PIX 506E connection to Juniper and Symantec

patricio2626 · ‎03-05-2008

Hi all,

I'm looking for some words of wisdom here... I'm trying to connect a Cisco PIX 506E to a Juniper SSG-5 and a Symantec Gateway 320 via IPSec VPN over public internet, and nothing is happening. I know most people here may not know much about these other two products, but can anyone maybe point me in the right direction, or have any ideas as to why I can't get them to talk?

-Patrick

didyap · ‎03-11-2008

Check if you have configured the following properly:

1. Internet Key Exchange (IKE) proposal on both devices.

2. IPsec parameters on both devices.

3. Specify network ranges on both devices for the passage of traffic across the proposed tunnel.

patricio2626 · ‎03-21-2008

Thanks for the suggestions. It turns out it was the rule order; I had a general 'allow' policy above the 'tunnel' policy on the other device, so it was trying to send that traffic unencrypted, and the packets with private IP address destinations were, of course, promptly dropped.

-patrick