Issues with PHS300 and Cisco VPN

richlee91 · EVDO Newbie Joined: 05 Apr 2008 Posts: 5

I just got a PHS300. It works great, connected righted up to Sprint, it was easy to setup security. When I tried to connect to my company's Cisco IPSEC (UDP) VPN it will not connect. I've checked the Special application section and IPSEC is checked. I'm running firmware version 2.1. It looks like a problem with the IKE packets not either getting through or the response not getting returned. Is there a DMZ setting on the modem? I spent about 15 mins looking for it. Any ideas? I was thinking about dropped back to an earlier version of the firmware to see if that will make it work.

23 19:30:58.926 04/05/08 Sev=Info/4 IKE/0x63000021
Retransmitting last packet!

24 19:30:58.926 04/05/08 Sev=Info/4 IKE/0x63000013
SENDING >>> ISAKMP OAK AG (Retransmission) to xxxxxx

25 19:31:03.933 04/05/08 Sev=Info/4 IKE/0x63000017
Marking IKE SA for deletion (I_Cookie=DA6F0673EF1185B2 R_Cookie=0000000000000000) reason = DEL_REASON_PEER_NOT_RESPONDING

26 19:31:04.434 04/05/08 Sev=Info/4 IKE/0x6300004B
Discarding IKE SA negotiation (I_Cookie=DA6F0673EF1185B2 R_Cookie=0000000000000000) reason = DEL_REASON_PEER_NOT_RESPONDING

27 19:31:04.434 04/05/08 Sev=Info/4 CM/0x63100014
Unable to establish Phase 1 SA with server "xxxxxx" because of "DEL_REASON_PEER_NOT_RESPONDIN

richlee91 · EVDO Newbie Joined: 05 Apr 2008 Posts: 5

I found the DMZ setting (under firewall). And it still can't connect through the cradlepoint. I can plug the Sprint adapter directly into my computer and the VPN can connect. I plug it into the Cradlepoint and no dice.

Thanks for any ideas / help anyone can provide

richlee91 · EVDO Newbie Joined: 05 Apr 2008 Posts: 5

Looks like the problem is with the new 2.1 firmware. I downgraded to 1.7 and now I can connect to my corporate VPN. Has anyone else gotten IPSEC VPN to work on the 2.1 firmware?

dgingrich · EVDO Newbie Joined: 19 May 2008 Posts: 4

What is even wierder, is the Cradlepoint works JUST FINE with the Mac OS X Cisco VPN Client. I am using multiple Mac Book Pros, and the cisco VPN for Mac OS X always works. Even multiple MBPs simultaneous to the same destination. But bring the same machine up on Windows XP (bootcamp), it does not work at all. The Cisco VPN client for windows works fine with all of my other wireless access. I am stumped.

Unfortunately, I am running a Verizon USB-727 so I cannot downgrade to earlier firmware.

To be honest, this sounds more like a cisco issue than Cradlepoint.

sbonar · EVDO User Joined: 13 Nov 2007 Posts: 73

Have you tried running without the IPSEC enabled under Advanced->Special Applications? According to the help, it indicates that you should try turning it off if you are having problems.

dgingrich · EVDO Newbie Joined: 19 May 2008 Posts: 4

Advanced Where? THere is nothing like that visible to me

dgingrich · EVDO Newbie Joined: 19 May 2008 Posts: 4

Oh, you meant the interface on the router, sorry.

No that makes no difference. Cisco VPN still works fine on Mac OS X, but not windows. regardless of that option

dgingrich · EVDO Newbie Joined: 19 May 2008 Posts: 4

Figured it out. With a suggestion from CP tech support, I set up a Special Application, trigger/transport UDP 500. Fixed the problem completely. But I still have no idea why that is required for Windows only, and not Mac OS.