topic Re: Routing problem via PIX? in Network Security https://community.cisco.com/t5/network-security/routing-problem-via-pix/m-p/284905#M593892 <HTML><HEAD></HEAD><BODY><P>More Info: Here is PIX config:</P><P></P><P>PIX Version 6.3(1)</P><P>interface ethernet0 auto</P><P>interface ethernet1 auto</P><P>nameif ethernet0 outside security0</P><P>nameif ethernet1 inside security100</P><P></P><P>fixup protocol ftp 21</P><P>fixup protocol h323 h225 1720</P><P>fixup protocol h323 ras 1718-1719</P><P>fixup protocol http 80</P><P>fixup protocol ils 389</P><P>fixup protocol rsh 514</P><P>fixup protocol rtsp 554</P><P>fixup protocol sip 5060</P><P>fixup protocol sip udp 5060</P><P>fixup protocol skinny 2000</P><P>fixup protocol smtp 25</P><P>fixup protocol sqlnet 1521</P><P>names</P><P>access-list 101 permit ip 172.16.12.0 255.255.255.0 192.168.68.0</P><P>mtu outside 1500</P><P>mtu inside 1500</P><P>ip address outside <OUT-SIDE-IP-ADDRESS> </OUT-SIDE-IP-ADDRESS></P><P>ip address inside 172.16.12.2 255.255.255.0</P><P>ip local pool ippool 192.168.68.1-192.168.68.254</P><P>nat (inside) 0 access-list 101</P><P>route outside 0.0.0.0 0.0.0.0 <OUT-SIDE-IP-ADDRESS></OUT-SIDE-IP-ADDRESS></P><P>route inside 172.16.0.0 255.255.0.0 172.16.12.1</P><P>timeout xlate 3:00:00</P><P>timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:0</P><P>timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_m</P><P>timeout uauth 0:05:00 absolute</P><P>aaa-server TACACS+ protocol tacacs+</P><P>aaa-server RADIUS protocol radius</P><P>aaa-server LOCAL protocol local</P><P></P><P>floodguard enable</P><P>sysopt connection permit-ipsec</P><P>crypto ipsec transform-set trmset1 esp-aes-256 esp-</P><P>crypto dynamic-map map2 10 set transform-set trmset</P><P>crypto map map1 10 ipsec-isakmp dynamic map2</P><P>crypto map map1 interface outside</P><P>isakmp enable outside</P><P>isakmp identity address</P><P>isakmp policy 10 authentication pre-share</P><P>isakmp policy 10 encryption aes-256</P><P>isakmp policy 10 hash sha</P><P>isakmp policy 10 group 2</P><P>isakmp policy 10 lifetime 86400</P><P>vpngroup vpn3000 idle-time 1800</P><P>vpngroup vpngroup address-pool ippool</P><P>vpngroup vpngroup dns-server 172.16.1.101</P><P>vpngroup vpngroup wins-server 172.16.1.101</P><P>vpngroup vpngroup split-tunnel 101</P><P>vpngroup vpngroup idle-time 1800</P><P>vpngroup vpngroup password ********</P><P></P><P>console timeout 0</P><P>terminal width 80</P></BODY></HTML> Thu, 18 Mar 2004 19:34:18 GMT hcgov 2004-03-18T19:34:18Z Routing problem via PIX? https://community.cisco.com/t5/network-security/routing-problem-via-pix/m-p/284904#M593888 <P>We have PIX 506E and Cisco vpn client 4.0. If client was connected right outsie of the PIX everything fine. But client via dial-up, client can authenticate the PIX but cannot access any network behind PIX. Please help, TIA</P> Fri, 21 Feb 2020 07:18:08 GMT https://community.cisco.com/t5/network-security/routing-problem-via-pix/m-p/284904#M593888 hcgov 2020-02-21T07:18:08Z Re: Routing problem via PIX? https://community.cisco.com/t5/network-security/routing-problem-via-pix/m-p/284905#M593892 <HTML><HEAD></HEAD><BODY><P>More Info: Here is PIX config:</P><P></P><P>PIX Version 6.3(1)</P><P>interface ethernet0 auto</P><P>interface ethernet1 auto</P><P>nameif ethernet0 outside security0</P><P>nameif ethernet1 inside security100</P><P></P><P>fixup protocol ftp 21</P><P>fixup protocol h323 h225 1720</P><P>fixup protocol h323 ras 1718-1719</P><P>fixup protocol http 80</P><P>fixup protocol ils 389</P><P>fixup protocol rsh 514</P><P>fixup protocol rtsp 554</P><P>fixup protocol sip 5060</P><P>fixup protocol sip udp 5060</P><P>fixup protocol skinny 2000</P><P>fixup protocol smtp 25</P><P>fixup protocol sqlnet 1521</P><P>names</P><P>access-list 101 permit ip 172.16.12.0 255.255.255.0 192.168.68.0</P><P>mtu outside 1500</P><P>mtu inside 1500</P><P>ip address outside <OUT-SIDE-IP-ADDRESS> </OUT-SIDE-IP-ADDRESS></P><P>ip address inside 172.16.12.2 255.255.255.0</P><P>ip local pool ippool 192.168.68.1-192.168.68.254</P><P>nat (inside) 0 access-list 101</P><P>route outside 0.0.0.0 0.0.0.0 <OUT-SIDE-IP-ADDRESS></OUT-SIDE-IP-ADDRESS></P><P>route inside 172.16.0.0 255.255.0.0 172.16.12.1</P><P>timeout xlate 3:00:00</P><P>timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:0</P><P>timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_m</P><P>timeout uauth 0:05:00 absolute</P><P>aaa-server TACACS+ protocol tacacs+</P><P>aaa-server RADIUS protocol radius</P><P>aaa-server LOCAL protocol local</P><P></P><P>floodguard enable</P><P>sysopt connection permit-ipsec</P><P>crypto ipsec transform-set trmset1 esp-aes-256 esp-</P><P>crypto dynamic-map map2 10 set transform-set trmset</P><P>crypto map map1 10 ipsec-isakmp dynamic map2</P><P>crypto map map1 interface outside</P><P>isakmp enable outside</P><P>isakmp identity address</P><P>isakmp policy 10 authentication pre-share</P><P>isakmp policy 10 encryption aes-256</P><P>isakmp policy 10 hash sha</P><P>isakmp policy 10 group 2</P><P>isakmp policy 10 lifetime 86400</P><P>vpngroup vpn3000 idle-time 1800</P><P>vpngroup vpngroup address-pool ippool</P><P>vpngroup vpngroup dns-server 172.16.1.101</P><P>vpngroup vpngroup wins-server 172.16.1.101</P><P>vpngroup vpngroup split-tunnel 101</P><P>vpngroup vpngroup idle-time 1800</P><P>vpngroup vpngroup password ********</P><P></P><P>console timeout 0</P><P>terminal width 80</P></BODY></HTML> Thu, 18 Mar 2004 19:34:18 GMT https://community.cisco.com/t5/network-security/routing-problem-via-pix/m-p/284905#M593892 hcgov 2004-03-18T19:34:18Z Re: Routing problem via PIX? https://community.cisco.com/t5/network-security/routing-problem-via-pix/m-p/284906#M593896 <HTML><HEAD></HEAD><BODY><P>Please try using nat traversal: isakmp nat-t </P><P></P><P></P></BODY></HTML> Sat, 20 Mar 2004 15:44:55 GMT https://community.cisco.com/t5/network-security/routing-problem-via-pix/m-p/284906#M593896 b-mackey 2004-03-20T15:44:55Z