|
Question : Adding a 5th Site to Site VPN Netopia to PIX
|
|
I need some assistance in adding another site to site VPN (4 already exist) using a Netopia 910 to a PIX 506e? I fumbled thru some preliminaries, but the PIX complains (using the GUI) when trying to finalize things.
"ERR - crypto map -dyn-map20 set peer nnn.nnn.nnn.nnn WARNING: this crypto map is incomplete - to remedy the situation add a peer and a valid access-list to this crypto map."
This seems to be a known issue, but, being unfamiliar with the Cisco CLI, I am hesitant to make any changes, especially since there are these dire warnings, in most things I have found, about how *all* traffic will cease, blah, blah.
joe a.
|
Answer : Adding a 5th Site to Site VPN Netopia to PIX
|
|
Sorry, my last question was not formulated ok. Are you using fixed or dynamic IPs ? on what ends ? What Equipment is intiating the conection ? The Cisco or the Netopia
This error appear when the Cisco is intiating the conection and is missing the remote Ip address and the ip ranges that shuold go trough the VPN
This is what I use to start a vpn from a cisco pix... crypto map newmap ipsec-isakmp crypto map newmap match address crypto map newmap set peer crypto map newmap set transform-set myset
seems like you are missing line 2,3
If Pix is receiving the conecttion, config is a little different..
|
|
|
|