Portmap translation creation failed...

[rshendrix]

Computer on our network behind PIX needs to connect to third party via VPN. The connection to the VPN is successful but when they try to browse to intranet site on third party network nothing happens...IE loads blank page...

My PIX logs shows the following -

PIX-3-305006: portmap translation creation faled for protocol 50 src inside:10.0.65.2 dst outside:205.x.x.x

I do notice that the third party does not have split-tunneling configured on their tunnel because when we are connected we cannot access anything on our network. I'm thinking this may be the problem since we need to go back thru our firewall in order to use their VPN.

I hope this makes sense. Any suggestions?

 

[brianinms]

What type of vpn ? What are the internal subnets on both ends?

 

[Supergrrover]

It doesn't sound like a split tunnel problem. What do your outgoing ACLs look like? Are you blocking ESP?


Brent
Systems Engineer / Consultant
CCNP, CCSP

 

[rshendrix]

The VPN is just a remote client, not a site-to-site.

The internal network on our end is 10.x.x.x with a subnet of 255.0.0.0. I'm not sure about the third party network/subnet but I do know we are trying to connect to 10.7.10.5 on their end. I'm guessing part of the problem is the overlapping networks on each end.

 

[brianinms]

Bingo, the overlapping networks is the issue! Just out of curiosity why on earth are you using an 8 bit mask?

 

[BuckWeet]

you could try turning on the fixup for pptp