My goal is to make two remote subnets accessable over a VPN connection to the central office. One remote subnet is a DMZ and traffic must be secured to the other remote office and to the central office to and from the DMZ.
2 remote subnets (A and B), each subnet is connected to an ethernet interface on the PIX.
The third ethernet interface on the PIX is connected to the Internet.
One central office with a 3005; Subnet C.
Subnet A is considered friendly.
Subnet B is considered hostile; it is a DMZ
Subnet A requires access to subnet B for access to a shared server.
Subnet B will not initiate connections to Subnet A or Subnet C (head office).
I would like to establish a a VPN Tunnel from the PIX to the 3005 using the ezvpn function if possible.
I would like both remote subnets A & B to be advertised via RIP on the head office LAN thus making subnet A and B accessible from subnet C, head office.
Is this possible?
If not, what devices would work, 1710 router for the VPN and a pix to separate subnet A and B? Would a 3002 for the VPN tunnel and a PIX to separate A and B possibly work?
