1. Home
  2. Cisco Systems
  3. Dynamic to Static PIX to PIX VPN

Dynamic to Static PIX to PIX VPN

So this continues...I found that I can configure a DHCP public PIX with a PIX that has a static address so I setup the following 'minilab' at my desk to test'er out. I think I'm almost there but am having one snag that someone more attuned to this might be able to catch.

Both PIXs are connected to a network: 192.168.168.0/24. There is a DHCP server on this network. One PIX pulls a DHCP address and the other is statically set. Therefore:

Static-PIX: 192.168.168.200 DHCP-PIX: 192.168.168.30

The private sides of the devices are: Static-PIX: 172.16.1.0/24 DHCP-PIX: 172.16.2.0/24

When I try to start a ping from the DHCP-Pix LAN to the Static-PIX LAN (Which is the way this is going to need to work out in the real world), I get the following from 'debug crypto isakmp'

Reply to
amattina
Loading thread data ...

Check to be sure that the default route really was set.

Use the 'capture' command or an ethernet sniffer in order to check to see how far the packets are getting.

Reply to
Walter Roberson

The two PIXs are on the same switch. I did test to see if they could talk to each other...

dhcp-pix# ping 192.168.168.200 192.168.168.200 response received -- 0ms 192.168.168.200 response received -- 0ms 192.168.168.200 response received -- 0ms

And the other way...

192.168.168.30 response received -- 0ms 192.168.168.30 response received -- 0ms 192.168.168.30 response received -- 0ms
Reply to
amattina

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.