Solved

can't connect to VPN (remote access client)

Posted on 2009-04-14
4
451 Views
Last Modified: 2012-05-06
I have a pix 506e at my home. I sometimes connect via software cisco client, into our vpn. I cannot get in since I installed the pix at my house. Is there some type of config I need to do in my pix to let the vpn traffic in and out? I am guessing my pix is the issue

Like I said, I used to connect fine with my off the shelf router. Since the pix install, I cant

0
Comment
Question by:dissolved
  • 2
4 Comments
 
LVL 4

Assisted Solution

by:SimWhite
SimWhite earned 25 total points
ID: 24144757
global (outside) 1 interface
nat (inside) 1 192.168.1.1 255.255.255.255 (where 192.168.1.1 - you local IP)
0
 
LVL 43

Accepted Solution

by:
JFrederick29 earned 475 total points
ID: 24147929
Make sure you have NAT-Traversal enabled on the VPN server.  The PIX does not have built-in IPSEC Passthrough like your home router which is the difference.  Enabling NAT-Traversal on the headend (VPN Server) should take care of it.
0
 

Author Comment

by:dissolved
ID: 24148061
thanks. and if we have site to site vpns terminating in the pix as well, that command wont hurt anything?
0
 
LVL 43

Expert Comment

by:JFrederick29
ID: 24148756
Nope, it won't hurt anything.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
CCNA lab 6 42
Boosting Power of a Cisco Access Point 8 58
trouble on installing syslog-ng on CentOS 7 7 52
What is an ASP Table on a Cisco ASA? 3 15
I recently updated from an old PIX platform to the new ASA platform.  While upgrading, I was tremendously confused about how the VPN and AnyConnect licensing works.  It turns out that the ASA has 3 different VPN licensing schemes. "site-to-site" …
For months I had no idea how to 'discover' the IP address of the other end of a link (without asking someone who knows), and it drove me batty. Think about it. You can't use Cisco Discovery Protocol (CDP) because it's not implemented on the ASAs.…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…

789 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question