Hello, I am currently having an issue setting up an IPSec connection between a Catalyst-9300 running IOS XE Version 16 and an ISR Router running IOS XE 16. I am using certificates to attempt to establish a connection, but the certificate maps are not being read properly. The error I am receiving is as follows:
May 1 14:53:27.175: ISAKMP-ERROR: (0):Unable to match the certificate map configured in the profile
Everything looks good in the configurations, including the IP addresses. We are using FQDN, IP address and DN (Country, organizational unit, etc.)
Would anyone have any advice on how to fix this?