VPN behind PIX - Route Mapping Question

[tweil]

This is a classic "VPN Gateway behind the PIX" question...

Can NAT/PAT/Static Routes be used on a Trusted PIX Port

to provide Web Access to

RAS/VPN Client to

VPN3000 Gateway to

PIX Trusted Port

The VPN Gateway is positioned on a subnet behind the PIX.

URL references are appreciated. Thanks.

Tim Weil - CCNP

[wong34539]

From what I am able to gather from your question, I understand that you are looking for the configuration on the PIX to allow IPSec traffic through it when the VPN gateway is placed behind the PIX and the client is trying to access it from outside.

Here's a doc that explains the same.

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a008009486e.shtml