×
INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!
  • Students Click Here

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Students Click Here

Jobs

96xx VPN with ASA 5506

96xx VPN with ASA 5506

96xx VPN with ASA 5506

(OP)
Anyone have this setup working? Ive gotten the phones to work with other older ASA devices but having problems with this 5506. If so can you share your settings for the ASA.

Problem Im getting is Aborting Connection: IKEv1 RA client which did not request an assigned IP is attempting to establish a phase 2 SA

Its aborting the connection because the phone isnt requesting an address which the 96xx phones do.

RE: 96xx VPN with ASA 5506

We have several 5506 units that make the VPN Connection to the Corp Office and then just have the 5610 Phone (We do not have any 96xx) at the remote office connect though the 5506's VPN Connection. So the Phone itself is not doing the VPN. The ASA 5506 is connecting to a ASA5525 at the head end.

Here is the Config we have in the 5506 to setup the 5610

CODE -->

dhcpd dns 192.168.0.1
dhcpd ping_timeout 750
dhcpd auto_config outside
dhcpd option 176 ascii MCIPADD=10.1.0.40,MCPORT=1719,TFTPSRVR=10.1.0.12
dhcpd option 7 ascii 10.1.0.12
!
dhcpd address 192.168.10.50-192.168.0.200 inside
dhcpd enable inside

...

class-map inspection_default
 match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
 parameters
  message-length maximum client auto
  message-length maximum 512
policy-map global_policy
 class inspection_default
  inspect ftp 
  inspect http 
  inspect ils 
  inspect rsh 
  inspect rtsp 
  inspect skinny  
  inspect sunrpc 
  inspect tftp 
  inspect xdmcp 
  inspect netbios 
  inspect dns preset_dns_map 
! 

We also had to change the DSCP settings on the IPO. Our ISP was filtering Packets with DSCP 42 (I think that was the default). We could get the same setup working with another ISP, though had to change it to make it work with All the remote Office ISPs.

This is our settings in System, LAN1, VoIP

Red Flag This Post

Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework.

Red Flag Submitted

Thank you for helping keep Tek-Tips Forums free from inappropriate posts.
The Tek-Tips staff will check this out and take appropriate action.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members!

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close