Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Dynamic L2L - Static tunnel not working

Hi,

I must configure a 2821 with one dynamic ipsec peer, one static ipsec peer and vpn clients but I guess I am missing something, I wonder if someone can help me.

I have figured how to configure the devices by following some Cisco VPN documentations but I just can't get the static peer to work, it seem to be asking for Xauth and I can't find a way to bypass it. The dynamic peer and VPN Clients are working perfectly.

Router config and isakmp debugs are attached.

Thanks!

Guilherme

3 REPLIES
Cisco Employee

Re: Dynamic L2L - Static tunnel not working

What about the debugs on the other side? Looks like it could be a pre-shared-key mismatch, because of the way your profiles / keyrings may be set up.

New Member

Re: Dynamic L2L - Static tunnel not working

There are the debugs of the other side (PIX 501).

I'm sure that the keys match on both sides.

Any ideas?

New Member

Re: Dynamic L2L - Static tunnel not working

Problem solved.

Just had to set "isakmp identity address" on the PIX501 and it worked.

133
Views
0
Helpful
3
Replies
CreatePlease to create content