Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello,Can someone help me to check what kind of filtering can prevent to succesfully complete isakmp process using certificates as it works fine with preshared keys.Both devices are cisco routers and synchronized on UTC and Certificates are OK.The on...
I recently updated about 70 routers from preshared key to certificate authentication. The most part of them works fine but I'm still searching to resolve a problem on 3 of them.When I use preshared key the isakmp and ipsec phases complete successful...
It helped me a lot but did not solved my problem.The problem was solved by upgrading the gatewayrouter firmware (we use NAT-T). The problem is that this gateway is in charge of the provider.Difficult to find someone helpfull like you everywhere. Tha...
The Phase 2 complete succesfully when I use PSK authentication (the second part of resp_debug.txt and ini_debug.txt).On the first part you can see output when I use RSA-SIG authentication, this one does not complete.Responder seems to complete but in...
Hello,I attached some debug output from initiator and responderBoth ios config are attached too.The only change between the outputs with certs and those with psk is the isakmp policy priority on the responder.Thanks in advance for your help
Hello, thanks for your quick response.All devices are correctly synchronized on UTC.I really don't know what can affect the ipsec build when the Phase 1 is finished.
