No traffic lan-to-lan thru pix 506

[lbradshaw]

OK,

This was working just fine till about a week ago.

Their is a group A behind pix 506 "A". I can vpn in from just about anywhere.

Except, Behind any other firewall.

Group B, behind firewall pix 506 "B" can not see or connect to any resources in group "A".

The only thing I have found in the logs.

is error 305006: translation creation failed, on the source pix.

Any Ideas out there.

Thanks

[mostiguy]

Is there an ipsec tunnel between the two pixes? What does a show crypto ipsec sa show?

[lbradshaw]

never mind.

I got it.

client-Net"A"--nat/pix/pat-internet-pat/pix/nat-non-nat-host

This is a vpn client setting behind a pix firewall connecting to a server behind a different pix firewall across the internet,,, but in this case.. it's just a different address of a small class "c"/28.