Advertisement

02.18.2007 at 09:32PM PST, ID: 22397961
[x]
Attachment Details
[x]
The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

  • The Grade of the Solution
  • The Zone Rank of the Expert Providing the Solution
  • The Number of Author and Expert Comments
  • The Number of Experts Contributing
  • The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!
5.2

Connecting to Cisco PIX 506E with Cisco VPN Client

Asked by grantbl in Virtual Private Networking (VPN), IPSec Security Protocol, Cisco PIX Firewall

Tags: , ,

I am in need of some help regarding a Cisco PIX 506E.  I have a tunnel between two  office's that works perfectly.  Now, I want to create another VPN connection for remote access using the Cisco VPN Client.  I cannot access any network resources.  My running-config is below with personal stuff omitted.  Can anyone see the problem or provide any insight.

I can connect with the client but can't ping anything. If I add the command (
crypto dynamic-map outside_dyn_map 40 match address outside_cryptomap_dyn_40) it won't connect and the clients error is (
136    16:20:48.654  02/19/07  Sev=Warning/3      IKE/0xA3000029
No keys are available to decrypt the received ISAKMP payload)

My running config -


object-group network office
  network-object 192.168.0.0 255.255.255.0
object-group network mct
  network-object 192.168.210.0 255.255.255.0
  network-object 192.168.211.0 255.255.255.0
  network-object 192.168.212.0 255.255.255.0
  network-object 10.2.0.0 255.255.0.0
access-list compiled
access-list ec_vpn permit ip object-group office object-group mct
access-list ec_vpn permit ip 192.168.0.0 255.255.255.0 192.168.10.0 255.255.255.0
access-list ec-client-group_splitTunnelAcl permit ip 192.168.0.0 255.255.255.0 192.168.10.0 255.255.255.0
access-list outside_cryptomap_dyn_40 permit ip 192.168.0.0 255.255.255.0 192.168.10.0 255.255.255.0

nat (inside) 0 access-list ec_vpn
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
access-group inside in interface inside

floodguard enable
sysopt connection permit-ipsec
crypto ipsec transform-set 3des-set esp-3des esp-md5-hmac
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
crypto dynamic-map outside_dyn_map 40 set transform-set ESP-3DES-MD5
crypto map ecorner-mct-vpn_trans_map 20 ipsec-isakmp
crypto map ecorner-mct-vpn_trans_map 20 match address ec_vpn
crypto map ecorner-mct-vpn_trans_map 20 set peer X.X.X.X
crypto map ecorner-mct-vpn_trans_map 20 set transform-set 3des-set
crypto map ecorner-mct-vpn_trans_map 65535 ipsec-isakmp dynamic outside_dyn_map
crypto map ecorner-mct-vpn_trans_map interface outside
isakmp enable outside
isakmp key ******** address X.X.X.X netmask 255.255.255.255
isakmp identity address
isakmp keepalive 60
isakmp nat-traversal 20
isakmp policy 20 authentication pre-share
isakmp policy 20 encryption 3des
isakmp policy 20 hash md5
isakmp policy 20 group 2
isakmp policy 20 lifetime 86400
isakmp policy 30 authentication rsa-sig
isakmp policy 30 encryption des
isakmp policy 30 hash sha
isakmp policy 30 group 1
isakmp policy 30 lifetime 86400
isakmp policy 40 authentication pre-share
isakmp policy 40 encryption 3des
isakmp policy 40 hash sha
isakmp policy 40 group 2
isakmp policy 40 lifetime 86400
isakmp policy 50 authentication pre-share
isakmp policy 50 encryption aes
isakmp policy 50 hash md5
isakmp policy 50 group 2
isakmp policy 50 lifetime 86400
isakmp policy 60 authentication pre-share
isakmp policy 60 encryption aes
isakmp policy 60 hash sha
isakmp policy 60 group 2
isakmp policy 60 lifetime 86400
vpngroup ec-client-group address-pool ec-client-pool
vpngroup ec-client-group dns-server X.X.X.X
vpngroup ec-client-group wins-server 192.168.0.104
vpngroup ec-client-group default-domain DOMAIN
vpngroup ec-client-group split-tunnel ec-client-group_splitTunnelAcl
vpngroup ec-client-group idle-time 1800
vpngroup ec-client-group password ********
Start Free Trial
 
Keywords: Connecting to Cisco PIX 506E with Ci…
Title
1 Pix to Pix VPN
2 adding 2nd VPN to PIX
3 Remote access to a Pix from a Pix prot…
4 PIX
5 pix VPN
6 Dyamic to static site to site VPN with PI…
 
Loading Advertisement...
 
[+][-]02.18.2007 at 09:53PM PST, ID: 18561240

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]02.19.2007 at 09:29AM PST, ID: 18564323

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]02.19.2007 at 11:35AM PST, ID: 18565271

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]02.19.2007 at 02:56PM PST, ID: 18567079

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]02.19.2007 at 03:31PM PST, ID: 18567269

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]02.19.2007 at 08:17PM PST, ID: 18568308

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]02.21.2007 at 12:22AM PST, ID: 18576850

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]02.27.2007 at 04:04PM PST, ID: 18621706

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]03.02.2007 at 05:11AM PST, ID: 18639898

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]03.04.2007 at 09:02PM PST, ID: 18652657

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]03.04.2007 at 09:06PM PST, ID: 18652671

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]03.05.2007 at 02:47AM PST, ID: 18653487

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]03.05.2007 at 05:59AM PST, ID: 18654242

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]03.05.2007 at 05:15PM PST, ID: 18658839

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]03.06.2007 at 04:59AM PST, ID: 18661114

View this solution now by starting your 7-day free trial. Setting up your free trial is quick, easy, and secure. We will return you to this solution, unlocked, when you're done.

 

About this solution

Zones: Virtual Private Networking (VPN), IPSec Security Protocol, Cisco PIX Firewall
Tags: cisco, vpn, pix
Sign Up Now!
Solution Provided By: Cyclops3590
Participating Experts: 2
Solution Grade: A
 
 
[+][-]03.07.2007 at 11:39PM PST, ID: 18677063

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
 
Loading Advertisement...
20081112-EE-VQP-42 - Hierarchy