PIX 7.0 VPN with remote sites and overlapping networks

[netstreams]

Hi,

I have a central PIX 515E with version 7.0. I am trying to connect two remote sites through VPN with the same IP range (192.168.1.0/24) on both remote sites, to the central site which has a different IP range.

Is it possible to do all the translations on the central pix, because I don't manage the remote equipements and don't want to ask them to translate?

If yes, how can I achieve this?

SITE1(192.168.1.0/24) -----VPN----- CENTRAL SITE -----VPN----- SITE2(192.168.1.0/24)

Thanks in advance

Matthieu

[jackko]

it will work providing there are two internet links at the central site, and the pix has an interface connecting to these internet links.

another option is to configure one site with lan-lan vpn; whereas the other site with ezvpn. i guess it should work as with ezvpn, the central site will assign an ip onto the remote site vpn device and ignore the remote lan range.