I have a customer that has a DSL connection using PPPoE and they want to set up a site to site VPN tunnel without having to get a static IP using PIX 501. Head end is T1 with a static IP on a PIX 506E. Is this doable?
a remote PIX that connects to a central PIX does not use network address translation (NAT). Instead, the remote PIX uses a static outside IP address. In an instance when a central PIX that runs 7.x and later connects to a remote PIX using NAT, it is the same as a small home office such as a PIX 501 or 506 connected to a cable or DSL modem using Dynamic Host Control Protocol (DHCP). PIX 7.x and later and Cisco Adaptive Security Device Manager (ASDM) do not run on a PIX 501 or 506.For more info refer
