Having problems trying to setup a PIX to accept IPSEC tunnels from both remote clients using Cisco VPN Client as well as a site-to-site tunnel connecting to a Linksys WRVS4400N. Everything is working ok for the remote clients but I cant seem to make a connection to the WRVS4400N. Below is my current config on the PIX (the address of the Linksys is dynamic).
access-list nonat_vpn permit ip 192.168.1.0 255.255.255.0 172.16.1.0 255.255.255.0
access-list nonat_vpn permit ip 192.168.2.0 255.255.255.0 172.16.1.0 255.255.255.0
access-list nonat_vpn permit ip 192.168.11.0 255.255.255.0 172.16.1.0 255.255.255.0
access-list nonat_vpn permit ip 192.168.1.0 255.255.255.0 10.1.1.0 255.255.255.0
access-list nonat_vpn permit ip 192.168.2.0 255.255.255.0 10.1.1.0 255.255.255.0
access-list nonat_vpn permit ip 192.168.11.0 255.255.255.0 10.1.1.0 255.255.255.0
access-list 100 permit ip 192.168.1.0 255.255.255.0 172.16.1.0 255.255.255.0
access-list 100 permit ip 192.168.2.0 255.255.255.0 172.16.1.0 255.255.255.0
access-list 100 permit ip 192.168.11.0 255.255.255.0 172.16.1.0 255.255.255.0
access-list 100 permit ip 192.168.1.0 255.255.255.0 10.1.1.0 255.255.255.0
access-list 100 permit ip 192.168.2.0 255.255.255.0 10.1.1.0 255.255.255.0
access-list 100 permit ip 192.168.11.0 255.255.255.0 10.1.1.0 255.255.255.0
mtu outside 1500
mtu inside 1500
ip address outside X.X.X.X 255.255.255.248
ip address inside 192.168.1.3 255.255.255.0
ip local pool remote_user 10.1.1.1-10.1.1.254
nat (inside) 0 access-list nonat_vpn
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
route outside 0.0.0.0 0.0.0.0 64.8.231.81 1
route inside 192.168.2.0 255.255.255.0 192.168.1.1 1
route inside 192.168.11.0 255.255.255.0 192.168.1.2 1
floodguard enable
sysopt connection permit-ipsec
crypto ipsec transform-set myset esp-3des esp-md5-hmac
crypto dynamic-map cisco 1 set transform-set myset
crypto map dynmap 20 ipsec-isakmp dynamic cisco
crypto map dynmap interface outside
isakmp enable outside
isakmp key ******** address 0.0.0.0 netmask 0.0.0.0
isakmp identity address
isakmp policy 10 authentication pre-share
isakmp policy 10 encryption 3des
isakmp policy 10 hash md5
isakmp policy 10 group 1
isakmp policy 10 lifetime 1000
isakmp policy 20 authentication pre-share
isakmp policy 20 encryption 3des
isakmp policy 20 hash md5
isakmp policy 20 group 2
isakmp policy 20 lifetime 86400
vpngroup RemoteClient address-pool remote_user
vpngroup RemoteClient dns-server 192.168.1.15
vpngroup RemoteClient wins-server 192.168.1.15
vpngroup RemoteClient idle-time 1800
vpngroup RemoteClient password ********
Start Free Trial
