RE: Digital Certificates and PIX [7:64867]

2003-03-11 Thread ciscotopgun ccnp
Check these points: 1. CA which issued cert to the PIX and the client should be same, else that CA cert to be added too. 2. If you generated the self generated cert using ca generate ca keys command, and the vpn client has cert from some CA, add that CAs cert to the PIX.Bruno Fernandes wrote: >

Digital Certificates and PIX [7:64867]

2003-03-09 Thread Bruno Fernandes
Hi, The problem: I am trying to establish an IPSEC tunnel from a cisco vpn client (3.x) to a PIX, everything works fine using pre-shared keys but when I try using digital certificates it doesn't work, looking at the PIX debug the vpn client is requesting an encryption type that the PIX doesn't un