07-13-2008 11:02 PM - edited 02-21-2020 02:55 AM
hello ,
I have PIX 515E PIX
I have changed my tunnel peer ip from peer from 195.11.199.144 to 195.11.204.5
After chenging the peer ip my existing tunnel goes down and i get following error.
195.11.204.5 X.X.X.226 MM_NO_STATE 0 0
Kindly help me out to overcome this issue.
-Ajinkya Kulkani.
07-13-2008 11:07 PM
Why are you going to change peer's ip address?
07-13-2008 11:10 PM
Hi a.alekseev
This is my customer reqirement.
Ajinkya
07-13-2008 11:13 PM
so both of you must do some modifications.
you need also set pre-shared key for the new peer's address
[Pls RATE if HELPS]
07-13-2008 11:19 PM
I hve allready configured following configuration.
no crypto map newmap interface outside
no crypto map newmap 171 set peer 195.11.199.144
no isakmp key ********* address 195.11.199.144 netmask 255.255.255.255 no-xauth no-config-mode
crypto map newmap 171 set peer 195.11.204.5
isakmp key ******** address 195.11.204.5 netmask 255.255.255.255 no-xauth no-config-mode
clear crypto ipsec sa
clear crypto isakmp sa
crypto map newmap interface outside
Setting were applied successfully however Still VPN tunnel is not been initiated.
07-14-2008 12:29 AM
Ask your client...
Have they the configuration changed?
I think that in "isakmp key ******** address 195.11.204.5 netmask 255.255.255.255 no-xauth no-config-mode"
you entered a real key, not just "********"
07-14-2008 01:26 AM
hi
no configurstion changes has been changed except peer IP add and we entered real keys
not just "******"
-ajinkya
07-14-2008 02:17 AM
so,
debug crypto ipsec
debug crypto isakmp
07-14-2008 03:10 AM
Hi,
I will check debug command and let you know tomorrow.
Kindly be with me.
Ajinkya
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide