networking-forum.com
Community BlogCommunity Wiki * Register  * Search  * Login
View unanswered postsView active topics

All times are UTC - 6 hours [ DST ]



Post new topic Reply to topic  [ 7 posts ] 
Author Message
 Post subject: IPSEC VPN problem
PostPosted: Fri Feb 24, 2012 12:31 pm 
Offline
Ultimate Member
Ultimate Member

Joined: Wed Aug 03, 2011 12:24 pm
Posts: 504
Location: Charleston, SC
Certs: MCSE, MCP+I, SEC+ (working on CCENT/CCNA)
I have an IPSEC VPN that has worked just fine.. until now...

I am using Cisco client to connect to the ASA 5520 here, I've had success using this setup in the past. In fact just yesterday I was able to connect clients to this VPN....

Setting up a new machine, I am now getting this error on the client:
"Secure VPN connection terminated by the client. Reason 412: The remote peer is no longer responding"

The ASA log is showing an error:
""received encrypted Oakley informational packet with invalid payloads" after several instances of "P1 retransmit package dispatched to MM FSM" and ""Dulpicate Phase 1 packet detected. Retransmitting last packet".

Any guidance on this?


Top
 Profile  
 
 Post subject: Re: IPSEC VPN problem
PostPosted: Fri Feb 24, 2012 1:38 pm 
Offline
Ultimate Member
Ultimate Member

Joined: Wed Aug 03, 2011 12:24 pm
Posts: 504
Location: Charleston, SC
Certs: MCSE, MCP+I, SEC+ (working on CCENT/CCNA)
Have more traffic on this from my troubleshooting, will provide soonest


Top
 Profile  
 
 Post subject: Re: IPSEC VPN problem
PostPosted: Fri Feb 24, 2012 5:30 pm 
Offline
Ultimate Member
Ultimate Member

Joined: Wed Aug 03, 2011 12:24 pm
Posts: 504
Location: Charleston, SC
Certs: MCSE, MCP+I, SEC+ (working on CCENT/CCNA)
troubleshooting and debugs have narrowed this down to a Max simultaneous login problem. I believe someone may have made some changes without my knowledge...


Top
 Profile  
 
 Post subject: Re: IPSEC VPN problem
PostPosted: Mon Feb 27, 2012 7:52 am 
Offline
Ultimate Member
Ultimate Member

Joined: Wed Aug 03, 2011 12:24 pm
Posts: 504
Location: Charleston, SC
Certs: MCSE, MCP+I, SEC+ (working on CCENT/CCNA)
pardon, ttsaon?


Top
 Profile  
 
 Post subject: Re: IPSEC VPN problem
PostPosted: Tue Feb 28, 2012 8:22 am 
Offline
Ultimate Member
Ultimate Member

Joined: Wed Aug 03, 2011 12:24 pm
Posts: 504
Location: Charleston, SC
Certs: MCSE, MCP+I, SEC+ (working on CCENT/CCNA)
OK I am pretty sure the initial problem was caused by poor connectivity to our Aircard provider. That's been addressed, and now I am getting the following:
error on client: "Secure VPN connection terminated by peer. Reason 433: (Reason not specified by peer)" Which is utterly useless...

ASDM log shows me:
"login authentication failed due to max simulataneous-login restriction"

Testing on a known-good machine and configuration of VPN client (I used it just last Thursday afternoon), I get the same error.


Top
 Profile  
 
 Post subject: Re: IPSEC VPN problem
PostPosted: Tue Feb 28, 2012 9:38 am 
Offline
Post Whore
Post Whore
User avatar

Joined: Thu Oct 14, 2010 4:39 am
Posts: 1003
Certs: CCNP (R&S, Security), ITILv3 Foundation
How about some debugs from the box?


Top
 Profile  
 
 Post subject: Re: IPSEC VPN problem
PostPosted: Tue Feb 28, 2012 1:13 pm 
Offline
Ultimate Member
Ultimate Member

Joined: Wed Aug 03, 2011 12:24 pm
Posts: 504
Location: Charleston, SC
Certs: MCSE, MCP+I, SEC+ (working on CCENT/CCNA)
Which would you like? I'll have to sterilize them of course...


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 7 posts ] 

All times are UTC - 6 hours [ DST ]


Who is online

Users browsing this forum: Majestic-12 [Bot] and 6 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group