Remote Access VPN

[Lharrypersaud]

I have a pix 515 configured for remote access vpn and it's working fine. I have a workstation connected to another subnet of the network. The workstation is using a vpn client software. When i connect this workstation to a Linksys router using the vpn client software it works fine but when i do the same thing using a pix 501 instead of the Linksys it never works. I think i need to open some ports on the pix 501 to let incoming vpn traffic in but i am not sure which ones to open. Can someone please help me with this?

Thanks for any help

[paddyxdoyle]

Hi,

The following command permits IPSEC protocols on a PIX from all sources, this saves you having to add specific access-lists containing the IPSEC ports

sysopt connection permit-ipsec

However, If you do want to add access lists permitting IPSEC from a specific source and not use sysopt connection permit-ipsec then you need to allow ESP and udp 500 from the external IPSEC gateway address.

HTH

Paddy

[Lharrypersaud]

I tried the sysopt connection permit-ipsec and it did not work. I also cannot ping any hosts at the head office site through the vpn even though i have the - access-list outside_acl permit icmp any any echo-reply and this access list is added to the outside interface using the access group command. Can you guys think of anything else that could be causing this not to work?

Thanks again