Cisco 800 ADSL Router + PIX 501

[rob]

Hi Guys,

Can anyone help me as I'm stratching me head and pulling hair out on this one?

I need to set up a PIX 501 VPN site-site VPN behind a 800 ADSL router and am wondering if this is possible? The ADSL line has 5 global IP addresses that we can use.

I have had the 501 site-site VPN working fine when not on ADSL, but now I'm stumped owing to the 800 ADSL router obviously creating its own inside and outside interface.

I ideally want to use the PIX for the VPN as I know the 800 can do VPN, but would use the 800 for VPN as a last port of call.

cheers very much in advance!

Rob

[tvanginneken]

Hi Rob,

it should be possible to does this. Just make sure that all the vpn traffic (udp/500 for ike, udp/4500 for nat transparency, esp) that arrives at the outside ip address of the C800 is forwarded to the outside ip address of the pix.

Your C800 in front of the pix is probably doing nat/pat. So make sure that nat-tranparency is enable for the vpn tunnel.

Kind Regards,

Tom