VPN3002 behind a firewall

[eloiseau]

Hi,

My customer have a firewall (matra) with 2 interfaces , and he wants to use a vpn 3002 to established a link to the main site.

I don't know if it's possible, but he wants that the 2 interfaces of the vpn 3002 will be behind the firewall with the same network , for exemple 192.168.1.10 ( for outside) 192.168.1.11 ( for inside ).

Or an other possibility, but i don't think that it's very secure, is to connect the outside interface before the firewall and inside interface behind.

Thanks

[jfrahim]

VPN3002 acts as a layer 3 device which routes packets between 2 subnets, so you can't really have both interfaces on the same subnet.