About Haris Hilmi Abdul Rahim

Haris Hilmi Abdul Rahim · 06-19-2015

Hi all, I have a question regarding how ISAKMP policy is chosen in a router. Router 1 and 3 are connected via IPSec VPN. Below are their ISAKMP policies:R1#sh run | sec policycrypto isakmp policy 10 encr aes 256 authentication pre-share group 2crypto...

Haris Hilmi Abdul Rahim · 11-17-2015

Hi Peter, just out of curiosity, is it possible that I still use physical interface but make it work by disabling PHP? Thanks, Haris

Haris Hilmi Abdul Rahim · 06-23-2015

Hi John, This is new to me. I tested the connection with different lifetimes configured and yes, the lower negotiated lifetime was chosen. Thanks!

Haris Hilmi Abdul Rahim · 06-19-2015

Thanks Vishnu.What I still does not understand is, why when R1 initiates the connection, it chooses Policy 40 with lifetime=1800, instead of going down to Policy 50, where it has default lifetime of 86400. Shouldn't lifetime be matched as well? That'...

Member Since	‎11-21-2012 04:48 PM
Date Last Visited	‎03-02-2021 03:32 AM
Posts	4

User Statistics

User Activity

ISAKMP policy selection process

Hi Peter, just out of

Hi John, This is new to me.

Thanks Vishnu.What I still