Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Problem to establish vpn site2site between vpn concentrator3000 and pix

I need help in solving the issue with vpn connectivity between site to site with vpn concentrator 3000 and pix 501.

We have a static ip at the concentrator end(Central Site) and dynamic ip at the pix side which is the Remote site. Pix is configured for vpn with pre-shared key and the problem is how do we assign the same transform-set at the concentrator side for the vpn to form. Also is the issue of assigning an IKE peer address in LAN-to-LAN ipsec as the remote end is having dynamic ip. How do I go about it??


Re: Problem to establish vpn site2site between vpn concentrator3

The "transform-set" equivalent on the VPN 3000 is configured under;

Configuration | Tunneling and Security | IPSec | LAN-to-LAN | Add or Modify

In the figure 15-9, the options under "Authentication" and "Encryption" are used to define the transform sets, that is, how the user date will be authenticated and encrypted.