topic Re: ISAKMP tunnel debug error message on PIX in Network Security

ISAKMP tunnel debug error message on PIX

Kevin Melton — Fri, 21 Feb 2020 09:21:11 GMT

I have configured a Linksys VPN router and a PIX as a site to site.

When I run the debug cry commands on the PIX, I am always receiving the following message:

"ISAKMP (0): retransmitting Config Mode Request..."

I have searched the Cisco site and the Web and cannot find anything definitive as to what is causing my error.

When I perform a "sh isa sa" on the PIX, I get the following:

state = OAK_CONF_ADDR, but I cannot reference that either.

What are these debug outputs telling me?

Thx

Re: ISAKMP tunnel debug error message on PIX

m.sir — Tue, 19 Dec 2006 13:04:17 GMT

when configuring IPSec with non-Cisco devices, always turn off xauth (add command no-xauth)

change command specifying isakmp key

isakmp key your_key address your_address no-xauth

Hope that helps rateif it does

Re: ISAKMP tunnel debug error message on PIX

Kevin Melton — Tue, 19 Dec 2006 16:00:35 GMT

Yes. I ended up digging up an old config and saw two statements: no-xauth and no-config-mode. Once I put both of those on the statement ( as your example illustrates) I was able to connect the sites together.

Thanks for your help.