Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Chriss Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Creating VPN tunnel on PIX-506E

Status
Not open for further replies.

adnorton

Technical User
May 19, 2004
76
US
Can anyone assist me in creating a VPN tunnel for my users on a 506E? I tried using the wizard but I can't seem to ping anything on the network after I connect. I connect fine but can't ping anything locally.

I also wanted to check and see if it was possible after I connect if I can see or connect to anything that is on the site-site tunnel that is already available.

Thanks in advance.
 
It's sort of hard to walk someone through a setup because everyone's VPN is different. First off, as a warning, the Pix PDM wizards kinda suck....really bad. There is a new version of the PDM called ASDM that is only available with the Pix 7.0 Operating System. Unfortunately that OS doesn't work with the 506's (not yet anyway). Could you post your running configuration on this thread, and also give us some general information about the networks you are using.

To get the running config, go to the PDM, goto Tools, and click on Command Line Interface...then type in the command 'show running config' or shorthand 'sh run conf', then copy and paste the result here.

For network information, give us the internal and external addresses of both your Pix boxes.
 
Unless you are running Pix IOS 7.0 you wont be able to connect through the site to site tunnel with a client connection. You would have to have a router routing that traffic. What type of VPN connections do you want? PPTP, L2TP, IPSEC?
 
hi azzlano,

i assume your case is to enable user to use cisco vpn client to access internal network via pix506

in this case, for your vpnclient ipaddr, better use another ip range, eg. 192.168.2.x for vpnclient while internal network is 192.168.1.x
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top