Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Silver

Disable IKE Aggressive Mode on VPN 3000 Concentrators

Is it possible to disable IKE Aggressive Mode on Cisco VPN Concentrators (running 4.1.7)? I have checked the SA configuration under Traffic Management, and the 'Negotiation Mode' IKE Parameters is set to 'Main' for the SA (and all SAs), but the debugs suggest Aggressive mode is being used during IKE Phase 1 negotiation. I suspect the VPN Client is requesting Aggressive mode, and the Concentrator is honouring it.

719
Views
0
Helpful
0
Replies
CreatePlease to create content