regular translation creation failed for protocol 50 src inside

[rootes-sunbeam]

Enviroment

CiscoVPN(CLIENT)---PsssThruPix---Internet---RemotePix

I want established a VPN tunnel to the romtePix, but i always got the logging message 305006.

What's wrong

PIX Version 6.2

The authentication is ok....

esp and udp/500 is permitted on the outside and inside interface

Please need help...........

[ehirsel]

It may be a nat or pat issue. Check if you are allowing NAT via a static to allow the inbound esp from the remotepix to the client on the passthurpix. If you are using PAT, then you need to upgrade to pix 6.3.3 and run the fixup protocol esp-ike to allow IPSec to traverse PAT functions correctly. Alternatively, on the remote pix upgrade the code to 6.3.3 and enable nat transversal for ike/ipsec sessions. Then on the passthrupix, allow udp from the client to remotepix port 4500. The client will need to be reconfigured to use NAT-T via IPSec over UDP in that case.

Let me know if this helps.

[rootes-sunbeam]

upgraded to 6.3.3 with fixup protcol esp-ik, and now it's running

thanks Marcus