VPN session PIX to PIX via Cisco VPN Client V4.7

[lusej0922]

I need to know how to enable on a PIX 501, a source initiated VPN session via Cisco VPN client within the inside network through a PIX 501 to the internet and into another PIX 501 on the remote end to the remote internal network. I can establish a VPN session to either PIX 501 sites from the public side of the internet but not from a private-internet-private connection.

Thanks,

Joe

[nefkensp]

If you want to establish an IPSEC tunnel through a pix firewall, you should do three things:

1) on the local firewall:

if you use an access-list on the inside interface, enable isakmp traffic and protocol ESP:

access-list acl_inside permit udp any eq isakmp

access-list acl_inside permit esp any

2) on the remote firewall (to which you connect), you should enable nat-traversal

isakmp nat-traversal

is a value for the keepalive packets (in seconds)

3) on the VPN client software, make sure that you enable UDP transport (with NAT enabled) in the connection profile

Let me know if these hints have helped you

[lusej0922]

I added the access-list as suggested above. No luck. The remote PIX 501 that I am accessing via the CISCO VPN client works when I am not behind PIX 501. I am including the configuration from the source site and the log session results.

Any help is greatly appreciated... :)

Joe