LAN to LAN and Remote Access IPsec VPN Troubleshooting Flowchart - Cisco Systems Page 1 of 5

Products & Services

LAN to LAN and Remote Access IPsec VPN Troubleshooting

Flowchart
Document ID: 100702

Contents
Introduction
Prerequisites
Requirements
Components Used
Conventions
VPN Troubleshooting
L2L VPN Flowchart
Remote Access VPN Flowchart
Cisco Support Community - Featured
Conversations
Related Information

Introduction

This document provides troubleshooting information for common problems with LAN to
LAN (L2L) and Remote access VPN.

For information about L2L VPN troubleshooting, see L2L VPN Flowchart in the VPN
Troubleshooting section of this document.

For information about Remote Access VPN troubleshooting, see Remote Access VPN
Flowchart in the VPN Troubleshooting section of this document.

If you need configuration example documents for the Site to Site VPN and Remote
access VPN, refer to the Remote Access VPN, Site to Site VPN (L2L) with PIX, Site to
Site VPN (L2L) with IOS, and Site to Site VPN (L2L) with VPN3000 sections of
Configuration Examples and TechNotes

Note: Even though the configuration examples in this document are for use on routers
and security appliances, nearly all of these concepts are also applicable to the the VPN
3000 concentrator.

Warning: Many of the solutions presented in this document can lead to a

temporary loss of all IPSec VPN connectivity on a device. Cisco recommends that these
solutions be implemented with caution and in accordance with your change control
policy.

If you have the output of a show run isakmp, show run ipsec, show run tunnel-
group, or show run crypto map command from your Cisco device, you can use Output
Interpreter to display potential issues and fixes. You must be a registered customer, be
logged in, and have JavaScript enabled in order to use the Output Intrepreter.

Prerequisites

Requirements

Cisco recommends that you have knowledge of IPsec VPN configurations on these
Cisco devices:

Cisco PIX 500 Series Security Appliance

http://kbase/paws/servlet/ViewFile/100702/lan2lan_flowchart.xml?convertPaths=1 11/15/2010
LAN to LAN and Remote Access IPsec VPN Troubleshooting Flowchart - Cisco Systems Page 2 of 5

Cisco ASA 5500 Series Security Appliance

Cisco IOS® Routers

Cisco VPN 3000 Series Concentrators (Optional)

Components Used

The information in this document is based on these software and hardware versions:

Cisco ASA 5500 Series Security Appliance

Cisco PIX 500 Series Security Appliance

Cisco IOS

The information in this document was created from the devices in a specific lab
environment. All of the devices used in this document started with a cleared (default)
configuration. If your network is live, make sure that you understand the potential impact
of any command.

Conventions

Refer to Cisco Technical Tips Conventions for more information on document

conventions.

VPN Troubleshooting

L2L VPN Flowchart

Click the red text in order to display troubleshooting information about a specific topic.

http://kbase/paws/servlet/ViewFile/100702/lan2lan_flowchart.xml?convertPaths=1 11/15/2010
LAN to LAN and Remote Access IPsec VPN Troubleshooting Flowchart - Cisco Systems Page 3 of 5

Remote Access VPN Flowchart

Click the red text in order to display troubleshooting information about a specific topic.

http://kbase/paws/servlet/ViewFile/100702/lan2lan_flowchart.xml?convertPaths=1 11/15/2010
LAN to LAN and Remote Access IPsec VPN Troubleshooting Flowchart - Cisco Systems Page 4 of 5

Cisco Support Community - Featured Conversations

Cisco Support Community is a forum for you to ask and answer questions, share
suggestions, and collaborate with your peers. Below are just some of the most recent
and relevant conversations happening right now.

http://kbase/paws/servlet/ViewFile/100702/lan2lan_flowchart.xml?convertPaths=1 11/15/2010
LAN to LAN and Remote Access IPsec VPN Troubleshooting Flowchart - Cisco Systems Page 5 of 5

Want to see more? Join us by clicking here

VPN connection without REMOTE LAN... msd_at_dolvin.com 12 Replies 3 weeks, 20 hours

ago

Termination of Remote Access IPSec VPN... roman.zhelonkin 0 Replies 10 months, 3 weeks

ago

Configure routing between LAN to LAN parmar.pankaj 3 Replies 3 months, 6 days ago

VPN Connects but no remote LAN access joanabotto 10 Replies 2 weeks, 3 days ago

troubleshooting IPSEC VPN LAN-toLAN santontand 1 Reply 3 years, 5 months ago

Remote access VPN with pppoe NadastraIThelpdesk 1 Reply 8 months, 1 week ago

Remote Access VPN through LAN-LAN scatalina 2 Replies 4 years, 1 week ago

Vpn lan-to-lan and remote-access costin.vilcu 2 Replies 3 years, 9 months ago

Separate 1 LAN into 2 LAN MAGMAJAZZ 3 Replies 5 months, 2 weeks ago

IPSec LAN-to-LAN (VPN3005 to IOS)... ovieira 2 Replies 5 years, 3 weeks ago

Start A New Discussion Subscribe

Related Information

Cisco VPN 3000 Series Concentrators

Cisco VPN 3002 Hardware Clients

IPSec Negotiation/IKE Protocols

Technical Support & Documentation - Cisco Systems

Updated: Feb 19, 2008 Document ID: 100702

Contacts | Feedback | Help | Site Map

© 1992-2010 Cisco Systems, Inc. All rights reserved. Terms & Conditions | Privacy Statement | Cookie Policy | Trademarks of Cisco Systems,
Inc.

http://kbase/paws/servlet/ViewFile/100702/lan2lan_flowchart.xml?convertPaths=1 11/15/2010