[c-nsp] pix vs asa

[Deric Kwok]

I already have those ru les
But it can't work

Any hints?

and do you have any useful website? Let me check again

Thank you


On Thu, Aug 5, 2010 at 10:52 PM, Ryan West <rwest at zyedge.com> wrote:
>
>
>> -----Original Message-----
>> From: Deric Kwok [mailto:deric.kwok2000 at gmail.com]
>> Sent: Thursday, August 05, 2010 9:44 PM
>> Subject: Re: [c-nsp] pix vs asa
>>
>> Hi
>>
>> Thank you so much for reply.
>> AS A works fine but I have problem about vpn. I am using ciscoasdm to
>> configure it.
>>
>> I get ipaddress in ippool after connection.
>>
>> But I can not ping out eg: gw and any servers in the same pool network
>>
>> Any example about vpn config too to let me check
>>
>> Thank you again
>>
>
> Sounds like you haven't configured your NAT exempt rules.
>
> access-list inside-nonat permit ip any <ip local pool> <subnet>
> nat (inside) 0 access-list inside-nonat
>
> -ryan
>