Hello All,
Is it possible to do EzVPN from an IOS Router Client to a PIX EzVPN Server in Network Extension Mode?
I have done this in client mode w/o many issues, but it seems since PIX doesn't do RRI (I don't think) in the dynamic crypto map. I can not get this to work. I can not get traffic to pass.
I am trying to ping a host on the protected/LAN side of the PIX. The traffic goes from the IOS (gets encrypted) to the PIX (gets decrypted) and does not return. The host knows to go to the PIX to get to the IOS protected/LAN side, but the PIX has no "route" installed in it's routing table to get back to the IOS protected side. I have created a static route on the PIX, but still no good.
NAT 0/Exemption is also on for the Split Tunnel ACL networks (PIX LAN side to IOS LAN side).
When you do IOS/PIX EzVPN to VPN Concentrator (as EzVPN Server), the Route Prefix is added to the VPN 3000 Routing Table. However, it is not with the PIX as EzVPN Server.
Thanks
I have also seen the following: http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00800ab518.shtml
Are there any examples for IOS EzVPN Client tot PIX EzVPN Server in NEM Mode?