topic Re: Problems with Tunnel from pix A to pix B in Network Security

Problems with Tunnel from pix A to pix B

marilynnkelly — Mon, 11 Mar 2019 13:59:16 GMT

VPN Parameters

pix B end point is 66.66.66.66

pix B network is 192.168.50.0/24

pix A will need to make ACL from 172.24.176.9 to host 192.168.50.83 and 192.168.50.86

pix A will need to NAT intresting traffic to 172.24.176.0 /24

pix A

Phase 1

Authentication: Pre-Shared

Encryption: 3DES

Hash: SHA

DH: 1

Lifetime: 86400 sec

Phase 2

ESP encryption 3DES

ESP authentication

Lifetime 28800

pix A

outside 12.12.12.12 /24

insdie 192.168.1.2 /24

Problem creating tunnel from pix A to pix B

Re: Problems with Tunnel from pix A to pix B

ajagadee — Sun, 19 Oct 2008 02:12:12 GMT

Hello,

Below is a troubleshooting guide for Pix L2L IPSec Tunnel.

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_tech_note09186a008009448c.shtml

If the above URL does not help, then is it possible to post your configuration of the Pix along with "Deb cry is" and "Deb cry ipsec" outputs.

Regards,

Arul

** Please rate all helpful posts **

Re: Problems with Tunnel from pix A to pix B

c-drozd — Sun, 19 Oct 2008 13:19:29 GMT

I beleive my problem is configuring the ACL properly. If I am correct if the ACL is correctly configured then a tunnel can not be created?

Re: Problems with Tunnel from pix A to pix B

c-drozd — Sun, 19 Oct 2008 14:54:17 GMT

Reposting message because of typo. I beleive my problem is configuring the ACL properly. If I am correct if the ACL is not correctly configured then a tunnel can not be created?

Re: Problems with Tunnel from pix A to pix B

ajagadee — Wed, 22 Oct 2008 23:34:17 GMT

Yes, are correct. ACL is what defines the interesting traffic for IPSEC and that is what triggers your IPSEC L2L Tunnel.

Can you post the Pix configuration along with the outputs of "deb cry is" and "deb cry ips".

Regards,

Arul

*Pls rate if it helps*