IPSEC Tunnel Initiation

kelvin.rutledge · ‎12-27-2004

I am using a 3002 Hardware client and am able to get the tunnel up and then can access services on the inside of the pix. My problem is that I have to make the tunnel come up by logging into the 3002 GUI and pinging the PIX interface that the tunnel terminates on. I am under the impression that the 3002 should boot up and try to bring the tunnel up, or that interesting traffic should bring it up. Am I wrong (likely) or is this something I can configure on the PIX 515 or in the 3002? As always your help is greatly appreciated.

Kelvin Rutledge

smahbub · ‎12-31-2004

All valid traffic should enable the tunnelcheck if you have any Access list on the PIX thats denying traffic from the VPN client.

kelvin.rutledge · ‎01-03-2005

i'm not sure what you mean. I have a couple of access lists but they all permit traffic not deny it. Can you elaborate a little.

habgooda · ‎03-13-2005

Hi Kelvin,

I am having the exact same issue - have you resolved it yet?

kelvin.rutledge · ‎03-14-2005

unfortunately no, we didn't solve this issue. we ran into bigger issues and had to change to the 1712 routers to solve those and the IPSEC/GRE tunnel on them does come up on its on.