Defending against lameness since 2008

Recently I came across an issue where after connecting to a Pix/ASA with the Cisco VPN Client from behind another Pix/ASA the remote user was unable to communicate with the remote network. After recreating the connection and comparing it to similar configurations I noticed one command was missing, crypto isakmp nat-traversal. If you are having problems communicating with a remote network after a successful VPN connection and you see that packets are not being decrypted by the remote user this is the command you are most likely missing. The document I always follow for remote vpns is located here.

Tags: asa, Cisco, crypto, ipsec, isakmp, pix, remote user, vpn

You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.