Syslog over a VPN link

[SteveGodfrey]

I'm using EasyVPN and want to send syslogs from the remote 501 to a syslog server on the internal network.

The syslog server is on the 10.0.0.0 subnet the VPN is configured to pass packets destined for the 10 network over the VPN link.

The client PC's on the remote network are able to send syslogs to the internal server but the remote 501 is unable to. I get this error message

110001: No route to 10.25.4.16 from 10.29.16.1

Any ideas?

Thanks

[gfullage]

You shouldn't need to do anything VPN-wise to get this working, as the 501 will build a tunnel from it's outside interface to the remote networks automatically. If you add the command:

> logging host outside

then that should be all you need.

The error you're seeing looks like a routing problem, do you have a static route in the PIX for the whoel 10.0.0.0 network pointing inside? Or do you have a static command referencing the 10 network that tells the PIX this network is on the inside? Try adding a specific route for the remote 10 network (the one the syslog server is on) and point it out the outside interface.