Re: Pix to Pix VPN Question
Michael Batchelder <[email protected]>
| Newsgroups | gmane.comp.security.vpn |
|---|---|
| Message-ID | <[email protected]> |
> Message: 1 > Date: Wed, 29 Oct 2003 11:35:03 -0000 > From: "Laneille&Joe" <[email protected]> > Subject: [VPN] Pix to Pix VPN Question > To: <[email protected]> > Message-ID: <000501c39e10$b2834ac0$0a01a8c0@joehome> > Content-Type: text/plain; charset="us-ascii" > > Hi > > Ok where to start. Posting the configs of the two PIXen in question would make answering your question much easier. You can scrub external IP addresses and anything else you don't wish to publicly announce. Possibly your problem is with NAT. A quick way to see if your VPN isn't working because of NAT is to add the following command in both pixen: sysopt ipsec pl-compatible and see if everything starts magically works... If that's the case, you should 1) take out that command and 2) make the correct "nat 0 access-list" statements. Then don't forget to clear xlate, and life should be good. Binky __________________________________ Do you Yahoo!? Exclusive Video Premiere - Britney Spears http://launch.yahoo.com/promos/britneyspears/