About daniel

daniel · 01-10-2005

I'm trying to do a site-to-site VPN between a PIX 501 and a VPN Concentrator. PIX internal network is 192.168.1.0/24. Concentrator side is 10.0.0.0/8. Traffic coming from the PIX must be NATed to a different subnet(10.1.1.0/24) before it reaches th...

daniel · 01-13-2005

I found the solution. I upgraded the PIX software from 6.3(3) to 6.3(4) and now my originally posted config works great. Must have been a bug.Thanks for your help.Daniel

daniel · 01-13-2005

The need for NAT has been dictated to us by the VPN Concentrator side which we have no control over. This is probably done to avoid subnet overlap on a segment of their network we don't see.Traffic across the VPN will not be one-way. Their side of ...

daniel · 01-12-2005

Thanks for your reply. Unfortunately your changes had the same effect. As soon as there is a translation in the xlate table from 192.168.1.X to 10.1.1.X the PIX attempts to nat all traffic even Internet through this translation. Clearing the xlate...

Member Since	‎01-10-2005 05:37 AM
Date Last Visited	‎08-18-2017 03:53 AM
Posts	4

User Statistics

User Activity

Policy NAT and VPN

Re: Policy NAT and VPN

Re: Policy NAT and VPN

Re: Policy NAT and VPN