VPN-to-VPN communication

[iholdings]

Hello,

I have a site-to-site VPN that terminates on the outside corporate PIX interface. When needed, the remote site can pass into the corpoarte network and go out another router to an external host. We have reworked our connection to that host so that hosts on our inside network access it through the DMZ port on the PIX.

Is it possible to redirect the remote site VPN traffic out the DMZ port for connection to the external host?

[awaheed]

Hi Holdings,

Two things to keep in mind when designing VPN's on the PIX:

1. You can never bounce a packet of a PIX interface, hence PIX doesn't do any redirects for packets out the same interface.

2. As long as we have a Route for the packets terminating on the Outside, to go to the DMZ interface, we should be fine.

Regards,

Aamir Waheed,

Cisco Systems, Inc.

CCIE#8933

-=-=-