Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

VPN configuration terminates SSH session

Can anyone tell me why my SSH session into a PIX gets terminated when I apply a crypto map command on the firewall I'm accessing?

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: VPN configuration terminates SSH session

If you're accessing this via the outside interface, then you have to be very careful about adding crypto map commands, cause you can easily lock yourself out of the PIX and stop the PIX from passing any traffic.

If there is an existing crypto map on the PIX and you're adding another one, you have to unapply the crypto map first, add the new one in (making sure it's complete) then re-apply it.

If there is no existing map, then make sure you add the crypto map in full, including the access-list, and only then apply the crypto map to the interface.

If you think you're doing it right, reply back with exactly what you're typing in and we'll see what you're missing.

2 REPLIES
Cisco Employee

Re: VPN configuration terminates SSH session

If you're accessing this via the outside interface, then you have to be very careful about adding crypto map commands, cause you can easily lock yourself out of the PIX and stop the PIX from passing any traffic.

If there is an existing crypto map on the PIX and you're adding another one, you have to unapply the crypto map first, add the new one in (making sure it's complete) then re-apply it.

If there is no existing map, then make sure you add the crypto map in full, including the access-list, and only then apply the crypto map to the interface.

If you think you're doing it right, reply back with exactly what you're typing in and we'll see what you're missing.

New Member

Re: VPN configuration terminates SSH session

Thanks for replying. That answers my question perfectly.

93
Views
0
Helpful
2
Replies
CreatePlease login to create content