About sdoremus33

sdoremus33 · 05-11-2012

One thing I found was under policy map policy-map multi-match VLAN10 class VS-ETmail loadbalance vip inservice loadbalance policy PM-Mail loadbalance vip icmp-reply nat dynamic 1 vlan 10Also do you have multiple service-policies in your ...

sdoremus33 · 11-04-2009

One thing to understand about Tran sport mode vs Tunnel mode (ipsec) is thst Transport is used between acyual source and destination of the ip protocol Tunnel mode actually not only authenticates but also encrypts at the higher layers of the pckt Pi...

sdoremus33 · 11-04-2009

One last ides for troubleshooting as I mentioned earlier you can try to add the dynaimc crypto map to the outside interface

sdoremus33 · 11-04-2009

Another troubleshooting ides is to turn off Nat-T no crypto isakmp nat-traversalSee what happens question do both devices support NAT-T, and keeaplives

sdoremus33 · 11-04-2009

I hope some of these issues help you out as I am running into a very similiaer situation .I notice in looking at the logfs perhaps bypassing ACL NAT could point us in right direction.Take care*Oct 30 20:17:05.639: CryptoEngine0: validate proposal req...

Member Since	‎03-23-2005 11:51 PM
Date Last Visited	‎08-18-2017 03:55 AM
Posts	279
Total Helpful Votes Received	54

User Statistics

User Activity

Cisco ACE 4710 + Round Robin Predictor

Re: IPSEC transport mode and GET VPN

Re: DMVPN ISAKMP phase 2 SA policy not acceptable!

Re: DMVPN ISAKMP phase 2 SA policy not acceptable!

Re: DMVPN ISAKMP phase 2 SA policy not acceptable!