IPSec VPN [7:26137]

2001-11-13 Thread Jim Bond
Hello, We've got 3660 at central office and PIX at satellite ofices to do IPSec VPN. Sometimes PIX couldn't connect 3660 and I have to reboot 3660 to make it work. I'm wondering if there is a easy way, say clear the connection, so I don't have to reboot the 3660? Thanks in advance. Jim

Re: IPSec VPN [7:26137]

2001-11-13 Thread Paul Lalonde
Hi Jim, Sounds like you're using an older IOS with flaky IPSEC code. Try upgrading to one of the 12.2 releases. Solves a lot of IPSEC issues. May also need a policy route map on the router side (internal interface) to set the DF bit to 0 (don't fragment). Will solve MTU issues with IPSEC