VPN Clients connecting to site-site VPN

[vincent-n]

Hi all

I'm currently configured my firewall outside interface to be the VPN terminating point for both site-site VPN and Cisco VPN clients. What I found is that when I VPN Client in, I cannot access devices on the site-site VPN. I think that the PIX does not permit this sort of connections because it requires routing on the same interface. Can someone point me to some docs on CCO that can help me out in this situation. Thanks in advance for your help.

[jackko · Accepted solution]

the restriction has been resolved with pix v7, and the related command is "same-security-traffic permit intra-interface".

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008046f307.shtml