VPN client connection issue - reason 433
Keep getting error: 433 (unspecified) in VPN Client... Not sure what I've done wrong.
Anyone see anything I don't?
It is querying for AUTH, so its hitting the RADIUS server. If I type in the wrong credentials, it lets me know, and gives me another shot. Typing the password in correctly gives me the error.
crypto isakmp client configuration group TestSoft
key xxxxxxx
dns 10.10.x.x
wins 10.10.x.x
domain xxx.loc
pool TESTPOOL
acl 100
max-users 5
netmask 255.255.255.255
<…>
crypto isakmp profile Test-ike-profile
description Test Soft VPN Client
match identity group TestSoft
client authentication list RADIUS-AUTHENTICATION
isakmp authorization list vpn_group_ml_1
client configuration address respond
keepalive 15 retry 2
virtual-template 3
<…>
interface Virtual-Template3 type tunnel
ip unnumbered Loopback0
ip nat inside
ip virtual-reassembly
no logging event link-status
tunnel mode ipsec ipv4
tunnel protection ipsec profile Test-Client-Profile
<…>
crypto ipsec profile Test-Client-Profile
set security-association idle-time 86400
set transform-set ESP-AES-SHA-COMPRESS
set isakmp-profile Test-ike-profile
crypto ipsec transform-set ESP-AES-SHA-COMPRESS esp-aes 256 esp-sha-hmac comp-lzs
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
!
crypto isakmp policy 2
encr aes 256
authentication pre-share
group 2
aaa authorization network vpn_group_ml_1 local
Anyone see anything I don't?
It is querying for AUTH, so its hitting the RADIUS server. If I type in the wrong credentials, it lets me know, and gives me another shot. Typing the password in correctly gives me the error.
crypto isakmp client configuration group TestSoft
key xxxxxxx
dns 10.10.x.x
wins 10.10.x.x
domain xxx.loc
pool TESTPOOL
acl 100
max-users 5
netmask 255.255.255.255
<…>
crypto isakmp profile Test-ike-profile
description Test Soft VPN Client
match identity group TestSoft
client authentication list RADIUS-AUTHENTICATION
isakmp authorization list vpn_group_ml_1
client configuration address respond
keepalive 15 retry 2
virtual-template 3
<…>
interface Virtual-Template3 type tunnel
ip unnumbered Loopback0
ip nat inside
ip virtual-reassembly
no logging event link-status
tunnel mode ipsec ipv4
tunnel protection ipsec profile Test-Client-Profile
<…>
crypto ipsec profile Test-Client-Profile
set security-association idle-time 86400
set transform-set ESP-AES-SHA-COMPRESS
set isakmp-profile Test-ike-profile
crypto ipsec transform-set ESP-AES-SHA-COMPRESS esp-aes 256 esp-sha-hmac comp-lzs
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
!
crypto isakmp policy 2
encr aes 256
authentication pre-share
group 2
aaa authorization network vpn_group_ml_1 local
_______LAB________
2x 2950
2x 3550
2x 2650XM
2x 3640
1x 2801
2x 2950
2x 3550
2x 2650XM
2x 3640
1x 2801