PIX to Router vpn can only be started from one side

[mikoun]

Hi,

I have a vpn, from a pix 512 to cisco router 3745 with Firewall IOS,
when i ping from the pix side, the vpn comes up, but when i clear it and i try to establish it from the router side, i can't and i don't receive even the isakmp and ipsec messages on my pix debug interface, any help please for this problem?

Thanks

 

[muckermucker]

Look for something like dial-on-demand. It will be a tick box somewhere.

This is probably it and it is ticked on one router (which works) and not the other.

Your VPN connect "on demand" so when you try to ping the remote subnet the router knows this accross the VPN so it connects it but this only happens if the tick box above is set. If it isn't then the VPN is never automatically established and must be done manually (like on the other router).

Post back your results.

Take a look at my IT blog guides, knowledgebase and technical resources at

http://think-like-a-computer.com