Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

CANNOT ACCESS INTERNAL NETWORK

Hi ,

I have got PIX515E and I using win2k clients using l2tp over ipsec to establish vpn with it .My internal network say is 20.208.1.x and my outside is say is 200.244.204.xxxx .The clients connect ok and establish a session and are given a internal IP address 20.208.25.x .But this client cannot ping any internal network machine .

Access-list on the PIX is

access-list 90 permit ip 10.0.0.0 255.255.255.0 10.208.25.0 255.255.255.0

nat (inside) 0 access-list 90

Thanks

Raj

1 REPLY
Cisco Employee

Re: CANNOT ACCESS INTERNAL NETWORK

Shouldn't that be:

> access-list 90 permit ip 20.0.0.0 255.255.255.0 20.208.25.0 255.255.255.0

or did you type your question wrong? Can you provide the full config? If you do "sho cry ipsec sa" on the PIX, do you see it decrypting (receiving) and encrypting (sending) packets? Do the internal machines have a default route that points to the PIX, or at the very least a route for the 20.208.25.x network that points to the PIX?

81
Views
0
Helpful
1
Replies
CreatePlease to create content