PIX Telnet to outside interface

[rcrumm_2]

Hello,

I have 2 pix FW's running VPN between them. Now I want to telnet to the outside interface of the remote PIX.

On each PIX, Is it as simple as adding a line in the access-list , which is currently used for the NAT0 and in the VPN crypto map, to allow IP from remote PIX (source) to corp LAN (dest) and a similar statement on the local PIX?

thanks,

rrc

[afakhan]

Hi,

Make sure that you use "outside" interface of the remote PIX in the crypto ACL, and a symmetrical ACL on the remote PIX.

Otherwise, you can use SSH from the outside for telnet (encrypted though).

Thanks,

Afaq