Question

Cisco pix vpn access

Cisco, PIX, VPN

I have 1 main office and 3 remote offices connected by Cisco Pix's. The main server and email server are in the main office. As long as the computers are on the network everything is fine. The main office has a vpn set up for remote users and it works fine. The other offices want this set up as well, but the problem being the mail server is in the main office. When setting up vpn's on the remote routers, they can connect and ping on their local subnets. However, they can not ping across the vpn to the main office. Is it possible to set it up to do this?

Basically

Working:
Remote user-VPN TO MAIN- Main subnet
remote user-vpn to remote router-remote subnet

Not working
Remote user-vpn to remote router-vpn to main - main subnet

Do you have routing setup? At each of the remote offices you need to put routes on the router to the different networks. And vice versa...you need to setup the remote office networks on the router at your main location.

If you have more specific routing questions...let me know.

Here is an example:

Main Office: 192.168.0.x/255.255.255.0
-Router Internal Address - 192.168.0.1

Routes:
route 192.168.1.0 255.255.255.0 192.168.0.100 (New York)
route 192.168.2.0 255.255.255.0 192.168.0.101 (Miami)

New York Office: 192.168.1.x/255.255.255.0
-Router Internal Address - 192.168.1.1
-Router VPN Interface - 192.168.0.100

Routes:
Default

Miami Office: 192.168.2.x/255.255.255.0
-Router Internal Address - 192.168.2.1
-Router VPN Interface - 192.168.0.101

Routes:
Default

If VPN Device is also the router then the default route should be all that is needed. If you have separate devices then you need to set the routes to use the VPN device as the next hop address.