Hi Yes the problem seems to be with the german Telekom .the problem lies with the dhcp lease time ( dynamic ip address assignment to ur dsl router )being very less and with the ip assignment.Hence we need to make sure lease time from the isp and keep...

Hi,Does the VPN tunnel drop frequently ,if that is the case then you need to enable isakmp keepalives :Router : crypto isakmp keepalive 30 5Pix : isakmp keepalive 30 5Note: The first number is the keepalive interval in seconds. It says tosend a keepa...

Hi,You need to use either conduits or access-list statements to open the ports: The syntax if u are using conduits :conduit permit host eq host Please let me know if you have any queries. Thanks, Deepali

HiPlease add this command on the PIX:isakmp nat-traversal 20 Please let me know if this helps. Thanks, Deepali

Hi,I suggest you make these changes and this should work: Change the ip pool , let the ip pool be different from the inside address :ip local pool abc 10.1.2.1-10.1.2.254 Please remove this command , match-address is used only in the case of L2L tunn...