Networks

Ask something
Discussion Locked

PIX VPN & multiple subnets question...

0 helpful
7 replies

by wsamis

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hello all,

I was hoping to find out if anyone out there can answer this... I have multiple subnets behind my f/w which are remote sites, but when I connect to my VPN, my client can only see the main (corp office) subnet, not the other 15 remote sites. Is there some sort of static routing that I have to setup? Thanks in advance.

7 replies

by curlergirl

Make sure your VPN connection is set to use the remote gateway, or if using DHCP, that it is getting the correct (remote) gateway info from the DHCP server at the main server site. That should take care of any routing issues, as long as the gateway info on the VPN server and/or DHCP server is correct. If you're using multiple gateways and static routing at the main office for regular clients, then you'd have to also set that up on your remote client. Hope this helps!

by soliboy

Yes, you do have to set up static routes on the PIX (I assume from your description that the remote subnets do not access the Internet via the PIX). Test that they are reachable from the PIX with a ping, and if not, add in a static route or routes to its config.

by mshavrov

When you configure VPN, you define what's remote network addresses and what's local. make sure that you defined those networks in all locations (PIX at main office and Routers at remote locations). And again, you should do it everywhere, because it's not enough if your packet will reach destination. Your destination should know how to route packet back to requestor.

Good luck.

This discussion is closed to new replies.