Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Configuring Overlapping Private IP address VPN tunnels on PIX 520

MY firm runs Monitoring services for client companies to monitor their networks via VPN tunnels. We currently have about 10 clients and perhaps 50 networks that we NAT thru our PIX.

I have been presented with a situation in which I am taking on another customer with an Internal IP scheme of I already have a network defined in 2 ACL's on my PIX, one to not NAT and the other to match the crypto map. I need to configure my PIX so that i can do the same for both internal networks.

I recently upgraded the code on my PIX to 6.2.2. I know and have read about BI-NAT, but am not quite sure how to configure it.

Will bi-nat work to resolve my issue? Also is it mandatory that a PIX be on the other end of the tunnel at the second company?

Thank You


Re: Configuring Overlapping Private IP address VPN tunnels on PI

From what I understand, all you may have to need is to get the second customer to do a NAT at his end so that both the IP are different, which can be done with any router (PIX is not mandatory).