Lab Pix 506e to 506e, (can ping only to the outside interface)

[mariocabrejo]

Hi, I am new with firewalls

Created a lab running 3 2500series routers running rip, all traffic is good.

NOw i intall the 2 firewalls with correct addresses en each side of the lab, and was able to ping only to the outside interface from one end 506e to the other end 506e. (Is this ok?) .

THen i tryed to create my VPN using shared key and lost conectivity between the 2 firewalls(no more ping)

Please any comments are apreciated for this rookie.

THanks

[tohuang]

Hi,

Yes, it is true. You can only ping outside interface from one pix to the other end pix. You can't ping anything behind the pix unless you have static translation and permission for icmp traffic. The inside interface, however, you can't ping it from outside.

As for the VPN question, it should be the configuration issue. You might want to attach the config for troubleshoot.

Thanks

Tony