Configure EZVPN Network Extension mode that allows 7940 phone to connect te

[tonyam98]

I would like to setup my 501 with ezvpn in network extension mode to:

1.Establish vpn tunnel to PIX HUB

2. Establish voip 7940 to call manager

This what I have applied on the pix 501

vpnclient server 6.x.x.x

2.vpnclient mode network-extension-mode

3 . vpnclient nem-st-autoconnect …. Specifies to automatically initiate IPSec

data tunnels when split tunneling is configured. Note that IPSec data tunnels

are automatically initiated and sustained when in network extension mode,

except when split tunneling is configured.

4. vpnclient username (your username) password (password)

5. vpnclient vpngroup HARDWARE password xxxxx

6. vpnclient enable

[travis-dennis_2]

I am sure that someone is looking at your config and will post soon but for the rest of us why don't you tell us what the phone is doing and if the tunnel is even coming up or not?

Thanks,

Travis

[tonyam98]

Itis doing nothing at the moment ...previously when the hub pix 6.3 (4) the phone recieved a 10.60.60.x ip address ... below is this dhcp pool

dhcpd address 192.168.52.2-192.168.52.33 inside

dhcpd dns 206.13.28.12

dhcpd lease 3600

dhcpd ping_timeout 750

dhcpd auto_config outside

dhcpd option 150 ip 10.60.60.50

dhcpd enable inside

[travis-dennis_2]

Is the tunnel up and staying up? If so what happens when you hard code the IP address, TFTP server etc into the phone? Does it work then?