Have one that has me stumped. Hopefully someone can help with the missing piece.
2 networks everything has been working flawlessly. One is at a data center with email, web servers and such, and the other is at an office.
Wanted to connect the 2 networks with a VPN. Deployed a SOHO3 at each end and configured the VPN. The tunnel is up and working. The office is on a 192.168.1.0/24 and the colo is on a 192.168.100.0/24. I created a simplified network diagram to depict the configuration. See attachment.
Below are a few fact that should answer most questions as to where we are at this point.
1. WS1 can ping the PIX at 192.168.100.1 (PIX can also ping WS1 at 192.168.1.20)
2. WS1 can NOT ping DC1 at 192.168.100.20
3. DC1 can NOT ping WS1 (of course)
Have a route entry in the PIX
route DMZ1 192.168.1.0 255.255.255.0 192.168.100.2 1 (this is working or the PIX wouldn't be able to reach WS1).
So the PIX is using that route when it pings out, but it's like it isn't using it for the packets it receives from DC1.
Any idea what I'm missing here?