RE: remote access vpn issue

You need to bind your Dynamic Crypto Map with the Static Crypto Map.
Something like:

crypto map CRYPTO 10 ipsec-isakmp dynamic dynmap

Regards,

Antonio Soares, CCIE #18473 (R&S/SP)
 <mailto:amsoares_at_netcabo.pt> amsoares_at_netcabo.pt

 <http://www.ccie18473.net> http://www.ccie18473.net

From: Abiola Jewoola [mailto:biola_y2k_at_yahoo.com]
Sent: quinta-feira, 10 de Margo de 2011 16:13
To: 'Sadiq Yakasai'; Antonio Soares
Cc: ccielab_at_groupstudy.com
Subject: RE: remote access vpn issue

vpnc version 0.5.3

--- On Thu, 3/10/11, Antonio Soares <amsoares_at_netcabo.pt> wrote:

From: Antonio Soares <amsoares_at_netcabo.pt>
Subject: RE: remote access vpn issue
To: "'Abiola Jewoola'" <biola_y2k_at_yahoo.com>, "'Sadiq Yakasai'"
<sadiqtanko_at_gmail.com>
Cc: ccielab_at_groupstudy.com
Date: Thursday, March 10, 2011, 8:10 AM

What VPN client is that ? The error message you have seems to indicate a
problem with the VPN client. The major version should be 1 for IKEv1 or 2
for IKEv2. And IKEv2 was introduced in IOS 15.1T not too long ago:

http://www.cisco.com/en/US/docs/ios/sec_secure_connectivity/configuration/gu
ide/sec_cfg_ikev2.html

Regards,

Antonio Soares, CCIE #18473 (R&S/SP)
amsoares_at_netcabo.pt
http://www.ccie18473.net

-----Original Message-----
From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of
Abiola Jewoola
Sent: quinta-feira, 10 de Margo de 2011 15:17
To: Sadiq Yakasai
Cc: ccielab_at_groupstudy.com
Subject: Re: remote access vpn issue

vpnc version 0.5.3

I dont have access to the remote software

--- On Thu, 3/10/11, Sadiq Yakasai <sadiqtanko_at_gmail.com> wrote:

From: Sadiq Yakasai <sadiqtanko_at_gmail.com>
Subject: Re: remote access vpn issue
To: "Abiola Jewoola" <biola_y2k_at_yahoo.com>
Cc: ccielab_at_groupstudy.com
Date: Thursday, March 10, 2011, 6:34 AM

Hi Abiola,

Can you provide some configuration and the versions of all the software
involved here? That should give more information in troubleshooting this.

Sadiq

On Thu, Mar 10, 2011 at 1:41 PM, Abiola Jewoola <biola_y2k_at_yahoo.com> wrote:

Hello guys,

Am setting up a remote access vpn for a client. I have confiigured the vpn

parameters on the router. The connection from the client software is

successsful.

But the remote user can ping the Head office local Lan.

I can see the connections coming from the user ( QM_IDLE State) but when i
did

a debug crypto isakamp and debug crypto ipsec. i get some error logs

IKE Dispatcher: Invalid major version 4 in IKE packet header. Dropping
packet

What could be the prob?

Blogs and organic groups at http://www.ccie.net
Received on Thu Mar 10 2011 - 16:28:49 ART