Look this question

[Oh]

Hi, guys
I have built a easy VPN tunnel between 2 PIX, one is server other is client. The pc behind the client PIX side can telnet to a AS400 application and login, but after they login, there was no responing. How can made these things happen?

thanks

oh

 

[yizhar]

HI.

Are you using IBM client access?
It need an additional port open, not only 23 for telnet. Are all ports open?

Do you get any syslog messages on either pix?

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[Guest_imported]

I'm assuming that your gateway setting on the AS400 is correct and that any L3 devices know how to get to the subnet used for VPN clients by using the Pix as the next hop.

Do you have an access-list defining the vpn traffic and the nat 0 command set to match traffic from that list?? Example below:

ip local pool vpn-clients 192.168.1.1-192.168.1.254

access-list 80 permit ip 10.0.0.0 255.0.0.0 192.168.1.0 255.255.255.0

nat (inside) 0 access-list 80