Terminating VPN on Alternate ip

[corey.borton]

I have a vpn set between two PIX 501's using ipsec PIX A has an internal network of 192.168.0.0/24 PIX B has internal network of 10.0.0.0/24.

PIX A also acts as firewall for the internet.

The vpn is active as I am able to pass traffic between the two networks, however there are multiple networks on the inside of PIX A that I wish to be able to connect to from the network on PIX B. I am unable to connect to these networks at this time. any ideas?

[engel]

It should be easy as you only need to define those networks with several crypto access-list on PIXA, eg:

acl 101 permit ip 192.168.0.0/24 10.0.0.0/24

acl 101 permit ip 192.168.1.0/24 10.0.0.0/24

acl 101 permit ip 192.168.2.0/24 10.0.0.0/24

Make sure you don`t have any routing problem with those networks insid the PIX A.

HTH