42 reputation
1210
bio website elint.org
location Austin, TX
age 33
visits member for 5 years, 1 month
seen Nov 11 '10 at 21:42
IT Consultant. RHCE, MCP.

Jun
10
awarded  Famous Question
May
9
awarded  Notable Question
Apr
10
awarded  Popular Question
Jan
29
awarded  Notable Question
Sep
1
accepted Cisco PIX to Juniper Netscreen Policy-based VPN fails Phase 2 Proposal
Jul
9
awarded  Promoter
Jul
1
awarded  Popular Question
Jun
8
awarded  Popular Question
Feb
25
awarded  Commentator
Feb
25
comment Cisco PIX to Juniper Netscreen Policy-based VPN fails Phase 2 Proposal
mikeyb's suggestion to enable logging on the PIX seems to be pointing me in the right direction. Looks like the PIX has policy config issues. I didn't know how to access the logs, so I was just going by the Juniper's log. Still working on it, though.
Feb
25
comment Cisco PIX to Juniper Netscreen Policy-based VPN fails Phase 2 Proposal
Aha. I should do some Cisco studying. That points me to "IPSEC(validate_transform_proposal): proxy identities not supported", which seems to indicate I don't have my access-list policies set up completely right. I'm not out of the water yet, but I'm gettin' there. I'll read up a little bit on policy requirements for IPsec VPNs.
Feb
25
comment Cisco PIX to Juniper Netscreen Policy-based VPN fails Phase 2 Proposal
set ike p1-proposal "ToCorpOffice" preshare group2 esp 3des sha-1 second 3600 set ike p2-proposal "ToCorpOffice" group2 esp 3des sha-1 second 26400 Looks like both are using DH group 2, 3des/sha-1, hence my confusion that it's not working. I agree that it's a user error "not knowing how to do so on that device". I've generally setup site-to-site's on sonicwalls or junipers in homogenous environments. This is the second juniper->other VPN config I've attempted, and when the first one failed, they bouth another multitech router for their VPN :P
Feb
21
answered What is Plesk good for?
Feb
21
comment Cisco PIX to Juniper Netscreen Policy-based VPN fails Phase 2 Proposal
Aye, I've seen the same with other devices, but figured since it was documented by both Cisco and Juniper, it wouldn't be too hard. I'll keep messing with the proposals and hopefully figure it out if I don't get another answer here, because this customer probably won't approve more hardware :)
Feb
21
asked Cisco PIX to Juniper Netscreen Policy-based VPN fails Phase 2 Proposal
Feb
2
accepted Blackberry 8130 doesn't remember contacts (BES)
Feb
2
comment Blackberry 8130 doesn't remember contacts (BES)
Marking you as the solution, as you pointed me in the right direction. The BES sync logs looked fine. I deleted the address book on the device and tried to clear the address book database -- it says it cleared, but 2 contacts remained (of the 8 I was seeing). I couldn't edit/delete them from the device or desktop manager. I ended up backing up everything EXCEPT contacts, wiping handheld, restoring that backup, and re-activating. Full address book synced successfully. Sounds like there were 2 corrupt contacts, or a corrupt address book on the phone. Thanks for the help.
Feb
1
comment Blackberry 8130 doesn't remember contacts (BES)
Additional info: client says he added a new contact in SugarCRM (which syncs with outlook via a SugarCRM Outlook add-in), and the new contact is showing up on his phone, but another has been removed, so it's still only showing 8 contacts (7 of the originals and this new one). I'm trying MikeyB's suggestion when I can coordinate with the customer in the next couple of days, and it sounds like a good course of action if something is corrupt on the phone and maybe limiting address-book storage to 8 contacts for some reason.
Feb
1
comment Blackberry 8130 doesn't remember contacts (BES)
sounds like a plan. added new info to my main question, but I'll try this Monday or Tuesday, when I can get with the client.
Jan
29
answered What is the purpose of shared folder in active directory?