[nsp] Problems with pix-originated traffic across a VPN
Regis M. Donovan
regis@offhand.org
Fri, 30 Aug 2002 12:02:35 -0400 (EDT)
Hi there.
I have a PIX 515 running 6.1(2) that terminates one of of a lan-to-lan
VPN connection that traverses the outside network. My problem is that
I can't seem to get traffic sourced from the PIX to go across the VPN
- specifically, I'm trying to log to a machine on the far side of the
VPN. Traffic that is not sourced by the PIX goes across the VPN
without a hitch. The far end machines are able to see all of the
inside network except for the PIX itself.
I have included the inside address of the PIX in the access lists
applied to "nat (inside) 0" and to the "crypto map" matching list.
The logging statement lists the far-end address and points it to the
inside interface - "logging host inside 10.x.x.x"
I've poked around on CCO and it looks like this should work, but it
doesn't. So I assume I'm missing something but I have no idea what.
Suggestions?
Thanks!
--regis