I am fairly new to the PIX and have spun my wheels long enough. I have a L2L VPN tunnel set up between a PIX 506 and a PIX 525. The PIX 506 is running 6.2(2) of the PIX OS and is the remote peer. The PIX 525 is running 7.2(3). The tunnel is up between the two peers so I know at least that portion is correct.
When I try to ping a host on the remote network, I can see decaps but no encaps on the remote PIX 506. If I run a debug icmp trace on the 506, I see the request coming in but no reply going out. I am also unable to ping the inside interface of the 506. I have also tried to use VNC to gain access to the remote PCs that have VNC installed and have no luck with that either. I also tried to SSH into the inside interface of the remote 506 and was also unsuccessful.
I am sure it is something simple but since I have spent a good amount of the afternoon on it, I can't seem to figure out what it is.
My config for the remote peer's PIX 506 is attached as I believe that is the problem child. I have cleaned the configuration of outside address info.
If you need additional info or clarification, please let me know.
Never overlook the obvious. I called the remote site and found out that the Windows Firewall was turned on. We don't typically turn it on so it was the furthest from my mind. Once Windows Firewall was turned off, I could ping the PC.
Thanks for the second and third pair of eyes and for the suggestions.
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...