08-31-2005 11:15 AM - edited 02-21-2020 01:56 PM
I am trying to establish a session between a cisco vpn client ver 4.0.5 and a cisco route 1841 w/ 12.4(1a)
I get Phase1 "atts are not acceptable "no matter what I try. Any ideea ? here is the config:
crypto isakmp policy 2
encr 3des
authentication pre-share
group 2
!
crypto isakmp client configuration group vpngroup
key xxxx
dns 192.168.130.7
wins 192.168.130.7
domain emphatec.com
pool ippool
pfs
!
!
crypto ipsec transform-set secure esp-3des esp-sha-hmac
!
crypto dynamic-map dynmap 10
set transform-set secure
set pfs group2
!
!
crypto map clientmap client authentication list userauthen
crypto map clientmap client configuration address respond
crypto map clientmap 10 ipsec-isakmp dynamic dynmap
!
Thank you
08-31-2005 10:29 PM
Hi,
Have you added the isakmp authorization command?
crypto map clientmap isakmp authorization list ---
And try removing the pfs commands too...
HTH
Regards,
Shijo George.
09-01-2005 07:51 PM
do you have commands like these:
aaa authentication login xxx local
aaa authorization network xxx local
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: