We want to build a VPN connection to a partner company using a PIX running 6.3(1) as the endpoint on our side. They are running a Cyberguard on their side. This is to support a single host-to-host connection rather than network-to-network. We've got this tested and working properly.
The partner company is requesting that rather than provide them with the private address , that we give them a public address. I cannot find any example configurations and I don't know if this is possible.
Here is a sanitized outline of what we're trying to do:
outside ip address of PIX = 1.0.0.1
outside xlate for server = 1.0.0.9
private address for server = 192.168.0.2
partner peer address = 2.0.0.1
partner server address = 2.0.0.1
Basically we want to build a VPN tunnel from their Cybergard at 2.0.0.1 to our PIX 1.0.0.1. We want to include traffic from 2.0.0.1 to 1.0.0.9 in this tunnel. The PIX on our side needs to then be able to pass that connection through to 192.168.0.2 on the inside network.
I would like to know if this is possible. Testing time has been tough to find so far, and of course we're on a tight timeline, so any insights/suggestions would be very helpful.
Thanks very much,
Chad
