VPN

When a VPN device is said to support x number of IPsec tunnels, does this take into account all the SA's created when setting up the secure channel?So, does encryption for up to 3000 tunnels mean 3000 SA's or is it irrespective of how many SA's are c...

Hi all,I'm using a netscreen vpn client to TRY to connect to a pix vpn on a 6.3 pix501 (3des license). Here's the problem;I can connect to the vpn successfully, but I cannot get any traffic to flow. Once connected I try to ping the inside interface (...

Hello all. I have a VPN 3000 client in a remote LAN. He can connect and route traffic with windows Cisco client, but wit the Linux one, ha can validate but he ca´t send any traffic. I can see he is logged and the traffic is 0 bytes. My Split Tunnelin...

Hi, i have a domain name configure in a radius server... the attributes for the tunnel work fine on 5400 and 5800 RAS but when authenticating the domain on a 5300 the domain is accepted but it is not authorizated as you can see on the debug##########...

I have setup a GRE Tunnel across a service provider network using cisco routers. How can I protect this tunnel using IPsec? Does anyone have any documentation on how to achieve this?Thank you all.

Hi FolksI hv setup remote access VPN using PIX515 some time back & tested the same from the Firewall outside segment & also thru dialup and found to be working fine.After establishing Ipsec VPN,the user needs to access the server which is in the insi...

I have a main and remote site , main site has Windows Active Directory 2003 , DHCP , DNS, Exchange Servers and the two sites connected to the internet directly.The remote site has no servers , just internet connectivity , Does the VPN tunnel pass DHC...

Hi,I have a PIX 515E, IOS 6.3(4) VPN client 4.0.x3DES enabled.With pre-sharekey there is no problem, but not with certificate.When trying to connect the pix reject all IKE proposal. isakmp policy 8 authentication rsa-sigisakmp policy 8 encryption aes...

I have an existing Router->Router (Both 837's) VPN functioning, and have been asked to allow Cisco VPN client connectivity (Pre-shared key) to one of the 837's.I am just a little unsure as to how I would intergrate pre-shared VPN client access withou...

hi, I use 2 to PIX. One is Central PIX 515E with static IP and vpn access. The other is REOMTE PIX 506 with dynamic IP address one WAN interfaces. The Pix506 connect to Pix51Ë with succes. I use Client VPN Cisco version 4.05(B) with Workstation f...

I get the following output on a concentrator when a user tries to conect vpn:34940 10/29/2004 09:27:56.720 SEV=5 IP/49 RPT=1927 Headend transmitting TCP SYN-ACK pkt to client 67.8.37.22, TCP dest port 64073 34941 10/29/2004 09:27:57.050 SEV=5 IP/41 R...

Hi i have a very basic ACL question. See we have one proxy server every body ll be acces the server now what we did we installed the WEBSENSE on the proxy server and we block all the mailing site like yahoo,rediff etc...but what we see in the perso...

Hi,This is what i'm trying to accomplish:CVPN --> Pix 515 --> Internet --> VPN PeerI have enabled both UDP 500 and ESP protocol for inbound and outbound traffic. Global command is configured to use Outside interface IP.NAT command is configured for L...

I have what I hope is a fairly straightforward question. I have nine sites in my vpn network. Six of these have pix 501s as their VPN devices (the other three are larger pixes). There is a full mesh of IPSec tunnels connecting the sites, so each p...