Pix to router vpn connection
We created an ipsec vpn tunnel using preshared key between the router and pix box. The ipsec tunnel gets established, but only some of the traffic can flow if initiated by the PIX source networks.
We have ten rules listed in the acl. We have compared them and checked the masking, since it is inverted for the router ACL. If someone behind the pix box generates a ping from an ACL defined subnet - the router recipient networks can suddenly "see" all nodes in the pix protected network.
The initial request for connection seems to have to come from behind the pix box. The connection will work for a period of time and cannot be initiated from networks behind the router. The show crypto sessions (router) do not show the session until it established by an end user ping behind the pix unit. The pix box also supports vpn client users.
Thanks,
Jim
