VPN between PCs behind a remote WIN2000 server and a PIX

[0s-pudipeddi]

We have a WIN2000 server at a remote site and have 3 PCs on the same LAN as the WIN2000 server. We can config the WIN2000 server to dialup

internet and establish a VPN connection to our main office PIX (using client 3.5.1)no problem.. Is it possible at the same time the PCs connected behind the WIN2000 server on the same LAN be able to use the same tunnel to talk to our internal network using the win2000 server as a gateway? Are there any such sample configs available.

[bstremp]

You can’t use Internet Connection Sharing/routing on the W2K server because IPSEC won’t work through this type of translation. You’ll have to use NAT transparency mode with a VPN concentrator for this (since the PIX doesn’t support transparency mode.) Otherwise, each PC will need to dial to the remote server and you’ll have to run the client software on each. You might also consider a broadband connection with several IP addresses from your Service Provider. Then you can all run the VPN client software to the PIX at the same time. It would be worth talking to your Cisco sales office for other options.