Solved

VPN connection between Pix 506e and Symantec vpn 100 troubles

Posted on 2006-06-20
3
400 Views
Last Modified: 2013-11-16
I currently have a VPN between a Linksys and a Symantec vpn 100.  I am trading the linksys with a Pix 506e.  I have tried to configure everything according to the linksys, but am still not getting any results.
0
Comment
Question by:tashmore
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 

Author Comment

by:tashmore
ID: 16948527
I am using gui's for both firewalls.  I'm not sure how to start troubleshooting or what to look for.
0
 

Author Comment

by:tashmore
ID: 16948631
These are the configurations from my symantec router

IPSEC
      Security Assocation      Main-oFFICe
      PPPoE session      Session1
      phase negotiation      main mode
      encryption            esp 3des
      authentication      md5
      SA Lifetime      480 minutes
      Data volume limit      0 Kb
      Inactivity timeout      0 minutes
      Perfect Forward Secr..Enable
Local Security Gateway
      IP Address
Remote Security Gateway
      Remote office IP
      Pre-shared Key            
Gateway-to-Gateway Tunnels
      NetBIOS Broadcast      enable
      Global Tunnel      disable
      remote subnet IP      192.168.2.0      255.255.255.0
      MTU       LAN PC 1500              WAN port 1500
      Echo Request timeout 20 sec      Retry 5
      Allow IDENT Port      disable
      NAT function       enable
      RIP V2            Disable
      IPSEC type            2spI

T
0
 
LVL 19

Accepted Solution

by:
nodisco earned 125 total points
ID: 16949600
Hi there

Have a look at this URL for step by step instructions on how to do this:

http://service1.symantec.com/SUPPORT/ent-gate.nsf/0/70696f0e28bd63a280256eeb003aef23?OpenDocument&seg=hm

When configured - to check what is happening on the PIX regarding debugging:

conf t
debug crypto isakmp
logging console 7
logging on

This will output isakmp negotiations and will show where its going astray.  It looks a bit crazy but if you post the output, we should be able to assist
0

Featured Post

Surfing Is Meant To Be Done Outdoors

Featuring its rugged IP67 compliant exterior and delivering broad, fast, and reliable Wi-Fi coverage, the AP322 is the ideal solution for the outdoors. Manage this AP with either a Firebox as a gateway controller, or with the Wi-Fi Cloud for an expanded set of management features

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article assumes you have at least one Cisco ASA or PIX configured with working internet and a non-dynamic, public, address on the outside interface. If you need instructions on how to enable your device for internet, or basic configuration info…
For months I had no idea how to 'discover' the IP address of the other end of a link (without asking someone who knows), and it drove me batty. Think about it. You can't use Cisco Discovery Protocol (CDP) because it's not implemented on the ASAs.…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question