Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Problem vpn Pix - Firewall nokia

I have a tunnel vpn between a firewall pix 7.24 and a firewall nokia at other company.

I managing the frewall pix and another company the firewall nokia.

In the pix I have the following messages:

with the command:

sh crypto isakmp sa

1 IKE Peer: 1.1.1.4

Type : L2L Role : responder

Rekey : no State : MM_REKEY_DONE_H2

2 IKE Peer: 1.1.1.4

Type : L2L Role : responder

Rekey : yes State : MM_ACTIVE_REKEY

When it works properly show the following message

1 IKE Peer: 1.1.1.4

Type : L2L Role : initiator

Rekey : no State : MM_ACTIVE

What I can do to solve the problem?

1 REPLY
Silver

Re: Problem vpn Pix - Firewall nokia

Check that you are not doing the extended ping. Asa does not permit extended pings and you will have to actually pass traffic through the asa from any device connected on the inside for it to encrypt the traffic.

396
Views
0
Helpful
1
Replies
CreatePlease login to create content