monitor capture UDPCAP interface <interface vlan1234> both
monitor capture UDPCAP match ipv4 protocol udp any any
monitor capture UDPCAP start

--generate traffic...

R(config)#aaa new-model
R(config)#aaa authentication login ciscocp_vpn_xauth_ml_1 local
R(config)#aaa authorization network ciscocp_vpn_group_ml_1 local

crypto isakmp profile

I've configured a VPN (IPSec) between 2 sites on Cisco 881-K9.

The server "A", which have the address 192.168.0.X must be reachable on port 3389 from public network.

I've

R1(config)#  crypto isakmp policy 1
R1(config-isakmp)# encr 3des
R1(config-isakmp)# hash sha
R1(config-isakmp)#

On Watchguard:

1. Create VPN -> Branch Office Gateway:

Put PSK, Main Mode, Nat traversal, Dead Per Detection
Create Transform

Issue:

%ASA-4-402127: CRYPTO: The ASA is skipping the writing of latest Crypto Archive File as the maximum # of files (2) allowed has been written to <

WPA2(AES-CCMP) on Cisco 877w
- service-module wlan-ap 0 session
- dot11 ssid tks-887
vlan 1 ...

Config

class-map match-any VOICE

  match protocol rtp

  match protocol rtcp

  match protocol sip

policy-map

ERR: Hardware Client connection rejected!   Network Extension Mode is not allowed for this group!
SOL: group-policy cvpn attributes
nem enable

track 11 ip sla 1 reachability
ip sla schedule 2 life forever start-time now

ERR: Connection terminated for peer vpnuser.  Reason: Peer Terminate  Remote Proxy N/A, Local Proxy N/A (save passord)
SOL: add save-password to server

clock timezone Melbour 10
 clock summer-time Sydney date Mar 30 2003 3:00 Oct 26 2003 2:00
 ntp clock-period 17178393
 ntp update-calendar
 ntp server

no ip dhcp use vrf connected
ip dhcp excluded-address 10.10.10.1
ip dhcp excluded-address 192.168.122.1 192.168.122.50
ip dhcp excluded-address 192.168.122.54

!
ip

- service-module wlan-ap 0 session
- dot11 ssid tks-887
vlan 1
authentication open 
authentication key-management wpa
guest-mode
wpa-psk ascii 7