RE: Cisco PIX 501 and Cisco remote VPN client&[email protected]

"Adam Pierce" <[email protected]>
Newsgroups gmane.comp.security.vpn
Message-ID <[email protected]>
Here's a few things you are missing.
First, you need an access-list to keep your vpn traffic from being nat.
 
     access-list 101 permit ip 192.168.1.0 255.255.255.0 "vpn pool
range"
You'll also need another nat statement to put this access-list in
place
     nat (inside) 0 access-list 101
 
Your VPNpool will need to be in a different network than your internal
network so it can be routed.  It's also a good idea to not use numbers
that are frequently used in home networks, i.e. 192.168.1.0 or
192.168.100.0. 
     ip local pool VPNpool 192.168.128.230-192.168.128.240
 
These issues will certainly give you problems.  I hope this helps!

_______________________________________________
VPN mailing list
[email protected]
http://lists.shmoo.com/mailman/listinfo/vpn
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.