Hello to all NG (my 1st post :),
I have PIX 515E to configure. On bouth there are already the functioning IPSEC tunnels. I tried to create another one to another PIX but i receve these message while debuging:: IPSEC(sa_initiate): ACL = deny; no sa created
I found this on a cisco website but i don't have idea on how apply this workaround: Do not configure two crypto map entries with the same name but different priorities, peers, and access lists.
this is a piece of my configuration (the 20 is funcioning perfectly, 21 is the "wrong one")
crypto ipsec transform-set IDUMA esp-des esp-md5-hmac crypto map outside_map 20 ipsec-isakmp crypto map outside_map 20 match address outside_cryptomap_20 crypto map outside_map 20 set peer xxx.xxx.xxx.xxx crypto map outside_map 20 set transform-set IDUMA crypto map outside_map 21 ipsec-isakmp crypto map outside_map 21 match address outside_cryptomap_21 crypto map outside_map 21 set peer xxx.xxx.xxx.xxx crypto map outside_map 21 set transform-set IDUMA crypto map outside_map interface outside isakmp enable outside isakmp key ******** address xxx.xxx.xxx.xxx netmask 255.255.255.255 no-xauth no-config-mode isakmp key ******** address xxx.xxx.xxx.xxx netmask 255.255.255.255 no-xauth no-config-mode isakmp identity address isakmp keepalive 360 10 isakmp policy 20 authentication pre-share isakmp policy 20 encryption des isakmp policy 20 hash md5 isakmp policy 20 group 1 isakmp policy 20 lifetime 86400
Where i'm making a mistake???
Thanks