Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations SkipVought on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

PIX isakmp statement 1

Status
Not open for further replies.

willscarlet

Technical User
Jul 10, 2002
30
0
0
GB
We have a site-to-site Cisco PIX VPN. PIX506 6.3(3) at one end and PIX520 6.2(1) at the other.

The ISP at the 506 end is changing which means a new IP range.

Mostly its a case of find old IP addresses and replace with new but I have a problem with the isakmp statement.

The line in the 520 is clear enough
isakmp ******** address a.b.c.d netmask 255.255.255.255

Changing the IP is no problem but I will have to set a new key in place of ******** as I don't have a record of it.

That too is no problem but I can't see what to do in the 506 end to match the key. There is an isakmp line pointing back to the IP of the 520; is that the line I need to replace using the new key?

I hope I have explained the problem sufficiently and any help is much appreciated.
 
Yes. Make up a new key and replace both lines.

506:
isakmp mynewsecretkey address ip.of.pix.520 ...

520:
isakmp mynewsecretkey address ip.of.pix.506 ...

 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top