Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

site to site ipsec vpn with noncisco routers

hello,

i am trying to connect cisco 2911 router with noncisco routers (HP, TPlink) using site-to-site ipsec vpn  with crypto-maps.

the problem is that vpn traffic shows "#send errors" if command "crypto isakmp identity dn" is used (we are using it for certificate based authentication for cisco vpn clients). when i delete the command, vpn works fine with noncisco devices.

please can you advice if there is any option on cisco ios to solve the problem.

 

thanks

giga

  • VPN
1 ACCEPTED SOLUTION

Accepted Solutions
New Member

okay, try using isakmp

okay,

 

try using isakmp profile, something like below:

 

crypto isakmp profile test
   match identity address 1.1.1.1 255.255.255.255

 

now under crypto map call the isakmp profile as below:

crypto map test 1 ipsec-isakmp test

 

-Altaf

 

4 REPLIES
New Member

Hi,

Hi,

 

Can you try using this command instead of the above:

 

crypto isakmp identity auto
New Member

Hi,thank for

Hi,

thank for reply

unfortunately ios doesn't have AUTO command, it has only ADDRESS, DN and HOSTNAME . 

 

giga

 

New Member

okay, try using isakmp

okay,

 

try using isakmp profile, something like below:

 

crypto isakmp profile test
   match identity address 1.1.1.1 255.255.255.255

 

now under crypto map call the isakmp profile as below:

crypto map test 1 ipsec-isakmp test

 

-Altaf

 

New Member

thanks Altaf, you gave me

thanks Altaf, you gave me right way for problem solution.

this configuration of crypto isakmp profile works fine for me: 

crypto isakmp profile test
 
 keyring test
  self-identity address
  match identity address x.x.x.x 255.255.255.255

 

giga

453
Views
0
Helpful
4
Replies