topic connectivity issue - LAN on Windows domain to remote PIX 501 into domain 2 in Network Security https://community.cisco.com/t5/network-security/connectivity-issue-lan-on-windows-domain-to-remote-pix-501-into/m-p/421147#M530731 <P>Previous configuration was standalone ws running Cisco VPN Client version 4.6 and Windows Remote Desktop over internet to PIX 501 into Windows domain 1 running Terminal Server. New configuration is same software on LAN workstations connected to nic 1 on Windows Server (Domain Controller - domain 2) and then out on nic 2 - internet - Pix 501 - Windows Domain 1.</P><P></P><P>Trying to use Routing and Remote Access on Domain 2 with NAT/Basic Firewall - can establish authentication with PIX 501 but cannot connect to console session on Domain 1. Remote Desktop connection attempt times out.</P><P></P><P>Have normal browser connectivity from LAN over Routing and Remote access and can connect from Domain 2 LAN to remote mail servers which are not associated with domain 1 and the PIX 501.</P><P></P><P>Any guidance and suggestions would be appreciated.</P><P></P><P>Addressing scheme on Domain 2: NIC 1 with LAN is 192.168.16.16 - NIC 2 with Basic Firewall is 192.168.100.100 </P><P></P><P>Addressing scheme on Domain 1 is unchanged from previously operational configuration which still operates correctly with standalone ws over internet to PIX 501. </P><P></P><P>Thank you! Ron Ridge</P> Fri, 21 Feb 2020 08:31:28 GMT RidgeRunner.007 2020-02-21T08:31:28Z connectivity issue - LAN on Windows domain to remote PIX 501 into domain 2 https://community.cisco.com/t5/network-security/connectivity-issue-lan-on-windows-domain-to-remote-pix-501-into/m-p/421147#M530731 <P>Previous configuration was standalone ws running Cisco VPN Client version 4.6 and Windows Remote Desktop over internet to PIX 501 into Windows domain 1 running Terminal Server. New configuration is same software on LAN workstations connected to nic 1 on Windows Server (Domain Controller - domain 2) and then out on nic 2 - internet - Pix 501 - Windows Domain 1.</P><P></P><P>Trying to use Routing and Remote Access on Domain 2 with NAT/Basic Firewall - can establish authentication with PIX 501 but cannot connect to console session on Domain 1. Remote Desktop connection attempt times out.</P><P></P><P>Have normal browser connectivity from LAN over Routing and Remote access and can connect from Domain 2 LAN to remote mail servers which are not associated with domain 1 and the PIX 501.</P><P></P><P>Any guidance and suggestions would be appreciated.</P><P></P><P>Addressing scheme on Domain 2: NIC 1 with LAN is 192.168.16.16 - NIC 2 with Basic Firewall is 192.168.100.100 </P><P></P><P>Addressing scheme on Domain 1 is unchanged from previously operational configuration which still operates correctly with standalone ws over internet to PIX 501. </P><P></P><P>Thank you! Ron Ridge</P> Fri, 21 Feb 2020 08:31:28 GMT https://community.cisco.com/t5/network-security/connectivity-issue-lan-on-windows-domain-to-remote-pix-501-into/m-p/421147#M530731 RidgeRunner.007 2020-02-21T08:31:28Z Re: connectivity issue - LAN on Windows domain to remote PIX 501 https://community.cisco.com/t5/network-security/connectivity-issue-lan-on-windows-domain-to-remote-pix-501-into/m-p/421148#M530732 <HTML><HEAD></HEAD><BODY><P>several things need to be verified.</P><P></P><P>whether the address schemes are overlapping for domain 1, domain 2, and the vpn client pool.</P><P></P><P>assuming the domain 2 server is performing pat, whether the command "isakmp nat-traversal 20" has been applied on the pix.</P><P></P><P>providing there is an inbound acl on the domain 2 server, is esp current being permitted?</P></BODY></HTML> Sat, 12 Nov 2005 23:27:07 GMT https://community.cisco.com/t5/network-security/connectivity-issue-lan-on-windows-domain-to-remote-pix-501-into/m-p/421148#M530732 jackko 2005-11-12T23:27:07Z Re: connectivity issue - LAN on Windows domain to remote PIX 501 https://community.cisco.com/t5/network-security/connectivity-issue-lan-on-windows-domain-to-remote-pix-501-into/m-p/421149#M530733 <HTML><HEAD></HEAD><BODY><P>Domain 1: 192.168.1.x</P><P>Domain 2: Internet side - NIC1 192.168.100.x</P><P>Jackko, thank you for your response!</P><P></P><P>Address schemes:</P><P>Lan side - NIC2 192.168.16.x</P><P>PIX vpn client pool 192.168.5.x</P><P>Domain 1 and PIX unchanged from previous configuration.</P><P></P><P>Is there a document that describes the requirements that you are referring to for the PIX and for the Routing and Remote Access server?</P></BODY></HTML> Sat, 12 Nov 2005 23:50:18 GMT https://community.cisco.com/t5/network-security/connectivity-issue-lan-on-windows-domain-to-remote-pix-501-into/m-p/421149#M530733 RidgeRunner.007 2005-11-12T23:50:18Z