RE: Help in VPN setup

> -----Original Message-----
> From: David [mailto:dalmada@sisp.cv] 
> Sent: Tuesday, October 26, 2004 12:13 PM
> To: firewalls@securityfocus.com
> Subject: Help in VPN setup
>
>
>
>
> Hello everyone,
>
> I pretend to setup a gateway-to-gateway VPN throug internet 
> using two PIX. My question is, do I have to use more than one 
> public IP address for each site? if it is possible to use one 
> public address for each site, how do I route the private IP 
> through the internet? The scheme should like this one:
>
> Hostt<--->PIX<--->RouterA<--->Internet 
> Cloud<--->RouterB<--->PIXB<--->HostB
>  privIP   privIP       pubIP    |VPN|         pubIP       
> privIP   privIP
>
> Thanks in advance
>
> David
>
> SISP

You only need one public IP for each PIX.  The private traffic is tunneled
through the VPN -- it sent across the Internet in encrypted form, decrypted
at the remote end, and sent on its merry way.  You specify which traffic is
to be sent out to the Internet normally and which traffic is to be sent
across the tunnel through the use of crypto ACLs that you will define on
your PIX.

There is a good example here:

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_configuration
_guide_chapter09186a0080172795.html