Route VPN Traffic

fsanchez · ‎12-19-2007

Hi, I have a PIX 515E with version 7.x. It has two different internet links connected, one is used to get access to Internet from inside and the other I would like to use only for dynamical VPN clients.

How I have to configure this to make the VPN traffic, that comes from the second link go back for same interface? in actual configuration I have a default route pointing to first link.

I need use â€œsame-security-traffic permit intra-interfaceâ€ command to do this?

Thanks,

acomiskey · ‎12-19-2007

same-security-traffic permit intra-interface will not help in this case since the pix can only have 1 default gateway. You would have to know the source address of the vpn clients to be able to route to them from the second interface.

fsanchez · ‎12-20-2007

The problem is that this links are DSL with dynamic IP addressing.

asoil · ‎12-20-2007

I think RRI, reverse route injection is the answer to your question.

Antonis