VPN Prob..

[s_mcanuff]

I have a Cisco PIX 515E firewall which I have config.. VPN on it, the VPN has been working with no prob.. for the past 3 years now, now I am getting a prob.. when I connect to the VPN it connect but I can't ping any server any more, when I look in the stat.. I see that I am only sending packets but not receiving any packets which is 0.

Can anyone tell me why this is so?

[JORGE RODRIGUEZ]

Could you post configuration or verify whether crypto iskamp nat-traversal exists in your configuration, if not add statement and try if does not resolve please post config.

Rgds

Jorge

[s_mcanuff]

how can I verify that this is running?

[JORGE RODRIGUEZ]

in cli issue :

show run | inc isakmp

you should see a line statement as isakmp nat-traversal 20

if you do not have it in config try adding it as bellow and see if resolves problem.

PIX(config)#crypto isakmp nat-traversal

Rgds

Jorge

[s_mcanuff]

Jorge; Thanks for your help, however can u just explain that command? if that is not too much for u

[JORGE RODRIGUEZ]

Shane, this command may or may not resolve your issue, however, this statement is among troubleshooting steps process when it comes to Ipsec RA tunnels. What this command does when enable it allows VPN traffic to pass through nat/pat devices that may be encounter in between the source vpn client and your VPN server end point PIX/ASA. In many cases when this is disabled vpn client may successfully authenticate and connect but access to the internal network behind firewall is not possible.

In other words NAT traversal makes both ends automatically determined if there are any NAT/PAT devices in between the path.. since you asked what this does here is a good article on it http://technet.microsoft.com/en-us/library/bb878090.aspx

lets help resolve your problem

Rgds

Jorge

[s_mcanuff]

Jorge, Thx alot for your help, it is working now when I test it I can access the LAN now

[JORGE RODRIGUEZ]

Shane, thank you for posting the update and glad it is working .. please rate post if it did help.

Best Rgds

Jorge