Hello Gordon,
On Fri, 06.10.2006 at 23:50:56 +0100, Gordon Ross <[EMAIL PROTECTED]> wrote:
> I'm trying to setup an IPSEC connection between OpenBSD3.9 & Cisco IOS
> 12.3 using pre-shared keys authentication the "old fashioned way". (One
> step at a time)
> However, I can't get the tunnel to come
For one thing, I doubt your lifetimes match. Add
lifetime 3600
into crypto isakmp and
set security-association lifetime seconds 1200
into crypto map, adjusting figures appropriately and/or change the
isakmpd.conf General section:
Default-phase-1-lifetime= 3
Your security associations in the ike proposals are not the same. Double
check what is being proposed on both sides.
Gordon Ross wrote:
I'm trying to setup an IPSEC connection between OpenBSD3.9 & Cisco IOS
12.3 using pre-shared keys authentication the "old fashioned way". (One
step at a time)
I'm trying to setup an IPSEC connection between OpenBSD3.9 & Cisco IOS
12.3 using pre-shared keys authentication the "old fashioned way". (One
step at a time)
However, I can't get the tunnel to come up.
Looking at the output from isakmpd -DA=90 (Full text below) I *suspect*
the culprit is about h
4 matches
Mail list logo
