Solved

Cisco VPN Client is occasionally unable to connect to Cisco VPN Concentrator

Posted on 2006-07-20
3
495 Views
Last Modified: 2013-11-15
We use a Cisco 3015 Concentrator (software version 4.7.2) and the Cisco VPN Software client (version 4.6) running on Notebook computers with Windows XP SP2.  Occasionally users are unable to connect to the VPN concentrator getting the error “Reason 412: The remote peer is no longer responding.”

The very same machine may be able to connect from different location (employee moves to a different hotel) without any problems at all – with all things being the same on the notebook computer and concentrator.  When the failure is occurring – the concentrator event log does not appear to register a login attempt and on the client log indicates several ISAKMP OAK AG (Retransmissions) and the “Discarding IKE SA negotiation” followed by DEL_REASON_PEER_NOT_RESPONDING.
0
Comment
Question by:wpburgess
  • 2
3 Comments
 
LVL 12

Accepted Solution

by:
Scotty_cisco earned 500 total points
ID: 17146867
ok you hit the nail on the head.
>The very same machine may be able to connect from different location (employee moves to a different hotel) without any problems at all

that is because they are not passing through IKE SA and the other location is... the problem is there is really no solution to this other than finding hotels that setup the nat and distributions to users correctly.

We have this problem as well with a checkpoint VPN solution for that reason we also have a corprate dialup account as well.

its called NAT traversal in the cisco world..... and in the checkpoint world it is NAT-T.

Thanks
Scott

0
 
LVL 10

Expert Comment

by:Sorenson
ID: 17146891
What devices are between the outside port of the 3015 concentrator and the internet?  It would appear to be either a flaky internet connection, or a firewall between the vpn concentrator and the internet that is timing out the connection before the session is actually complete.  Double check the interface information on the vpn concentrator to be sure that there are no ethernet errors (like speed / duplex mismatches indicated by CRC and Runts) as well.

0
 
LVL 10

Expert Comment

by:Sorenson
ID: 17146908
sorry. didnt read all the way through the question.  I thought it was with clients that could connect and then suddenly could not.  I think Scotty_cisco's answer hits it on the head.

0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
Most of the applications these days are on Cloud. Cloud is ubiquitous with many service providers in the market. Since it has many benefits such as cost reduction, software updates, remote access, disaster recovery and much more.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now