Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
You may experience some slow load times, errors, and slight inconsistencies. We ask for your patience as we finalize the launch. Thank you.

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

ISAKMP NEGOTIATION IN IKE PHASE 1

When ISAKMP begins in ike phase 1 to look for an ISAKMP policy that is same on both peers. I have two queries

1. Which peer will send all their policies to match?

2. Which peer will try to find a match?

calling peer,called peer, in both cases

  • AAA Identity and NAC
1 REPLY
Gold

Re: ISAKMP NEGOTIATION IN IKE PHASE 1

I suppose you mean "normal" IPsec VPN (no DMVPN)

Calling peer is offeres policy (from ISAKMP policy configuration) and called peer sends answer (match or not)

M.

257
Views
5
Helpful
1
Replies