VPN Question

[doug.dockter]

I have a group of individuals who I would like to give VPN access into our network (via PIX 515). The only thing I would like them to be able to do is access an AS400 which is actually outside our network (connected via dedicated T1). I don't want them to be able to access any other internal network resources. I currently have a VPN group set up (for IT) which has access to all network resources as well as the AS400. Can this be done?

[Collin Clark]

Yes it can be done. Here's a link to a configuration example.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00808c9a87.shtml

Hope that helps.

[doug.dockter]

I'm having some issues getting this going. I'd like to post my PIX config and log. I've scrubbed all the public IP addresses. Is it necessary to scrub my internal addresses?

[Collin Clark]

You can leave the internal IP's.

[doug.dockter]

Here you go. The host I want my VPN group (lblwaco) to be able to access is z.z.z.1