Pix to Pix Ras VPN

[phlitservices]

Hi all,

I’m trying to connect to a remote site that is protected by a PIX 501 using the cisco vpn client. I can connect to the remote site if I go through a dialup or any other dsl connection, however, I cannot connect from our main office which is also protected by a PIX 506e. The PIX 506e is also configured for RAS VPN.

Cisco VPN Client (v4.x)--->PIX506--->Internet--->Destination PIX501--->Local

When I view the syslog from the pix 506e which is protecting my connection, I’m getting the following message “%PIX-3-305006: portmap translation creation failed for protocol 50 src inside 172.16.1.132 dst outside:66.6.x.x”

Any assistance is appreciated

[m.sir]

On 506 try

fixup protocol esp

(maybe you will need disable isakmp on interface than fixup and than enable isakmp on interface again)

On 501 could be helpful

isakmp nat-traversal

M.

Hope that helps , rate if it does