Cisco Pix to Win2K

[ChrisSayles]

I am trying to setup a Cisco Pix to Win2k VPN. I have followed the Configuring IPSec Between a Microsoft Windows 2000 Server and a Cisco Device

http://www.cisco.com/warp/public/707/2000.html

I have set this up to the book and am still having no joy, do anybody know if something has to be added to Rras to make this work. Thanks for youre help

Chris Sayles

 

[Helpy]

I'm in the same question. But have a output from my debug

ISAKMP : Checking IPSec proposal 1
ISAKMP: transform 1, ESP_DES
ISAKMP: attributes in transform:
ISAKMP: SA life type in seconds
ISAKMP: SA life duration (VPI) of 0x0 0x0 0xe 0x10
ISAKMP: encaps is 1
ISAKMP: authenticator is HMAC-MD5
ISAKMP (0): atts are acceptable.IPSEC(validate_proposal_request): proposal part
#1,
(key eng. msg.) dest= A.A.A.A, src= B.B.B.B,
dest_proxy= 10.0.0.0/255.0.0.0/0/0 (type=4),
src_proxy= 0.0.0.0/0.0.0.0/0/0 (type=4),
protocol= ESP, transform= esp-des esp-md5-hmac ,
lifedur= 0s and 0kb,
spi= 0x0(0), conn_id= 0, keysize= 0, flags= 0x4
IPSEC(validate_transform_proposal): proxy identities not supported
IPSEC(validate_proposal_request): proposal part #1,
(key eng. msg.) dest= A.A.A.A, src= B.B.B.B,
dest_proxy= 0.0.0.0/0.0.0.0/0/0 (type=4),
src_proxy= 10.0.0.0/255.0.0.0/0/0 (type=4),
protocol= ESP, transform= esp-des esp-md5-hmac ,
lifedur= 0s and 0kb,
spi= 0x0(0), conn_id= 0, keysize= 0, flags= 0x4
IPSEC(validate_transform_proposal): proxy identities not supported
ISAKMP: IPSec policy invalidated proposal
ISAKMP (0): SA not acceptable!
ISAKMP (0): sending NOTIFY message 14 protocol 3
return status is IKMP_ERR_NO_RETRANS
ISADB: reaper checking SA 0x80b15658, conn_id = 0
ISADB: reaper checking SA 0x80b069c0, conn_id = 0 DELETE IT!
VPN Peer: ISAKMP: Peer ip:B.B.B.B Ref cnt decremented to:3


Anybody can help me with this output???
It seems to do phase I, but don't phase II

 

[darrenc]

I've been attempting the same with a PIX 515.
From my research the problem is with Win2K, as the MS VPN client does not support connection to Cisco equipment.

For more info, see Technet (

http://www.technet.com)

article 249576.

Instead I am now looking at using the Cisco VPN client with Win2K.

 

[jce001]

I'm having the same problem, and can't find an answer to one question. What is the cost for the Cisco client?

 

[darrenc]

Sorry, I don't now. The PIX was installed by my predecessor with an external consultant company. Due to problems at the time the Cisco VPN client was "thrown in".