dynamic ip for a pix 501 to create a vpn to a 3005

[hewryf]

I've try setting up the pix 501 with the ezvpn to the 3005 but kept getting a no acceptable IKE SA on the concentrator.

The samples shows the pix 501 with only vpnclient statements as show below:

vpnclient vpngroup hwclient password <password>

vpnclient server <ip address>

vpnclient mode network-extension-mode

Does the pix 501 require any other statements?

[paqiu]

Hi,

The PIX 501, that is the only command you need.

Is that your PIX only have DES encryption key?

If in that situation, I think in the 3005 , you shoose"IKE-DES-MD5" is the IPSEC SA in the group settings.

Please goto "Configuration | System | Tunneling Protocols | IPSec | IKE Proposals | Modify"

Modify "IKE-DES-MD5"

Change "Diffie-Hellman Group" from group 1 to group 2

Because easy VPN client using group 2, VPN 3000 concentrator default for DES is group 1, for 3DES is group 2.

If you do not change it for DES, it will fail in the ISAKMP negotiation.

Best Regards,