I am working on an EEM applet on IOS is 15.2(1)T to reload a router when a VPN tunnel is down for 10 minutes, but I need it to cancel the reload when the VPN tunnel is back up. What I would like to do is to create one applet that does the following:e...
I recommend that you configure NTP on the CA router. Whenever you use digifital certificates you need to make sure that your devices all agree on a common time, and NTP is the easiest way to do that. It would also help if you posted the current...
I haven't looked at your configuration, but accroding to your description it sounds like you haven't approved the pending certificate requests on your CA router. Here are the commands that you need:To view pending requests: crypto pki server "CA ro...
Sorry, but I don't work on security full-time so I am not 100% sure if it is mandatory to copy the certificate from router to router. The example that I posted was just a proof of concept. Regarding IKEv2; I am not sure if 3800 series routers support...
Carlos; you can use a router as a CA server, I hve a practice lab that I made that has something similar to what you are looking for. Instead of a site-to-site VPN my lab uses a GRE-over-IPSec tunnel. Here is the network diagram and configs:1. First ...
Here is a working config between a router and an ASA that is very similar from what you posted; I'm only including the relevant configs to avoid confusion. I hope it helps.Router configuration:hostname RTR1!crypto ikev2 proposal AES256-192-128-PROPOS...
