Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

VPN Incompatibility?

Hi

I'm having an issue whereby I am getting the following error on the console of an 877:

CRYPTO-6-IKMP_MODE_FAILURE

When establishing a lan to lan VPN to a PIX running 6.3(3).

I used to get the same issue on 837's until I downgraded the software to 12.2. The new 877's (I received) have 12.3-8 running. It looks like (after going through the debugs) an incompatibility when the 877 negotiates phase 2 with the PIX. The phase 1 comes up & both the PIX and 877 are in a QM_IDLE state, but no traffic will pass. I've put the 877 config (with changes to the ethernet port only) on an 837 running 12.2 and everything works (i.e. phase 2 completes and traffic can pass between both sides of the connection).

Unfortuantely I don't have an older version of code for the 877 so am a bit stuck, esp since I need to install the 877 on Monday. Any help or suggestions welcome.

1 REPLY
Silver

Re: VPN Incompatibility?

Would it be possible to post the config of either sides with public IP masked.

Regards

98
Views
0
Helpful
1
Replies
CreatePlease to create content