VPN to 3030 through private interface

[mgoegan]

I'd like for some internal machines to VPN from their desktops through the private to the public interface of a 3030 concentrator and then back in for access.... don't ask why.. .long story! :-)

This concentrator isn't sitting in a conventional stub DMZ... the private and public are 2 seperate networks in a tiered DMZ.

Feasible or not?

[vkapoor5]

I am not sure if this will solve your problem, but take a look into the VPN concentrator feature, that allows hair-pinning of traffic. That is, it can switch the traffic entering an interface out the same interface. This is done using the "tunnel default gateway" that uses the special filters within the Concentrator.

http://www.cisco.com/univercd/cc/td/doc/product/vpn/vpn3000/4_1/config/iprout.htm#999676