![]() The decapsulated inner packet doesn't match the negotiated policy in the SA. When I suggested a change to their proposal, they said no, so any changes are pretty much going to have to be on my side.ĪSA5508X-FW1(config)# show crypto isakmp sa They're also not open to the idea of changing many of their settings (hence the use of DES and DH-1 and 2) and looks like everything is IKEv1. They're using what appears to be a pretty old Juniper firewall. The other site is in Japan, so I can't physically go there. ![]() ![]() No other inside networks have been added to the VPN connection and both sides match on everything you see above.Ĭrypto map outside_map 1 match address outside_cryptomapĬrypto map outside_map 1 set peer Ĭrypto map outside_map 1 set ikev1 transform-set ESP-DES-SHA ESP-AES-128-SHA Proposal is confirmed to match as ESP-DES-SHA with DH-Group 1 & pre-shared key and ESP-AES128-SHA with DH-Group 2 & pre-shared key. I have been trying and trying to get this stupid Site to Site VPN connection up and running.Ĭonfirmed that both sides have the Outside/Inside interface matching and correctly configured. Project People is acting as an Employment Business in relation to this vacancy.This is driving me insane.
0 Comments
Leave a Reply. |