Public feed
#724012
Пытаюсь поднять туннель между Циской и Linksys RV082
На циске
crypto isakmp policy 10
hash md5
authentication pre-share
crypto isakmp key SKIBGATE address 213.59.127.215
crypto map vpn 10 ipsec-isakmp
set peer 213.59.127.215
set transform-set skibtrans
match address 101
crypto ipsec transform-set skibtrans esp-des esp-md5-hmac
mode transport
interface Tunnel10
description Tunnel to Linksys
ip unnumbered Loopback0
ip mtu 1440
ip nat inside
tunnel source FastEthernet0/1
tunnel destination 213.59.127.215
access-list 101 permit gre host 217.13.218.37 host 213.59.127.215
На линксисе указал циску на секурный шлюз Не вяжутся.
Oct 3 10:40:28 192.168.1.1 48487: 4d20h: IPSEC(validate_proposal_request): proposal part #1,
Oct 3 10:40:28 192.168.1.1 48488: (key eng. msg.) INBOUND local= 217.13.218.37, remote= 213.59.127.215,
Oct 3 10:40:28 192.168.1.1 48489: local_proxy= 0.0.0.0/0.0.0.0/0/0 (type=4),
Oct 3 10:40:28 192.168.1.1 48490: remote_proxy= 192.168.200.0/255.255.255.0/0/0 (type=4),
Oct 3 10:40:28 192.168.1.1 48491: protocol= ESP, transform= esp-des esp-md5-hmac ,
Oct 3 10:40:28 192.168.1.1 48492: lifedur= 0s and 0kb,
Oct 3 10:40:28 192.168.1.1 48493: spi= 0x0(0), conn_id= 0, keysize= 0, flags= 0x14
Oct 3 10:40:28 192.168.1.1 48494: 4d20h: IPSEC(validate_transform_proposal): proxy identities not supported
Oct 3 10:40:29 192.168.1.1 48495: 4d20h: ISAKMP (0:450): IPSec policy invalidated proposal
Oct 3 10:40:29 192.168.1.1 48496: 4d20h: ISAKMP (0:450): phase 2 SA not acceptable!