Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations TouchToneTommy on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

No internet access when site to site VPN Tunnel is eliminated

Status
Not open for further replies.

rocketlauncher

Programmer
Nov 11, 2000
110
US
Hello Everyone,

Hope someone can explain why this happens and how to fix this.

Recently we relocated a remote site office into our corporate building.

So now I'm trying to get rid off the site to site VPN config that is in place on the corporate site. The problem is when I try to delete any of the following lines:

access-list 120 permit ip 10.1.1.0 255.255.255.0 10.1.2.0 255.255.255.0 (site to site access list)
.
.
.
crypto map newmap 20 ipsec-isakmp
crypto map newmap 20 match address 120
crypto map newmap 20 set peer 'External Address'

I'm instantly unable to ping my gateway, reason why our whole internal network is also unable to browse the internet. Now, my gateway is in a different network than the remote peer, I can't understand why this affects my network, if the peer and the gateway are on differnete subnets. By the way this is a pix 515e.

Please help!

Thanks to All,

Rocket

 
post more of the config...

are you still using client vpn access?
if not be sure to remove the crypto map, and isakmp from the interface.

I have crashed pix's by playing with the crypto/isakmp maps deleting entries


MITS_Sig.gif
 
Hi brock,

Thanks for the reply.

I've postponed this change, since it's not affecting us right now.

Thanks again,

Rocket
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top