VPN pix 506 - 501 fall down

Discussion in 'Cisco' started by Fwed, Aug 30, 2005.

  1. Fwed

    Fwed Guest

    Hi,

    I have a vpn between 2 pix, one 506 and one 501.

    My problem is the vpn fall down but we see the vpn is still alive ...

    If i make a "sh crypto isakmp sa", we can see that 1 tunnel was create.

    The configuration seems good.

    Someone have an idea to resolve the problem ?

    Thanks a lot,

    Fwed

    -------crypto 506 conf-------------
    sysopt connection permit-ipsec
    crypto ipsec transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
    crypto map outside_map 30 ipsec-isakmp
    crypto map outside_map 30 match address outside_cryptomap_30
    crypto map outside_map 30 set pfs group5
    crypto map outside_map 30 set peer 2xx.xxx.xxx.xxx
    crypto map outside_map 30 set transform-set ESP-AES-256-SHA
    crypto map outside_map interface outside
    isakmp enable outside
    isakmp key ******** address 2xx.xxx.xxx.xxx netmask 255.255.255.255
    no-xauth no-config-mode
    isakmp policy 30 authentication pre-share
    isakmp policy 30 encryption aes-256
    isakmp policy 30 hash sha
    isakmp policy 30 group 5
    isakmp policy 30 lifetime 86400
    -------crypto 506 conf-------------

    -------crypto 501 conf-------------
    sysopt connection permit-ipsec
    crypto ipsec transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
    crypto map outside_map 20 ipsec-isakmp
    crypto map outside_map 20 match address outside_cryptomap_20
    crypto map outside_map 20 set pfs group5
    crypto map outside_map 20 set peer 1xx.xxx.xxx.xxx
    crypto map outside_map 20 set transform-set ESP-AES-256-SHA
    crypto map outside_map interface outside
    isakmp enable outside
    isakmp key ******** address 1xx.xxx.xxx.xxx netmask 255.255.255.255
    isakmp policy 20 authentication pre-share
    isakmp policy 20 encryption aes-256
    isakmp policy 20 hash sha
    isakmp policy 20 group 5
    isakmp policy 20 lifetime 86400
    -------crypto 501 conf-------------
     
    Fwed, Aug 30, 2005
    #1
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.