topic Re: PIX 501 in Network Security

PIX 501

rene.melendez — Mon, 11 Mar 2019 13:20:45 GMT

Hello everybody

I have PIX 501 conected a modem where i configured a vpn, I created a vpngroup and I give all the permission, I can connect across the vpn but my problem is that I can't to ping the pix and inside network.

I used the command split tunneling and nonat for the VPN's ip.

Regards,

Re: PIX 501

Marwan ALshawi — Sun, 27 Jul 2008 00:26:55 GMT

if the software before version 7

try to make fixup icmp

if 7 or above

make the inspect icmp icmp

inspect icmp error

under the global_inspection rule

also add ACLs to allow the icmp between VPN IPS and whatever u want

Rate if helpful

Re: PIX 501

Farrukh Haroon — Sun, 27 Jul 2008 04:56:30 GMT

Is traffic besides ICMP working? If it is, enable ICMP inspection.

Else check the routing, crypto ACLs, split tunnel configs/routers, NAT exemption etc.

Regards

Farrukh

Re: PIX 501

rene.melendez — Mon, 28 Jul 2008 13:16:07 GMT

Hi again, thanks for you help friends, I enabled the fixup snmp error, but I still can't connect to inside network, I attached the sho ver and the sho run, I am connect with the pix through PDM. (El pix even can't to ping the remote site)

Thanks a lot (sorry for my english).

Regards,

Re: PIX 501

rene.melendez — Mon, 28 Jul 2008 13:24:08 GMT

I forgot load the file.

Sorry

Re: PIX 501

Farrukh Haroon — Mon, 28 Jul 2008 18:03:40 GMT

Please do the following:

1) Try to enable NAT-T

isakmp nat-traversal

2) Try to change your split-tunnel ACL from extended to standard.

Regards

Farrukh