isakmp identify hostname ??

[skleber]

Hi,

i have a problem to put the line "isakmp identify hostmane" into a pix config. The pix accespt the command, but it isn´t in the config.

6.3.3 with pix 515

crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac

crypto map outside_map 10 ipsec-isakmp

crypto map outside_map 10 match address outside_cryptomap_10

crypto map outside_map 10 set peer x.x.x.x

crypto map outside_map 10 set transform-set ESP-3DES-MD5

crypto map outside_map 10 set security-association lifetime seconds 360 kilobytes 1000000

crypto map outside_map interface outside

isakmp enable outside

isakmp key ******** address x.x.x.x netmask 255.255.255.255

isakmp policy 10 authentication pre-share

isakmp policy 10 encryption 3des

isakmp policy 10 hash md5

isakmp policy 10 group 2

isakmp policy 10 lifetime 10800

[mostiguy]

that is because that is the default for the isakmp identity command. default settings are not shown in the config because the config does not change them

[skleber]

Hi,

ok, that can be true. But the pix try to identify once with the address and once with the hostname.

I hava a FSecure on the other side whitch only identify with the hostname.

Regards, Sebastian