Solved

LAN-to-LAN between PIX-515 and PIX-5252 --Urgent Help Required

Posted on 2008-06-23
2
276 Views
Last Modified: 2013-11-16
Hi

I have setup LAN-LAN  tunne lbetween PIX-525 and PIX-515.The host 219..47.190.93/32  is behind PIX-525 and 912.168.243.0/24 is behind PIX-515.I cannot see the tunnel coming up .Also,I do" sh cry isakmp sa" nothing shows up.
 The configurations are attached.

Thanks in Advance
23508793-ee-PIX-525.txt
0
Comment
Question by:alimohammed72
2 Comments
 
LVL 79

Expert Comment

by:lrmoore
ID: 21854829
>crypto map outside_map 100 set transform-set ESP-3DES-SHA
You need an isakmp policy on each side that matches the transform-set
Example:

crypto isakmp policy 15
 authentication pre-share
 encryption 3des
 hash sha
 group 2
 lifetime 86400
0
 
LVL 3

Accepted Solution

by:
AugustTen earned 500 total points
ID: 21854949
No you do not need an isakmp policy that match the transform set. They are independent and used in different phases of the negotiation.

But the ACL associated with the crypto map does not match, you specify a host on one side and a network on the other.

If this does not help, run "debug crypto isakmp" and "debug crypto ipsec" and attach the output here.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Suggested Solutions

Cisco Pix/ASA hairpinning The term, hairpinning, comes from the fact that the traffic comes from one source into a router or similar device, makes a U-turn, and goes back the same way it came. Visualize this and you will see something that looks …
This article assumes you have at least one Cisco ASA or PIX configured with working internet and a non-dynamic, public, address on the outside interface. If you need instructions on how to enable your device for internet, or basic configuration info…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now