Solved

Cisco PIX 501 error "regular translation creation failed for protocol 47"

Posted on 2006-11-15
2
3,320 Views
Last Modified: 2009-10-18
A user here is trying to connect to an external VPN server, using the WinXP Pro VPN client. He can connect from his home but not the office network, so I suspected the settings on the Cisco PIX 501 firewall. The syslog has this error from the connection attempt:
Nov 15 2006 11:36:06: %PIX-3-305006: regular translation creation failed for protocol 47 src inside:10.2.1.105 dst outside:66.117.174.105

Any suggestions? Both our usual Cisco config people are uncontactable and it's fallen to me to resolve this urgently. I'm naive about this so I expect I have missed a lot of important info.

anseris


 
0
Comment
Question by:anseris
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 20

Accepted Solution

by:
calvinetter earned 500 total points
ID: 17952595
If your PIX is running 6.3 series software, login to the PIX via telnet, SSH, or direct console, & add a "fixup" command, eg:
pix# conf t
pix(config)# fixup proto pptp 1723
pix(config)# exit
pix# write mem

cheers
0
 

Author Comment

by:anseris
ID: 17953839
Working now. Many thanks!

anseris
0

Featured Post

Save the day with this special offer from ATEN!

Save 30% on the CV211 using promo code EXPERTS30 now through April 30th. The ATEN CV211 connects a laptop directly to any server allowing you instant access to perform data maintenance and local operations, for quick troubleshooting, updating, service and repair.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When you connect to your workplace's VPN, you may not notice that you are using your workplace's servers to serve up webpages.  This might be undesirable since the workplace can log all the places you've been.  It also might be very slow to load pag…
I've written this article to illustrate how we can implement a Dynamic Multipoint VPN (DMVPN) with both hub and spokes having a dynamically assigned non-broadcast multiple-access (NBMA) network IP (public IP). Here is the basic setup of DMVPN Pha…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question