cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
684
Views
0
Helpful
6
Replies

Pix to Pix VPN with no LAN

cuchara61
Level 1
Level 1

Same old story, but I've been unable to resolve. Client that we've recently taken over with 501 to 506 VPN but can't access LAN resources from one side to the other. (Ping, browse, telnet...). Both configs attached. Thanks in advance.

2 Accepted Solutions

Accepted Solutions

You have encr/decr on both sides, are you sure BOTH sides cannot access each other?

Regards

Farrukh

View solution in original post

Great to know you have it working now :)

Please rate helpful posts.

Regards

Farrukh

View solution in original post

6 Replies 6

Farrukh Haroon
VIP Alumni
VIP Alumni

Can you post the following from both sides after establishing the tunnel and doing a continuous ping:

show crypto isakmp sa

show crypto ipsec sa

Also have a look at:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080094761.shtml

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_tech_note09186a008009448c.shtml

Regards

Farrukh

Thanks, output attached. I had already reviewed both of the mentioned links.

You have encr/decr on both sides, are you sure BOTH sides cannot access each other?

Regards

Farrukh

Thanks, happs links took care of it. It's always an ACL!! Thanks again guys.

Great to know you have it working now :)

Please rate helpful posts.

Regards

Farrukh

kaachary
Cisco Employee
Cisco Employee

Doesnt look like a vpn problem anymore, just make sure the hosts in question do not have a Firewall installed.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: