Solved

cisco and Draytek VPN Problem

Posted on 2009-07-09
5
1,713 Views
Last Modified: 2012-06-27
I am configuring a Cisco router to a Draytek

The VPN tunnel comes up and I can start Remote Desktop sessions from the site with the Draytek to the site with the Cisco.

but I cannot do the same thing with the other way - i.e. I cannot open Remote Desktop sessions the other way.

In th cisco log is the following code when I try to connect from the Cisco site to the Dray tek site.

Any ideas what this is and how I can solve the issue?

IPSEC: Received an ESP packet (SPI= 0x79D1D28E, sequence number= 0x1) from 81.179.236.186 (user= 81.179.236.186) to 192.168.2.2. The decapsulated inner packet doesn't match the negotiated policy in the SA. The packet specifies its destination as 224.0.0.9, its source as 81.179.236.186, and its protocol as 2. The SA specifies its local proxy as Thetford_LAN/255.255.255.0/0/0 and its remote_proxy as Bury_LAN/255.255.255.0/0/0.
0
Comment
Question by:Mawallace
  • 3
5 Comments
 
LVL 32

Expert Comment

by:Kamran Arshad
ID: 24821584
Hi,

Such errors crop up when there is a mismatch in the ACLs. Please confirm that you use the same subnets both sides.
0
 

Author Comment

by:Mawallace
ID: 24832099
I have - the problem it seems was down to MTU size on the Draytek. I cahnged this to 1300 which was the figure on the Cisco and it all works fine!
0
 

Author Comment

by:Mawallace
ID: 25012005
I in fact answered the question myself! If you see it was down to the MTU settings on the Draytek.
0
 

Accepted Solution

by:
Mawallace earned 0 total points
ID: 25012007
My solution worked!
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Sometimes, you want your microsoft VPN to route all the traffic to the remote network. Usually your employer network. This makes it possible to access all the nodes inside this remote LAN, even if they have no "public DNS" entries. To do so, you wo…
For a while, I have wanted to connect my HTC Incredible to my corporate network to take advantage of the phone's powerful capabilities. I searched online and came up with varied answers from "it won't work" to super complicated statements that I did…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now