Pix 501 VPN question

johnroche_2 · ‎02-06-2008

Hi

I have two pix 502 firewalls with an IPSEC L2L tunnel between them. The L2L tunnel establishes and is working fine. I added the dynamic VPN for road warriors to connect in but I get the following error

IPSEC(validate_transform_proposal): invalid local address 89.19.83.212

IPSEC(validate_proposal): transform proposal (prot 3, trans 3, hmac_alg 2) not s

upported

Anyone got any ideas

john

husycisco · ‎02-06-2008

Hi John

Please attach your config

Regards

johnroche_2 · ‎02-06-2008

config attached as requested

husycisco · ‎02-06-2008

Try this

crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-md5-sha

clear config crypto dynamic-map outside_dyn_map 20

crypto dynamic-map outside_dyn_map 10 set transform-set ESP-3DES-SHA

crypto dynamic-map outside_dyn_map 10 match address outside_cryptomap_dyn_20

isakmp policy 10 authentication pre-share isakmp policy 10 encryption 3des

isakmp policy 10 hash sha

isakmp policy 10 group 2

isakmp policy 10 lifetime 86400

run clear xlate to reset current translations (internet and connections will be down for a second) then try again.