Solved: Help! Pix535 VPN configuration not working

eprivott · ‎04-09-2008

Hi,

We are trying to setup a remote vpn to allow clients in to our private lan then be able to use https outbound. Not split tunnel, as the client need to look like they are coming from our domain. Any help would be greatly appreciated. We can connect to the vpn with the client, and we can ping the inside network, but have issues trying to use https outbound via client. Please find my current config attached. Thanks in advance.

acomiskey · ‎04-09-2008

same-security-traffic permit intra-interface

nat (outside) 101 172.21.200.0 netmask 255.255.255.240

I would also add...

crypto isakmp nat-traversal

View solution in original post

acomiskey · ‎04-09-2008

same-security-traffic permit intra-interface

nat (outside) 101 172.21.200.0 netmask 255.255.255.240

I would also add...

crypto isakmp nat-traversal

eprivott · ‎04-09-2008

Hi and thanks. I added those lines and created an access rule to allow 172 access to our DNS. I can use nslookup, but still cannot get out via IE.

husycisco · ‎04-09-2008

Hi Elsie,

Also add the following then post your final config

group-policy test attributes

split-tunnel-policy tunnelall

Regards

eprivott · ‎04-10-2008

Thanks for your reply.

We did not want to do 'split-tunnel, however the commands that ACOMISKEY suggested worked.

Thanks

eprivott · ‎04-10-2008

Thanks!!!

We tried your suggestions and it worked!!!

Thanks Again