PIX with dynamic IP vpn connection to cisco concentrator 3005

Unanswered Question
Mar 1st, 2007

Hi all,

I got a hopefully easy to solve problem.

I got a PIX 501 which is directly connected to an ADSL Modem.

It gets the IP from the provider and I am able to ping official ip addresses in the internet.

THe pix should build a vpn tunnel to a cisco 3005 concentrator.

So I created a group, username and filters for network access.

I testet it with a static ip and it works.

But when I configure the pix for dynamic IP it does not build the vpn tunnel.

On the concentrator I get the following message:

10830 03/01/2007 21:54:51.070 SEV=4 IKEDBG/65 RPT=35066 84.60.xxx.xxx

Group [vpn]

IKE AM Responder FSM error history (struct &0x3b44ac0)

<state>, <event>:

AM_DONE, EV_ERROR

AM_WAIT_MSG3, EV_TIMEOUT

AM_WAIT_MSG3, NullEvent

AM_SND_MSG2, EV_CRYPTO_ACTIVE

What can be the problem ?

Attached the pix config.

(the permit ip any is only for testing)

Thank you all

Kai

Attachment: 
I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.

Actions

This Discussion