I'm trying to configure a Cisco PIX 501 firewall to accept inbound VPN client connections and route secured traffic to a subnet behind this PIX. I've managed to configure the PIX to accept the VPN client connections, but I can't get the traffic to route correctly to the subnet that is behind the PIX.
This may be easier if I can show you a Visio diagram of my test network.
To try an explain how things are configured: I have a border router which is attached to the PIX, the PIX is then attached to a 3548 L3 switch and then there is another 2912 switch attached to the 3548. The host I'm trying to connect to hangs off of the 2912 switch.
The host has an IP of 172.31.3.100/24 and the internal interface of the PIX has an IP of 10.250.10.1
When I'm connected to the VPN using the Cisco VPN client, I can ping the inside interface of the PIX, but it just times out when I try pinging 172.31.3.100
The VPN config on the PIX is configured for split tunnelling.
I know I'm not explaining this particularly well, but please let me know if you need more information. I'm quite happy to share the configs of the PIX and switches, so you can see what is going on. I also have a Visio of the network layout, which might make it easier to understand, I just didn't want to make this post the longest post in the world by pasting in all the configs.
I can email the configs if necessary, unless anyone knows a way I can share them on this site?
Please help, as I'm trying to learn more about this stuff but I'm struggling a bit here.
Many thanks in advance.
November 15, 2006 12:34 PM
February 4, 2009 10:03 PM