CompTIA
Exam Vouchers
Save money on CompTIA exams
| Question of the day
Sign up to receive
interactive practice questions
for MCSE, CompTIA
Cisco and other exams
| TestKing
Get MCSE, MCSD, CCNA, CCNP,A+, N+ and many more | * ExamSheets *
Guide for Success!
Actual Questions & Answers
MCSE, MCSD, A+ ,CCNA, CCNP
Oracle 8i, Oracle 9i Online practice tests
Certification sites Online university Online college Online education Distance learning Software forum Server administration forum Programming resources
|
|  |
| Author |
Ipsec configuration
|
wimpie
Junior Member
M
Registered: Oct 2002
Location:
Country: Belgium
State:
Certifications: CCNA
Working on:
Total Posts: 12
|
|
 Ipsec configuration
Hi ,
I was playing around with 2 cisco routers with an ipsec ios installed , wanted to configure them so they can encrypt the telnet traffic to each other . I was having difficulties with the ACL and the router came back with the following error message :
1:09:33: %CRYPTO-4-RECVD_PKT_INV_IDENTITY_ACL: ipsec check access: identity not allowed by ACL
I checked out the cisco website and there they said that other traffic was being passed also by the SA ....
I added a rule in the ACL which would encrypt icmp traffic also and this worked fine so my configuration is ok .
Question : Does anybody know what extra traffic he's putting in the SA when you do a telnet ?
regards
wim
Report this post to a moderator
|
|
 08-18-03 08:21 PM
|
|
ZacDogg
Senior Member
M
Registered: Mar 2002
Location: Minneapolis
Country: United States
State:
Certifications: A+, Net+, CCNA, CCNP, CCIE, CSS-1
Working on: another CCIE
Total Posts: 227
|
|
|
|
08-21-03 09:23 AM
|
|
wimpie
Junior Member
M
Registered: Oct 2002
Location:
Country: Belgium
State:
Certifications: CCNA
Working on:
Total Posts: 12
|
|
|
Yes,
and the encryption rule for the icmp traffic is also included in the same access-list
Extended IP access list 101
permit tcp host 200.0.0.202 host 200.0.0.200 eq telnet
permit tcp host 200.0.0.200 host 200.0.0.202 eq telnet
permit icmp host 200.0.0.200 host 200.0.0.202
I tried with this acl but it's not functioning .
thx
Wim
Report this post to a moderator
|
|
|
08-21-03 07:33 PM
|
|
|
Featured site: MCSE, MCSD, CompTIA, CCNA training videos
Forum Rules:
Who Can Read The Forum? Any registered user or guest.
Who Can Post New Topics? Any registered user.
Who Can Post Replies? Any registered user.
Changes: Messages can be edited by their author.
Posts: HTML code is OFF. Smilies are ON. vB code is ON. [IMG] code is OFF. |
|
ExamNotes forum archive
|
