VPN Pass through question

[j-blackmore]

Hello,

We have some vpn clients behind our pix 525 firewall trying to connect to a remote host/vpn server. We are not running vpn on this pix but need to do vpn pass through.

I have isakmp nat-traversal 20 and sysopt connection permit-ipsec. Do I need to enable isakmp on the "inside" interface also?

This is on a 7.2 box.

Thank you!

[shijasm]

If you have a VPN server in your inside network, you may have to create a static entry with access-list to forwared the traffic.

[maraz]

Hello,

If I understand your setup correct you do not have to configure any of the things you mention above. Your clients who are on the inside should connect to a VPN-server on the outside. What is your problem? Can you provide more details.

Best Regards

Robert Maras