- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-15-2003 04:34 AM - edited 02-21-2020 12:17 PM
Can anyone tell me why my SSH session into a PIX gets terminated when I apply a crypto map command on the firewall I'm accessing?
Solved! Go to Solution.
- Labels:
-
Other VPN Topics
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-15-2003 05:25 PM
If you're accessing this via the outside interface, then you have to be very careful about adding crypto map commands, cause you can easily lock yourself out of the PIX and stop the PIX from passing any traffic.
If there is an existing crypto map on the PIX and you're adding another one, you have to unapply the crypto map first, add the new one in (making sure it's complete) then re-apply it.
If there is no existing map, then make sure you add the crypto map in full, including the access-list, and only then apply the crypto map to the interface.
If you think you're doing it right, reply back with exactly what you're typing in and we'll see what you're missing.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-15-2003 05:25 PM
If you're accessing this via the outside interface, then you have to be very careful about adding crypto map commands, cause you can easily lock yourself out of the PIX and stop the PIX from passing any traffic.
If there is an existing crypto map on the PIX and you're adding another one, you have to unapply the crypto map first, add the new one in (making sure it's complete) then re-apply it.
If there is no existing map, then make sure you add the crypto map in full, including the access-list, and only then apply the crypto map to the interface.
If you think you're doing it right, reply back with exactly what you're typing in and we'll see what you're missing.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-17-2003 03:04 AM
Thanks for replying. That answers my question perfectly.
