Site to Site VPN problem

Dear all

I am facing a problem in Site to Site VPN between PIX 515E and FireBox the problme is that only one subnet is working as we have 4 vlans (10.0.208.0,10.3.48.0,10.2.0.0,10.1.0.0) and I am only able to access the other side of network (172.16.0.0 in FireBOX) from 10.1.0.0 subnet and while remaining subnets are unable to connect what can be the reason. Below is the config

access-list ispf_vpn permit ip 10.0.208.0 255.255.240.0 172.16.0.0 255.255.0.0
access-list ispf_vpn permit ip 172.16.0.0 255.255.0.0 10.0.208.0 255.255.240.0
access-list ispf_vpn permit ip 10.3.48.0 255.255.240.0 172.16.0.0 255.255.0.0
access-list ispf_vpn permit ip 172.16.0.0 255.255.0.0 10.3.48.0 255.255.240.0
access-list ispf_vpn permit ip 10.2.0.0 255.255.240.0 172.16.0.0 255.255.0.0
access-list ispf_vpn permit ip 172.16.0.0 255.255.0.0 10.2.0.0 255.255.240.0
access-list ispf_vpn permit ip 10.1.0.0 255.255.240.0 172.16.0.0 255.255.0.0
access-list ispf_vpn permit ip 172.16.0.0 255.255.0.0 10.1.0.0 255.255.0.0

nat (inside) 0 access-list ispf_vpn

sysopt connection permit-ipsec

crypto ipsec transform-set ispfset esp-3des esp-sha-hmac
crypto map ispfmap 10 ipsec-isakmp
crypto map ispfmap 10 match address ispf_vpn
crypto map ispfmap 10 set peer 62.231.1.1
crypto map ispfmap 10 set transform-set ispfset
crypto map ispfmap 10 set security-association lifetime seconds 86400 kilobytes 8192
crypto map ispfmap interface outside
isakmp enable outside
isakmp key ******** address 62.231.1.1 netmask 255.255.255.255
isakmp identity address
isakmp policy 20 authentication pre-share
isakmp policy 20 encryption des
isakmp policy 20 hash sha
isakmp po
licy 20 group 1
isakmp policy 20 lifetime 86400

Your early response will be highly appreciated.

----------
Add photos to your messages with MSN 8. Get 2 months FREE*.

_______________________________________________
VPN mailing list
[email protected]
http://lists.shmoo.com/mailman/listinfo/vpn