PIX through NAT device to PIX VPN

[steve-edwards]

I have a PIX501 that sits behind a PIX515 which is doing nat, then I have a PIX506 that I want to establish a vpn with. So PIX501 to PIX506 through nat.

Should this work without any problems or there specifics that I will have to implement.

Kind regards

[afakhan]

Hi,

you just need to make sure that you do not perform PAT for address space behind the PIX-501 on PIX-515.

As long its static NAT for pix-501-outside to some static IP address on pix-515, it should work.

Thanks,

Afaq

[jeffrey.zhou]

Now we can implement the IPSec through NAT function both in our IOS router ( "IPSec NAT Transparency" )

and PIX firewall ("VPN NAT Transparency"), the following is their URL:

IOS:

http://www.cisco.com/en/US/products/sw/iosswrel/ps1839/products_feature_guide09186a0080110bca.html

PIX OS:

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_data_sheet09186a0080148714