RE: IPSec VPN tunnel beetween Cisco IOS and Nokia CC500

From: Shahid Shafi (sshafi@qualcomm.com)
Date: Mon Feb 10 2003 - 13:48:25 GMT-3

• Next message: Peng Zheng: "Re: What's the difference between "Defining the Allowed VLANs"
• Previous message: Joe Chang: "Re: ATM PVC : Why does this not work in multipoint subintf?"
• Maybe in reply to: Stefano Lassi: "IPSec VPN tunnel beetween Cisco IOS and Nokia CC500"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Check the IKE SA timers on the nokia box as they dont default to 24 hours.
Also Phase 2 SA timers dont match. Check ur policies carefully and it should
work.

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
Stefano Lassi
Sent: Monday, February 10, 2003 8:12 AM
To: ccielab@groupstudy.com
Subject: IPSec VPN tunnel beetween Cisco IOS and Nokia CC500

Hi guys

has anyone successfully configured a IPSec tunnel beetwenn a Cisco IOS
router and a Nokia CC500 box (actually AlchemyOS)?

We found only configuration example connecting CC500 vs Cisco PIX or
Checkpoint, not vs Cisco IOS.

We tested normal and reasonable configurations on both ends, but Phase 1
(ISAKMP) does not want start ...

%CRYPTO-6-IKMP_MODE_FAILURE: Processing of Quick mode failed with peer at
XXXXXXX
%CRYPTO-6-IKMP_MODE_FAILURE: Processing of Informational mode failed with
peer at XXXX

Thank you very much

Stefano Lassi
CCNP/CCDP
Genova - ITALY
.
.

• Next message: Peng Zheng: "Re: What's the difference between "Defining the Allowed VLANs"
• Previous message: Joe Chang: "Re: ATM PVC : Why does this not work in multipoint subintf?"
• Maybe in reply to: Stefano Lassi: "IPSec VPN tunnel beetween Cisco IOS and Nokia CC500"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Sat Mar 01 2003 - 11:06:17 GMT-3