After upgrading PIX 506E don't resolve VPN connection

In article , jaisol wrote: :Few days ago I posted same message incorrectly. :Really I want to say "Once upgraded I can NOT connect with VPN." but I :missed NOT word.

You didn't respond to my DES + SHA shot in the dark ?

Sorry, I forgot to answer.

You are refering to:

I'll take a shot in the dark: The OP does not have the 3DES license, so s/he must be using DES encryption for the VPN. Somewhere between 6.1 and 6.3, support was dropped for the combination of DES and SHA, so the OP may need to change transform sets to esp-des esp-md5-hmac

I'm a newbie PIX user and I didn't understand what I have to do.

I appreciate you can be more specific when you mention "so the OP may need to change transform sets to esp-des esp-md5-hmac "

Thanks again.

Check your configuration. There are two places where you can define encrypting and hashing algorithms. The lines you are looking for look probably like these:

1. Crypto map settings

a) crypto ipsec transform-set [keyword] esp-des esp-sha-hmac b) crypto ipsec transform-set [keyword] esp-des esp-md5-hmac crypto map [name] [number] set transform-set [keyword]

1. Isakmp settings

isakmp policy [number] encryption des a) isakmp policy [number] hash sha b) isakmp policy [number] hash md5

As you can see it is possible to use two different hashing algorithms: sha and md5. If your current combination is des and sha (a), then you might want to change to des/md5 (b). Note that the changes must be done at both ends.