Problem pinging across site to site tunnel (515E to 501)

We just moved and office mid-week and the new location has a new ip range. Made all changes on both of the PIX's and a "show crypto isakmp sa" is returning:

PIX01(config)# show crypto isakmp sa
Total     : 1
Embryonic : 0
        dst               src        state     pending     created
  xxx.xxx.xxx.xxx    xxx.xxx.xxx.xxx    QM_IDLE         0           2

on PIX01 and:

PIX02(config)# show crypto isakmp sa
Total     : 1
Embryonic : 0
        dst               src        state     pending     created
  xxx.xxx.xxx.xxx    xxx.xxx.xxx.xxx    QM_IDLE         0           2

on PIX02.

I can ping PIX to PIX with no problem but I cannot ping a remote workstation. From my limited knowledge it appears as though the tunnel is up but other then the outside address nothing else on the PIX has changed. Maybe I did the commands in the wrong order...?

Basically I just need to complete the tunnel.

Thanks in Advance.
LVL 18
simsjrgAsked:
Who is Participating?

[Webinar] Streamline your web hosting managementRegister Today

x
 
naveedbConnect With a Mentor Commented:
Can you post output from following on both sides?

sh crypto ipsec sa


Also post your running config on the PIX
0
 
Pentrix2Connect With a Mentor Commented:
It looks like an access-list or routing problem.  Please post both sides running-configuration.

Pentrix2
0
 
simsjrgAuthor Commented:
Just ended up recreating the tunnel from scratch. It came up fine. Points split for the effort.

Thanks again!
0
 
rsivanandanCommented:
For future reference when this kinda thingy happens, just remove the crypto map from the interface and add it back.

Cheers,
Rajesh
0
All Courses

From novice to tech pro — start learning today.