My VPN connection to the PIX does work, but when i try to ping anything on the remote network i get the message: "Negotiating IP strategy" 4 times and then it fails.
This is pretty weird because in my PIX configuration I use the same IPSEC policy for both the L2TP protocol and the...
yes, thank you, you were right about the spelling mistake lol :)
no my win2k client will connect to the pix (the VPN connection succeeds), but i cannot ping any machine in the remote local network. I'll work on it today, and i'll let you know how it works out.
Let's say that you outside interface's ip address is 100.0.0.1 and you dialin on this interface, you input an access-list like this one:
access-list acl-out permit gre host 100.0.0.1 host 100.0.0.5
access-list acl-out permit tcp host 100.0.0.1 host 100.0.0.5 eq 1723
access-group acl-out in...
That's great you succeeded !!!
I'm still having trouble with my configuration, it still doesn't work, and for some reason i cannot input this line in my PIX:
vpdn group l2tpipsec client authentication local
Maybe it's because my IOS version is 6.2 and yours is 6.3, i'll check this out.
And...
If you want to disable NAT on a pool of address, you type in these lines:
Here is the pool of address you do not want to NAT:
access-list nonat permit ip 20.1.1.0 255.255.255.0 50.1.1.0 255.255.255.0
Now with the nat 0 command, you specify that you don't want to NAT this access list:
nat...
isakmp policy 22 authentication pre-share
isakmp policy 22 encryption des
isakmp policy 22 hash md5
isakmp policy 22 group 1
isakmp policy 22 lifetime 86400
these lines describe the IKE policy which will be used between the two hosts. So here we use DES encryption, and md5 hashing. Group 1 is...
hello, i'm sorry if there is so much reading, but i think that many people may find some interesting thoughts in these lines :)
we already have VPNs configured on our PIX, but we only use VPN between several remote sites linked through PIXes as well.
What I would like to do is being able to...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.