We help IT Professionals succeed at work.

Check out our new AWS podcast with Certified Expert, Phil Phillips! Listen to "How to Execute a Seamless AWS Migration" on EE or on your favorite podcast platform. Listen Now

x

cisco and Draytek VPN Problem

Medium Priority
1,902 Views
Last Modified: 2012-06-27
I am configuring a Cisco router to a Draytek

The VPN tunnel comes up and I can start Remote Desktop sessions from the site with the Draytek to the site with the Cisco.

but I cannot do the same thing with the other way - i.e. I cannot open Remote Desktop sessions the other way.

In th cisco log is the following code when I try to connect from the Cisco site to the Dray tek site.

Any ideas what this is and how I can solve the issue?

IPSEC: Received an ESP packet (SPI= 0x79D1D28E, sequence number= 0x1) from 81.179.236.186 (user= 81.179.236.186) to 192.168.2.2. The decapsulated inner packet doesn't match the negotiated policy in the SA. The packet specifies its destination as 224.0.0.9, its source as 81.179.236.186, and its protocol as 2. The SA specifies its local proxy as Thetford_LAN/255.255.255.0/0/0 and its remote_proxy as Bury_LAN/255.255.255.0/0/0.
Comment
Watch Question

Kamran ArshadIT Associate

Commented:
Hi,

Such errors crop up when there is a mismatch in the ACLs. Please confirm that you use the same subnets both sides.

Author

Commented:
I have - the problem it seems was down to MTU size on the Draytek. I cahnged this to 1300 which was the figure on the Cisco and it all works fine!

Author

Commented:
I in fact answered the question myself! If you see it was down to the MTU settings on the Draytek.
Unlock this solution with a free trial preview.
(No credit card required)
Get Preview
Unlock the solution to this question.
Thanks for using Experts Exchange.

Please provide your email to receive a free trial preview!

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.