Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Pix to Concentrator VPN

Hi people,

I?m trying to make a vpn a Pix 501 ver 6.3(4) to 3000 vpn concentrator, the phase I is right, but phase II just start and debug says ?? request timer fired??, I was trying to get some informstion about that but is not useful.

can you help me please

Martin C.

1 REPLY
New Member

Re: Pix to Concentrator VPN

Hello Martin,

Ensure all SA's are exact match between peer's.

Also on the pix initiate a "clear ipsec sa" and "clear isakmp sa" to force tunnel renegociate.

You should replace the netmask in then following command:

isakmp key ******** address x.x.x.x netmask 255.255.255.0

with 255.255.255.255

Then check if no-xauth and no-config-mode parameters are required.

Mike

96
Views
0
Helpful
1
Replies
CreatePlease login to create content