I wondered if anyone could help me. I have basically a site to site VPN (between a ASA 5505 and a Pix 501).
The tunnel is up and seems to be working but they can't access any resources on our side.
I'm getting the following error:
Syslog ID: 305005
Source IP: 172.x.x.x (Internal IP)
No translation group found for icmp src 10.20.x.x (there IP) dst inside 172.x.x.x (type 8, code 0)
Any ideas on how to fix this?
Your nat exemption should be...
access-list inside_nat0_outbound extended permit ip 172.16.0.0 255.255.0.0 10.2
nat (inside) 0 access-list inside_nat0_outbound
Also get rid of...
no nat (outside) 0 access-list outside_nat0_outbound
no access-list outside_nat0_outbound extended permit ip 172.16.0.0 255.255.0.0 10.2