Probably it's me being stupid and there's a very simple explanation, but everytime I enter the following:
crypto map testmap 10 ipsec-isakmp
it accepts it fine but then when I sh run it it not in the config! I can't see how to sh crypto map in this version (PIX 7.06) but I think it's marked as incomplete. In any case the PIX doesn't see any interesting traffic and no tunnel is even attempted to be built.
Anyone come across this before? I'm not used to this PIX version so maybe I'm missing something.
p.s. also meant to say that the rest of the crypto map entries go in fine, and that I did a test VPN yesterday which worked.
'crypto map testmap 10 ipsec-isakmp' is incomplete command. PIX software should spit out an error saying incomplete command. If it doesn't then it has to be caveat in that version and that's the reason why you don't see that in the running configuration.
Thank you for your response Sundar. Actually I realised that this entry was not required like it was in older versions. I had a problem elsewhere in my config, which is why the tunnel was not coming up.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...