Unfortunately a RADIUS server config is beyond the scope of the project. I only have three groups so RADIUS would probably be overkill. (I will definitely try my hand at it later though. :-) )
What I can't figure out is exactly how to go about it and where to apply the access lists? I...
I have 3 vpngroups (and corresponding ip pools) setup and want to limit access to specific services/IPs based on this.
I know I need to restrict based on ACL's but how do I have them apply? Is it the crypto map statement?
vpn1 192.168.10.0 access to all 10.10.10.0:all
vpn2 192.168.20.0 access...
Chico,
Thanks! I added the .46 address to the network object group and it worked. I am still a little confused as to why it worked before without it in the object group. I will have to play with that to see why.
Thanks again!
I had the IDS functions up before. That's why I am stumped. If the IDS is the problem, would it still allow external pings to the external interface? I will disable it and see if that helps but I would like their functionality back at some point.
Thanks,
Brent
I recently added a VPN config to my Pix and was able to ping from internal to external before it's addition. Now that I have a working VPN, I can no longer ping from behind the firewall. I can ping the internal intf. from inside and the external intf. from outside but that's as far as we go...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.