Pix 501 won't establish IKE / VPN

[TillmanZ]

Hi there,

first off I need to tell you that I am a complete cisco noob so please bear with me.
I simply want to create a site-to-site VPN but even after hours of trying to setup up this (rather simple) config I still cannot get the pix to actually try to establish the tunnel.
The way for me to see this is by using port-mirroring on the outside interface and listening with wireshark.

I am trying to get the following to work (using pseudo IPs):
Pix IP (inside): 82.200.93.82 255.255.255.240
Pix IP (outside): 193.185.172.110 255.255.255.0
Def.Route 193.185.172.1
Peer: 193.7.200.10 with pre-share key 1234
ESP-3DES-MD5-DH2 no PFS
local traffic: 82.200.93.85 255.255.255.255
remote traffic: 193.7.200.14 255.255.255.255

I would really like some way of manually initiating the tunnel and watching some kind of debug output at the same time.

Hope you guys have an idea because after 4 hours I am pretty frustrated about this.


Cheers,

Tillman

P.S. here is my config (removed the VPN setup since it wasn't working)

PIX Version 6.3(5)
interface ethernet0 auto
interface ethernet1 100full
nameif ethernet0 outside security0
nameif ethernet1 inside security100
enable password fetpUxxASxi5kzJ2 encrypted
passwd 2UCQnbNIdI.2KYOU encrypted
hostname pix
domain-name xxxxxxxxxxx.net
fixup protocol dns maximum-length 512
fixup protocol ftp 21
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
fixup protocol http 80
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol sip 5060
fixup protocol sip udp 5060
fixup protocol skinny 2000
fixup protocol smtp 25
fixup protocol sqlnet 1521
fixup protocol tftp 69
names
name 82.200.93.85 AladdinIntern
pager lines 24
logging on
logging trap debugging
logging host inside AladdinIntern
mtu outside 1500
mtu inside 1500
ip address outside 193.185.172.110 255.255.255.0
ip address inside 82.200.93.82 255.255.255.240
ip audit info action alarm
ip audit attack action alarm
pdm location AladdinIntern 255.255.255.255 inside
pdm logging informational 100
pdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
route outside 0.0.0.0 0.0.0.0 193.185.172.1 1
timeout xlate 0:05:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00
timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout sip-disconnect 0:02:00 sip-invite 0:03:00
timeout uauth 0:05:00 absolute
floodguard enable
sysopt connection permit-ipsec
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
crypto ipsec transform-set strong esp-3des esp-md5-hmac
isakmp enable outside
isakmp keepalive 10 10
isakmp log 5000
console timeout 0
terminal width 80
Cryptochecksum:4b53a74f4dfeb23fe125579532ed976e

 

[bubarooni1]

first of all, what equipment are you using at the end points?

secondly, let's see that vpn config. i see your transform set , but nothing else.

 

[TillmanZ]

Sorry, I should have updated this post long time ago.
There was no problem to begin with.
The issue that caused my irritation was the fact the the Pix will actually not establish the tunnel right away but only when it sees traffic. Unlike the other VPN gear I was working with before this led me to believe that the tunnel was not working.
So, everything is peachy... ;-)

Anyway, I appreciate your effort and response!

Best regards,

Tillman