Solved

Client VPN through Pix Firewall

Posted on 2009-05-18
2
327 Views
Last Modified: 2012-05-07
I have a Pix that maintains two vpns to other companies. The traffic accross the vpn's are for the 10.246.x.x, 10.248.x.x, 10.250.x.x, 10.64.x.x, and 10.102.x.x subnets. Now I have a workstation behind the pix that is going to use the Cisco VPN client to connect to another company. The vpn is for the 10.254.13.0 subnet. The vpn client succresfully connects. However, I then launch a secure FTP client but it never connects to the ftp server across the vpn. I can't ping anything across the vpn on the workstation. I have this statement on the Pix for the other vpns:
access-list nonat permit ip 192.168.230.0 255.255.255.0 10.0.0.0 255.0.0.0

Could this statement be preventing the desktop's vpn from passing traffic correctly?
pix.txt
0
Comment
Question by:ccptechs
2 Comments
 
LVL 43

Accepted Solution

by:
JFrederick29 earned 500 total points
ID: 24415710
No, most likely its because the "other company" that this desktop is connecting to doesn't have NAT-T enabled on their VPN server.  I would contact their support and see if they will enable it.
0
 

Author Closing Comment

by:ccptechs
ID: 31582744
Need to ask another question
0

Featured Post

On Demand Webinar - Networking for the Cloud Era

This webinar discusses:
-Common barriers companies experience when moving to the cloud
-How SD-WAN changes the way we look at networks
-Best practices customers should employ moving forward with cloud migration
-What happens behind the scenes of SteelConnect’s one-click button

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

There are many useful and sometimes not well documented or forgotten IOS or ASA/PIX commands. See IPE article here , there was also one on PacketU and on Cisco Tips & Tricks. Below are my favorites. I give also a few most often used for Cisco IPS an…
Cisco Pix/ASA hairpinning The term, hairpinning, comes from the fact that the traffic comes from one source into a router or similar device, makes a U-turn, and goes back the same way it came. Visualize this and you will see something that looks …
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question