simsjrg
asked on
Problem pinging across site to site tunnel (515E to 501)
We just moved and office mid-week and the new location has a new ip range. Made all changes on both of the PIX's and a "show crypto isakmp sa" is returning:
PIX01(config)# show crypto isakmp sa
Total : 1
Embryonic : 0
dst src state pending created
xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx QM_IDLE 0 2
on PIX01 and:
PIX02(config)# show crypto isakmp sa
Total : 1
Embryonic : 0
dst src state pending created
xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx QM_IDLE 0 2
on PIX02.
I can ping PIX to PIX with no problem but I cannot ping a remote workstation. From my limited knowledge it appears as though the tunnel is up but other then the outside address nothing else on the PIX has changed. Maybe I did the commands in the wrong order...?
Basically I just need to complete the tunnel.
Thanks in Advance.
PIX01(config)# show crypto isakmp sa
Total : 1
Embryonic : 0
dst src state pending created
xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx QM_IDLE 0 2
on PIX01 and:
PIX02(config)# show crypto isakmp sa
Total : 1
Embryonic : 0
dst src state pending created
xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx QM_IDLE 0 2
on PIX02.
I can ping PIX to PIX with no problem but I cannot ping a remote workstation. From my limited knowledge it appears as though the tunnel is up but other then the outside address nothing else on the PIX has changed. Maybe I did the commands in the wrong order...?
Basically I just need to complete the tunnel.
Thanks in Advance.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
For future reference when this kinda thingy happens, just remove the crypto map from the interface and add it back.
Cheers,
Rajesh
Cheers,
Rajesh
ASKER
Thanks again!