Hi when trying to config the ASA for ezvpn server using the client
workstation as the end client, I cannot get this connection to come up, I
keep seeing errors to do with the isakmp profiles, but they are as
configured in the proctor guide;

 

%ASA-7-713906: IP = 192.1.12.50, Connection landed on tunnel_group EZGroup

%ASA-7-713906: Group = EZGroup, IP = 192.1.12.50, All SA proposals found
unacceptable

%ASA-4-713903: Group = EZGroup, IP = 192.1.12.50, Error: Unable to remove
PeerTblEntry

 

crypto ipsec transform-set myset esp-des esp-md5-hmac 

crypto ipsec security-association lifetime seconds 28800

crypto ipsec security-association lifetime kilobytes 4608000

crypto dynamic-map dynmap 10 set transform-set myset

crypto map mymap 50 ipsec-isakmp dynamic dynmap

crypto map mymap interface outside

crypto isakmp enable outside

crypto isakmp policy 10

 authentication pre-share

 encryption 3des

 hash md5

 group 2

 lifetime 86400

crypto isakmp policy 20

 authentication pre-share

 encryption des

 hash sha

 group 2

 lifetime 86400

crypto isakmp policy 30

 authentication pre-share

 encryption des

 hash md5

 group 1      

 lifetime 86400

 

username cisco password 3USUcOPFUiMCO4Jk encrypted

group-policy ez internal

group-policy ez attributes

 wins-server value 10.2.2.175

 dns-server value 10.2.2.175

 default-domain value ipexper.net

 

tunnel-group EZGroup type remote-access

tunnel-group EZGroup general-attributes

 address-pool Eezpool

 default-group-policy ez

tunnel-group EZGroup ipsec-attributes

 pre-shared-key *

 

ip local pool Eezpool 10.3.3.1-10.3.3.253 mask 255.255.255.0

 

can you offer any advice? Im stumped.

 

Thanks

 

LR

Reply via email to