Easy VPN on the Cisco ASA 5500
Tuesday, July 17th, 2007Sometimes when you restart your ASA 5500, the Easy VPN configuration presents a problem. Even if you save the running configuration to the startup configuration. This is a known issue and there is a fix, but if you just want to Make it Work for now:
- In the web interface, click “Configure,” then “VPN,” then “Easy VPN Remote.”
- If the VPN light isn’t on, it’s not enabled. Check the box to enable it and hit “Apply.”
- You will probably get a dialog telling you about conflicting configuration. Leave it open.
- Open a command prompt and telnet to your ASA 5500. Use the same password as you do to login via the web interface.
- Type
enableand hit return. Use the same password. - Type
configure terminaland hit return. - Type
show running-configand hit return. - Find the lines in your running configuration that are very similar to the ones in the ASDM dialog box.
- For each of those lines in your running configuration, type
no ...where … is the line of your running configuration. There might be more lines in your running config than your dialog box. - Type “write memory” and hit return. Wait for it to finish.
- Go back to the ASDM applet, close the dialog, check “Enable” and hit “Apply” again.
It should work now.