Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations IamaSherpa on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

PIX and VPN problem

Status
Not open for further replies.

andyjo

MIS
Mar 12, 2001
4
US
I am trying to get a VPN client to work with a PIX 5.1 firewall. I have it configured per the Cisco site. When I try to ping a inside host from the remote client I get this in debug on the PIX firewall and the SA is never established.

crypto_isakmp_process_block: src 63.107.115.157, dest 216.236.81.125
OAK_MM exchange
ISAKMP (0): processing SA payload. message ID = 0

ISAKMP (0): Checking ISAKMP transform 1 against priority 8 policy
ISAKMP: encryption DES-CBC
ISAKMP: hash MD5
ISAKMP: default group 1
ISAKMP: auth pre-share
ISAKMP (0): atts are acceptable. Next payload is 0
ISAKMP (0): SA is doing pre-shared key authentication using id type ID_IPV4_ADDR
return status is IKMP_NO_ERROR
ISAKMP (0): retransmitting phase 1...
crypto_isakmp_process_block: src 63.107.115.157, dest 216.236.81.125
ISAKMP (0): retransmitting phase 1...
crypto_isakmp_process_block: src 63.107.115.157, dest 216.236.81.125
ISAKMP (0): deleting SA
ISADB: reaper checking SA 0x810f6bc8, conn_id = 0 DELETE IT!

crypto_isakmp_process_block: src 63.107.115.157, dest 216.236.81.125
OAK_MM exchange
ISAKMP (0): processing SA payload. message ID = 0

ISAKMP (0): Checking ISAKMP transform 1 against priority 8 policy
ISAKMP: encryption DES-CBC
ISAKMP: hash MD5
ISAKMP: default group 1
ISAKMP: auth pre-share
ISAKMP (0): atts are acceptable. Next payload is 0
ISAKMP (0): SA is doing pre-shared key authentication using id type ID_IPV4_ADDR
return status is IKMP_NO_ERROR
ISAKMP (0): retransmitting phase 1...
ISAKMP (0): retransmitting phase 1...
ISAKMP (0): deleting SA
ISADB: reaper checking SA 0x810f6bc8, conn_id = 0 DELETE IT!

Any ideas as to what this means?? Thanks in advance...
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top