an isakmp profile can be matched in 2 ways. For intiating connections, and for receiving connections. When initiating connections, the match statement has no affect. The match statement is only used for incoming connections. Therefore, to get the isakmp profile setup, you must have a match statement. The match statement is not used as this will be an initiated connection. Therefore, your match statement could be anything
match identity address 0.0.0.0 0.0.0.0 You might also notice that you will be able to type some commands, but they will not be accepted until you have a match command eg: crypto isakmp profile test client authentication list aaa when you type this, no errors will show up, but if you perform a show run, the command will not be there. But this command is used only for incoming connections, so you must define a match statement crypto isakmp profile test match identity address 1.1.1.1 cleint authentication list aaa no your command will show up when doing a show run Johan Bornman wrote: > > Hi, > > I get this profile incomplete message: > > crypto isakmp profile ISA_PROF > > ! This profile is incomplete (no match identity statement) > > keyring default > > self-identity fqdn > > initiate mode aggressive > > The commands here are the same as in the solutions guide. > > Any help will be appreciated. > > Johan > > ------------------------------------------------------------------------ > > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > _______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
