cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
352
Views
0
Helpful
1
Replies

Encryption 3DES and DES

jeff.teoch
Level 1
Level 1

Hi,

Recently i was configured my C7206 (IOS 12.4.10a) to remote router C2801 (IOS 12.4.9.T1) with ipsec configured via leased line. All the application are working fine if i configured the encryption using DES. However, when i configured the encrytion using 3DES, all the application still work fine except one of the printing job using DLink print server across this ipsec. Configuration as follows:

!

!

crypto isakmp policy 30

encryption 3des

hash md5

authentication pre-share

group 2

crypto isakmp key xxxxx address 192.100.1.2

!

!

crypto ipsec transform-set Tunnel-Transform-IPSec ah-sha-hmac esp-aes 256 esp-sha-hmac

mode transport

!

crypto map IPSEC-R1-R2 101 ipsec-isakmp

set peer 192.100.1.2

set transform-set Tunnel-Transform-IPSec

match address 101

!

!

interface Serial0/1

ip address 192.100.1.1

mtu 1600

bandwidth 1984

encapsulation ppp

crypto map IPSEC-R1-R2

crypto ipsec df-bit clear

!

!

Any one can help?

Regards,

Jeff.

1 Reply 1

pkapoor
Level 3
Level 3

In global configuration mode, enter the following command and see if it works.

"crypto ipsec df-bit clear"

Then test with 3DES.