Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Users might experience few discrepancies in Search results. We are working on this on our side. We apologize for the inconvenience it may have caused.
New Member

resolve this......

I have this issue I am working on. I called cisco tech and they said it is not possible and there is no work around. Still I want to ask the experts out there.

here is my scennario...

I have a PIX 515( headquater) - VPN tunnel another PIX 506 ( remote)

I have VPN clients terminating on the PIX 515. The VPN clients who are terminating on the PIX 515 can access the machines at my headquater lan with no problems. These VPN clients want to access the machines which are on the remote LAN ( PIX 506). Is there a way they can terminate on the PIX 515 which they do and then use the tunnel from PIX 515 to PIX 506 and connect to the machines there.?

Thanks

Shabib

4 REPLIES
New Member

Re: resolve this......

Not with your current setup. That would require routing functionality which the pix can not do. If you terminate the clients inside your network on a router then it will be possible.

That's the setup I have.

New Member

Re: resolve this......

The PIX does not redirect traffic. If the packets come in the outside interface, the PIX cannot send them back out. You would need another interface, or terminate the client tunnels on a different device behind the PIX.

New Member

Re: resolve this......

Thanks for the feedback guyz......I really appreciate that...I have a cisco 2514, which i can use to termintate my VPN clients. VPN 3.0 and higher clients are not yet supported on cisco 2514. so I have to wait for that 12.2 8(T) to be released for cisco 2514

Thanks

New Member

Re: resolve this......

Cisco concentrators are the only ones that can do a hairspin like the one that you are refering to.

110
Views
0
Helpful
4
Replies
CreatePlease to create content