Problem with VPN connection from 3600 to Pix 501 to Zyxel FW

[gclavadetscher]

Hi

I'm trying to communicate beween 2 remote Lan, this accross a router3600, pix501 and FW ZYXEL zuwall 100 (using 2 vpn tunnel).

->

172.17.0.115 -> Router3600 - vpn - pix501

- vpn - FW ZYXEL - 192.168.101.0

between Router 3600 and pix 501 AND between pix501 and FW ZYXEL -> INTERNET -> Outside interface.

When I try to ping from 172.17.0.115 to 192.168.101.10. I get a error message on the pix 501 -> 110001: No route to 192.168.101.10 from 172.17.0.115.

but I have a default route

Do somebody know why?

and if a pix 501 can endure such 2 vpn, one to cisco router, one to Zyxel FW?

Thanks for your help.

[jasobrown]

Just to clarify is this your setup?

Pix 501

/ \

/ \

3600 ZYXEL

| |

172.17.0.115 192.168.101.0

And you are trying to use the 501 as a HUB VPN device?

Or is it like this

172.17.0.115

|

3600

|

| VPN

|

Pix

|

| VPN

|

ZYXEL

[gclavadetscher]

Hi,

It's the first one, I'm trying to use the PIX as a VPN hub....

Well I was trying, I saw in the doc:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080093bd3.shtml

that it was impossible to use a pix as a hub.

It is correct?

If yes do you know if they will be a new release allowing that?

Thanks for you message.

Gael

[jasobrown]

Right .. you won't be able to do it that way because of the way the Pix functions. The good ol saying that the pix won't reroute traffic back out the same interface it came in on. You could do this on the 3600 and it will be able to hande the VPN "hub" functionality.

As far as a release to allow VPN Hubs on the Pix. I don't know for sure if that is on the roadmap or even that far. I would guess not as I would assume it would take some major programming changes ...

Regards,

[jasobrown]

Just to clarify is this your setup?

Pix 501

/ \

/ \

3600 ZYXEL

| |

172.17.0.115 192.168.101.0

And you are trying to use the 501 as a HUB VPN device?

Or is it like this

172.17.0.115

|

3600

|

| VPN

|

Pix

|

| VPN

|

ZYXEL

|

192.168.101.10

?

Regards,