Pix to Concentrator VPN

[mcelec]

Hi people,

I?m trying to make a vpn a Pix 501 ver 6.3(4) to 3000 vpn concentrator, the phase I is right, but phase II just start and debug says ?? request timer fired??, I was trying to get some informstion about that but is not useful.

can you help me please

Martin C.

[mpalardy]

Hello Martin,

Ensure all SA's are exact match between peer's.

Also on the pix initiate a "clear ipsec sa" and "clear isakmp sa" to force tunnel renegociate.

You should replace the netmask in then following command:

isakmp key ******** address x.x.x.x netmask 255.255.255.0

with 255.255.255.255

Then check if no-xauth and no-config-mode parameters are required.

Mike