From: john matijevic (john.matijevic@gmail.com)
Date: Tue Jun 21 2005 - 19:27:32 GMT-3
Hello Sean,
Could you please post configs of both of your devices?
Sincerely,
John
On 6/21/05, chon_mon@nym.hush.com <chon_mon@nym.hush.com> wrote:
>
> Ok - so now the VPN is up, both sites see each other and the
> packets come across - but I think the PIX is dropping them. I do a
> debug crypto ipsec and debug crypto isakmp, and see the packets
> encrypting and decrypting, but when I trying pinging site to site -
> I get nothing. NOTHING!!!!! <---- wishful exclamation
> thinking..... <---reality.
>
> I am allowing everything in the pix, and also my crypto acl is
> correct. Both IKE's match on either site, and everything is
> established, except successful pinging of the private networks
> behind each firewall appliance.
>
> 10.2.0.0/16 <http://10.2.0.0/16> PIX<------->WAN<--------->SONIC
> 10.1.0.0/16 <http://10.1.0.0/16>
>
> Like I said, everything shows up correctly - even rebooted both
> firewall appliances. Any suggestions at this point would be
> greatly appreciated. BTW - there is nothing except the PIX and my
> laptop at the 10.2.0.0/16 <http://10.2.0.0/16> site. TIA. -Sean
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
-- John Matijevic, CCIE #13254 U.S. Installation Group Senior Network Engineer 954-969-7160 ext. 1147 (office) 305-321-6232 (cell)
This archive was generated by hypermail 2.1.4 : Wed Jul 06 2005 - 14:43:42 GMT-3