PIX 506E VPN - need you guidence

[s-acharya]

Is it possible to use PIX 506E to allow a persistence tunnel and route certain IP to tunnel and rest of the IP to Outside interface or to a router? I have attached a gif file to elaborate my need. Any help on this is greatly appreciated.

Thanks

[johnroche_2]

have you tred to configure two different vlans on the inside of the pix ???

[s-acharya]

The switch i am using is not managed switch. I can not create VLan. My main concern is wheather PIX 506E will let me create LAN-TO-LAN VPN Tunnel and LAN-TO-INTERNET route. LAN-TO-LAN VPN Tunnel it to Copr HQ and they do not want to create Tranparent Tunnel. Am i out of luck?

[johnroche_2]

if the phones are a different IP subnet you can control what IP ranges are encrypted by the tunnel

[jackko]

is the ezvpn running with network-extension-mode? split tunneling needs to be configured from the hq, e.g. access-list 101 permit ip 192.168.8.0 255.255.255.0

this doco may give you more detail

http://www.cisco.com/en/US/customer/products/hw/vpndevc/ps2030/products_configuration_example09186a008019e6d7.shtml