conf client vpn cisco pre shared key Résolu/Fermé

Question

Bonjour, 
Je suis en train de configurer une connection vpn (client site-to-site) sur un cisco 1721 et j'ai trouvé bcp des difficultées. merci de m'aider plzz.
voici les paramètres que j'ai:
** Coté serveur:
* @IP: 197.x.x.x
- ike : phase1 :
-- auth. : psk (blablabla)
-- Encryption schema : ike
-- DH Group 2
-- Hash Algo : sha1
-- ike SA lifetime : 28800
- ipsec: phase 2
-- transform ipsec protocol : esp
-- no pfs
-- Encry. ipsec: aes 256
-- hash ipsec : sha1
-- ipsec SA lifetime : 3600
-- agressive mode : no
-- key exchange for subnet : no
-- Domain : 10.25.x.x/27


** Coté Client
-- @IP modem adsl : 41.x.x.x
-- Subnet : 10.44.x.x/29

**Mon architecture**
- pc client : 10.44.1.2
- routeur vpn cisco 1721 :
(FastEthernet0 (liée a mon pc): 10.44.3.26 | Ethernet0(liée au modem ads)l: 192.168.2.253) 
- modem adsl : @lan : 192.168.2.254, @Wan : 41.x.x.x

J'ai essayer plusieurs conf mais j'ai pas réussi a faire monté la liaison. merci de m'aider.


Configuration: Linux / Firefox 17.0

serpan2 · Answer

voici ce que j'ai quand je debug : sh crypto isakmp :

*Mar  5 14:10:29.074: ISAKMP: received ke message (1/1)
*Mar  5 14:10:29.074: ISAKMP:(0:0:N/A:0): SA request profile is (NULL)
*Mar  5 14:10:29.074: ISAKMP: Created a peer struct for 196.x.x.x, peer port 500
*Mar  5 14:10:29.074: ISAKMP: New peer created peer = 0x82A89684 peer_handle = 0x80000739
*Mar  5 14:10:29.074: ISAKMP: Locking peer struct 0x82A89684, IKE refcount 1 for isakmp_initiator
*Mar  5 14:10:29.078: ISAKMP: local port 500, remote port 500
*Mar  5 14:10:29.078: ISAKMP: set new node 0 to QM_IDLE      
*Mar  5 14:10:29.078: ISAKMP: Find a dup sa in the avl tree during calling isadb_insert sa = 82D83F00
*Mar  5 14:10:29.078: ISAKMP:(0:0:N/A:0):Can not start Aggressive mode, trying Main mode.
*Mar  5 14:10:29.078: ISAKMP:(0:0:N/A:0):found peer pre-shared key matching 196.x.x.x
*Mar  5 14:10:29.078: ISAKMP:(0:0:N/A:0): constructed NAT-T vendor-07 ID
*Mar  5 14:10:29.082: ISAKMP:(0:0:N/A:0): constructed NAT-T vendor-03 ID
*Mar  5 14:10:29.082: ISAKMP:(0:0:N/A:0): constructed NAT-T vendor-02 ID
*Mar  5 14:10:29.082: ISAKMP:(0:0:N/A:0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_MM
*Mar  5 14:10:29.082: ISAKMP:(0:0:N/A:0):Old State = IKE_READY  New State = IKE_I_MM1 

*Mar  5 14:10:29.082: ISAKMP:(0:0:N/A:0): beginning Main Mode exchange
*Mar  5 14:10:29.082: ISAKMP:(0:0:N/A:0): sending packet to 196.x.x.x my_port 500 peer_port 500 (I) MM_NO_STATE
*Mar  5 14:10:29.118: ISAKMP (0:0): received packet from 196.x.x.x dport 500 sport 500 Global (I) MM_NO_STATE
*Mar  5 14:10:29.118: ISAKMP:(0:0:N/A:0):Notify has no hash. Rejected.
*Mar  5 14:10:29.118: ISAKMP (0:0): Unknown Input IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY:  state = IKE_I_MM1
*Mar  5 14:10:29.118: ISAKMP:(0:0:N/A:0):Input = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY
*Mar  5 14:10:29.122: ISAKMP:(0:0:N/A:0):Old State = IKE_I_MM1  New State = IKE_I_MM1 

*Mar  5 14:10:29.122: %CRYPTO-6-IKMP_MODE_FAILURE: Processing of Informational mode failed with peer at 196.x.x.x 



j'ai vu sur les forum que ça veut dire qu'il n ya pas les memes parametres sur les 2 routeurs ...

serpan2 · Answer

personne ne veux me répondre ? :'(

serpan2 · Answer

c'est bon je l'ai fait merci à moi

Conf client vpn cisco pre shared key

3 réponses

Discussions similaires