We have a remote office connected to ours via a fiber link. We want to use a VPN tunnel to encrypt all traffic and bring all traffic from the remote office into our switch so internet traffic can be monitored by a separate appliance. At the remote office is a PIX 525 with 2 interfaces. At the home office is a PIX 525 with multiple interfaces. We have been able to create the VPN tunnel and ping from the remote office to the connected interface (INT7) at the home office. However, we are unable to pass traffic through the home office PIX from INT7 to the other interface (INT6) and then directly into the Catalyst 6513 switch. How to we route the traffic from INT7 to INT6 (a static route won't "take")? The home office PIX sees both INT7 and INT6 as "outside". We need all traffic to pass through these two interfaces into the Catalyst which will then route outside traffic normally through the inside/outside interfaces of the home office PIX. Can this be done?
