VPN3000 in NAT'd DMZ

[jleuenberger]

Here's the situation:

I would like to put my VPN3000 behind my 'DMZ' int. on my PIX. Big problem - traffic coming out of the 'DMZ' is NAT'd.

Is there any way that I could put this concentrator behind this interface without removing the NAT command from my PIX?

thanks-->

jason

[awaheed]

Hi Jason,

You can still NAT at the PIX, and just define a Static one to one NAT for the Concentrator address and this should work fine without a problem.

Regards,

Aamir

-=-=-