

  access-list 103 allow ip 192.168.7.0 0.0.0.255 192.168.0.0 0.0.0.255

  Note access-list 104 CCP_ACL category = 2

  Note access-list 104 IPSec rule

  access-list 104 deny ip 192.168.0.0 0.0.0.255 192.168.7.0 0.0.0.255

  access-list 104. allow ip 192.168.0.0 0.0.0.255 any

  Note access-list 105 CCP_ACL category = 0

  Note access-list 105 IPSec rule

  access-list 105 allow ip 192.168.7.0 0.0.0.255 192.168.0.0 0.0.0.255

  Note access-list 106 CCP_ACL category = 0

  Note access-list 106 IPSec rule

  access-list 106 allow ip 192.168.7.0 0.0.0.255 192.168.0.0 0.0.0.255

  Note access-list 107 CCP_ACL category = 0

  Note access-list 107 IPSec rule

  access-list 107 allow ip 192.168.7.0 0.0.0.255 192.168.0.0 0.0.0.255

  Note access-list 108 CCP_ACL category = 0

  Note access-list 108 IPSec rule

  access-list 108 allow ip 192.168.7.0 0.0.0.255 192.168.0.0 0.0.0.255

  Note access-list 109 CCP_ACL category = 0

  Note access-list 109 IPSec rule

  access-list 109 allow ip 192.168.7.0 0.0.0.255 192.168.0.0 0.0.0.255

  Note access-list 110 CCP_ACL category = 0

  Note access-list 110 IPSec rule

  access-list 110 permit ip 192.168.7.0 0.0.0.255 192.168.0.0 0.0.0.255

  Note access-list 111 CCP_ACL category = 0

  Note access-list 111 IPSec rule

  access-list 111 allow ip 192.168.7.0 0.0.0.255 192.168.0.0 0.0.0.255

  Note access-list 112 CCP_ACL category = 0

  Note access-list 112 IPSec rule

  access-list 112 allow ip 192.168.7.0 0.0.0.255 192.168.0.0 0.0.0.255

  Note access-list 113 CCP_ACL category = 0

  Note access-list 113 IPSec rule

  access-list 113 allow ip 192.168.7.0 0.0.0.255 192.168.0.0 0.0.0.255

  not run cdp

  !

  !

  !

  !

  allowed SDM_RMAP_1 1 route map

  corresponds to the IP 104

  --------------------------------------------------------

  I only give your router cisco 892 because there is nothnig much to change on linksys wrv210 router.

  Hope someone can help me. See you soon

  You can run a "ip inspect log drop-pkt" and see if get you any what FW-DROP session corresponding to the traffic you send Linksys to the main site. Zone based firewall could be blocking traffic initiated from outside to inside.

• Site to Site VPN connection

  I have trouble getting a connection from site to site between a site that I am owner and a seller at a distance. (neither of us are experts)

  Can someone tell me what Miss them us?

  Ok

  I hope I understood the situation correctly.

  With the changes below all your LAN traffic should flow through the VPN L2L at the Remote Site connection. However, I can't say what is happening in the traffic from there in. Internet traffic should work just fine.

  Your ASA Site

  10.4.200.0 IP Access-list extended siteA 255.255.248.0 allow all

  no extended siteA LocalNetwork 255.255.248.0 ip access list allow 10.4.0.0 255.255.0.0

  Note of the access-list NAT0 for VPN L2L traffic INSIDE-NAT0

  IP 10.4.200.0 allow to Access-list INTERIOR-NAT0 255.255.248.0 all

  NAT (inside) 0-list of access to the INTERIOR-NAT0

  crypto Outside_map2 1 game card address siteA

  Supplier of ASA site

  permit same-security-traffic intra-interface

  access-list siteA extended permits all ip 10.4.200.0 255.255.248.0

  no extended siteA 10.4.0.0 ip access list do not allow 255.255.0.0 10.4.200.0 255.255.248.0

  NAT (outside) 1 10.4.200.0 255.255.248.0

  This should forward traffic from your site to the remote site if the destination address of the connections is nothing other than your LAN.

  It should also allow your site to use the connection of remote sites ASAs since we allow traffic to make a u-turn on the interface of the ASA "outside" remote and dynamic to the ' outside ' interface IP address be also participated.

  -Jouni

• WRVS4400N with AG300 and VPN connections

  I bought a WRVS4400N router hoping to add wireless and VPN capability at a remote office LAN. I want to be able to establish a VPN connection from my PC to the central office to the WRVS4400N to remote desktop, access and administer systems at the remote office. Remote desktop systems is unnecessary access to systems to the central office.

  Before you deploy the WRVS4400N to remote desktop, I'm stable and by configuring it to our central office.

  Our central office is a router Linksys AG300 and ADSL service for Internet connection. It works well and I don't want to change it.

  I have connected the WRVS4400N to our central office LAN and it has an IP address on its WAN port assigned by the DHCP server on the AG300.

  What I do not understand how to establish a VPN connection to a system on the Internet at the WRVS4400N on the local network. I have a laptop with the QuickVPN software installed. If I connect my laptop to the AG300 (i.e. the same switch as the WAN port on the WRVS4400N) I can establish a VPN connection to the WRVS4400N but if I connect to my laptop to the Internet (via my ADSL service at home), I am unable to set up the VPN. I don't know how to configure the AG300 so that the VPN from my laptop reaches the WRVS4400N.

  I transfer ipsec enabled on the AG300, but this does not seem to run the VPN with the WRVS4400N.

  Can someone tell me what I need to do?

  Is there some other DSL modem I could use that facilitates the connection? There is another DSL modem (I don't know make/model until I visit the site) used in remote desktop, but I could replace it if I knew that the replacement work.

  Update: I got it to work. See https://supportforums.cisco.com/thread/2108785 for the advice that has been most useful.

  The essential steps have been before the ports indicated in this article (and UDP 500) to the WRVS4400N and I dropped a bit of the MTU (do not know if this was really necessary). Now I can establish connection QuickVPN, except when the Windows Firewall interferes.

  Hello

  Thank you for posting. In the AG300, transmit the following ports to the IP address of the WAN WRVS4400N port: 443, 500, 4500, 60443. This allows you to establish a QuickVPN for the WRVS4400N using the WAN IP of the AG300.

• Site to site between ASA 8.2 VPN, cannot ping

  Two 8.2 ASA is configured with a VPN tunnel from site to site, as shown in the diagram:

  

  Here is my setup for both.

  Clients on the inside network to the ASA cannot ping inside, network clients, else the ASA. Why not?

  When the rattling from inside network SALMONARM inside network of KAMLOOPS, the following debug logs can be seen on SALMONARM:

  %ASA-7-609001: Built local-host outside:10.30.7.2
  %ASA-6-302020: Built outbound ICMP connection for faddr 10.30.7.2/0 gaddr 192.168.0.216/55186 laddr 10.45.7.1/512
  %ASA-6-302021: Teardown ICMP connection for faddr 10.30.7.2/0 gaddr 192.168.0.216/55186 laddr 10.45.7.1/512
  %ASA-7-609002: Teardown local-host outside:10.30.7.2 duration 0:00:02
  %ASA-7-609001: Built local-host outside:10.30.7.2
  %ASA-6-302020: Built outbound ICMP connection for faddr 10.30.7.2/0 gaddr 192.168.0.216/55186 laddr 10.45.7.1/512
  %ASA-6-302021: Teardown ICMP connection for faddr 10.30.7.2/0 gaddr 192.168.0.216/55186 laddr 10.45.7.1/512
  %ASA-7-609002: Teardown local-host outside:10.30.7.2 duration 0:00:02
  %ASA-7-609001: Built local-host outside:10.30.7.2
  %ASA-6-302020: Built outbound ICMP connection for faddr 10.30.7.2/0 gaddr 192.168.0.216/55186 laddr 10.45.7.1/512
  ...
  

  Each attempt to ping responds with "Request timed out" on the computer of ping.

  Why clients cannot mutually ping on the VPN tunnel?

  Hello

  Create a NAT0 ACL at both ends.

  ex: 10.30.0.0 ip access-list extended SHEEP 255.255.0.0 allow 10.45.0.0 255.255.0.0

  NAT (inside) 0 access-list SHEEP

  THX

  MS

  Edit: at the beginning, I mentioned ACL #, it may not work.