PIX - Raptor VPN

[glenne]

I am trying to setup a VPN between a PIX 515 R5.3 and a Raptor 6.5 Firewall/VPN box. We can get it to work using manual keys, but I would like to have it work automatically...

Has anyone done this? Can anyone provide any insights?

Thanks in Advance. Glenn

[9mathiesen]

It shouldn't be a problem. I don't have any experince on the issue, yet. But I can provide you with a link to a site that provides an example on VPN between a Cisco IOS router and Raptor.

The only problem I've heard of is some issue with the keepalives, but I can't verify that.

Here's the link: http://www.firetower.com/faqs/vpn/cisco-vpn-main.html

If this help I would appriciate if you let me now what you have learned.

Hope this is of any help.

Oyvind

[glenne]

Yeah, I had already seen that and worked through it...

This official response from the Cisco TAC is..

The PIX is only able to perform a manual key exchange with the Raptor firewall, even with 6.5.

Glenn

[sm2003]

Hi Glenn,

I would like to set up a VPN with a PIX but am encountering problems with IKE. I was wondering if you were successful in your quest ?

[9mathiesen]

I've finaly managed to test Cisco PIX and Cisco

IOS against Symantec Enterprise FW.

There was no problem between Cisco IOS 12.2.2.XH on 1720 and the Synmantec Enterprise FW 6.5.2 on Win2k.

But I can't get the PIX to establish IKE SA. Authentication problem.

It might be som default settings inn the PIX FW I don't know about.

Mathiesen

[daide]

Glenn,

I have tried to get this working but with no joy using manual keys. A significant difference is that I am using PIX 6.01 & do not have the flexibility to downgrade. Would you mind e-mailing me the PIX config (without the obvious passwords/IP Addresses etc.). My e-mail address is daithi.defaoite@compaq.com.

Thanks

Daithi

[tnightingale]

I am having a similar problem (Raptor 6.5 to Pix 6.1), but I cannot get a connection with even just manual keys. Would it be possible for someone to post or send me an email of the config of the Raptor and the Pix? Or any pointers??

I'm running out of ideas! TIA

tnightingale@finance.gov.sk.ca