VPN Tunnel between draytek vigor 2700 and cisco router: VPN Tunnel between draytek vigor 2700 and cisco router

VPN Tunnel between draytek vigor 2700 and cisco router

Hi,
I am trying to configure an IPSec tunnel between a cisco router and a draytek vigor 2700 series router. However, they don't seem to be negotiating Phase-1 parameters. I have throughly checked my settings in vigor and cisco which seem ok to me but i'm missing something in phase-1 parameters (possibly in the vigor 2700 series) which is why its not establishing the tunnel. Given below is an output of show crypto isakmp on the Cisco router

VPN-Hub#sh crypto isakmp sa | section 165.228.142.37
165.228.142.37 203.38.180.222 MM_NO_STATE 0 0 ACTIVE

The config for cisco router vpn is given below and ive attached snapshots of the vigor...Your help will be really appreciated !

crypto isakmp policy 15
 encr aes
 hash md5
 authentication pre-share
 group 2
 
crypto isakmp key xxx address 165.228.142.37
!
crypto ipsec transform-set ho_yha_darwin esp-aes 256 esp-sha-hmac
!
 
crypto map cj_map 130 ipsec-isakmp
 set peer 165.228.142.37
 set transform-set ho_yha_darwin
 match address HO_YHA_Darwin
 
Extended IP access list HO_YHA_Darwin
    10 permit ip 10.152.0.0 0.0.0.255 10.144.18.0 0.0.0.255 (30 matches)
    20 deny gre any any
    30 deny ip any any
 
And finally applied the cj_map on Pub interface of this router

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:

Select all Open in new window

Instant Access to this Solution

Plus...

30 Day FREE access, no risk, no obligation

Collaborate with the world's top tech experts

Unlimited access to our exclusive solution database

Never be left without tech help again

Trusted by hundreds of thousands everyday for fast, accurate and reliable tech support.

"The time we save is the biggest benefit of Experts Exchange to Warner Bros. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange." Mike Kapnisakis, Warner Bros.

"Our team likes having a resource that is more secure than just using Google and most experts using this service really know their stuff. It's nice to look here first versus using Google." Dayna Sellner, Lockheed Martin

"Anytime that I've been stumped with a problem, 9 out of 10 times Experts Exchange has either the accepted solution or an open discussion of the potential solution to the problem." Kenny Red, eBay Inc.

See what Experts Exchange can do for you.

Got a question?

We've got the answer.

Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.

Screenshot of Experts Exchange Knowledgebase

Need individual assistance?

Our experts are ready to help.

If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.

Want to learn from the best?

Read articles from industry experts.

Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.

Working on a long term project?

Store your work and research.

Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.

Join the Community

Give a Little. Get a Lot.

Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.

Question

VPN Tunnel between draytek vigor 2700 and cisco router

Subscribe now for full access to Experts Exchange and get

Instant Access to this Solution