Firewall Wizards mailing list archives
RE: PIX to PIX IPSec Tunnel Through a PIX
From: "Melson, Paul" <PMelson () sequoianet com>
Date: Wed, 3 Mar 2004 08:51:03 -0500
I see big problems with PAT, especially if it's a global PAT through the interface of the 515E. I would create a static NAT on the 515E for the 501. Then it's just an issue of allowing the right protocols. Minimally, you will need to allow ISAKMP (UDP/500) and ESP through the 515E in both directions. PaulM -----Original Message----- I am attempting to establish a IPSec tunnel where 3 pix's are involved. I have a PIX 506E on one end of the tunnel. On the other end is a PIX 515E running PAT, that needs to pass through the IPSec tunnel to an internal 501 where the tunnel will be terminated (through the Border firewall and terminated on the Departmental firewall). I am finding very little information on the proper way to set-up this network configuration. I have read that I may need to use NAT instead of PAT, and use the Nat-T function on the 515E. But other than that I am lost. Can you Firewall experts lead me in the right direction? Thanks in advance for your help, Al Cooper _______________________________________________ firewall-wizards mailing list firewall-wizards () honor icsalabs com http://honor.icsalabs.com/mailman/listinfo/firewall-wizards _______________________________________________ firewall-wizards mailing list firewall-wizards () honor icsalabs com http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
Current thread:
- PIX to PIX IPSec Tunnel Through a PIX Al Cooper (Mar 02)
- <Possible follow-ups>
- PIX to PIX IPSec Tunnel Through a PIX Al Cooper (Mar 04)
- RE: PIX to PIX IPSec Tunnel Through a PIX Melson, Paul (Mar 04)
- Re: PIX to PIX IPSec Tunnel Through a PIX Brian Ford (Mar 07)
- RE: PIX to PIX IPSec Tunnel Through a PIX Al Cooper (Mar 07)