topic Re: little issue with pix in Network Security

little issue with pix

zulqurnain — Mon, 11 Mar 2019 09:25:16 GMT

i ve a case on which i seems to be a little bit lost. maybe you experts can help me solving it. by the way i am attaching the diagram for more clarity of the situtation.

we have one company say 1st company connecting to us through the internet cloud using VPN tunnel and 've access to some of our servers, till this part everything seems alright and working.

The part where it became confusing is that now this 1st company will access to another company which is connected to our network through another line.

This 2nd company has it's own network of course and question is how do i configure on the pix that if packets coming in from 1st company for 2nd company should go to this router instead of else where.

hope it is clear. any question please do ask.

Re: little issue with pix

Fernando_Meza — Sat, 27 Jan 2007 10:31:26 GMT

Hi .. posting the diagram would help . and also the VPN configuration on your pix.

Re: little issue with pix

zulqurnain — Sat, 27 Jan 2007 11:30:26 GMT

Hello,

sorry i forgot to post the diagram in my first post. anyways here you go.

Re: little issue with pix

oabduo983 — Sat, 27 Jan 2007 17:05:06 GMT

Salam Zulqurnain,

What you need to do is make another VPN tunnel on 2nd company's router terminating on your HO PIX and enable communication between different VPN peers on the PIX. The command on the PIX is (same-security-traffic permit intra-interface). For more information, look at (hairpinning) concept!

Regards,

Re: little issue with pix

oabduo983 — Sat, 27 Jan 2007 17:06:02 GMT

Salam Zulqurnain,

Please vote if this helps!

Regards,

Re: little issue with pix

zulqurnain — Sun, 28 Jan 2007 05:20:32 GMT

actually my 2nd company router is connecting with HO through a dedicated leased line and the communication is between successfully,

now what i am understanding from you is that i need to setup VPN Tunnel on our HO router connecting to 2nd company router and on my pix which is towards the internet side have to enable this command. am i right, anyways, a little for clarification would be great.

Re: little issue with pix

oabduo983 — Sun, 28 Jan 2007 05:31:15 GMT

Yes, you got the idea correctly... the command which I've included allows communication between VPN spokes once the tunnel is established.

There is an example on Cisco site, If you are interested, visit the following URL:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00804675ac.shtml

Please vote for me if this is helpful!