EZVPN on PIX v8.0

[lquin1978]

If you have a headsite with multiple EZVPN clients (PIX 501 & 515) connected in  a star configuration can you have one remote site connect to another  remote site using the intra-interface command and modifying the  encryption domain on the EZVPN Server?

[luisram2 · Accepted solution]

You are correct.

If your EzVPN server is an ASA the only thing you need to do to accomplish this setup is add the traffic on the split tunnel and the command same-security-traffic permit intra-interface this should allow your EzVPN clients to communicate.

[lquin1978]

The server is a PIX515 running 8.0(2), will this work?

[luisram2]

Yes it should work just fine if the PIX is running 8.x