cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
301
Views
0
Helpful
1
Replies

CVPN Client can only access machines on pix vlan

bclements1
Level 1
Level 1

Can anyone provide some pointer for the following problem?

We have a VPN configuration set up on our pix. When a CVPN client connects to the PIX successfully, the CVPN client can only ping and access machines on the VLAN which the pix is within. When we try to ping or connect to hosts on other VLAN's within our network, we cannot.

Anybody have any pointers or ideas why this would be?

1 Reply 1

mhussein
Level 4
Level 4

1. The "nat 0" access-list should specify all local subnets, e.g:

nat (inside) 0 access-list nonat

access-list nonat permit ip

access-list nonat permit ip

2. The router or L3 switch behind the pix should have a route back to the vpn client pool subnet, e.g:

ip route

If these configs are already in place, then post your configs, I'm sure someone would be able to suggest a solution.

Regards,

Mustafa

Review Cisco Networking for a $25 gift card