topic Re: IPsec client connection in Network Security https://community.cisco.com/t5/network-security/ipsec-client-connection/m-p/849240#M955987 <HTML><HEAD></HEAD><BODY><P>I tried removing it, and the behaviour changes slightly, without the management-access statement the ssh session closes immediately, with it the session hangs.</P></BODY></HTML> Wed, 30 Jan 2008 17:35:27 GMT mark.j.hodge 2008-01-30T17:35:27Z IPsec client connection https://community.cisco.com/t5/network-security/ipsec-client-connection/m-p/849237#M955979 <P>I have setup a IPsec VPN Client connection to a PIX515 Firewall pair. It works as expected in most respects, I can gain access to all devices on the internel network, except the active firewall. I can ping the inside address, but not telnet,ssh or asdm.</P><P></P><P>The PIX is running 8.0(3) software, I have checked the nat0 access list and it looks fine. I have confirmed that "management-access inside" has been configured.</P><P></P><P>When I try and connect (ssh) I get the following error messages (sanitised), but cannot find any information on NP Identity.</P><P></P><P>Jan 30 2008 16:46:16: %PIX-6-302013: Built inbound TCP connection 760 for outside:10.20.1.226/2800 (10.20.1.226/2800) to NP Identity Ifc:10.20.1.253/22 (10.20.1.253/22) (userid)</P><P>Jan 30 2008 16:46:16: %PIX-6-302014: Teardown TCP connection 760 for outside:10.20.1.226/2800 to NP Identity Ifc:10.20.1.253/22 duration 0:00:00 bytes 0 Flow terminated by TCP Intercept (userid)</P><P>Jan 30 2008 16:46:16: %PIX-6-302013: Built inbound TCP connection 761 for outside:10.20.1.226/2800 (10.20.1.226/2800) to NP Identity Ifc:10.20.1.253/22 (10.20.1.253/22) (userid)</P><P></P><P>10.20.1.226 is the pool allocated VPN address.</P><P>10.20.1.253 is the inside address of the firewall.</P><P></P><P>I have recently setup a very similar configuration, on an ASA device, running the same software versions and it works fine.</P><P></P><P>Suggestions appreciated.</P> Mon, 11 Mar 2019 11:56:03 GMT https://community.cisco.com/t5/network-security/ipsec-client-connection/m-p/849237#M955979 mark.j.hodge 2019-03-11T11:56:03Z Re: IPsec client connection https://community.cisco.com/t5/network-security/ipsec-client-connection/m-p/849238#M955981 <HTML><HEAD></HEAD><BODY><P>Hi Mark, ¨</P><P></P><P>try adding statement </P><P></P><P>management-access inside</P><P></P><P>it should provide for firewall management over IPsec tunnel, see if that helps.</P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/m.html#wp1863771" target="_blank">http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/m.html#wp1863771</A></P><P></P><P></P><P>Rgds</P><P>Jorge</P></BODY></HTML> Wed, 30 Jan 2008 16:50:20 GMT https://community.cisco.com/t5/network-security/ipsec-client-connection/m-p/849238#M955981 JORGE RODRIGUEZ 2008-01-30T16:50:20Z Re: IPsec client connection https://community.cisco.com/t5/network-security/ipsec-client-connection/m-p/849239#M955984 <HTML><HEAD></HEAD><BODY><P>Jorge,</P><P></P><P>statement is already there..</P><P></P><P>Mark</P></BODY></HTML> Wed, 30 Jan 2008 16:53:24 GMT https://community.cisco.com/t5/network-security/ipsec-client-connection/m-p/849239#M955984 mark.j.hodge 2008-01-30T16:53:24Z Re: IPsec client connection https://community.cisco.com/t5/network-security/ipsec-client-connection/m-p/849240#M955987 <HTML><HEAD></HEAD><BODY><P>I tried removing it, and the behaviour changes slightly, without the management-access statement the ssh session closes immediately, with it the session hangs.</P></BODY></HTML> Wed, 30 Jan 2008 17:35:27 GMT https://community.cisco.com/t5/network-security/ipsec-client-connection/m-p/849240#M955987 mark.j.hodge 2008-01-30T17:35:27Z