Re: PIX in multiple IPsec roles
Craig Van Tassle <[email protected]>
| Newsgroups | gmane.comp.security.firewalls.wizards |
|---|---|
| Message-ID | <[email protected]> |
On Wed, 19 Aug 2009 13:52:53 -0400 Dan Ritter <[email protected]> wrote: > > Is there a plausible way to convince a PIX to pass through an > IPsec tunnel to another device while simultaneously being an > endpoint for a different tunnel? > > I have sites A, B, and C. Each has a PIX515E with tunnels to the > other two sites. > > Now a vendor wants to establish a tunnel to a device inside > PIX A. I seem to be lacking the right keywords to search for > this. > > -dsr- > > It sounds like your vendor wants a static nat to the their device on the inside. Can you be a bit more verbose about the network setup. The PIX should see this traffic as normal traffic. I usually use a unique public IP for the NAT. -- "An armed society is a polite society. Manners are good when one may have to back up his acts with his life." Robert A. Heinlein "Fear is the father of servitude, and the captor of man. There cannot be slavery without fear, nor freedom with it."