pix with vpn client

[gangelozzi]

I have the following problem I have 2 remote location. Each location has there own pix. Both locations also have the save internal network scheme. I need only one user from location A to be able to VPN into Location B. You can VPN into location B from home just fine. Location A can connect and authenicate, but I can not access any resources on location B network. any ideas

[umedryk]

If you are using a AAA, check the Authorization part of it.

[tholmes]

Hello

I have 2 pixs into which I can VPN using Client 4.0.3

both have 6.3(3) and both have ISAKMP NAT _TRAVERSAL configured.

For the NAT-T, one works, the other doesn't, the one that doesn't uses an AAA server. I saw your response and think this is the reason. What would I have to change on the Authorisation to allow NAT-T to work .

Any help appreciated

Regards Tony

[shaun.oliver]

Are you still having this problem?

Check that you've got NAT Traversal turned on in the "location B" PIX:

isakmp nat-traversal 30

Hope this helps.