Can a VPN client go out same interface on Pix 515

[dpatkins]

A user VPN's into a Pix and gets a x.x.x.x address via an ippool on the Pix. Once done, they will need to access information that is on the public network. Can this be done since they will go out the same interface?

I can open ports and route subnets on our core routers, but that does not seem to work.

Thanks

Dwane

[Alan Huseyin Kayahan · Accepted solution]

Hi Dwane

You can achieve this by entering the following command

same-security-traffic permit intra-interface

Regards

[jaysoo]

I believe it's called hairpinning and you can only do that on 7.x and above using the same-security feature.

[ajagadee]

Yes, this is possible but depends upon what code you are running on the pix. Please refer the below URL that explains the configurations that you are looking for.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00805734ae.shtml

Regards,

Arul

** Please rate helpful posts **