Hello, I'm trying to configure IPSec between 3000 Concentrator VPN client (ver 3.0) to PIX (ver 6.01) and I follow the sample config from: http://www.cisco.com/warp/public/110/pix3000.html As soon as I get connected, I lost connection, I can't even ping my gateway. If I disconnect VPN, connection comes back. Here is my configuration: PIX Version 6.0(1) access-list 101 permit ip 172.16.1.0 255.255.255.0 172.16.2.0 255.255.255.0 ip address outside 63.47.199.254 255.255.255.248 ip address inside 172.16.1.1 255.255.255.0 ip local pool bigpool 172.16.2.1-172.16.2.254 global (outside) 1 interface nat (inside) 0 access-list 101 nat (inside) 1 0.0.0.0 0.0.0.0 0 0 route outside 0.0.0.0 0.0.0.0 63.47.199.249 1 sysopt connection permit-ipsec no sysopt route dnat crypto ipsec transform-set myset esp-des esp-md5-hmac crypto dynamic-map dynmap 10 set transform-set myset crypto map mymap 10 ipsec-isakmp dynamic dynmap crypto map mymap client configuration address initiate crypto map mymap client configuration address respond crypto map mymap interface outside isakmp enable outside isakmp identity address isakmp policy 10 authentication pre-share isakmp policy 10 encryption des isakmp policy 10 hash md5 isakmp policy 10 group 2 isakmp policy 10 lifetime 86400 vpngroup vpn3000 address-pool bigpool vpngroup vpn3000 dns-server 207.69.188.185 207.69.188.186 vpngroup vpn3000 wins-server 172.16.1.20 vpngroup vpn3000 default-domain Pisco vpngroup vpn3000 idle-time 1800 vpngroup vpn3000 password ******** Thanks in advance. Jim __________________________________________________ Do You Yahoo!? Get personalized email addresses from Yahoo! Mail http://personal.mail.yahoo.com/ Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=11225&t=11225 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]