topic Re: PIX Problem - lost connection in Network Security

PIX Problem - lost connection

s.jeffs — Fri, 21 Feb 2020 06:41:28 GMT

We recently changed ISP and as a result had to change our IP addresses.

I made a note of the old addresses on the config and changed them to the new addresses this evening.

We can connect to the Internet, and the VPN clients connect to the PIX, but we can't connect to our other site (which worked fine before)

I have been told that the other site has made the correct changes, but we can't connect. We can both ping each others firewalls, but it has a problem connecting

What else can I check at our side? Is there something I'm missing? Something not shown in the config?

Re: PIX Problem - lost connection

afakhan — Mon, 14 Apr 2003 21:38:40 GMT

Hi,

crypto debugs would us here.

make sure that ur ISP is not blocking UDP 500 traffic.

Thx

Afaq

Re: PIX Problem - lost connection

s.jeffs — Tue, 15 Apr 2003 07:47:52 GMT

Our ISP say that they are not blocking the above and other protocols associated with VPN.

How do I check the crypto debugs?

Re: PIX Problem - lost connection

s.jeffs — Tue, 15 Apr 2003 12:17:22 GMT

I managed to get the debug crypto working, which showed the old IP outside ip address still listed.

I then spent the next 10 minutes trying to turn off the debug.

I did a quick search and found the command sho cry ipsec sa to show some more information and pointed towards the crypto map settings.

Even though the following line was listed in my config, I retyped it and this solved the problem

crypto map mymap interface outside

Thanks for your help