EZVPN and Site to Site VPN running on same pix

[glenthms]

Is it necessary to always enable "no-xauth no-config-mode" after the isakmp key statement for s2s VPN if you are also running EZVPN with Extended Authentication?

[aashish.c]

Hi

No, it is not necessary, s2s vpn works fine with isakmp key and address info only.

regards

aashish C

[glenthms]

Thanks for answering. Turns out the remote end device was a non Cisco VPN endpoint for the s2s vpn. I created another site to site vpn to another location of ours which was another pix and I didnt have this problem. So it seems it may be necessary for non Cisco devices to enable this feature.

[jackko]

not too sure about lan-lan and ezvpn on the same pix. i do actually have the keyword.

nonetheless, i'm pretty sure the keyword is required for lan-lan and remote vpn on the same pix.