Be sure that NTP will not be an issue. PIX's don't support it, but I'm
pretty sure the Raptor does.
Far from an expert
Phil
----- Original Message -----
From: "Moe Tavakoli" <[EMAIL PROTECTED]>
To: "'Sajid Karim'" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Tuesday, April 03, 2001 10:05 PM
Subject: RE: PIX and Raptor
> The problem I have run into in the past in a multi vendor setup is the
> following:
>
> Make sure you know what the elements are in the ISAKMP and IPSEC portion
of
> the setup. IsaKMP: Group, Hash and Encryption. IPSEC: ESP, AH and all
> the possible combinations (in Cisco 1 AH and up 2 ESP with only 1 des/3des
> ESP statement.)
>
> Also know what the defaults are (for ISAKMP in Cisco it's Group 1 and Hash
> MD5) Sometimes you forget the defaults just because they don;t show up in
> run-conf.
>
> Also in the cry map in Cisco there is a hmac switch at the end (specially
> the commonly used esp-md5-hmac) which other vendors don;t list the hmac
> portion..
>
> Thats all I can think of.
>
> Moe.
>
> -----Original Message-----
> From: Sajid Karim [mailto:[EMAIL PROTECTED]]
> Sent: Monday, April 02, 2001 10:42 AM
> To: [EMAIL PROTECTED]
> Subject: PIX and Raptor
>
>
> All:
>
> Looking for any caveats in establishing VPN tunneling between PIX and
> Raptor firewall?
> Any implementation tips using IPSEC or other features.
>
> Thanks.
_________________________________
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
