cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
375
Views
7
Helpful
4
Replies

Ooops

n.oneill
Level 1
Level 1

I have configured a PIX VPN for a customer but forgot to make a note of the password.

When I do a 'wr t' all I get is "isakmp key ******** address 0.0.0.0 netmask 0.0.0.0"

Is there anyway I can find out what it's set to? If I put in another key will this one get overwriten?

Thanks

1 Accepted Solution

Accepted Solutions

gfullage
Cisco Employee
Cisco Employee

Big ooops.

If you've forgotten the key, you can't just add another one over the top of it cause the PIX will say one already exists for address 0.0.0.0. The only way to do this is to "clear isakmp" which will get rid of ALL the ISAKMP commands in the config, then add them back in.

Probably easier if you cut/paste all the isakmp commands (except this key) into a text file first, then clear them and then paste them all back in.

View solution in original post

4 Replies 4

gfullage
Cisco Employee
Cisco Employee

Big ooops.

If you've forgotten the key, you can't just add another one over the top of it cause the PIX will say one already exists for address 0.0.0.0. The only way to do this is to "clear isakmp" which will get rid of ALL the ISAKMP commands in the config, then add them back in.

Probably easier if you cut/paste all the isakmp commands (except this key) into a text file first, then clear them and then paste them all back in.

Thankyou very much.

something else you can do is this:

if you have a TFTP server, (I have one running on my PC), then you can send a text file of the configuration to the server. that text file will contain all passwords. here is the command:

pixfw# wr net :/filename.txt

you have to configure your TFTP server first before it will work. you do that by this command:

usage: tftp-server []

Nice idea

I have managed to sort it already but this could come in useful for the future.

Thanks