On Wed, 2004-09-01 at 12:42, Al Cooper wrote:
> I have configured a Cisco VPN Client (4.6.00) to connect to a Cisco PIX
> 515E [6.3(3)]. The VPN works great except when the VPN client is behind
> another PIX or a Cisco router. If the VPN client behind a PIX or a Cisco
> router I can make the initial connect fine but I cannot pass any traffic
> (pings time out and protocols do not connect).
>
> If I am behind my Linux (IPCop) firewall or at a hotel (unknown firewall,
> probably a cable modem) I do not have a problem. I can connect and pass
> traffic.
I have run into this also, it has to do with the PIX not having an IPSec
proxy. I did get some help once but never got it to run. As I recall you
need to allow IP port 50 inbound through the PIX that is shielding the
client. Someone clued me into why the solution may have not worked for
me - I had random sequence numbers enabled and that will break IPSec.
_______________________________________________
firewall-wizards mailing list
firewall-wizards_at_honor.icsalabs.com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
Received on Sep 01 2004
Intro
