cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
265
Views
0
Helpful
1
Replies

IPSec with multiple identifiers

ShadyDuckling
Level 1
Level 1

Hello, I am currently having an issue setting up an IPSec connection between a Catalyst-9300 running IOS XE Version 16 and an ISR Router running IOS XE 16. I am using certificates to attempt to establish a connection, but the certificate maps are not being read properly. The error I am receiving is as follows:

 

May 1 14:53:27.175: ISAKMP-ERROR: (0):Unable to match the certificate map configured in the profile

 

Everything looks good in the configurations, including the IP addresses. We are using FQDN, IP address and DN (Country, organizational unit, etc.) 

 

Would anyone have any advice on how to fix this?

1 Reply 1

Francesco Molino
VIP Alumni
VIP Alumni

Hi

 

Can you share your config please and a copy of your certificate (or screenshot)

 


Thanks
Francesco
PS: Please don't forget to rate and select as validated answer if this answered your question
Review Cisco Networking for a $25 gift card