You can configure a simple PIX to PIX VPN. Do you have hosts on the public network that would want to access Internal resources? If there is no access from outside and only users from inside have to access the internet, I don't see a need for the VPN. The sample config can be found at:
