This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Astaro ASG to Cisco Pix

Has anyone had success in integrating these two with the following parameters?

IKE encryption: 3DES
IKE authentication: MD5
IKE Lifetime SA: 86400
IKE DH Group: Group 1

IPSEC encryption: 3DES
IPSEC authentication: MD5
IPSEC SA Lifetime: 3600
IPSEC DH Group: None

Please share your experience and Cisco config files. Or if you think there is something wrong with this parameter please let me know. I keep getting NO_PROPOSAL_CHOSEN errors from the Cisco unit.
The pre-shared key is correct so I am not sure if there is anything else I need to do.

Thanks.

This thread was automatically locked due to age.

Parents

0 MotoMoto over 17 years ago

From memory, with my VPN to a VPN concentrator, which shouldn't be too different from VPNing into a pix, I had to manually add pfs="no" to my ipsec.conf to get it working.

There is an old example at http://www.johnleach.co.uk/documents/freeswan-pix/freeswan-pix.html of configs for freeswan to pix501
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 MotoMoto over 17 years ago

From memory, with my VPN to a VPN concentrator, which shouldn't be too different from VPNing into a pix, I had to manually add pfs="no" to my ipsec.conf to get it working.

There is an old example at http://www.johnleach.co.uk/documents/freeswan-pix/freeswan-pix.html of configs for freeswan to pix501
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Flancer over 17 years ago in reply to MotoMoto

Hi guys, thanks for the feedback. However, I am curious to know if anyone had success with the settings I had mentioned earlier.

I am still unable to get it to work thus far. I am currently forbidden to change any settings on the Cisco unit.
Cancel
Vote Up 0 Vote Down

Cancel