Archive for July, 2007

Easy VPN on the Cisco ASA 5500

Tuesday, July 17th, 2007

Sometimes when you restart your ASA 5500, the Easy VPN configuration presents a problem. Even if you save the running configuration to the startup configuration. This is a known issue and there is a fix, but if you just want to Make it Work for now:

  • In the web interface, click “Configure,” then “VPN,” then “Easy VPN Remote.”
  • If the VPN light isn’t on, it’s not enabled. Check the box to enable it and hit “Apply.”
  • You will probably get a dialog telling you about conflicting configuration. Leave it open.
  • Open a command prompt and telnet to your ASA 5500. Use the same password as you do to login via the web interface.
  • Type enable and hit return. Use the same password.
  • Type configure terminal and hit return.
  • Type show running-config and hit return.
  • Find the lines in your running configuration that are very similar to the ones in the ASDM dialog box.
  • For each of those lines in your running configuration, type no ... where … is the line of your running configuration. There might be more lines in your running config than your dialog box.
  • Type “write memory” and hit return. Wait for it to finish.
  • Go back to the ASDM applet, close the dialog, check “Enable” and hit “Apply” again.

It should work now.