Router to PIX IPSec connection problem.

[mgtang]

Dear all,

Here is my network diagram:

Site1 Site2

| |

---1721(Site3)-------

|

PIX

|

IPSec

|

2821 (Site4)

Site1 and Site2 connect to Site3 Cisco 1721 router by using leased lines. 1721 forward all NAT packets to PIX (site3 as well), PIX doing NAT and act as VPN server for Cisco VPN client software. Everything works well.

Now I need to add site4 into our network. Site4 using a Cisco 2821 router. I'm doing testing now so Cisco 2821 and the PIX using the same gateway but they use different Internet IP address.

The problem I got is: Site1,2,3 can ping the Gigabitethernet0/1 port(192.168.5.10) of 2821 router but 2821 router cannot ping any of site1,2,3.

Could anyone help me? Thank you!

[thomas.chen]

Check whether any ACL's in the PIX will block the traffic from site 4 router.

[mgtang]

Thank you Thomas! The OS of my PIX is 6.3, is that one causing my problem?