PIX - Site2Site - Dynamic IP - Changes

[maynarja]

Site to Site using PIX and pfSense

pfSense is dynamic and intiates the VPN
PIX is Static

pfSense ------- INTERNET ------- PIX

If pfeSense's IP changes the tunnel is dropped which is expected but pfSense cannot connect without a reboot. PIX sees the attempt but blocks it with an ACL.

I assume that pfSense is sending the SA with a changed IP and the PIX identifies that as an attempt to spoof the tunnel.

Is there anything I can do on the PIX side or do I have to reduce the SA's lifetime to minutes and what consequence would that be... much more traffic and.....

 

[NetworkGhost]

How is your config set up on the PIX for Crypto?

Free Firewall/Network/Systems Support-

http://firewalls.ath.cx