06-18-2009 06:20 AM
Hi,
I must configure a 2821 with one dynamic ipsec peer, one static ipsec peer and vpn clients but I guess I am missing something, I wonder if someone can help me.
I have figured how to configure the devices by following some Cisco VPN documentations but I just can't get the static peer to work, it seem to be asking for Xauth and I can't find a way to bypass it. The dynamic peer and VPN Clients are working perfectly.
Router config and isakmp debugs are attached.
Thanks!
Guilherme
06-19-2009 06:37 AM
What about the debugs on the other side? Looks like it could be a pre-shared-key mismatch, because of the way your profiles / keyrings may be set up.
06-19-2009 10:14 AM
06-19-2009 12:21 PM
Problem solved.
Just had to set "isakmp identity address" on the PIX501 and it worked.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: