Cisco to Juniper VPN – Vendor ID

[alex741]

#154500

Hi Guys,
I am trying to setup a VPN tunnel between my Cisco 837 (Version 12.2(13)ZH4) and my principal’s Juniper on the other side. I can see they talk to each other and exchange keys, but tunnel never goes up.
As a test, I created another tunnel to Cisco 851 and it worked perfectly.

I have been told by the Juniper’s administrator do disable sending the vendor ID because of these entries in the isakmp debug log:
ISAKMP (0:1): constructed NAT-T vendor-03 ID
ISAKMP (0:1): constructed NAT-T vendor-02 ID
processing vendor id payload
vendor ID seems Unity/DPD but major 59 mismatch

I searched around but I did not find how to disable sending the vendor ID on Cisco 837.

Any clues?

Thanks,
Alex

[Author]

Posts