mac vpn behind cisco firewall
Posted on 2014-11-06
When using an iphone or MacBook to connect to a vpn setup on a remote cisco ASA, it works fine from outside the local ASA, but always shows "negotiation failed" when trying the vpn from behind the local ASA. I setup debugs on the remote asa and see the connnections coming in, but it always stops at the same point. I have tried the vpn setup to other remote ASAs and get the same issue. It appears to be an issue with just the macs, as the cisco vpn client on a pc works fine from behind the firewall.
I have enabled nat traversal on both ASAs.
Not sure if there is a command on the ASA or a setting on the mac that will fix this.