IPSEC and CA

From: Stefan Grey (examplebrain@hotmail.com)
Date: Sat Jul 08 2006 - 16:09:52 ART

• Next message: Russell Kelly \(rukelly\): "OSPF Virtual Link Issues ---"
• Previous message: Sami: "Re: OSPF"
• Next in thread: Stefan Grey: "Re: IPSEC and CA"
• Maybe reply: Stefan Grey: "Re: IPSEC and CA"
• Maybe reply: David Mitchell: "RE: IPSEC and CA"
• Maybe reply: Stefan Grey: "RE: IPSEC and CA"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Hello all

I have a CA on PC. The address of the pc is 195.1.134.100. Directly to it is
connected the router. The router can ping the PC. But the attemt to
authenticate and receive the CA from this fails.

R5(config)#ip domain-name cisco.com
R5(config)#crypto generate key rsa
R5(config)#crypto ca trustpoint server
R5(ca-trustpoint)#enrollment url
http://195.1.134.100/certsrv/mscep/mscep.dll
R5(ca-trustpoint)#enrollment mode ra
R5(ca-trustpoint)#crl optional

R5(config)#crypto ca authenticate server % Error in receiving Certificate
Authority certificate: status = FAIL, cert length = 0

Should something be configured on the CA as well to use it??? What can you
say?? Maybe url is wrong. What can be the issue. Maybe CA should be somehow
tuned??

Thanks

Stefan.

• Next message: Russell Kelly \(rukelly\): "OSPF Virtual Link Issues ---"
• Previous message: Sami: "Re: OSPF"
• Next in thread: Stefan Grey: "Re: IPSEC and CA"
• Maybe reply: Stefan Grey: "Re: IPSEC and CA"
• Maybe reply: David Mitchell: "RE: IPSEC and CA"
• Maybe reply: Stefan Grey: "RE: IPSEC and CA"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Tue Aug 01 2006 - 07:13:47 ART