I am trying to configure a 3925 router (C3900-SPE100/K9) running 15.4(2)T as a VPN gateway for end users running Cisco AnyConnect 3.1.05160 with FIPS enabled. I am working on this using Suite B compliant algorithms for the authentication and encrypt...
So I got an answer to the problem...somewhat. The problem is a bug in the ISRG2 code and how it handles ECDSA certs. There is a fix coming out and that should resolve this issue.
Marcin, I appreciate you looking over this. I had a feeling I was going to have to open a TAC case but wanted to see if the community had seen this first. Also I did try the IKE-RSA method in the profile and got no joy. Thanks again and when I get ...
Marcin,The AC profiles were already attached. Sorry. I should have been a little more clear about all the attached files. The rsa_sigs.xml_.txt is the profile for when RSA worked. The ecdsa_sigs.txt file is the profile that I am using for ECDSA a...
