Pix to Netscreen VPN

[networkmods]

We are using a Pix 515 to Netscreen at our hosting company firewall over a VPN. Everthing works OK except communication from behind the PIX to the hosting network on TCP port 1026, all other ports communicate OK to the same server. Communications work the other way on this port though. The packet arrives at the PIX and is allowed to leave, but does not appear to be received at the Netscreen end of the VPN tunnel. This is causing problems with Windows domain replication. Any ideas?

[thomaszhong]

Hello,

Our company want to create vpn connection between headquarter and branch offices ,and we have a pix515 and 2 netscreen .

Is your vpn connection created between pix and netcreen(no router between them?) can you tell me how to do this?

Thank you !

[jackko]

by default, all protocol and port will be allowed with a lan-lan vpn tunnel, unless otherwise a restriction has been applied.

do "sh cry ips sa" on the pix to verify whether there is any error with the lan-lan vpn.

[jackko]

just wondering how you go.