IPSec VPN

[Adam Frederick]

Is it possible to have a site-to-site VPN w/ one endpoint (pix 506e) that only has 1 Public IP? (i.e. port forwarding?)

The VPN device will be behind the pix & the PIX outside interface has the sole public IP.

If this will indeed work? are there any gotchas I need to look for?

TIA,

Adam

[vmoopeung]

I think the configuration is possible. This is a sample configuration to connect a private network behind a Cisco PIX Firewall to a private network behind the Cisco VPN 3000 Concentrator (if your VPN device is VPN concentrator).

http://www.cisco.com/en/US/products/hw/vpndevc/ps2284/products_configuration_example09186a00800949d2.shtml