VPN Client Connectivity issues

[danny_villela]

I am using the cisco VPN client to connect to our network, which sits behind a 515E. The client gets authenticated and obtains an ip, but cannot ping or communicate with any of the hosts. The connection is being establish from a clients network which also sits behind a 515E. I have succesfully connected using the same policy from other locations and have had no issues. What confuses me is that we used to have a Netscreen firewall before and had a netscreen vpn client that connected from their network with out a problem. Is there something that they need to on their firewall so that we can pass traffic through?

[mhussein · Accepted solution]

Try enabling NAT-T on your pix, by configuring:

isakmp nat-traversal 20

and configure the vpn client accordingly:

http://www.cisco.com/warp/public/471/cvpn_3k_nat.html#conf_client

I think these threads are helpful:

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Virtual%20Private%20Networks&topic=General&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.1dd7dda4

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Virtual%20Private%20Networks&topic=General&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.1dd7fe80

[danny_villela]

Thank you for the links...one of them ended up helping out. I ran the command isakmp nat-traversal and that solved the issue. Client is able to connect now and things look good. Thanks again.

[mlh]

Hi...

did you found a solution for this ?

Regards

Martin