IPSEC VPN: Cisco 3825 to Netopia 4000-series router...

[abatson]

I have a requirement to build an IPSEC tunnel between a Cisco router, and a Netopia 4622 router. It negotiates IKE phase-1 just fine, but the Cisco will keep broadcasting phase-2 info until phase-1 expires, and the whole thing starts over again.

I have a doc from Netopia, from year 2000 that says automatic operation of IKE is not supported, and you must pre-specify your encryption and authentication keys for the IPsec tunnel. Has anyone done this recently & can share info? Netopia website has no info on building tunnels to Cisco equipment.

[vkapoor5]

If Netopia supports IPSec standard, then tunnel formation should be possible as long as the required parameters are configured correctly on both the sides. For IKE to succeed, the authentication method, encryption, hash, SA lifetime etc. (called IKE profile ) must match on both sides. If you can see the configs, make sure you have at least one policy that will match. If policies do not match, then IKE will not succeed.