Pix VPN

[kyokiyota]

Hello everyone:

I'm New.

I've a problem with a VPN between Pix 515 and cisco 827-4V ADSL.

The end point (827) has dynamic Ip and I Can't create the dynamic ipsec tunnel.

Can someone Helpme Please I'm desperate.

Here's the configuration:

Pix 515

access-list mty permit ip x.x.x.x 255.255.252.0 x.x.x.x 255.255.252.0

crypto ipsec transform-set DSL esp-des esp-sha-hmac
crypto dynamic-map lincoln_dsl 1 match address mty
crypto dynamic-map lincoln_dsl 1 set transform-set DSL

isakmp key xxxxxxxx address 0.0.0.0 netmask 0.0.0.0

isakmp policy 10 authentication pre-share
isakmp policy 10 encryption des
isakmp policy 10 hash sha
isakmp policy 10 group 1
isakmp policy 10 lifetime 86400


Router 827-4V

crypto isakmp policy 10
authentication pre-share
crypto isakmp key xxxxxxx address x.x.x.x 255.255.255.240
!
crypto ipsec security-association lifetime seconds 28800
!
crypto ipsec transform-set mty-mx esp-des esp-sha-hmac
!
crypto map mexico 50 ipsec-isakmp
set peer x.x.x.x
set transform-set mty-mx
match address 104

Thanks

Bye

 

[themut]

Use the link below as a guideline:

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a0080094a87.shtml

 

[kyokiyota]

Well it is exactly what I am doing but nothing happens.

 

[themut]

No it is not...

crypto dynamic-map lincoln_dsl 1 match address mty

is not part of the configuration explained on the link.

 

[yizhar]

HI.

Another option is using "Easy VPN Remote".
The pix will act as "VPN Server" and the 827 router as "VPN client".
This requires current OS versions on the devices.

It is not a better option than the regular one, but it is another alternative that you can choose.

Bye


Yizhar Hurwitz

http://teachers.sivan.co.il/yizhar

 

[kyokiyota]

That´s a good solution but the 827 doesn´t support easy VPN.

If someone has Dynamic VPN configurated it before on a Pix Please let me know.

Thanks a lot

Bye

 

[kyokiyota]

Yizhar:

I´ve configurated easy VPN server on PIX and Easy VPN network-extension on the 827. I´ve the tunnel but i cant send or recive trafic on both sites.

What I'm Doing wrong?

Thanks a lot.