PIX v.7- One-to-One NAT question?

[andrew_sd]

Hi,

I have a PIX 515 w/ 6.3(3) running close to 100 IPSec tunnels. The problem I run into is, we connect to internal devices on customer sites with the same internal IP address.

My current solution is to have the customer do a static/policy based NAT or I can create an outbound static statement for a unique IP address.

Will PIX w/ v.7 give me the ability to create a static statement with the same remote IP and base it on an ipsec tunnel?

or would I be better off going with a Concentrator?

Thanks,

-Drew

[smalkeric]

Yes. I think static NAT is a good option and it is also allowed in pix . I believe the following documents will help you in this regard.

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a008051a69a.shtml

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a0080094a87.shtml

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_configuration_guide_chapter09186a0080172788.html#LTR_N

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_configuration_guide_chapter09186a008017278e.html#wp1069973