PIX Tunnel traffic only in one direction

[admin_2]

Hello Everyone, I have set up a tunnel between my PIX 515 and a Checkpoint Firewall at one of our vendors. The tunnel comes up fine, and the vendor can ping machines on my side, but I cannot ping machines on their side. When I do a "show crypto ipsec sa" I show packets decrypted and decapped, but none encrypted or encapped. I have run out of Ideas. Any help would greatly be appreciated.

[mike-greene]

Hi,

Can you post your PIX config. Sounds like an ACL or no-nat issue.

[aklausner]

Hello,

Did you find a solution to your problem ? I have a similar issue but with a netscreen.

Thanks

Alain,

[dombilod]

I had this problem, maybe this hint will help.

Beside of having the access list for the tunnel, you also must configure an ACL to let the traffic flow on the other side. You put an ACL like ...

access-list OUTBOUND permit ip 10.30.0.0 255.255.0.0 10.30.35.0 255.255.255.0

access-group OUTBOUND in interface inside

[marcreiter]

A random thought but does the other end have a return route to you?