Re: Help in VPN setup

David,

I would propose to get an official IP directly for each outside PIX interface (meaning: a small public network between outer router and PIX). The setup below will work, as IPSEC VPNs can be NATed, that means the outer router will do Network address translation for the VPN peers. On the PIXs you setup the remote peer with the official IP of the remote router, which will translate to the private IP of the remote PIX... 
But you might run into problems with the correct Router config (NAT setup, VPN support) and also with remote access of the PIX through the router. 
Best solution is always to have an official IP directly on the outside interface of the PIX to avoid NAT!

greetz, nhai
==========================================================
Hello everyone,

I pretend to setup a gateway-to-gateway VPN throug internet using two PIX.
My question is, do I have to use more than one public IP address for each
site? if it is possible to use one public address for each site, how do I route the private IP through the internet? The scheme should like this one:

Hostt<--->PIX<--->RouterA<--->Internet Cloud<--->RouterB<--->PIXB<--->HostB
 privIP   privIP       pubIP    |VPN|         pubIP       privIP   privIP

Thanks in advance

David

SISP


--