Solved: site to site with 501

manilla77 · ‎11-12-2008

Long time reader, first time post.

I am trying to create a site-to-site tunnel between two 501 PIXs. I have rummaged through multiple forums and Cisco white papers and I cannot create this tunnel. Any help would be appreciated.

I have done a debug crypto ipsec and debug crypto isakmp. I get nothing on both sidesâ€¦just a cursor blinking back at me.

Attached are my configs.

thanks in advance,

ajagadee · ‎11-12-2008

Hi David,

Couple of things:

1. Make sure that you have logging enabled to see the debugs.

Logging on

Logging Buffered Debugging

2. Also, where are you initiating the IPSEC Traffic. It has to be from a host behind the Pix 501. You cannot initiate IPSEC Traffic from the pix itself.

Regards,

Arul

*Pls rate if it helps*

http://www.cisco.com/en/US/docs/security/pix/pix63/command/reference/gl.html#wp1028090

View solution in original post

ajagadee · ‎11-12-2008