|
Posted by AM on January 9, 2006, 2:44 am
If you were Registered and logged in, you could reply and use other advanced thread options
Newbie72 wrote:
[CUT]
> I have also added a route statement in the 3640
> ip route 192.68.48.0 255.255.252 the local address to my pix.
this route is not needed if the 3640 has a default to the PIX.
> The 3640 knows inorder to get to the remote site to go through the pix.
>
>>From the pix I can ping the 3 machines on my lan that the remote site
> is tring to get to.
>
> The tunnel comes up but no data passes through it.
> I can not ping them and they cannot ping me.
>
> For testing purposes I did add the line
> access-list to-phillips permit icmp any any and we were unable to get
> it to pass traffic
The rule above belongs to the ACL that specififies which kind of traffic must be
encrypted. As you specified the IP
protocol for the tunnel the icmp is already included. You need to "move" that
rule (changing the syntax accordingly) to
the outside interface of the PIX as remote LANs were connected directly to that
interface.
Obviously icmp traffic permission must be enabled on the other side.
> Do I need to add any kind of route statement in the my pix to tell it
> any traffic destined to the remote site needs to go through the VPN
> tunnel? How do i do that if I need to.
If you received traffic from that LAN and needed a specific route statement you
would see a specific message ("No route
to host") in your syslog messages.
> What am I missing? Help
Try to increase your level of encryption and hash as soon as you can.
Let us know if you will be sucessful.
HTH, Alex.
| 
Yahoo! 
Google 
Windows Live 
del.icio.us 
digg 
Netscape 
XML site map