PIX VPN - Cisco VPN Client rsa-sig (CEP)

[MOCAG]

Has any body a functional PIX <-> Cisco VPN Client with MSCEP authentication W2K certification Services.
The ca enroll is working fine and my pix got the ca and ra certificates.
Pix Debug says: atts are accetable

But my VPN Client (4.0.1) always reports:

23 17:30:06.758 09/12/03 Sev=Info/4 CERT/0x63600014
Cert (cn=optivpn.opti.com,1.2.840.113549.1.9.2=#13106f70746976706e2e6f7074692e636f6d) verification succeeded.

24 17:30:06.758 09/12/03 Sev=Warning/3 IKE/0xE3000080
Invalid remote certificate id: ID_IPV4_ADDR: ID = 0x268114D4, Certificate = 0x00000000

25 17:30:06.758 09/12/03 Sev=Warning/3 IKE/0xE3000058
The peer's certificate doesn't match Phase 1 ID

I need urgent help. Thanks in advance.

Marco

 

[WaqasAhmed]

hey MOCAG can u help me ragarding my problem. I have read that u have successfully configured the router to enroll teh certificate can give me any detail regarding this.

i have installed the mscep and also configured the identity on the router but when i authenticate the router it says&quot;Error Receiving Certificate&quot; kindly help me out this problem. I ll be thankfull.

u can mail me @ mr_waqas_ahmed@hotmail.com

 

[yizhar]

HI.

> 25 17:30:06.758 09/12/03 Sev=Warning/3 IKE/0xE3000058
> The peer's certificate doesn't match Phase 1 ID
I think that you need to check the command:

isakmp identity ...

At the pix.

Also - at your VPN client try connecting to IP address or to DNS name of the pix outside interface. I don't know if it matters (I guess not) but I would try that just to be sure.



Yizhar Hurwitz

http://teachers.sivan.co.il/yizhar