topic ASA_SSL PHONE in Network Security https://community.cisco.com/t5/network-security/asa-ssl-phone/m-p/1858775#M460192 <P>Hi</P><P></P><P>I have the attached configuration, built form all the exmaples I have found.</P><P></P><P>If I Anyconnect it all works and I can access the network.</P><P></P><P>However when I load the Cert to the Phone, I am constatntly getting VPN Auth failed.</P><P></P><P>Is there something I have missed, also every time you change CUCM does the Cert get reload to the Phone ?</P><P></P><P>Isn't this meant to be easy !!</P><P></P><P>Thanks</P> Tue, 26 Mar 2019 00:48:02 GMT Ian Beck 2019-03-26T00:48:02Z ASA_SSL PHONE https://community.cisco.com/t5/network-security/asa-ssl-phone/m-p/1858775#M460192 <P>Hi</P><P></P><P>I have the attached configuration, built form all the exmaples I have found.</P><P></P><P>If I Anyconnect it all works and I can access the network.</P><P></P><P>However when I load the Cert to the Phone, I am constatntly getting VPN Auth failed.</P><P></P><P>Is there something I have missed, also every time you change CUCM does the Cert get reload to the Phone ?</P><P></P><P>Isn't this meant to be easy !!</P><P></P><P>Thanks</P> Tue, 26 Mar 2019 00:48:02 GMT https://community.cisco.com/t5/network-security/asa-ssl-phone/m-p/1858775#M460192 Ian Beck 2019-03-26T00:48:02Z ASA_SSL PHONE https://community.cisco.com/t5/network-security/asa-ssl-phone/m-p/1858776#M460196 <HTML><HEAD></HEAD><BODY><P>All fixed</P></BODY></HTML> Sat, 04 Feb 2012 19:37:18 GMT https://community.cisco.com/t5/network-security/asa-ssl-phone/m-p/1858776#M460196 Ian Beck 2012-02-04T19:37:18Z ASA_SSL PHONE https://community.cisco.com/t5/network-security/asa-ssl-phone/m-p/1858777#M460198 <HTML><HEAD></HEAD><BODY><P>All fixed</P></BODY></HTML> Sat, 04 Feb 2012 19:37:45 GMT https://community.cisco.com/t5/network-security/asa-ssl-phone/m-p/1858777#M460198 Ian Beck 2012-02-04T19:37:45Z ASA_SSL PHONE https://community.cisco.com/t5/network-security/asa-ssl-phone/m-p/1858778#M460203 <HTML><HEAD></HEAD><BODY><P>Thanks Ian, </P><P></P><P>Would you please share with the community your solution. </P><P></P><P>Mike </P></BODY></HTML> Mon, 06 Feb 2012 16:37:12 GMT https://community.cisco.com/t5/network-security/asa-ssl-phone/m-p/1858778#M460203 Maykol Rojas 2012-02-06T16:37:12Z ASA_SSL PHONE https://community.cisco.com/t5/network-security/asa-ssl-phone/m-p/1858779#M460206 <HTML><HEAD></HEAD><BODY><P>Sure, this appeared to be a cache issue, that is the ASA had cached the old Cert.</P><P></P><P>A reboot of the ASA cleared the issue.</P><P></P><P>Do you know of a command that does this without the reboot ?</P><P></P><P>I then hit the phone sending its own Cert and had to enable a Crypt Map to allow a generic look up on the Cert info.</P><P></P><P>And I am working.</P><P></P><P>Although the Corp Directory does not work !!</P></BODY></HTML> Mon, 06 Feb 2012 19:38:56 GMT https://community.cisco.com/t5/network-security/asa-ssl-phone/m-p/1858779#M460206 Ian Beck 2012-02-06T19:38:56Z