Allow traffic from VPN client through Pix firewall

[ahoangphan]

Hi,

I have a VPN router installed in front of a Pix, the ip pool for VPN router to assign to client is 10.10.0.2 -.254. The subnet behind Pix is 10.1.1.0. Once I get connected to VPN, I can ping any machine on the 10.1.1 network, but I can't seem to open a webpage of a web server on that 10.1.1 network. Is there any thing else that I need to add on the Pix to allow the traffic from that 10.10 network to go through the Pix to 10.1.1 network. ?

[wdrootz]

Yes, you’ll need to open conduits for that. I suspect the only reason you can ping is because you have a conduit permit icmp any any or something similar in there.