Cisco ASA Remote-Access VPN - PeerTable Entry errors - preventing login

kapshure
kapshure used Ask the Experts™
on
Hi Team

I've got a coworker who uses vpnc (on ubuntu) to access our production and dev networks over a VPN connection to a Cisco ASA 5520.

Just recently his login started failing, and the errors that I am able to catch in the logging are this:

Error: unable to remove PeerTblEntry
Removing peer from peer table failed, no match!

I actually use a VPN/Ipsec entry on Mac OS X 10.6, and I can access the VPN fine. As soon as I change the connection settings to his account, I get the above error messages in the logging console.

I've tried removing and recreating his account, with different usernames, a few times now, and it consistently fails.

I'm not an expert on this, but seems that some type of IPSec negotiation is not occurring correctly, but this is conjecture.

we're not using TACACS+, just local database of usernames and passwords. Again, this isnt a Site-to-Site, just standard Remote-Access VPN.

Any ideas?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
View Solution Only
Mac2010

Commented:
Did you try accessing the VPN-account from another Mac/PC? Is the problem related to the user account or something else?
kapshure

Author

Commented:
I've recreate several accounts. This occurs from a MAC and from his ubuntu laptop.
Top Expert 2010
Commented:
just post the output of  
debug crypto isakmp 127
debug crypto ipsec 127

while accessing
Success in ‘20 With a Profitable Pricing Strategy

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Find out now!
kapshure

Author

Commented:
hey @anoopkmr - i havent had a chance to look at this yet. been sidetracked. I'll try to post the output soon.
kapshure

Author

Commented:
actually this was my misunderstanding of some internal network architecture and services. im closing this  question out.'

sorry guys.
kapshure

Author

Commented:
this question never went towards resolution b/c I found out later that my issue had to do w/ lack of understanding how network and firewall were setup.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial