Re: Pix 501 to 506 VPN

In article <1137188285.117029.104210@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>,
Timid K <THowell@xxxxxxxxxxxxxxxxxx> wrote:
>I am creating a site to site VPN from a pix 501 with an outside address
>of 24.173.110.82 and an inside network of 192.168.1.0/24 to a pix 506
>with an outside address of 207.200.35.62 and an inside network of
>10.0.0.0/24.

>PIX 506

>name 10.0.0.0 Level0

>access-list 80 permit ip Level0 255.255.255.0 192.168.1.0 255.255.255.0

>nat (inside) 0 access-list 80

>crypto map City 10 match address 80

Do not use the same ACL for two different purposes. In some
cases it is certain to fail due to the PIX design, and in other
cases there are PIX 6.x bugs that lead to failures. Safest
just to never do it at all.
.

Relevant Pages