Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Pix to Pix Ras VPN

Hi all,

I’m trying to connect to a remote site that is protected by a PIX 501 using the cisco vpn client. I can connect to the remote site if I go through a dialup or any other dsl connection, however, I cannot connect from our main office which is also protected by a PIX 506e. The PIX 506e is also configured for RAS VPN.

Cisco VPN Client (v4.x)--->PIX506--->Internet--->Destination PIX501--->Local

When I view the syslog from the pix 506e which is protecting my connection, I’m getting the following message “%PIX-3-305006: portmap translation creation failed for protocol 50 src inside 172.16.1.132 dst outside:66.6.x.x”

Any assistance is appreciated

1 REPLY
Gold

Re: Pix to Pix Ras VPN

On 506 try

fixup protocol esp

(maybe you will need disable isakmp on interface than fixup and than enable isakmp on interface again)

On 501 could be helpful

isakmp nat-traversal

M.

Hope that helps , rate if it does

96
Views
0
Helpful
1
Replies
CreatePlease login to create content