04-05-2007 03:44 AM - edited 02-21-2020 01:28 AM
I am trying to configure a pix 501 as a vpn client to connect to a VPN3000 concentrator, using a microsoft CA server. I have achieved this without any problems using the vpn3002 hardware client but I can't get the pix to authenticate and get the certificate from the CA. Has anyone encountered and resolved the same problem ? any help is appreciated.
regards
04-11-2007 06:06 AM
check PIX configuration , whether " isakmp identity hostname" command is enabled or not.
Also ensure PIX clock time maching with CA Server time.
04-11-2007 11:19 AM
can you get it to work without using certs? ie w/ a pre shared key? knowing that could help eliminate other possible causes.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: