Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi,When trying to setup a ios certificate server for use with VPN authentication in run into some problems.I do have a crypto image but im missing some command options namely:Crypto key export and crypto pki.Is this a problem with the ios and router ...
HiWhen trying to do a cut-n-paste enrollment of a cisco 3725 router with a microsoft windows server 2003 CA i get the following error on the CA.Certificate Services denied request 8675 because The request subject name is invalid or too long. 0x800940...
We currently have a Dual Hub Dual DMVPN setup as described in this document http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml#dualhubdualThe tunnels all come online and allow traffic like ping and telnet. Howe...
Is it possible to use a dual hub DMVPN solution when the 2 hubs are not located in the same subnet ?When we use the configuration examples in this document http://www.cisco.com/en/US/tech/tk583/tk372/technologies_white_paper09186a008018983e.shtml#dua...
We had the same problem.What finally worked for us was applying mss 1375 to all involved interfaces.Havent tried restricting the mss 1375 to less interfaces yet.Anything higher then 1375 and only icmp traffic would flow normally over the tunnel.
We already did that.Before we renewed we got the error that validity of the CA certificate was not long enough to issue a certificate.And now we get the error as stated in the start post.
Thank you.Adding the mss 1375 to all involved interfaces on the spoke solved the problem.We also tried mss 1400 but then the problem is back.So looks like only values below 1400 will work in our situation.
No problem.I attached the config of a hub and a spoke.Most irrelevent information has been removed including the acl as we are certain the acl is not the problem.The servers are located in the same subnet as the internal interfaces of the routers.
ok thank you but your answer is confusing.you say yes its compatible and then you say no they cannot be inserted.we currently have a 7204 with a NPE200 in it and we want to know if we can replace the NPE200 with a NPE225 or NPE300.regards,
