Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

IPSEC between Netscreen SSG-140 and Cisco 3640 Router

The symptoms are that the NS will try to build the IKE session and time out. Even with the Cisco debugging enabled I get no IKE nor IPSEC SA trying to build on the 3640. What am I doing wrong or what can I try?

Enclosed is the configuration and a brief description of my environment.

172.30.0.0/16 -> 172.30.20.254 | Netscreen SSG-140 | 192.168.1.254 -> private net -> 192.168.3.5 | 3640 | 172.20.0.220 -> 172.20.0.0/16

The configurations are enclosed

1 REPLY
New Member

Re: IPSEC between Netscreen SSG-140 and Cisco 3640 Router

Hi

I think you need to apply the crypto map to the interface FastEthernet0/0.

crypto map nsmap

Please rate if this helps.

Regards MJ

532
Views
0
Helpful
1
Replies
CreatePlease to create content