Hello,

I'm trying to configure IPSec between 3000
Concentrator VPN client (ver 3.0) to PIX (ver 6.01)
and I follow the sample config from: 
http://www.cisco.com/warp/public/110/pix3000.html

As soon as I get connected, I lost connection, I can't
even ping my gateway. If I disconnect VPN, connection
comes back. Here is my configuration:
PIX Version 6.0(1)
access-list 101 permit ip 172.16.1.0 255.255.255.0 
172.16.2.0 255.255.255.0 
ip address outside 63.47.199.254 255.255.255.248
ip address inside 172.16.1.1 255.255.255.0
ip local pool bigpool 172.16.2.1-172.16.2.254
global (outside) 1 interface
nat (inside) 0 access-list 101
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
route outside 0.0.0.0 0.0.0.0 63.47.199.249 1
sysopt connection permit-ipsec
no sysopt route dnat
crypto ipsec transform-set myset esp-des esp-md5-hmac 
crypto dynamic-map dynmap 10 set transform-set myset
crypto map mymap 10 ipsec-isakmp dynamic dynmap
crypto map mymap client configuration address initiate
crypto map mymap client configuration address respond
crypto map mymap interface outside
isakmp enable outside
isakmp identity address
isakmp policy 10 authentication pre-share
isakmp policy 10 encryption des
isakmp policy 10 hash md5
isakmp policy 10 group 2
isakmp policy 10 lifetime 86400
vpngroup vpn3000 address-pool bigpool
vpngroup vpn3000 dns-server 207.69.188.185
207.69.188.186
vpngroup vpn3000 wins-server 172.16.1.20
vpngroup vpn3000 default-domain Pisco
vpngroup vpn3000 idle-time 1800
vpngroup vpn3000 password ********

Thanks in advance.

Jim



__________________________________________________
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail
http://personal.mail.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=11225&t=11225
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to