static statement

[wasonce_2000]

Can I list two static statements to same host. I have tried on pix 515 ver6.3 and

get failed to xlate errors on second static statement.

Example:

static (inside,dmz) xxx.xxx.xxx.xxx 192.168.1.2 netmask 255.255.255.255 0 0

static (inside,dmz2) xxx.xxx.xxx.xxx 192.168.1.2 netmask 255.255.255.255 0 0

[mostiguy]

I believe that should work. Are the ip addresses you are using in these statics used for PAT? After adding these, did you do a clear xlate?

Can you post your entire config? You can sanitize the outside ip addresses to some degree, but we would need to see the host portion of all ips with subnet masks to assure that we have a proper understanding of the topology.

Matt

[wasonce_2000]

I upgraded my pix to pix6.31 and used fixup protocol esp-ike to resolve the issue. I also resolve by creating a acces-list from vpn host to outside interface on my pix in pix6.2