VPD usage after upgrading PIX 506E

Before to upgrade Firewall version and PDM I was using VPN perfectly. Once upgraded I can connect with VPN.

Show ver before upgrade:

Cisco PIX Firewall Version 6.1(2) Cisco PIX Device Manager Version 1.1(2) Compiled on Fri 16-Nov-01 14:28 by morlee Hardware: PIX-506E, 32 MB RAM, CPU Pentium II 299 MHz Flash E28F640J3 @ 0x300, 8MB BIOS Flash AM29F400B @ 0xfffd8000, 32KB

0: ethernet0: address is 0009.b718.b578, irq 10 1: ethernet1: address is 0009.b718.b579, irq 11 Licensed Features: Failover: Disabled VPN-DES: Enabled VPN-3DES: Disabled Maximum Interfaces: 2 Cut-through Proxy: Enabled Guards: Enabled Websense: Enabled Inside Hosts: Unlimited Throughput: Unlimited ISAKMP peers: Unlimited

Show ver after upgrade:

Cisco PIX Firewall Version 6.3(4) Cisco PIX Device Manager Version 3.0(2) Compiled on Fri 02-Jul-04 00:07 by morlee pixfirewall up 1 day 23 hours Hardware: PIX-506E, 32 MB RAM, CPU Pentium II 300 MHz Flash E28F640J3 @ 0x300, 8MB BIOS Flash AM29F400B @ 0xfffd8000, 32KB

0: ethernet0: address is 0009.b718.b578, irq 10 1: ethernet1: address is 0009.b718.b579, irq 11 Licensed Features: Failover: Disabled VPN-DES: Enabled VPN-3DES-AES: Disabled Maximum Physical Interfaces: 2 Maximum Interfaces: 2 Cut-through Proxy: Enabled Guards: Enabled URL-filtering: Enabled Inside Hosts: Unlimited Throughput: Unlimited IKE peers: Unlimited

After upgrade I don't have change configuration.

How can I resolve it?

THANKS!

Reply to
jaisol
Loading thread data ...

Resolve what?

Reply to
Chris

:> How can I resolve it?

:Resolve what?

That was pretty much what I was asking myself about the posting ;-)

I'll take a shot in the dark: The OP does not have the 3DES license, so s/he must be using DES encryption for the VPN. Somewhere between 6.1 and 6.3, support was dropped for the combination of DES and SHA, so the OP may need to change transform sets to esp-des esp-md5-hmac

Reply to
Walter Roberson

"Once upgraded I can connect with VPN"

That's good then ;-)

Reply to
Chris

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.