Cisco Systems VPN 3002 manual Settings on the VPN Concentrator, on Connect Now, Connect Now worked

Appendix A Troubleshooting and System Errors

Settings on the VPN Concentrator

Table A-1 Analyzing System Errors (continued)

Problem or Symptom	Possible Solution
VPN LED is solid amber (tunnel failed	1. Make sure the IPSec parameters are properly
to establish to central-site VPN		configured. Verify:
Concentrator).		– Public IP Address of the IKE peer (central-site
		VPN Concentrator) is correct.
		– Group name and password are correct.
		– User name and password are correct.
	2.	Make sure the group and user names and passwords
		match those set for the VPN 3002 on the central-site
		VPN Concentrator.
	3.	After you make any changes, navigate to Monitoring
		> System Status and click on Connect Now.
	4.	Study the event log files. To capture more events,
		and to interpret events, see Chapter 9, “Events,” in
		the VPN 3002 Hardware Client User Reference.
My PC cannot communicate with the	1. Verify that the VPN Concentrator to which this VPN
remote network.		3002 connects is running version 3.0 software.
	2.	Navigate to Monitoring > System Status and click
		on Connect Now.
Connect Now worked.
LED(s) for the private interface/switch	Make sure that a LAN cable is properly attached to the
port are off.	private interface of the VPN 3002 and the PC.
LED(s) for the private interface/switch	1. Is this PC configured as a DHCP client? If so, verify
port are on.		that the DHCP server on the VPN 3002 is enabled.
	2.	With any method of address assignment, verify that
		the PC has an IP address and subnet mask.
Attempting to ping the default	1.	Make sure your PC has an appropriate IP address,
gateway (Administration > Ping)		reachable on this network.
yields no response.	2.	Contact your network administrator.

Settings on the VPN Concentrator

If your VPN 3002 experiences connectivity problems, check the configuration of the VPN Concentrator.

	Step 1	Configure the connection as a Client, not LAN-to-LAN.
	Step 2	Assign this VPN 3002 to a group. Configure group and user names and passwords. These must match
		the group and user names and passwords that you set on the VPN 3002. Refer to Chapter 14, “User
		Management,” in the VPN 3000 Series Concentrator Reference Volume I.
	Step 3	If the VPN 3002 uses PAT mode, enable a method of address assignment for the VPN 3002: DHCP,
		address pools, per user, or client specified. Refer to Chapter 6, “Address Management,” in the VPN 3000
		Series Concentrator Reference Volume I.
	VPN 3002 Hardware Client Reference
A-4		OL-1893-01