Crypto Map statement causes drop 1

[hoinvip]

Has anyone heard of this? I was remotely configuring one of our PIX'es earlier today to add another VPN tunnel, when I added the following statement:

crypto map fred 30 ipsec-isakmp

My session froze and I got kicked out.... any ideas?

This is a PIX515E running PIX Version 6.1(3)

TIA

HoinviP

http://www.global-net.co.uk

 

[tbissett]

There is a well-known bug in PIX code regarding adding to existing crypto maps. When you add an entry to a crypto map that is already bound to an interface, all traffic stops processing through that interface. Does this sound familiar?

The workaround is to remove the crypto map from the interface first, add the entry, then reapply the crypto map to the interface.

As far as I know, the bug still exists in even the newest versions of the firewall code.

 

[hoinvip]

Thanks for the advice - that's exactly the problem!

I'll remember this for the next time we add a vpn connection.

Thanks again.

HoinviP