VPN3005 design integration in network - Need help

[jbhakta]

I have following network layout.

Outside internet router - PIX 515 firewall - Internal LAN

What is the best place to put VPN 3005 Concentrator.

Can i Place public and private interface of VPN3005 directly to 6509 (LAN) and NAT on PIX for public interface.

Need help with VPN Integration.

Thanks

Jayesh

[kdurrett]

Jayesh,

The recommend design for this is to put the public interface of the 3000 onto a dmz of the pix. If you dont have a dmz available, then putting it parallel with the pix would be your next best option. Running the 3000 as a one arm configuration is possible but not always practical. Hope this helps.

Kurtis Durrett