WIN 2000 Pro Using IPsec to talk to a PIX Firewall

[ciscomoderator]

(Note: This message was posted as part of the "Ask the Expert" Event on IPsec and Client Software that took place August 28 - September 4. Feel free to respond to or form discussions around this question)

Posted by nmonjo - NETWORK SPECIALIST, Smart Communications Group

Has anyone been fortunate enough to be able to get Win2000Pro using IPSEC to talk to a PIX Firewall. I have tried, to no prevail. I keep on receiving error messages saying that the filter-lists are invalid, and that i am using 3DES, where in both cases I am not. I have installed the service pack 1, still doesn't work. As far as i'm aware, the firewall is configured properly as i can access it via a win98 box with the cisco vpn client. So far, with my interactions with TAC, they have said that no one knows of any resources on the subject - despite the fact that the IPSEC "stack" was co-authored between cisco and microsoft!

If anyone can help with suggestions, examples or even an instruction set, it would be greatly appreciated.

Thanks, Nick Monjo.

[kbeltz]

I asked our Cisco sales rep that same question last week. His resoponse was, "We are working on it, hopefully by version 5.3."

[jim.woods]

Hope this helps!

I am running win2000 server to connect to my corp VPN (3000 series concentrator). There is an additional VPN connection option when creating a new network account in 2000 server over the pro edition.

I had to turn off encryption on my end and put in the IP of the concentrator and everything works great. I have not added the DNS servers yet but that should work fine to.

[ashahlaie]

2 DIFFRENT SET OF IP SEC AND THEY WILL NOT WORK TOGTHER