Solved

need to remove a lan-to-lan vpn on pix 515e

Posted on 2006-07-11
6
446 Views
Last Modified: 2010-03-19
I need to remove (1) lan-to-lan vpn from a pix 515e with multible lan-to-lan vpns configured.
0
Comment
Question by:tebone68
  • 3
  • 2
6 Comments
 
LVL 12

Expert Comment

by:Scotty_cisco
Comment Utility
can you post a limited show run so we can tell you what ACL and Crypto map to remove?

Thanks
Scott
0
 
LVL 4

Expert Comment

by:johanvz1
Comment Utility
Hi,

Easiest way is to login on the Web GUI Interface click on VPN or PPTP or what type of vpn is it will show you what you have click on it and delete the rule.However make sure the computer you want to open the firewall from has access to it via reserved IP address or MAC that is the easiest especially if you do not really have experience on firewalls.

Regards,

Johan
0
 

Author Comment

by:tebone68
Comment Utility
I have never used the GUI for a pix. I was under the impression that you had to do a clear isakmp key and then put the remaining sites back in with the pre-shared keys that are associated with them? The problem is the client doesn't have the keys. I have heard if I do a write net the keys will show up in clear text?
0
What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 
LVL 12

Expert Comment

by:Scotty_cisco
Comment Utility
not sure on the write net part of the question but I do know that the isakmp key if you changed that on all the sites and then reconfigured it locally to a new key that the one site would be dropped.  I would still delete the rules if you can a partial show run would help explain this.

Thanks
Scott
0
 

Author Comment

by:tebone68
Comment Utility
I'm not onsite right now so I can't get that show run for you. It would have been nice if Cisco would have allowed a "no isakmp key" command to get ride of connections an easy way.

0
 
LVL 12

Accepted Solution

by:
Scotty_cisco earned 250 total points
Comment Utility
yes it would .... think that will be an option in the new 7.x code.

Thanks
Scott
0

Featured Post

Free camera licenses with purchase of My Cloud NAS

Milestone Arcus software is compatible with thousands of industry-leading cameras for added flexibility. Upon installation on your My Cloud NAS, you will receive two (2) camera licenses already enabled in the software. And for a limited time, get additional camera licenses FREE.

Join & Write a Comment

I found an issue or “bug” in the SonicOS platform (the firmware controlling SonicWALL security appliances) that has to do with renaming Default Service Objects, which then causes a portion of the system to become uncontrollable and unstable. BACK…
#Citrix #Citrix Netscaler #HTTP Compression #Load Balance
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now