Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
hi--If i'm using a mix of cat 2970/2950/2924 switches on a flat network with just the default vlan, are there any specific STP config issues i should be aware of?I'm seeing odd network behaviour on the older 2924xl switches when connected to the "mai...
Hi--trying to get a pix and 2621 ( IOS 12.3(12) ) connected via site-site vpn.here are some of the debug messages:Mar 26 22:14:55.871: ISAKMP (0:38): Old State = IKE_I_MM1 New State = IKE_DEST_SAMar 26 22:14:55.955: IPSEC(sa_request): , (key eng. m...
yes, turns out IOS defaults to DES and Group1, so if you dont specify (all) the following in your policy, the policies will not match. Worked perfect after adding group2. We were so close!!!! Wish that was documented somewhere...... encr 3des hash...
Does the ISAKMP policy # have to match on both the router and the PIX?In other words, if the router had ISAKMP policy 11, there should be an ISAKMP policy 11 on the PIX as well?thx
hi-- no luck, same results. debug below. I added the group 2 under the crypto isakmp policy11 on the reouter to match the pix policy. (identity) local= x.x.x.x, remote= x.x.x.x, local_proxy= 10.0.0.0/255.255.255.0/0/0 (type=4), remote_pro...
