Has anyone implemented a Easy VPN connection from the UC500 to an ISR? I can get everything to work (via CCA on both hardwares) but here are the problems - Problem 1 is related to 2 because when the connection is lost, it prompts the following - *Mar 6 22:12:16.564: EZVPN(EZVPN_REMOTE_CONNECTION_1): Pending XAuth Request, Please enter the following command: over and over until the username & password is entered in again. Any suggestions? :) |
|||
 |
UC500.comCisco Communication Manager Express, UC520, SMB VOIP reference and community |
To fix the xauth and logouts
I went through this a couple months ago and it was very annoying. I forget the exact steps I took but I believe it required modifications on the UC520 and the 871.
UC520
crypto isakmp client configuration group EZVPN_GROUP_1
key *****
pool EZVPN_POOL_1
acl 108
save-password
max-users 10
871
crypto ipsec client ezvpn EZVPN_REMOTE_CONNECTION_1
connect auto
group EZVPN_GROUP_1 key ****
mode client
peer xxx.xxx.xxx.xxx
username *** password ****
xauth userid mode local
See if you can add the lines your missing and if that fixes your problems.
Thanks :) I will give it a
Thanks :) I will give it a shot. I was looking for this to save the username & pw so that everytime it times out it will reconnect automatically.
Do you know why the connection times out? I'm thinking maybe it has to do with the fact that it wants traffic across the tunnel constantly.. I have some engineers looking into this issue.
Possibly a misconfiguration
Possibly a misconfiguration between the two ends. Either find and correct the difference or turn off xauth.
Post a scrubbed show run and we can take a look.