VPN

Hi,I have a IOS firewall router connecting over ISDN (DDR) to a PIX. Topology as follows:CISCO IOS 1712----isdn----800-PIXThe problem is that the peers try to communicate when not needed, causing the DDR to open up the ISDN link.ISAKMP lifetime is 3...

Hi just wonder how can i stop icmp from outside at my PIX outside interface, i try to put acl on my access-group outside, but i can still ping from outside, am i missing something?access-list acl_out deny icmp any anyaccess-group acl_out in interface...

i have 2 pix's one 505 and one 515e with 3 interfaces on the 515e.i have a dynamic vpn tunnel from 505 pix to the 515e which works but my vpn clients cannot get into thepix 515e on the same interface, they can only get connected if i manually put in ...

HelloCould you tell me what this output means when debugging isakmp and ipsec on a pix firewall (site to site VPN) ? Why do queue events often appear in VPNs ? Could this be the reason why my VPN negotiation does not terminate ?ISAKMP (0): processing...

I have several customer over IPSec connected to my Pix Firewall 515E. Now two customers are to develop among themselves a IPSec-tunnel over the Pix. How i can configure this?

In docs says:Failover Triggers: 1. Network Activity test—A received network activity test. The unit counts all received packets for up to 5 seconds. If any packets are received at any time during this interval, the interface is considered operational...

PIX at remote, Dual Interface/Dual ISP IOS Router at core.Is there a way to have an IPSEC Tunnel fromt he PIX to the Dual ISP Router at the core?Can't get the PIX to pass traffic over the second IPSEC Tunnel when one ISP/Interface goes down at the IO...

Can pix telneted from outside interface using:telnet 0.0.0.0 0.0.0.0 outsidebut no vpn config?

I'm configuring two PIX's for LAN-to-LAN VPN. I have 3 public addresses. What is the proper way to assign the addresses? I want .1 for the outside interface, .2 for the VPN (no NAT), and .3 for internal users NAT/PAT. Is this OK? Do I need NAT & glob...

I have a Cisco 3060 VPN concentrator connecting to three Cisco 831 routers at different locations (Staten Island, San Francisco and Torrance). The ones that I have a problem with are Staten Island and San Francisco. The problem is that in the morning...

Hi,I need to make an IPSec Nedwork with two HeadQuartes.On HeadQuartes I put Cisco 3725 with IOS c3725-ik9o3s-mz.122-15.T7.bin.On client side I have c1700.I try to configure an IPSec solution with GRE tunnels and Eigrp routing.After configuration I ...

Using DSL, when I connect the VPN3002 via "Client Mode" everything works great, can connect to internal devices.When I switch the VPN3002 to "Network Extension Mode" I can ping the external & internal addresses of the 3015 but cannot access any devic...

hi allAt my company we have about 25 remote offices connected to us via vpn lines. I was wondering if its possible for me to make a single IPsec setting on my firewall for all of the 25 vpn lines.And also,is it possible to connect a firewall directly...