I think you should add the "crypto pki autjorization" to the isakmp profile.
Enviado desde mi iPhone El 21/07/2012, a las 15:21, GuardGrid <[email protected]> escribió: > Actually i removed that and if you notice now just matching by identity and I > can see from the debugs that it is picking up the right profile. > > crypto isakmp profile ISAKMP_PROF > match identity group CCIE > > > Also, when I add OU=CCIE the IOS parser converts that and shows up as ou = > ccie on the sh run. > > On Sat, Jul 21, 2012 at 4:04 PM, Karthik sagar <[email protected]> wrote: > In your certificate map, the line 'subject-name co ou = ccie', can you try > removing the spaces between 'ou = ccie'. I think the certificate matching is > not happening correctly. Also, I am not sure if the matching is case > insensitive. > > Regards, > Karthik > > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > > Are you a CCNP or CCIE and looking for a job? Check out > www.PlatinumPlacement.com
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
