VPN CLient and two networks

[bubba271]

I have remote clients that VPN to our PIX box and access the local LAN. I would like the clients to also be able to access a second network that is connected through a frame relay. I've set up the route in the frame router to be able to access the subnet the VPN client gets attached to and the VPN client can ping the frame router but I can't make it past that. I put what I thought were the routes required in the PIX box but that didn't help.

Any help would be appreciated.

Thanks,

MK

 

[jbenh]

Sounds like you need a route on the pix to the frame relay network since you can get to the frame router's address on the pix network.

route inside x.x.x.x 255.255.255.0 y.y.y.y 1

where x is the frame relay network behind the frame router and y.y.y.y is the gateway ip (the local side of the frame router?)

 

[yizhar]

HI.

All hosts and routers along the frame relay path should have a route to the vpn pool ip addresses.

Bye


Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[jbenh]

here is an example of whay Yizhar it talking about

ip local pool vpn_pool 10.10.10.1-10.10.10.63

access-list vpngroup permit ip 10.10.10.0 255.255.255.240 192.168.239.0 255.255.255.0

access-list vpngroup permit ip 192.168.239.0 255.255.255.0 10.10.10.0 255.255.255.240

access-list vpngroup_natfree permit ip 192.168.239.0 255.255.255.0 10.10.10.0 255.255.255.240