Hi,
I have a question, is it considered bad etiquette to repost a question if an answer was never received? For instance, I never had a single response on:
Thanks.
Hi Kevin,
The remote peer is not responding to the client's request to establish the connection.
Make sure you can ping the remote peer, or check remote peer logs for why it is not responding to the client.
Sincerely,
Brad Reese BradReese.Com - Cisco Repair
The outside IP address of the ASA is being Natt'ed won't affect the fact that this is the IP I am trying to connect my VPN to?
Thanks.
Usually the reason there was no answer is because no one could answer it well. And reposting a few days later is not likely to change that.
Yes.
It was bad etiquette the first time, to post a config trimmed down too far for us to be able to debug the problem. We need to see access-list 110, and we need to know whether you have sysopt connection permit-ipsec, and if you do not then we need to see inside_access_in and outside_access_in
You should also be considering that the documention indicates that you should not use group 2 with AES-256: you need group 5.
You also haven't shown us anything from debug crypto ipsec or debug crypto isakmp
Have something to add? Share your thoughts — no account required.
Ask the community — no account required
