Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Problem with VPN connection from 3600 to Pix 501 to Zyxel FW

Hi

I'm trying to communicate beween 2 remote Lan, this accross a router3600, pix501 and FW ZYXEL zuwall 100 (using 2 vpn tunnel).

->

172.17.0.115 -> Router3600 - vpn - pix501

- vpn - FW ZYXEL - 192.168.101.0

between Router 3600 and pix 501 AND between pix501 and FW ZYXEL -> INTERNET -> Outside interface.

When I try to ping from 172.17.0.115 to 192.168.101.10. I get a error message on the pix 501 -> 110001: No route to 192.168.101.10 from 172.17.0.115.

but I have a default route

Do somebody know why?

and if a pix 501 can endure such 2 vpn, one to cisco router, one to Zyxel FW?

Thanks for your help.

4 REPLIES
New Member

Re: Problem with VPN connection from 3600 to Pix 501 to Zyxel FW

Just to clarify is this your setup?

Pix 501

/ \

/ \

3600 ZYXEL

| |

172.17.0.115 192.168.101.0

And you are trying to use the 501 as a HUB VPN device?

Or is it like this

172.17.0.115

|

3600

|

| VPN

|

Pix

|

| VPN

|

ZYXEL

New Member

Re: Problem with VPN connection from 3600 to Pix 501 to Zyxel FW

Hi,

It's the first one, I'm trying to use the PIX as a VPN hub....

Well I was trying, I saw in the doc:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080093bd3.shtml

that it was impossible to use a pix as a hub.

It is correct?

If yes do you know if they will be a new release allowing that?

Thanks for you message.

Gael

New Member

Re: Problem with VPN connection from 3600 to Pix 501 to Zyxel FW

Right .. you won't be able to do it that way because of the way the Pix functions. The good ol saying that the pix won't reroute traffic back out the same interface it came in on. You could do this on the 3600 and it will be able to hande the VPN "hub" functionality.

As far as a release to allow VPN Hubs on the Pix. I don't know for sure if that is on the roadmap or even that far. I would guess not as I would assume it would take some major programming changes ...

Regards,

New Member

Re: Problem with VPN connection from 3600 to Pix 501 to Zyxel FW

Just to clarify is this your setup?

Pix 501

/ \

/ \

3600 ZYXEL

| |

172.17.0.115 192.168.101.0

And you are trying to use the 501 as a HUB VPN device?

Or is it like this

172.17.0.115

|

3600

|

| VPN

|

Pix

|

| VPN

|

ZYXEL

|

192.168.101.10

?

Regards,

178
Views
3
Helpful
4
Replies
CreatePlease login to create content