PIX VPN ICMP problem

rjphillips · ‎01-09-2002

Has anyone seen this message from a PIX before

IPSEC(ipsec_cipher_handler): ERR: bad pkt 10.0.0.2->192.168.1.2

This occurs when a device 192.168.1.2 tries to ping device 10.0.0.2. All other traffic seems to be working fine across the VPN, just ICMP won't work and is generating these errors.

2*PIX 515R's running version 6.11 are used for the VPN. Windows 2000 servers are being used to for ICMP.

Any assistance would be appreciated.

Rhodri

ciscomoderator · ‎01-15-2002

Often times complex troubleshooting issues are best addressed in an interactive session with one of our trained technical assistance engineers. While other forum users may be able to help, it’s often difficult to do so for this type of issue.

To utilize the resources at our Technical Assistance Center, please visit http://www.cisco.com/tac and to open a case with one of our TAC engineers, visit http://www.cisco.com/tac/caseopen

If anyone else in the forum has some advice, please reply to this thread.

Thank you for posting.