VPN site-to-site not working with PIX 501s

Discussion in 'Cisco' started by John, May 31, 2006.

  1. John

    John Guest

    I have two PIX 501s and they were connected via a vpn. All of a sudden
    the circuit dropped and after rebooting both devices, I ahve not been
    able to reestablish the VPN. I changed the PRE-SHARE key on both and
    changed the transform sets, but no change. Once someone gave me a
    command to reset the crypto key. I am not sure if this is what I need
    to do. Does anyone know the process to do that or can you offer some
    troubleshooting advice?


    John, May 31, 2006
    1. Advertisements

  2. John

    Vikas Guest

    Hello John,

    When a tunnel drops suddenly both the device will have mismatched
    states of the crypto SA and SPD.
    The best way is to clear the garbage SA in both the PIX and ping.

    The command to clear isa sa would be
    clear crypto isakmp sa (cle cry isa sa)
    and for ipsec
    clear crypto ipsec sa (cle cry ipse sa)

    Hope this will help
    Vikas, May 31, 2006
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.