Cannot Ping inside network

Unanswered Question
Nov 8th, 2008


I need help with a PIX 501 configuration. Problem is i cannot ping inside network using client VPN.Client VPN version that i am using is 5.0. Attached file is my configuration.Thanks in advance.



  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
acomiskey Mon, 11/10/2008 - 08:04

no access-list test permit ip

isakmp nat-traversal

ajagadee Mon, 11/10/2008 - 10:20

Hi Adam,

Just curious why the above access-list needs to be removed? Is it not the NAT 0 ACL for the L2L Traffic.

crypto map transam 1 ipsec-isakmp

crypto map transam 1 match address 101

crypto map transam 1 set peer x.x.x.x

access-list 101 permit ip



ajagadee Mon, 11/10/2008 - 11:32

Hi Chris,

After you add this command "isakmp nat-traversal" as per Adam's suggestion and still have issues with connectivity from the VPN Client to the Pix Firewall, can you post the outputs of

Show cry is sa

Show cry ips sa

along with the Destination IP Address that you are trying to access.



*Pls rate if it helps*

cempuerto Mon, 11/10/2008 - 17:02

Thanks so much for your time. I have solve the problem. I added several commands.

name client

access-list 101 permit ip

access-list NoNAT permit ip

access-list NoNAT permit ip client

access-list in_outside permit icmp any any

access-list outside_cryptomap_dyn_20 permit ip any client

crypto ipsec transform-set CSB esp-des esp-md5-hmac

crypto ipsec transform-set myset esp-des esp-md5-hmac

crypto dynamic-map dynmap 10 match address outside_cryptomap_dyn_20

crypto dynamic-map dynmap 10 set transform-set myset

crypto map mymap 10 ipsec-isakmp dynamic dynmap

crypto map mymap interface outside


This Discussion