pix 501 tunnel to VPN3000

[KeithN123]

I am trying to configure a pix 501 as a vpn client to connect to a VPN3000 concentrator, using a microsoft CA server. I have achieved this without any problems using the vpn3002 hardware client but I can't get the pix to authenticate and get the certificate from the CA. Has anyone encountered and resolved the same problem ? any help is appreciated.

regards

[jbayuka]

check PIX configuration , whether " isakmp identity hostname" command is enabled or not.

Also ensure PIX clock time maching with CA Server time.

[srue]

can you get it to work without using certs? ie w/ a pre shared key? knowing that could help eliminate other possible causes.