cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
230
Views
0
Helpful
1
Replies

Configuring a PIX 501 for Cable Modem...but unable to build tunnel

bschmi
Level 1
Level 1

Remote PIX 501 should tunnel to another PIX for customer network access. Configured for DHCP setroute, I verified map isakmp keys on both ends, and PIX access-lists are correct. I receive a DHCP address from the cable provider, but then the tunnel is never completed. Debugging shows continuous Phase 1 retransmissions. Oddly, even though the tunnel isn't up, I can console in to the PIX and reach anywhere inside the customer's network. From a PC connected to the PIX, attempting to ping the customer's network or hit the internet is unsuccessful.

ANY IDEAS WOULD BE GREATLY APPRECIATED!

1 Reply 1

Patrick Laidlaw
Level 4
Level 4

Hello,

Can you post your config. It's alwasy easier to troubleshoot looking at a config other wise everything is just guess work.

Check that icmp is permitted.

Check that your ISAKMP keys are the same.

Does this pix 501 have a static IP?

Patrick

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: