About aaronr

aaronr · 08-12-2006

Hi all,I am/will be beginning a deployment of dot1x to our campus. We will be authenticating to a Windows 2003 IAS Domain Controller, but I have a few questions before we begin:1) I have found no documentation as to the setup of switchports in rega...

Re: DMVPN + isakmp profile + CA · 04-20-2007

Looks like your routers are unable to find a matching ISAKMP profile to match the peers to. You might try creating a certificate map that references the OU of the cert to tell the router which IKE profile to use. You can do so using either of two m...

aaronr · 04-16-2007

My best guess...The initiator sends its cert (signed by CA_group_doe)Apr 11 07:25:17.799: ISAKMP:(0:5:HW:2):Send initial contact Apr 11 07:25:17.803: ISAKMP:(0:5:HW:2):SA is doing RSA signature authentication using id type ID_FQDN Apr 11 07:25:17.8...

aaronr · 06-22-2006

Did you setup a challenge password when configuring SCEP on your CA? If you did, browse to the CA SCEP web address via HTTP, authenticate yourself, then use the temporary key it provides as the revocation key that the PIX will ask for when enrolling...

Member Since	‎06-22-2006 08:00 AM
Date Last Visited	‎08-18-2017 03:53 AM
Posts	5
Total Helpful Votes Received	4

User Statistics

User Activity

802.1x help

Re: DMVPN + isakmp profile + CA

Re: pre-share vs rsa-sig

Re: Problems configuring CA in PIX 7.1(1)