cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
337
Views
0
Helpful
1
Replies

VPN through PIX with single outside address?

bmshaw
Level 1
Level 1

I have several hosts behind a PIX 506. I get a dynamic IP address from my provider and have been able to get things working just fine. The only problem I have is when I try to VPN out from one of my internal hosts. According to experience and what I have read, I normally have to have a 2nd IP address statically NAT'd through to my internal host for this to work. I do not have to do this with other firewall types. Any suggestions?

1 Reply 1

edadios
Cisco Employee
Cisco Employee

This really depends on the VPN server.

For the case of vpn3000, you can use the vpn client and make use of TCP transparency feature to vpn through the pix.

If the vpn server is a PIX or router, this Nat tranparency is not yet supported by the code.

If the VPN is PPTP, it would not work through the PIX using PAT, you need a static nat for every host.

Regards,

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: