so it would be:
access-list 101 permit ip 192.68.135.0 255.255.255.0 10.21.1.0 255.255.255.0
ip local pool ippool 10.21.1.1-10.21.1.254
vpngroup xxx-vpn split-tunnel vpnclient
access-list vpclient permit ip 192.68.135.0 255.255.255.0 10.21.1.0 255.255.255.0
?
so that would work if i wrote this:
access-list 101 permit ip 192.68.135.0 255.255.255.0 10.21.1.0
255.255.255.0
ip local pool ippool 10.21.1.1-10.21.1.254
1 - i only get one ping though, when i try to ping the server on the lan, from my remote vpn client
2 - what do i need to change, if i want the remote VPN users to get a 10.21.0.x network instad of the 192.68.135.x
this is the reply
Pinging 192.68.135.14 with 32 bytes of data:
Reply from...
you are to cool :-) thanks a million, dont know why I dident get that line with me, when made that config. I need to buy that solarwinds pix-editor. just wasted 4 hours on that mistake ...
Hi
I have set up this new Pix 501- I get prompted for the username and password, and i get validated through Radius, but i cant access the LAN.
This is my config
PIX Version 6.3(4)
interface ethernet0 10baset
interface ethernet1 100full
nameif ethernet0 outside security0
nameif ethernet1...
it gives me this:
sakmp_process_block:src:217.157.148.85, dest:212.112.164.202 spt:500 dpt:500
ISAKMP: reserved not zero on payload 5!
ISAKMP: malformed payload
ISADB: reaper checking SA 0xac092c, conn_id = 0
ISADB: reaper checking SA 0xae665c, conn_id = 0
ISADB: reaper checking SA 0xab0d64...
I have a site with 5 locations. The Site-2-site is running fine, but the the client cant connect with the remote clinet.
I have configured the IAS server like this:
IAS -> remote acces policy -> Connections to other access servers ->
Authentication: Only checkmark in pap, spap
Encryption...
the PC's is not a problem (Running DHCP) the servers will take 3 minutes to change with a VBS script in a policy. The Printes on the other hand will take forever :-(
wouldent it be better to change the lan subnet to 255.255.255.0? I mean, if i change the lan like this:
Sweden:
IP : 192.168.1.1-255
SN : 255.255.255.0
GW : 192.168.1.254 (router lan)
Denmark:
IP : 192.168.2.1-255
SN : 255.255.255.0
GW : 192.168.2.254 (router lan)
Regards Kristoffer
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.