pix vpn with vpn3000 removes some config

[dopehead]

Hey

i have a strange problem that someone might have had before me ?

I have around 250-300 pixes connecting to a set of cluster 3005's and some of them are loosing one command from the config when they are rebooted. "vpnclient enable" when the pixc is rebooted it then never attempts to establish the vpn. Removing "vpnclient server x.x.x.x" putting it in again and putting in "vpnclient enable" afterwards is the only way to get it running again. any ideas ?

Network Systems Engineer
CCNA/CQS/CCSP/Infosec
Check the danish Cisco CSA Forum here :

http://www.csaforum.dk

 

[NetworkGhost]

show a sample config. If it is "losing" config lines then that is probably a biiger issue. (IOS based) I have seen a problem with one of the VPN IOSs where it loses the username and password but again this is a bit different.

 

[dopehead]

Hi, the pix config is pretty basic, static ips and some PAT. here is the config (removed all the basics) :

management-access inside
vpnclient server x.x.x.x
vpnclient mode network-extension-mode
vpnclient vpngroup XXXXXXXX password ********
vpnclient username XXX password ********
vpnclient management tunnel x.x.x.x 255.255.0.0 x.x.x.x 255.255.255.255
vpnclient enable

Network Systems Engineer
CCNA/CQS/CCSP/Infosec
Check the danish Cisco CSA Forum here :

http://www.csaforum.dk