<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/3.16.3">
</HEAD>
<BODY>
<BR>
On Tue, 2008-04-15 at 19:04 -0400, scharles wrote:
<BLOCKQUOTE TYPE=CITE>
<FONT SIZE="2"><FONT COLOR="#0000ff">Hi !</FONT></FONT>
</BLOCKQUOTE>
<BLOCKQUOTE TYPE=CITE>
<FONT SIZE="2"><FONT COLOR="#0000ff"> The pix configuration that you have provided is incomplete - from the logs on the linux box - it seems phaseI is established and phaseII is not negotiated due to conflict / disagreement on encryption.Your access list for interesting vpn traffic on the pix reads</FONT></FONT>
</BLOCKQUOTE>
<BLOCKQUOTE TYPE=CITE>
<FONT SIZE="2"><FONT COLOR="#0000ff">"</FONT></FONT><FONT COLOR="#000000">access-list COMPANY extended permit ip 10.64.98.0 255.255.255.0 192.168.40.0 255.255.255.0 "</FONT>
</BLOCKQUOTE>
<BLOCKQUOTE TYPE=CITE>
<FONT COLOR="#000000"> </FONT>
</BLOCKQUOTE>
<BLOCKQUOTE TYPE=CITE>
<FONT SIZE="2"><FONT COLOR="#0000ff"> IMO - it should read</FONT></FONT>
</BLOCKQUOTE>
<BLOCKQUOTE TYPE=CITE>
<FONT COLOR="#000000">access-list COMPANY extended permit ip 192.168.40.0 255.255.255.0 10.64.98.0 255.255.255.0 </FONT>
</BLOCKQUOTE>
<BLOCKQUOTE TYPE=CITE>
<FONT COLOR="#000000"> </FONT>
</BLOCKQUOTE>
<BLOCKQUOTE TYPE=CITE>
<FONT SIZE="2"><FONT COLOR="#0000ff">"show run crypto" on the pix would provide more details on the configuration</FONT></FONT>
</BLOCKQUOTE>
<BLOCKQUOTE TYPE=CITE>
<FONT COLOR="#000000"> </FONT>
</BLOCKQUOTE>
<BLOCKQUOTE TYPE=CITE>
<FONT SIZE="2"><FONT COLOR="#000000">- Simon Charles - </FONT></FONT>
</BLOCKQUOTE>
<BR>
<BR>
Thanks for the help. The access-list line was wrong. As soon as i got the other end to switch it around it worked fine.<BR>
<BR>
<BR>
<BR>
<P><FONT size=2>STATEMENT OF CONFIDENTIALITY:</FONT> <FONT size=2>This message
and any attachments are intended solely for the person or entity to which it is
addressed and may contain confidential or privileged information. If the
recipient of this message is not the addressee or a person responsible for
delivering the message to the addressee, such recipient is prohibited from
reading or using this message in any way. If you have received this message in
error, please call the sender of this message immediately and delete the message
from any computer.</FONT></P>
</BODY>
</HTML>