Changing ISP's - config question

[wfbtr]

Hello-
I'm changing ISP's at one of my sites and am wondering if there's anything I need to change on my PIX 501 at that site, besides the new ip's. I have a VPN to another site that has a PIX 501.
I will be getting a block of 5 static ip's and I assume I'll just replace the old with the new.

thanks.

 

[ChrisAC]

Pretty much just your external IP addresses.

Chris.

**********************
Chris A.C, CCNA, CCSA
**********************

 

[wfbtr]

ok- that's what i thought.
another quickie- i just changed the hostname (remotely) and it kicked out a prompt that the %key will be invalid. now i can't ssh back into the PIX. do i need to regenerate a key?

 

[baddos]

When you change the hostname on the pix, you'll have to regenerate the key for ssh from the console.

 

[wfbtr]

great. thanks a lot.

 

[dopehead]

You also need to reconfigure the vpn tunnel in the other pix 501 since the peer will be another ip address now.

Jan


Network Systems Engineer
CCNA/CQS/CCSP/Infosec

 

[wfbtr]

oh yeah-
good point. i may have left that off my checklist!
thanks.

 

[wfbtr]

ok. i made the switch today and the vpn isn't working. at the remote site where the switch was made i can browse the Internet. I was given a block of 5 ip's (SBC). on that PIX it would only allow me to enter one static mapping, not sure why. at the main office i changed two lines:

crypto map mymap 10 set peer x.135.182.130
isakmp key ******** address x.135.182.130 netmask 255.255.255.255

i just grabbed the first IP in the block and replaced the above line with that IP. is this all i have to do on the main site PIX? i see the netmask is all 255, but at the remote site the netmask ends with 248- not sure if that matters or not.

also i can't ssh into that remote site anymore.
thanks in advance.

 

[wfbtr]

i did a debug crypto isakmp, and looked up the error. it said my keys didn't match, so i just retyped it in and the vpn is working, though it wasn't working last night after i made the change. is it because the routing tables needed to propogate? (sbc's)