cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
216
Views
0
Helpful
2
Replies

How can I configure a PIX to connect from behind a VPN 3000 concentrator.

jamco
Level 1
Level 1

How can I configure a PIX to connect from behind a VPN 3000 concentrator.

Hi everybody,

I want to put a VPN 3000 Concentrator behind my PIX, but I think I need additional configuration do do that

This is my PIX configuration:

interface ethernet0 auto

interface ethernet1 auto

nameif ethernet0 outside security0

nameif ethernet1 inside security100

access-list acl_out permit icmp any any

access-list acl_out permit tcp any host 207.193.132.5 eq www

access-list acl_out permit tcp any host 207.193.132.10 eq 3389

access-list acl_out permit tcp any host 207.193.132.10 eq pcanywhere-data

access-list acl_out permit udp any host 207.193.132.10 eq pcanywhere-status

access-list acl_out permit esp any host 207.193.132.10

access-list acl_out permit ah any host 207.193.132.10

access-list acl_out permit gre any host 207.193.132.10

ip address outside 207.193.132.55 255.255.255.192

ip address inside 192.168.1.1 255.255.255.0

global (outside) 1 interface

nat (inside) 0 access-list nonat

nat (inside) 1 0.0.0.0 0.0.0.0 0 0

static (inside,outside) 207.193.132.10 192.168.1.94 netmask 255.255.255.255 0 0

access-group acl_out in interface outside

route outside 0.0.0.0 0.0.0.0 207.193.132.1 1

And I want to use the public IP 207.193.132.15 in the VPN 3000 Public interface ...

How can i do that?

2 Replies 2

Thanks for you response,

But I'dont want to make a tunnel between the pix an the VPN.

This that I want to do,

VPN ACCESS ( 207.193.132.15)

|

|

INTERNET

|

|

|

ROUTER

|

|

|

----------------------------------

|

|

| 207.193.132.55

FIREWALL

| 192.168.1.1

|

| private segment 192.168.1.x

----------------------------------

| | |

| | |public interfce ( 207.19.132.15 )

| | |

| | VPN

| | |

| | |private interface (192.168.1.115)

| | -----|

| |

|192..5 |192.168.1.6

COMPUTER SERVER