VPN Client with Concentrator/Pix

[rakeshsharma3000]

When we assign an IP Address to VPN Software Clients through VPN Concentrator, we can assign IP Address in the same range as the LAN interface of Concentrator. So when a host from Concentrator LAN network pings a remote VPN Client host, it would be sent as a broadcast since it is in the same network. So does that mean VPN Concentrator replies back to these broadcasts.

Can the same be implemented when connecting VPN clients to Pix as a terminating device.

[gfullage]

You can do this on a PIX also.

Actually though, when a client on the LAN pings a remote VPN client, because it thinks it's on the same network it will send an ARP query with the IP address of the client, requesting its MAC address. Because the concentraor (or the PIX) have issued this IP address it will respond to the ARP request with its own MAC address.