Solved

Cisco VPN Client is occasionally unable to connect to Cisco VPN Concentrator

Posted on 2006-07-20
3
504 Views
Last Modified: 2013-11-15
We use a Cisco 3015 Concentrator (software version 4.7.2) and the Cisco VPN Software client (version 4.6) running on Notebook computers with Windows XP SP2.  Occasionally users are unable to connect to the VPN concentrator getting the error “Reason 412: The remote peer is no longer responding.”

The very same machine may be able to connect from different location (employee moves to a different hotel) without any problems at all – with all things being the same on the notebook computer and concentrator.  When the failure is occurring – the concentrator event log does not appear to register a login attempt and on the client log indicates several ISAKMP OAK AG (Retransmissions) and the “Discarding IKE SA negotiation” followed by DEL_REASON_PEER_NOT_RESPONDING.
0
Comment
Question by:wpburgess
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 12

Accepted Solution

by:
Scotty_cisco earned 500 total points
ID: 17146867
ok you hit the nail on the head.
>The very same machine may be able to connect from different location (employee moves to a different hotel) without any problems at all

that is because they are not passing through IKE SA and the other location is... the problem is there is really no solution to this other than finding hotels that setup the nat and distributions to users correctly.

We have this problem as well with a checkpoint VPN solution for that reason we also have a corprate dialup account as well.

its called NAT traversal in the cisco world..... and in the checkpoint world it is NAT-T.

Thanks
Scott

0
 
LVL 10

Expert Comment

by:Sorenson
ID: 17146891
What devices are between the outside port of the 3015 concentrator and the internet?  It would appear to be either a flaky internet connection, or a firewall between the vpn concentrator and the internet that is timing out the connection before the session is actually complete.  Double check the interface information on the vpn concentrator to be sure that there are no ethernet errors (like speed / duplex mismatches indicated by CRC and Runts) as well.

0
 
LVL 10

Expert Comment

by:Sorenson
ID: 17146908
sorry. didnt read all the way through the question.  I thought it was with clients that could connect and then suddenly could not.  I think Scotty_cisco's answer hits it on the head.

0

Featured Post

Why Off-Site Backups Are The Only Way To Go

You are probably backing up your data—but how and where? Ransomware is on the rise and there are variants that specifically target backups. Read on to discover why off-site is the way to go.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

If your business is like most, chances are you still need to maintain a fax infrastructure for your staff. It’s hard to believe that a communication technology that was thriving in the mid-80s could still be an essential part of your team’s modern I…
Meet the world's only “Transparent Cloud™” from Superb Internet Corporation. Now, you can experience firsthand a cloud platform that consistently outperforms Amazon Web Services (AWS), IBM’s Softlayer, and Microsoft’s Azure when it comes to CPU and …
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question