VPN with PIX 515E/site-to-site/ipsec/IKE

[rameshpillai]

hi

i have cisco pix 515e Version 6.3(3) and w3k CA server with Simple Certificate Enrollment Protocol (SCEP) Add-on for Certificate Services

M trying to configure IKE and IPSEC

i have used following commands

ca identity itlca 192.168.201.15:/CERTSRV/mscep/mscep.dll

ca authenticate itlca

am able to ping from pix to the ca server

I cant figure out where the problem is how do i debug this situation to see where i am getting stuck

regds

Ramesh

[manpowerpix]

Hi, you can use in your terminal follow commands for debuging

to activate debug use :

1. debug crypto ipsec

2. debug crypto isakmp

to deactivate debug use :

no debug crypto ipsec

no debug crypto isakmp

You will see all about your IPSec connections.

Wish you good luck.

Bye,

Sakis.

[slmansfield]

I found this URL helpful for troubleshooting both the router and the PIX. I think you need "ca configure CAserver ra 1 20 crloptional" on the PIX (CAserver is your CA server).

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00800946c0.shtml