VPN through a Pix 501

[jasonboyes]

I was wondering is this possible and if so how do I go about doing this. My set up it like this I have a PIX 501 and I need to use the Nortel VPN client to connect to an outside vendor (do not know exactly what it is connecting to) from a Windows 2000 Pro workstation.

Thanks in advances

Jason

 

[themut]

You need to open UDP port 500 and IP protocol 50. You also need to either configure a static translation for the VPN client or enable NAT-T on the headend device ending the tunnel. If the VPN device doesn't support NAT-T then you could also enable fixup protocol esp-ike on your PIX but you need to run 6.3.X on your PIX, however this option cannot work with a lan-to-lan tunnel simultaneously.