Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Error opening IKE port 4500 on Interface outside

Status
Not open for further replies.

ttrsux

IS-IT--Management
Jul 28, 2004
112
US
Brand new Cisco ASA 5506-X. Ran the VPN wizard to enable Remote Access VPN with the Cisco VPN Client. At the end, all is "OK" except an error:

Error: crypto ikev1 enable outside
failed to open "udp/localized/2/4500"
Error: Error opening IKE port 4500 on Interface outside


Can someone help me with this? Provide a fix? No CLI experience here, but from looking around online I have seen suggestions to issue commands:

clear xlate
crypto ikev1 enable outside


When I run "crypto ikev1 enable outside, I get:

Result of the command: "crypto ikev1 enable outside"

ERROR: Failed to open "udp/localized/2/4500"
ERROR: Error opening IKE port 4500 on Interface outside


If I run the command "sh xlate", I do see a reference in there as:

UDP PAT from any:10.1.10.175/4500 to outside:x.x.x.x/4500 flags ri idle 207:27:08 timeout 0:00:30

...yet, I don't see any references of port 4500 in the NAT rules or Access rules section. Where can I make sure 4500 is available for the VPN?

When I run the "clear xlate" command and then "sh xlate" again, the 4500 reference is back in there, so I know the VPN wizard will still fail.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top