On 7/8/05, Richard Green <richardgreen1965 at gmail dot com> wrote:
> Henry wrote:
> > Have you tried this link. I followed these directions an dit works fine for
> > http://m0n0.ch/wall/docbook/examplevpn.html#id2600839
> Yes saw that. My config matches (have also tried with just the specific Phase
> 2 settings of - MD5 and 3DES to cut down the negotiation opions...).
Are you certain - I can't see where you're disabling NAT on the VPN
packets so they route correctly?
From that link:
Last step is to tell the PIX to not use NAT on the packets using this
VPN connection and route them instead.
access-list no-nat permit ip 10.0.0.1 255.255.255.0 10.0.1.0 255.255.255.0
access-list no-nat permit ip 10.0.1.0 255.255.255.0 10.0.0.0 255.255.255.0