Timeout VPN

Similar Questions

• How to increase the speed of work and avoid the "Server timeouts" with VPN and?

  Hello!

  I am faced with slow work and delays in Thunderbird to my Linux.

  I have 4 accounts (3 are connected via IMAP) and two of them runs very slowly. Fear that every time I see annoying message at end of the period of the server and each message (same old) opens very slowly and sometimes doesn't open.

  It maybe the problem in services postal themselves, or illustrated by the 4th account is Exchange (which work much faster in fact), but I need to manage that somehow. I think I had a fast enough internet connection.

  I know that the server timeout could be increased, but I have not found this option in the settings. I have 31 TB, and all the settings, I found in Google seems to be linked to the old version with the old interfaces. I went to advanced settings, I'm not sure that it's settings and what value it must contain.

  In addition, has something like 'caching 'mail TB? I mean, during the reception of the new letter - it is "cached" locally, so when I try to read - local version is used until "cache" is cleaned. But when I delete or move the letter to another folder - happening also at the level of the server. I think that if TB could sync all mails and store their values locally this will work much faster.

  Thanks for any possible solution to this.

  It seems to me that I found the root cause of the problem)

  Problem is not in TB, but in these 2 mail services itself. They work poorly when vpn works.

  Will address this issue for messaging services.

• AC VPN: vpn-session-timeout and prompt the user

  Hello

  Is it possible to invite the user to continue the session shortly before it hits the vpn-session-timeout value (ASA).

  Thank you

  Sean

  Sean,

  I believe that no job like this been done on it by the BU.

  We had this never open a:

  https://Tools.Cisco.com/bugsearch/bug/CSCsx17267/?reffering_site=dumpcr

  M.

• The 'IETF-RADIUS-Idle-Timeout' value substitute "Vpn-session-timeout' of group policy?

  Hello community,

  I wish to have a dynamic substitution of "Vpn-session-timeout' of Group Policy (using"ldap attribute-map").

  Read the section "Support for RADIUS authorization attributes" of the SAA, it is not clear, but apparently attribute 'IETF-RADIUS-Session-Timeout' being Cisco attribute name of the ASA to "vpn-session-timeout '.

  Can anyone confirm?

  R, Alex

  Yes!

  http://www.Cisco.com/en/us/docs/net_mgmt/cisco_secure_access_control_ser...

• IPSec VPN auto-timeout after 60 Minutes

  Dear all,

  I am facing a problem. When my clients are connecting remote VPN IPSec an hour it automatically disconnects the connection. Users need to be re - authenticate. I also changed the timekeepers of the IPSec Security Association and timer ISAKMP, but still the same problem persists.

  According to my findings my user authentication becomes Cisco ACS/RADIUS server, which is running on the default settings and the policy is enforced by Cisco ACS. I have a suggestion how can I set the timer and to address this problem.

  Any suggestion?

  Waiting for your RESPONSE.

  Concerning

  Yasser

  Yasir,

  What version of ACS you run and very probably the attribute "session timeout" is probably sent, you can extend this attribute or remove it on the status of the authorization.

  Let me know what version of ACS you run and I can walk you through it...

  Thank you

  Tarik Admani
  * Please note the useful messages *.

• Select the timeout on ASA Cisco Anyconnect VPN

  Hello world

  I use the Cisco Anyconnect VPN client with the ASA 5540 firewall. I need allow a time-out on the VPN clients, so they log off after x hours of inactivity.

  Thank you to

  Best respect

  Hello

  To my understanding of the default timeout value is 30 minutes

  You should be able to change this setting in the "username" configurations (if you use LOCAL AAA on the SAA) or under the configurations of the 'group policy' .

  The command is

  VPN-idle-timeout

  Here is the link of the commands reference

  http://www.Cisco.com/c/en/us/TD/docs/security/ASA/ASA-command-reference/...

  -Jouni

• VPN Client Login Prompt Timeout too short?

  Hello

  Client VPN 4.0.3 / IOS 12.3 (2) T4

  Is it possible to change the default time-out for the name of username/password prompt? By default, users has only 30 seconds to enter their credentials.

  I found IOS command 'login timeout reply' that does exactly what I want, but it seems that this order cannot be applied under lines.

  Thanks for your help

  > isakmp xauth timeout crypto

  will do the trick for you.

• VPN client idle timeout (need to order)

  Hello Experts,

  I have the current configuration:

  Router Cisco 3700 and a version of the client vpn cisco 4.7

  I would like to know what is the command set up on the router so that my vpn clients may be inactive for 1 hour or more without having previously disconnected.

  Thank you very much

  Randall

  Hi Randall,.

  You can use the following command to increase the idle-timeout:

  cry dynamic-map 1

  all security association idle time<60-86400s>

  output

  * Please rate if this helped.

  -Kanishka

• How to configure the IKEv2 VPN on Mac OS Server 10.12

  IKEv2 is mentioned in the release notes for Server 5.2 but I can't find instructions anywhere are related.  Anyone know where I could find a tutorial to set up?

  If you are referring to.

  • New IKEv2 authentication method option or specify IPSec disconnect on timeout for VPN

  Then it is a new feature for the profile on Server.app Manager is not a new feature of the VPN on Server.app server. You will need to use a different non-Apple supplied VPN server in order to implement IKEv2.

  Note: as customers El Capitan or later, and iOS 9 or later support IKEv2. (iOS 8 had limited support.)

• RRAS issues! -Unable to connect to the VPN users,

  original title: RRAS issues!

  Hi all, I have some real issues with my RRAS VPN. All of a sudden the users are randomly cannot connect to the VPN. Making mistakes like 619 800 and so on. I activated the GRE (once the problem starts) checked to see if the 1723 port is open. Why is this happening now?

  I use DynDns host name and everything seems fine, fact that there are enough ports available to PPTP on the RRAS.

  I am running Windows 2003 SBS SP2

  Router is a MAKO 6861 with a normal ADSL line

  I see this in the PPP.log:

  [8128] 06-04 10:27:27:794: Recv timeout event received for portid = 288, Id = 5, Protocol c021, fAuth = 0 =
  [8128] 06-04 10:27:27:794:
  [8128] 06-04 10:27:27:794:
  [8128] 10:27:27:794:
  [8128] 10:27:27:794: <06 57="" eb="" 0d="" 3e="" 07="" 02="" 08="" 02="" 0d="" 03="" 06="" 11="" 04="" 06="" 4e="" |.w..="">... N |
  [8128] 10:27:27:794:<13 17="" 01="" b0="" 09="" a5="" e1="" 15="" e6="" 49="" 4f="" 85="" fb="" 7c="" a0="" 15="">
  [8128] 10:27:27:794:

  And some of this:

  [8128] 06-04 10:27:43:325: line before the end event occurred on port 138
  [8128] 10:27:43:325 06-04: FsmDown event is received for Protocol c021 on port 138
  [8128] 10:27:43:325 06-04: RemoveFromTimerQ called portid = 288, Id = 9, Protocol is c021, EventType = 0, = 0 fAuth
  [8128] 10:27:43:325 06-04: FsmReset called Protocol c021, port = 138 =
  [8128] 10:27:43:325 06-04: RemoveFromTimerQ called portid = 288, Id = 0, = 0 protocol, EventType = 3, fAuth = 0
  [8128] 10:27:43:325 06-04: RemoveFromTimerQ called portid = 288, Id = 0, = 0 protocol, EventType = 7, fAuth = 0
  [8128] 10:27:43:325 06-04: RemoveFromTimerQ called portid = 288, Id = 0, = 0 protocol, EventType = 2, fAuth = 0
  [8128] 10:27:43:325 06-04: RemoveFromTimerQ called portid = 288, Id = 0, = 0 protocol, EventType = 1, = 0 fAuth
  [8128] 10:27:43:325 06-04: RemoveFromTimerQ called portid = 288, Id = 0, = 0 protocol, EventType = 4, = 0 fAuth
  [8128] 10:27:43:325 06-04: RemoveFromTimerQ called portid = 288, Id = 0, Protocol is c029, EventType = 0, = 0 fAuth
  [8128] 06-04 10:27:43:325: LcpEnd
  [8128] 06-04 10:27:43:325: line Post event took place on the port 138
  [8128] 06-04 10:27:43:325: NotifyCaller (hPort = 138, dwMsgId = 23)
  [8128] 06-04 10:27:48:043: line-up event took place on the port 138
  [8128] 06-04 10:27:48:043: PortName: VPN3-19
  [8128] 06-04 10:27:48:043: from PPP link with IfType = 0x0, 1p1f = 0 x 0, IPXIf = 0 x 0
  [8128] 10:27:48:043 06-04: RasGetBuffer returned 58 c 2148 to SendBuf
  [8128] 10:27:48:043 06-04: FsmInit called Protocol c021, port = 138 =
  [8128] 06-04 10:27:48:043: ConfigInfo = 80260
  [8128] 06-04 10:27:48:043: available APs = 2
  [8128] 10:27:48:043 06-04: FsmReset called Protocol c021, port = 138 =

  Hello

  Your question of Windows Server is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the IT Pro TechNet public.

  Please ask your question in the Technet Windows Server General category.
  http://social.technet.Microsoft.com/forums/en-us/winservergen/threads

• How to speed up the drive mapped persistent unavailable timeout?

  I have a mapped drive on my laptop that is only accessible when I am connected to my work VPN.

  If I'm not on the VPN or connected to the internet, open "My computer" or by searching for the results equivalent directory in a timeout, two Windows waits to try to access the drive.

  It is extremely annoying, because it takes time interminably long to determine that the drive is not accessible. How can I reduce this time? Is there a registry key, that I can change or some other parameter?

  Thank you

  Richard

  Hi Richard,

  Your question of Windows is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the IT audience Pro on TechNet, the machine is connected to the virtual private network (VPN).

  Please ask your question in the Forums Pro Windows XP IT.

• RV042 VPN tunnel with Samsung Ubigate ibg2600 need help

  Hi all, ok before I completely remove all of my hair, I thought stop by here and ask the volume for you all with the hope that someone can track down the problem.

  In short I am configuring a 'Gateway to gateway' vpn tunnel between two sites, I don't have access to the config of the router from Samsung, but the ISPS making sure that they followed my setup - watching newspapers RV042, I don't however see the reason for the failure - im no expert vpn...

  Sorry if the log file turns on a bit, I didn't know where the beginning and the end was stupid I know... any advice would be greatly welcomed lol.

  System log
  Current time: Fri Sep 2 03:37:52 2009 all THE Log Log Log Log VPN Firewall Access system
   
  Time
  Type of event Message
  2 sep 03:36:01 2009 value of VPN Log [Tunnel negotiation Info] Inbound SPI = c3bdba08
  2 sep 03:36:01 2009 value of outbound SPI VPN Log [Tunnel negotiation Info] = c664c1ca
  2 sep 03:36:02 2009 VPN Log [Tunnel negotiation Info] > initiator send fast Mode 3rd package
  2 sep 03:36:02 2009 VPN Log [Tunnel negotiation Info] Quick Mode Phase 2 SA established, IPSec Tunnel connected
  2 sep 03:36:02 2009 VPN journal Dead Peer Detection start, DPD delay = timeout = 10 sec 10 sec timer
  2 sep 03:36:02 2009 VPN received log delete SA payload: ISAKMP State #627 removal
  2 sep 03:36:02 2009 VPN Log Main Mode initiator
  2 sep 03:36:02 2009 VPN Log [Tunnel negotiation Info] > Send main initiator Mode 1 package
  2 sep 03:36:02 2009 charge of VPN journal received Vendor ID Type = [Dead Peer Detection]
  2 sep 03:36:02 2009 VPN Log [Tunnel negotiation of Info]< initiator="" received="" main="" mode="" 2nd="" packet="">
  2 sep 03:36:02 2009 VPN Log [Tunnel negotiation Info] > initiator send Mode main 3rd package
  2 sep 03:36:03 2009 VPN Log [Tunnel negotiation of Info]< initiator="" received="" main="" mode="" 4th="" packet="">
  2 sep 03:36:03 2009 Log [Tunnel negotiation Info] VPN > main initiator Mode to send 5 packs
  2 sep 03:36:03 2009 Log [Tunnel negotiation Info] VPN > initiator receive hand Mode 6 Pack
  2 sep 03:36:03 2009 log VPN main mode peer ID is ID_IPV4_ADDR: '87.85.xxx.xxx '.
  2 sep 03:36:03 2009 Log [Tunnel negotiation Info] VPN Mode main Phase 1 SA established
  2 sep 03:36:03 2009 log VPN [Tunnel negotiation Info] initiator Cookies = c527 d584 595 c 2c3b
  2 sep 03:36:03 2009 log VPN [Tunnel negotiation Info] responder Cookies = b62c ca31 1a5f 673f
  2 sep 03:36:03 2009 log quick launch Mode PSK VPN + TUNNEL + PFS
  2 sep 03:36:03 2009 Log [Tunnel negotiation Info] VPN > initiator send fast Mode 1 package
  2 sep 03:36:04 2009 VPN Log [Tunnel negotiation of Info]< initiator="" received="" quick="" mode="" 2nd="" packet="">
  2 sep 03:36:04 2009 value of VPN Log [Tunnel negotiation Info] Inbound SPI = c3bdba09
  2 sep 03:36:04 2009 value of outbound SPI VPN Log [Tunnel negotiation Info] = e3da1469
  2 sep 03:36:04 2009 VPN Log [Tunnel negotiation Info] > initiator send fast Mode 3rd package
  2 sep 03:36:04 2009 VPN Log [Tunnel negotiation Info] Quick Mode Phase 2 SA established, IPSec Tunnel connected
  2 sep 03:36:04 2009 VPN journal Dead Peer Detection start, DPD delay = timeout = 10 sec 10 sec timer
  2 sep 03:36:05 2009 VPN received log delete SA payload: ISAKMP State #629 removal

  PFS - off on tada and linksys router does not support the samsung lol! connected!

• Clients SSL VPN so never expire, even if the time-out is configured

  We have a TZ215 running SonicOS Enhanced 5.8.1.2 - 6o, and clients are set to the following:

  By default the Session Timeout (minutes): 30

  However, VPN sessions are never finished. One is linked from 2942 minutes, and the column for the idle time is 30 minutes - it stays on 30 minutes, constantly and never tear the sign down.

  Is there something I can change in the configuration to force a timeout absolute for sessions, for example, after 2 hours, the connection is completed even if it is active? I looked for a setting like this, but had no chance.

  Thank you

  Correct, UTM does not have this feature to complete the SSL - VPN connections.

  Thank you
  Ben D
  Reference Dell SonicWALL
  #Iwork4Dell

• Cisco Cisco IPSEC VPN to encrypt but not decrypt

  Hello

  I have a vpn ipsec problem.

  packets are encapsulated and décapsulés but only in one direction. I don't understand why.

  VPN is already mounted on another router, I want to change the router but can't get the vpn have the new router

  Thank you for helping me

  PS: Sorry for my English

  Hello

  I looked at the configuration of your router RT-897VA once again, and I don't know if static NAT statements in there are supposed to work or not, but they won't because you have not specified any inside and outside interfaces. Configuration changes below correspond to the configuration of your router RT, check if their implementation makes a difference (the changes are indicated in bold):

  RT-897VA #show run
  Building configuration...

  Current configuration: 3933 bytes
  !
  ! 11:56:34 configuration was last modified THIS Friday, November 4, 2016
  !
  version 15.4
  horodateurs service debug datetime msec
  Log service timestamps datetime msec
  no password encryption service
  !
  RT-897VA host name
  !
  boot-start-marker
  boot-end-marker
  !
  !
  !
  No aaa new-model
  clock timezone THIS 1 0
  !
  !
  !
  !
  !
  !
  !
  !
  !
  !

  !
  !
  !
  !
  domain IP XXXXX
  IP-name 194.2.0.20 Server
  IP-name 194.2.0.50 server
  IP cef
  No ipv6 cef
  !
  !
  !
  !
  !
  Authenticated MultiLink bundle-name Panel
  VPDN enable
  !
  VPDN-Group 1
  ! Default L2TP VPDN group
  accept-dialin
  L2tp Protocol
  virtual-model 1
  tunnel L2TP non-session timeout 15
  !
  !
  default value for the field
  !
  !
  !
  !
  !
  !
  !
  CTS verbose logging
  license udi pid C897VA-K9 sn FCZ2030DL
  !
  !
  username password privilege 15 itef 0...
  !
  !
  !
  !
  !
  VDSL controller 0
  !
  property intellectual ssh rsa keypair-name XXX
  property intellectual ssh version 2
  !
  !
  crypto ISAKMP policy 1
  BA aes
  preshared authentication
  Group 2
  !
  crypto ISAKMP policy 2
  BA aes
  preshared authentication
  Group 2
  ISAKMP crypto key cleidentique address IP-WAN-B
  !
  !
  Crypto ipsec transform-set aes - esp esp-sha-hmac toto
  tunnel mode
  !
  !
  !
  crypto map ipsec-isakmp TUNNEL 1
  counterpart Set IP-WAN-B
  Set transform-set toto
  match address TUNNEL-DATA
  crypto map ipsec-isakmp TUNNEL 2
  counterpart Set IP-WAN-B
  Set transform-set toto
  match TUNNEL-TOIP address
  !
  !
  !
  !
  !
  !
  ATM0 interface
  no ip address
  Shutdown
  No atm ilmi-keepalive
  !
  interface BRI0
  no ip address
  encapsulation hdlc
  Shutdown
  Multidrop ISDN endpoint
  !
  interface Ethernet0
  no ip address
  Shutdown
  !
  interface GigabitEthernet0
  Description BOX-SWITCH
  switchport trunk vlan 101 native
  switchport mode trunk
  no ip address
  spanning tree portfast
  !
  interface GigabitEthernet1
  no ip address
  !
  interface GigabitEthernet2
  no ip address
  !
  interface GigabitEthernet3
  no ip address
  !
  interface GigabitEthernet4
  no ip address
  !
  interface GigabitEthernet5
  no ip address
  !
  interface GigabitEthernet6
  no ip address
  !
  interface GigabitEthernet7
  no ip address
  !
  interface GigabitEthernet8
  WAN description
  IP address IP WAN - A 255.255.255.240
  IP virtual-reassembly in
  NAT outside IP
  automatic duplex
  automatic speed
  card crypto TUNNEL
  !
  interface Vlan1
  no ip address
  !
  interface Vlan101
  VLAN-DATA description
  IP 192.168.101.251 255.255.255.0
  IP nat inside
  IP virtual-reassembly in
  !
  interface Vlan111
  VLAN-TOIP description
  IP 192.168.111.251 255.255.255.0
  IP virtual-reassembly in
  !
  IP forward-Protocol ND
  no ip address of the http server
  no ip http secure server
  !
  !
  IP nat inside source static tcp IP 25 expandable 25 192.168.101.2
  IP nat inside source static tcp IP 80 80 extensible 192.168.101.2
  IP nat inside source static tcp 192.168.101.2 extensible IP 443 443
  IP nat inside source static tcp 192.168.101.31 3201 IP extensible 3201
  IP nat inside source static tcp 192.168.101.31 80 extensible IP 3280
  IP nat inside source static tcp IP 443 33443 extensible 192.168.101.11
  overload of IP nat inside source list NAT interface GigabitEthernet8
  IP route 0.0.0.0 0.0.0.0 XXXX (ADSL router)
  IP route 192.168.100.0 255.255.255.0 IP-WAN-B

  NAT extended IP access list
  deny ip 192.168.101.0 0.0.0.255 192.168.100.0 0.0.0.255
  IP 192.168.101.0 allow 0.0.0.255 any
  access list IP-TUNNEL-DATA extents
  IP 192.168.101.0 allow 0.0.0.255 192.168.100.0 0.0.0.255
  TUNNEL-TOIP extended IP access list
  IP 192.168.110.0 allow 0.0.0.255 192.168.111.0 0.0.0.255
  !
  access list IP-TUNNEL-DATA extents
  IP 192.168.101.0 allow 0.0.0.255 192.168.100.0 0.0.0.255
  permit tcp host 192.168.101.3 192.168.0.0 0.0.0.255 established
  TUNNEL-TOIP extended IP access list
  IP 192.168.111.0 allow 0.0.0.255 192.168.110.0 0.0.0.255
  !
  !
  !
  control plan
  !
  !
  MGCP behavior considered range tgcp only
  MGCP comedia-role behavior no
  disable the behavior MGCP comedia-check-media-src
  disable the behavior of MGCP comedia-sdp-force
  !
  profile MGCP default
  !
  !
  !
  !
  !
  !
  !
  Line con 0
  no activation of the modem
  line to 0
  line vty 0 4
  privilege level 15
  password...
  opening of session
  transport input telnet ssh
  line vty 5 15
  privilege level 15
  password...
  opening of session
  transport input telnet ssh
  !
  Scheduler allocate 20000 1000
  !
  !
  !
  end

• FlexVPN: How can I tell my guests to use VPN?

  Hello

  I created a site to site VPN using FlexVPN between two hosts. I can see the VPN is established, I can end to ping. However, when I ping to - end through loop fixes which I set up for my test host. I don't see this traffic through the VPN. Traffic is what makes the destination due to me having a static route, but when I do a "debug crypto ikev2' I don't see ikev2 datagrams for my pings of looping Loopback. Please notify.

  Here is my config for my two routers.

  hostname PSE_BOTH
  !
  boot-start-marker
  boot-end-marker
  !
  !
  !
  No aaa new-model
  !
  !
  Crypto pki token removal timeout default 0
  !
  !
  No ipv6 cef
  the 5 IP auth-proxy max-login-attempts
  max-login-attempts of the IP 5 admission
  !
  !
  !
  !
  !
  IP cef
  !
  Authenticated MultiLink bundle-name Panel
  !
  !
  license udi pid C3900-SPE100/K9 sn FOC16227TPB
  licence start-up module c3900 technology-package securityk9
  licence start-up module c3900 technology-package datak9
  !
  !
  !
  redundancy
  !
  DEFAULT permission of ikev2 crypto policy.
  Road enabled interface
  on road access-list PSE_ADVERTISEMENTS
  !
  !
  !
  Crypto ikev2 keyring PSE_KEYRING
  L & G peer
  PSE_BOTH_TO_L & G description
  meet 1XX.80.253.199
  hostname LNX_VPN
  pre-shared key cisco
  !
  !
  !
  Profile of ikev2 crypto PSE_2_L & G
  is distance identity address 1XX.80.253.199 255.255.255.255
  sharing of local meadow of authentication
  sharing front of remote authentication
  local PSE_KEYRING keychain
  DPD 60 2 on request
  !
  !
  !
  !
  !
  !
  !
  Crypto ipsec DEFAULT profile
  ikev2-profile PSE_2_L & G game
  !
  !
  !
  !
  !
  !
  !
  interface Loopback0
  IP 1XX.192.0.1 255.255.0.0
  !
  Tunnel1 interface
  PSE_2_L & G description
  1XX.21.254.33 255.255.255.252 IP address
  source of tunnel GigabitEthernet0/0
  destination of the 1XX.80.253.199 tunnel
  Profile of tunnel DEFAULT ipsec protection
  !
  the Embedded-Service-Engine0/0 interface
  no ip address
  Shutdown
  !
  interface GigabitEthernet0/0
  IP 2XX.61.51.9 255.255.255.128
  automatic duplex
  automatic speed
  !
  interface GigabitEthernet0/1
  no ip address
  Shutdown
  automatic duplex
  automatic speed
  !
  interface GigabitEthernet0/2
  no ip address
  Shutdown
  automatic duplex
  automatic speed
  !
  interface Serial0/0/0
  no ip address
  Shutdown
  !
  !
  IP forward-Protocol ND
  !
  no ip address of the http server
  no ip http secure server
  !
  IP route 1XX.80.133.0 255.255.255.0 GigabitEthernet0/0
  IP route 1XX.80.253.199 255.255.255.255 GigabitEthernet0/0
  !
  IP access-list standard FLEX_PERMITTED_SOURCES
  IP access-list standard PSE_ADVERTISEMENTS
  1XX.192.0.0 permit 0.0.255.255
  !
  !
  !
  !
  control plan
  !
  !
  !
  Line con 0
  Synchronous recording
  line to 0
  line 2
  no activation-character
  No exec
  preferred no transport
  transport of entry all
  output transport lat pad rlogin lapb - your MOP v120 udptn ssh telnet
  StopBits 1
  line vty 0 4
  opening of session
  transport of entry all
  !
  Scheduler allocate 20000 1000
  !
  end

  XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

  hostname LNX_VPN
  !
  boot-start-marker
  boot-end-marker
  !
  !
  !
  No aaa new-model
  !
  !
  Crypto pki token removal timeout default 0
  !
  !
  No ipv6 cef
  the 5 IP auth-proxy max-login-attempts
  max-login-attempts of the IP 5 admission
  !
  !
  !
  !
  !
  IP cef
  !
  Authenticated MultiLink bundle-name Panel
  !
  !
  license udi pid C3900-SPE100/K9 sn FOC16227TL1
  licence start-up module c3900 technology-package securityk9
  !
  !
  !
  redundancy
  !
  DEFAULT permission of ikev2 crypto policy.
  Road enabled interface
  on road access-list L & G_Advertisements
  !
  !
  !
  Crypto ikev2 keyring PSE_KEYRING
  peer PSE_BOTH
  This description IS to AUTHENTICATE the PSE_BOTH
  meet 2XX.61.51.9
  hostname PSE_BOTH
  pre-shared key cisco
  !
  peer PSE_EST
  This description IS to AUTHENTICATE the PSE_EST
  meet 2XX.61.41.9
  hostname PSE_EST
  pre-shared key cisco
  !
  !
  !
  Profile of ikev2 crypto PSE_2_L & G
  is distance identity address 2XX.61.51.9 255.255.255.255
  is distance identity address 2XX.61.41.9 255.255.255.255
  sharing of local meadow of authentication
  sharing front of remote authentication
  local PSE_KEYRING keychain
  !
  !
  !
  !
  !
  !
  !
  Crypto ipsec DEFAULT profile
  ikev2-profile PSE_2_L & G game
  !
  !
  !
  !
  !
  !
  !
  interface Loopback0
  IP 1XX.80.133.1 255.255.255.0
  !
  Tunnel1 interface
  Description L & G_TO_PSE_BOTH
  1XX.21.254.34 255.255.255.252 IP address
  source of tunnel GigabitEthernet0/0
  destination of the 2XX.61.51.9 tunnel
  Profile of tunnel DEFAULT ipsec protection
  !
  interface tunnels2
  Description L & G_TO_PSE_EST
  1XX.21.254.38 255.255.255.252 IP address
  source of tunnel GigabitEthernet0/0
  destination of the 2XX.61.41.9 tunnel
  Profile of tunnel DEFAULT ipsec protection
  !
  the Embedded-Service-Engine0/0 interface
  no ip address
  Shutdown
  !
  interface GigabitEthernet0/0
  IP 1XX.80.253.199 255.255.255.240
  automatic duplex
  automatic speed
  !
  interface GigabitEthernet0/1
  DHCP IP address
  automatic duplex
  automatic speed
  !
  interface GigabitEthernet0/2
  no ip address
  Shutdown
  automatic duplex
  automatic speed
  !
  interface Serial0/1/0
  no ip address
  Shutdown
  !
  IP forward-Protocol ND
  !
  no ip address of the http server
  no ip http secure server
  !
  IP 1XX.192.0.0 255.255.0.0 GigabitEthernet0/0 road
  IP route 20X.61.41.9 255.255.255.255 GigabitEthernet0/0
  IP route 20X.61.51.9 255.255.255.255 GigabitEthernet0/0
  !
  IP access-list standard L & G_Advertisements
  permit 1XX.80.133.0 0.0.0.255
  !
  !
  !
  !
  control plan
  !
  !
  !
  Line con 0
  Synchronous recording
  line to 0
  line 2
  no activation-character
  No exec
  preferred no transport
  transport of entry all
  transport output pad rlogin lapb - your MOP v120 udptn ssh telnet
  StopBits 1
  line vty 0 4
  opening of session
  transport of entry all
  !
  Scheduler allocate 20000 1000
  !
  end

  LNX_VPN #.

  Change it (I guess that's the way for looping at the other end)

  IP 1XX.192.0.0 255.255.0.0 GigabitEthernet0/0 road

  !

  IP 1XX.192.0.0 255.255.0.0 TunnelX road

  Concerning

  Rolando A. Valenzuela.