hi Mark,

i've turned off failover box still getting the error. pls find attached file of show version and show run.

regs,

Adil,

from your "sh ver" I see

VPN-3DES-AES : Disabled

I would strongly suspect it is Enabled on the other device.

You will need a CCO ID, but you can register for a free upgrade, assuming you are in a country where shuch encryption is legal.

This link might work

https://tools.cisco.com/SWIFT/Licensing/PrivateRegistrationServlet?DemoKeys=Y

If not

www.cisco.com->login

Software Downloads->Cisco Secure Software

PIX Security Appliance Software

*FREE* Reguister for PIX DES or 3DES/AES IPsec software feature keys

You don't have a PAK so "click here for available licenses"

Under Security Products select the licence you want, and then fill in all the paperwork.

You will need to enter the new license and then reboot, which will cause an interupt to service as you have turned off the secondary device. Once the reboot has completed turn the secondary back on and all should be well.

Hi,

you are right, but can you tell me how can i disable 3des encryption on the other device so that i've same settings on both device. i want to do like this becasue my device has 64 mb of ram and 3des requires 128mb ram.

thanks

Never done it, but you should be able to request a DES license for the secondary in the same way.

I don't have a device handy to check, but I am 99% sure that you can have a 3DES license on a 64 MB device, the only requirement for 128 MB is Version 7 software.

*please rate previous posts if they are/were helpfull*