Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
206
Views
0
Helpful
1
Replies

translations and RA-VPNs

slug420
Level 1
Level 1

‎04-04-2006 10:21 AM - edited ‎03-09-2019 02:30 PM

I have a 515 that we have an access vpn to. We recently swapped it out with a 7.11 pix (it had been 6.3(4) and the vpn config didnt seem to work correctly when we pasted it into the new fw.

I have resolved part of the problem but now I am seeing xlate errors in the logs for VPN traffic.

Apr 4 14:07:35 10.205.52.1 %PIX-3-305005: No translation group found for tcp src outside:172.30.20.11/4300 dst inside:172.17.22.2/2002

In previous versions I did not but in 7.11 do I have to have statics for the internal hosts being accessed via the RA-VPN?

This doesnt make sense to me.....but a no xlate is a no xlate right?

Labels:
0 Helpful
1 Reply 1

pradeepde
Level 5
Level 5

‎04-11-2006 10:17 AM

Yes you need to have a static statement for the RA-VPN hosts to connect to Inside hosts. The nat statement will create only a temproary translation, so u need a static staement.

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents