NATing the PIX IP and using it for VPN

[haithamnofal]

Hi,

I am wondering if when NATing the PIX outside interface IP on my border router if I will still be able to terminate both site-to-site and client VPN on the PIX by configurin the VPN clients and the remote site to establish the tunnel with the NATted PIX IP address?

Appreciate your feedback.

Thanks,

Haitham

[ggilbert]

Haitham,

Without any doubt, you should be able to terminate a VPN client and site to site connection to your PIX firewall on the outside interface when NAT is involved.

Use ESP on the transform-set.

Thanks

Gilbert

Rate this post, if it helps!!