it wont let me enter hash sha under crypto isakmp policy 10. Why is that?

Hi,

Probably your IOS image doesn't have this feature.

Try using "hash md5" and if it works, configure netscreen the same way.

Cheers:

Istvan

Hi,

SHA is the default hashing algorithm for ISAKMP policy and that is why you are probably not seeing it in the running configuration.

For example, I have SHA Configured under ISAKMP Policy 10 on my router but it does not show in the running configuration.

crypto isakmp policy 10

encr 3des

authentication pre-share

group 2

But, if I run the command "Show crypto ISAKMP Policy", I can see it in there.

R16-2821c#sh crypto isakmp policy

Global IKE policy

Protection suite of priority 10

encryption algorithm: Three key triple DES

hash algorithm: Secure Hash Standard

authentication method: Pre-Shared Key

Diffie-Hellman group: #2 (1024 bit)

lifetime: 86400 seconds, no volume limit

Protection suite of priority 20

Regards,

Arul

** Please rate all helpful posts **