VPN connection problem: keep connection

Similar Questions

• ASA 5505 ASDM VPN connection problem

  Hello

  We are running a version of firewall ASA 5505 8.4 (4) 1. The ASDM version is 6.4 (9).

  The problem is when the creation of remote access VPN connection, it works fine for about 2-3 days.

  After that, the VPN client cannot connect more and gives the error code 789.

  In this case, the VPN clients are clients of Windows 7 from different remote networks with the same problem scenario.

  Windows 8.1 clients cannot connect at all and show the same error code...

  All connections go through the keys defaultragroup and preshare match on both sides.

  When the user to connect attemps I receive the following text in the log of the ASDM:

  6 April 10, 2015 10:52:39 group = DefaultL2LGroup, IP = 5.240.31.116, P1 retransmit msg sent to the WSF MM
   
  5 April 10, 2015 10:52:39 group = DefaultL2LGroup, IP = 5.240.31.116, in double Phase 1 detected package.  Retransmit the last packet.
   
  5 April 10, 2015 10:53:03 IP = 5.240.31.116, encrypted packet received with any HIS correspondent, drop
   
  When I implemented the remote login through ASDM I followed the instructions according to the following link:
  http://www.databasemart.com/HOWTO/Cisco_VPN_Remote_Access_Setup_ASA5500...
   
  The steps were a little different, but almost the same, given that these instructions show an old version
   
  I'm interested in trying the steps according to this link but not sure this will help me solve the problem id:
  http://www.petenetlive.com/kb/article/0000571.htm
   
  Any help would be appreciated!
  Thank you

  Hello

  If you use local authentication (user name and password on the SAA), so why you would need this threshold?

  tunnel-group DefaultRAGroup ppp-attributes
  No chap authentication
  ms-chap-v2 authentication
  !

  Remove it and try.

• I'm having a problem when I try to establish a VPN connection

  I have a problem when I try to establish a VPN connection between a remote computer and my desktop computer that we use as a file server in our network of workplaces. It has a static IP address. The VPN connection was working until the person on the other side you have forgotten the password. We decided to set up a new connection with the new user name and password. The remote computer could not establish a VPN connection with the server, but when the person on the other side tried to open the files, she received a message indicating there is no permission to do so. I can't understand how to give the person permission to open folders. Can anyone help?

  Hello

  Thanks for posting in the Microsoft Community.

  The question you posted would be better suited in the TechNet community.
  http://social.technet.Microsoft.com/forums/en/w7itprogeneral/threads

  I hope this helps!

• Coming out of the IPSec VPN connection behind Pix535 problem: narrowed down for NAT-Associates

  Hello world

  Previously, I've seen a similar thread and posted my troubles with the outbound VPN connections inside that thread:

  https://supportforums.Cisco.com/message/3688980#3688980

  I had the great help but unfortunatedly my problem is a little different and connection problem.  Here, I summarize once again our configurations:

  hostname pix535 8.0 (4)

  all PC here use IP private such as 10.1.0.0/16 by dynamic NAT, we cannot initiate an OUTBOUND IPSec VPN (for example QuickVPN) at our offices, but the reverse (inbound) is very well (we have IPsec working long server /PP2P). I did a few tests of new yesterday which showed that if the PC a static NAT (mapped to a real public IP), outgoing connection VPN is fine; If the same PC has no static NAT (he hides behind the dynamic NAT firewall), outgoing VPN is a no-go (same IP to the same PC), so roughly, I have narrowed down our connection problem VPN is related to NAT, here are a few commands for NAT of our PIX:

  interface GigabitEthernet0
  Description to cable-modem
  nameif outside
  security-level 0
  IP 70.169.X.X 255.255.255.0
  OSPF cost 10
  !
  interface GigabitEthernet1
  Description inside 10/16
  nameif inside
  security-level 100
  IP 10.1.1.254 255.255.0.0
  OSPF cost 10
  !
  !
  interface Ethernet2
  Vlan30 description
  nameif dmz2
  security-level 50
  IP 30.30.30.30 255.255.255.0
  OSPF cost 10
  !
  permit same-security-traffic inter-interface
  permit same-security-traffic intra-interface

  ......

  Global interface 10 (external)
  Global (dmz2) interface 10
  NAT (inside) 0-list of access inside_nat0_outbound
  NAT (inside) 10 inside8 255.255.255.0
  NAT (inside) 10 Vlan10 255.255.255.0
  NAT (inside) 10 vlan50 255.255.255.0
  NAT (inside) 10 192.168.0.0 255.255.255.0
  NAT (inside) 10 192.168.1.0 255.255.255.0
  NAT (inside) 10 192.168.10.0 255.255.255.0
  NAT (inside) 10 pix-inside 255.255.0.0

  Crypto isakmp nat-traversal 3600

  -------

  Results of packet capture are listed here for the same PC for the same traffic to Server VPN brach, the main difference is UDP 4500 (PC with static NAT has good traffic UDP 4500, does not have the same PC with dynamic NAT):

  #1: when the PC uses static NAT, it is good of outgoing VPN:

  54 packets captured
  1: 15:43:51.112054 10.1.1.82.1608 > 76.196.10.57.443: S 1763806634:1763806634 (0) win 64240
  2: 15:43:54.143028 10.1.1.82.1608 > 76.196.10.57.443: S 1763806634:1763806634 (0) win 64240
  3: 15:44:00.217273 10.1.1.82.1608 > 76.196.10.57.443: S 1763806634:1763806634 (0) win 64240
  4: 15:44:01.724938 10.1.1.82.1609 > 76.196.10.57.60443: S 2904546955:2904546955 (0) win 64240
  5: 15:44:01.784642 76.196.10.57.60443 > 10.1.1.82.1609: S 2323205974:2323205974 (0) ack 2904546956 win 5808
  6: 15:44:01.784886 10.1.1.82.1609 > 76.196.10.57.60443:. ACK 2323205975 win 64240
  7: 15:44:01.785527 10.1.1.82.1609 > 76.196.10.57.60443: P 2904546956:2904547080 (124) ack 2323205975 win 64240
  8: 15:44:01.856462 76.196.10.57.60443 > 10.1.1.82.1609:. ACK 2904547080 win 5808
  9: 15:44:01.899596 76.196.10.57.60443 > 10.1.1.82.1609: P 2323205975:2323206638 (663) ack 2904547080 win 5808
  10: 15:44:02.056897 10.1.1.82.1609 > 76.196.10.57.60443:. ACK 2323206638 win 63577
  11: 15:44:03.495030 10.1.1.82.1609 > 76.196.10.57.60443: P 2904547080:2904547278 (198) ack 2323206638 win 63577
  12: 15:44:03.667095 76.196.10.57.60443 > 10.1.1.82.1609:. ACK 2904547278 win 6432
  13: 15:44:03.740592 76.196.10.57.60443 > 10.1.1.82.1609: P 2323206638:2323206697 (59) ack 2904547278 win 6432
  14: 15:44:03.741264 10.1.1.82.1609 > 76.196.10.57.60443: P 2904547278:2904547576 (298) ack 2323206697 win 63518
  15: 15:44:03.814029 76.196.10.57.60443 > 10.1.1.82.1609:. ACK 2904547576 win 7504
  16: 15:44:06.989008 76.196.10.57.60443 > 10.1.1.82.1609: P 2323206697:2323207075 (378) ack 2904547576 win 7504
  17: 15:44:06.990228 76.196.10.57.60443 > 10.1.1.82.1609: 2323207075:2323207075 F (0) ack 2904547576 win 7504
  18: 15:44:06.990564 10.1.1.82.1609 > 76.196.10.57.60443:. ACK 2323207076 win 63140
  19: 15:44:06.990656 10.1.1.82.1609 > 76.196.10.57.60443: P 2904547576:2904547613 (37) ack 2323207076 win 63140
  20: 15:44:06.990854 10.1.1.82.1609 > 76.196.10.57.60443: 2904547613:2904547613 F (0) ack 2323207076 win 63140
  21: 15:44:07.049359 76.196.10.57.60443 > 10.1.1.82.1609: R 2323207076:2323207076 (0) win 0
  22: 15:44:17.055417 10.1.1.82.500 > 76.196.10.57.500: udp 276
  23: 15:44:17.137657 76.196.10.57.500 > 10.1.1.82.500: udp 140
  24: 15:44:17.161475 10.1.1.82.500 > 76.196.10.57.500: udp 224
  25: 15:44:17.309066 76.196.10.57.500 > 10.1.1.82.500: udp 220
  26: 15:44:17.478780 10.1.1.82.4500 > 76.196.10.57.4500: udp 80
  27: 15:44:17.550356 76.196.10.57.4500 > 10.1.1.82.4500: 64 udp
  28: 15:44:17.595214 10.1.1.82.4500 > 76.196.10.57.4500: udp 304
  29: 15:44:17.753470 76.196.10.57.4500 > 10.1.1.82.4500: udp 304
  30: 15:44:17.763037 10.1.1.82.4500 > 76.196.10.57.4500: udp 68
  31: 15:44:17.763540 10.1.1.82.4500 > 76.196.10.57.4500: udp 56
  32: 15:44:18.054516 10.1.1.82.4500 > 76.196.10.57.4500: udp 68
  33: 15:44:18.124840 76.196.10.57.4500 > 10.1.1.82.4500: udp 68
  34: 15:44:21.835390 10.1.1.82.4500 > 76.196.10.57.4500: udp 72
  35: 15:44:21.850831 10.1.1.82.4500 > 76.196.10.57.4500: udp 80
  36: 15:44:21.901183 76.196.10.57.4500 > 10.1.1.82.4500: udp 72
  37: 15:44:22.063747 10.1.1.82.1610 > 76.196.10.57.60443: S 938188365:938188365 (0) win 64240
  38: 15:44:22.104746 76.196.10.57.4500 > 10.1.1.82.4500: udp 80
  39: 15:44:22.122277 76.196.10.57.60443 > 10.1.1.82.1610: S 1440820945:1440820945 (0) ack 938188366 win 5808
  40: 15:44:22.122536 10.1.1.82.1610 > 76.196.10.57.60443:. ACK 1440820946 win 64240
  41: 15:44:22.123269 10.1.1.82.1610 > 76.196.10.57.60443: P 938188366:938188490 (124) ack 1440820946 win 64240
  42: 15:44:22.187108 76.196.10.57.60443 > 10.1.1.82.1610:. ACK 938188490 win 5808
  43: 15:44:22.400675 76.196.10.57.60443 > 10.1.1.82.1610: P 1440820946:1440821609 (663) ack 938188490 win 5808
  44: 15:44:22.474600 10.1.1.82.1610 > 76.196.10.57.60443: P 938188490:938188688 (198) ack 1440821609 win 63577
  45: 15:44:22.533648 76.196.10.57.60443 > 10.1.1.82.1610:. ACK 938188688 win 6432
  46: 15:44:22.742286 76.196.10.57.60443 > 10.1.1.82.1610: P 1440821609:1440821668 (59) ack 938188688 win 6432
  47: 15:44:22.742927 10.1.1.82.1610 > 76.196.10.57.60443: P 938188688:938189002 (314) ack 1440821668 win 63518
  48: 15:44:22.802570 76.196.10.57.60443 > 10.1.1.82.1610:. ACK 938189002 win 7504
  49: 15:44:25.180486 76.196.10.57.60443 > 10.1.1.82.1610: P 1440821668:1440821934 (266) ack 938189002 win 7504
  50: 15:44:25.181753 76.196.10.57.60443 > 10.1.1.82.1610: 1440821934:1440821934 F (0) ack 938189002 win 7504
  51: 15:44:25.181997 10.1.1.82.1610 > 76.196.10.57.60443:. ACK 1440821935 win 63252
  52: 15:44:25.182134 10.1.1.82.1610 > 76.196.10.57.60443: P 938189002:938189039 (37) ack 1440821935 win 63252
  53: 15:44:25.182333 10.1.1.82.1610 > 76.196.10.57.60443: 938189039:938189039 F (0) ack 1440821935 win 63252
  54: 15:44:25.241869 76.196.10.57.60443 > 10.1.1.82.1610: R 1440821935:1440821935 (0) win 0

  #2: same PC with Dynamic NAT, VPN connection fails:

  70 packets captured
  1: 14:08:31.758261 10.1.1.82.1073 > 76.196.10.57.443: S 820187495:820187495 (0) win 64240
  2: 14:08:34.876907 10.1.1.82.1073 > 76.196.10.57.443: S 820187495:820187495 (0) win 64240
  3: 14:08:40.746055 10.1.1.82.1073 > 76.196.10.57.443: S 820187495:820187495 (0) win 64240
  4: 14:08:42.048627 10.1.1.82.1074 > 76.196.10.57.60443: S 3309127022:3309127022 (0) win 64240
  5: 14:08:42.120248 76.196.10.57.60443 > 10.1.1.82.1074: S 1715577781:1715577781 (0) ack 3309127023 win 5808
  6: 14:08:42.120568 10.1.1.82.1074 > 76.196.10.57.60443:. ACK 1715577782 win 64240
  7: 14:08:42.121102 10.1.1.82.1074 > 76.196.10.57.60443: P 3309127023:3309127147 (124) ack 1715577782 win 64240
  8: 14:08:42.183553 76.196.10.57.60443 > 10.1.1.82.1074:. ACK 3309127147 win 5808
  9: 14:08:42.232867 76.196.10.57.60443 > 10.1.1.82.1074: P 1715577782:1715578445 (663) ack 3309127147 win 5808
  10: 14:08:42.405145 10.1.1.82.1074 > 76.196.10.57.60443:. ACK 1715578445 win 63577
  11: 14:08:43.791340 10.1.1.82.1074 > 76.196.10.57.60443: P 3309127147:3309127345 (198) ack 1715578445 win 63577
  12: 14:08:43.850450 76.196.10.57.60443 > 10.1.1.82.1074:. ACK 3309127345 win 6432
  13: 14:08:44.028196 76.196.10.57.60443 > 10.1.1.82.1074: P 1715578445:1715578504 (59) ack 3309127345 win 6432
  14: 14:08:44.058544 10.1.1.82.1074 > 76.196.10.57.60443: P 3309127345:3309127643 (298) ack 1715578504 win 63518
  15: 14:08:44.116403 76.196.10.57.60443 > 10.1.1.82.1074:. ACK 3309127643 win 7504
  16: 14:08:47.384654 76.196.10.57.60443 > 10.1.1.82.1074: P 1715578504:1715578882 (378) ack 3309127643 win 7504
  17: 14:08:47.385417 76.196.10.57.60443 > 10.1.1.82.1074: 1715578882:1715578882 F (0) ack 3309127643 win 7504
  18: 14:08:47.394068 10.1.1.82.1074 > 76.196.10.57.60443:. ACK 1715578883 win 63140
  19: 14:08:47.394922 10.1.1.82.1074 > 76.196.10.57.60443: P 3309127643:3309127680 (37) ack 1715578883 win 63140
  20: 14:08:47.395151 10.1.1.82.1074 > 76.196.10.57.60443: 3309127680:3309127680 F (0) ack 1715578883 win 63140
  21: 14:08:47.457633 76.196.10.57.60443 > 10.1.1.82.1074: R 1715578883:1715578883 (0) win 0
  22: 14:08:57.258073 10.1.1.82.500 > 76.196.10.57.500: udp 276
  23: 14:08:57.336255 76.196.10.57.500 > 10.1.1.82.500: udp 40
  24: 14:08:58.334211 10.1.1.82.500 > 76.196.10.57.500: udp 276
  25: 14:08:58.412850 76.196.10.57.500 > 10.1.1.82.500: udp 40
  26: 14:09:00.333311 10.1.1.82.500 > 76.196.10.57.500: udp 276
  27: 14:09:00.410730 76.196.10.57.500 > 10.1.1.82.500: udp 40
  28: 14:09:02.412561 10.1.1.82.1075 > 76.196.10.57.443: S 968016865:968016865 (0) win 64240
  29: 14:09:04.349164 10.1.1.82.500 > 76.196.10.57.500: udp 276
  30: 14:09:04.431648 76.196.10.57.500 > 10.1.1.82.500: udp 40
  31: 14:09:05.442710 10.1.1.82.1075 > 76.196.10.57.443: S 968016865:968016865 (0) win 64240
  32: 14:09:11.380427 10.1.1.82.1075 > 76.196.10.57.443: S 968016865:968016865 (0) win 64240
  33: 14:09:12.349926 10.1.1.82.500 > 76.196.10.57.500: udp 276
  34: 14:09:12.421502 10.1.1.82.1076 > 76.196.10.57.60443: S 3856215672:3856215672 (0) win 64240
  35: 14:09:12.430794 76.196.10.57.500 > 10.1.1.82.500: udp 40
  36: 14:09:12.481832 76.196.10.57.60443 > 10.1.1.82.1076: S 248909856:248909856 (0) ack 3856215673 win 5808
  37: 14:09:12.527972 10.1.1.82.1076 > 76.196.10.57.60443:. ACK 248909857 win 64240
  38: 14:09:12.529238 10.1.1.82.1076 > 76.196.10.57.60443: P 3856215673:3856215797 (124) ack 248909857 win 64240
  39: 14:09:12.608275 76.196.10.57.60443 > 10.1.1.82.1076:. ACK 3856215797 win 5808
  40: 14:09:12.658581 76.196.10.57.60443 > 10.1.1.82.1076: P 248909857:248910520 (663) ack 3856215797 win 5808
  41: 14:09:12.664531 10.1.1.82.1076 > 76.196.10.57.60443: P 3856215797:3856215995 (198) ack 248910520 win 63577
  42: 14:09:12.725533 76.196.10.57.60443 > 10.1.1.82.1076:. ACK 3856215995 win 6432
  43: 14:09:12.880813 76.196.10.57.60443 > 10.1.1.82.1076: P 248910520:248910579 (59) ack 3856215995 win 6432
  44: 14:09:12.892272 10.1.1.82.1076 > 76.196.10.57.60443: P 3856215995:3856216293 (298) ack 248910579 win 63518
  45: 14:09:12.953029 76.196.10.57.60443 > 10.1.1.82.1076:. ACK 3856216293 win 7504
  46: 14:09:12.955043 76.196.10.57.60443 > 10.1.1.82.1076: 248910579:248910579 F (0) ack 3856216293 win 7504
  47: 14:09:12.955242 10.1.1.82.1076 > 76.196.10.57.60443:. ACK 248910580 win 63518
  48: 14:09:12.955516 10.1.1.82.1076 > 76.196.10.57.60443: P 3856216293:3856216330 (37) ack 248910580 win 63518
  49: 14:09:12.955730 10.1.1.82.1076 > 76.196.10.57.60443: 3856216330:3856216330 F (0) ack 248910580 win 63518
  50: 14:09:13.019743 76.196.10.57.60443 > 10.1.1.82.1076: R 248910580:248910580 (0) win 0
  51: 14:09:16.068691 10.1.1.82.500 > 76.196.10.57.500: udp 56
  52: 14:09:16.227588 10.1.1.82.1077 > 76.196.10.57.60443: S 3657181617:3657181617 (0) win 64240
  53: 14:09:16.283783 76.196.10.57.60443 > 10.1.1.82.1077: S 908773751:908773751 (0) ack 3657181618 win 5808
  54: 14:09:16.306823 10.1.1.82.1077 > 76.196.10.57.60443:. ACK 908773752 win 64240
  55: 14:09:16.307692 10.1.1.82.1077 > 76.196.10.57.60443: P 3657181618:3657181742 (124) ack 908773752 win 64240
  56: 14:09:16.370998 76.196.10.57.60443 > 10.1.1.82.1077:. ACK 3657181742 win 5808
  57: 14:09:16.411935 76.196.10.57.60443 > 10.1.1.82.1077: P 908773752:908774415 (663) ack 3657181742 win 5808
  58: 14:09:16.417870 10.1.1.82.1077 > 76.196.10.57.60443: P 3657181742:3657181940 (198) ack 908774415 win 63577
  59: 14:09:16.509388 76.196.10.57.60443 > 10.1.1.82.1077:. ACK 3657181940 win 6432
  60: 14:09:16.708413 76.196.10.57.60443 > 10.1.1.82.1077: P 908774415:908774474 (59) ack 3657181940 win 6432
  61: 14:09:16.887100 10.1.1.82.1077 > 76.196.10.57.60443: P 3657181940:3657182254 (314) ack 908774474 win 63518
  62: 14:09:16.948193 76.196.10.57.60443 > 10.1.1.82.1077:. ACK 3657182254 win 7504
  63: 14:09:19.698465 76.196.10.57.60443 > 10.1.1.82.1077: P 908774474:908774740 (266) ack 3657182254 win 7504
  64: 14:09:19.699426 76.196.10.57.60443 > 10.1.1.82.1077: 908774740:908774740 F (0) ack 3657182254 win 7504
  65: 14:09:20.060162 10.1.1.82.1077 > 76.196.10.57.60443:. ACK 908774741 win 63252
  66: 14:09:20.062191 76.196.10.57.60443 > 10.1.1.82.1077: P 908774474:908774740 (266) ack 3657182254 win 7504
  67: 14:09:20.063732 10.1.1.82.1077 > 76.196.10.57.60443:. ACK 908774741 win 63252
  68: 14:09:20.063900 10.1.1.82.1077 > 76.196.10.57.60443: P 3657182254:3657182291 (37) ack 908774741 win 63252
  69: 14:09:20.064098 10.1.1.82.1077 > 76.196.10.57.60443: 3657182291:3657182291 F (0) ack 908774741 win 63252
  70: 14:09:20.127694 76.196.10.57.60443 > 10.1.1.82.1077: R 908774741:908774741 (0) win 0
  70 packages shown

  We had this problem of connection VPN IPsec from the years (I first thought it is restriction access problem, but it does not work or if I disable all access lists, experience of yesterday for the same restriction of the access-list shows longer than PC is not the cause). All suggestions and tips are greatly appreciated.

  Sean

  Hi Sean, please remove th lines highlighted in your pix and try and let me know, that these lines are not the default configuration of the PIX.

  VPN-udp-class of the class-map

  corresponds to the list of access vpn-udp-acl

  vpn-udp-policy policy-map

  VPN-udp-class

  inspect the amp-ipsec

  type of policy-card inspect dns migrated_dns_map_1

  parameters

  message-length maximum 768

  Policy-map global_policy

  class inspection_default

  inspect the migrated_dns_map_1 dns

  inspect the ftp

  inspect h323 h225

  inspect the h323 ras

  inspect the http

  inspect the netbios

  inspect the rsh

  inspect the rtsp

  inspect the skinny

  inspect sqlnet

  inspect sunrpc

  inspect the tftp

  inspect the sip

  inspect xdmcp

  inspect the pptp

  inspect the amp-ipsec

  permit same-security-traffic inter-interface

  permit same-security-traffic intra-interface

  IP verify reverse path to the outside interface

  Thank you

  Rizwan James

• Cisco router 1921 internet problem with a site-to-site vpn connection

  I have TE-data Modem 3com dsl connection in 2 sites. and I have 2 routers cisco 1921 and there is a vpn site-to-site between them and

  the VPN connection works well. and I configured the PAT on one of them to allow users access to the internet but tere is a problem:

  all users can ping a public ip address

  all users can ping any URL

  but there is no navigation of the internet

  and it's configuration

  NOZHA #sh run
  Building configuration...

  Current configuration: 2425 bytes
  !
  ! Last configuration change at 11:24:08 UTC Thu Sep 20 2012
  !
  version 15.0
  horodateurs service debug datetime msec
  Log service timestamps datetime msec
  no password encryption service
  !
  hostname NOZHA
  !
  boot-start-marker
  boot-end-marker
  !
  enable secret 5
  !
  No aaa new-model
  !
  !
  !
  !
  No ipv6 cef
  IP source-route
  IP cef
  !
  !
  !
  IP dhcp pool 1
  network 192.168.40.0 255.255.255.0
  router by default - 192.168.40.1
  4.2.2.2 DNS Server 8.8.8.8
  Infinite rental
  !
  !
  IP domain name shady2012
  !
  Authenticated MultiLink bundle-name Panel
  !
  !
  !
  license udi pid CISCO1921/K9 sn FCZ1432C5KM
  licence start-up module c1900 technology-package securityk9
  !
  !
  !
  redundancy
  !
  !
  !
  !
  crypto ISAKMP policy 10
  BA aes
  preshared authentication
  Group 2
  ISAKMP crypto key shady2012 address 81.10.xxx.yy
  !
  !
  Crypto ipsec transform-set shady2012 aes - esp esp-sha-hmac
  !
  card crypto 150 s2s - VPN ipsec-isakmp
  the value of 81.10.xxx.yy peer
  PFS group2 Set
  match address s2s-vpn-Oly
  !
  !
  !
  !
  !
  interface GigabitEthernet0/0
  MTU 1000
  IP address 41.41.xx.yy 255.255.255.252
  NAT outside IP
  activate nat IP
  IP virtual-reassembly
  automatic duplex
  automatic speed
  s2s - VPN crypto card
  !
  !
  interface GigabitEthernet0/1
  192.168.40.1 IP address 255.255.255.0
  IP nat inside
  activate nat IP
  IP virtual-reassembly
  automatic duplex
  automatic speed
  !
  !
  default IP gateway (hop 41.41.xx.yy) next
  IP forward-Protocol ND
  !
  no ip address of the http server
  no ip http secure server
  !
  The dns server IP
  overload of the IP nat source list mypool GigabitEthernet0/0 interface
  IP route 0.0.0.0 0.0.0.0 41.41.xx.yy
  IP route 192.168.20.0 255.255.255.0 (41.41.xx.yy) next hop
  IP route 192.168.30.0 255.255.255.0 (41.41.xx.yy) next hop
  !
  mypool extended IP access list
  deny ip 192.168.21.0 0.0.0.255 192.168.20.0 0.0.0.255
  deny ip 192.168.21.0 0.0.0.255 192.168.30.0 0.0.0.255
  deny ip 192.168.40.0 0.0.0.255 192.168.20.0 0.0.0.255
  deny ip 192.168.40.0 0.0.0.255 192.168.30.0 0.0.0.255
  allow an ip
  s2s-vpn-Oly extended IP access list
  ip permit 192.168.40.0 0.0.0.255 192.168.30.0 0.0.0.255
  IP 192.168.21.0 allow 0.0.0.255 192.168.20.0 0.0.0.255
  IP 192.168.30.0 allow 0.0.0.255 192.168.40.0 0.0.0.255
  ip licensing 192.168.20.0 0.0.0.255 192.168.21.0 0.0.0.255
  ip permit 192.168.40.0 0.0.0.255 192.168.20.0 0.0.0.255
  IP 192.168.21.0 allow 0.0.0.255 192.168.30.0 0.0.0.255
  !
  !
  !
  !
  !
  !
  !
  control plan
  !
  !
  !
  Line con 0
  line to 0
  line vty 0 4
  password
  opening of session
  !
  Scheduler allocate 20000 1000
  end

  If anyone has the answer please answer ASAP

  When you say can ping any URL, I am assuming that you are pinging of the FULL domain name, IE: it is resolved to an ip address, right?

  If you disable the VPN, can you access the internet?

  You have a proxy server or anything that could block navigation?

  This error message you get on your web browser?

  Also try another web browser, and none works?

• VPN connection problems...

  I don't know what is happening or what Miss me...

  I set up a vpn connection to my remote offices with a 5505.  My main office, I have a 5510.

  My remote offices, I can PING my main Office Server.  However, when I go to set up a VPN through windows network sharing Center I can't get the connection to connect...

  Am I doing something wrong or what step am I missing?

  Thank you!!

  Can you try to add this:

  permit same-security-traffic inter-interface
  permit same-security-traffic intra-interface

  I'd put it on two unless you have a reason not to.  If there is no love after that we will break down the pppoe and vpn configuration.

  Matt

• VPN connections disappear, RASDIAL makes reappear

  Here is a screenshot of the connect to a network dialog box. Notice that my VPN connection is not displayed. Nothing shows the:

  http://i44.Tinypic.com/2iu3rpg.jpg

  In order to get the dialog box to regain his senses, I drop simply to an elevated command prompt and run

  rasdial [name of the VPN connection]
  You don't need credentials. You don't need it to sucessfully connect; You just push with a stick rasdial:

  http://I39.Tinypic.com/16bdd2u.jpg

  The connect to a network dialog box now works:

  http://i40.Tinypic.com/qpqd6h.jpg

  You can see screenshots of Windows Vista. I saw this bug on Windows XP.

  My question is: How can I get Microsoft repaired?

  Hi Jack,

  Well, Gack! If it happens only every several weeks to months, it will be very fun in the not so fun sort of way to track down.

  Here is my point of view.

  First of all, on a side note, I would never, ever use Windows without an antivirus package, if you go on the internet at all, which you seem to do.

  'Common sense' has worked well before the age of the car by possible viruses. Just go for a page (even supposed to known good) can give you an infection. I'm not saying it's likely, all easily possible.

  I highly recommend that you run some virus scans (these forums have several good suggestions) just to be sure, but it doesn't sound like you have a virus to me.

  Well, I'll get off my soap box now. :-)

  Then, restart is a standard "fix." If this solves the problem, then virtually all support guys in the world are going to tell you, "there is difficulty, have a nice day." I won't argue your point well, it is wrong. Just please realize that there are literally billions of combinations possible, hardware and software. There is no way that each of them could possibly work together without problem. I'll just tell you that it is a workaround and you should use if it works.

  Finally, if you want to keep looking for a better solution, I am with you on that. Solutions help all of us.

  So, here's what you can do then.

  When it happens the next time, mark the time.

  Then go into the event viewer and begin to track down any errors at the time, that happened as well as the warnings and all the events that went past just before the problem started. We don't need (or want) the full thing, just the header with the name of event ID, source, journal, and level.

  You should know what happens if anything started, stopped or tried to run or tried to brake.

  Any service which is of what precedes.

  Also, I'm looking more on Technet.

  Since you said that you work, so for now, I'd mark this thread as closed and start again when and if the problem happens again.

  Of course, I hope this helps!

  Matt Hudson
  Microsoft Answers Support Engineer
  Visit our Microsoft answers feedback Forum and let us know what you think.

• RV042 VPN connection issues

  Hello

  I've successfully connected two RV042s to establish a VPN gateway to connect to a VPN gateway. I have follow up questions, please comment:

  1. I want to keep the time of indefinite VPN tunnel connection. Is it enough by ticking the 'Keep-Alive' on the VPN-> gateway-to-gateway-> page in advance? Or, I ping the RV042 periodically?

  2. the "Phase 1/Phase 2 times of HIS life" (on-> page from gateway to gateway VPN) settings have no impact on the maintenance of indefinite time of VPN connection? What are the optimal values for them?

  3. is there an API, command or a script to replace a manual by clicking on the button "CONNECT" to establish the VPN to VPN tunnel-> summary page? Or, is there a way to achieve the power upward?

  4. is there a way to establish a VPN tunnel bypassing the connection and clicking on the button "CONNECT"? (Auto connect to power up)?

  Thank you in advance for the comments.

  Steve

  Hello Stephen

  I have a question as well. We have a RV042 that does not restore the connection

  unless we hit the Connect button. Then everything is fine - after a while he gave up the connection

  Yet once and we have to connect and log in again

  Still having the problem?

  Mike

• VPN connection error - pppd limited

  Hi I think I have a problem with OX, the captain and the networks, I sail perfectly with the team but since update stops running the VPN, I tried the possibility to go to recovery mode to 'disable csrutil' then ' sudo chmod u + s / usr / sbin / pppd "but it does not work when you use Netextender or FortiClient." I have another Mac with Lion and works properly the only difference I notice in the file 'pppd' Captain makes me 'limited, compressed' and only 'compressed' Lion I put a photo and a newspaper of netextender:

  15/09/2016 10:15:59.271 [603 General info] NetExtender 8.1.788 for Mac OS X initialized

  15/09/2016 path of the bundle app NetExtender 10:15:59.299 [General info 603] = /Applications/NetExtender.app

  15/09/2016 createLogPanel() 10:16:01.045 [gui info 603]

  15/09/2016 10:16:01.730 [config info 603] loading saved profiles...

  15/09/2016 10:16:16.507 [connect info 603] user: "prueba".

  15/09/2016 10:16:16.507 [connect info 603] domain: "abcd.hos."

  15/09/2016 10:16:16.509 [connect info 603] Server: 'vpn.abcd.es:444 '.

  15/09/2016 10:16:16.581 [603 general notice] connection to vpn.abcd.es:444...

  15/09/2016 10:16:16.820 [General error 603] ERROR: SSL_connect: Undefined error: 0 (0)

  15/09/2016 10:16:16.821 [General notice 603] retry...

  15/09/2016 10:16:16.822 [General error 603] ERROR: SSL_connect: Undefined error: 0 (0)

  15/09/2016 10:16:16.823 [General error 603] authentication failed: connection failed. See the log for more details.

  15/09/2016 10:16:16.823 [General error 603] NetExtender connection failed.

  15/09/2016 10:16:16.823 [General notice 603] SSL VPN disconnect...

  15/09/2016 10:16:17.058 [General error 603] ERROR: SSL_connect: Undefined error: 0 (0)

  15/09/2016 10:16:17.058 [General notice 603] retry...

  15/09/2016 10:16:17.060 [General error 603] ERROR: SSL_connect: Undefined error: 0 (0)

  15/09/2016 10:16:17.061 [General error 603] disconnect command failed

  15/09/2016 10:16:17.063 [General notice 603] SSL VPN connection is completed.

  15/09/2016 10:16:17.063 [config info 603] loading saved profiles...

  15/09/2016 10:16:17.065 [gui info 603] connection failed. See the log for more details.

  

  I think that the problem is a network file or because I put the wrong password and I cannot detect this error. as I said the VPN working properly with another MAC using the same network.

  Help...

  You shouldn't be messing with the security features of the operating system.

  Problems may have to do with the network, or client software that you use.

  I start by making sure all the software are updated and then create a new entry, vpn, double control system that everything has been entered correctly.

  FWIW, I use the built-in features of VPN on El Capitan to connect to my University regularly and without problem.

  I'm not familiar with "Fortinet", and I suspect that you may need to be updated, or simply use the built-in VPN.

• Mac OS El Capitan cannot share a VPN connection that is type of IKEv2

  I have a few VPN connections, I share via Wi - Fi on my mobile device. Here's what I do:

  I have a Macbook Pro with Ethernet port, I have some work VPN connections (some type of IPSec, some IKEv2). First I plug the cable to the Ethernet port, then I start a VPN (settings-> network-> Connect) connection, finally, I share the VPN (settings-> sharing-> Internet sharing) via Wi - Fi connection so that my mobile device can connect and use the VPN connection.

  This work really well for me with IPSec VPN connections. But today, I tried to switch to an IKEv2 VPN connection, the VPN works well, but I can't share it on a mobile device via Wi - Fi, because I couldn't see the connection in the list "share your connection from" (Preferences-> sharing-> Internet sharing system)

  Are there any technical problem that IKEv2 cannot be shared? Or is there that all parameters must be made so that all VPN connections must appear in the list to share?

  evpn https://support.purevpn.com/IKEv2-Configuration-Guide-for-OS-x-El-Capitan-by-pur

• VPN connection: An unexpected error has occurred.

  I am suddenly unable to get my built-in VPN connection works on my iMac with OS X 10.11.5.  I get the VPN connection message: an unexpected error has occurred.  I have been using this VPN configuration to connect to work for several months with success.

  But last week (and I do not know if it had nothing to do with it), I went on vacation and used a free wi - fi setup of Tim Hortons.  I had a LOT of trouble getting the next login page, and I checked all playing with different settings of network without success.  When a change did not work, I put it to its original setting.  Finally, I learned to use Safari to access the free WiFi connection page of Tim.  Then once connected, everything was OK.

  But when I returned a week later and if necessary, to start my VPN connection to access the work, it wouldn't start.  I checked and recheck all my settings preferably of different network, but did not find those who were wrong.  I even deleted and re-entered my VPN service definition without solving the problem.

  Thinking that the problem could be the newly installed ISP of Bell equipment (we went from Rogers while I was away), I used my BlackBerry smartphone (issued by my employer) to create a wi - fi hotspot and accessed to the internet using this connection which completely ignored my home ISP equipment.  But still, I was unable to establish a VPN connection.

  I then tried my iPad VPN connection, and it worked!  Then, I defined a VPN service on the iMac to my wife and the iMac to my daughter and was able to successfully establish a VPN connection to my work very well, using exactly the same VPN configuration.  This led me to the conclusion, it was a problem on my iMac (and not with my new ISP or VPN system of my work that had none of the changes you made), but I still can't find what is "broken".  I run Onyx for my iMac OS X 10.11.5 and repaired permissions and clean the cache and all the rest she is doing to "solve" problems.  But the problem persisted.

  Is there a preference file corrupted somewhere (scan option is no longer on the current version of the Onyx for a reason any)?

  I still have a network setting wrong somewhere I need to go back to the system is correct value?

  Here is the attempt to VPN from the file system.log (with some hidden values in the case where they display my work VPN access):

  26 June at 16:13:48 Myrons-iMac nesessionmanager [439]: NESMLegacySession [VPN works: 295091E5-xxxx-4B6A-xxxx-F7A7xxxxxxAA]: received an order to start SystemUIServer [257]

  26 June at 16:13:48 Myrons-iMac nesessionmanager [439]: NESMLegacySession [VPN works: 295091E5-xxxx-4B6A-xxxx-F7A7xxxxxxAA]: changed to connecting status

  26 June at 16:13:48 Myrons-iMac nesessionmanager [439]: IPSec connection to server nnn.nnn.n.n

  26 June at 16:13:48 Myrons-iMac nesessionmanager [439]: phase 1 of the IPSec from.

  26 June at 16:13:48 Myrons-iMac raccoon [520]: agreed to the takeover of vpn connection.

  26 June at 16:13:48 - last message repeated 1 time-

  26 June at 16:13:48 Myrons-iMac raccoon [520]: IPSec connection to server nnn.nnn.n.n

  26 June at 16:13:48 - last message repeated 1 time-

  26 June at 16:13:48 Myrons-iMac raccoon [520]: connection.

  26 June at 16:13:48 Myrons-iMac raccoon [520]: IPSec Phase 1 started (initiated by me).

  26 June at 16:13:48 - last message repeated 1 time-

  26 June at 16:13:48 Myrons-iMac raccoon [520]: bind 1 (cannot assign requested address)

  26 June at 16:13:48 - last message repeated 1 time-

  26 June at 16:13:48 Myrons-iMac raccoon [520]: sendfromto failed

  26 June at 16:13:48 - last message repeated 1 time-

  26 June at 16:13:48 Myrons-iMac raccoon [520]: Phase 1 negotiation failed due to the error of sending. 94437eb7d5b1b6e8:0000000000000000

  26 June at 16:13:48 - last message repeated 1 time-

  26 June at 16:13:48 Myrons-iMac raccoon [520]: can not send packets

  26 June at 16:13:48 - last message repeated 1 time-

  26 June at 16:13:48 Myrons-iMac raccoon [520]: IKE Packet: send failed. (Initiator, aggressive Mode 1 Message).

  26 June at 16:13:48 Myrons-iMac nesessionmanager [439]: Controller IPSec: IKE FAILED. Phase 1, assert 0

  26 June at 16:13:48 Myrons-iMac nesessionmanager [439]: NESMLegacySession [VPN works: 295091E5-xxxx-4B6A-xxxx-F7A7xxxxxxAA]: status changed by disconnecting

  26 June at 16:13:48 Myrons-iMac nesessionmanager [439]: IPSec disconnection from the server 142.201.5.6

  26 June at 16:13:48 Myrons-iMac raccoon [520]: IPSec disconnection from the server nnn.nnn.n.n

  26 June at 16:13:48 - last message repeated 3 times-

  26 June at 16:13:48 Myrons-iMac nesessionmanager [439]: NESMLegacySession [VPN works: 295091E5-xxxx-4B6A-xxxx-F7A7xxxxxxAA]: status changed to offline, terminus right no

  Any help or insight would be more useful and appreciated... so that I can work from home again.

  Thank you

  Myron VanderLaan

  I finally found my VPN problem.

  There is a 'racoon' file that is generated when I connect to the VPN to my work site.

  I have created a modified version of this file so that my connection does not expire in 3600 seconds (changed in 24 hours).

  Apparently, there are some slightly different settings (such as certain IP addresses other than VPN IP of my work) in this file under our new ISP Bell from the former FAI Rogers.

  And if I connect to the WiFi Hotspot from my BlackBerry, it does not once again because these settings in the file are different again.  I must return the file generated instead of my modified file.

  Bad luck!

• error on the remote desktop and VPN connections

  Unable to connect using desktop remote or VPN. remotes can't find the computer at home on the network and the VPN gives me an 800 error code. I used the remote desktop, but it says my work computer isn't on this network and the VPN connection fails. We checked everything using remote assistance, but it becomes too hard and not responses. Help!!!!!!!!!!!!!!!!!!!

  Hello

  Your question of Windows 7 is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the IT Pro TechNet public.
  Please post your question in the TechNet Windows XP category.
  Here is the link:
  http://social.technet.Microsoft.com/forums/en-us/itproxpsp/threads
   
  I hope this helps.
  Thank you, and in what concerns:
  Shekhar S - Microsoft technical support.

  Visit our Microsoft answers feedback Forum and let us know what you think.
  If this post can help solve your problem, please click the 'Mark as answer' or 'Useful' at the top of this message. Marking a post as answer, or relatively useful, you help others find the answer more quickly.

• When I try to add a VPN connection, I get an error that the wizard is unable to connect. I am running Windows Vista.

  When I try to add a VPN connection, I get an error that the wizard is unable to connect.  I am running VISTA. I want to simply add a VPN and be able to connect to a non-profit organization where I volunteer.  My VPN working two weeks ago.  Then my shortcut did not work, and this problem started.

  Any help is appreciated.

  original title: VPN Vista issues

  Hello

  Thank you for visiting the Microsoft answers community site. Your question of Windows Vista is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the IT Pro TechNet public. Please post your question in the TechNet Windows Vista Networking forum.

  http://social.technet.Microsoft.com/forums/en-us/category/windowsvistaitpro

• I am trying to create a VPN connection, but it does not work

  I am trying to create a VPN connection, but it does not work
  The wizard cannot establish a connection. And if I try to record simply does not connect
  It does not work. If I try to click on find the problem, there simply
  do nothing.
  I tried it on another pc, where it worked. So the problem is not the
  router or data network. And the curious thing is that I installed it before, but only from one day to the other, the VPN connection was missing.

  It does not create even a the connection icon
  Thank you

  Try a system restore to a Date before the problem began:

  Restore point:

  http://www.howtogeek.com/HOWTO/Windows-Vista/using-Windows-Vista-system-restore/

  Do Safe Mode system restore, if it is impossible to do in Normal Mode.

  Try typing F8 at startup and in the list of Boot selections, select Mode safe using ARROW top to go there > and then press ENTER.

  Try a restore of the system once, to choose a Restore Point prior to your problem...

  Click Start > programs > Accessories > system tools > system restore > choose another time > next > etc.

  http://www.windowsvistauserguide.com/system_restore.htm

  Read the above for a very good graph shows how backward more than 5 days in the System Restore Points by checking the correct box.

  See you soon.

  Mick Murphy - Microsoft partner

• Unable to connect to computers via Remote Desktop on the VPN connection.

  I have a Windows Server 2003 Active Directory network. Connect you to it remotely using an appliance, Sonicwall TZ170 VPN/Firewall DHCP pointing our internal DHCP server so we do not use the Sonicwall DHCP over VPN.

  The area has been recently rebuilt completely charge and the VPN connection was stronger than it has ever been when connecting to computers on our network for the first 2 weeks. In the last few days, however, people had problems connecting on our desktop computers. They can connect to some but not to others, and in the case of a person who needs in particular access to a computer, it can not connect to it all.

  I don't think it's a VPN issue but something to do with the DHCP/DNS/domain controller server. However, I am not able to locate the problem.

  In the past, this same thing was a problem before I took over. We had just a matter to the inconsistency of the connection until I thought I had solved the problem (however short-lived the fix was) with the refurbishment of the domain controller.

  Customers are a mix of Windows XP and Windows 7.

  Any ideas? I will provide all the information I can.

  http://social.technet.Microsoft.com/forums/en-us/category/WindowsServer

  Please repost your question in the above Server Forums.

  Here is the Vista Forums.

  See you soon.

  Mick Murphy - Microsoft partner