Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search instead for
Did you mean:
Ipsec traffic does not flow through the 3015 VPN with software version 4.0 even after # sysopt connection permit-ipsec is configured
Although sysopt connection permit-ipsec is in the configuration, traffic does not seem to flow between the site-to-site VPN unless the traffic between the subnet in the access list bound with the inside interface is allowed. If there is no access list on the inside interface it works fine. The sysopt command only bypasses the checking of the outside access list.
Traffic won't flow through the VPN unless it is permitted in the inside interface access list even if sysopt connection permit-ipsec is configured
Allow the tunnel traffic in the access list bound with the inside interface or remove the access-groupaccess-list in interface inside command.
For additional information on how sysopt works with different versions of PIX Firewall code, refer to the relevant documentation for your PIX release: