Solved: PIX Configuration

rmwhite59 · ‎12-22-2007

Could someone review my config? I need all traffic to flow accross the tunnel from one network to the next. I believe my access list and crypto map is right.

royalblues · ‎12-23-2007

Crypto access list is fine but the access-list configured on the interface is also referencing the same access-list which is wrong.

Since you do not have the sysopt connection permit-IPSec command configured, you would be required to allow the IPsec traffic in your access-lists applied on the interface

Have a look at this link for a PIX-to-PIX IPSEC config example

http://www.cisco.com/warp/public/110/38.html

HTH

Narayan

View solution in original post

royalblues · ‎12-23-2007

Crypto access list is fine but the access-list configured on the interface is also referencing the same access-list which is wrong.

Since you do not have the sysopt connection permit-IPSec command configured, you would be required to allow the IPsec traffic in your access-lists applied on the interface

Have a look at this link for a PIX-to-PIX IPSEC config example

http://www.cisco.com/warp/public/110/38.html

HTH

Narayan