Link to home
Start Free TrialLog in
Avatar of mwagoner_73
mwagoner_73Flag for United States of America

asked on

Can't connect to remote VPN using Netgear Prosafe client while behind Cisco Pix 501

In our office we have a Cisco Pix 501 firewall / vpn device sitting behind a Cisco 2800 series router.  One of our developers needs to connect to a client VPN using the NetGear Prosafe VPN Client software.  All settings for the vpn connection have been verified but we can't seem to conect.  In the log viewer the following error messages are returned:

- initiating IKE Phase 1 (IP ADDR:
- SENDING >>>>>>>>> ISAKMP OAK MM (SA, VID, 2x)
- Message not received Retransmitting!
- SENDING >>>>>>>>> ISAKMP OAK MM (Retransmission)

then it just repeats until it times out....

any suggestions or can you help point in the right direction???  Is it something on the Cisco PIX device or the 2800??

Avatar of bkepford
Flag of United States of America image

Is he trying to connect to the PIX with this client or is he trying to connect to a device outside your network from behind the PIX. Basic question restated is where is the client in refernce to your user.
If he is behind your pix by default the PIX blocks ISAKMP traffic from the internal interface.
I believe the command to enable it is "isakmp enable inside"
Add this command to your config :
fixup protocol esp-ike
If that does not work, attach configs of both router and pix.
ck459 is tha man(or woman),  fixup protocol esp-ike is the right command.
Still a man and not planning to change that ;-)
Avatar of mwagoner_73


the client we are trying to connect is outside of the PIX on a different network.  I will try the above solutions you mentioned.  thanks!
riddle me this???  why would the netgear sw blow out the Cisco VPN client SW that was already installed on the machine, and is there anyway to have both pieces of client sw on the same system and live in harmony???

thanks again!
Avatar of bkepford
Flag of United States of America image

Link to home
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial