Re: Contivity 2700 to PIX 515 config.

Mike,

Check this 
http://cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080094761.shtml

Depending on the PIX config, they might need to add
extra access-lists to allow the traffic from the
tunnel.


Its a example configuration of a simple IPSec tunnel
between two PIX firewalls. This should give you an
idea of where you are going wrong.



 --- "Little, Mike (BHS)" <[email protected]> wrote: >
All,
> 
>  
> 
> I'll keep this brief.  I have a Nortel Contivity
> 2700 that I'm setting up a
> site-to-site with a PIX 515.  It's a pretty straight
> setup - no NAT, etc.  I
> can initiate the tunnel fine from my end, but can't
> ping anything in their
> network.  They are not able to bring up the tunnel
> from the PIX side.  With
> the tunnel up, I'm seeing packets leaving my
> Contivity and, judging by what
> I've seen in their log files, see them arriving on
> their side.
> 
>  
> 
> I'm very familiar with the Contivity configs but
> much less familiar with the
> PIX.  I think it's their problem but don't know what
> to suggest or look for.
> 
>  
> 
> If someone has any suggestions, or can point me to
> some configuration
> information for these devices, it would be very much
> appreciated.
> 
>  
> 
>  
> 
> As always, thanks for the help,
> 
>  
> 
> Mike Little
> 
> Network Services
> 
> Baptist Healthcare System
> 
>  
> 
>  
> 
> > _______________________________________________
> VPN mailing list
> [email protected]
> http://lists.shmoo.com/mailman/listinfo/vpn 

________________________________________________________________________
Download Yahoo! Messenger now for a chance to win Live At Knebworth DVDs
http://www.yahoo.co.uk/robbiewilliams