Hi
Is it possible to pass web traffic that hits a PIX 501 external interface through a S2S vpn to an internal web server?
This is an example configuration of what we want to achieve (IP addresses are made up):
Inbound web traffic
¦
¦
¦
212.133.133.133 Internal 10.0.1.x
PIX 501 (1)
¦S2S¦
¦S2S¦
¦S2S¦
213.133.133.133 Web Server on internal 10.0.0.1
PIX 501 (2)
We want the port 80 traffic hitting 212.122.122.122 to end up at 10.0.0.1 after passing through the tunnel.
As things stand we can ping from 10.0.2.x to 10.0.0.1 and visa versa. However when we try to add a translation rule on PIX 501 (1) to 10.0.0.1 it says that we can't translate between interfaces with the same security level (the VPN is established on the external interface which is where we are trying to do the translation).
From other stuff I have read in this forum I'm thinking that this isn't actually possible. Is this the case and if so is there any way we can do this - e.g. PIX 501 (1) being a higher-end PIX with more external interfaces.
Any advice would be gratefully appreciated!
Many thanks
Oliver
*EDIT* Sorry I made a much better diagram than this but the forum doesn't seem to understand tabs so I had to simplify it :)
