09-17-2007 08:20 AM - edited 02-21-2020 03:16 PM
Can someone please look at my config and tell me what's wrong with it because i can't figure it.
I have been trying to create a site to site vpn without any luck. However, i have been successfully created a vpn for my clients.
Thanks in advance!!
09-17-2007 11:41 PM
Hi
I can't see any Phase 1 isakmp settings in your pix 6.3 config, ie you need
1) isakmp policy
2) isakmp key
3) isakmp enable
HTH
Jon
09-18-2007 01:14 AM
As said above, you are completely missing ISAKMP configuration. Try adding the following commands to your Pix with software version 6.3(5):
isakmp enable outside
isakmp identity address
isakmp policy 10 authentication pre-share
isakmp policy 10 encryption 3des
isakmp policy 10 hash sha
isakmp policy 10 group 2
isakmp policy 10 lifetime 86400
isakmp key **** address 71.4.148.xxx netmask 255.255.255.255
Notice that you should replace the **** with the same pre-shared key you configured on the PIX/ASA with software version 7.1(1)
Please rate the post if it's usefull to you!
Regards,
Michael
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide