Pix 515E to Pix 506 Site to Site VPN

[vtgman]

Does anyone have an example of a site to site VPN for the above situation? I have a site in Flordia and in Calif. that I need to setup and I would like some real work examples.

 

[Arisap]

Here you go


Do this to California PIX
crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
crypto map mapNAME 10 ipsec-isakmp
crypto map mapNAME 10 match address 101
crypto map mapNAME 10 set peer EXTERNALADDRESSofFLORIDA
crypto map mapNAME 10 set transform-set ESP-3DES-MD5
crypto map mapNAME interface outside
isakmp enable outside
isakmp key SOMESHAREdKey address EXTERNALADDRESSofFLORIDA netmask 255.255.255.255
isakmp identity address
isakmp policy 10 authentication pre-share
isakmp policy 10 encryption 3des
isakmp policy 10 hash md5
isakmp policy 10 group 2
isakmp policy 10 lifetime 86400

access-list 101 permit ip CaliforniaInternal andSUBNETMASK FloridaInternal andSUBNETMASK

nat (inside) 0 access-list 101

Do this to Florida PIX

crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
crypto map mapNAME 10 ipsec-isakmp
crypto map mapNAME 10 match address 101
crypto map mapNAME 10 set peer EXTERNALADDRESSofCalifornia
crypto map mapNAME 10 set transform-set ESP-3DES-MD5
crypto map mapNAME interface outside
isakmp enable outside
isakmp key SOMESHAREdKey address EXTERNALADDRESSofCalifornia netmask 255.255.255.255
isakmp identity address
isakmp policy 10 authentication pre-share
isakmp policy 10 encryption 3des
isakmp policy 10 hash md5
isakmp policy 10 group 2
isakmp policy 10 lifetime 86400

access-list 101 permit ip FloridaInternal andSUBNETMASK CaliforniaInternal andSUBNETMASK

nat (inside) 0 access-list 101

 

[vtgman]

Thanks for your help. I did put the config in on both sides. How do I get the VPN to start working? Do I just ping across from Flordia to Calif.?