[j-nsp] IPSEC VPN with Cisco 3660
mellotte at netcsc.com
Wed Mar 17 11:43:03 EST 2004
Actually moved from the 3660 to a 7206 and the problem went away.
Believe I have bad hardware on the 3660. Thanks for your response!
From: Andrew Ramsey [mailto:akramsey at juniper.net]
Sent: Wednesday, March 17, 2004 10:58 AM
To: Eric Mellott; juniper-nsp at puck.nether.net
Subject: RE: [j-nsp] IPSEC VPN with Cisco 3660
Could you disable the crypto hardware on the 3660 side and try it?
> -----Original Message-----
> From: juniper-nsp-bounces at puck.nether.net
> [mailto:juniper-nsp-bounces at puck.nether.net] On Behalf Of Eric Mellott
> Sent: Wednesday, March 17, 2004 9:44 AM
> To: juniper-nsp at puck.nether.net
> Subject: [j-nsp] IPSEC VPN with Cisco 3660
> I am trying to setup a vpn between a Juniper M10 and a Cisco
> 3660. Everything seems to be configured correctly and the
> tunnel comes up fine, however only packets less than 300
> bytes are making it through the vpn. Packets greater than
> 300 bytes are making it to the Juniper and back to the 3660.
> The 3660 is just not decrypting them properly. The
> pad_size_error variable is incrementing when I look at the
> crypto engine statistics. Anyone know what is going on or
> have a working example of a vpn between a Juniper and Cisco.
> I am using dynamic SAs for ipsec and ike.
> Thank you in advance for any input.
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> http://puck.nether.net/mailman/listinfo/junipe> r-nsp
More information about the juniper-nsp