cisco pix vpn to cyberguard vpn

[kmgonzalez]

I have a site to site tunnel but can't get it to the QM_idle status. Keeps erroring with OAK_ADDR. What does this mean? I think I am not negogiating the ipsec correctly?

[thomas.chen]

yes, IPSec policy is not negogiated.

Try these steps:

Clear the SA's using the cmd "clear ipsec sa" and/or "clear isakmp sa".

Remove the crypto maps and then put them back again.

Try this link:

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_tech_note09186a00800949c5.shtml

[kmgonzalez]

did not work

dst src state pending created

outside_int 69.238.9.15 OAK_CONF_ADDR 0 0

[alina_scott]

Cyberguard has a new firewall VPN appliance for small and midsize businesses.