Firewall Wizards mailing list archives

PIX to PIX VPN from within a private network.


From: Greg <greg () fqdn com>
Date: Mon, 13 Mar 2006 18:02:55 -0500

Hello,

   I have a PIX at home and would like to connect via site to site VPN
to the PIX at work which I also maintain.

The problem I think I may run into is I have a private network between the internet router and my internal home PIX. The segment between the internet router and the internal PIX is 10.0.0.0/24, the outside interface of the PIX is numbered 10.0.0.1.


I'll try my hand at drawing this out:


WORK:   INTERNAL-NET(10.31.0.0/16) >> PIX(NAT) >> INTERNET

HOME: INTERNAL-NET(216.138.246.208/27) >>
(inside int 216.138.246.209)PIX(outside int 10.0.0.2)  >>
(10.0.0.1)Cisco827dsl(216.138.247.130) >> INTERNET

or in simple:

INTERNAL-HOME-NETW(internet routable) >> ROUTER >> PIX >> INTERNET


Can I set up a site to site vpn, apply the config to the external interface of the pix(10.0.0.1) and be able to connect work's PIX without issues (due to the fact 10.0.0.1 would not be routeable on the internet)?

I hope I'm being clear in what I'm after. I envision the PIX at work trying to connect back to 10.0.0.1.



thanks in advance,

greg



_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards


Current thread: