Re: PIX 501 - VPN connection question

Hi,

show conf | grep isakmp

will give you the PSK for a site IP which does not exist anymore, let say the IP is aaa.bbb.ccc.ddd

show conf | grep aaa.bbb.ccc.ddd

should give you this unused IP bound to a crypto map you have to update.

So, on the remoe site having the new IP, change the IP. Unless you remember the PSK, you may need to change it to match the PSK you got, like, for both sites.

wri mem

clear crypto ipsec sa
debug crypto isak
debug crrypto ipsec

sh crypto isak sa det

Good luck,

Alfred


Michael Wai wrote:
My company is using two PIX 501 and establish the VPN connection
between two office. Now one of office is changed to use the other ISP
and of course the fixed IP is changed also. Would anyone tell me how
can I change the configuration to make the VPN connection work?

Thanks a lot.

.