This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ASG6 and cisco 800 series router IPSEC

I've setup an IPSEC VPN between the above two and although the interface comes up without any problems, most services wont go through. Telnet and http work without any problems whatsoever, however pings only have a 50% chance of returning and remote desktop is impossible. I'e looked into the MTU value, played around with it and even lowered it to 1200 but no improvements came of this. ACLS on the cisco and packet filters on the ASG are correctly set up, so no problem there...
I'm a bit desperate, I specifically purchased a cisco 877 to replace my old PC that's been running Astaro for 3 years which was constantly crashing (hardware problem). Next week I have to set up a similar VPN between work and some partners who are using a PIX and I'm a bit anxious.
Can anyone offer a solution? does ASG - Cisco IPSEC tunnel work at all, or should I start looking for another job?

This thread was automatically locked due to age.

0 BarryG over 18 years ago

Dunno about a series 800, but it works with the PIX firewalls and VPN Concentrators just fine.

If needed, you can try something like
http://www-1.ibm.com/support/docview.wss?rs=463&context=SSKTMJ&context=SSKTWP&dc=DB520&dc=D600&dc=DB530&dc=D700&dc=DB500&dc=DB540&dc=DB510&dc=DB550&q1=1086718&uid=swg21086718&loc=en_US&cs=utf-8&lang=en
to test for MTU size.

However, if standard, 56-byte, pings are failing 50% of the time, something else is wrong.

The DOS or ICMP Flood protection will sometimes drop pings... if you're using it, you should exclude the VPN destination, or raise the threshold.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 pasclinaui over 18 years ago

Just setup IPSEC tunnel with Cisco PIX (Italy - USA) and works fine.....now. Do not look for other job .....contact me for trouble !
Cancel
Vote Up 0 Vote Down

Cancel