Pix6.3 can not initiate isakmp packet

Unanswered Question
May 9th, 2008


I have pix515E and 2 pix535(failover), both running on pix6.3, every time when I build up L2L vpn tunnel with the other end, I can not through ping, from my encrypto server to the other side encrypto server, to initiate phase 1 isakmp SA, instead the other side can ping my encrypto server to initiate the vpn tunnel.

I will very appreciate you can help me with this

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Richard Burts Sat, 05/10/2008 - 09:19


Your description of the symptoms sounds like there is some difference between the access list that you use to identify traffic for the VPN tunnel and the access list being used on the other end. Can you post your access list (and perhaps the other parts of the config) and the corresponding parts from the other end? This may help us to identify the cause of your issue.




This Discussion