Host to Host VPN connection

[danbui]

Hello All,

I'm trying to configure a vpn connection to allow one of our vendors to connect to a server in the DMZ segment, Server A. The vendor's requirement is to have a site-to-site vpn setup. Their server (Server B) will connect to our Server(Server A) via this VPN via public address. Here is the situation:

PIX_A: 65.147.166.1

Server A (Our server)

Internal IP: 10.10.10.100

Public IP: 65.147.166.5

PIX_B: 68.199.17.1

Sever B (Vender's server)

Public IP: 68.199.17.15

How do I configure the Site-to site vpn to allow Server B to communicate with Server A via its public address?

Please help! Thanks a million!

Dan

[grant.maynard]

It is possible. Normally in a VPN you configure "no-NAT" using nat 0 command. So here you would not do that, you would create a static(dmz,outside) as normal. Then build the VPN between that public IP and their subnet. In other words your VPN ACL would be something like:

acl.. permit ip host 65.147.166.5 host 68.199.17.15