The router 851 and 871 VPN issues still

Main site

1 - all connectivity-all thin - Web - database-email Mail - Proxy - ETC.

2 - VPN Tunnel to the TOP

Remote sites

1 - VPN Tunnel to the TOP and tests

1 cannot ping the main location of the 192.168.0.X (Yes any IP address)

2 - could not get out to the Internet (GO HOLLOW PROXY SERVER 192.168.0.3 even if I could ping)

3 could connect to the database but crashes right after the login screen. Can ping the address of 192.168.0.11 to this fine location database but the connection hangs and does not

* HAND CONFIG

crypto ISAKMP policy 1

BA 3des

md5 hash

preshared authentication

Group 2

!

crypto ISAKMP policy 3

BA 3des

md5 hash

preshared authentication

Group 2

XXX address X.X.X.X isakmp encryption key

XXX address X.X.X.X isakmp encryption key

ISAKMP crypto keepalive 5 20

!

Crypto ipsec transform-set esp-3des esp-sha-hmac RIGHT

!

bssn 10 ipsec-isakmp crypto map

Description VPN for PARK

defined peer X.X.X.X

Set transform-set RIGHT

match address 100

bssn 20 ipsec-isakmp crypto map

VPN for Corneilia description

defined peer X.X.X.X

Set transform-set RIGHT

match address 102

bssn 30 ipsec-isakmp crypto map

Description VPN to OAK

defined peer X.X.X.X

Set transform-set RIGHT

match address 103

bssn 40 ipsec-isakmp crypto map

Description VPN to Herbert George Wells

defined peer X.X.X.X

Set transform-set RIGHT

match address 104

interface FastEthernet4

WAN

IP address 216.x.x.x 255.255.255.128 secondary

IP 216.x.x.x 255.255.255.128.

no ip redirection

no ip unreachable

no ip proxy-arp

NAT outside IP

IP virtual-reassembly

route IP cache flow

automatic duplex

automatic speed

card crypto bssn

!

interface Vlan1

Entry door

IP 216.X.X.X 255.255.255.248 secondary

IP 192.168.0.11 255.255.255.0

no ip redirection

no ip unreachable

IP nat inside

IP virtual-reassembly

route IP cache flow

IP tcp adjust-mss 1452

!

IP classless

IP route 0.0.0.0 0.0.0.0 216.x.x.x.

!

IP nat inside source overload map route interface FastEthernet4 sheep

!

recording of debug trap

access-list 100 permit ip 192.168.0.0 0.0.0.255 192.168.1.0 0.0.0.255

access-list 101 deny ip 192.168.0.0 0.0.0.255 192.168.1.0 0.0.0.255

access-list 101 deny ip 192.168.0.0 0.0.0.255 192.168.6.0 0.0.0.255

access-list 101 deny ip 192.168.0.0 0.0.0.255 192.168.7.0 0.0.0.255

access-list 101 deny ip 192.168.0.0 0.0.0.255 192.168.5.0 0.0.0.255

access-list 101 permit ip 192.168.0.0 0.0.0.255 any

access-list 102 permit ip 192.168.0.0 0.0.0.255 192.168.6.0 0.0.0.255

access-list 103 allow ip 192.168.0.0 0.0.0.255 192.168.7.0 0.0.0.255

access-list 104. allow ip 192.168.0.0 0.0.0.255 192.168.5.0 0.0.0.255

not run cdp

sheep allowed 10 route map

corresponds to the IP 101

* REMOTE SITE

crypto ISAKMP policy 1

BA 3des

md5 hash

preshared authentication

Group 2

XXX address X.X.X.X isakmp encryption key

ISAKMP crypto keepalive 5 20

!

!

Crypto ipsec transform-set esp-3des esp-sha-hmac RIGHT

!

bssn 10 ipsec-isakmp crypto map

Connect to main BSSN description

defined peer X.X.X.X

Set transform-set RIGHT

match address 100

interface FastEthernet4

IP 216.X.X.X 255.255.255.224

NAT outside IP

IP virtual-reassembly

automatic duplex

automatic speed

card crypto bssn

!

interface Vlan1

Entry door

IP 192.168.1.2 255.255.255.0

IP directed broadcast to the

IP nat inside

IP virtual-reassembly

IP tcp adjust-mss 1452

!

IP classless

IP route 0.0.0.0 0.0.0.0 X.X.X.X

IP http server

local IP http authentication

IP http secure server

IP http timeout policy slowed down 60 life 86400 request 10000

IP nat inside source overload map route interface FastEthernet4 sheep

!

access-list 100 permit ip 192.168.1.0 0.0.0.255 192.168.0.0 0.0.0.255

access-list 101 deny ip 192.168.1.0 0.0.0.255 192.168.0.0 0.0.0.255

access-list 101 permit ip 192.168.1.0 0.0.0.255 any

not run cdp

sheep allowed 10 route map

corresponds to the IP 101

Thank you

Laughing out loud

On the remote router access list 100 should look like:

access-list 100 permit ip 192.168.1.0 0.0.0.255 any

On the main router, the 100 access list should look like:

access-list 100 permit ip any 192.168.1.0 0.0.0.255

HTH,

Kind regards

Kamal

Tags: Cisco Security

Similar Questions

  • Failed to get the connection between the router WRT54GS and roku

    Hello

    I am new to this. How can I get my router to connect to roku.

    When I enter my password router Roku he can't find the router. And when I use Cisco Network Magic, it does not find the Roku device.

    Thank you... I didn't was not completely able to get in... but I found that my personal wpa password was different from what I used... and then I've always had trouble getting in... but this has certainly helped.

    I entered the MAC address and then I was in!

    I am so grateful to all who have contributed and are looking for me and we all in this forum

  • Customers unable to browse the internet on the router from Cisco 871 K9

    Hello world

    "I just bought my Version of K9 Cisco router 871 running this flash system image: c870-advsecurityk9 - mz.124 - 4.T8.bin".

    I am trying to configure this router for home use, while I can block a part of Web traffic (porn sites, sites of films because of the children), but I realized that I was unable to apply the access list Match-class version url (http host).

    My major problem is still the base of the router config. WAN has a DHCP IP assignment with the 192.168.1.0 network

    The Lan is supposed to have 192.168.3.0 network. IP addresses seem to be properly attributed but not able to ping on the internet router. Local client also cannot resolve DNS. Here is my cofig file.

    Please help.

    Richard #sh run
    Building configuration...

    Current configuration: 1727 bytes
    !
    version 12.4
    no service button
    horodateurs service debug datetime msec
    Log service timestamps datetime msec
    no password encryption service
    !
    host Richard name
    !
    boot-start-marker
    boot-end-marker
    !
    !
    No aaa new-model
    !
    resources policy
    !
    IP subnet zero
    IP cef
    No dhcp use connected vrf ip
    !
    IP dhcp pool Richard pool
    import all
    network 192.168.3.0 255.255.255.0
    default router 192.168.3.1
    domain richardedet.com
    192.168.1.1 DNS server
    Rental 2 0
    !
    !
    !
    !
    !
    !
    !
    !
    !
    !
    interface FastEthernet0
    spanning tree portfast
    !
    interface FastEthernet1
    !
    interface FastEthernet2
    !
    interface FastEthernet3
    !
    interface FastEthernet4
    DHCP IP address
    Check IP unicast accessible source - via rx allow by default 100
    no ip redirection
    no ip unreachable
    no ip proxy-arp
    NAT outside IP
    IP virtual-reassembly
    automatic speed
    full-duplex
    !
    interface Vlan1
    Description Local network VLAN
    address 192.168.3.1 IP 255.255.255.0
    !
    IP classless
    IP route 0.0.0.0 0.0.0.0 FastEthernet4
    IP route 192.168.3.0 FastEthernet4 255.255.255.0
    !
    no ip address of the http server
    no ip http secure server
    overload of IP nat inside source list 101 interface FastEthernet4
    IP nat inside source map route RMAP-NAT interface FastEthernet4 overload
    The dns server IP
    !
    recording of debug trap
    recording ease Committee.2
    access-list 100 permit udp any any eq bootpc
    access-list 100 permit tcp any one
    access-list 100 permit icmp any one
    access-list 101 permit ip 192.168.3.0 0.0.0.255 any
    !
    control plan
    !
    !
    Line con 0
    richard password
    opening of session
    no activation of the modem
    telnet output transport
    line to 0
    richard password
    opening of session
    telnet output transport
    line vty 0 3
    richard password
    opening of session
    entry ssh transport
    line vty 4
    richard password
    opening of session
    !
    max-task-time 5000 Planner
    end

    Hello

    problem is that you have changed the IP address of the interface VLAN 1 from 192.168.1.254 to 192.168.1.1
    If you need to change by default-router dhcp pool:
    Select conf t
    Richard-Edet dhcp IP pool
    no default router
    default router 192.168.1.1
    end

    NAT is also missing:
    Enable
    conf t
    IP access-list standard NAT
    permit 192.168.1.0 0.0.0.255
    output
    IP nat inside source list NAT interface SA4 overload
    end

    Also perhaps you cannot ping the router console PC because the computer's firewall blocks the ICMP protocol. In windows, I'm sure he is blocked by the firewall. Then you can try ping 192.168.1.1 from the PC and it should work.

    Try above changes and then write me if it works, or so we can make other changes.
    You can also post the output of the commands (if this will not work):
    router: ip road show
    router: ping 8.8.8.8 (it should work if your internet provider doesn´t blocks the ICMP protocol)
    PC: ipconfig/all

  • So I updated the current software on my iPhone 6 and wifi started to play it doesn't work when I'm near the router up and when I'm away from her stops working someone can help me?

    the wifi does not work on my iPhone when I'm away from the router in my room, but it's not too far, it's like a couple of inches away from the living room and it does not work for some reason...

    First restart the router - remove all power for 15 to 30 seconds.

    If that is fixed not try to change channels on the router using the router configuration panel.

    On the phone go to settings/general/reset - Reset network settings if any of the above doesn't help. It will be reentering your WiFi password.

  • Various installation with the Portege R100 and Windows XP issues

    Hello

    I recently bought a used Portege R100. It came without OS and I wanted to install XP SP2.

    I know that restorations only work with PCMCIA readers adapted, but the HARD drive is formatted, so there is no recovery possible I guess.
    Here are my problems:
    -with my very old Freecom PCMCIA CD player the Windows installation CD is recognized, and it starts to load the XP drivers until he wants to start copying files installiation--> then I get the blue screen of Windows with the error 00 x 7 (virus or driver)
    -the same thing happens with my former W2k Pro installation disc.
    -With the even more ancient W98SE, strange things are happening too: installation seems to work fine, but when it comes to start with W98SE, for the first time, the system hangs up with pixelgarbage.
    -Make the 6 Bootdisks with makeboot doesn't work anymore.
    -J' also tried MS-DOS! And guess what! It worked! Loading the Freecom drivers and copy of Windows I386 folder on my hard drive with the volkov Commander (something similar to NortonCommander) worked too! So I got hav files on my drive but after running Windows NT in the i386 folder, the system hangs after some time, when it starts to copy the files to a temporary folder.

    So I tried almost everything I know. at this moment I am download knoppix to try it.

    I ran Memtest86 and 9 Diskmanager to test the RAM and HARD drive, finished two withut errors, so the priority of main parts in the installation process seems to work. Maybe it's that my IDE controller is broken?
    I have no idea, WHY does he not move windows!

    Help is hot!

    Thank you

    Christian
    Does

    It should work out that way, run you own your HD first in Fat32format - file-system, otherwise it won't work!
    Don't forget to use "smartdrive' in your BACK-commissioning, otherwise it will take a lot of time, even the 'freeze' is possible.

    See also: http://forums.computers.toshiba-europe.com/forums/thread.jspa?threadID=19232

  • Tunnel GRE / IP Sec VPN firewall between the router Cisco and Fortigate

    Hello

    Can I do GRE Tunnel / VPN IP Sec between Cisco router and Fortigate Firewall?

    Thank you

    Hi zine,.

    As long as the Fortigate device support GRE over IPSEC, you will be able to create the tunnel between these 2 devices.

    Here is the config for the Cisco Site:

    https://supportforums.Cisco.com/document/16066/how-configure-GRE-over-IPSec-tunnel-routers

    Happy holidays!

    -Randy-

  • Gather the router E2500 and Voip DMZ box

    I had an old belkin router which is dead.  I have port forwarding and DMZ through my box Voip IP 192.198.0.1XX (immutable de.0.1) my new router IP is 192.168.1.1 now (DMZ immutable a.0.1) and I'm not sure how to get all DMZ d together and without flow.  Any help would be greatly appreciated, I searched and found nothing on this issue.  Thank you

    Hey, mustache! Have you tried to specify the device in the DMZ by MAC address instead of the IP address? To do this, click here. Update us how it goes!

    Kind regards

    Ethel_10700

    Linksys technical support

  • Problem router Cisco and Checkpoint VPN

    Hello

    I couldn't establish vp from site to site between cisco and checkpoint. Can you please check the logs?

    Thank you.

    * 29 sept 08:17:22.627: IPSEC (sa_request):,.
    (Eng. msg key.) Local OUTGOING = Y.Y.Y.Y:500, distance = X.X.X.X:500,
    local_proxy = 192.168.222.0/255.255.255.0/256/0,
    remote_proxy = 10.0.10.0/255.255.255.0/256/0,
    Protocol = ESP, transform = esp - aes 256 esp-sha-hmac (Tunnel),
    lifedur = 3600 s and KB 4608000,
    SPI = 0 x 0 (0), id_conn = 0, keysize = 256, flags = 0 x 0
    * 29 sep 08:17:22.631: ISAKMP: (0): profile of THE request is (NULL)
    * 29 sep 08:17:22.631: ISAKMP: created a struct peer X.X.X.X, peer port 500
    * 29 sep 08:17:22.631: ISAKMP: new created position = 0x88AD1AB0 peer_handle = 0 x 80000004
    * 29 sep 08:17:22.631: ISAKMP: lock struct 0x88AD1AB0, refcount 1 to peer isakmp_initiator
    * 29 sep 08:17:22.631: ISAKMP: 500 local port, remote port 500
    * 29 sep 08:17:22.631: ISAKMP: set new node 0 to QM_IDLE
    * 29 sep 08:17:22.631: ISAKMP: (0): insert his with his 88AF7D94 = success
    * 29 sep 08:17:22.631: ISAKMP: (0): cannot start aggressive mode, try the main mode.
    * 29 sep 08:17:22.631: ISAKMP: (0): pre-shared key found peer corresponding X.X.X.X
    * 29 sep 08:17:22.631: ISAKMP: (0): built of NAT - T of the seller-rfc3947 ID
    * 29 sep 08:17:22.631: ISAKMP: (0): built the seller-07 ID NAT - t
    * 29 sep 08:17:22.631: ISAKMP: (0): built of NAT - T of the seller-03 IDexit
    Router (config) #n
    * 29 sep 08:17:22.631: ISAKMP: (0): built the seller-02 ID NAT - t
    * 08:17:22.631 Sept. 29: ISAKMP: (0): entry = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM
    * 08:17:22.631 Sept. 29: ISAKMP: (0): former State = new State IKE_READY = IKE_I_MM1

    * 29 sep 08:17:22.631: ISAKMP: (0): Beginner Main Mode Exchange
    * 29 sep 08:17:22.631: ISAKMP: (0): package to X.X.X.X my_port 500 peer_port 500 (I) sending MM_NO_STATE
    * 08:17:22.631 Sept. 29: ISAKMP: (0): a Packet.o IKE IPv4 send

    * 29 sep 08:17:32.631: ISAKMP: (0): transmit phase 1 MM_NO_STATE...
    * 29 sep 08:17:32.631: ISAKMP (0): increment the count of errors on his, try 1 5: retransmit the phase 1
    * 29 sep 08:17:32.631: ISAKMP: (0): transmit phase 1 MM_NO_STATE
    * 29 sep 08:17:32.631: ISAKMP: (0): package to X.X.X.X my_port 500 peer_port 500 (I) sending MM_NO_STATE
    * 08:17:32.631 Sept. 29: ISAKMP: (0): sending of a CPVPN IKE IPvaccess lists

    * 29 sep 08:17:42.631: ISAKMP: (0): transmit phase 1 MM_NO_STATE...
    * 29 sep 08:17:42.631: ISAKMP (0): increment the count of errors on his, try 2 of 5: retransmit the phase 1
    * 29 sep 08:17:42.631: ISAKMP: (0): transmit phase 1 MM_NO_STATE
    * 29 sep 08:17:42.631: ISAKMP: (0): package to X.X.X.X my_port 500 peer_port 500 (I) sending MM_NO_STATE
    * 08:17:42.631 Sept. 29: ISAKMP: (0): sending a packet IPv4 IKE...
    * 29 sep 08:17:52.627: IPSEC (key_engine): request timer shot: count = 1,.
    local (identity) = Y.Y.Y.Y:0, distance = X.X.X.X:0,
    local_proxy = 192.168.222.0/255.255.255.0/256/0,
    remote_proxy = 10.0.10.0/255.255.255.0/256/0
    * 29 sept 08:17:52.627: IPSEC (sa_request):,.
    (Eng. msg key.) Local OUTGOING = Y.Y.Y.Y:500, distance = X.X.X.X:500,
    local_proxy = 192.168.222.0/255.255.255.0/256/0,
    remote_proxy = 10.0.10.0/255.255.255.0/256/0,
    Protocol = ESP, transform = esp - aes 256 esp-sha-hmac (Tunnel),
    lifedur = 3600 s and KB 4608000,
    SPI = 0 x 0 (0), id_conn = 0, keysize = 256, flags = 0 x 0
    * 29 sep 08:17:52.627: ISAKMP: set new node 0 to QM_IDLE
    * 29 sep 08:17:52.627: ISAKMP: (0): SA is still budding. Attached new request ipsec. (local Y.Y.Y.Y, distance X.X.X.X)
    * 29 sep 08:17:52.627: ISAKMP: error during the processing of HIS application: failed to initialize SA
    * 29 sep 08:17:52.627: ISAKMP: error while processing message KMI 0, error 2.
    * 29 sep 08:17:52.631: ISAKMP: (0): transmit phase 1 MM_NO_STATE...
    * 29 sep 08:17:52.631: ISAKMP (0): increment the count of errors on his, try 3 of 5: retransmit the phase 1
    * 29 sep 08:17:52.631: ISAKMP: (0): transmit phase 1 MM_NO_STATE
    * 29 sep 08:17:52.631: ISAKMP: (0): package to X.X.X.X my_port 500 peer_port 500 (I) sending MM_NO_STATE
    * 08:17:52.631 Sept. 29: ISAKMP: (0): sending a packet IPv4 IKE.
    * 29 sep 08:18:02.631: ISAKMP: (0): transmit phase 1 MM_NO_STATE...
    * 29 sep 08:18:02.631: ISAKMP (0): increment the count of errors on his, try 4 out 5: retransmit the phase 1
    * 29 sep 08:18:02.631: ISAKMP: (0): transmit phase 1 MM_NO_STATE
    * 29 sep 08:18:02.631: ISAKMP: (0): package to X.X.X.X my_port 500 peer_port 500 (I) sending MM_NO_STATE
    * 08:18:02.631 Sept. 29: ISAKMP: (0): sending a packet IPv4 IKE.
    * 29 sep 08:18:12.631: ISAKMP: (0): transmit phase 1 MM_NO_STATE...
    * 29 sep 08:18:12.631: ISAKMP (0): increment the count of errors on his, try 5 of 5: retransmit the phase 1
    * 29 sep 08:18:12.631: ISAKMP: (0): transmit phase 1 MM_NO_STATE
    * 29 sep 08:18:12.631: ISAKMP: (0): package to X.X.X.X my_port 500 peer_port 500 (I) sending MM_NO_STATE
    * 08:18:12.631 Sept. 29: ISAKMP: (0): sending a packet IPv4 IKE.
    * 29 sep 08:18:22.627: IPSEC (key_engine): request timer shot: count = 2,.
    local (identity) = Y.Y.Y.Y:0, distance = X.X.X.X:0,
    local_proxy = 192.168.222.0/255.255.255.0/256/0,
    remote_proxy = 10.0.10.0/255.255.255.0/256/0
    * 29 sep 08:18:22.631: ISAKMP: (0): transmit phase 1 MM_NO_STATE...
    * 29 sep 08:18:22.631: ISAKMP: (0): the peer is not paranoid KeepAlive.

    * 29 sep 08:18:22.631: ISAKMP: (0): removal of reason ITS status of 'Death by retransmission P1' (I) MM_NO_STATE (peer X.X.X.X)
    * 29 sep 08:18:22.631: ISAKMP: (0): removal of reason ITS status of 'Death by retransmission P1' (I) MM_NO_STATE (peer X.X.X.X)
    * 29 sep 08:18:22.631: ISAKMP: Unlocking counterpart struct 0x88AD1AB0 for isadb_mark_sa_deleted(), count 0
    * 29 sep 08:18:22.631: ISAKMP: delete peer node by peer_reap for X.X.X.X: 88AD1AB0
    * 29 sep 08:18:22.631: ISAKMP: (0): node-930113685 error suppression FALSE reason 'IKE deleted.
    * 29 sep 08:18:22.631: ISAKMP: (0): error suppression node 661004686 FALSE reason 'IKE deleted.
    * 08:18:22.631 Sept. 29: ISAKMP: (0): entry = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
    * 08:18:22.631 Sept. 29: ISAKMP: (0): former State = new State IKE_I_MM1 = IKE_DEST_SA

    * 29 sep 08:18:22.631: IPSEC (key_engine): had an event of the queue with 1 KMI message (s)
    * 29 sept 08:18:27.559: IPSEC (sa_request):,.
    (Eng. msg key.) Local OUTGOING = Y.Y.Y.Y:500, distance = X.X.X.X:500,
    local_proxy = 192.168.222.0/255.255.255.0/256/0,
    remote_proxy = 10.0.10.0/255.255.255.0/256/0,
    Protocol = ESP, transform = esp - aes 256 esp-sha-hmac (Tunnel),
    lifedur = 3600 s and KB 4608000,
    SPI = 0 x 0 (0), id_conn = 0, keysize = 256, flags = 0 x 0
    * 29 sep 08:18:27.559: ISAKMP: (0): profile of THE request is (NULL)
    * 29 sep 08:18:27.559: ISAKMP: created a struct peer X.X.X.X, peer port 500
    * 29 sep 08:18:27.559: ISAKMP: new created position = 0x85EDF1F0 peer_handle = 0 x 80000005
    * 29 sep 08:18:27.559: ISAKMP: lock struct 0x85EDF1F0, refcount 1 to peer isakmp_initiator
    * 29 sep 08:18:27.559: ISAKMP: 500 local port, remote port 500
    * 29 sep 08:18:27.559: ISAKMP: set new node 0 to QM_IDLE
    * 29 sep 08:18:27.559: ISAKMP: find a dup her to the tree during the isadb_insert his 88C1CE60 = call BVA
    * 29 sep 08:18:27.559: ISAKMP: (0): cannot start aggressive mode, try the main mode.
    * 29 sep 08:18:27.559: ISAKMP: (0): pre-shared key found peer corresponding X.X.X.X
    * 29 sep 08:18:27.559: ISAKMP: (0): built of NAT - T of the seller-rfc3947 ID
    * 29 sep 08:18:27.559: ISAKMP: (0): built the seller-07 ID NAT - t
    * 29 sep 08:18:27.559: ISAKMP: (0): built of NAT - T of the seller-03 ID
    * 29 sep 08:18:27.559: ISAKMP: (0): built the seller-02 ID NAT - t
    * 08:18:27.559 Sept. 29: ISAKMP: (0): entry = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM
    * 08:18:27.559 Sept. 29: ISAKMP: (0): former State = new State IKE_READY = IKE_I_MM1

    * 29 sep 08:18:27.559: ISAKMP: (0): Beginner Main Mode Exchange
    * 29 sep 08:18:27.559: ISAKMP: (0): package to X.X.X.X my_port 500 peer_port 500 (I) sending MM_NO_STATE
    * 08:18:27.559 Sept. 29: ISAKMP: (0): sending a packet IPv4 IKE.
    * 29 sep 08:18:37.559: ISAKMP: (0): transmit phase 1 MM_NO_STATE...
    * 29 sep 08:18:37.559: ISAKMP (0): increment the count of errors on his, try 1 5: retransmit the phase 1
    * 29 sep 08:18:37.559: ISAKMP: (0): transmit phase 1 MM_NO_STATE
    * 29 sep 08:18:37.559: ISAKMP: (0): package to X.X.X.X my_port 500 peer_port 500 (I) sending MM_NO_STATE
    * 08:18:37.559 Sept. 29: ISAKMP: (0): sending a packet IPv4 IKE.
    * 29 sep 08:18:47.559: ISAKMP: (0): transmit phase 1 MM_NO_STATE...
    * 29 sep 08:18:47.559: ISAKMP (0): increment the count of errors on his, try 2 of 5: retransmit the phase 1
    * 29 sep 08:18:47.559: ISAKMP: (0): transmit phase 1 MM_NO_STATE
    * 29 sep 08:18:47.559: ISAKMP: (0): package to X.X.X.X my_port 500 peer_port 500 (I) sending MM_NO_STATE
    * 08:18:47.559 Sept. 29: ISAKMP: (0): sending a packet IPv4 IKE.

    * 29 sep 08:18:57.559: IPSEC (key_engine): request timer shot: count = 1,.
    local (identity) = Y.Y.Y.Y:0, distance = X.X.X.X:0,
    local_proxy = 192.168.222.0/255.255.255.0/256/0,
    remote_proxy = 10.0.10.0/255.255.255.0/256/0
    * 29 sept 08:18:57.559: IPSEC (sa_request):,.
    (Eng. msg key.) Local OUTGOING = Y.Y.Y.Y:500, distance = X.X.X.X:500,
    local_proxy = 192.168.222.0/255.255.255.0/256/0,
    remote_proxy = 10.0.10.0/255.255.255.0/256/0,
    Protocol = ESP, transform = esp - aes 256 esp-sha-hmac (Tunnel),
    lifedur = 3600 s and KB 4608000,
    SPI = 0 x 0 (0), id_conn = 0, keysize = 256, flags = 0 x 0
    * 29 sep 08:18:57.559: ISAKMP: set new node 0 to QM_IDLE
    * 29 sep 08:18:57.559: ISAKMP: (0): SA is still budding. Attached new request ipsec. (local Y.Y.Y.Y, distance X.X.X.X)
    * 29 sep 08:18:57.559: ISAKMP: error during the processing of HIS application: failed to initialize SA
    * 29 sep 08:18:57.559: ISAKMP: error while processing message KMI 0, error 2.
    * 29 sep 08:18:57.559: ISAKMP: (0): transmit phase 1 MM_NO_STATE...
    * 29 sep 08:18:57.559: ISAKMP (0): increment the count of errors on his, try 3 of 5: retransmit the phase 1
    * 29 sep 08:18:57.559: ISAKMP: (0): transmit phase 1 MM_NO_STATE
    * 29 sep 08:18:57.559: ISAKMP: (0): package to X.X.X.X my_port 500 peer_port 500 (I) sending MM_NO_STATE
    Router #.
    Router #.
    * 08:18:57.559 Sept. 29: ISAKMP: (0): sending a packet IPv4 IKE.
    * 29 sep 08:19:07.559: ISAKMP: (0): transmit phase 1 MM_NO_STATE...
    * 29 sep 08:19:07.559: ISAKMP (0): increment the count of errors on his, try 4 out 5: retransmit the phase 1
    * 29 sep 08:19:07.559: ISAKMP: (0): transmit phase 1 MM_NO_STATE
    * 29 sep 08:19:07.559: ISAKMP: (0): package to X.X.X.X my_port 500 peer_port 500 (I) sending MM_NO_STATE
    * 08:19:07.559 Sept. 29: ISAKMP: (0): sending a packet IPv4 IKE.
    Router #.
    Router #un all
    All possible debugging has been disabled

    The log shows main mode setup has failed.  See if this helps: http://www.itcertnotes.com/2011/04/ipsec-stuck-in-mmsasetup-and-mmnostat...

  • NAT via LAN-to-LAN configuration between router IOS and Cisco VPN 3000

    Hello

    I have the following document on the creation of a virtual LAN2LAN including NAT private network.

    http://www.Cisco.com/en/us/products/HW/vpndevc/ps2284/products_configuration_example09186a00801ae24c.shtml

    It? s easily do this with the hub. Now, I have to set it up on the IOS router, and for this purpose, I can? t find any information. NAT, I have my private network to a single IP address that must be by tunnel as my local network official.

    Anyone have documentation on this szenario? I can? t is not on the OCC.

    Thanks for the support

    Hello.

    Concentrators are very friendly units (IMHO) to VPN with NAT and VPN.

    You build an acl defined traffic over the vpn (110) based on the nat wouldn't

    You create an acl to set what is NAT had (111) and create a NAT statement accordingly

    Here is an example configuration.

    !

    crypto ISAKMP policy 10

    BA 3des

    md5 hash

    preshared authentication

    Group 2

    vpnsrock crypto isakmp key! address x.x.x.x

    !

    !

    Crypto ipsec transform-set esp-SHA-ESP-3DES-3des esp-sha-hmac

    !

    10 VPN ipsec-isakmp crypto map

    defined peer x.x.x.x

    game of transformation-ESP-3DES-SHA

    match address 110

    !

    interface Fa0

    NAT outside IP

    VPN crypto card

    !

    !

    interface fa1

    IP nat inside

    !

    IP nat inside source list 111 interface fa0 overload

    IP route 0.0.0.0 0.0.0.0 y.y.y.y

    access-list 110 permit ip fa0 - ip network-remote control-generic generic-mask

    access-list 111 allow local-network ip network-remote control-generic generic-mask

    !

  • Can I remove the 10.6 and bootcamp or windows still work with previous 10.11 installation?

    I have an early 2009 mac mini, 10.6 installed bootcamp at the same time on the hard drive. Have windows 7 installed on bootcamp.

    Recently, I removed the CD - RW drive and put in an SSD. I then installed 10.11 on this drive and use it as the startup of the operating system. I noticed that I can run applications that has been installed to 10.6, Autocad 2013 being a.

    What I would do is make hard drive on the old hard drive space by removing the 10.6. I can do this without destroying the current installation of bootcamp and windows 7 install?

    Due to the limited space on the SSD drive, after removing 10.6 I want to update my old applications and install less 10.11 but actually during the installation, install the actual application on the old hard drive files. Of course I know that it works, as stated above and previous experience.

    Fundamental question needs to be able to always use bootcamp and windows 7 install I have now, even after the removal of 10.6. Is this possible?

    Once Windows is installed (W7 in your case), it is autonomous. But it is very sensitive to partitioning of the changes/resizing efforts.

    If you want to keep the old Applications (10.6) intact and on the old disk, but use the 10.11 on the SSD, the only space you get in return is at the heart of 10.6 OS. It is usually 16 to 32GB.

    If you have verified that each of your applications is fully functional under 10.11, backup Applications on an external drive and erase only 10.6 partition. Create a reader of 'Fusion' between the SSD and the old HARD drive 10.6 and then drag Applications from the external drive in the Fusion drive application. It will also give you performance SSD for your Applications, rather than leave it on the HARD drive part that will slow them down.

  • Please help me with the video card and power supply issues!

    Hello and thanks in advance for any help. I'll try and do a short explanation, but I can't promise anything. I bought an a6620f Pavilion about 2 months ago I didn't know that you had to purchase a special hardware in order to play video games. In any case, I bought about 300.00 worth of new video games and none of them works. they say because of my video card. Then try to buy a new video card and it won't work because I only have a 250 watt power supply. I spoke with a hp technician before you buy a PSU and I was told that my motherboard was only designed to use a 300 watt max power I tried to buy one at best buy and the clerk said 4500 is the smallest they sell. and I need at least a 400 Watt or powerrsupply to make the new video card with a value of buyiong. My questuion is what can I do if I can't buy one more big power supply how can I install a new video casrd? Please help me I'm lost

    Oh and in case you want some specs on my system here are a few

    Windows Vista Home premium service pack1
    HP Pavilion a6620f
    Processor: pentium dual core cpu e5200 @ 2.50 GHZ
    memory: 4.00 GB
    system type: 64-bit operating system
    Version of DirectX 10
    graphics card: intel GMA 3100 Total memory 256 MB

    Message edited by chefinomaha on 06/03/2009 16:38

    Hi chefinomaha,

    Sorry to hear about your frustration. Here's some good news.

    I think you have been misinformed or there was a communication error. Your motherboard should not be limited to the only 300W. I don't know with certainty how high you can go in watts, but you can go higher and should go higher, if you add a video card.

    The important thing is to get the right kind of diet that fits your connectors.

    Here's your motherboard page.

    Here is a document with step-by-step instructions and video for adding a video card.

    Here is a document with the video to replace the power supply.

  • isolate the unique setting and export as a still?

    A pointer to a workflow to take a single image of the video clip in the BODY and export in a format for printing a photo?

    Press one of these buttons:

  • After that I updated my ios in tune with my ipad some time ago I can not activate my ipad I tried of the apple ID and my password but still can't... How can I reset my apple ID and password?

    I've updated my ios in tune with my ipad this morning... When sound already updated, I can't activate my ipad apple ID and password... what will I do to reset my apple ID?

    Start here:

    https://iforgot.Apple.com

  • DeskJet 3520: Simultaneous connection to the router wifi and DJ3520.

    How can I set up the printer so that I don't have to unplug my befor internet connection I can print.

    Well the best place for that information is the User Guide that you got with the printer or download from the page of full HP support here.

    http://support.HP.com/us-en/product/HP-DeskJet-3520-e-all-in-one-printer-series/5162504/model/5162505/manuals

    Whatever you are looking for is here.   Page 35 of the user's Guide says it all.

  • Computer does not recognize 3050 HP printer ip if the router, computer and the printer off


    Hi there @Bbandb , I hope you are well!

    It seems that the printer is disconnected from the network when it is switched off. I would say that you are trying to assign a static IP address to the printer to help stabilize the connection. I hope that will prevent network disconnections!

    Click here for help on the allocation of static IP address: printer does not maintain the wireless connection

    I hope that helps

Maybe you are looking for

  • Problems after restoration

    I just got a 5 s Iphone I restored it from a backup of my Iphone 4 and everything said this worked. The phone has all my data but when I stop and start up it goes through Setup all over again asking English this and asking where to restore them again

  • How can I migrate my group with my address book lists?

    I moved from Windows XP to Ubuntu (YES!). I used TB on XP and I was able to pass my address book with all my contacts information by copying and pasting the abook.mab file. But I seem to have lost (or at least, I am currently out) the group lists tha

  • Email choice app client

    I wanted the same IE version as it was on my Vista laptop because I believe that Windows Mail is part of this version. I can't find an e-mail client to replace Outlook Express that was on my XP desktop and I tried Windows Live Mail and found it terri

  • Microsoft sent an email asking for your username and password and what country you are, of stateing, that they were up-to-date at your service

    Original title: microsoft servvice I wanted to know if microsoft has sent an email asking for your username and password and what country you're stateing they were at your service day and need information to do

  • Its icon on the taskbar

    I have Windows Vista. I got my PC in the shop for repairs. When I got back my sound icon was no longer in the taskbar. I can't seem to figure how to get it back if I can change the volume quickly and easily