Does ASA Support Android Hybird RSA Authentication ?

carol1979 · ‎04-19-2013

Dear all

I should be such as to set the ASA firewall, let him support Android VPN Hybrid mode under my settings

tunnel-group IPsec_Hybird_Tunnel general-attributes

default-group-policy Android_Hybird

authorization-required

tunnel-group Android_Hybird_Tunnel ipsec-attributes

ikev1 pre-shared-key **********

chain

ikev1 trust-point CA

ikev1 user-authentication hybrid

tunnel-group Android_Hybird_Tunnel ppp-attributes

authentication ms-chap-v2

-------------------------------------------------------------------------------------

crypto ikev1 policy 10

authentication rsa-sig

encryption aes-256

hash sha

group 2

lifetime 86400

--------------------------------------------------------------------------------------

when i debug find this message

%ASA-7-713906: IP = 1.1.1.1, All SA proposals found unacceptable

willmac29 · ‎07-25-2013

I've managed to configure IPSEC hybrid(Mutual group Authentication) with the Cisco VPN client, which uses a pre-shared key and CA certificate as well as Xauth. When using "IPSec Hyrbid RSA" on an an Android device, my attempts to configure it on the ASA have failed.

Log message:

3

Jul 25 2013

20:39:54

713048

IP = 192.168.7.76, Error processing payload: Payload ID: 1

willmac29 · ‎07-25-2013

Or does it use either. I deleted the imported CA certificate in my Cisco VPN client and the Mutual group authentication still worked.