Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

PIX 515 7.05(Static IP), 2821 12.4(PPPoE, Dynamic IP) site to site VPN

Dear all,

I need to establish a VPN between one static IP(PIX) and one dynamic IP (2821), I?ve tried many times but still no luck. Attachments are the configuration file of my PIX and router. Any help will be appreciated. Thank you!

Here is my debug info from my 2821

Jan 24 05:59:30.363: ISAKMP:(0:0:N/A:0): retransmitting phase 1 MM_NO_STATE

Jan 24 05:59:30.363: ISAKMP:(0:0:N/A:0): sending packet to 222.xxx.xxx.33 my_port

500 peer_port 500 (I) MM_NO_STATE

Jan 24 05:59:36.579: ISAKMP:(0:0:N/A:0):purging SA., sa=46F3BE00, delme=46F3BE00

Jan 24 05:59:36.815: ISAKMP: received ke message (3/1)

Jan 24 05:59:36.815: ISAKMP:(0:0:N/A:0):peer does not do paranoid keepalives.

Jan 24 05:59:36.815: ISAKMP:(0:0:N/A:0):deleting SA reason "P1 delete notify (in

)" state (I) MM_NO_STATE (peer 222.xxx.xxx.33)

Jan 24 05:59:36.815: ISAKMP:(0:0:N/A:0):peer does not do paranoid keepalives.

Jan 24 05:59:36.815: ISAKMP:(0:0:N/A:0):deleting SA reason "P1 delete notify (in

)" state (I) MM_NO_STATE (peer 222.xxx.xxx.33)

Jan 24 05:59:36.815: ISAKMP: Unlocking IKE struct 0x470D7CEC for isadb_mark_sa_d

eleted(), count 0

Jan 24 05:59:36.815: ISAKMP: Deleting peer node by peer_reap for 222.xxx.xxx.33:

470D7CEC

Jan 24 05:59:36.815: ISAKMP:(0:0:N/A:0):deleting node -1571671752 error FALSE re

ason "IKE deleted"

Jan 24 05:59:36.815: ISAKMP:(0:0:N/A:0):deleting node -96530539 error FALSE reas

on "IKE deleted"

Jan 24 05:59:36.815: ISAKMP:(0:0:N/A:0):deleting node -1163248164 error FALSE re

ason "IKE deleted"

Jan 24 05:59:36.815: ISAKMP:(0:0:N/A:0):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DE

L

Jan 24 05:59:36.815: ISAKMP:(0:0:N/A:0):Old State = IKE_I_MM1 New State = IKE_D

EST_SA

Jan 24 05:59:36.975: ISAKMP: received ke message (1/1)

Jan 24 05:59:36.975: ISAKMP:(0:0:N/A:0): SA request profile is (NULL)

Jan 24 05:59:36.975: ISAKMP: Created a peer struct for 222.xxx.xxx.33, peer port

500

Jan 24 05:59:36.975: ISAKMP: New peer created peer = 0x470D7CEC peer_handle = 0x

80000D31

Jan 24 05:59:36.975: ISAKMP: Locking peer struct 0x470D7CEC, IKE refcount 1 for

isakmp_initiator

Jan 24 05:59:36.975: ISAKMP: local port 500, remote port 500

Jan 24 05:59:36.975: ISAKMP: set new node 0 to QM_IDLE

Jan 24 05:59:36.975: ISAKMP: Find a dup sa in the avl tree during calling isadb_

insert sa = 46F3BBF0

Jan 24 05:59:36.975: ISAKMP:(0:0:N/A:0):Can not start Aggressive mode, trying Ma

in mode.

Jan 24 05:59:36.975: ISAKMP:(0:0:N/A:0):Looking for a matching key for 222.xx.xx

.33 in default

Jan 24 05:59:36.975: ISAKMP:(0:0:N/A:0): : success

Jan 24 05:59:36.975: ISAKMP:(0:0:N/A:0):found peer pre-shared key matching 222.

xx.xx.33

Jan 24 05:59:36.975: ISAKMP:(0:0:N/A:0): constructed NAT-T vendor-07 ID

Jan 24 05:59:36.975: ISAKMP:(0:0:N/A:0): constructed NAT-T vendor-03 ID

Jan 24 05:59:36.975: ISAKMP:(0:0:N/A:0): constructed NAT-T vendor-02 ID

Jan 24 05:59:36.975: ISAKMP:(0:0:N/A:0):Input = IKE_MESG_FROM_IPSEC, IKE_SA_REQ_

MM

Jan 24 05:59:36.975: ISAKMP:(0:0:N/A:0):Old State = IKE_READY New State = IKE_I

_MM1

Jan 24 05:59:36.975: ISAKMP:(0:0:N/A:0): beginning Main Mode exchange

1 REPLY
New Member

Re: PIX 515 7.05(Static IP), 2821 12.4(PPPoE, Dynamic IP) site t

Is there anyone can help me?

114
Views
0
Helpful
1
Replies