Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

PIX ip local pool problem

I have added a new PIX-PIX VPN to my existing system and am having a problem getting VPN clients that connect to my PIX to be able to see addresses behind the other PIX.

My local nodes (on my subnet) can see the nodes on the remote PIX subnet fine, but we suspect hat it is because of the subnet mask assigned to my VPN clients that they cannot "see" the other network.

local PIX internal addresses 166.110.128.0/255.255.252.0

remote PIX internal addresses

166.110.0.0/255.255.128.0

My VPN clients get an address from my pool of

166.110.132.200-166.110.132-250

but I think the problem is that the subnet mask they get is 255.255.0.0.

When I try to assign a mask to the IP LOCAL POOL command I always get an error that the mask is bad.

How can I get my pool to give an address at last of 166.110.132.200/255.255.255.0 ?

Thank you

1 REPLY
Gold

Re: PIX ip local pool problem

the mask is automatically pushed from the pix according to the class, i.e. class a 10.0.0.0.

it is not necessary to keep the pool in the same range, and you can simply assign 192.168.1.0/24.

107
Views
0
Helpful
1
Replies