VPN between PIX 501 and PIX 506

[schack]

I'm trying to establish a site-to-site vpn between a PIX 506 and a PIX 501. I seem to have configured everything according to the instructions (from Cisco and from independent sources), but it doesn't work. From debugging both isakmp and ipsec it seems as it doesn't get past the isakmp, as only two ipsec events turn up. Anybody got a good idea about what's wrong?
Please state if you want more info and what it is!
Thanks in advance

 

[yizhar]

HI.

Yes, more info like the exact debug messages you get and both devices configuration will help.
Pix OS versions is also important, and if you get syslog error messages.

You can try to generate a sample config with pixcript (from my signature), then compare it to yours and see if you missed anything.

Check also that your ISP isn't blocking anything, that there is no other NAT device in the way (ISP router?), and that both devices can ping each other. if applicable and you didn't solve it other way, try to establish the VPN in a lab when both pix devices are connected back to back or something like that.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar