topic ISA behind PIX in Network Security https://community.cisco.com/t5/network-security/isa-behind-pix/m-p/668407#M1036821 <P>Out company's network is </P><P>INTERNET &gt;&gt;&lt;&lt; (public id)ROUTER(public ip) &gt;&gt;&lt;&lt;(public ip)PIX(public ip) &gt;&gt;&lt;&lt; (public ip) ISA2004 (private ip)</P><P>And i want to implement the VPN on ISA2004, what configuration should I do on PIX ?? Thanks. </P> Mon, 11 Mar 2019 08:56:50 GMT sheldon.wu 2019-03-11T08:56:50Z ISA behind PIX https://community.cisco.com/t5/network-security/isa-behind-pix/m-p/668407#M1036821 <P>Out company's network is </P><P>INTERNET &gt;&gt;&lt;&lt; (public id)ROUTER(public ip) &gt;&gt;&lt;&lt;(public ip)PIX(public ip) &gt;&gt;&lt;&lt; (public ip) ISA2004 (private ip)</P><P>And i want to implement the VPN on ISA2004, what configuration should I do on PIX ?? Thanks. </P> Mon, 11 Mar 2019 08:56:50 GMT https://community.cisco.com/t5/network-security/isa-behind-pix/m-p/668407#M1036821 sheldon.wu 2019-03-11T08:56:50Z Re: ISA behind PIX https://community.cisco.com/t5/network-security/isa-behind-pix/m-p/668408#M1036830 <HTML><HEAD></HEAD><BODY><P>You need to open ah(ip/51), esp(ip/50) and isakmp (udp/500) to allow pass-through VPN traffic. I believed no address translation is required since both of your PIX inside/outside carry public IP. </P><P></P><P>Pls look at the example at:</P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008045a2d2.shtml" target="_blank">http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008045a2d2.shtml</A></P><P></P><P>Pls rate all useful post(s)</P><P>HTH</P><P>AK</P><P></P><P></P></BODY></HTML> Thu, 16 Nov 2006 06:09:52 GMT https://community.cisco.com/t5/network-security/isa-behind-pix/m-p/668408#M1036830 a.kiprawih 2006-11-16T06:09:52Z