Table of Contents
Advertisement
Settings on the VPN Concentrator
Table A-1
Problem or Symptom
Connect Now worked.
Settings on the VPN Concentrator
If your VPN 3002 experiences connectivity problems, check the configuration of the VPN Concentrator.
Configure the connection as a Client, not LAN-to-LAN.
Step 1
Assign this VPN 3002 to a group. Configure group and user names and passwords. These must match
Step 2
the group and user names and passwords that you set on the VPN 3002. Refer to Chapter 14, "User
Management," in the VPN 3000 Series Concentrator Reference Volume I.
Step 3
If the VPN 3002 uses PAT mode, enable a method of address assignment for the VPN 3002: DHCP,
address pools, per user, or client specified. Refer to Chapter 6, "Address Management," in the VPN 3000
Series Concentrator Reference Volume I.
VPN 3002 Hardware Client Reference
A-4
Analyzing System Errors (continued)
VPN LED is solid amber (tunnel failed
to establish to central-site VPN
Concentrator).
My PC cannot communicate with the
remote network.
LED(s) for the private interface/switch
port are off.
LED(s) for the private interface/switch
port are on.
Attempting to ping the default
gateway (Administration > Ping)
yields no response.
Appendix A
Possible Solution
1.
Make sure the IPSec parameters are properly
configured. Verify:
–
Public IP Address of the IKE peer (central-site
VPN Concentrator) is correct.
–
Group name and password are correct.
–
User name and password are correct.
2.
Make sure the group and user names and passwords
match those set for the VPN 3002 on the central-site
VPN Concentrator.
After you make any changes, navigate to Monitoring
3.
> System Status and click on Connect Now.
Study the event log files. To capture more events,
4.
and to interpret events, see Chapter 9, "Events," in
the VPN 3002 Hardware Client User Reference.
Verify that the VPN Concentrator to which this VPN
1.
3002 connects is running version 3.0 software.
Navigate to Monitoring > System Status and click
2.
on Connect Now.
Make sure that a LAN cable is properly attached to the
private interface of the VPN 3002 and the PC.
Is this PC configured as a DHCP client? If so, verify
1.
that the DHCP server on the VPN 3002 is enabled.
With any method of address assignment, verify that
2.
the PC has an IP address and subnet mask.
1.
Make sure your PC has an appropriate IP address,
reachable on this network.
Contact your network administrator.
2.
Troubleshooting and System Errors
OL-1893-01
Advertisement
Table of Contents
