I think it is a bug:(

[Oh]

Hi, friends
I meet a strange thing, maybe it's a bug.
I can run "clear access-list 100" and "clear access-list 110" at local PIX by telnet, but when I try to do same thing in remote PIX by SSH, the first clear done, but the next make the PIX dead. even after reboot, I can't ping the remote PIX.(That PIX use pppoe at outside port) So I have to take a bus to save my PIX
Somebody here meet the same thing like me? I think it's better use command like "no access-list 100 XXX........" including everything in details,it will safe. I hope u read my message and take care about such things,or maybe you have to take a plane to save your PIX

oh

 

[yizhar]

HI.

I have found similar problems when trying to configure IPSec VPN when I'm connected with SSH to outside.
If not carefully placing the commands in the correct order you can easily get hang, and the pix log will say something like "Packet is not encrypted - bla bla..."

Best practice - if you're doing remote configuration, have someone reachable by phone that can restart if something goes wrong.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar