topic Re: VPN site to site Pix 525 ver7.2(2) and Pix 501 ver 6.3 in Network Security

VPN site to site Pix 525 ver7.2(2) and Pix 501 ver 6.3

cborge2007 — Fri, 21 Feb 2020 10:03:43 GMT

Hi !!

I have problems establishing a vpn between two pix.

The first pix 525 has version 7.2 (2) another Pix has version 6.3 this one is not administered by my person.

The phase establishes 1 but send the messages attached

can help me

Thank you

Farrukh Haroon — Sat, 14 Jun 2008 09:33:24 GMT

Are you sure your crypto ACLs are mirror images of each other? Can you post the crypto configs of both devices.

Regards

Farrukh

cborge2007 — Mon, 16 Jun 2008 14:50:06 GMT

Excuseme for be late with my answer.

Those are the conf in both pixes.

thank for your help

Farrukh Haroon — Mon, 16 Jun 2008 15:47:02 GMT

You access-list on the 7.x firewall should be a mirror image (opposite) of the one on the 6.x firewall, currently it is not:

access-list 102 extended permit ip host 192.168.1.3 host 10.32.0.41

it should be:

access-list 102 extended permit ip host 10.32.0.41 host 192.168.1.3

Secondly you are missing this line:

crypto map TLF 102 match address 102

Also try to remove extra lines in ACL 102, try to keep same number of lines (configured as mirror) of opposite vpn gateway.

Regards

Farrukh

cborge2007 — Mon, 16 Jun 2008 16:20:03 GMT

thank you !!

Thank you !!

its works !!

every think its working !!!

Farrukh Haroon — Mon, 16 Jun 2008 17:44:54 GMT

I'm glad you have it working now 🙂

Please rate helpful posts.

Regards

Farrukh

cborge2007 — Mon, 16 Jun 2008 18:01:26 GMT

thank you !!! i was so sad because i had one week with this problem, thank you