cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
419
Views
0
Helpful
7
Replies

VPN to 5GT

crmljc1976
Level 1
Level 1

Ive setup config for a VPN to connect to our head office Netscreen 5GT. It doesnt look like the Cisco is initiating a connection at all and Im not sure why. Here is the config, hope someone can help?

7 Replies 7

a.alekseev
Level 7
Level 7

deb crypto isakmp

deb crypto ipsec

ping 10.0.0.1 source 192.168.0.1

sh crypto isa sa

sh crypto ipsec sa

the vpn isnt even up. dont i need to establish a vpn from cisco to netscreen first.

ok :)

this traffic

"access-list 103 permit ip 192.168.0.0 0.0.0.255 10.0.0.0 0.0.255.255" should bring you VPN connection UP.

I already have this line in my config. And it doesnt work.

so start troubleshooting

deb crypto isakmp

deb crypto ipsec

# try to bring the VPN UP.

ping 10.0.0.1 source 192.168.0.1

show the collected debugs and also the output of following commands

sh crypto isa sa

sh crypto ipsec sa

ok i'll try do that, but will be tomorrow now, can you have a look tomorrow please?

yes, I do.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: