PIX 501 to 2811 VPN

I have a basic VPN working between a PIX 501 and a 2811 router. However, I notice that devices behind the 2811 cannot initiate communication with the 501 first. Something behind the 501 must start the communication first. Then communication can happen both ways. Is this normal? I would like for communication to be able to start from either side. Any help would be greatly appreciated.

Thanks,

Gordon Montgomery Living Scriptures, Inc snipped-for-privacy@lsi.com (anti spam - replace lsi with livingscriptures) (801) 627-2000

Reply to
Gordon Montgomery
Loading thread data ...

In article , Gordon Montgomery wrote: :I have a basic VPN working between a PIX 501 and a 2811 router. :However, I notice that devices behind the 2811 cannot initiate :communication with the 501 first. Something behind the 501 :must start the communication first. Then communication :can happen both ways. Is this normal?

It is if you have not used 'static' or 'nat 0 access-list'.

Reply to
Walter Roberson

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.