I have a VPN established with a vendor of ours that has worked perfectly for years. 2 days ago the vendor request that we allow another subnet to access our network. I added the subnet to an ACL and tested from my end. I was able to ping the host that would access our network. I assumed everything was fine but when the vendor tested he was unable to connect (ping, ftp, tracert, etc.). I did not change anything with encryption or authentication (we are using 3DES and MD5, pre-share key). We even went over the settings again to make sure each end matched. Also, he is still able to connect using his other subnet that has worked for years. The only issue is with the new subnet, and again, i am able to access it, he is not able to access ours. Any ideas?
PIX VPN issue
Oct 23, 2008
1 Replies
Did you exclude the new subnet from NAT?
access-list inside_nat0_outbound extended permit ip 192.168.0.0
255.255.255.0 192.168.3.0 255.255.255.0Where 192.168.0.0 is the local network you are on and 192.168.3.0 is the new subnet?
nat (inside) 0 access-list inside_nat0_outbound
Excludes the ACL from NAT
Join the Discussion
Have something to add? Share your thoughts — no account required.
Didn't find your answer?
Ask the community — no account required