Issue with isakmp session

[Alfredo Bosca Bataller]

I have configured IPSec on basic lab but don't can pinging from source loopback0

R1#ping 50.50.50.50 source 60.60.60.60

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 50.50.50.50, timeout is 2 seconds:

Packet sent with a source address of 60.60.60.60

.....

Success rate is 0 percent (0/5)

I have to add the next command also:

crypto map MAPACIFRADO local-address Loopback0

Attach the whole configuration.

I think that how don't can to send traffic between loopbacks R1-R2 the isakmp session don't work.

R1#show crypto isakmp sa

dst             src             state          conn-id slot status

http://networkingcontrol.wordpress.com/
#CCNP CSCO11962956       

[Poonam Garg]

Hello Alfredo,

Since you are using default isakmp policy for phase 1 negotiation, it uses rsa-signature for authentication of peers. You have to get digital certificate from a CA server on both the routers to authenticate each other identity also before certifiacte request synchronise time on both the routers with NTP server.