I have configure my 2 pix connected in LAN environment. But i'm not able to make it connected (but when i'm using pdm, IKE status was 1). I'm not able to ping other LAN behind other PIX. Can anyone help me. Please view my PIX configuration.
PIX 1 (Main)
PIX Version 6.3(1)
interface ethernet0 auto
interface ethernet1 auto
nameif ethernet0 outside security0
nameif ethernet1 inside security100
enable password xxxxxxxx
clock timezone MYT 8
fixup protocol ftp 21
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
fixup protocol http 80
fixup protocol http 2000
fixup protocol ils 389
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol sip 5060
fixup protocol sip udp 5060
no fixup protocol skinny 2000
fixup protocol smtp 25
fixup protocol sqlnet 1521
name 192.168.30.0 KL
name 192.168.20.0 M3PS
name 192.168.50.0 SOMPJ
name 192.168.40.0 Penang
name 192.168.10.147 Email
name 192.168.10.0 Tampoi
access-list 100 permit tcp any host x.x.78.3 eq www
If you are using PDM and are not overly familiar with setting up VPNs try the VPN wizard in the PDM. Remember that the "inside" network is the local LAN side and the "outside" is the remote side LAN,
I would suggest writing down all your settings as you go along, it makes troubleshooting easier. The PDM adds its own names for some things that are both long and confusing, writing it down (documenting it) as you go makes debugging about 1000 times easier.
I did something similar to what you are doing about 18 months ago and using the PDM the first time was an excellent learning tool for setting up VPNs.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...