VPN RAS able to see other subnets

[dave2korg]

I know someone posted this before, I just can't seem to find the Cisco article. I am looking to setup my PIX 515E mirror so VPN users will be able to reach other subnets other than the one the PIX resides on.

My setup (example):

Mirrored PIX serves 192.168.1.x/24 subnet, and 192.168.4.x/24 subnet. VPN Site-to-Site 10.10.15.x/24 subnet (static IP).

Is it just an ACL I need to change, or am I a moron?

David McKissic
A+, Net+, i-net+, CCNA, CNE, CNA

 

[dave2korg]

I forgot to add that while on VPN, users can only access 192.168.1.x, and not either of the subnets.

David McKissic
A+, Net+, i-net+, CCNA, CNE, CNA

 

[Supergrrover]

Here is the line to DMZ (other interface as interesting traffic for VPN)

http://www.cisco.com/en/US/products...s_configuration_example09186a00806a5cea.shtml

Here is the link for multiple networks inside pix

http://www.cisco.com/en/US/products...s_configuration_example09186a0080094767.shtml

You can combine to the two to get VPN to any internal network.


Brent
Systems Engineer / Consultant
CCNP, CCSP