[ previous ] [ next ] [ threads ]
 
 From:  =?WINDOWS-1252?B?lSCV?= <googl3meister at gmail dot com>
 To:  Richard Green <richardgreen1965 at gmail dot com>
 Cc:  m0n0wall at lists dot m0n0 dot ch
 Subject:  Re: [m0n0wall] IPSEC tunnel to Cisco PIX
 Date:  Sat, 9 Jul 2005 14:50:46 +1000
On 7/8/05, Richard Green <richardgreen1965 at gmail dot com> wrote:
> 
> Henry wrote:
> > Have you tried this link. I followed these directions an dit works fine for
> me.
> > http://m0n0.ch/wall/docbook/examplevpn.html#id2600839
> 
> Yes saw that. My config matches (have also tried with just the specific Phase
> 2 settings of  - MD5 and 3DES to cut down the negotiation opions...).
> 

Are you certain - I can't see where you're disabling NAT on the VPN
packets so they route correctly?

From that link:
Last step is to tell the PIX to not use NAT on the packets using this
VPN connection and route them instead.
[...]    
access-list no-nat permit ip 10.0.0.1 255.255.255.0 10.0.1.0 255.255.255.0
access-list no-nat permit ip 10.0.1.0 255.255.255.0 10.0.0.0 255.255.255.0

--g'luck
gm