Hall of Fame

1. RobWill364,394
2. arnold197,721
3. MikeKane197,312
4. JFrederic...170,047
5. bignewf168,320
6. Qlemo140,915
7. lrmoore138,305
8. ikalmar110,182
9. dpk_wal89,572
10. deimark79,485
11. 3nerds72,036
12. asavener54,580
13. jodylemoine46,900
14. geergon38,385
15. Quori34,527
16. RPPreacher34,355
17. ccomley33,840
18. Roachy1...33,822
19. uetian170733,444
20. MrHusy32,838
21. giltjr31,041
22. PeteLong30,854
23. SysExpert30,361
24. alanhardisty27,978
25. mitrushi27,480

1. RobWill2,021,679
2. lrmoore1,323,628
3. batry_boy467,701
4. arnold359,804
5. dpk_wal265,644
6. JFrederic...242,427
7. MikeKane228,592
8. Qlemo226,232
9. grblades218,409
10. bignewf183,320
11. rsivanandan183,296
12. MrHusy128,332
13. TechSoEasy122,268
14. mwecom...120,329
15. PeteLong116,920
16. keith_ala...115,514
17. SysExpert114,141
18. calvinetter112,805
19. ikalmar110,182
20. Voltz-dk98,355
21. deimark93,160
22. Cyclops3...90,587
23. RPPreacher79,980
24. tim_holman75,964
25. 3nerds72,036

	[x] Posted via EE Mobile
	Search, ask, and monitor your questions on the go with EE Mobile. Visit Experts Exchange from your mobile device and never be out of touch again.

Question

	[x] Attachment Details

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

9.8

Replacing 1720 with ASA5505, Dynamic VPN Issue

Asked by carl_legere in Virtual Private Networking (VPN), Cisco PIX Firewall, Network Routers

Tags: cisco, ASA Router, ASA5505

I have a failing 1720 router that is the center-point to a vpn with two dynamic 1720 routers connecting to it. It also is supporting PPTP VPN connections but I am planning on replacing those with Cisco VPN Software clients.

My problem is with the two dynamic VPN's. I am unable to connect them to my newly configured ASA5505, because the commands have changed and I can no longer specify no-xauth with my pre-shared key. I need help.

When I enter my pre-shared key command it ends up in the tunnel-group DefaultRAGroup, which is fine, but my remote routers get stuck at XAUTH. I need xauth obviously for the remote VPN clients to work, and I want to ignore XAUTH for the two dynamic 1720 routers that use the preshared key.

I have attached the important part of the configs.

Get your answer NOW

         
           
             1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:

           
           
             Dying 1720 (working) config:
 
crypto isakmp policy 1
 hash md5
 authentication pre-share
 group 2
crypto isakmp key supersecret address 0.0.0.0 0.0.0.0 no-xauth
crypto isakmp keepalive 10
!
crypto isakmp client configuration group hvfclient
 key moresecrets
 dns INSIDEDNS
 wins INSIDEWINS
 domain MYDOMAIN
 pool vpnpool
!
!
crypto ipsec transform-set des esp-des esp-md5-hmac
!
crypto dynamic-map vpn-des-dyn 1
 set transform-set des
!
!
crypto map vpn-des client authentication list userauthen
crypto map vpn-des isakmp authorization list groupauthor
crypto map vpn-des client configuration address respond
crypto map vpn-des 1 ipsec-isakmp dynamic vpn-des-dyn
 
********************************
Working 1720 at remote location:
 
crypto isakmp policy 1
 hash md5
 authentication pre-share
 group 2
crypto isakmp key supersecret address DYING1720ADDRESS
crypto isakmp keepalive 10
!
!
crypto ipsec transform-set des esp-des esp-md5-hmac
!
crypto dynamic-map dynmap 1
 set transform-set des
!
!
crypto map vpn-des 1 ipsec-isakmp dynamic dynmap
crypto map vpn-des 10 ipsec-isakmp
 set peer DYING1720ADDRESSS
 set transform-set des
 match address 111

           
         

	Title
1	cisco 2611 and VPN?
2	Connecting to branch Office Resource…
3	New ASA Install, can't connect with…
4	No return traffic using cisco vpn client …

Replacing 1720 with ASA5505, Dynamic VPN Issue

Asked by carl_legere in Virtual Private Networking (VPN), Cisco PIX Firewall, Network Routers

Tags: cisco, ASA Router, ASA5505

About this solution