Cisco Pix 515e VPN client not connecting

Hi Experts

I have a cisco pix 515e setup for a site to site VPN and client VPN. Today client vpn stopped working can someone please help.

This is the config

: Saved
: Written by enable_15 at 20:37:35.879 UTC Thu Sep 21 2006

PIX Version 7.0(1)
names
name 192.168.100.14 EQ-DC1
name 194.168.4.100 NTL_DNS_1
name 194.168.8.100 NTL_DNS_2
name 192.168.101.0 NIHRC_Inside
name 192.168.100.40 PDM_Mgnt
name 192.168.100.23 EQ-IMSS
name 192.168.100.16 EQ-EXCH
name 192.168.100.28 Gary
name 192.168.100.26 Darren
name 192.168.100.35 Damien
name 192.168.100.25 EQ-IWSS
name 192.168.100.11 EQ-SQL
name 192.168.100.34 Bob
name 192.168.100.107 Martin
name 192.168.100.108 DVance
name 192.168.100.199 Bob_Laptop
name 81.144.250.195 NICCY_PIX
name 192.168.100.27 EQ-TS
name 192.168.100.93 Intranet
name 10.10.10.3 EQ-IMSS1
name 192.168.100.213 Ciaran
name 192.168.100.188 Terry
name 192.168.100.253 Intranet_FailOver
name 192.168.100.158 Test
name 192.168.100.191 MOConnor
name 192.168.100.97 LKinney
name 192.168.100.130 una_Okane
!
interface Ethernet0
 nameif Outside
 security-level 0
 ip address 82.1.x.x 255.255.x.x
!
interface Ethernet1
 nameif inside
 security-level 100
 ip address 192.168.100.206 255.255.255.0
!
interface Ethernet2
 shutdown
 nameif DMZ
 security-level 4
 ip address 10.10.10.1 255.255.255.0
!
enable password Password encrypted
passwd  encrypted
hostname firewall
domain-name domain.org
ftp mode passive
object-group service Inside_Group tcp
 description Allow multiple services from Inside to Internet
 port-object eq www
 port-object eq ftp-data
 port-object eq https
 port-object eq ftp
object-group network NoProxy
 network-object EQ-EXCH 255.255.255.255
 network-object EQ-IMSS 255.255.255.255
 network-object EQ-DC1 255.255.255.255
 network-object EQ-IWSS 255.255.255.255
 network-object EQ-SQL 255.255.255.255
 network-object Bob 255.255.255.255
 network-object Damien 255.255.255.255
 network-object Martin 255.255.255.255
 network-object DVance 255.255.255.255
 network-object Bob_Laptop 255.255.255.255
 network-object Gary 255.255.255.255
 network-object EQ-TS 255.255.255.255
 network-object Darren 255.255.255.255
 network-object Intranet 255.255.255.255
 network-object 192.168.100.214 255.255.255.255
 network-object Terry 255.255.255.255
 network-object Intranet_FailOver 255.255.255.255
 network-object MOConnor 255.255.255.255
 network-object LKinney 255.255.255.255
 network-object una_Okane 255.255.255.255
 network-object Ciaran 255.255.255.255
object-group network NICCY
 network-object Gary 255.255.255.255
 network-object Darren 255.255.255.255
 network-object Damien 255.255.255.255
 network-object PDM_Mgnt 255.255.255.255
 network-object Test 255.255.255.255
 network-object 192.168.100.222 255.255.255.255
object-group network DMZ_ACCESS
 network-object Darren 255.255.255.255
 network-object Gary 255.255.255.255
 network-object Damien 255.255.255.255
 network-object Martin 255.255.255.255
 network-object PDM_Mgnt 255.255.255.255
 network-object Ciaran 255.255.255.255
access-list outside_access_in extended permit tcp any host 82.1.x.x eq smtp
access-list outside_access_in extended permit tcp any host 82.1.x.x eq https
access-list outside_access_in remark Allow SMTP Access
access-list outside_access_in remark Outside Access to HTTPS for OWA
access-list inside_access_in remark Allow DNS to NTL1
access-list inside_access_in extended permit udp any host NTL_DNS_1 eq domain
access-list inside_access_in remark Allow DNS to NTL2
access-list inside_access_in extended permit udp any host NTL_DNS_2 eq domain
access-list inside_access_in extended permit tcp host EQ-IMSS any eq smtp
access-list inside_access_in extended permit tcp object-group NoProxy any
access-list inside_access_in extended permit ip object-group NICCY any
access-list inside_access_in extended permit tcp host EQ-IWSS any object-group Inside_Group
access-list inside_access_in extended permit ip host EQ-TS NIHRC_Inside 255.255.255.0
access-list inside_access_in extended permit ip host Gary any
access-list inside_access_in remark Allow DNS to NTL1
access-list inside_access_in remark Allow DNS to NTL2
access-list inside_access_in extended permit ip host Darren NIHRC_Inside 255.255.255.0
access-list inside_access_in extended permit ip host Damien NIHRC_Inside 255.255.255.0
access-list inside_access_in extended permit ip host EQ-DC1 any
access-list inside_access_in extended permit ip host 192.168.100.39 any
access-list inside_nat0_outbound extended permit ip any 172.30.1.0 255.255.255.128
access-list inside_nat0_outbound extended permit ip 192.168.100.0 255.255.255.0 NIHRC_Inside 255.255.255.0
access-list Outside_cryptomap_dyn_20 extended permit ip any 172.30.1.0 255.255.255.128
access-list Outside_cryptomap_dyn_20 extended permit ip 192.168.100.0 255.255.255.0 NIHRC_Inside 255.255.255.0
access-list inside_outbound_nat0_acl extended permit ip 192.168.100.0 255.255.255.0 NIHRC_Inside 255.255.255.0
access-list to_506 extended permit ip 192.168.100.0 255.255.255.0 NIHRC_Inside 255.255.255.0
pager lines 24
mtu Outside 1500
mtu inside 1500
mtu DMZ 1500
monitor-interface Outside
monitor-interface inside
monitor-interface DMZ
no asdm history enable
arp timeout 14400
global (Outside) 1 82.1.x.x-82.1.x.x
global (Outside) 1 82.1.x.x
global (DMZ) 1 interface
nat (inside) 0 access-list inside_nat0_outbound
nat (inside) 1 0.0.0.0 0.0.0.0 dns tcp 5000 2500
nat (DMZ) 1 10.10.10.0 255.255.255.0
static (inside,Outside) 82.1.x.x 192.168.100.252 netmask 255.255.255.255
static (inside,Outside) 82.1.x.x EQ-IMSS netmask 255.255.255.255 dns tcp 5000 2500
access-group outside_access_in in interface Outside
access-group inside_access_in in interface inside
route Outside 0.0.0.0 0.0.0.0 82.1.x.x 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00
timeout mgcp-pat 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server RADIUS protocol radius
aaa-server RADIUS host 192.168.100.39
 timeout 5
 key Pass
group-policy VpN01 internal
group-policy VpN01 attributes
 default-domain value domain.local
http server enable
http PDM_Mgnt 255.255.255.255 inside
no snmp-server location
no snmp-server contact
snmp-server community public
snmp-server enable traps snmp
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-none
crypto ipsec transform-set ESP-DES-MD5 esp-3des esp-none
crypto ipsec transform-set TUNNEL_ESP_3DES_MD5 esp-3des esp-none
crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
crypto ipsec transform-set TUNNEL_ESP_3DES_SHA esp-3des esp-sha-hmac
crypto dynamic-map Outside_dyn_map 20 match address Outside_cryptomap_dyn_20
crypto dynamic-map Outside_dyn_map 20 set transform-set TUNNEL_ESP_3DES_SHA
crypto map outside_map 20 match address to_506
crypto map outside_map 20 set peer 217.37.x.x
crypto map outside_map 20 set transform-set ESP-3DES-MD5
crypto map outside_map 65535 ipsec-isakmp dynamic Outside_dyn_map
crypto map outside_map interface Outside
isakmp enable Outside
isakmp policy 10 authentication pre-share
isakmp policy 10 encryption 3des
isakmp policy 10 hash sha
isakmp policy 10 group 2
isakmp policy 10 lifetime 86400
isakmp policy 20 authentication pre-share
isakmp policy 20 encryption 3des
isakmp policy 20 hash md5
isakmp policy 20 group 2
isakmp policy 20 lifetime 86400
isakmp policy 65535 authentication pre-share
isakmp policy 65535 encryption 3des
isakmp policy 65535 hash sha
isakmp policy 65535 group 2
isakmp policy 65535 lifetime 86400
telnet 82.16.x.x 255.255.252.0 Outside
telnet PDM_Mgnt 255.255.255.255 inside
telnet EQ-TS 255.255.255.255 inside
telnet timeout 5
ssh timeout 5
console timeout 0
dhcpd lease 3600
dhcpd ping_timeout 50
tunnel-group VpN01 type ipsec-ra
tunnel-group VpN01 general-attributes
 authentication-server-group RADIUS
 default-group-policy VpN01
tunnel-group EqualVpN01 ipsec-attributes
 pre-shared-key Pass
tunnel-group 217.37.x.x type ipsec-l2l
tunnel-group 217.37.x.x ipsec-attributes
 pre-shared-key pass
!
class-map inspection_default
 match default-inspection-traffic
!
!
policy-map global_policy
 class inspection_default
  inspect dns maximum-length 512
  inspect ftp
  inspect h323 h225
  inspect h323 ras
  inspect netbios
  inspect rsh
  inspect rtsp
  inspect skinny
  inspect esmtp
  inspect sqlnet
  inspect sunrpc
  inspect tftp
  inspect sip
  inspect xdmcp
!
service-policy global_policy global
tftp-server inside EQ-TS cisco_pix
Cryptochecksum:52ddbdcd31b9cc3d277ba60f94bca06a
: end
Start Free Trial