«

I'm trying to setup my client vpn on a PIX 515e. I can get connected
just fine, but I can not see anything on the inside network. I've
attached my running config here. I thought I'd set everything up
correctly and have NAT right but I still cannot see anything on the
inside network. Can anyone give me any assistance?

Here is my config

PIX Version 6.3(3)
interface ethernet0 auto
interface ethernet1 auto
interface ethernet2 auto shutdown
nameif ethernet0 outside security0
nameif ethernet1 inside security100
nameif ethernet2 dmz security50
enable password Hvup11B1njUIaHN3 encrypted
passwd Hvup11B1njUIaHN3 encrypted
hostname cerberus
domain-name mycompany.com
clock timezone EST -5
no fixup protocol dns
fixup protocol ftp 21
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
fixup protocol http 80
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol sip 5060
fixup protocol sip udp 5060
fixup protocol skinny 2000
no fixup protocol smtp 25
fixup protocol sqlnet 1521
fixup protocol tftp 69
names
name 192.43.244.18 time.nist.gov
access-list acl-out permit tcp any any eq ftp-data
access-list acl-out permit tcp any any eq ftp
access-list acl-out permit icmp any 1x.x.x.0 255.255.255.0
access-list acl-out permit tcp any eq ssh interface inside
access-list acl-out permit tcp interface outside eq ssh any eq ssh
access-list acl-out permit tcp any host 1x.x.x.20 eq www
access-list acl-out permit tcp any host 1x.x.x.x eq 3389
access-list acl-out permit tcp any host 1x.x.x.x eq www
access-list acl-out permit tcp any host 1x.x.x.x eq smtp
access-list acl-out permit tcp any host 1x.x.x.x eq 3389
access-list acl-out permit tcp any host 1x.x.x.x eq pop3
access-list acl-out permit tcp any host 1x.x.x.x eq imap4
access-list acl-out permit icmp any 1x.x.x.0 255.255.255.0 echo-reply
access-list acl-out permit udp host 1x.x.x.x host 1x.x.x.x eq snmp
access-list acl-out permit tcp any host 1x.x.x.x eq www
access-list acl-in permit ip host 192.168.128.2 any
access-list acl-in permit ip host 192.168.128.3 any
access-list acl-in permit ip host 192.168.128.10 any
access-list acl-in permit ip host 192.168.128.16 any
access-list acl-in permit ip host 192.168.128.25 any
access-list acl-in permit ip host 192.168.128.27 any
access-list acl-in permit ip host 192.168.128.36 any
access-list acl-in permit ip host 192.168.128.74 any
access-list 101 permit ip 192.168.128.0 255.255.255.0 10.99.99.0
255.255.255.0
pager lines 24
logging on
logging trap debugging
logging host inside 192.168.128.16
icmp deny any outside
mtu outside 1500
mtu inside 1500
mtu dmz 1500
ip address outside 1x.x.x.x 255.255.255.0
ip address inside 192.168.128.22 255.255.255.0
ip address dmz 172.16.10.1 255.255.255.0
ip audit info action alarm
ip audit attack action alarm
ip local pool vpnpool 10.99.99.1-10.99.99.254
pdm location 192.168.128.3 255.255.255.255 inside
pdm location 192.168.128.11 255.255.255.255 inside
pdm location 192.168.128.15 255.255.255.255 inside
pdm location 192.168.128.20 255.255.255.255 inside
pdm location 192.168.128.25 255.255.255.255 inside
pdm history enable
arp timeout 14400
global (outside) 1 1x.x.x.x
nat (inside) 0 access-list 101
nat (inside) 1 192.168.128.0 255.255.255.0 0 0
static (inside,outside) 1x.x.x.x 192.168.128.20 netmask 255.255.255.255
0 0
static (inside,outside) 1x.x.x.x 192.168.128.11 netmask 255.255.255.255
0 0
static (inside,outside) 1x.x.x.x 192.168.128.3 netmask 255.255.255.255
0 0
static (inside,outside) 1x.x.x.x 192.168.128.25 netmask 255.255.255.255
0 0
static (inside,outside) 1x.x.x.x 192.168.128.11 netmask 255.255.255.255
0 0
static (inside,outside) 1x.x.x.x 192.168.128.31 netmask 255.255.255.255
0 0
access-group acl-out in interface outside
access-group acl-in in interface inside
route outside 0.0.0.0 0.0.0.0 1x.x.x.x 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225
1:00:00
timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server RADIUS protocol radius
aaa-server LOCAL protocol local
ntp authentication-key 1 md5 ********
ntp authenticate
ntp trusted-key 1
ntp server time.nist.gov source outside prefer
http server enable
http 192.168.128.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server community public
no snmp-server enable traps
floodguard enable
sysopt connection permit-ipsec
sysopt connection permit-pptp
crypto ipsec transform-set myset esp-des esp-md5-hmac
crypto dynamic-map dynmap 10 set transform-set myset
crypto map mymap 10 ipsec-isakmp dynamic dynmap
crypto map mymap client configuration address initiate
crypto map mymap client configuration address respond
crypto map mymap interface outside
isakmp enable outside
isakmp key ******** address 0.0.0.0 netmask 0.0.0.0
isakmp identity address
isakmp client configuration address-pool local vpnpool outside
isakmp policy 10 authentication pre-share
isakmp policy 10 encryption des
isakmp policy 10 hash md5
isakmp policy 10 group 1
isakmp policy 10 lifetime 86400
isakmp policy 20 authentication pre-share
isakmp policy 20 encryption des
isakmp policy 20 hash md5
isakmp policy 20 group 2
isakmp policy 20 lifetime 86400
vpngroup hsvpn address-pool vpnpool
vpngroup hsvpn dns-server 192.168.128.3
vpngroup hsvpn wins-server 192.168.128.1
vpngroup hsvpn default-domain mycompany.com
vpngroup hsvpn idle-time 1800
vpngroup hsvpn password ********
telnet 192.168.128.0 255.255.255.0 inside
telnet timeout 5
ssh 192.168.128.0 255.255.255.0 inside
ssh timeout 5
console timeout 0
vpdn group 1 accept dialin pptp
vpdn group 1 ppp authentication pap
vpdn group 1 ppp authentication chap
vpdn group 1 ppp authentication mschap
vpdn group 1 ppp encryption mppe 40
vpdn group 1 client configuration address local vpnpool
vpdn group 1 pptp echo 60
vpdn group 1 client authentication local
vpdn username hsvpn password *********
vpdn enable outside
terminal width 80
Cryptochecksum:18674da1476e626ff236c501d1d3f7ca
: end