Pix-to-IOS tunnel, Nat on stick

[maloumar1234]

I have a router configured with Nat on Stick. I need to setup a vpn tunnel from the router to a pix.

Is this possible? Since I am using nat on stick, and there is no public address on the rouer.

If so, please point me to a sample config if possible.

Best regards

[spremkumar]

Hi

Dont u have even a single public ip configured on the router side using which u can create the ipsec tunnel ??

regds

[jackko]

providing the pix has a static public ip, and the router (has no public ip assigned on any interface) has internet access, ezvpn is feasible.

the pix will act as the ezvpn server; whereas the router will act as the ezvpn client. the only catch is that only host behind the router will be able to establish the vpn. nonetheless, once the vpn is completed, host from both sites will have access to each other.

have a look at the doc:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080241a0d.shtml