Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi all,I am/will be beginning a deployment of dot1x to our campus. We will be authenticating to a Windows 2003 IAS Domain Controller, but I have a few questions before we begin:1) I have found no documentation as to the setup of switchports in rega...
Looks like your routers are unable to find a matching ISAKMP profile to match the peers to. You might try creating a certificate map that references the OU of the cert to tell the router which IKE profile to use. You can do so using either of two m...
My best guess...The initiator sends its cert (signed by CA_group_doe)Apr 11 07:25:17.799: ISAKMP:(0:5:HW:2):Send initial contact Apr 11 07:25:17.803: ISAKMP:(0:5:HW:2):SA is doing RSA signature authentication using id type ID_FQDN Apr 11 07:25:17.8...
Did you setup a challenge password when configuring SCEP on your CA? If you did, browse to the CA SCEP web address via HTTP, authenticate yourself, then use the temporary key it provides as the revocation key that the PIX will ask for when enrolling...
