https://community.cisco.com/t5/network-security/pix-configuration/m-p/1020422#M916274 <P>I am adding a new ipsec tunnel to my pix box. I am running PIX-515, the new tunnel is to a checkpoint firewall. I am unable to ping the target or the checkpoint firewall after adding the new tunnel. I have attached the configs to see if I am doing something wrong on my end. The new entries I made for the tunnel is in italics. </P><P></P><P></P><P></P><P></P><P> </P><P></P> Mon, 11 Mar 2019 13:18:04 GMT musumani.woods 2019-03-11T13:18:04Z https://community.cisco.com/t5/network-security/pix-configuration/m-p/1020422#M916274 <P>I am adding a new ipsec tunnel to my pix box. I am running PIX-515, the new tunnel is to a checkpoint firewall. I am unable to ping the target or the checkpoint firewall after adding the new tunnel. I have attached the configs to see if I am doing something wrong on my end. The new entries I made for the tunnel is in italics. </P><P></P><P></P><P></P><P></P><P> </P><P></P> Mon, 11 Mar 2019 13:18:04 GMT https://community.cisco.com/t5/network-security/pix-configuration/m-p/1020422#M916274 musumani.woods 2019-03-11T13:18:04Z https://community.cisco.com/t5/network-security/pix-configuration/m-p/1020423#M916275 <HTML><HEAD></HEAD><BODY><P>The only thing I can see is:-</P><P></P><P>crypto map map01 20 set peer 67.155.139.245</P><P></P><P>isakmp key ******** address 68.665.889.245 (not real ip) netmask 255.255.255.248 </P><P></P><P>Change the mask to 255.255.255.255 - and check the peer IP's match to the real ones on your live config.</P><P></P><P>HTH.</P></BODY></HTML> Tue, 22 Jul 2008 13:41:54 GMT https://community.cisco.com/t5/network-security/pix-configuration/m-p/1020423#M916275 andrew.prince 2008-07-22T13:41:54Z