Problems with IP-SEC VPN through SOHO-96 ADSL router

Apr 19, 2006 1 Replies

Hello,



I have the following wish, I want to connect at home from my lan to my employers network. My employer has a Cisco VPN concentrator that works fine. First I had a speedtouch ADSL router no problem just connect with Freeswan VPN to the Cisco and it just worked. A week ago I replaced the Speedtouch with a Cisco SOHO 96 ADSL modem/router. I configured it and it worked, at least I thought it did. I discovered that I couldn't create A VPN tunnel through that modem. That means I can create a connection but when I actually want to do something through the tunnel I get the following lines into the console of my SOHO:



1w2d: %CRYPTO-4-RECVD_PKT_INV_SPI: decaps: rec'd IPSEC packet has invalid spi for destaddr=, prot=50, spi=0x9442D3CB(-1807559733), srcaddr=

First I had some access-list issues but that I already solved (I can do a little bit by myself :-) )



Someone any idea what goes wrong and what the solution is, other than switching back to my Speedtouch.



CU



Roel



Hello,

I found the solution already. I have to tell my Cisco explicit that I have a IPSEC tunnel. This I have done with the following commands: ip nat inside source static esp interface Dialer1 ip nat inside source static udp 500 interface Dialer1

500

That was the trick for me.

CU

Roel

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required