DSL and T1 on same PIX - internet through DSL and VPN through T1
I am trying to configure my pix 515 to route internet traffic to the DSL (ethernet0) and establish a vpn with corporate through a T1 (ethernet2). Internet works fine but the vpn tunnel will not establish. Here is a bit of my config:
global (outside) 1 interface
global (intranet) 2 interface
nat (inside) 0 access-list no_nat
nat (inside) 1 x.x.x.x 255.255.0.0 0 0
nat (intranet) 1 access-list no_nat
access-group outside_access_in in interface outside
access-group inside_access_in in interface inside
access-group intranet_access_in in interface intranet
route outside 0.0.0.0 0.0.0.0 x.x.x.x 1
route intranet x.x.x.x 255.0.0.0 x.x.x.x 1
route intranet x.x.x.x 255.255.0.0 x.x.x.x 1
I am completely lost (brain freeze on this). What am I doing wrong? Thanks for any input.
Re: DSL and T1 on same PIX - internet through DSL and VPN throug
I am not sure that there is enough here for us to find the problem. For example your nat statements refer to inside but you do not show how the inside is configured. Your nat(intranet) references access list no_nat but you do not show us the access list. You also do not show anything about how the VPN is configured.
If you give us enough of the config (changing sensitive details) perhaps we can help you find the problem.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
[toc:faq]Introduction:This document describes details on how NAT-T
works.Background:ESP encrypts all critical information, encapsulating
the entire inner TCP/UDP datagram within an ESP header. ESP is an IP
protocol in the same sense that TCP and UDP are I...