cisco vpn client 412

Hanson1990814

各位大神你好！

下面是路由器上面的配置，在client上面登录出现412的错误，求大神帮助解答。谢谢
aaa new-model
!
!
aaa authentication login default local
aaa authorization network Ex-Client local
aaa authorization network Ex-client-groupname local
aaa accounting network default start-stop group radius
aaa session-id common
ip subnet-zero



username client12#$EX password 7 0617162B5B4D0F400E1C071E090206331F04353370
!
!
!
!
!
crypto isakmp policy 10
encr 3des
hash md5
authentication pre-share
group 2
lifetime 3600
crypto isakmp keepalive 10 3
!
crypto isakmp client configuration group Ex-Client
key ztimeciscovpn
pool ipsecpoolnew

!
!
crypto ipsec transform-set twexRoute2 esp-3des esp-sha-hmac
!
!         
!
!
crypto dynamic-map Exvpn 10
set transform-set twexRoute2
reverse-route
!
!
!
!
crypto map teex local-address Loopback1
crypto map teex isakmp authorization list Ex-Client
crypto map teex client configuration address respond
crypto map teex 10 ipsec-isakmp dynamic exmap

!
!
!
!

!
interface Loopback1
ip address 203.192.151.39 255.255.255.255
no ip redirects
crypto map teex
!




ip local pool ipsecpoolnew 192.168.190.1 192.168.190.50

shangyingjie

你做的是easy vpn ?aaa认证的地方是不是需要定义一个认证的名称，关联路由图的时候你这里只调用的aaa授权的命令，crypt map teex isak authorization list Ex-Client，没有调用aaa认证，你试试添加crypto map teex client authentication list 后面跟的是AAA定义的认证，测试下能否好用

Hanson1990814

shangyingjie 发表于 2015-8-25 16:14
你做的是easy vpn ?aaa认证的地方是不是需要定义一个认证的名称，关联路由图的时候你这里只调用的aaa授权的 ...

谢谢！我已经检查出来哪里的问题了。