Debug Crypto Engine

[DennyHeack]

Can someone point me in the right direction with these debug statements:

*Jun 17 13:03:52.104: select crypto engine: ce_engine[1] does not accept the capabilities
*Jun 17 13:03:52.104: select crypto engine: ce_engine[3] does not accept the capabilities

Hardware 878, ios: adv-ip 12.4(24)T3

I'm trying to setup ipsec site-2-site.
As soon as I create the first isakmp policy the engine errors popup.

 

[burtsbees]

Sounds like you may be trying to either use a DH group that is not supported or too high of an encryption for the keys (aes256?)...post some configs...

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[DennyHeack]

Didn't even get to that.

Config is default 8xx config with the following addition:
crypto isakmp policy 10
encr 3des

Tried every combination of encr + group.

Just now downgraded to 124-15.t13, seems to have fixed the 'issue'