Vpn from pix and router

[pelitti]

Hi,

my situation is:

Clients----Pix-----Router---adsl

Pix e Router have private address.

Router perform nat on outside.

I have a vpn from PIX to another pix.

It's all ok.

I need to perform another vpn from router to another pix(for router logging).

I have configurated vpn on router, but when i configure ipsec on external interface of router, the pix vpn doesn't work, because the external interface on router 'cut' the ipsec .....and try to decript.

any idea?

It si possible to do that ??

Thank you,

Mauro

[spremkumar]

Hi Mauri

are you encrypting the PIX firewall ip also which mite have been included in the ACL which you are using?

Also how you are having the tunnel established between pix to pix at present ? are you doing the same via static NAT ?

regds

[pelitti]

Hi,

no the only ip i included in acl encrypt of router is the ip of interface 'inside' of the router.

The pix to pix tunnel is start from pix, and it has a private ip. Router perform pat on outisde. Outside ip is dhcp released from isp.

Thank you,

Mauro