03-08-2006 11:24 PM - edited 02-21-2020 02:18 PM
How can I configure a PIX to connect from behind a VPN 3000 concentrator.
Hi everybody,
I want to put a VPN 3000 Concentrator behind my PIX, but I think I need additional configuration do do that
This is my PIX configuration:
interface ethernet0 auto
interface ethernet1 auto
nameif ethernet0 outside security0
nameif ethernet1 inside security100
access-list acl_out permit icmp any any
access-list acl_out permit tcp any host 207.193.132.5 eq www
access-list acl_out permit tcp any host 207.193.132.10 eq 3389
access-list acl_out permit tcp any host 207.193.132.10 eq pcanywhere-data
access-list acl_out permit udp any host 207.193.132.10 eq pcanywhere-status
access-list acl_out permit esp any host 207.193.132.10
access-list acl_out permit ah any host 207.193.132.10
access-list acl_out permit gre any host 207.193.132.10
ip address outside 207.193.132.55 255.255.255.192
ip address inside 192.168.1.1 255.255.255.0
global (outside) 1 interface
nat (inside) 0 access-list nonat
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
static (inside,outside) 207.193.132.10 192.168.1.94 netmask 255.255.255.255 0 0
access-group acl_out in interface outside
route outside 0.0.0.0 0.0.0.0 207.193.132.1 1
And I want to use the public IP 207.193.132.15 in the VPN 3000 Public interface ...
How can i do that?
03-09-2006 11:50 AM
03-09-2006 02:52 PM
Thanks for you response,
But I'dont want to make a tunnel between the pix an the VPN.
This that I want to do,
VPN ACCESS ( 207.193.132.15)
|
|
INTERNET
|
|
|
ROUTER
|
|
|
----------------------------------
|
|
| 207.193.132.55
FIREWALL
| 192.168.1.1
|
| private segment 192.168.1.x
----------------------------------
| | |
| | |public interfce ( 207.19.132.15 )
| | |
| | VPN
| | |
| | |private interface (192.168.1.115)
| | -----|
| |
|192..5 |192.168.1.6
COMPUTER SERVER
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide