Solved

Cisco Pix site to Site VPN

Posted on 2011-09-26
3
488 Views
Last Modified: 2012-05-12
I am adding a new location to an existing Cisco site to site VPN.  

We cannot get the new sites VPN tunnel up.

Can someone help?  I've attached the configs.  The main site already has another VPN connected to it. and its working fine.  I've verified the IP addresses in the config are correct.  There is Internet Access on the new site.  Just no VPN tunnel.
0
Comment
Question by:mschirad
  • 2
3 Comments
 

Author Comment

by:mschirad
ID: 36599393
0
 
LVL 22

Accepted Solution

by:
Jody Lemoine earned 500 total points
ID: 36599591
On your main site PIX, you have the following statements:

access-list 101 permit ip 192.168.1.0 255.255.255.0 192.168.2.0 255.255.255.0
access-list 102 permit ip 192.168.1.0 255.255.255.0 192.168.3.0 255.255.255.0
nat (inside) 0 access-list 101

This will prevent traffic to your first site's 192.168.2.0/24 address space from being translated, which allows it to work properly.  You're not doing the same for your second site's 192.168.3.0/24 and so traffic to it is subject to NAT and will be coming from the wrong IP address.  Try adding the following:

access-list 100 permit ip 192.168.1.0 255.255.255.0 192.168.2.0 255.255.255.0
access-list 100 permit ip 192.168.1.0 255.255.255.0 192.168.3.0 255.255.255.0
no nat (inside) 0 access-list 101
nat (inside) 0 access-list 100

This will create a new access list covering both sites for your NAT exception rule.
0
 

Author Closing Comment

by:mschirad
ID: 36599789
yes of course!

thanks so much!
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Let’s list some of the technologies that enable smooth teleworking. 
This past year has been one of great growth and performance for OnPage. We have added many features and integrations to the product, making 2016 an awesome year. We see these steps forward as the basis for future growth.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question