VPD usage after upgrading PIX 506E

May 07, 2005 3 Replies

Before to upgrade Firewall version and PDM I was using VPN perfectly. Once upgraded I can connect with VPN.



Show ver before upgrade:



Cisco PIX Firewall Version 6.1(2) Cisco PIX Device Manager Version 1.1(2) Compiled on Fri 16-Nov-01 14:28 by morlee Hardware: PIX-506E, 32 MB RAM, CPU Pentium II 299 MHz Flash E28F640J3 @ 0x300, 8MB BIOS Flash AM29F400B @ 0xfffd8000, 32KB



0: ethernet0: address is 0009.b718.b578, irq 10
1: ethernet1: address is 0009.b718.b579, irq 11 Licensed Features: Failover: Disabled VPN-DES: Enabled VPN-3DES: Disabled Maximum Interfaces: 2 Cut-through Proxy: Enabled Guards: Enabled Websense: Enabled Inside Hosts: Unlimited Throughput: Unlimited ISAKMP peers: Unlimited

Show ver after upgrade:



Cisco PIX Firewall Version 6.3(4) Cisco PIX Device Manager Version 3.0(2) Compiled on Fri 02-Jul-04 00:07 by morlee pixfirewall up 1 day 23 hours Hardware: PIX-506E, 32 MB RAM, CPU Pentium II 300 MHz Flash E28F640J3 @ 0x300, 8MB BIOS Flash AM29F400B @ 0xfffd8000, 32KB



0: ethernet0: address is 0009.b718.b578, irq 10
1: ethernet1: address is 0009.b718.b579, irq 11 Licensed Features: Failover: Disabled VPN-DES: Enabled VPN-3DES-AES: Disabled Maximum Physical Interfaces: 2 Maximum Interfaces: 2 Cut-through Proxy: Enabled Guards: Enabled URL-filtering: Enabled Inside Hosts: Unlimited Throughput: Unlimited IKE peers: Unlimited

After upgrade I don't have change configuration.



How can I resolve it?



THANKS!



:> How can I resolve it?

:Resolve what?

That was pretty much what I was asking myself about the posting ;-)

I'll take a shot in the dark: The OP does not have the 3DES license, so s/he must be using DES encryption for the VPN. Somewhere between 6.1 and 6.3, support was dropped for the combination of DES and SHA, so the OP may need to change transform sets to esp-des esp-md5-hmac

"Once upgraded I can connect with VPN"

That's good then ;-)

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required