topic Re: Need help with remote access vpn in Network Security https://community.cisco.com/t5/network-security/need-help-with-remote-access-vpn/m-p/1332198#M833497 <HTML><HEAD></HEAD><BODY><P>That's where I'm confused. I'm not NATn'g anything.</P></BODY></HTML> Mon, 13 Jul 2009 22:29:06 GMT mjsully 2009-07-13T22:29:06Z Need help with remote access vpn https://community.cisco.com/t5/network-security/need-help-with-remote-access-vpn/m-p/1332194#M833493 <P>I have a PIX 501 with an active L2L tunnel on it. I have also just added a remote access vpn, in which I'll be connecting to the inside network with the Cisco vpn client using local authentication. I've got it setup so I can authenticate and get an assigned ip address, but I cannot ping across to the inside network anywhere. I have sysopt enabled so that is not the issue. I'm not sure if something is conflicting with the L2L tunnel or not. I've attached the config and broken it up to best describe what its doing. Can someone please advise on to what the issue could be?</P><P></P><P> </P><P></P> Mon, 11 Mar 2019 15:54:23 GMT https://community.cisco.com/t5/network-security/need-help-with-remote-access-vpn/m-p/1332194#M833493 mjsully 2019-03-11T15:54:23Z Re: Need help with remote access vpn https://community.cisco.com/t5/network-security/need-help-with-remote-access-vpn/m-p/1332195#M833494 <HTML><HEAD></HEAD><BODY><P>Add...</P><P></P><P>isakmp nat-traversal</P></BODY></HTML> Mon, 13 Jul 2009 17:15:49 GMT https://community.cisco.com/t5/network-security/need-help-with-remote-access-vpn/m-p/1332195#M833494 acomiskey 2009-07-13T17:15:49Z Re: Need help with remote access vpn https://community.cisco.com/t5/network-security/need-help-with-remote-access-vpn/m-p/1332196#M833495 <HTML><HEAD></HEAD><BODY><P>That did it!! </P><P></P><P>Can you explain why that is needed? Appreciate the fix!</P></BODY></HTML> Mon, 13 Jul 2009 17:25:56 GMT https://community.cisco.com/t5/network-security/need-help-with-remote-access-vpn/m-p/1332196#M833495 mjsully 2009-07-13T17:25:56Z Re: Need help with remote access vpn https://community.cisco.com/t5/network-security/need-help-with-remote-access-vpn/m-p/1332197#M833496 <HTML><HEAD></HEAD><BODY><P>Hi</P><P></P><P>During the phase II negotiation there is seperate unidirectional ESP session between PIX and the VPN client.So when there is NAT involved in the set up there are issues due to the translation .</P><P>To overcome those issues NAT-T is used.</P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/docs/security/asa/asa72/command/reference/i3_72.html#wp1732264" target="_blank">http://www.cisco.com/en/US/docs/security/asa/asa72/command/reference/i3_72.html#wp1732264</A></P><P></P><P>HTH</P><P>Ullas</P></BODY></HTML> Mon, 13 Jul 2009 21:45:35 GMT https://community.cisco.com/t5/network-security/need-help-with-remote-access-vpn/m-p/1332197#M833496 ullasupendran 2009-07-13T21:45:35Z Re: Need help with remote access vpn https://community.cisco.com/t5/network-security/need-help-with-remote-access-vpn/m-p/1332198#M833497 <HTML><HEAD></HEAD><BODY><P>That's where I'm confused. I'm not NATn'g anything.</P></BODY></HTML> Mon, 13 Jul 2009 22:29:06 GMT https://community.cisco.com/t5/network-security/need-help-with-remote-access-vpn/m-p/1332198#M833497 mjsully 2009-07-13T22:29:06Z Re: Need help with remote access vpn https://community.cisco.com/t5/network-security/need-help-with-remote-access-vpn/m-p/1332199#M833498 <HTML><HEAD></HEAD><BODY><P>Hi, at the client side has been nat, the client connect to VPN server.</P><P></P><P> </P><P></P></BODY></HTML> Tue, 14 Jul 2009 12:54:30 GMT https://community.cisco.com/t5/network-security/need-help-with-remote-access-vpn/m-p/1332199#M833498 pccw258103 2009-07-14T12:54:30Z