ā12-06-2009 01:11 AM
I configured easy VPN on my ASA, but, when i type the following command, it gives me this error as shown:
SA-Gate(config)# crypto ipsec transform-set myset esp-3des esp-md5-hmac
The 3DES/AES algorithms require a VPN-3DES-AES activation key.
ASA-Gate(config)# crypto dynamic-map dmap 100 set transform-set myset
ERROR: transform set with tag "myset" does not exist.
So, this issue concerning Licensed features on ASA and if so, what is all required to complete the easy VPN configuration.
N.B.: sh version of ASA is attached.
Solved! Go to Solution.
ā12-06-2009 06:02 AM
EBIC-2007 wrote:
Dear all,
I configured easy VPN on my ASA, but, when i type the following command, it gives me this error as shown:
SA-Gate(config)# crypto ipsec transform-set myset esp-3des esp-md5-hmac
The 3DES/AES algorithms require a VPN-3DES-AES activation key.
ASA-Gate(config)# crypto dynamic-map dmap 100 set transform-set myset
ERROR: transform set with tag "myset" does not exist.So, this issue concerning Licensed features on ASA and if so, what is all required to complete the easy VPN configuration.
N.B.: sh version of ASA is attached.
Your license is only for DES and not 3DES. You can get a free license upgrade to 3DES from Cisco. See this doc for details -http://www.cisco.com/en/US/docs/security/asa/asa80/getting_started/asa5505/quick/guide/DES-lic.html
Jon
ā12-06-2009 06:02 AM
EBIC-2007 wrote:
Dear all,
I configured easy VPN on my ASA, but, when i type the following command, it gives me this error as shown:
SA-Gate(config)# crypto ipsec transform-set myset esp-3des esp-md5-hmac
The 3DES/AES algorithms require a VPN-3DES-AES activation key.
ASA-Gate(config)# crypto dynamic-map dmap 100 set transform-set myset
ERROR: transform set with tag "myset" does not exist.So, this issue concerning Licensed features on ASA and if so, what is all required to complete the easy VPN configuration.
N.B.: sh version of ASA is attached.
Your license is only for DES and not 3DES. You can get a free license upgrade to 3DES from Cisco. See this doc for details -http://www.cisco.com/en/US/docs/security/asa/asa80/getting_started/asa5505/quick/guide/DES-lic.html
Jon
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide