I get the following error when trying to connect a vpn client through an ASA5505 with an already configured ipsec AES/256 site to site connection:
regular translation creation failed for protocol 50 src:inside:192.168.1.167
The site to site addressing is not relevant, I'm not trying to pass traffic over the site-to-site, but rather create a new vpn from inside client to outside external vpn box that's not under my control.
The client is able to create a connection, but no traffic is passed, when I try to ping / rdp, the above message is returned to me.
If I add the rule static(inside, outside) interface 192.168.1.167 netmask 255.255.255.255 then it works, everyting works, but ONLY from this computer.
Been googling for hours, but with no result as of yet.
Hope someone can shed some light over my issues.
Hi, have the far end client running the VPN server to enable NAT-T, if they have a PIX/ASA have then add crypto isakmp nat-traversal 20 just like you do have in yours.