[j-nsp] IPSEC VPN with Cisco 3660

Andrew Ramsey akramsey at juniper.net
Wed Mar 17 10:57:53 EST 2004


Hi,

Could you disable the crypto hardware on the 3660 side and try it?

Thanks,
Andy

> -----Original Message-----
> From: juniper-nsp-bounces at puck.nether.net 
> [mailto:juniper-nsp-bounces at puck.nether.net] On Behalf Of Eric Mellott
> Sent: Wednesday, March 17, 2004 9:44 AM
> To: juniper-nsp at puck.nether.net
> Subject: [j-nsp] IPSEC VPN with Cisco 3660
> 
> 
> I am trying to setup a vpn between a Juniper M10 and a Cisco 
> 3660. Everything seems to be configured correctly and the 
> tunnel comes up fine, however only packets less than 300 
> bytes are making it through the vpn.  Packets greater than 
> 300 bytes are making it to the Juniper and back to the 3660.  
> The 3660 is just not decrypting them properly.  The 
> pad_size_error variable is incrementing when I look at the 
> crypto engine statistics.  Anyone know what is going on or 
> have a working example of a vpn between a Juniper and Cisco.  
> I am using dynamic SAs for ipsec and ike.  
> 
>  
> 
> Thank you in advance for any input.
> 
>  
> 
> -Eric   
> 
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net 
> http://puck.nether.net/mailman/listinfo/junipe> r-nsp
> 



More information about the juniper-nsp mailing list